last executing test programs:

4.819964798s ago: executing program 4 (id=1165):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/wireless\x00')
read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020)
preadv(r0, &(0x7f0000002200)=[{&(0x7f0000002240)=""/184, 0xb8}], 0x1, 0xfffffffe, 0x3)
read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020)

4.70243316s ago: executing program 4 (id=1166):
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20c03, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x7, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES64=r0])

4.608203071s ago: executing program 2 (id=1169):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
select(0x40, &(0x7f0000000840)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x6)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000580)=0x1, 0x4)

3.595211224s ago: executing program 2 (id=1171):
r0 = getpid()
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)

2.860250654s ago: executing program 2 (id=1174):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r1})
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0)

2.748462459s ago: executing program 1 (id=1176):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003880)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x7c01}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x20048850)

2.526783999s ago: executing program 2 (id=1178):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f00000001c0), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000140)=0x7, 0x4)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x9, 0x4)

2.415099787s ago: executing program 1 (id=1181):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00')
fchdir(r0)
exit(0x10003)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40042, 0x1)

2.300153666s ago: executing program 2 (id=1183):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x18040, &(0x7f0000000080)={[{@usrquota}, {@grpid}, {@sysvgroups}, {@prjquota}, {@grpquota}, {@bsdgroups}, {@nouuid}]}, 0x4, 0x9736, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f000000a280)='.\x00', 0x0, 0x8)
setresuid(0xee00, 0xee00, 0x0)
fchown(r0, 0x0, 0x0)

1.964871986s ago: executing program 0 (id=1186):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x5, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)

1.863354565s ago: executing program 3 (id=1187):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

1.757038359s ago: executing program 0 (id=1188):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_io_uring_setup(0x3ee8, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x40, 0x0, r0, 0x1c, &(0x7f0000000380)={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0xadb1}}})
io_uring_enter(r1, 0x7c65, 0xa334, 0x5, 0x0, 0x0)

1.655017838s ago: executing program 3 (id=1189):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)

1.489822447s ago: executing program 0 (id=1190):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000026c0), 0x101901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000002700)={0x79, 0x0, 0xd8f})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000002b00)={0x1, 0x0, [{0x3, 0x3, 0x0, 0x0, @sint={0x6, 0x1ac}}]})

1.402589862s ago: executing program 4 (id=1191):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000680)=ANY=[], 0x2, 0x63e, &(0x7f00000006c0)="$eJzs3c1vHGcdB/DvrB3HTqTUpUkaUCWsRioIi8QvcsFcCAghI1WoKgfOVuIoVjZpsV3kVoiaN3Hl0D+gHHzjhMQFCclSOcOtVx8rIXHpyZwWzeysvYmdZbdZZ53y+UQz8zzzzDzze347L7trRRvg/9bKbMb3UmRl9o3tsr6/u9jc31180CknOZ+kkYy3FykeJsXHya20p3y5XFl3VzzpOB+uL7/1yWf7n7Zr4/VUbd/otV9/duopM0nG6uWw+rv91P0VhyMsE3a9kzgYtXNJWo/42dWjlt4uPPV1C5wFRfu5eahVX9nT1WWeyfp9QPup2H5mP9d2Rh0AAAAADNvk8VUvHOQg27k0inAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgeVX//n/1q/+Th6tSzKTo/P7/RKc9ycURhtrbRH+b7TVOOxAAAAAAAAAAOH1fPchBtnOpU28VaSR5tapcruYX8242s5aN3Mh2VrOVrWxkPsl0V0cT26tbWxvzfey5cOKeC30GPPX0YwYAAAAAAACAL6BfZ+Xo7/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAWFMlYe1FNlzvl6TTGk0wmmSi320n+2Sk/z/ZGHQAAAAA8Ay8c5CDbudSpt4rqM//V6nP/ZN7Nw2xlPVtpZi13qu8C2p/6G/u7i8393cUH5XS83+/9e6Awqh7T/u7h5CNfq7aYyt2sV2tu5HbeTjN30qj2LF3rxHNyXL8qYyq+W+szsjv1shz5H+rl6RvrY5vpKiPnDjMyV8dWZuPF3pl49NXZGfRI82kcfvNz+RRyfqFeFsnFHz2znPdjus5v6kwsdJ19V3tnIvnaX/7003vNh/fv3d2cPTtDGsD5VqvVKT9+Tix2ZeLlL3wmus1VmbhyWF/JD/OTzGYmb2Yj6/l5VrOVtczkB1VptT6fy/l070zdeqT2ZjWfenIkE/Xr0r57DBbTq9W+l7KeH+ft3MlaXq/+LWQ+38pSlrLc9Qpf6eOqbwx21V//el0oB/j73gN9xsq8vljn9YPkkXvudNXWveYoSyky7Hvj+FfqQnmM3xzejc6CxzMx35WJl3qfL3+sbiubzYf3N+6tvtPn8V6rl+V19Lsz9ZQoz5cvlS9WVevkZLq6V5RtLx1ra+drov6LS7utcaztymHb/7pSJ+r3cMd7WqjaXj6xbbFqu9bVdtL7LQDOvAvfuDAx9a+pf0x9NPXbqXtTb0x+//y3z78ykXN/P/ed8bmx1xqvFH/OR/nl0ed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg89t87/37q83m2sZjhVar9cETmj5vYSyD7PW3vw7z6J3fIxricIZbmBxk49bZiHmQwn9ardZQOtzpcdIOrdCqnYnUjagw4hsTcOpubj145+bme+9/c73ziFxaWp5bXnp98ebd9ebaXHs+4iCBU3H00B91JAAAAAAAAAAAAEC/nsV/Jxj1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDn28psxvdSZH7uxlxZ399dbJZTp3y05XiSRpLiF0nxcXIr7SnTXd0Vx4+wV80/XF9+65PP9j896mu8s33j5P0GsVNPmUkyVi+H1d/tp+6vOBxhmbDrncTBqP03AAD//+mbD5Q=")
unlinkat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0x0)
syz_mount_image$msdos(&(0x7f0000000d40), &(0x7f0000000d80)='./sys\x00', 0x404, &(0x7f0000000dc0)=ANY=[], 0xb, 0x0, &(0x7f0000000e00))
symlinkat(&(0x7f0000000e40)='.\x00', 0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00')

1.378268993s ago: executing program 3 (id=1192):
r0 = epoll_create(0x80)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

1.303337666s ago: executing program 1 (id=1193):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)

1.126526009s ago: executing program 0 (id=1194):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/115, 0x73}], 0x1}, 0x2}], 0x1, 0x20, 0x0)

937.184845ms ago: executing program 3 (id=1195):
syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000140)=ANY=[], 0x1, 0x183, &(0x7f0000000180)="$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")
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x402)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0, 0x0, 0x402)

907.639017ms ago: executing program 1 (id=1196):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='8', 0x1}], 0x1)

893.564183ms ago: executing program 0 (id=1197):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='dmask=00000000000000000021143,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=maccroatian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iochaRset=cp874,utf8,discard,errors2continue,iocharset=cp864,time_offset=0x0000000000000007,\x00'], 0x2, 0x1533, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001900)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
unshare(0x22020600)
recvfrom$packet(r0, 0x0, 0x0, 0x2100, 0x0, 0x0)

834.276025ms ago: executing program 4 (id=1198):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0xa}, 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v1={0x2, @aes256, 0x1, @auto='\t \x00'})

477.037698ms ago: executing program 0 (id=1199):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000580)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x31, 0x9, 0x70bd25, 0x4000, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080040)

476.871614ms ago: executing program 3 (id=1200):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
recvmsg$unix(r0, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x3)

466.620003ms ago: executing program 1 (id=1201):
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]})

445.688729ms ago: executing program 4 (id=1202):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000020000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r2}, 0xc)

390.545211ms ago: executing program 2 (id=1203):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x3818744, &(0x7f0000000580)={[{@orlov}, {@nobh}, {@prjquota}, {@bsdgroups}, {@nodiscard}, {@sysvgroups}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@discard}, {@bh}, {@nodelalloc}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0x4cd, &(0x7f0000000b40)="$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")
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write(r0, &(0x7f0000000600)='dir .', 0x5)
write(r0, &(0x7f0000000700)='bind', 0x4)

330.070263ms ago: executing program 3 (id=1204):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000100)={[{@nodatacow}, {@datasum}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@noenospc_debug}, {@ssd_spread}, {@discard_sync}, {@treelog}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@skip_balance}, {@fatal_errors_bug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f000000a700)='./file0/file1\x00', 0x0)
rename(&(0x7f000000a740)='./file0/file0\x00', &(0x7f000000a780)='./file1\x00')
rmdir(0x0)

189.99397ms ago: executing program 1 (id=1205):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000006800)=ANY=[], 0x1, 0x1d8, &(0x7f0000000580)="$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")
r0 = creat(&(0x7f0000000540)='./file2\x00', 0x52)
io_setup(0x202, &(0x7f0000000780)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000000800)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000840)='$', 0x1, 0x1f00}])

0s ago: executing program 4 (id=1206):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r1}, 0x10)
sendmmsg$sock(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="010000000300000064000000000000000000000000000000000000000000000000000000000000000000000000000000027ffffffe000000", 0x38}, {&(0x7f00000009c0)="3c288d8b3b7d97f8c475ed07c88ca0836243c54dddf9e0f57bfa33a44b9d48f76902f42f22f03e6dd8ce26c87191adc51558ec6f6c4d9098317c377d4fa22032bc971b1f810292ea3dcf6ac06c8903c5", 0x50}], 0x2}}], 0x2, 0x20004090)

kernel console output (not intermixed with test programs):

hes+0xf8c/0x1160
[  120.772967][ T6497]  ? __pfx_f2fs_writeback_node_caches+0x10/0x10
[  120.773029][ T6497]  ? f2fs_write_checkpoint+0xe25/0x24d0
[  120.773066][ T6497]  ? up_write+0x19d/0x4a0
[  120.773096][ T6497]  f2fs_write_checkpoint+0xe5b/0x24d0
[  120.773171][ T6497]  f2fs_issue_checkpoint+0x424/0x6f0
[  120.773216][ T6497]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  120.773248][ T6497]  ? __pfx_from_kgid+0x10/0x10
[  120.773287][ T6497]  ? rcu_is_watching+0x16/0xb0
[  120.773322][ T6497]  ? __up_read+0x29c/0x930
[  120.773398][ T6497]  ? f2fs_sync_fs+0x1f2/0x3c0
[  120.773437][ T6497]  f2fs_unlink+0x225/0x600
[  120.773476][ T6497]  vfs_rmdir+0x3e6/0x6f0
[  120.773498][ T6497]  ? bpf_lsm_path_rmdir+0x9/0x20
[  120.773529][ T6497]  filename_rmdir+0x276/0x500
[  120.773562][ T6497]  ? __pfx_filename_rmdir+0x10/0x10
[  120.773595][ T6497]  ? do_getname+0x151/0x250
[  120.773625][ T6497]  __se_sys_rmdir+0x2e/0x140
[  120.773653][ T6497]  do_syscall_64+0x16a/0x530
[  120.773686][ T6497]  ? trace_irq_disable+0x3b/0x140
[  120.773718][ T6497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.773742][ T6497]  ? clear_bhb_loop+0x70/0xc0
[  120.773776][ T6497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.773799][ T6497] RIP: 0033:0x00007fb59b19fb19
[  120.773822][ T6497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.773840][ T6497] RSP: 002b:00007fb59c06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  120.773864][ T6497] RAX: ffffffffffffffda RBX: 00007fb59b425fa0 RCX: 00007fb59b19fb19
[  120.773880][ T6497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  120.773895][ T6497] RBP: 00007fb59b237b70 R08: 0000000000000000 R09: 0000000000000000
[  120.773909][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.773922][ T6497] R13: 00007fb59b426038 R14: 00007fb59b425fa0 R15: 00007ffe18db20c8
[  120.773962][ T6497]  </TASK>
[  120.790949][ T6497] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  120.799429][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  120.972270][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  121.091487][ T6514] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  121.119595][   T55] Bluetooth: hci2: command 0x0c1a tx timeout
[  121.144444][ T6514] Remounting filesystem read-only
[  121.243528][ T6507] loop4: detected capacity change from 0 to 32768
[  121.248718][ T6507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.239 (6507)
[  121.278049][ T6518] ntfs3(loop3): Primary boot: invalid bytes per sector 0.
[  121.278185][ T6518] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  121.295819][ T6507] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.295852][ T6507] BTRFS info (device loop4): using sha256 checksum algorithm
[  121.363018][ T6516] fido_id[6516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  121.459433][ T6507] BTRFS info (device loop4): enabling ssd optimizations
[  121.459463][ T6507] BTRFS info (device loop4): turning on async discard
[  121.459480][ T6507] BTRFS info (device loop4): enabling free space tree
[  121.775133][ T5634] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.510670][   T33] audit: type=1400 audit(1793888851.524:8): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6555 comm="syz.1.250"
[  122.648275][ T6560] overlayfs: upper fs does not support tmpfile.
[  122.708707][ T6541] set_capacity_and_notify: 1 callbacks suppressed
[  122.708729][ T6541] loop3: detected capacity change from 0 to 32768
[  122.727487][ T6541] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.245 (6541)
[  122.729698][   T55] Bluetooth: hci3: command 0x0c1a tx timeout
[  122.822755][ T6541] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.822793][ T6541] BTRFS info (device loop3): using crc32c checksum algorithm
[  122.879661][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  123.039835][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  123.070942][ T6541] BTRFS info (device loop3): enabling ssd optimizations
[  123.070975][ T6541] BTRFS info (device loop3): turning on flush-on-commit
[  123.071002][ T6541] BTRFS info (device loop3): enabling free space tree
[  123.071020][ T6541] BTRFS info (device loop3): enabling auto defrag
[  123.071039][ T6541] BTRFS info (device loop3): use lzo compression, level 1
[  123.071060][ T6541] BTRFS info (device loop3): max_inline set to 4096
[  123.210782][   T55] Bluetooth: hci2: command 0x0c1a tx timeout
[  123.297577][ T6583] loop0: detected capacity change from 0 to 4096
[  123.319778][ T5636] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.614999][ T6586] loop2: detected capacity change from 0 to 512
[  123.665830][ T6586] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.258: iget: bad i_size value: 38620345925642
[  123.665869][ T6586] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  123.669311][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  123.669335][    C0] EXT4-fs (loop2): initial error at time 1793888852: ext4_orphan_get:1404: inode 15
[  123.669366][    C0] EXT4-fs (loop2): last error at time 1793888852: ext4_orphan_get:1404: inode 15
[  123.671033][ T6586] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.258: couldn't read orphan inode 15 (err -117)
[  123.671087][ T6586] loop2: lost filesystem error report for type 5 error -117
[  123.781599][ T6586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.144024][ T6577] loop1: detected capacity change from 0 to 32768
[  124.226697][ T6577] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  124.340533][ T6577] XFS (loop1): Ending clean mount
[  124.506854][ T5635] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  124.707368][   T89] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm kworker/u8:5: bg 0: block 5: invalid block bitmap
[  124.734659][   T89] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  124.734694][   T89] EXT4-fs (loop2): This should not happen!! Data will be lost
[  124.734694][   T89] 
[  124.734710][   T89] EXT4-fs (loop2): Total free blocks count 0
[  124.734724][   T89] EXT4-fs (loop2): Free/Dirty block details
[  124.734744][   T89] EXT4-fs (loop2): free_blocks=0
[  124.734763][   T89] EXT4-fs (loop2): dirty_blocks=3136
[  124.734777][   T89] EXT4-fs (loop2): Block reservation details
[  124.734789][   T89] EXT4-fs (loop2): i_reserved_data_blocks=3136
[  124.953177][   T89] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1080 with error 28
[  125.038620][ T5637] EXT4-fs warning (device loop2): ext4_evict_inode:261: inode #18: comm syz-executor: data will be lost
[  125.119695][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  126.056755][ T6643] loop2: detected capacity change from 0 to 1024
[  126.205839][ T6637] loop0: detected capacity change from 0 to 32768
[  126.281348][ T6638] loop3: detected capacity change from 0 to 32768
[  126.319708][ T6638] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  126.417943][ T6638] XFS (loop3): Ending clean mount
[  126.462136][ T6638] XFS (loop3): Quotacheck needed: Please wait.
[  126.594622][ T6638] XFS (loop3): Quotacheck: Done.
[  126.686841][ T5636] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  126.743167][ T6661] loop0: detected capacity change from 0 to 8192
[  126.784473][ T6661] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  127.174740][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'.
[  127.322492][ T6672] loop2: detected capacity change from 0 to 512
[  127.363549][ T6672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.363667][ T6672] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.494288][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.761831][   T33] audit: type=1326 audit(1793888856.784:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.4.291" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd920b9fb19 code=0x0
[  128.254050][ T6697] Bluetooth: MGMT ver 1.23
[  129.466477][ T6722] loop3: detected capacity change from 0 to 512
[  129.506291][ T6722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.719816][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.899528][ T5821] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  129.908905][ T6735] loop3: detected capacity change from 0 to 64
[  130.046334][ T6735] MINIX-fs: mounting file system with errors, running fsck is recommended
[  130.070677][ T6735] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  130.102325][ T5821] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00
[  130.116510][ T5821] usb 1-1: unable to read config index 0 descriptor/start: -71
[  130.116552][ T5821] usb 1-1: can't read configurations, error -71
[  130.214805][ T6735] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  131.378136][ T6743] loop2: detected capacity change from 0 to 40427
[  131.396557][ T6743] F2FS-fs (loop2): build fault injection rate: 14
[  131.396583][ T6743] F2FS-fs (loop2): build fault injection type: 0x30e4
[  131.405911][ T6743] F2FS-fs (loop2): invalid crc value
[  131.550173][ T6743] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  131.580048][ T6743] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  131.657670][ T6743] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x10e/0xf80
[  132.008767][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.325'.
[  132.027220][ T6771] loop3: detected capacity change from 0 to 128
[  132.066662][ T6771] EXT4-fs (loop3): Test dummy encryption mode enabled
[  132.081064][ T6771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  132.081176][ T6771] System zones: 1-3, 19-19, 35-36
[  132.110120][ T6771] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  132.126598][ T6771] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.214861][ T6772] Zero length message leads to an empty skb
[  132.395119][ T6778] loop4: detected capacity change from 0 to 512
[  132.431400][ T6778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.441932][ T6771] fscrypt: AES-256-XTS using blk-crypto-fallback
[  132.470180][   T33] audit: type=1800 audit(1793888861.484:10): pid=6771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.326" name="file3" dev="loop3" ino=12 res=0 errno=-22
[  132.505835][ T6778] EXT4-fs error (device loop4): ext4_xattr_set_entry:1676: inode #2: comm syz.4.327: corrupted xattr entries
[  132.507502][ T6778] EXT4-fs (loop4): Remounting filesystem read-only
[  132.507975][ T6778] EXT4-fs warning (device loop4): ext4_xattr_ibody_set:2286: inode #18: comm syz.4.327: dec ref error=-30
[  132.617383][ T5636] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.712459][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.042087][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  133.042150][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  133.393426][ T6785] loop3: detected capacity change from 0 to 32768
[  133.398392][ T6785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.329 (6785)
[  133.476178][ T6785] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.476214][ T6785] BTRFS info (device loop3): using crc32c checksum algorithm
[  133.618667][ T6785] BTRFS info (device loop3): enabling ssd optimizations
[  133.618698][ T6785] BTRFS info (device loop3): turning on flush-on-commit
[  133.618716][ T6785] BTRFS info (device loop3): enabling free space tree
[  133.618733][ T6785] BTRFS info (device loop3): enabling auto defrag
[  133.618752][ T6785] BTRFS info (device loop3): use lzo compression, level 1
[  133.618773][ T6785] BTRFS info (device loop3): max_inline set to 4096
[  133.724376][ T6785] BTRFS critical (device loop3 state EH): emergency shutdown
[  133.880151][ T5636] BTRFS info (device loop3 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.926938][ T6799] loop4: detected capacity change from 0 to 40427
[  133.964672][ T6799] F2FS-fs (loop4): invalid crc value
[  134.397448][ T6799] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  134.429127][ T6799] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  134.429157][ T6799] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  134.429221][ T6799] F2FS-fs (loop4): Start checkpoint disabled!
[  134.520514][ T6799] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  134.521281][ T6799] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  134.599828][ T6829] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  134.724778][ T1153] kworker/u8:8: attempt to access beyond end of device
[  134.724778][ T1153] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  134.757286][ T1153] CPU: 0 UID: 0 PID: 1153 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  134.757319][ T1153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  134.757333][ T1153] Workqueue: writeback wb_workfn (flush-7:4)
[  134.757368][ T1153] Call Trace:
[  134.757377][ T1153]  <TASK>
[  134.757386][ T1153]  dump_stack_lvl+0xe8/0x150
[  134.757424][ T1153]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  134.757467][ T1153]  f2fs_write_end_bio+0xf7d/0x1310
[  134.757517][ T1153]  __submit_merged_bio+0x258/0x6a0
[  134.757548][ T1153]  f2fs_submit_page_write+0xa41/0x1910
[  134.757621][ T1153]  ? __pfx_f2fs_submit_page_write+0x10/0x10
[  134.757653][ T1153]  ? __f2fs_is_valid_blkaddr+0xcea/0x1520
[  134.757688][ T1153]  do_write_block+0x40c/0xaf0
[  134.757730][ T1153]  f2fs_outplace_write_data+0x11a/0x220
[  134.757770][ T1153]  f2fs_do_write_data_page+0x1208/0x15d0
[  134.757812][ T1153]  ? __pfx_f2fs_do_write_data_page+0x10/0x10
[  134.757881][ T1153]  f2fs_write_single_data_page+0xa62/0x1410
[  134.757928][ T1153]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  134.757998][ T1153]  ? folio_clear_dirty_for_io+0x1bf/0x820
[  134.758023][ T1153]  ? folio_clear_dirty_for_io+0x649/0x820
[  134.758053][ T1153]  __f2fs_write_data_pages+0x200a/0x72b0
[  134.758085][ T1153]  ? arch_stack_walk+0x11b/0x150
[  134.758119][ T1153]  ? ret_from_fork_asm+0x1a/0x30
[  134.758190][ T1153]  ? __kasan_check_byte+0x12/0x40
[  134.758226][ T1153]  ? rcu_is_watching+0x16/0xb0
[  134.758266][ T1153]  ? rcu_is_watching+0x16/0xb0
[  134.758302][ T1153]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  134.758382][ T1153]  ? lock_release+0x4b/0x3c0
[  134.758408][ T1153]  ? unwind_next_frame+0x1baf/0x2550
[  134.758439][ T1153]  ? deref_stack_reg+0x18e/0x220
[  134.758474][ T1153]  ? unwind_next_frame+0x1baf/0x2550
[  134.758527][ T1153]  ? f2fs_inode_chksum_verify+0x15e/0x850
[  134.758558][ T1153]  ? ret_from_fork_asm+0x1a/0x30
[  134.758593][ T1153]  ? __pfx_f2fs_inode_chksum_verify+0x10/0x10
[  134.758623][ T1153]  ? stack_trace_save+0xa9/0x100
[  134.758655][ T1153]  ? do_raw_spin_lock+0x12b/0x2f0
[  134.758682][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.758717][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.758754][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.758803][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.758854][ T1153]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  134.758884][ T1153]  do_writepages+0x338/0x560
[  134.758911][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.758942][ T1153]  ? reacquire_held_locks+0x117/0x1a0
[  134.758973][ T1153]  ? writeback_sb_inodes+0x450/0x1af0
[  134.759007][ T1153]  __writeback_single_inode+0x136/0x1220
[  134.759039][ T1153]  ? do_raw_spin_unlock+0xf5/0x200
[  134.759068][ T1153]  writeback_sb_inodes+0x9de/0x1af0
[  134.759094][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.759149][ T1153]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  134.759224][ T1153]  ? rcu_is_watching+0x16/0xb0
[  134.759256][ T1153]  ? queue_io+0x2d3/0x470
[  134.759285][ T1153]  wb_writeback+0x41c/0xad0
[  134.759315][ T1153]  ? queue_io+0x231/0x470
[  134.759348][ T1153]  ? __pfx_wb_writeback+0x10/0x10
[  134.759383][ T1153]  ? do_raw_spin_lock+0x12b/0x2f0
[  134.759423][ T1153]  wb_workfn+0x431/0x10f0
[  134.759466][ T1153]  ? __pfx_wb_workfn+0x10/0x10
[  134.759502][ T1153]  ? do_raw_spin_lock+0x12b/0x2f0
[  134.759534][ T1153]  ? lock_acquire+0x115/0x350
[  134.759570][ T1153]  ? rcu_is_watching+0x16/0xb0
[  134.759611][ T1153]  ? process_scheduled_works+0x97a/0x1630
[  134.759644][ T1153]  process_scheduled_works+0xc3d/0x1630
[  134.759711][ T1153]  ? __pfx_process_scheduled_works+0x10/0x10
[  134.759751][ T1153]  ? assign_work+0x3cf/0x5d0
[  134.759788][ T1153]  worker_thread+0xa47/0xfb0
[  134.759839][ T1153]  kthread+0x38b/0x480
[  134.759865][ T1153]  ? __pfx_worker_thread+0x10/0x10
[  134.759882][ T1153]  ? __pfx_kthread+0x10/0x10
[  134.759909][ T1153]  ret_from_fork+0x514/0xb70
[  134.759937][ T1153]  ? __pfx_ret_from_fork+0x10/0x10
[  134.759962][ T1153]  ? __switch_to+0xc78/0x1410
[  134.759986][ T1153]  ? __pfx_kthread+0x10/0x10
[  134.760012][ T1153]  ret_from_fork_asm+0x1a/0x30
[  134.760054][ T1153]  </TASK>
[  134.780170][ T1153] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  134.780997][ T1153] kworker/u8:8: attempt to access beyond end of device
[  134.780997][ T1153] loop4: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  134.781205][ T1153] CPU: 0 UID: 0 PID: 1153 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  134.781268][ T1153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  134.781306][ T1153] Workqueue: writeback wb_workfn (flush-7:4)
[  134.781407][ T1153] Call Trace:
[  134.781431][ T1153]  <TASK>
[  134.781454][ T1153]  dump_stack_lvl+0xe8/0x150
[  134.781557][ T1153]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  134.781676][ T1153]  f2fs_write_end_bio+0xf7d/0x1310
[  134.781869][ T1153]  __submit_merged_bio+0x258/0x6a0
[  134.781930][ T1153]  ? rcu_is_watching+0x16/0xb0
[  134.782028][ T1153]  f2fs_submit_merged_write+0x413/0x610
[  134.782108][ T1153]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  134.782247][ T1153]  ? folio_unlock+0x101/0x160
[  134.782357][ T1153]  f2fs_write_single_data_page+0xf86/0x1410
[  134.782468][ T1153]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  134.782635][ T1153]  ? folio_clear_dirty_for_io+0x1bf/0x820
[  134.782698][ T1153]  ? folio_clear_dirty_for_io+0x649/0x820
[  134.782782][ T1153]  __f2fs_write_data_pages+0x200a/0x72b0
[  134.782867][ T1153]  ? arch_stack_walk+0x11b/0x150
[  134.782953][ T1153]  ? ret_from_fork_asm+0x1a/0x30
[  134.783093][ T1153]  ? __kasan_check_byte+0x12/0x40
[  134.783206][ T1153]  ? rcu_is_watching+0x16/0xb0
[  134.783311][ T1153]  ? rcu_is_watching+0x16/0xb0
[  134.783395][ T1153]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  134.783610][ T1153]  ? lock_release+0x4b/0x3c0
[  134.783676][ T1153]  ? unwind_next_frame+0x1baf/0x2550
[  134.783753][ T1153]  ? deref_stack_reg+0x18e/0x220
[  134.783849][ T1153]  ? unwind_next_frame+0x1baf/0x2550
[  134.783984][ T1153]  ? f2fs_inode_chksum_verify+0x15e/0x850
[  134.784066][ T1153]  ? ret_from_fork_asm+0x1a/0x30
[  134.784126][ T1153]  ? __pfx_f2fs_inode_chksum_verify+0x10/0x10
[  134.784199][ T1153]  ? stack_trace_save+0xa9/0x100
[  134.784285][ T1153]  ? do_raw_spin_lock+0x12b/0x2f0
[  134.784358][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.784444][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.784554][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.784696][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.784821][ T1153]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  134.784901][ T1153]  do_writepages+0x338/0x560
[  134.784983][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.785059][ T1153]  ? reacquire_held_locks+0x117/0x1a0
[  134.785140][ T1153]  ? writeback_sb_inodes+0x450/0x1af0
[  134.785225][ T1153]  __writeback_single_inode+0x136/0x1220
[  134.785308][ T1153]  ? do_raw_spin_unlock+0xf5/0x200
[  134.785380][ T1153]  writeback_sb_inodes+0x9de/0x1af0
[  134.785455][ T1153]  ? __lock_acquire+0x747/0x2de0
[  134.785590][ T1153]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  134.785768][ T1153]  ? rcu_is_watching+0x16/0xb0
[  134.785850][ T1153]  ? queue_io+0x2d3/0x470
[  134.785929][ T1153]  wb_writeback+0x41c/0xad0
[  134.786001][ T1153]  ? queue_io+0x231/0x470
[  134.786076][ T1153]  ? __pfx_wb_writeback+0x10/0x10
[  134.786132][ T1153]  ? do_raw_spin_lock+0x12b/0x2f0
[  134.786214][ T1153]  wb_workfn+0x431/0x10f0
[  134.786263][ T1153]  ? __pfx_wb_workfn+0x10/0x10
[  134.786377][ T1153]  ? do_raw_spin_lock+0x12b/0x2f0
[  134.786461][ T1153]  ? lock_acquire+0x115/0x350
[  134.786553][ T1153]  ? rcu_is_watching+0x16/0xb0
[  134.786644][ T1153]  ? process_scheduled_works+0x97a/0x1630
[  134.786725][ T1153]  process_scheduled_works+0xc3d/0x1630
[  134.786893][ T1153]  ? __pfx_process_scheduled_works+0x10/0x10
[  134.786995][ T1153]  ? assign_work+0x3cf/0x5d0
[  134.787081][ T1153]  worker_thread+0xa47/0xfb0
[  134.787206][ T1153]  kthread+0x38b/0x480
[  134.787269][ T1153]  ? __pfx_worker_thread+0x10/0x10
[  134.787311][ T1153]  ? __pfx_kthread+0x10/0x10
[  134.787376][ T1153]  ret_from_fork+0x514/0xb70
[  134.787467][ T1153]  ? __pfx_ret_from_fork+0x10/0x10
[  134.787510][ T1153]  ? __switch_to+0xc78/0x1410
[  134.787566][ T1153]  ? __pfx_kthread+0x10/0x10
[  134.787641][ T1153]  ret_from_fork_asm+0x1a/0x30
[  134.787760][ T1153]  </TASK>
[  134.843781][ T1153] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  135.282838][ T6843] netlink: 104 bytes leftover after parsing attributes in process `syz.1.345'.
[  135.844564][ T6852] db_root: cannot open:  �
[  136.467506][ T6878] tipc: Started in network mode
[  136.467531][ T6878] tipc: Node identity 1001001, cluster identity 4711
[  136.467543][ T6878] tipc: Node number set to 16781313
[  137.277463][ T6907] sd 0:0:1:0: PR command failed: 1026
[  137.277533][ T6907] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  137.277656][ T6907] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  138.616904][ T6930] loop1: detected capacity change from 0 to 128
[  139.019570][ T6936] jffs2: notice: (6936) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  139.023859][ T6939] capability: warning: `syz.0.384' uses 32-bit capabilities (legacy support in use)
[  139.071726][ T6939] program syz.0.384 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  139.364439][ T6924] loop4: detected capacity change from 0 to 32768
[  139.424182][ T6924] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  139.515205][ T6924] XFS (loop4): Ending clean mount
[  139.610450][ T5756] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  139.654847][ T6928] loop3: detected capacity change from 0 to 32768
[  139.758418][ T6928] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  139.771845][ T5756] usb 2-1: Using ep0 maxpacket: 8
[  139.798302][ T5756] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  139.820999][ T5756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  139.821055][ T5756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.827111][ T5756] usb 2-1: config 0 descriptor??
[  139.921327][ T5634] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.181441][ T5756] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  140.286392][ T5756] usb 2-1: USB disconnect, device number 4
[  140.363096][ T6928] XFS (loop3): Ending clean mount
[  140.592299][ T5636] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.224192][ T6975] loop2: detected capacity change from 0 to 8
[  141.247174][ T6975] Dev loop2: unable to read RDB block 8
[  141.247223][ T6975]  loop2: unable to read partition table
[  141.247437][ T6975] loop2: partition table beyond EOD, truncated
[  141.247480][ T6975] loop_reread_partitions: partition scan of loop2 (�被x�^>��� ) failed (rc=-5)
[  142.299474][ T2255] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  142.376492][ T6990] loop3: detected capacity change from 0 to 32768
[  142.392386][ T6990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.398 (6990)
[  142.459579][ T2255] usb 1-1: Using ep0 maxpacket: 32
[  142.460449][ T2255] usb 1-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  142.473953][ T2255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.474030][ T2255] usb 1-1: Product: syz
[  142.474066][ T2255] usb 1-1: Manufacturer: syz
[  142.474118][ T2255] usb 1-1: SerialNumber: syz
[  142.605937][ T2255] usb 1-1: config 0 descriptor??
[  142.656014][ T6990] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.656052][ T6990] BTRFS info (device loop3): using sha256 checksum algorithm
[  142.858600][ T7028] loop2: detected capacity change from 0 to 164
[  142.920341][ T6990] BTRFS info (device loop3): enabling ssd optimizations
[  142.920397][ T6990] BTRFS info (device loop3): turning on sync discard
[  142.920415][ T6990] BTRFS info (device loop3): enabling free space tree
[  142.920434][ T6990] BTRFS info (device loop3): use zlib compression, level 3
[  143.053199][ T2255] airspy 1-1:0.0: Board ID: 00
[  143.053225][ T2255] airspy 1-1:0.0: Firmware version: 
[  143.459877][ T7038] loop1: detected capacity change from 0 to 256
[  143.469195][ T2255] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e
[  143.545922][ T2255] airspy 1-1:0.0: Registered as swradio24
[  143.545950][ T2255] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  143.622469][ T2255] usb 1-1: USB disconnect, device number 4
[  143.689766][ T7043] syz.1.414: attempt to access beyond end of device
[  143.689766][ T7043] loop1: rw=2049, sector=1832, nr_sectors = 8 limit=256
[  143.795548][ T5636] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.505024][ T2234] kworker/u8:10: attempt to access beyond end of device
[  144.505024][ T2234] loop1: rw=1, sector=1840, nr_sectors = 24 limit=256
[  144.505212][ T2234] kworker/u8:10: attempt to access beyond end of device
[  144.505212][ T2234] loop1: rw=1, sector=1896, nr_sectors = 32 limit=256
[  144.505425][ T2234] kworker/u8:10: attempt to access beyond end of device
[  144.505425][ T2234] loop1: rw=1, sector=1960, nr_sectors = 32 limit=256
[  144.505580][ T2234] kworker/u8:10: attempt to access beyond end of device
[  144.505580][ T2234] loop1: rw=1, sector=2024, nr_sectors = 32 limit=256
[  144.505755][ T2234] kworker/u8:10: attempt to access beyond end of device
[  144.505755][ T2234] loop1: rw=1, sector=2088, nr_sectors = 32 limit=256
[  144.506246][ T2234] kworker/u8:10: attempt to access beyond end of device
[  144.506246][ T2234] loop1: rw=1, sector=2152, nr_sectors = 32 limit=256
[  144.506410][ T2234] kworker/u8:10: attempt to access beyond end of device
[  144.506410][ T2234] loop1: rw=1, sector=2216, nr_sectors = 32 limit=256
[  144.506653][ T2234] kworker/u8:10: attempt to access beyond end of device
[  144.506653][ T2234] loop1: rw=1, sector=2280, nr_sectors = 32 limit=256
[  144.506985][ T2234] kworker/u8:10: attempt to access beyond end of device
[  144.506985][ T2234] loop1: rw=1, sector=2344, nr_sectors = 32 limit=256
[  144.659429][ T5763] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  144.811925][ T5763] usb 1-1: New USB device found: idVendor=05e0, idProduct=0600, bcdDevice=1.00
[  144.829070][ T5763] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.829106][ T5763] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.855133][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.855160][ T5763] usb 1-1: Product: syz
[  144.855174][ T5763] usb 1-1: Manufacturer: syz
[  144.855186][ T5763] usb 1-1: SerialNumber: syz
[  144.891505][ T5763] symbolserial 1-1:1.0: symbol converter detected
[  144.916151][ T5763] usb 1-1: symbol converter now attached to ttyUSB0
[  145.177139][ T7056] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90
[  145.213640][ T5821] usb 1-1: USB disconnect, device number 5
[  145.259693][ T5821] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  145.297821][ T5821] symbolserial 1-1:1.0: device disconnected
[  145.436706][ T7072] loop1: detected capacity change from 0 to 32768
[  145.448212][ T7072] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.426 (7072)
[  145.464581][ T7072] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.464617][ T7072] BTRFS info (device loop1): using sha256 checksum algorithm
[  145.683864][ T7072] BTRFS info (device loop1): enabling ssd optimizations
[  145.683901][ T7072] BTRFS info (device loop1): turning on sync discard
[  145.683918][ T7072] BTRFS info (device loop1): enabling free space tree
[  145.683938][ T7072] BTRFS info (device loop1): use zlib compression, level 3
[  146.021151][ T7094] loop2: detected capacity change from 0 to 4096
[  146.039526][ T7094] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  146.140460][ T7094] ntfs3(loop2): Failed to load $Extend (-22).
[  146.140487][ T7094] ntfs3(loop2): Failed to initialize $Extend.
[  146.288531][ T7094] ntfs3(loop2): ino=21, "memory.events.local" fiemap(xattr) is not supported
[  146.374534][ T5635] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.600211][ T7104] loop2: detected capacity change from 0 to 128
[  147.624220][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'.
[  147.659049][   T33] audit: type=1400 audit(1793888876.674:11): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7128 comm="syz.1.444"
[  147.742094][ T7134] Failed to get privilege flags for destination (handle=0x2:0x0)
[  148.024643][ T5821] kernel read not supported for file /198/attr/sockcreate (pid: 5821 comm: kworker/0:5)
[  148.963040][ T7166] sd 0:0:1:0: PR command failed: 1026
[  148.963097][ T7166] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  148.963151][ T7166] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  149.470473][ T5821] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  149.647080][ T5821] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41
[  149.648740][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  149.648768][ T5821] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  149.648795][ T5821] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  149.667427][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  149.667517][ T5821] usb 4-1: Product: syz
[  149.667565][ T5821] usb 4-1: Manufacturer: syz
[  149.667611][ T5821] usb 4-1: SerialNumber: syz
[  149.682468][ T7171] loop2: detected capacity change from 0 to 32768
[  149.768022][ T7171] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  149.806743][ T7169] loop1: detected capacity change from 0 to 32768
[  149.814805][ T7171] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  149.848051][ T7171] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30
[  149.893612][ T7171] XFS (loop2): Ending clean mount
[  149.910412][ T7169] JBD2: Ignoring recovery information on journal
[  149.958584][ T7171] XFS (loop2): User initiated shutdown received.
[  149.965198][ T7171] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:458).  Shutting down filesystem.
[  149.965411][ T7171] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  150.023664][ T5821] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  150.043932][ T7169] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  150.127869][ T5637] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  150.286240][   T10] usb 4-1: USB disconnect, device number 3
[  150.317820][   T10] usblp0: removed
[  150.365522][ T5635] ocfs2: Unmounting device (7,1) on (node local)
[  150.429609][ T1235] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  150.589938][ T1235] usb 1-1: Using ep0 maxpacket: 8
[  150.595666][ T1235] usb 1-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00
[  150.628356][ T1235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.628395][ T1235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.628419][ T1235] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  150.628463][ T1235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.644660][ T1235] usb 1-1: config 0 descriptor??
[  151.468684][ T1235] sony 0003:054C:042F.0002: can't set operational mode: step 1
[  151.468747][ T1235] sony 0003:054C:042F.0002: Failed to set controller into operational mode
[  151.477917][ T1235] sony 0003:054C:042F.0002: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.0-1/input0
[  151.478014][ T1235] sony 0003:054C:042F.0002: failed to claim input
[  151.504957][ T1235] usb 1-1: USB disconnect, device number 6
[  151.570879][ T7202] fido_id[7202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  152.152129][ T7212] loop2: detected capacity change from 0 to 256
[  152.204108][ T7212] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fcb6, chksum : 0x64b39636, utbl_chksum : 0xe619d30d)
[  152.353545][ T5763] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  152.520496][ T5763] usb 4-1: Using ep0 maxpacket: 16
[  152.531686][ T5763] usb 4-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00
[  152.558202][ T5763] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.558239][ T5763] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.558263][ T5763] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  152.558292][ T5763] usb 4-1: config 0 interface 0 has no altsetting 0
[  152.558327][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.615093][ T5763] usb 4-1: config 0 descriptor??
[  152.772577][ T7217] loop1: detected capacity change from 0 to 32768
[  152.776351][ T7217] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.478 (7217)
[  152.805378][ T7217] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  152.805413][ T7217] BTRFS info (device loop1): using sha256 checksum algorithm
[  152.867173][ T7217] BTRFS info (device loop1): enabling ssd optimizations
[  152.867212][ T7217] BTRFS info (device loop1): turning on async discard
[  152.867231][ T7217] BTRFS info (device loop1): enabling free space tree
[  153.086173][ T5763] hid (null): bogus close delimiter
[  153.089014][ T5763] hid (null): unknown global tag 0xe
[  153.113330][ T1017] exFAT-fs (loop2): error, broken FAT chain.
[  153.113350][ T1017] exFAT-fs (loop2): Filesystem has been set read-only
[  153.113438][ T1017] loop2: writeback error on inode 29, offset 8192, sector 208
[  153.144028][ T1017] exFAT-fs (loop2): error, broken FAT chain.
[  153.144078][ T1017] exFAT-fs (loop2): error, broken FAT chain.
[  153.144111][ T1017] exFAT-fs (loop2): error, broken FAT chain.
[  153.289500][   T10] usb 4-1: USB disconnect, device number 4
[  153.451854][ T5635] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.781669][ T7258] program syz.0.490 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  153.847871][ T7260] loop4: detected capacity change from 0 to 1024
[  155.309420][ T5763] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  155.381620][ T7281] loop2: detected capacity change from 0 to 40427
[  155.395333][ T7281] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  155.395905][ T7281] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  155.418456][ T7281] F2FS-fs (loop2): invalid crc value
[  155.470252][ T5763] usb 4-1: New USB device found: idVendor=045e, idProduct=00e3, bcdDevice=0.00
[  155.475121][ T5763] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  155.475159][ T5763] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024
[  155.475187][ T5763] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.475215][ T5763] usb 4-1: config 0 interface 0 has no altsetting 0
[  155.475249][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.497763][ T5763] usb 4-1: config 0 descriptor??
[  155.500688][ T7289] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  155.668100][ T7301] warning: `syz.0.507' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  155.936632][ T7281] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.974135][ T5763] microsoft 0003:045E:00E3.0004: ignoring exceeding usage max
[  155.975464][ T7281] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  155.975489][ T7281] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  156.041834][ T5763] microsoft 0003:045E:00E3.0004: hidraw0: USB HID v0.10 Joystick [HID 045e:00e3] on usb-dummy_hcd.3-1/input0
[  156.132725][ T7281] F2FS-fs (loop2): Stopped filesystem due to reason: 0
[  156.253232][ T5763] usb 4-1: USB disconnect, device number 5
[  156.424755][ T7316] loop4: detected capacity change from 0 to 128
[  156.461803][   T33] audit: type=1800 audit(1793888885.484:12): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.511" name="file1" dev="loop4" ino=30 res=0 errno=-22
[  156.950579][ T5763] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  156.953235][ T7325] loop3: detected capacity change from 0 to 256
[  157.012471][ T7325] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  157.051582][ T7327] program syz.2.513 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.102330][ T5763] usb 1-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  157.104203][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'.
[  157.113041][ T5763] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  157.113107][ T5763] usb 1-1: config 1 has no interface number 0
[  157.113221][ T5763] usb 1-1: config 1 interface 105 has no altsetting 0
[  157.133048][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  157.133122][ T5763] usb 1-1: Product: syz
[  157.133164][ T5763] usb 1-1: Manufacturer: syz
[  157.133206][ T5763] usb 1-1: SerialNumber: syz
[  157.343872][ T7335] loop2: detected capacity change from 0 to 2048
[  157.392358][ T7335] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.518058][   T33] audit: type=1800 audit(1793888886.534:13): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.522" name=BEBEBEAEBEBEBEBEBEBEBEBEAEAEBEAEAEBEAEAEAEBEAEAEAEAEBEAEBEAEBEBEBEBEBEAEAEAEBEBEBEAEAEAEAEBEBEBEBEAEBEAEBEBEBEBEAEBEBEAEAEAEAEBEBEAEBEAEBEBEAEAEBEBE dev="loop2" ino=1368 res=0 errno=-22
[  157.556440][ T7340] loop1: detected capacity change from 0 to 1024
[  157.603267][ T7340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.907510][ T5763] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  157.916748][ T5763] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71
[  158.008936][ T5763] usb 1-1: USB disconnect, device number 7
[  158.077788][ T7355] netlink: 2 bytes leftover after parsing attributes in process `syz.2.530'.
[  158.122867][   T55] block nbd1: Receive control failed (result -32)
[  158.218767][   T53] IPVS: starting estimator thread 0...
[  158.295507][ T7365] loop2: detected capacity change from 0 to 256
[  158.306129][ T7361] IPVS: using max 26 ests per chain, 62400 per kthread
[  158.348105][ T7365] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  158.402374][ T7369] loop4: detected capacity change from 0 to 64
[  158.905394][ T7387] loop4: detected capacity change from 0 to 512
[  158.951034][ T7387] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.542: iget: bad i_size value: 38620345925642
[  158.951076][ T7387] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  158.953140][ T7387] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.542: couldn't read orphan inode 15 (err -117)
[  158.953174][ T7387] loop4: lost filesystem error report for type 5 error -117
[  158.961639][ T7387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.095032][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.595166][ T7412] loop2: detected capacity change from 0 to 1024
[  159.764158][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'.
[  159.764199][ T7418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.558'.
[  159.820283][ T2234] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.820333][ T2234] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.820394][ T2234] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.820430][ T2234] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.633169][ T7460] loop2: detected capacity change from 0 to 512
[  160.672983][ T7460] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.577: corrupted in-inode xattr: invalid ea_ino
[  160.673021][ T7460] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  160.673489][ T7460] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.577: couldn't read orphan inode 15 (err -117)
[  160.673519][ T7460] loop2: lost filesystem error report for type 5 error -117
[  160.717784][ T7460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.865279][ T5637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.132474][ T7480] block nbd2: server does not support multiple connections per device.
[  161.133178][ T7480] block nbd2: shutting down sockets
[  161.359464][   T55] Bluetooth: hci3: command 0x0c1a tx timeout
[  161.451975][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'.
[  161.529902][ T7497] loop1: detected capacity change from 0 to 1024
[  162.034196][ T7486] loop2: detected capacity change from 0 to 40427
[  162.051307][ T7486] F2FS-fs (loop2): invalid crc value
[  162.069430][ T2255] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  162.183530][ T7486] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  162.192299][ T7486] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  162.219453][ T2255] usb 4-1: Using ep0 maxpacket: 32
[  162.220324][ T2255] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  162.224339][ T2255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.228335][ T2255] usb 4-1: config 0 descriptor??
[  162.286852][ T5637] bio_check_eod: 80 callbacks suppressed
[  162.286879][ T5637] syz-executor: attempt to access beyond end of device
[  162.286879][ T5637] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  162.301636][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  162.317987][ T5637] CPU: 1 UID: 0 PID: 5637 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  162.318016][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  162.318029][ T5637] Call Trace:
[  162.318037][ T5637]  <TASK>
[  162.318047][ T5637]  dump_stack_lvl+0xe8/0x150
[  162.318087][ T5637]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  162.318128][ T5637]  f2fs_write_end_bio+0xf7d/0x1310
[  162.318201][ T5637]  __submit_merged_bio+0x258/0x6a0
[  162.318229][ T5637]  ? rcu_is_watching+0x16/0xb0
[  162.318267][ T5637]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  162.318308][ T5637]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  162.318372][ T5637]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  162.318425][ T5637]  ? do_file_open+0x23e/0x4a0
[  162.318486][ T5637]  ? do_sys_openat2+0x115/0x200
[  162.318517][ T5637]  ? stack_trace_save+0xa9/0x100
[  162.318549][ T5637]  ? __pfx_stack_trace_save+0x10/0x10
[  162.318570][ T5637]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  162.318659][ T5637]  ? rcu_is_watching+0x16/0xb0
[  162.318694][ T5637]  ? rcu_is_watching+0x16/0xb0
[  162.318725][ T5637]  ? __kasan_check_byte+0x12/0x40
[  162.318759][ T5637]  ? rcu_is_watching+0x16/0xb0
[  162.318802][ T5637]  ? __kasan_check_byte+0x12/0x40
[  162.318836][ T5637]  ? rcu_is_watching+0x16/0xb0
[  162.318871][ T5637]  ? lock_release+0x4b/0x3c0
[  162.318890][ T5637]  ? lock_release+0x4b/0x3c0
[  162.318913][ T5637]  ? is_bpf_text_address+0x292/0x2b0
[  162.318952][ T5637]  ? is_bpf_text_address+0x26/0x2b0
[  162.318978][ T5637]  ? kernel_text_address+0xa5/0xe0
[  162.319006][ T5637]  ? __kernel_text_address+0xd/0x30
[  162.319036][ T5637]  ? unwind_get_return_address+0x4d/0x90
[  162.319058][ T5637]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  162.319077][ T5637]  ? arch_stack_walk+0xfb/0x150
[  162.319134][ T5637]  ? stack_trace_save+0xa9/0x100
[  162.319162][ T5637]  ? __pfx_stack_trace_save+0x10/0x10
[  162.319196][ T5637]  ? check_path+0x21/0x40
[  162.319222][ T5637]  ? add_lock_to_list+0xc7/0x100
[  162.319263][ T5637]  ? lockdep_unlock+0x5c/0xd0
[  162.319284][ T5637]  ? __lock_acquire+0x1511/0x2de0
[  162.319339][ T5637]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  162.319368][ T5637]  do_writepages+0x338/0x560
[  162.319415][ T5637]  ? do_raw_spin_unlock+0xf5/0x200
[  162.319466][ T5637]  filemap_fdatawrite+0x1e9/0x2f0
[  162.319496][ T5637]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  162.319565][ T5637]  ? do_raw_spin_unlock+0xf5/0x200
[  162.319593][ T5637]  f2fs_sync_dirty_inodes+0x471/0x970
[  162.319638][ T5637]  f2fs_write_checkpoint+0x867/0x24d0
[  162.319700][ T5637]  kill_f2fs_super+0x2df/0x700
[  162.319732][ T5637]  ? rcu_do_enqueue+0x616/0x870
[  162.319759][ T5637]  ? lockdep_hardirqs_on+0x7b/0x110
[  162.319784][ T5637]  ? __pfx_kill_f2fs_super+0x10/0x10
[  162.319829][ T5637]  ? __pfx_call_rcu+0x10/0x10
[  162.319856][ T5637]  ? shrinker_free+0x2a7/0x3b0
[  162.319885][ T5637]  deactivate_locked_super+0xbe/0x110
[  162.319916][ T5637]  cleanup_mnt+0x204/0x2a0
[  162.319972][ T5637]  task_work_run+0x1d9/0x260
[  162.320004][ T5637]  ? __pfx_task_work_run+0x10/0x10
[  162.320043][ T5637]  exit_to_user_mode_loop+0x204/0x770
[  162.320085][ T5637]  ? rcu_is_watching+0x16/0xb0
[  162.320121][ T5637]  do_syscall_64+0x32c/0x530
[  162.320145][ T5637]  ? trace_irq_disable+0x3b/0x140
[  162.320195][ T5637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.320218][ T5637]  ? clear_bhb_loop+0x70/0xc0
[  162.320264][ T5637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.320286][ T5637] RIP: 0033:0x00007fb59b1a0d57
[  162.320308][ T5637] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  162.320325][ T5637] RSP: 002b:00007ffe18db1338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  162.320349][ T5637] RAX: 0000000000000000 RBX: 00007fb59b236fb3 RCX: 00007fb59b1a0d57
[  162.320364][ T5637] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe18db13f0
[  162.320378][ T5637] RBP: 00007ffe18db13f0 R08: 00007ffe18db23f0 R09: 00000000ffffffff
[  162.320393][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe18db2480
[  162.320407][ T5637] R13: 00007fb59b236fb3 R14: 000000000002799d R15: 00007ffe18db24c0
[  162.320450][ T5637]  </TASK>
[  162.538467][   T10] usb 1-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  162.546962][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.554744][ T2255] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  162.590813][ T5637] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  162.603760][   T10] usb 1-1: config 0 descriptor??
[  162.722823][   T10] cp210x 1-1:0.0: cp210x converter detected
[  162.882497][ T7522] mmap: syz.4.603 (7522) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  162.913700][ T2255] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  162.916228][ T2255] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  162.916298][ T2255] usb 4-1: media controller created
[  163.024650][ T1017] IPVS: starting estimator thread 0...
[  163.026223][ T2255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  163.066597][   T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  163.127337][   T10] usb 1-1: cp210x converter now attached to ttyUSB0
[  163.132134][ T7525] IPVS: using max 28 ests per chain, 67200 per kthread
[  163.256523][ T2255] az6027: usb out operation failed. (-71)
[  163.265544][ T2255] az6027: usb out operation failed. (-71)
[  163.265562][ T2255] stb0899_attach: Driver disabled by Kconfig
[  163.265573][ T2255] az6027: no front-end attached
[  163.265573][ T2255] 
[  163.268072][ T2255] az6027: usb out operation failed. (-71)
[  163.268108][ T2255] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  163.313526][ T2255] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9
[  163.325741][ T5821] usb 1-1: USB disconnect, device number 8
[  163.396963][ T5821] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  163.410834][ T5821] cp210x 1-1:0.0: device disconnected
[  163.474767][ T2255] dvb-usb: schedule remote query interval to 400 msecs.
[  163.474790][ T2255] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  163.515393][ T2255] usb 4-1: USB disconnect, device number 6
[  163.777726][ T7534] loop2: detected capacity change from 0 to 32768
[  163.792695][ T7534] (syz.2.602,7534,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  163.795465][ T7534] (syz.2.602,7534,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  163.865492][ T7534] (syz.2.602,7534,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  163.886013][ T7534] JBD2: Ignoring recovery information on journal
[  163.938362][ T7534] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  164.021306][ T7534] (syz.2.602,7534,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  164.021453][ T7534] (syz.2.602,7534,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  164.021483][ T7534] (syz.2.602,7534,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  164.021505][ T7534] (syz.2.602,7534,1):ocfs2_quota_read:201 ERROR: status = -5
[  164.021529][ T7534] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5
[  164.021643][ T7534] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  164.021664][ T7534] (syz.2.602,7534,1):ocfs2_acquire_dquot:904 ERROR: status = -5
[  164.022484][ T7534] (syz.2.602,7534,1):ocfs2_mknod:318 ERROR: status = -5
[  164.022552][ T7534] (syz.2.602,7534,1):ocfs2_mknod:507 ERROR: status = -5
[  164.022574][ T7534] (syz.2.602,7534,1):ocfs2_create:679 ERROR: status = -5
[  164.198542][ T5637] ocfs2: Unmounting device (7,2) on (node local)
[  164.296650][ T2255] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  164.665043][ T7563] loop3: detected capacity change from 0 to 256
[  164.741366][ T7565] device-mapper: table: 248:1: thin-pool: Error setting metadata or data device (-EINVAL)
[  164.741397][ T7565] device-mapper: ioctl: error adding target to table
[  164.744586][ T7565] device-mapper: multipath: bio-based multipath doesn't allow hardware handler args
[  164.788969][ T7565] device-mapper: table: 248:1: multipath: error getting device (-ENOENT)
[  164.788997][ T7565] device-mapper: ioctl: error adding target to table
[  164.822315][ T7567] syz.3.619: attempt to access beyond end of device
[  164.822315][ T7567] loop3: rw=2049, sector=1832, nr_sectors = 32 limit=256
[  164.822494][ T7567] syz.3.619: attempt to access beyond end of device
[  164.822494][ T7567] loop3: rw=2049, sector=1896, nr_sectors = 32 limit=256
[  164.822625][ T7567] syz.3.619: attempt to access beyond end of device
[  164.822625][ T7567] loop3: rw=2049, sector=1960, nr_sectors = 8 limit=256
[  165.453548][ T7554] loop1: detected capacity change from 0 to 40427
[  165.477034][ T7554] F2FS-fs (loop1): invalid crc value
[  165.590392][ T7554] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  165.615426][ T7554] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  165.729045][   T33] audit: type=1800 audit(1793888894.744:14): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.615" name="file1" dev="loop1" ino=10 res=0 errno=-22
[  165.737815][   T53] kworker/u8:3: attempt to access beyond end of device
[  165.737815][   T53] loop3: rw=1, sector=1968, nr_sectors = 24 limit=256
[  165.749537][   T53] kworker/u8:3: attempt to access beyond end of device
[  165.749537][   T53] loop3: rw=1, sector=2024, nr_sectors = 32 limit=256
[  165.750041][   T53] kworker/u8:3: attempt to access beyond end of device
[  165.750041][   T53] loop3: rw=1, sector=2088, nr_sectors = 32 limit=256
[  165.750437][   T53] kworker/u8:3: attempt to access beyond end of device
[  165.750437][   T53] loop3: rw=1, sector=2152, nr_sectors = 32 limit=256
[  165.750958][   T53] kworker/u8:3: attempt to access beyond end of device
[  165.750958][   T53] loop3: rw=1, sector=2216, nr_sectors = 32 limit=256
[  165.759974][   T53] kworker/u8:3: attempt to access beyond end of device
[  165.759974][   T53] loop3: rw=1, sector=2280, nr_sectors = 32 limit=256
[  165.900470][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  165.900504][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  165.900517][ T5635] Call Trace:
[  165.900525][ T5635]  <TASK>
[  165.900535][ T5635]  dump_stack_lvl+0xe8/0x150
[  165.900577][ T5635]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  165.900620][ T5635]  f2fs_write_end_bio+0xf7d/0x1310
[  165.900669][ T5635]  __submit_merged_bio+0x258/0x6a0
[  165.900692][ T5635]  ? rcu_is_watching+0x16/0xb0
[  165.900732][ T5635]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  165.900771][ T5635]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  165.900833][ T5635]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  165.900885][ T5635]  ? __lock_acquire+0x747/0x2de0
[  165.900934][ T5635]  ? __lock_acquire+0x747/0x2de0
[  165.900967][ T5635]  ? __lock_acquire+0x747/0x2de0
[  165.900994][ T5635]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  165.901073][ T5635]  ? rcu_is_watching+0x16/0xb0
[  165.901109][ T5635]  ? rcu_is_watching+0x16/0xb0
[  165.901138][ T5635]  ? __kasan_check_byte+0x12/0x40
[  165.901200][ T5635]  ? is_bpf_text_address+0x292/0x2b0
[  165.901224][ T5635]  ? is_bpf_text_address+0x26/0x2b0
[  165.901252][ T5635]  ? kernel_text_address+0xa5/0xe0
[  165.901281][ T5635]  ? __kernel_text_address+0xd/0x30
[  165.901309][ T5635]  ? unwind_get_return_address+0x4d/0x90
[  165.901338][ T5635]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  165.901367][ T5635]  ? arch_stack_walk+0xfb/0x150
[  165.901410][ T5635]  ? stack_trace_save+0xa9/0x100
[  165.901437][ T5635]  ? __pfx_stack_trace_save+0x10/0x10
[  165.901469][ T5635]  ? check_path+0x21/0x40
[  165.901506][ T5635]  ? add_lock_to_list+0xc7/0x100
[  165.901540][ T5635]  ? lockdep_unlock+0x5c/0xd0
[  165.901563][ T5635]  ? __lock_acquire+0x1511/0x2de0
[  165.901621][ T5635]  ? do_raw_spin_lock+0x12b/0x2f0
[  165.901657][ T5635]  ? do_raw_spin_unlock+0xf5/0x200
[  165.901680][ T5635]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  165.901710][ T5635]  do_writepages+0x338/0x560
[  165.901747][ T5635]  ? do_raw_spin_unlock+0xf5/0x200
[  165.901779][ T5635]  filemap_fdatawrite+0x1e9/0x2f0
[  165.901809][ T5635]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  165.901884][ T5635]  ? do_raw_spin_unlock+0xf5/0x200
[  165.901925][ T5635]  f2fs_sync_dirty_inodes+0x471/0x970
[  165.901971][ T5635]  f2fs_write_checkpoint+0x867/0x24d0
[  165.902046][ T5635]  kill_f2fs_super+0x2df/0x700
[  165.902081][ T5635]  ? rcu_do_enqueue+0x616/0x870
[  165.902108][ T5635]  ? lockdep_hardirqs_on+0x7b/0x110
[  165.902134][ T5635]  ? __pfx_kill_f2fs_super+0x10/0x10
[  165.902195][ T5635]  ? __pfx_call_rcu+0x10/0x10
[  165.902221][ T5635]  ? shrinker_free+0x2a7/0x3b0
[  165.902248][ T5635]  deactivate_locked_super+0xbe/0x110
[  165.902279][ T5635]  cleanup_mnt+0x204/0x2a0
[  165.902317][ T5635]  task_work_run+0x1d9/0x260
[  165.902348][ T5635]  ? __pfx_task_work_run+0x10/0x10
[  165.902385][ T5635]  exit_to_user_mode_loop+0x204/0x770
[  165.902416][ T5635]  ? rcu_is_watching+0x16/0xb0
[  165.902453][ T5635]  do_syscall_64+0x32c/0x530
[  165.902478][ T5635]  ? trace_irq_disable+0x3b/0x140
[  165.902508][ T5635]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.902531][ T5635]  ? clear_bhb_loop+0x70/0xc0
[  165.902559][ T5635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.902581][ T5635] RIP: 0033:0x00007fd63c1a0d57
[  165.902603][ T5635] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  165.902623][ T5635] RSP: 002b:00007ffe4fd60bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  165.902647][ T5635] RAX: 0000000000000000 RBX: 00007fd63c236fb3 RCX: 00007fd63c1a0d57
[  165.902661][ T5635] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4fd60c90
[  165.902675][ T5635] RBP: 00007ffe4fd60c90 R08: 00007ffe4fd61c90 R09: 00000000ffffffff
[  165.902691][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4fd61d20
[  165.902705][ T5635] R13: 00007fd63c236fb3 R14: 00000000000287b1 R15: 00007ffe4fd61d60
[  165.902742][ T5635]  </TASK>
[  165.904373][ T5635] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  166.020883][ T1235] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  166.208991][ T1235] usb 1-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  166.230734][ T1235] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  166.230775][ T1235] usb 1-1: config 0 has no interface number 0
[  166.249958][ T1235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.250032][ T1235] usb 1-1: Product: syz
[  166.250074][ T1235] usb 1-1: Manufacturer: syz
[  166.250115][ T1235] usb 1-1: SerialNumber: syz
[  166.341876][ T1235] usb 1-1: config 0 descriptor??
[  166.523834][ T7607] netlink: 'syz.1.645': attribute type 12 has an invalid length.
[  166.524133][ T7604] loop3: detected capacity change from 0 to 256
[  166.553441][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'.
[  166.591742][ T7604] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9f0f4494, utbl_chksum : 0xe619d30d)
[  166.650228][ T1235] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  166.682549][ T1235] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  166.686738][ T1235] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  166.686797][ T1235] usb 1-1: media controller created
[  166.775143][ T1235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  166.995043][ T7613] loop1: detected capacity change from 0 to 2048
[  167.023032][ T7613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.145863][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.280534][ T7625] tap0: tun_chr_ioctl cmd 21731
[  167.922214][ T1235] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  168.051420][ T1235] usb 1-1: USB disconnect, device number 9
[  168.119002][ T7649] Format for deleting device is "id" (uint).
[  168.278015][ T7647] loop2: detected capacity change from 0 to 32768
[  168.314725][ T7647] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  168.340837][ T7647] JBD2: Ignoring recovery information on journal
[  168.425946][ T7647] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  168.698772][ T5637] ocfs2: Unmounting device (7,2) on (node local)
[  168.764850][ T7651] loop3: detected capacity change from 0 to 32768
[  168.777744][ T7651] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.655 (7651)
[  168.809651][ T7651] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.809687][ T7651] BTRFS info (device loop3): using sha256 checksum algorithm
[  168.955592][ T7651] BTRFS info (device loop3): enabling ssd optimizations
[  168.955623][ T7651] BTRFS info (device loop3): turning on async discard
[  168.955641][ T7651] BTRFS info (device loop3): enabling free space tree
[  169.068486][ T5636] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  169.182675][ T7677] loop4: detected capacity change from 0 to 2048
[  169.263041][ T7677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.514317][ T7687] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  169.571427][ T7687] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 116 with error 28
[  169.571469][ T7687] EXT4-fs (loop4): This should not happen!! Data will be lost
[  169.571469][ T7687] 
[  169.571487][ T7687] EXT4-fs (loop4): Total free blocks count 0
[  169.571502][ T7687] EXT4-fs (loop4): Free/Dirty block details
[  169.571524][ T7687] EXT4-fs (loop4): free_blocks=4096
[  169.571546][ T7687] EXT4-fs (loop4): dirty_blocks=304
[  169.571560][ T7687] EXT4-fs (loop4): Block reservation details
[  169.571574][ T7687] EXT4-fs (loop4): i_reserved_data_blocks=19
[  169.657438][ T7693] loop1: detected capacity change from 0 to 512
[  169.715669][ T7693] EXT4-fs error (device loop1): ext4_iget_extra_inode:6027: inode #15: comm syz.1.666: corrupted in-inode xattr: invalid ea_ino
[  169.715709][ T7693] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  169.716005][ T7693] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.666: couldn't read orphan inode 15 (err -117)
[  169.716036][ T7693] loop1: lost filesystem error report for type 5 error -117
[  169.782427][ T7693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.866770][ T7693] EXT4-fs (loop1): shut down requested (2)
[  170.024103][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.225561][ T1017] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28
[  170.269241][ T5634] EXT4-fs warning (device loop4): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost
[  170.580225][   T33] audit: type=1400 audit(1793888899.604:15): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7724 comm="syz.2.679" name="unknown" offset=16
[  171.160235][ T7740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.686'.
[  171.463448][ T7733] loop4: detected capacity change from 0 to 32768
[  171.484890][ T7733] (syz.4.683,7733,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  171.485278][ T7733] (syz.4.683,7733,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  171.514154][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.691'.
[  171.562328][ T7733] JBD2: Ignoring recovery information on journal
[  171.569880][ T2255] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  171.641185][ T7733] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  171.719875][ T2255] usb 3-1: Using ep0 maxpacket: 8
[  171.722162][ T2255] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  171.723291][ T2255] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  171.723340][ T2255] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  171.723363][ T2255] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  171.723387][ T2255] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  171.723411][ T2255] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  171.723452][ T2255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.837518][ T7733] (syz.4.683,7733,0):ocfs2_verify_group_and_input:432 ERROR: add a group which is in the current volume.
[  171.837555][ T7733] (syz.4.683,7733,0):ocfs2_group_add:513 ERROR: status = -22
[  171.959651][ T2255] usb 3-1: GET_CAPABILITIES returned 0
[  171.959702][ T2255] usbtmc 3-1:16.0: can't read capabilities
[  171.997633][ T5634] ocfs2: Unmounting device (7,4) on (node local)
[  172.175393][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  172.196871][ T5821] usb 3-1: USB disconnect, device number 3
[  172.339990][ T1235] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  172.511324][ T1235] usb 4-1: Using ep0 maxpacket: 16
[  172.512174][ T1235] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[  172.513592][ T1235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.513620][ T1235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.513641][ T1235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  172.513679][ T1235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.518473][ T1235] usb 4-1: config 0 descriptor??
[  172.748870][ T7784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.987678][ T1235] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  172.987726][ T1235] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  172.987754][ T1235] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  172.987782][ T1235] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  172.987809][ T1235] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  172.987836][ T1235] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  172.987863][ T1235] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  172.987890][ T1235] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  172.987917][ T1235] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  172.987943][ T1235] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  173.087380][ T1235] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input10
[  173.319492][ T1235] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  173.375960][ T1235] usb 4-1: USB disconnect, device number 7
[  173.524836][ T7809] loop2: detected capacity change from 0 to 256
[  173.674747][ T7807] fido_id[7807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  173.703851][ T7813] bio_check_eod: 97 callbacks suppressed
[  173.703872][ T7813] syz.2.718: attempt to access beyond end of device
[  173.703872][ T7813] loop2: rw=2049, sector=1832, nr_sectors = 32 limit=256
[  173.704038][ T7813] syz.2.718: attempt to access beyond end of device
[  173.704038][ T7813] loop2: rw=2049, sector=1896, nr_sectors = 32 limit=256
[  173.704183][ T7813] syz.2.718: attempt to access beyond end of device
[  173.704183][ T7813] loop2: rw=2049, sector=1960, nr_sectors = 32 limit=256
[  173.708154][ T7813] syz.2.718: attempt to access beyond end of device
[  173.708154][ T7813] loop2: rw=2049, sector=2024, nr_sectors = 32 limit=256
[  173.708320][ T7813] syz.2.718: attempt to access beyond end of device
[  173.708320][ T7813] loop2: rw=2049, sector=2088, nr_sectors = 32 limit=256
[  173.708472][ T7813] syz.2.718: attempt to access beyond end of device
[  173.708472][ T7813] loop2: rw=2049, sector=2152, nr_sectors = 32 limit=256
[  173.708775][ T7813] syz.2.718: attempt to access beyond end of device
[  173.708775][ T7813] loop2: rw=2049, sector=2216, nr_sectors = 8 limit=256
[  173.824865][ T7793] loop1: detected capacity change from 0 to 32768
[  174.095240][   T34] kworker/u8:2: attempt to access beyond end of device
[  174.095240][   T34] loop2: rw=1, sector=2224, nr_sectors = 24 limit=256
[  174.131583][   T34] kworker/u8:2: attempt to access beyond end of device
[  174.131583][   T34] loop2: rw=1, sector=2280, nr_sectors = 32 limit=256
[  174.131771][   T34] kworker/u8:2: attempt to access beyond end of device
[  174.131771][   T34] loop2: rw=1, sector=2344, nr_sectors = 32 limit=256
[  174.321170][ T5821] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  174.473111][ T5821] usb 4-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00
[  174.474684][ T5821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  174.499563][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.499593][ T5821] usb 4-1: Product: syz
[  174.499609][ T5821] usb 4-1: Manufacturer: syz
[  174.499626][ T5821] usb 4-1: SerialNumber: syz
[  174.552473][ T5821] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  174.696785][ T7822] loop1: detected capacity change from 0 to 1024
[  174.764211][ T5821] gspca_mr97310a: reg read [21] error -71
[  174.764308][ T5821] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71
[  174.790093][ T5821] usb 4-1: USB disconnect, device number 8
[  174.827472][ T7822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.012788][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.211741][ T7837] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  175.211741][ T7837] The task syz.0.726 (7837) triggered the difference, watch for misbehavior.
[  175.298589][ T7839] loop1: detected capacity change from 0 to 512
[  175.353333][ T7839] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.729: Directory hole found for htree index block 0
[  175.353403][ T7839] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  175.371599][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  175.371685][    C1] EXT4-fs (loop1): last error at time 1793888904: dx_probe:791: inode 2
[  175.405019][ T7827] loop2: detected capacity change from 0 to 32768
[  175.419361][ T7839] EXT4-fs (loop1): Remounting filesystem read-only
[  175.419850][ T7839] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[  175.419946][ T7839] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  175.421942][ T7827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.724 (7827)
[  175.472997][ T7839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.478283][ T7827] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.478318][ T7827] BTRFS info (device loop2): using crc32c checksum algorithm
[  175.510666][ T7839] EXT4-fs (loop1): shut down requested (0)
[  175.593955][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.622233][ T7827] BTRFS info (device loop2): enabling ssd optimizations
[  175.622264][ T7827] BTRFS info (device loop2): turning on flush-on-commit
[  175.622284][ T7827] BTRFS info (device loop2): enabling free space tree
[  175.622303][ T7827] BTRFS info (device loop2): enabling auto defrag
[  175.622322][ T7827] BTRFS info (device loop2): use lzo compression, level 1
[  175.622344][ T7827] BTRFS info (device loop2): max_inline set to 4096
[  175.710064][ T5821] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  175.716287][ T7827] BTRFS critical (device loop2 state EH): emergency shutdown
[  175.766573][ T5637] BTRFS info (device loop2 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.852167][ T7860] netlink: 'syz.1.732': attribute type 4 has an invalid length.
[  175.852191][ T7860] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  175.852205][ T7860] netlink: 212 bytes leftover after parsing attributes in process `syz.1.732'.
[  175.852247][ T7860] NCSI netlink: No device for ifindex 0
[  175.869471][ T5821] usb 4-1: Using ep0 maxpacket: 16
[  175.877977][ T5821] usb 4-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[  175.885295][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.885439][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  175.885515][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  175.885578][ T5821] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  175.885641][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  175.895481][ T5821] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  175.895510][ T5821] usb 4-1: Manufacturer: syz
[  175.995543][ T5821] usb 4-1: config 0 descriptor??
[  176.139194][ T7864] tipc: New replicast peer: 172.20.20.187
[  176.149469][ T7864] tipc: Enabled bearer <udp:syz0>, priority 10
[  176.249474][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'.
[  176.449717][ T5821] rc_core: IR keymap rc-hauppauge not found
[  176.449739][ T5821] Registered IR keymap rc-empty
[  176.450561][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.470671][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.493391][ T5821] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  176.534129][ T5821] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11
[  176.557872][ T7881] netlink: 9 bytes leftover after parsing attributes in process `syz.1.742'.
[  176.582552][ T7881] gretap0: entered promiscuous mode
[  176.597618][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.610737][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.633771][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.649506][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.668433][ T7881] netlink: 5 bytes leftover after parsing attributes in process `syz.1.742'.
[  176.668967][ T7881] 0��{X��: renamed from gretap0
[  176.672199][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.692175][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.709562][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.729487][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.730566][ T7881] 0��{X��: left promiscuous mode
[  176.730589][ T7881] 0��{X��: entered allmulticast mode
[  176.750234][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.769693][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.772261][ T7881] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  176.793444][ T5821] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  176.828926][ T5821] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  176.828954][ T5821] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  176.923438][ T5821] usb 4-1: USB disconnect, device number 9
[  177.059985][ T5641] Bluetooth: hci4: failed to read key size for handle 0
[  177.060143][ T5641] Bluetooth: hci4: unexpected event for opcode 0x1408
[  177.424869][ T1235] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  177.456679][ T1235] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  177.713700][ T1235] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  178.208890][ T7894] ceph: No mds server is up or the cluster is laggy
[  178.220141][ T5763] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  178.323397][ T7912] syz.3.753 (7912) used greatest stack depth: 17992 bytes left
[  178.341599][ T7920] loop1: detected capacity change from 0 to 128
[  178.368760][   T33] audit: type=1800 audit(1793888907.384:16): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.757" name="file1" dev="loop1" ino=115 res=0 errno=-22
[  178.945768][ T7938] loop3: detected capacity change from 0 to 512
[  178.956431][ T7938] EXT4-fs: Ignoring removed nomblk_io_submit option
[  178.956488][ T7938] EXT4-fs: Ignoring removed nobh option
[  179.034126][ T7938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.034254][ T7938] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.212077][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.305007][ T1153] IPVS: starting estimator thread 0...
[  179.389775][ T7954] IPVS: using max 28 ests per chain, 67200 per kthread
[  179.637755][ T7965] loop4: detected capacity change from 0 to 8
[  179.709237][ T7965] SQUASHFS error: Unable to read directory block [6aa:9]
[  179.892851][ T7968] bond0: option arp_interval: invalid value (100�)
[  179.892878][ T7968] bond0: option arp_interval: allowed values 0 - 2147483647
[  179.920614][ T5763] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  180.082608][ T5763] usb 2-1: Using ep0 maxpacket: 8
[  180.085527][ T5763] usb 2-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  180.087119][ T5763] usb 2-1: config 0 has no interfaces?
[  180.091722][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.091797][ T5763] usb 2-1: Product: syz
[  180.091839][ T5763] usb 2-1: Manufacturer: syz
[  180.091881][ T5763] usb 2-1: SerialNumber: syz
[  180.117823][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  180.122186][ T5763] usb 2-1: config 0 descriptor??
[  180.297604][ T7981] loop3: detected capacity change from 0 to 4096
[  180.308327][   T10] usb 3-1: New USB device found: idVendor=1e59, idProduct=0002, bcdDevice=98.ed
[  180.323629][   T10] usb 3-1: config 253 has an invalid interface number: 130 but max is 0
[  180.323658][   T10] usb 3-1: config 253 has no interface number 0
[  180.323689][   T10] usb 3-1: config 253 interface 130 has no altsetting 0
[  180.328072][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.328100][   T10] usb 3-1: Product: syz
[  180.328116][   T10] usb 3-1: Manufacturer: syz
[  180.328132][   T10] usb 3-1: SerialNumber: syz
[  180.419836][ T5756] usb 2-1: USB disconnect, device number 5
[  180.561782][ T7981] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  180.833759][   T10] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware
[  180.926323][   T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  180.926396][   T10] dib0700: firmware download failed at 7 with -22
[  180.946743][   T10] usb 3-1: USB disconnect, device number 4
[  181.122408][ T5641] Bluetooth: hci4: command 0x0c1a tx timeout
[  181.494412][ T8011] sctp: [Deprecated]: syz.1.796 (pid 8011) Use of int in max_burst socket option deprecated.
[  181.494412][ T8011] Use struct sctp_assoc_value instead
[  181.726221][ T8019] rnbd_client L127: Can't parse path ip: -93
[  181.977475][ T8022] loop1: detected capacity change from 0 to 8192
[  181.994616][ T8022] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  182.469338][ T8043] tap0: tun_chr_ioctl cmd 1074025676
[  182.469362][ T8043] tap0: owner set to 0
[  182.492675][ T8046] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  182.689722][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  182.839533][   T10] usb 3-1: Using ep0 maxpacket: 16
[  182.840390][   T10] usb 3-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00
[  182.840431][   T10] usb 3-1: too many configurations: 123, using maximum allowed: 8
[  182.841859][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.842938][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.844866][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.847251][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.848218][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.918587][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.948497][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.966001][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.979910][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  182.979941][   T10] usb 3-1: SerialNumber: syz
[  182.998942][   T10] usb 3-1: config 0 descriptor??
[  183.018853][   T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12
[  183.078810][ T8057] option changes via remount are deprecated (pid=8056 comm=syz.1.817)
[  183.078836][ T8057] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 ""
[  183.131148][ T5763] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  183.209964][   T55] Bluetooth: hci4: command 0x0c1a tx timeout
[  183.290078][ T5763] usb 1-1: Using ep0 maxpacket: 16
[  183.294195][ T5763] usb 1-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27
[  183.295227][ T5763] usb 1-1: config 0 has no interfaces?
[  183.325812][ T4989] bcm5974 3-1:0.0: could not read from device
[  183.334077][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.334152][ T5763] usb 1-1: Product: syz
[  183.334194][ T5763] usb 1-1: Manufacturer: syz
[  183.334237][ T5763] usb 1-1: SerialNumber: syz
[  183.367503][ T5763] usb 1-1: config 0 descriptor??
[  183.396455][ T4989] bcm5974 3-1:0.0: could not read from device
[  183.421436][   T10] usb 3-1: USB disconnect, device number 5
[  183.449033][ T4989] bcm5974 3-1:0.0: could not read from device
[  183.470914][ T4989] bcm5974 3-1:0.0: could not read from device
[  183.606446][ T5821] usb 1-1: USB disconnect, device number 10
[  183.707360][ T8073] loop1: detected capacity change from 0 to 4096
[  183.744313][ T8073] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  183.814795][ T8073] ntfs3(loop1): ino=1a, mi_enum_attr
[  183.814939][ T8073] ntfs3(loop1): ino=1a, mi_enum_attr
[  183.814960][ T8073] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  183.965081][ T8073] ntfs3(loop1): ino=1a, mi_enum_attr
[  184.256682][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'.
[  184.313662][ T8072] loop4: detected capacity change from 0 to 40427
[  184.641654][ T8072] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  184.665475][ T8072] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  184.690753][ T5821] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  184.715120][ T8095] 8021q: adding VLAN 0 to HW filter on device macsec2
[  184.952224][ T5634] bio_check_eod: 31 callbacks suppressed
[  184.952247][ T5634] syz-executor: attempt to access beyond end of device
[  184.952247][ T5634] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  184.992785][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  184.992817][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  184.992831][ T5634] Call Trace:
[  184.992840][ T5634]  <TASK>
[  184.992849][ T5634]  dump_stack_lvl+0xe8/0x150
[  184.992891][ T5634]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  184.992933][ T5634]  f2fs_write_end_bio+0xf7d/0x1310
[  184.992983][ T5634]  __submit_merged_bio+0x258/0x6a0
[  184.993005][ T5634]  ? rcu_is_watching+0x16/0xb0
[  184.993045][ T5634]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  184.993085][ T5634]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  184.993146][ T5634]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  184.993199][ T5634]  ? __lock_acquire+0x747/0x2de0
[  184.993249][ T5634]  ? __lock_acquire+0x747/0x2de0
[  184.993283][ T5634]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  184.993313][ T5634]  ? __lock_acquire+0x747/0x2de0
[  184.993395][ T5634]  ? rcu_is_watching+0x16/0xb0
[  184.993432][ T5634]  ? rcu_is_watching+0x16/0xb0
[  184.993463][ T5634]  ? __kasan_check_byte+0x12/0x40
[  184.993513][ T5634]  ? is_bpf_text_address+0x292/0x2b0
[  184.993536][ T5634]  ? is_bpf_text_address+0x26/0x2b0
[  184.993563][ T5634]  ? kernel_text_address+0xa5/0xe0
[  184.993594][ T5634]  ? __kernel_text_address+0xd/0x30
[  184.993621][ T5634]  ? unwind_get_return_address+0x4d/0x90
[  184.993653][ T5634]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  184.993680][ T5634]  ? arch_stack_walk+0xfb/0x150
[  184.993721][ T5634]  ? stack_trace_save+0xa9/0x100
[  184.993749][ T5634]  ? __pfx_stack_trace_save+0x10/0x10
[  184.993780][ T5634]  ? check_path+0x21/0x40
[  184.993816][ T5634]  ? add_lock_to_list+0xc7/0x100
[  184.993851][ T5634]  ? lockdep_unlock+0x5c/0xd0
[  184.993874][ T5634]  ? __lock_acquire+0x1511/0x2de0
[  184.993933][ T5634]  ? do_raw_spin_lock+0x12b/0x2f0
[  184.993968][ T5634]  ? do_raw_spin_unlock+0xf5/0x200
[  184.993993][ T5634]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  184.994024][ T5634]  do_writepages+0x338/0x560
[  184.994061][ T5634]  ? do_raw_spin_unlock+0xf5/0x200
[  184.994089][ T5634]  filemap_fdatawrite+0x1e9/0x2f0
[  184.994121][ T5634]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  184.994197][ T5634]  ? do_raw_spin_unlock+0xf5/0x200
[  184.994226][ T5634]  f2fs_sync_dirty_inodes+0x471/0x970
[  184.994312][ T5634]  f2fs_write_checkpoint+0x867/0x24d0
[  184.994416][ T5634]  kill_f2fs_super+0x2df/0x700
[  184.994450][ T5634]  ? rcu_do_enqueue+0x616/0x870
[  184.994477][ T5634]  ? lockdep_hardirqs_on+0x7b/0x110
[  184.994504][ T5634]  ? __pfx_kill_f2fs_super+0x10/0x10
[  184.994550][ T5634]  ? __pfx_call_rcu+0x10/0x10
[  184.994578][ T5634]  ? shrinker_free+0x2a7/0x3b0
[  184.994607][ T5634]  deactivate_locked_super+0xbe/0x110
[  184.994638][ T5634]  cleanup_mnt+0x204/0x2a0
[  184.994675][ T5634]  task_work_run+0x1d9/0x260
[  184.994707][ T5634]  ? __pfx_task_work_run+0x10/0x10
[  184.994745][ T5634]  exit_to_user_mode_loop+0x204/0x770
[  184.994773][ T5634]  ? rcu_is_watching+0x16/0xb0
[  184.994810][ T5634]  do_syscall_64+0x32c/0x530
[  184.994836][ T5634]  ? trace_irq_disable+0x3b/0x140
[  184.994866][ T5634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.994889][ T5634]  ? clear_bhb_loop+0x70/0xc0
[  184.994916][ T5634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.994937][ T5634] RIP: 0033:0x00007fd920ba0d57
[  184.994960][ T5634] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  184.994979][ T5634] RSP: 002b:00007ffdbcd39048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  184.995003][ T5634] RAX: 0000000000000000 RBX: 00007fd920c36fb3 RCX: 00007fd920ba0d57
[  184.995019][ T5634] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbcd39100
[  184.995033][ T5634] RBP: 00007ffdbcd39100 R08: 00007ffdbcd3a100 R09: 00000000ffffffff
[  184.995048][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbcd3a190
[  184.995063][ T5634] R13: 00007fd920c36fb3 R14: 000000000002d1cb R15: 00007ffdbcd3a1d0
[  184.995099][ T5634]  </TASK>
[  184.998321][ T5634] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  185.419509][ T5641] Bluetooth: hci4: command 0x0c1a tx timeout
[  185.512274][   T55] block nbd2: Receive control failed (result -32)
[  186.123640][ T8121] tipc: Started in network mode
[  186.123691][ T8121] tipc: Node identity 7f000001, cluster identity 4711
[  186.123946][ T8121] tipc: New replicast peer: 127.0.0.1
[  186.124368][ T8121] tipc: Enabled bearer <udp:syz0>, priority 10
[  186.208185][ T8121] tipc: Disabling bearer <udp:syz0>
[  186.232820][ T8123] loop1: detected capacity change from 0 to 512
[  186.288966][ T8123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.330743][   T33] audit: type=1804 audit(1793888915.344:17): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.840" name="/newroot/186/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  186.382690][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.403171][ T8111] loop3: detected capacity change from 0 to 32768
[  186.468357][ T8111] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  186.583225][ T8111] XFS (loop3): Ending clean mount
[  186.648381][ T8141] jffs2: notice: (8141) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  186.718485][   T33] audit: type=1400 audit(1793888915.734:18): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=8144 comm="syz.2.845" name="p" offset=79
[  186.744588][   T33] audit: type=1800 audit(1793888915.764:19): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.835" name="file1" dev="loop3" ino=4422 res=0 errno=-22
[  186.911196][ T5636] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  187.439850][   T55] Bluetooth: hci4: command 0x0c1a tx timeout
[  187.683324][ T8148] loop1: detected capacity change from 0 to 32768
[  187.697993][ T8148] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.846 (8148)
[  187.725196][ T8148] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.725233][ T8148] BTRFS info (device loop1): using sha256 checksum algorithm
[  187.866815][ T8148] BTRFS info (device loop1): enabling ssd optimizations
[  187.866849][ T8148] BTRFS info (device loop1): turning on async discard
[  187.866868][ T8148] BTRFS info (device loop1): enabling free space tree
[  188.073700][ T8148] BTRFS error: failed to open device for path j���}����S�3K����
=?)�6�"ظ!z�έ��/EX�@�ހ],}`��=��.bry��rm�X���!�	!H�J�C�	��QE�VĪ�8u v�E�N�7�M�%���)K�
[  188.073700][ T8148] 8O��߳���&Q���̏{ÿ��c4;c�R���?G�w��/'���!aw��?����`iN�?��ƛ`C�n��s�L�;��C�����:.�V&�g�)�� �ϣ�/���ӕda93R	�2��6�L��$d��;L with flags 0x1: -2
[  188.226629][ T5635] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  188.366672][ T8180] loop2: detected capacity change from 0 to 128
[  188.853165][ T8159] loop3: detected capacity change from 0 to 32768
[  188.854179][ T8159] xfs: Deprecated parameter 'noattr2'
[  188.854199][ T8159] XFS: noattr2 mount option is deprecated.
[  188.898230][ T8159] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  189.013691][ T8159] XFS (loop3): Ending clean mount
[  189.043945][ T8159] XFS (loop3): User initiated shutdown received.
[  189.043990][ T8159] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  189.044031][ T8159] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  189.206359][ T5636] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  189.714146][ T8219] loop2: detected capacity change from 0 to 256
[  189.940169][ T8227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.871'.
[  190.094308][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'.
[  190.094350][ T8233] netlink: 'syz.4.875': attribute type 30 has an invalid length.
[  190.136700][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'.
[  190.136739][ T8233] netlink: 'syz.4.875': attribute type 30 has an invalid length.
[  190.169425][ T2234] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.169475][ T2234] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.169512][ T2234] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.169549][ T2234] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.263373][ T8238] loop2: detected capacity change from 0 to 2048
[  190.268954][ T8238] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  190.308952][ T8238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  190.584291][ T8217] loop1: detected capacity change from 0 to 32768
[  190.626309][ T8217] JBD2: Ignoring recovery information on journal
[  190.758403][ T8217] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  190.815375][ T8262] netlink: 80 bytes leftover after parsing attributes in process `syz.4.885'.
[  191.007797][ T8270] loop4: detected capacity change from 0 to 512
[  191.008630][ T8270] EXT4-fs: Ignoring removed bh option
[  191.053983][ T8270] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.890: inode #13: comm syz.4.890: iget: illegal inode #
[  191.054024][ T8270] loop4: lost filesystem error report for type 5 error -117
[  191.056780][ T8270] EXT4-fs (loop4): Remounting filesystem read-only
[  191.066051][ T8270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.142621][ T5635] ocfs2: Unmounting device (7,1) on (node local)
[  191.177326][ T8276] ip_tables: iptables: counters copy to user failed while replacing table
[  191.189961][ T8276] ip_tables: iptables: counters copy to user failed while replacing table
[  191.224890][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.855245][ T8296] loop3: detected capacity change from 0 to 512
[  191.859118][ T8296] EXT4-fs: Ignoring removed mblk_io_submit option
[  191.889001][ T8296] EXT4-fs error (device loop3): ext4_iget_extra_inode:6027: inode #15: comm syz.3.902: corrupted in-inode xattr: e_value size too large
[  191.889052][ T8296] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  191.889402][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  191.889423][    C1] EXT4-fs (loop3): initial error at time 1793888920: ext4_iget_extra_inode:6027: inode 15
[  191.889454][    C1] EXT4-fs (loop3): last error at time 1793888920: ext4_iget_extra_inode:6027: inode 15
[  191.921646][ T8296] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.902: couldn't read orphan inode 15 (err -117)
[  191.921753][ T8296] loop3: lost filesystem error report for type 5 error -117
[  191.941984][ T8296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.023296][ T8296] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  192.092035][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.690037][ T8317] netlink: 84 bytes leftover after parsing attributes in process `syz.4.910'.
[  192.690169][ T8317] netlink: 173 bytes leftover after parsing attributes in process `syz.4.910'.
[  194.175384][ T8374] netlink: 9 bytes leftover after parsing attributes in process `syz.3.939'.
[  194.193090][ T8374] gretap0: entered promiscuous mode
[  194.209742][ T8374] netlink: 5 bytes leftover after parsing attributes in process `syz.3.939'.
[  194.209852][ T8374] 0��{X��: renamed from gretap0
[  194.215426][ T8374] 0��{X��: left promiscuous mode
[  194.215448][ T8374] 0��{X��: entered allmulticast mode
[  194.218059][ T8374] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  194.329024][ T8376] loop1: detected capacity change from 0 to 2048
[  194.379140][ T8376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  194.485297][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  194.485359][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  194.527476][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  194.715377][ T8383] loop2: detected capacity change from 0 to 32768
[  194.738305][ T8383] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  194.763983][ T8383] XFS (loop2): Ending clean mount
[  194.813916][ T8383] XFS (loop2): User initiated shutdown received.
[  194.813987][ T8383] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:458).  Shutting down filesystem.
[  194.814039][ T8383] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  194.874354][ T5637] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  195.751043][ T8423] loop1: detected capacity change from 0 to 2048
[  195.788035][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.815643][ T8423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.916042][ T8431] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  195.941262][ T8431] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 206 with error 28
[  195.941301][ T8431] EXT4-fs (loop1): This should not happen!! Data will be lost
[  195.941301][ T8431] 
[  195.941320][ T8431] EXT4-fs (loop1): Total free blocks count 0
[  195.941335][ T8431] EXT4-fs (loop1): Free/Dirty block details
[  195.941350][ T8431] EXT4-fs (loop1): free_blocks=4096
[  195.941366][ T8431] EXT4-fs (loop1): dirty_blocks=240
[  195.941381][ T8431] EXT4-fs (loop1): Block reservation details
[  195.941394][ T8431] EXT4-fs (loop1): i_reserved_data_blocks=15
[  196.107230][   T53] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28
[  196.144650][ T5635] EXT4-fs warning (device loop1): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost
[  196.163708][ T8434] loop3: detected capacity change from 0 to 2048
[  196.228442][ T8439] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  196.283553][ T8439] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  196.283586][ T8439] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  196.341785][ T8439] Remounting filesystem read-only
[  196.916591][ T8477] loop2: detected capacity change from 0 to 512
[  196.978011][   T33] audit: type=1800 audit(1793888925.994:20): pid=8477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.978" name="file2" dev="loop2" ino=124 res=0 errno=-22
[  197.002278][ T8477] FAT-fs (loop2): error, corrupted file size (i_pos 550, 40752)
[  197.002310][ T8477] FAT-fs (loop2): Filesystem has been set read-only
[  198.293767][ T8509] loop1: detected capacity change from 0 to 32768
[  198.312658][ T8529] ./file0: Can't lookup blockdev
[  198.517142][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'.
[  199.089593][   T33] audit: type=1400 audit(2000000001.440:21): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=8553 comm="syz.1.1002" name="p" offset=69
[  199.628701][ T8579] loop3: detected capacity change from 0 to 4096
[  199.638725][   T55] Bluetooth: hci0: Zero size dump init pkt
[  199.654240][ T8579] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  199.980195][ T8588] loop1: detected capacity change from 0 to 2048
[  200.027638][ T8588] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.047804][ T8586] loop2: detected capacity change from 0 to 32768
[  200.082693][ T8586] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  200.082728][ T8586] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  200.163457][ T8586] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  200.176529][ T5821] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  200.176548][ T5821] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  200.180063][ T8579] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  200.213354][ T8579] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  200.487769][ T5821] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 311ms
[  200.524354][ T5821] gfs2: fsid=syz:syz.0: jid=0: Done
[  200.525991][ T8586] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  200.726003][ T8605] loop4: detected capacity change from 0 to 1024
[  200.769080][   T33] audit: type=1326 audit(2000000003.110:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.1.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63c19fb19 code=0x7ffc0000
[  200.796274][   T33] audit: type=1326 audit(2000000003.140:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.1.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63c19fb19 code=0x7ffc0000
[  200.799213][   T33] audit: type=1326 audit(2000000003.140:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.1.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63c19fb19 code=0x7ffc0000
[  200.855634][   T33] audit: type=1326 audit(2000000003.200:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.1.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd63c19fb19 code=0x7ffc0000
[  200.855689][   T33] audit: type=1326 audit(2000000003.200:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.1.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63c19fb19 code=0x7ffc0000
[  200.855735][   T33] audit: type=1326 audit(2000000003.200:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.1.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63c19fb19 code=0x7ffc0000
[  200.856083][   T33] audit: type=1326 audit(2000000003.200:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.1.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63c19fb19 code=0x7ffc0000
[  200.856622][   T33] audit: type=1326 audit(2000000003.200:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.1.1030" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63c19fb19 code=0x7ffc0000
[  201.010994][ T8605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.016518][ T8586] gfs2: fsid=syz:syz.0: found 1 quota changes
[  201.139540][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.301899][ T8619] loop4: detected capacity change from 0 to 64
[  202.032604][ T8635] loop1: detected capacity change from 0 to 4096
[  202.088489][ T8635] ntfs3(loop1): ino=9, mi_enum_attr
[  202.088527][ T8635] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  202.095078][ T8635] ntfs3(loop1): ino=9, mi_enum_attr
[  202.095498][ T8635] ntfs3(loop1): ino=b, mi_enum_attr
[  202.095710][ T8635] ntfs3(loop1): Failed to load $Extend (-22).
[  202.095762][ T8635] ntfs3(loop1): Failed to initialize $Extend.
[  202.538017][ T8658] loop9: detected capacity change from 0 to 7
[  202.558144][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.558428][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  202.579125][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.579203][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  202.598376][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.598461][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  202.598604][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.598672][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  202.598824][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.598900][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  202.599044][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.599107][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  202.599297][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.599378][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  202.609491][ T8658] ldm_validate_partition_table(): Disk read failed.
[  202.688554][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.689026][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  202.704015][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.704322][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  202.707530][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.707744][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  202.724345][ T8658] Dev loop9: unable to read RDB block 0
[  202.726037][ T8660] ieee802154 phy0 wpan0: encryption failed: -22
[  202.757508][ T8658]  loop9: unable to read partition table
[  202.758109][ T8658] loop9: partition table beyond EOD, truncated
[  202.758206][ T8658] loop_reread_partitions: partition scan of loop9 (��) failed (rc=-5)
[  203.075274][ T8671] loop3: detected capacity change from 0 to 256
[  203.148380][ T8671] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fcb6, chksum : 0xd46cbfa8, utbl_chksum : 0xe619d30d)
[  203.148763][ T8671] exFAT-fs (loop3): failed to load alloc-bitmap
[  203.148776][ T8671] exFAT-fs (loop3): failed to recognize exfat type
[  203.679052][ T8705] loop3: detected capacity change from 0 to 512
[  203.718482][ T8705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.821763][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.939458][ T1235] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  204.049453][ T5763] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  204.089400][ T1235] usb 2-1: Using ep0 maxpacket: 32
[  204.089999][ T1235] usb 2-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  204.091053][ T1235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.097367][ T1235] usb 2-1: config 0 descriptor??
[  204.129519][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  204.209982][ T5763] usb 1-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00
[  204.212399][ T5763] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.212423][ T5763] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  204.212442][ T5763] usb 1-1: config 0 interface 0 has no altsetting 0
[  204.212465][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.216639][ T5763] usb 1-1: config 0 descriptor??
[  204.289747][   T10] usb 4-1: Using ep0 maxpacket: 16
[  204.290336][   T10] usb 4-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00
[  204.291473][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.291526][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.296324][   T10] usb 4-1: config 0 descriptor??
[  204.348058][   T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13
[  204.353704][ T1235] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  204.400244][ T1235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  204.406003][ T1235] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  204.406059][ T1235] usb 2-1: media controller created
[  204.460201][ T1235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  204.569555][ T1235] az6027: usb out operation failed. (-71)
[  204.571720][ T1235] az6027: usb out operation failed. (-71)
[  204.571758][ T1235] stb0899_attach: Driver disabled by Kconfig
[  204.571767][ T1235] az6027: no front-end attached
[  204.571767][ T1235] 
[  204.573629][ T1235] az6027: usb out operation failed. (-71)
[  204.573647][ T1235] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  204.577526][ T1235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14
[  204.645621][ T4989] bcm5974 4-1:0.0: could not read from device
[  204.666322][ T4989] bcm5974 4-1:0.0: could not read from device
[  204.682799][ T4989] bcm5974 4-1:0.0: could not read from device
[  204.703454][ T4989] bcm5974 4-1:0.0: could not read from device
[  204.703846][   T10] usb 4-1: USB disconnect, device number 10
[  204.707226][ T5763] hid-multitouch 0003:0EEF:72C4.0006: unbalanced delimiter at end of report description
[  204.708008][ T5763] hid-multitouch 0003:0EEF:72C4.0006: probe with driver hid-multitouch failed with error -22
[  204.726664][ T1235] dvb-usb: schedule remote query interval to 400 msecs.
[  204.726689][ T1235] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  204.797993][ T1235] usb 2-1: USB disconnect, device number 6
[  204.920763][ T5763] usb 1-1: USB disconnect, device number 11
[  205.024668][ T1235] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  205.140417][ T8727] kvm: user requested TSC rate below hardware speed
[  205.592276][ T8752] loop3: detected capacity change from 0 to 512
[  205.666888][ T8752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.847140][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.262611][ T8763] loop2: detected capacity change from 0 to 32768
[  206.263325][ T8763] btrfs: Unknown parameter 'fragment'
[  206.930605][ T8793] loop1: detected capacity change from 0 to 1024
[  206.999005][ T8793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  206.999188][ T8793] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.152434][ T8793] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1112: bg 0: block 112: padding at end of block bitmap is not set
[  207.188750][ T8793] EXT4-fs (loop1): Remounting filesystem read-only
[  207.416028][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  207.606127][ T8802] ieee802154 phy0 wpan0: encryption failed: -22
[  207.718404][ T8809] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  208.230070][ T8823] loop4: detected capacity change from 0 to 512
[  208.251624][ T8823] EXT4-fs (loop4): Test dummy encryption mode enabled
[  208.251652][ T8823] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  208.251665][ T8823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  208.297670][ T8823] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.1124: bad orphan inode 131083
[  208.297706][ T8823] loop4: lost filesystem error report for type 5 error -117
[  208.299275][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  208.299299][    C1] EXT4-fs (loop4): initial error at time 2000000010: ext4_orphan_get:1430
[  208.299324][    C1] EXT4-fs (loop4): last error at time 2000000010: ext4_orphan_get:1430
[  208.320195][ T8823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.571394][ T8823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.742985][ T8833] loop1: detected capacity change from 0 to 512
[  208.806817][ T8833] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1128: iget: bad i_size value: 38620345925642
[  208.806868][ T8833] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  208.816868][ T8833] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1128: couldn't read orphan inode 15 (err -117)
[  208.816965][ T8833] loop1: lost filesystem error report for type 5 error -117
[  208.851034][ T8833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.906045][   T33] kauditd_printk_skb: 227 callbacks suppressed
[  208.906068][   T33] audit: type=1800 audit(2000000011.250:257): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1128" name="file1" dev="loop1" ino=18 res=0 errno=-22
[  209.036989][ T8833] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1128: bg 0: block 5: invalid block bitmap
[  209.077179][ T8833] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  209.077218][ T8833] EXT4-fs (loop1): This should not happen!! Data will be lost
[  209.077218][ T8833] 
[  209.077235][ T8833] EXT4-fs (loop1): Total free blocks count 0
[  209.077250][ T8833] EXT4-fs (loop1): Free/Dirty block details
[  209.077352][ T8833] EXT4-fs (loop1): free_blocks=0
[  209.077390][ T8833] EXT4-fs (loop1): dirty_blocks=4
[  209.077405][ T8833] EXT4-fs (loop1): Block reservation details
[  209.077418][ T8833] EXT4-fs (loop1): i_reserved_data_blocks=4
[  209.294806][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.583594][ T8843] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  210.083156][ T8841] loop1: detected capacity change from 0 to 32768
[  210.102630][ T8841] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1131 (8841)
[  210.176871][ T8841] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  210.176913][ T8841] BTRFS info (device loop1): using crc32c checksum algorithm
[  210.305318][ T8858] TCP: tcp_parse_options: Illegal window scaling value 75 > 14 received
[  210.305348][ T8858] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received
[  210.415160][ T8841] BTRFS info (device loop1): enabling ssd optimizations
[  210.415192][ T8841] BTRFS info (device loop1): turning on async discard
[  210.415219][ T8841] BTRFS info (device loop1): enabling free space tree
[  210.497965][ T8841] BTRFS critical (device loop1 state EH): emergency shutdown
[  210.570746][ T5635] BTRFS info (device loop1 state EH): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  210.677521][ T8865] loop2: detected capacity change from 0 to 256
[  210.678192][ T8865] vfat: Unknown parameter '��������0x000000000000000001777777777777777777777a�׃�����䢬ZuǨf����	~�]�y'P�z�<�\�w��@�qj��$�1�ͽ�ۛ�|�����Og�
C-�i��GV��K�r�U$��#6�48��^D ܻ��6���E�h^\[�&��А�1�Q������o��&�V�-�R���������'
[  211.207829][ T8874] loop3: detected capacity change from 0 to 2048
[  211.291734][ T8874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.487414][ T8874] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  211.564687][ T8874] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  211.564735][ T8874] EXT4-fs (loop3): This should not happen!! Data will be lost
[  211.564735][ T8874] 
[  211.564754][ T8874] EXT4-fs (loop3): Total free blocks count 0
[  211.564769][ T8874] EXT4-fs (loop3): Free/Dirty block details
[  211.564784][ T8874] EXT4-fs (loop3): free_blocks=4096
[  211.564800][ T8874] EXT4-fs (loop3): dirty_blocks=48
[  211.564815][ T8874] EXT4-fs (loop3): Block reservation details
[  211.564828][ T8874] EXT4-fs (loop3): i_reserved_data_blocks=3
[  211.899343][ T5696] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  212.049415][ T5696] usb 2-1: Using ep0 maxpacket: 32
[  212.050053][ T5696] usb 2-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40
[  212.051204][ T5696] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.051236][ T5696] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.052907][ T5696] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  212.052933][ T5696] usb 2-1: Product: syz
[  212.052949][ T5696] usb 2-1: Manufacturer: syz
[  212.121165][ T5696] hub 2-1:4.0: USB hub found
[  212.269407][ T5696] hub 2-1:4.0: 4 ports detected
[  212.269891][ T5696] hub 2-1:4.0: insufficient power available to use all downstream ports
[  212.470892][ T5696] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  212.532441][ T5696] usb 2-1: USB disconnect, device number 7
[  214.566284][ T5636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.633529][ T8897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1152'.
[  214.783379][ T8905] Format for deleting device is "id" (uint).
[  214.995065][ T8901] bond0: (slave bond_slave_0): Releasing backup interface
[  215.044859][ T8909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  215.044879][ T8909] IPv6: NLM_F_CREATE should be set when creating new route
[  215.044986][ T8909] IPv6: NLM_F_CREATE should be set when creating new route
[  215.045013][ T8909] IPv6: NLM_F_CREATE should be set when creating new route
[  215.446922][ T8899] loop4: detected capacity change from 0 to 32768
[  215.543181][ T8899] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  215.614243][ T8899] XFS (loop4): Ending clean mount
[  215.828713][ T5634] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  216.034864][ T8911] loop1: detected capacity change from 0 to 32768
[  216.036335][ T8911] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1157 (8911)
[  216.044663][ T8931] netlink: 'syz.0.1162': attribute type 5 has an invalid length.
[  216.073353][ T8911] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  216.073390][ T8911] BTRFS info (device loop1): using crc32c checksum algorithm
[  216.138332][ T8913] loop3: detected capacity change from 0 to 32768
[  216.140978][ T8913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1155 (8913)
[  216.162339][ T8913] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  216.162385][ T8913] BTRFS info (device loop3): using sha256 checksum algorithm
[  216.323019][ T8911] BTRFS info (device loop1): enabling ssd optimizations
[  216.323080][ T8911] BTRFS info (device loop1): turning on flush-on-commit
[  216.323099][ T8911] BTRFS info (device loop1): enabling free space tree
[  216.323117][ T8911] BTRFS info (device loop1): enabling auto defrag
[  216.323136][ T8911] BTRFS info (device loop1): use lzo compression, level 1
[  216.376619][ T8913] BTRFS info (device loop3): enabling ssd optimizations
[  216.376653][ T8913] BTRFS info (device loop3): turning on async discard
[  216.376672][ T8913] BTRFS info (device loop3): enabling free space tree
[  216.556183][ T8913] BTRFS error: failed to open device for path j���}����S�3K����
=?)�6�"ظ!z�έ��/EX�@�ހ],}`��=��.bry��rm�X���!�	!H�J�C�	��QE�VĪ�8u v�E�N�7�M�%���)K�
[  216.556183][ T8913] 8O��߳���&Q���̏{ÿ��c4;c�R���?G�w��/'���!aw��?����`iN�?��ƛ`C�n��s�L�;��C�����:.�V&�g�)�� �ϣ�/���ӕda93R	�2��6�L��$d��;L with flags 0x1: -2
[  216.665426][ T8911] BTRFS critical (device loop1 state EH): emergency shutdown
[  216.735430][ T5636] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  216.836532][ T5635] BTRFS info (device loop1 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.837747][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.838521][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.871840][ T9026] netlink: 'syz.3.1189': attribute type 4 has an invalid length.
[  219.990043][ T9014] loop2: detected capacity change from 0 to 32768
[  220.056614][ T9014] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.174050][ T9037] loop4: detected capacity change from 0 to 1024
[  220.300714][ T9037] hfsplus: can't free extent: start 2889, count 1
[  220.332653][ T9037] hfsplus: found bad thread record in catalog
[  220.332896][ T9037] No source specified
[  220.351411][ T9014] XFS (loop2): Ending clean mount
[  220.371489][ T9014] XFS (loop2): Quotacheck needed: Please wait.
[  220.416262][ T9037] hfsplus: found bad thread record in catalog
[  220.531000][ T9046] loop3: detected capacity change from 0 to 8
[  220.601052][ T1017] hfsplus: found bad thread record in catalog
[  220.680658][ T9048] loop4: detected capacity change from 0 to 512
[  220.699515][ T9048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  220.699646][ T9048] System zones: 1-12
[  220.721634][ T9048] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.1198: missing EA_INODE flag
[  220.721691][ T9048] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  220.725856][ T9048] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1198: error while reading EA inode 12 err=-117
[  220.725896][ T9048] loop4: lost filesystem error report for type 5 error -117
[  220.726580][ T9048] EXT4-fs (loop4): 1 orphan inode deleted
[  220.728822][ T9048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.856042][ T9014] XFS (loop2): Quotacheck: Done.
[  220.889760][ T9048] fscrypt (loop4, inode 15): Reserved bits set in encryption policy
[  220.987878][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.061142][ T5637] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  221.364174][ T9066] loop1: detected capacity change from 0 to 64
[  221.830067][ T9063] loop3: detected capacity change from 0 to 32768
[  221.836553][ T9063] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1204 (9063)
[  221.872116][ T9063] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  221.872155][ T9063] BTRFS info (device loop3): using sha256 checksum algorithm
[  221.981158][ T9063] BTRFS info (device loop3): turning on sync discard
[  221.981180][ T9063] BTRFS info (device loop3): enabling free space tree
[  221.981194][ T9063] BTRFS info (device loop3): use lzo compression, level 1
[  255.921633][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  255.921697][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  317.361943][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  317.362004][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  378.802768][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  378.802837][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  385.199571][   T36] INFO: task jbd2/sda1-8:4967 blocked in I/O wait for more than 143 seconds.
[  385.199601][   T36]       Not tainted syzkaller #0
[  385.199613][   T36] "echo 0 > /proc/sys/kern
** replaying previous printk message **
[  385.199613][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  385.199623][   T36] task:jbd2/sda1-8     state:D stack:25192 pid:4967  tgid:4967  ppid:2      task_flags:0x240040 flags:0x00080000
[  385.199699][   T36] Call Trace:
[  385.199707][   T36]  <TASK>
[  385.199721][   T36]  __schedule+0x17dd/0x5830
[  385.199840][   T36]  ? blk_mq_dispatch_list+0xd2c/0xe10
[  385.199905][   T36]  ? __pfx___schedule+0x10/0x10
[  385.199939][   T36]  ? schedule+0x90/0x2b0
[  385.199966][   T36]  schedule+0x164/0x2b0
[  385.199992][   T36]  io_schedule+0x7f/0xd0
[  385.200018][   T36]  bit_wait_io+0x13/0x110
[  385.200046][   T36]  __wait_on_bit+0xac/0x300
[  385.200072][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.200101][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  385.200160][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.200186][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  385.200215][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  385.200254][   T36]  ? __wait_on_buffer+0xe/0x80
[  385.200343][   T36]  jbd2_journal_commit_transaction+0x2f6e/0x5c80
[  385.200425][   T36]  ? trace_hrtimer_start+0x82/0x200
[  385.200492][   T36]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  385.200539][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  385.200590][   T36]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  385.200641][   T36]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  385.200664][   T36]  ? __timer_delete_sync+0x4a7/0x520
[  385.200700][   T36]  kjournald2+0x3bc/0x740
[  385.200786][   T36]  ? __pfx_kjournald2+0x10/0x10
[  385.200813][   T36]  ? __pfx_autoremove_wake_function+0x10/0x10
[  385.200848][   T36]  ? __kthread_parkme+0x71/0x1f0
[  385.200873][   T36]  ? __kthread_parkme+0x199/0x1f0
[  385.200902][   T36]  kthread+0x38b/0x480
[  385.200927][   T36]  ? __pfx_kjournald2+0x10/0x10
[  385.200952][   T36]  ? __pfx_kthread+0x10/0x10
[  385.200979][   T36]  ret_from_fork+0x514/0xb70
[  385.201009][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  385.201034][   T36]  ? __switch_to+0xc78/0x1410
[  385.201060][   T36]  ? __pfx_kthread+0x10/0x10
[  385.201088][   T36]  ret_from_fork_asm+0x1a/0x30
[  385.201160][   T36]  </TASK>
[  385.201185][   T36] INFO: task syz-executor:5624 blocked in I/O wait for more than 143 seconds.
[  385.201204][   T36]       Not tainted syzkaller #0
[  385.201215][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  385.201225][   T36] task:syz-executor    state:D stack:22312 pid:5624  tgid:5624  ppid:5623   task_flags:0x440100 flags:0x00080000
[  385.201287][   T36] Call Trace:
[  385.201294][   T36]  <TASK>
[  385.201308][   T36]  __schedule+0x17dd/0x5830
[  385.201364][   T36]  ? __pfx___schedule+0x10/0x10
[  385.201400][   T36]  ? schedule+0x90/0x2b0
[  385.201428][   T36]  schedule+0x164/0x2b0
[  385.201455][   T36]  io_schedule+0x7f/0xd0
[  385.201481][   T36]  bit_wait_io+0x13/0x110
[  385.201509][   T36]  __wait_on_bit+0xac/0x300
[  385.201535][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.201565][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  385.201594][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.201619][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  385.201650][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  385.201696][   T36]  do_get_write_access+0x658/0x10c0
[  385.201747][   T36]  jbd2_journal_get_write_access+0x1d7/0x230
[  385.201784][   T36]  __ext4_journal_get_write_access+0xec/0x620
[  385.201858][   T36]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  385.201881][   T36]  ? trace_kmem_cache_alloc+0x29/0xe0
[  385.201908][   T36]  ? jbd2__journal_start+0x145/0x5d0
[  385.201948][   T36]  ext4_reserve_inode_write+0x294/0x360
[  385.202009][   T36]  __ext4_mark_inode_dirty+0x141/0x7e0
[  385.202075][   T36]  ext4_dirty_inode+0xd0/0x110
[  385.202101][   T36]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  385.202125][   T36]  __mark_inode_dirty+0x3a8/0x13b0
[  385.202186][   T36]  file_update_time_flags+0x399/0x440
[  385.202276][   T36]  ext4_page_mkwrite+0x21f/0x1470
[  385.202321][   T36]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  385.202344][   T36]  ? __lock_acquire+0x747/0x2de0
[  385.202383][   T36]  do_page_mkwrite+0x147/0x310
[  385.202418][   T36]  do_wp_page+0x1a77/0x4c30
[  385.202462][   T36]  ? __pfx_do_wp_page+0x10/0x10
[  385.202482][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  385.202509][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  385.202545][   T36]  handle_mm_fault+0x19c9/0x2f80
[  385.202583][   T36]  ? handle_mm_fault+0xee/0x2f80
[  385.202616][   T36]  ? __pfx_handle_mm_fault+0x10/0x10
[  385.202637][   T36]  ? lock_vma_under_rcu+0x45a/0x500
[  385.202661][   T36]  ? __pfx_set_user_sigmask+0x10/0x10
[  385.202717][   T36]  do_user_addr_fault+0xb35/0x1480
[  385.202759][   T36]  ? trace_page_fault_user+0x84/0x1e0
[  385.202791][   T36]  exc_page_fault+0x6a/0xc0
[  385.202869][   T36]  asm_exc_page_fault+0x26/0x30
[  385.202898][   T36] RIP: 0033:0x00007fac3947df91
[  385.202921][   T36] RSP: 002b:00007fffa4ca28e0 EFLAGS: 00010202
[  385.202949][   T36] RAX: 0000000000000010 RBX: 0000000000000001 RCX: 0000000000000004
[  385.202968][   T36] RDX: 00007fac375fc000 RSI: 000000000000380e RDI: ffffffff866fffff
[  385.202984][   T36] RBP: 00007fffa4ca2de0 R08: 0000000000001000 R09: 0000555588998e80
[  385.203000][   T36] R10: 00000000000000a6 R11: 0000555588999140 R12: 00007fffa4ca2c20
[  385.203016][   T36] R13: 00007fffa4ca2a10 R14: 585858582e7a7973 R15: 00007fffa4ca2960
[  385.203045][   T36]  ? scsi_host_set_state+0xef/0x2e0
[  385.203116][   T36]  </TASK>
[  385.203172][   T36] INFO: task kworker/u8:12:6880 blocked in I/O wait for more than 143 seconds.
[  385.203190][   T36]       Not tainted syzkaller #0
[  385.203202][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  385.203212][   T36] task:kworker/u8:12   state:D stack:21544 pid:6880  tgid:6880  ppid:2      task_flags:0x4248060 flags:0x00080000
[  385.203280][   T36] Workqueue: writeback wb_workfn (flush-8:0)
[  385.203309][   T36] Call Trace:
[  385.203317][   T36]  <TASK>
[  385.203330][   T36]  __schedule+0x17dd/0x5830
[  385.203356][   T36]  ? blk_mq_flush_plug_list+0x415/0x540
[  385.203396][   T36]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  385.203433][   T36]  ? __blk_flush_plug+0x416/0x4d0
[  385.203487][   T36]  ? __pfx___schedule+0x10/0x10
[  385.203520][   T36]  ? schedule+0x90/0x2b0
[  385.203547][   T36]  schedule+0x164/0x2b0
[  385.203574][   T36]  io_schedule+0x7f/0xd0
[  385.203601][   T36]  rq_qos_wait+0x266/0x360
[  385.203681][   T36]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  385.203732][   T36]  ? __pfx_wbt_cleanup_cb+0x10/0x10
[  385.203761][   T36]  ? __pfx_rq_qos_wait+0x10/0x10
[  385.203793][   T36]  ? __pfx_rq_qos_wake_function+0x10/0x10
[  385.203826][   T36]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  385.203869][   T36]  wbt_wait+0x326/0x550
[  385.203898][   T36]  ? __pfx_wbt_wait+0x10/0x10
[  385.203924][   T36]  ? __pfx_dd_bio_merge+0x10/0x10
[  385.203985][   T36]  ? __pfx_wbt_wait+0x10/0x10
[  385.204008][   T36]  __rq_qos_throttle+0x6b/0xb0
[  385.204042][   T36]  blk_mq_submit_bio+0x18ae/0x2eb0
[  385.204084][   T36]  ? __pfx_blk_mq_submit_bio+0x10/0x10
[  385.204109][   T36]  ? blk_cgroup_bio_start+0x5d7/0x670
[  385.204151][   T36]  ? __pfx_blk_cgroup_bio_start+0x10/0x10
[  385.204188][   T36]  ? __submit_bio+0x7e/0x340
[  385.204230][   T36]  submit_bio_noacct_nocheck+0x2fe/0xb10
[  385.204252][   T36]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  385.204286][   T36]  ext4_bio_write_folio+0x101a/0x18c0
[  385.204334][   T36]  mpage_process_page_bufs+0x6bd/0x8a0
[  385.204379][   T36]  mpage_prepare_extent_to_map+0xf8d/0x1880
[  385.204397][   T36]  ? process_scheduled_works+0xc3d/0x1630
[  385.204438][   T36]  ? __pfx_mpage_prepare_extent_to_map+0x10/0x10
[  385.204510][   T36]  ? kmem_cache_alloc_noprof+0x31a/0x600
[  385.204540][   T36]  ? ext4_init_io_end+0x29/0x130
[  385.204554][   T36]  ? kmem_cache_alloc_noprof+0x151/0x600
[  385.204573][   T36]  ? ext4_init_io_end+0x29/0x130
[  385.204596][   T36]  ext4_do_writepages+0xc08/0x44a0
[  385.204640][   T36]  ? kfree+0x1c7/0x650
[  385.204657][   T36]  ? ieee80211_inform_bss+0xc59/0x1150
[  385.204733][   T36]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  385.204750][   T36]  ? __pfx_ext4_do_writepages+0x10/0x10
[  385.204773][   T36]  ? __lock_acquire+0x747/0x2de0
[  385.204798][   T36]  ? trace_cfg80211_return_bss+0x7c/0x1f0
[  385.204836][   T36]  ? __lock_acquire+0x747/0x2de0
[  385.204863][   T36]  ? lock_acquire+0x115/0x350
[  385.204897][   T36]  ext4_writepages+0x1fe/0x4e0
[  385.204920][   T36]  ? __pfx_ext4_writepages+0x10/0x10
[  385.204951][   T36]  ? do_raw_spin_unlock+0xf5/0x200
[  385.204968][   T36]  ? __pfx_ext4_writepages+0x10/0x10
[  385.204988][   T36]  do_writepages+0x338/0x560
[  385.205007][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  385.205027][   T36]  ? reacquire_held_locks+0x117/0x1a0
[  385.205049][   T36]  ? writeback_sb_inodes+0x450/0x1af0
[  385.205091][   T36]  __writeback_single_inode+0x136/0x1220
[  385.205114][   T36]  ? do_raw_spin_unlock+0xf5/0x200
[  385.205139][   T36]  writeback_sb_inodes+0x9de/0x1af0
[  385.205178][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  385.205223][   T36]  ? __pfx_down_read_trylock+0x10/0x10
[  385.205250][   T36]  __writeback_inodes_wb+0x114/0x250
[  385.205276][   T36]  wb_writeback+0x42f/0xad0
[  385.205298][   T36]  ? queue_io+0x231/0x470
[  385.205321][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  385.205345][   T36]  ? wb_workfn+0xc11/0x10f0
[  385.205366][   T36]  wb_workfn+0xc92/0x10f0
[  385.205395][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  385.205421][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  385.205443][   T36]  ? lock_acquire+0x115/0x350
[  385.205469][   T36]  ? rcu_is_watching+0x16/0xb0
[  385.205494][   T36]  ? process_scheduled_works+0x97a/0x1630
[  385.205518][   T36]  process_scheduled_works+0xc3d/0x1630
[  385.205565][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  385.205593][   T36]  ? assign_work+0x3cf/0x5d0
[  385.205621][   T36]  worker_thread+0xa47/0xfb0
[  385.205649][   T36]  ? __kthread_parkme+0x71/0x1f0
[  385.205672][   T36]  kthread+0x38b/0x480
[  385.205691][   T36]  ? __pfx_worker_thread+0x10/0x10
[  385.205704][   T36]  ? __pfx_kthread+0x10/0x10
[  385.205723][   T36]  ret_from_fork+0x514/0xb70
[  385.205744][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  385.205761][   T36]  ? __switch_to+0xc78/0x1410
[  385.205875][   T36]  ? __pfx_kthread+0x10/0x10
[  385.205896][   T36]  ret_from_fork_asm+0x1a/0x30
[  385.205927][   T36]  </TASK>
[  385.205946][   T36] INFO: task syz.0.1199:9056 blocked in I/O wait for more than 143 seconds.
[  385.205960][   T36]       Not tainted syzkaller #0
[  385.205968][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  385.205974][   T36] task:syz.0.1199      state:D stack:24680 pid:9056  tgid:9056  ppid:5643   task_flags:0x440040 flags:0x00080002
[  385.206021][   T36] Call Trace:
[  385.206026][   T36]  <TASK>
[  385.206036][   T36]  __schedule+0x17dd/0x5830
[  385.206074][   T36]  ? __pfx___schedule+0x10/0x10
[  385.206099][   T36]  ? schedule+0x90/0x2b0
[  385.206118][   T36]  schedule+0x164/0x2b0
[  385.206136][   T36]  io_schedule+0x7f/0xd0
[  385.206155][   T36]  bit_wait_io+0x13/0x110
[  385.206175][   T36]  __wait_on_bit+0xac/0x300
[  385.206193][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.206213][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  385.206242][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.206260][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  385.206281][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  385.206314][   T36]  do_get_write_access+0x658/0x10c0
[  385.206351][   T36]  jbd2_journal_get_write_access+0x1d7/0x230
[  385.206377][   T36]  __ext4_journal_get_write_access+0xec/0x620
[  385.206400][   T36]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  385.206416][   T36]  ? trace_kmem_cache_alloc+0x29/0xe0
[  385.206435][   T36]  ? jbd2__journal_start+0x145/0x5d0
[  385.206463][   T36]  ext4_reserve_inode_write+0x294/0x360
[  385.206489][   T36]  __ext4_mark_inode_dirty+0x141/0x7e0
[  385.206521][   T36]  ext4_dirty_inode+0xd0/0x110
[  385.206538][   T36]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  385.206555][   T36]  __mark_inode_dirty+0x3a8/0x13b0
[  385.206577][   T36]  file_update_time_flags+0x399/0x440
[  385.206607][   T36]  ext4_page_mkwrite+0x21f/0x1470
[  385.206632][   T36]  ? __pfx_filemap_fault+0x10/0x10
[  385.206660][   T36]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  385.206686][   T36]  do_page_mkwrite+0x147/0x310
[  385.206711][   T36]  do_pte_missing+0x70f/0x3570
[  385.206743][   T36]  ? handle_mm_fault+0xee/0x2f80
[  385.206763][   T36]  handle_mm_fault+0x1807/0x2f80
[  385.206789][   T36]  ? handle_mm_fault+0xee/0x2f80
[  385.206812][   T36]  ? __pfx_handle_mm_fault+0x10/0x10
[  385.206833][   T36]  ? lock_vma_under_rcu+0x45a/0x500
[  385.206871][   T36]  do_user_addr_fault+0xb35/0x1480
[  385.206901][   T36]  ? trace_page_fault_user+0x84/0x1e0
[  385.206924][   T36]  exc_page_fault+0x6a/0xc0
[  385.206944][   T36]  asm_exc_page_fault+0x26/0x30
[  385.206962][   T36] RIP: 0033:0x00007f08ce2740b1
[  385.206977][   T36] RSP: 002b:00007fffe33216d0 EFLAGS: 00010202
[  385.206991][   T36] RAX: 0000001b34f22000 RBX: ffffffff825ed5f0 RCX: 0000001b34f21ff8
[  385.207003][   T36] RDX: 0000001b3492421c RSI: 0000000000000008 RDI: 00007f08cf155720
[  385.207014][   T36] RBP: 0000000000000003 R08: 00007f08ce610000 R09: 00007f08ce612000
[  385.207024][   T36] R10: 00000000825ed5f4 R11: 0000000000000003 R12: 00007f08ce626038
[  385.207035][   T36] R13: 0000000000000002 R14: ffffffff825ed0ee R15: 00007f08cf155720
[  385.207047][   T36]  ? __fget_files+0x1e/0x420
[  385.207069][   T36]  ? fget_task_next+0xf0/0x5f0
[  385.207100][   T36]  </TASK>
[  385.207107][   T36] INFO: task syz.3.1204:9060 blocked in I/O wait for more than 143 seconds.
[  385.207120][   T36]       Not tainted syzkaller #0
[  385.207128][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  385.207135][   T36] task:syz.3.1204      state:D stack:24680 pid:9060  tgid:9060  ppid:5636   task_flags:0x440040 flags:0x00080002
[  385.207180][   T36] Call Trace:
[  385.207185][   T36]  <TASK>
[  385.207194][   T36]  __schedule+0x17dd/0x5830
[  385.207239][   T36]  ? __pfx___schedule+0x10/0x10
[  385.207264][   T36]  ? schedule+0x90/0x2b0
[  385.207283][   T36]  schedule+0x164/0x2b0
[  385.207302][   T36]  io_schedule+0x7f/0xd0
[  385.207320][   T36]  bit_wait_io+0x13/0x110
[  385.207340][   T36]  __wait_on_bit+0xac/0x300
[  385.207358][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.207379][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  385.207400][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.207418][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  385.207439][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  385.207471][   T36]  do_get_write_access+0x658/0x10c0
[  385.207508][   T36]  jbd2_journal_get_write_access+0x1d7/0x230
[  385.207535][   T36]  __ext4_journal_get_write_access+0xec/0x620
[  385.207557][   T36]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  385.207574][   T36]  ? trace_kmem_cache_alloc+0x29/0xe0
[  385.207593][   T36]  ? jbd2__journal_start+0x145/0x5d0
[  385.207622][   T36]  ext4_reserve_inode_write+0x294/0x360
[  385.207647][   T36]  __ext4_mark_inode_dirty+0x141/0x7e0
[  385.207679][   T36]  ext4_dirty_inode+0xd0/0x110
[  385.207698][   T36]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  385.207716][   T36]  __mark_inode_dirty+0x3a8/0x13b0
[  385.207740][   T36]  file_update_time_flags+0x399/0x440
[  385.207769][   T36]  ext4_page_mkwrite+0x21f/0x1470
[  385.207794][   T36]  ? __pfx_filemap_fault+0x10/0x10
[  385.207820][   T36]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  385.207839][   T36]  ? lruvec_stat_mod_folio+0x222/0x2d0
[  385.207865][   T36]  do_page_mkwrite+0x147/0x310
[  385.207889][   T36]  do_pte_missing+0x70f/0x3570
[  385.207923][   T36]  handle_mm_fault+0x1807/0x2f80
[  385.207948][   T36]  ? handle_mm_fault+0xee/0x2f80
[  385.207972][   T36]  ? __pfx_handle_mm_fault+0x10/0x10
[  385.207987][   T36]  ? lock_vma_under_rcu+0x45a/0x500
[  385.208004][   T36]  ? __pfx_do_futex+0x10/0x10
[  385.208036][   T36]  do_user_addr_fault+0xb35/0x1480
[  385.208065][   T36]  ? trace_page_fault_user+0x84/0x1e0
[  385.208087][   T36]  exc_page_fault+0x6a/0xc0
[  385.208105][   T36]  asm_exc_page_fault+0x26/0x30
[  385.208120][   T36] RIP: 0033:0x00007fb24e0740b1
[  385.208134][   T36] RSP: 002b:00007ffe8bd28320 EFLAGS: 00010202
[  385.208148][   T36] RAX: 0000001b2d224000 RBX: ffffffff826039aa RCX: 0000001b2d223ff8
[  385.208160][   T36] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007fb24ef55700
[  385.208171][   T36] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007fb24e412000
[  385.208181][   T36] R10: 00007fb24ef55700 R11: 0000000000000000 R12: 00007fb24e426038
[  385.208192][   T36] R13: 0000000000000000 R14: ffffffff826030c0 R15: 00007fb24ef55720
[  385.208204][   T36]  ? __x64_sys_mount+0x20/0xc0
[  385.208290][   T36]  ? __se_sys_fsmount+0x2aa/0xbf0
[  385.208319][   T36]  </TASK>
[  385.208326][   T36] INFO: task syz.1.1205:9065 blocked in I/O wait for more than 143 seconds.
[  385.208338][   T36]       Not tainted syzkaller #0
[  385.208346][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  385.208353][   T36] task:syz.1.1205      state:D stack:24680 pid:9065  tgid:9065  ppid:5635   task_flags:0x440040 flags:0x00080002
[  385.208397][   T36] Call Trace:
[  385.208402][   T36]  <TASK>
[  385.208412][   T36]  __schedule+0x17dd/0x5830
[  385.208451][   T36]  ? __pfx___schedule+0x10/0x10
[  385.208476][   T36]  ? schedule+0x90/0x2b0
[  385.208495][   T36]  schedule+0x164/0x2b0
[  385.208513][   T36]  io_schedule+0x7f/0xd0
[  385.208531][   T36]  bit_wait_io+0x13/0x110
[  385.208551][   T36]  __wait_on_bit+0xac/0x300
[  385.208570][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.208591][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  385.208612][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.208630][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  385.208651][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  385.208684][   T36]  do_get_write_access+0x658/0x10c0
[  385.208721][   T36]  jbd2_journal_get_write_access+0x1d7/0x230
[  385.208747][   T36]  __ext4_journal_get_write_access+0xec/0x620
[  385.208769][   T36]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  385.208785][   T36]  ? trace_kmem_cache_alloc+0x29/0xe0
[  385.208803][   T36]  ? jbd2__journal_start+0x145/0x5d0
[  385.208831][   T36]  ext4_reserve_inode_write+0x294/0x360
[  385.208855][   T36]  __ext4_mark_inode_dirty+0x141/0x7e0
[  385.208885][   T36]  ext4_dirty_inode+0xd0/0x110
[  385.208903][   T36]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  385.208920][   T36]  __mark_inode_dirty+0x3a8/0x13b0
[  385.208940][   T36]  file_update_time_flags+0x399/0x440
[  385.208968][   T36]  ext4_page_mkwrite+0x21f/0x1470
[  385.208993][   T36]  ? __pfx_filemap_fault+0x10/0x10
[  385.209019][   T36]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  385.209045][   T36]  do_page_mkwrite+0x147/0x310
[  385.209068][   T36]  do_pte_missing+0x70f/0x3570
[  385.209097][   T36]  ? handle_mm_fault+0xee/0x2f80
[  385.209116][   T36]  handle_mm_fault+0x1807/0x2f80
[  385.209141][   T36]  ? handle_mm_fault+0xee/0x2f80
[  385.209318][   T36]  ? __pfx_handle_mm_fault+0x10/0x10
[  385.209342][   T36]  ? lock_vma_under_rcu+0x45a/0x500
[  385.209489][   T36]  do_user_addr_fault+0xb35/0x1480
[  385.209613][   T36]  ? trace_page_fault_user+0x84/0x1e0
[  385.209696][   T36]  exc_page_fault+0x6a/0xc0
[  385.209756][   T36]  asm_exc_page_fault+0x26/0x30
[  385.209820][   T36] RIP: 0033:0x00007fd63c0740b1
[  385.209872][   T36] RSP: 002b:00007ffe4fd619b0 EFLAGS: 00010202
[  385.209925][   T36] RAX: 0000001b35018000 RBX: ffffffff826a8a1e RCX: 0000001b35017ff8
[  385.209970][   T36] RDX: 0000001b34a2421c RSI: 0000000000000008 RDI: 00007fd63cf55720
[  385.210011][   T36] RBP: 0000000000000179 R08: 00007fd63c410000 R09: 00007fd63c412000
[  385.210052][   T36] R10: 00000000826a8a22 R11: 0000000000000003 R12: 00007fd63c426038
[  385.210087][   T36] R13: 0000000000000381 R14: ffffffff826a883c R15: 00007fd63cf55720
[  385.210138][   T36]  ? block_write_begin+0x2c/0x120
[  385.210228][   T36]  ? __pfx_block_write_end+0xe/0x10
[  385.210333][   T36]  </TASK>
[  385.210357][   T36] INFO: task syz.4.1206:9067 blocked in I/O wait for more than 143 seconds.
[  385.210400][   T36]       Not tainted syzkaller #0
[  385.210431][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  385.210454][   T36] task:syz.4.1206      state:D stack:26808 pid:9067  tgid:9067  ppid:5634   task_flags:0x440040 flags:0x00080002
[  385.210622][   T36] Call Trace:
[  385.210642][   T36]  <TASK>
[  385.210676][   T36]  __schedule+0x17dd/0x5830
[  385.210803][   T36]  ? __pfx___schedule+0x10/0x10
[  385.210899][   T36]  ? schedule+0x90/0x2b0
[  385.210973][   T36]  schedule+0x164/0x2b0
[  385.211038][   T36]  io_schedule+0x7f/0xd0
[  385.211103][   T36]  bit_wait_io+0x13/0x110
[  385.211185][   T36]  __wait_on_bit+0xac/0x300
[  385.211264][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.211353][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  385.211428][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.211493][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  385.211569][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  385.211688][   T36]  do_get_write_access+0x658/0x10c0
[  385.211809][   T36]  jbd2_journal_get_write_access+0x1d7/0x230
[  385.211903][   T36]  __ext4_journal_get_write_access+0xec/0x620
[  385.211987][   T36]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  385.212072][   T36]  ext4_reserve_inode_write+0x294/0x360
[  385.212164][   T36]  __ext4_mark_inode_dirty+0x141/0x7e0
[  385.212279][   T36]  ext4_dirty_inode+0xd0/0x110
[  385.212341][   T36]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  385.212403][   T36]  __mark_inode_dirty+0x3a8/0x13b0
[  385.212458][   T36]  ? mnt_get_write_access+0x216/0x280
[  385.212551][   T36]  ? ext4_file_mmap_prepare+0x277/0x450
[  385.212650][   T36]  touch_atime+0x568/0x670
[  385.212735][   T36]  ? ext4_file_mmap_prepare+0x277/0x450
[  385.212830][   T36]  ext4_file_mmap_prepare+0x277/0x450
[  385.212934][   T36]  mmap_region+0x1191/0x2820
[  385.213007][   T36]  ? lock_acquire+0x115/0x350
[  385.213116][   T36]  ? __pfx_mmap_region+0x10/0x10
[  385.213168][   T36]  ? __page_table_check_zero+0x6c/0x430
[  385.213351][   T36]  ? __page_table_check_zero+0x3c3/0x430
[  385.213436][   T36]  ? __page_table_check_zero+0x6c/0x430
[  385.213537][   T36]  ? post_alloc_hook+0x208/0x250
[  385.213702][   T36]  ? try_charge_memcg+0x250/0x1a90
[  385.213927][   T36]  ? mt_find+0x17e/0x5f0
[  385.214071][   T36]  ? mt_find+0x545/0x5f0
[  385.214163][   T36]  ? mt_find+0x17e/0x5f0
[  385.214248][   T36]  ? __pfx_mt_find+0x10/0x10
[  385.214345][   T36]  ? bpf_lsm_mmap_addr+0x9/0x50
[  385.214423][   T36]  ? security_mmap_addr+0x71/0x240
[  385.214552][   T36]  ? memfd_check_seals_mmap+0x8e/0x1f0
[  385.214663][   T36]  do_mmap+0xe0a/0x1300
[  385.214758][   T36]  ? __pfx_do_mmap+0x10/0x10
[  385.214839][   T36]  ? vm_mmap_pgoff+0x1ed/0x520
[  385.214904][   T36]  ? down_write_killable+0x179/0x230
[  385.214979][   T36]  ? lock_acquire+0x115/0x350
[  385.215053][   T36]  ? __pfx_down_write_killable+0x10/0x10
[  385.215134][   T36]  ? apparmor_mmap_file+0x2e7/0x390
[  385.215279][   T36]  vm_mmap_pgoff+0x27a/0x520
[  385.215380][   T36]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  385.215483][   T36]  ? __fget_files+0x2a/0x420
[  385.215569][   T36]  ? __fget_files+0x3a2/0x420
[  385.215641][   T36]  ? __fget_files+0x2a/0x420
[  385.215729][   T36]  ksys_mmap_pgoff+0x4dc/0x760
[  385.215812][   T36]  do_syscall_64+0x16a/0x530
[  385.215912][   T36]  ? trace_irq_disable+0x3b/0x140
[  385.215987][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.216050][   T36]  ? clear_bhb_loop+0x70/0xc0
[  385.216122][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.216178][   T36] RIP: 0033:0x00007fd920b9f882
[  385.216240][   T36] RSP: 002b:00007ffdbcd39ef8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  385.216303][   T36] RAX: ffffffffffffffda RBX: 0000001b2cd64000 RCX: 00007fd920b9f882
[  385.216345][   T36] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b2cd64000
[  385.216379][   T36] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  385.216421][   T36] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000ca
[  385.216455][   T36] R13: 00000000000927c0 R14: 0000000000036057 R15: 00007ffdbcd3a1d0
[  385.216549][   T36]  </TASK>
[  385.216579][   T36] INFO: task syz.2.1203:9068 blocked in I/O wait for more than 143 seconds.
[  385.216623][   T36]       Not tainted syzkaller #0
[  385.216654][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  385.216684][   T36] task:syz.2.1203      state:D stack:26936 pid:9068  tgid:9068  ppid:5637   task_flags:0x440040 flags:0x00080002
[  385.216867][   T36] Call Trace:
[  385.216895][   T36]  <TASK>
[  385.216928][   T36]  __schedule+0x17dd/0x5830
[  385.217065][   T36]  ? __pfx___schedule+0x10/0x10
[  385.217160][   T36]  ? schedule+0x90/0x2b0
[  385.217241][   T36]  schedule+0x164/0x2b0
[  385.217306][   T36]  io_schedule+0x7f/0xd0
[  385.217371][   T36]  bit_wait_io+0x13/0x110
[  385.217445][   T36]  __wait_on_bit+0xac/0x300
[  385.217514][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.217582][   T36]  out_of_line_wait_on_bit+0x13b/0x190
[  385.217655][   T36]  ? __pfx_bit_wait_io+0x10/0x10
[  385.217719][   T36]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  385.217794][   T36]  ? __pfx_wake_bit_function+0x10/0x10
[  385.217902][   T36]  do_get_write_access+0x658/0x10c0
[  385.218036][   T36]  jbd2_journal_get_write_access+0x1d7/0x230
[  385.218130][   T36]  __ext4_journal_get_write_access+0xec/0x620
[  385.218213][   T36]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  385.218309][   T36]  ext4_reserve_inode_write+0x294/0x360
[  385.218395][   T36]  __ext4_mark_inode_dirty+0x141/0x7e0
[  385.218483][   T36]  ext4_dirty_inode+0xd0/0x110
[  385.218506][   T36]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  385.218529][   T36]  __mark_inode_dirty+0x3a8/0x13b0
[  385.218556][   T36]  ? mnt_get_write_access+0x216/0x280
[  385.218596][   T36]  ? ext4_file_mmap_prepare+0x277/0x450
[  385.218631][   T36]  touch_atime+0x568/0x670
[  385.218664][   T36]  ? ext4_file_mmap_prepare+0x277/0x450
[  385.218709][   T36]  ext4_file_mmap_prepare+0x277/0x450
[  385.218754][   T36]  mmap_region+0x1191/0x2820
[  385.218784][   T36]  ? lock_acquire+0x115/0x350
[  385.218821][   T36]  ? __pfx_mmap_region+0x10/0x10
[  385.218838][   T36]  ? __page_table_check_zero+0x6c/0x430
[  385.218870][   T36]  ? __page_table_check_zero+0x3c3/0x430
[  385.218902][   T36]  ? __page_table_check_zero+0x6c/0x430
[  385.218942][   T36]  ? post_alloc_hook+0x208/0x250
[  385.219009][   T36]  ? try_charge_memcg+0x250/0x1a90
[  385.219098][   T36]  ? mt_find+0x17e/0x5f0
[  385.219132][   T36]  ? mt_find+0x545/0x5f0
[  385.219285][   T36]  ? mt_find+0x17e/0x5f0
[  385.219316][   T36]  ? __pfx_mt_find+0x10/0x10
[  385.219351][   T36]  ? bpf_lsm_mmap_addr+0x9/0x50
[  385.219382][   T36]  ? security_mmap_addr+0x71/0x240
[  385.219420][   T36]  ? memfd_check_seals_mmap+0x8e/0x1f0
[  385.219451][   T36]  do_mmap+0xe0a/0x1300
[  385.219481][   T36]  ? __pfx_do_mmap+0x10/0x10
[  385.219515][   T36]  ? vm_mmap_pgoff+0x1ed/0x520
[  385.219541][   T36]  ? down_write_killable+0x179/0x230
[  385.219571][   T36]  ? lock_acquire+0x115/0x350
[  385.219598][   T36]  ? __pfx_down_write_killable+0x10/0x10
[  385.219628][   T36]  ? apparmor_mmap_file+0x2e7/0x390
[  385.219667][   T36]  vm_mmap_pgoff+0x27a/0x520
[  385.219704][   T36]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  385.219736][   T36]  ? __fget_files+0x2a/0x420
[  385.219769][   T36]  ? __fget_files+0x3a2/0x420
[  385.219797][   T36]  ? __fget_files+0x2a/0x420
[  385.219829][   T36]  ksys_mmap_pgoff+0x4dc/0x760
[  385.219861][   T36]  do_syscall_64+0x16a/0x530
[  385.219885][   T36]  ? trace_irq_disable+0x3b/0x140
[  385.219915][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.219937][   T36]  ? clear_bhb_loop+0x70/0xc0
[  385.219964][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.219985][   T36] RIP: 0033:0x00007fb59b19f882
[  385.220005][   T36] RSP: 002b:00007ffe18db21e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  385.220028][   T36] RAX: ffffffffffffffda RBX: 0000001b34b64000 RCX: 00007fb59b19f882
[  385.220044][   T36] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b34b64000
[  385.220058][   T36] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  385.220089][   T36] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000104
[  385.220136][   T36] R13: 00000000000927c0 R14: 0000000000035ea7 R15: 00007ffe18db24c0
[  385.220256][   T36]  </TASK>
[  385.220323][   T36] 
[  385.220323][   T36] Showing all locks held in the system:
[  385.220365][   T36] locks held by pr/ttyS0/35: 2, last CPU#1:
[  385.220408][   T36]  #0: ffffffff90034078 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  385.220591][   T36]  #1: ffffffff9c215f58 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  385.220839][   T36] locks held by khungtaskd/36: 1, last CPU#0:
[  385.220880][   T36]  #0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  385.221100][   T36] locks held by klogd/4993: 1, last CPU#1:
[  385.221141][   T36]  #0: ffffffff902b1e10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  385.221310][   T36] locks held by getty/5387: 2, on CPU#0:
[  385.221352][   T36]  #0: ffff8880379160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  385.221553][   T36]  #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  385.221737][   T36] locks held by syz-executor/5624: 3, on CPU#1:
[  385.221779][   T36]  #0: ffff88801378a308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  385.221918][   T36]  #1: ffff88803451e570 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  385.222058][   T36]  #2: ffff88803451c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  385.222247][   T36] locks held by kworker/u8:12/6880: 4, on CPU#1:
[  385.222288][   T36]  #0: ffff888021ed5150 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  385.222458][   T36]  #1: ffffc9000681fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  385.222627][   T36]  #2: ffff88803451e100 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  385.222868][   T36]  #3: ffff88803452ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[  385.223068][   T36] locks held by syz.0.1199/9056: 3, on CPU#1:
[  385.223110][   T36]  #0: ffff888032d6c448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  385.223256][   T36]  #1: ffff88803451e570 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  385.223395][   T36]  #2: ffff88803451c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  385.223560][   T36] locks held by syz.3.1204/9060: 3, on CPU#0:
[  385.223595][   T36]  #0: ffff8880273e9808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  385.223714][   T36]  #1: ffff88803451e570 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  385.223844][   T36]  #2: ffff88803451c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  385.223999][   T36] locks held by syz.1.1205/9065: 3, on CPU#1:
[  385.224034][   T36]  #0: ffff8880759e0e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  385.224170][   T36]  #1: ffff88803451e570 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  385.224327][   T36]  #2: ffff88803451c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  385.224486][   T36] locks held by syz.4.1206/9067: 3, on CPU#1:
[  385.224527][   T36]  #0: ffff88807c2da800 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520
[  385.224675][   T36]  #1: ffff88803451e478 (sb_writers#4){++++}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  385.224838][   T36]  #2: ffff88803451c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  385.224987][   T36] locks held by syz.2.1203/9068: 3, on CPU#0:
[  385.225020][   T36]  #0: ffff88807c2d8340 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520
[  385.225074][   T36]  #1: ffff88803451e478 (sb_writers#4){++++}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  385.225283][   T36]  #2: ffff88803451c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  385.225445][   T36] 
[  385.225459][   T36] =============================================
[  385.225459][   T36] 
[  385.225501][   T36] NMI backtrace for cpu 0
[  385.225542][   T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  385.225608][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  385.225641][   T36] Call Trace:
[  385.225664][   T36]  <TASK>
[  385.225685][   T36]  dump_stack_lvl+0xe8/0x150
[  385.225779][   T36]  nmi_cpu_backtrace+0x274/0x2d0
[  385.225880][   T36]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  385.225954][   T36]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  385.226020][   T36]  sys_info+0x135/0x170
[  385.226096][   T36]  watchdog+0x1073/0x10f0
[  385.226192][   T36]  ? watchdog+0x209/0x10f0
[  385.226287][   T36]  kthread+0x38b/0x480
[  385.226358][   T36]  ? __pfx_watchdog+0x10/0x10
[  385.226424][   T36]  ? __pfx_kthread+0x10/0x10
[  385.226497][   T36]  ret_from_fork+0x514/0xb70
[  385.226579][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  385.226656][   T36]  ? __switch_to+0xc78/0x1410
[  385.226719][   T36]  ? __pfx_kthread+0x10/0x10
[  385.226786][   T36]  ret_from_fork_asm+0x1a/0x30
[  385.226889][   T36]  </TASK>
[  385.226910][   T36] Sending NMI from CPU 0 to CPUs 1:
[  385.226968][    C1] NMI backtrace for cpu 1
[  385.226981][    C1] CPU: 1 UID: 0 PID: 35 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  385.227002][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  385.227013][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  385.227078][    C1] Code: e8 7e 7b 41 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff c5 b9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[  385.227095][    C1] RSP: 0018:ffffc90000ab78b8 EFLAGS: 00000002
[  385.227110][    C1] RAX: 1ffffffff3842b00 RBX: 00000000000003fd RCX: 0000000000000000
[  385.227122][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  385.227134][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  385.227146][    C1] R10: dffffc0000000000 R11: ffffffff8587b6a0 R12: dffffc0000000000
[  385.227160][    C1] R13: 0000000000000000 R14: ffffffff9c215f80 R15: 0000000000000000
[  385.227173][    C1] FS:  0000000000000000(0000) GS:ffff8881234f9000(0000) knlGS:0000000000000000
[  385.227188][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  385.227201][    C1] CR2: 000055e790b22660 CR3: 000000007f700000 CR4: 00000000003526f0
[  385.227218][    C1] Call Trace:
[  385.227225][    C1]  <TASK>
[  385.227234][    C1]  wait_for_lsr+0x184/0x2f0
[  385.227255][    C1]  __serial8250_console_fifo_write+0xcd/0x3e0
[  385.227285][    C1]  serial8250_console_write+0xa7e/0x1200
[  385.227310][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  385.227328][    C1]  ? __schedule+0x17f3/0x5830
[  385.227355][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  385.227390][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  385.227418][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  385.227451][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  385.227471][    C1]  nbcon_kthread_func+0x6d9/0x8d0
[  385.227499][    C1]  ? nbcon_kthread_func+0x163/0x8d0
[  385.227521][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  385.227548][    C1]  ? __kthread_parkme+0x71/0x1f0
[  385.227567][    C1]  ? __kthread_parkme+0x199/0x1f0
[  385.227588][    C1]  kthread+0x38b/0x480
[  385.227609][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  385.227630][    C1]  ? __pfx_kthread+0x10/0x10
[  385.227652][    C1]  ret_from_fork+0x514/0xb70
[  385.227673][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  385.227694][    C1]  ? __switch_to+0xc78/0x1410
[  385.227711][    C1]  ? __pfx_kthread+0x10/0x10
[  385.227740][    C1]  ret_from_fork_asm+0x1a/0x30
[  385.227768][    C1]  </TASK>
[  385.228006][   T36] Kernel panic - not syncing: hung_task: blocked tasks
[  388.618159][   T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  388.627395][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  388.637483][   T36] Call Trace:
[  388.640800][   T36]  <TASK>
[  388.643778][   T36]  vpanic+0x26f/0x710
[  388.647788][   T36]  panic+0xc5/0xd0
[  388.651536][   T36]  ? __pfx_panic+0x10/0x10
[  388.655992][   T36]  ? wq_watchdog_touch+0xf9/0x160
[  388.661047][   T36]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  388.667228][   T36]  watchdog+0x10e7/0x10f0
[  388.671614][   T36]  ? watchdog+0x209/0x10f0
[  388.676092][   T36]  kthread+0x38b/0x480
[  388.680206][   T36]  ? __pfx_watchdog+0x10/0x10
[  388.685020][   T36]  ? __pfx_kthread+0x10/0x10
[  388.689677][   T36]  ret_from_fork+0x514/0xb70
[  388.694323][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  388.699464][   T36]  ? __switch_to+0xc78/0x1410
[  388.704210][   T36]  ? __pfx_kthread+0x10/0x10
[  388.708827][   T36]  ret_from_fork_asm+0x1a/0x30
[  388.713631][   T36]  </TASK>
[  388.716858][   T36] Kernel Offset: disabled
[  388.721206][   T36] Rebooting in 86400 seconds..