last executing test programs:

1m49.678390534s ago: executing program 3 (id=173):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1m48.054970676s ago: executing program 3 (id=189):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x14d3, &(0x7f0000000140)="$eJzs3HuYz9XaMPB1r7W+jGnSr0kOw7rX/eWXBsskSQ5JckiSJElySkiaJElIDDklIQk5TpLDEJLDYDDO5/P50GRLkiSnnMJ6L+39PJ6928/led+938cfc3+ua12z7vn+7vu31twz8z1c18zPnYZUb1ijSn0iEv8S+OuHFCFEjBCivxDiDiFEIIQoE18m/vrxXApS/rU3Yf9ez6Xd6hWwW4n7n71x/7M37n/2xv3P3rj/2Rv3P3vj/mdv3H/GsrOt0wrcySP7Dn7+n53x+T974/5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7Hs7FY/f+Zxa8et/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY9XPQ3aCHEf8xv9boYY4wxxhhjjDH27+Nz3uoVMMYYY4wxxhhj7P8/EFIooUUgcoicIkbkErHiNhEnbhe5xR0iIu4U8eIukUfcLfKKfCK/KCASREFRSBiBwgoSoSgsioiouEcUFfeKRFFMFBclhBMlRZK4T5QS94vS4gFRRjwoyoqHRDlRXlQQFcXDopJ4RFQWj4oq4jFRVVQT1UUN8bioKZ4QtcSTorZ4StQRT4u64hlRTzwr6ovnRAPxvGgoXhCNxIuisWgimopmovn/U/67opt4T3QXPUSK6Cl6ifdFb9FH9BX9RH/xgRggPhQDxUdikBgshoiPxVDxiRgmPhXDxQgxUnwmRonRYowYK8aJ8SJVfC4miC/ERPGlmCQmiyliqkgT08R08ZWYIWaKWeJrMVt8I+aIuWKemC/SxQKxUCwSGWKxWCKWikyxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU1sFzvETrFL7BZ7xF6xT+wXB8RB8a3IEt/9X+Zf+If8ziBAgAQJGjTkgBwQAzEQC7EQB3GQG3JDBCIQD/GQB/JAXsgL+SE/JEACFIJCgIBAQFAYCkMUolAUikIiJEJxKA4OHCRBEpSC+6E0lIYyUAbKQlkoB+WhPFSEilAJKkFlqAxVoApUhapQHarD4/A4PAG1oBbUhtpQB+pAXagL9aAe1If60AAaQENoCI2gETSGxtAUmkJzaA4toAW0hJbQGlpDG2gDbaEtJEMytIN20B7aQwfoAB2hI3SCTtAZukAXeBfehffgPegBVWVP6AW9oDf0hr7QD/rBBzAAPoQP4SMYBINhCHwMH8MnMAzOw3AYASNhJFSSo2EMjAWS4yEVUmECTICJMBEmwWSYDFMhDabBdJgOM2AmzISvYTZ8A9/AXJgL8yEd0mEhLIIMyIAlcAEyYRkshxWwElbBSlgDa2ENrIcNsB42wSbYAltgG2yDHbADdsEu2AN7YB/sgwNwAAZBFmTBITgEh+EwHIEjcBSOwjE4BsfhOJyAE3ASTsIpOA1n4DScg3NwHi7ARbgIl+EyXIErcA2uXf/hl9dpqWUOmUPGyBgZK2NlnIyTuWVuGZERGS/jZR6ZR+aVeWV+mV8myARZSBaSKFGSDGVhWVhGZVQWlUVlokyUxWVx6aSTSTJJlpKlZGlZWpaRD8qy8iFZTpaXrVxFWVFWkq1dZfmorCKryKqymqwua8gasqasKWvJWrK2rC3ryDqyrnxG1pM9oS88J693pqEcDI3kEGgsm8imspn8BF6SLeQwaClbydbyFTkChkNb2cIly9dlOzkG2ss35Vh4S3aU46GTfEd2ll1kV/mu7CZbuu6yh5wEPWUvORV6yz6yr+wnZ0A1eb1j1eVHcpAcLIfIj+V8+EQOk5/K4XKEHCk/k6PkaDlGjpXj5HiZKj+XE+QXcqL8Uk6Sk+UUOVWmyWlyuvxKzpAz5Sz5tZwtv5Fz5Fw5T86X6XKBXCgXyQy5WC6RS2WmXCaXyxVypVwlV8s1cq1cJ9fLDXKj3CQ3yy1yq9wmt8sdcqfcJXfLPXKv3Cf3ywPyoPxWZsnv5CH5F3lYfi+PyB/kUfmjPCZ/ksflz/KE/EWelL/KU/K0PCPPynPyN3leXpAX5SV5Wf4ur8ir8pr0UihQUimlVaByqJwqRuVSseo2FaduV7nVHSqi7lTx6i6VR92t8qp8Kr8qoBJUQVVIGYXKKlKhKqyKqKi6RxVV96pEVUwVVyWUUyVVkrpPlVL3q9LqAVVGPajKqodUOVVeVVAV1cOqknpEVVaPqirqMVVVVVPVVQ31uKqpnlC11JOqtnpK1VFPq7rqGVVPPavqq+dUA/W8aqheUI3Ui6qxaqKaqmaquXpJtVAvq5aqlWqtXlFt1KuqrXpNJavXVTv1hmqv3lQd1Fuqo3pbdVLvqM6qi+qqrqpryqvuqodKUT1VL/W+6q36qL6qn+qvPlAD1IdqoPpIDVKD1RD1sRqqPlHD1KdquBqhRqrP1Cg1Wo1RY9U4NV6lqs/VBPWFmqi+VJPUZDVFTVVpaprq+7dKs/4H+V/8k/yBf7z7FrVVbVPb1Q61U+1Su9UetVftVfvVfnVQHVRZKksdUofUYXVYHVFH1FF1VB1Tx9RxdVydUCfUSXVSnVKn1SV1Vp1Tv6nz6oK6oC6py+qyuvK3r4HQoKVWWutA59A5dYzOpWP1bTpO365z6zt0RN+p4/VdOo++W+fV+XR+XUAn6IK6kDYatdWkQ11YF9FRfY8uqu/VibqYLq5LaKdL6iR937+cf7P1NdfNdQvdQrfULXVr3Vq30W10W91WJ+tk3U630+11e91Bd9AddUfdSXfSnXVn3VV31d10N91dd9cpOkX30u/r3rqP7qv76f76Az1AD9AD9UA9SA/SQ/QQPVQP1cP0MD1cD9cj9Ug9So/SY/QYPU6P06k6VU/QE/REPVFP0pP0FD1Fp+k0PV1P1zP0DD1Lz9Kz9Ww9R8/R8/Q8na7T9UK9UGfoDL1EL9GZepleplfoFXqVXqXX6DV6nV6nN+gNepPepDP1Vr1Vb9fb9U69U+/Wu/VevVfv1/v1QX1QZ+ksfUgf0of1YX1EH9FH9VF9TB/Tx/VxfUKf0Cf1SX1Kn9Jn9Bl9Tp/T5/V5fVFf1Jf1ZX1FX9HX9LXrl32BDGSgAx3kCHIEMUFMEBvEBnFBXJA7yB1EgkgQH8QHeYK7g7xBviB/UCBICAoGhQITYGADCsKgcFAkiAb3BEWDe4PEoFhQPCgRuKBkkBTcF5QK7g9KBw8EZYIHg7LBQ0G5oHxQIagYPBxUCh4JKgePBlWCx4KqQbWgelAjeDyoGTwR1AqeDGoHTwV1gqeDusEzQb3g2aB+8FzQIHg+aBi8EDQKXgwaB02CpkGzoPm/tb735/O97LqbHibF9DS9zPumt+lj+pp+pr/5wAwwH5qB5iMzyAw2Q8zHZqj5xAwzn5rhZoQZaT4zo8xoM8aMNePMeJNqPjcTzBdmovnSTDKTzRQz1aSZaWa6+crMMDPNLPO1mW2+MXPMXDPPzDfpZoFZaBaZDLPYLDFLTaZZZpabFWalWWVWmzVmrVln1psNZqPZZDabLWar2Wa2mx1mp9lldps9Zq/ZZ/abA+ag+dZkme/MIfMXc9h8b46YH8xR86M5Zn4yx83P5oT5xZw0v5pT5rQ5Y86ac+Y3c95cMBfNJXPZ/G6umKvmmvHXL+6vn95Ro8YcmANjMAZjMRbjMA5zY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIryMkLIyFMYpRLIpFMRETsTgWR4cOkzAJS2EpLI2lsQyWwbJYFsthOayAFfBhfBgfwUfwUXwUH8PHsBpWwxpYA2tiTayFtbA21sY6WAfrYl2sh/WwPtbHBtgAG2JDbISNsDE2xqbYFJtjc2yBLbAltsTW2BrbYBtsi20xGZOxHbbD9tgeO2AH7IgdsRN2ws7YGbtiV+yG3bA7dscUTMFe2At7Y2/si32xP/bHATgAB+JAHISDcAgOwaE4FIfhMByOI3AkfoajcDSOwbE4DsdjKqbiBJyAE3EiTsJJOAWnYBqm4XScjjNwBs7CWTgbZ+McnIPzcB6mYzouxIWYgRm4BJdgJmbiclyOK3ElrsbVuBbX4npcjxtxI27GzbgVt+J23I47cSfuxt24F/fiftyPB/EgZmEWHsJDeBgP4xE8gkfxKB7DY3gcj+MJPIEn8SSewlN4Bs/gOTyH5/E8XsSLeBl/xyt4Fa+hxxiby8ba22ycvd3mtnfYf4zz2wI2wRa0hayxeW2+v4vRWptoi9nitoR1tqRNsvf9KS5ny9sKtqJ92Fayj9jKf4pr2idsLfukrW2fsjXs438X17FP27r2BVvPvmjr2ya2gW1mG9oXbCP7om1sm9imtpltY1+1be1rNtm+btvZN/4UL7SL7Fq7zq63G+x+e8BetJfscfuzvWx/t91tD9vffmAH2A/tQPuRHWQH/ykeaT+zo+xoO8aOtePs+D/FU+xUm2an2en2KzvDzvxTnG4X2Nk2w86xc+08O/+P+PqaMuxiu8QutZl2mV1uV9iVdpVdbdf851pX2E12s91i99p9drvdYXfaXXa33fNHfH0fB+23Nst+Z4/Zn+xh+709Yk/Yo/bHP+Lr+zthf7En7a/2lD1tz9iz9pz9zZ63F/7Y//W9n7VX7TXrrSAgSYo0BZSDclIM5aJYuo3i6HbKTXdQhO6keLqL8tDdlJfyUX4qQAlUkAqRISRLRCEVpiIUpXuoKN1LiVSMilMJclSSkug+KkX3U2l6gMrQg1SWHqJyVJ4qUEV6mCrRI1SZHqUq9BhVpWpUnWrQ41STnqBa9CTVpqeoDj1NdekZqkfPUn16jhrQ89SQXqBG9CI1pibUlJpRc3qJWtDL1JJaUWt6hdrQq9SWXqNkep3a0RvUnt6kDvQWdaS3qRO9Q52pC3Wld6kbvUfdqQelUE/qRe9Tb+pDfakf9acPaAB9SAPpIxpEg2kIfUxD6RMaRp/ScBpBI+kzGkWjaQyNpXE0nlLpc5pAX9BE+pIm0WSaQlMpjabRdPqKZtBMmkVf02z6hubQXJpH8ymdFtBCWkQZtJiW0FLKpGW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO2kW7aQ/tpX20nw7QQfqWsug7OkR/ocP0PR2hH+go/UjH6Cc6Tj/TCfqFTtKvdIpO0xk6S+foNzpPF+giXaLL9Dtdoat0jTyJEEIZqlCHQZgjzBnGhLnC2PC2MC68Pcwd3hFGwjvD+PCuME94d5g3zBfmDwuECWHBsFBoQgxtSGEYFg6LhNHwnrBoeG+YGBYLi4clQheWDJPC+8JS4f1h6fCBsEz4YFg2fCgsF5YPK4QVw4fDSuEjYeXw0bBK+FhYNawWVg9rhI+HNcMnwlrhk2Ht8KmwdPh0WDd8JqwXPhvWD58LG4TPhw3DF8JG4Yth47BJ2DRsFjYPXwpbhC+HLcNWYevwlbBN+GrYNnwtTA5fD9uFb9z0eErYM+wVvh++H3r/pJoXnR9Njy6ILowuimZEF0eXRJdGM6PLosujK6Iro6uiq6Nromuj66LroxuiG6ObopujW6Le18gpHDjplNMucDlcThfjcrlYd5uLc7e73O4OF3F3unh3l8vj7nZ5XT6X3xVwCa6gK+SMQ2cdudAVdkVc1N3jirp7XaIr5oq7Es65ki7JNXPNXXPXwr3sWrpWrrV7xb3iXnWvutfca+5118694dq7N10H95br6N52b7t3XGfXxXV177pu7j3X3fVwKS7F9XK9XG/X2/V1fV1/198NcAPcQDfQDXKD3BA3xA11Q90wN8wNd8PdSDfSjXKj3Bg3xo1z41yqS3UT3AQ30U10k9wkN8VNcWkuzU13090MN8PNcrPcbDfbzXFz3Dw3z6W7dLfQLXQZLsMtcUtcpst0y91yt9KtdKvdarfWrXXr3Xq30W10m91mt9VtddvddrfT7XS73W631+11+91+d9AddFkuyx1yh9xhd9gdcT+4o+5Hd8z95I67n90J94s76X51p9xpd8addefcb+68u+AuukvusvvdXXFX3TXnXWrk88iEyBeRiZEvI5MikyNTIlMjaZFpkemRryIzIjMjsyJfR2ZHvonMicyNzIvMj6RHFkQWRhZFMiKLI0siSyOZkWWR5ZEVkZWRVRHvC24PfWFfxEf9Pb6ov9cn+mK+uC/hnS/pk/x9vpS/35f2D/gy/kFf1j/ky/nyvoJ/0Tf2TXxT38w39y/5Fv5l39K38q39K76Nf9W39a/5ZP+6b+ff8O39m76Df8t39G/7Tv4d39l38V39u76bf8939z18iu/pe/n3fW/fx/f1/Xx//4Ef4D/0A/1HfpAf7If4j/1Q/4kf5j/1w/0IP9J/5kf50X6MH+vH+fE+1X/uJ/gv/ET/pZ/kJ/spfqpP89P8dP+Vn+Fn+ln+az/bf+Pn+Ll+np/v0/0Cv9Av8hl+sV/il/pMv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/c7/E6/y+/2e/xev8/v9wf8Qf+tz/Lf+UP+L/6w/94f8T/4o/5Hf8z/5I/7n/0J/4s/6X/1p/xpf8af9ef8b/68v+Av+kv+sv/dX/FX/TX+mzXGGGOMsf8RdZPjPf/J5+TfxnW9hBC37yhw9B9rbsz713kfmdAmIoR4vUen5/5jVK2akpLyt9dmKhEUmSuEiNzIzyFuxMtEa/GqSBatRKl/ur4+sstlukn96INCxP6XnBhxI75R//7/pv7o2TetP1eIxCI3cnKJG/GN+qX/m/r5Wtykfq7vU4Vo+V9y4sSN+Eb9JPGyeEMk/90rGWOMMcYYY4yxv+ojK3S42f3t9fvzBH0jJ6e4Ed/s/pwxxhhjjDHGGGO33ltdur72UnJyqw484QlPePKfk1v9m4kxxhhjjDH273bjov9Wr4QxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu+/jf+ndit3iNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2q/2fAAAA//+uBTVz")
unlinkat(0xffffffffffffff9c, &(0x7f0000001640)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', 0x200)

1m47.748224515s ago: executing program 3 (id=191):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m47.387489881s ago: executing program 3 (id=194):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

1m46.547715718s ago: executing program 3 (id=203):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60)
getsockopt$inet_buf(r0, 0x118, 0x4, 0x0, &(0x7f0000000000)=0x7)

1m46.001609132s ago: executing program 3 (id=210):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000c00)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000f804"], &(0x7f0000000c40)=0x520)

1m45.637940259s ago: executing program 32 (id=210):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000c00)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000f804"], &(0x7f0000000c40)=0x520)

2.782761963s ago: executing program 2 (id=1063):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}}, 0x0)

2.721973838s ago: executing program 2 (id=1065):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)

2.513739079s ago: executing program 2 (id=1067):
r0 = syz_create_resource$futex(&(0x7f0000000400)=0x1)
futex(r0, 0xd, 0x2, 0x0, r0, 0x0)
r1 = syz_create_resource$futex(&(0x7f0000000480)=0x2)
futex(r0, 0x5, 0x1, 0x0, r1, 0x200001f)

2.021605656s ago: executing program 0 (id=1072):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0xc0010015}]})

1.946468759s ago: executing program 5 (id=1073):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0xe501, 0x3, 0x258, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0)

1.841821986s ago: executing program 0 (id=1074):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032bbd7000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="080006009c2c"], 0x24}, 0x1, 0x0, 0x0, 0x26040001}, 0x0)

1.839516247s ago: executing program 5 (id=1075):
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x70})

1.754480272s ago: executing program 0 (id=1076):
syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x3, 0x357, &(0x7f0000000180)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)

1.572892231s ago: executing program 2 (id=1078):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x1a)

1.570817612s ago: executing program 0 (id=1079):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x12c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x100, 0x2, [@TCA_BPF_ACT={0xfc, 0x1, [@m_xt={0x94, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x69, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2158500000080a32641bae47de041e1169d8e4a65b8ce3633a4469c93c572237d9202ae6bbc2d2bd3"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x38, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0xd, 0x6, "5d3aee85a6264cff4a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.553629838s ago: executing program 1 (id=1080):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[@ANYBLOB="641200000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a31000000003812038034120080080003400000000228120a80100002800900020073797a30000000001d0001001438ad4721c3e096810494386ef32f025d2c9be30321ec563d000000b50001"], 0x1264}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000)

1.43216614s ago: executing program 0 (id=1081):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000140), 0xca, r0}, 0x38)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38)

1.306732758s ago: executing program 4 (id=1082):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000500000000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000000ef"], 0x38}}, 0x0)

1.291454843s ago: executing program 1 (id=1083):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r0, &(0x7f0000000640)='\"l', 0x2)

1.24337699s ago: executing program 0 (id=1084):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x800058, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x18ad414)

1.20610517s ago: executing program 1 (id=1085):
socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc0884123, &(0x7f0000000080))

1.162415369s ago: executing program 4 (id=1086):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x67b8, 0x4)
sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044800)
recvfrom$inet(r0, 0x0, 0x0, 0x12140, 0x0, 0xfffffffffffffdff)

1.114134038s ago: executing program 1 (id=1087):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)

1.016667281s ago: executing program 4 (id=1088):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000140)="0a74e2", 0x3, 0x1)

924.259346ms ago: executing program 4 (id=1089):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40088}, 0x40008800)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'macvlan0\x00', 0x1})

922.789986ms ago: executing program 5 (id=1090):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
fchown(r2, 0x0, 0x0)

799.653491ms ago: executing program 4 (id=1091):
unshare(0x6020400)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, 0x0, 0x0, 0x19, 0x0)

734.026292ms ago: executing program 5 (id=1092):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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")
r0 = open(&(0x7f0000000100)='./bus\x00', 0x6c840, 0x50)
truncate(&(0x7f0000000000)='./bus\x00', 0x86)
finit_module(r0, 0x0, 0x5)

522.728251ms ago: executing program 4 (id=1093):
r0 = socket(0x1e, 0x1, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x10)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)
sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x4048040)

495.513101ms ago: executing program 5 (id=1094):
r0 = socket$inet(0x2, 0x801, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000000500)={0x2, 0x4e23, @local}, 0x10)
shutdown(r0, 0x1)
sendto$inet(r0, 0x0, 0x0, 0x2404877d, 0x0, 0x0)

443.398167ms ago: executing program 2 (id=1095):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xce, 0x0, 0x1000}]})

338.841511ms ago: executing program 5 (id=1096):
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x19, 0x4, 0x4, 0x8}, 0x50)
r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92")
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)

217.568254ms ago: executing program 1 (id=1097):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)

123.60221ms ago: executing program 2 (id=1098):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x5, 0x4)

0s ago: executing program 1 (id=1099):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002180000ffffffff00000000"}]}, 0x60}}, 0x0)

kernel console output (not intermixed with test programs):

0: USB Mass Storage device detected
[  146.251919][ T7254] JBD2: Ignoring recovery information on journal
[  146.261237][ T7227] syz.1.439 (7227) used greatest stack depth: 19128 bytes left
[  146.348416][    T9] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12
[  146.348511][    T9] input input12: usb_submit_urb failed
[  146.353757][  T993] usb 5-1: USB disconnect, device number 5
[  146.375307][  T993] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  146.423037][    T9] input: failed to attach handler kbd to device input12, error: -5
[  146.445576][ T4963] input input12: usb_submit_urb failed
[  146.449068][    T9] scsi host1: usb-storage 6-1:1.0
[  146.501788][ T4963] input input12: usb_submit_urb failed
[  146.521934][ T5612] ocfs2: Unmounting device (7,1) on (node local)
[  146.608228][ T7254] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  146.651965][    T9] usb 6-1: USB disconnect, device number 4
[  147.161085][ T5611] ocfs2: Unmounting device (7,0) on (node local)
[  147.485444][ T7287] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma?
[  147.739171][ T7289] loop5: detected capacity change from 0 to 2048
[  147.802242][ T7289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.859579][ T7289] EXT4-fs error (device loop5): ext4_ext_precache:648: inode #2: comm syz.5.453: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(7)
[  147.901182][ T7289] EXT4-fs (loop5): Remounting filesystem read-only
[  147.997226][ T6466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.013834][ T7302] loop1: detected capacity change from 0 to 512
[  148.493637][ T7323] loop2: detected capacity change from 0 to 256
[  148.506983][ T7323] exfat: Deprecated parameter 'utf8'
[  148.507017][ T7323] exfat: Deprecated parameter 'namecase'
[  148.507091][ T7323] exfat: Deprecated parameter 'utf8'
[  148.545445][   T32] kauditd_printk_skb: 270 callbacks suppressed
[  148.545466][   T32] audit: type=1326 audit(1792600065.143:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6b79f559 code=0x7ffc0000
[  148.546006][   T32] audit: type=1326 audit(1792600065.143:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6b79f559 code=0x7ffc0000
[  148.597722][   T32] audit: type=1326 audit(1792600065.193:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fce6b79f559 code=0x7ffc0000
[  148.597913][   T32] audit: type=1326 audit(1792600065.193:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6b79f559 code=0x7ffc0000
[  148.598022][   T32] audit: type=1326 audit(1792600065.193:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6b79f559 code=0x7ffc0000
[  148.598560][ T7323] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  148.634949][   T32] audit: type=1326 audit(1792600065.223:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fce6b79f559 code=0x7ffc0000
[  148.635092][   T32] audit: type=1326 audit(1792600065.223:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6b79f559 code=0x7ffc0000
[  148.672485][   T32] audit: type=1326 audit(1792600065.233:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6b79f559 code=0x7ffc0000
[  148.672641][   T32] audit: type=1326 audit(1792600065.263:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fce6b79f559 code=0x7ffc0000
[  148.672750][   T32] audit: type=1326 audit(1792600065.263:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.467" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6b79f559 code=0x7ffc0000
[  149.638408][ T7325] loop4: detected capacity change from 0 to 32768
[  149.797053][ T7357] ea_get: invalid extended attribute
[  149.797072][ T7357] ffff888057ad9da0: 04 00 00 00                                      ....
[  149.925737][ T5771] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  150.079764][ T5771] usb 3-1: New USB device found: idVendor=1a34, idProduct=0802, bcdDevice=0.00
[  150.087989][ T5771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  150.088087][ T5771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.088152][ T5771] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  150.088261][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.105515][ T5771] usb 3-1: config 0 descriptor??
[  150.482704][ T7374] loop5: detected capacity change from 0 to 512
[  150.505319][ T7374] EXT4-fs: Ignoring removed bh option
[  150.533070][ T7374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c128, mo2=0002]
[  150.533582][ T7374] System zones: 1-12
[  150.558110][ T5771] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  150.558147][ T5771] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  150.558171][ T5771] acrux 0003:1A34:0802.0006: unknown main item tag 0x2
[  150.558195][ T5771] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  150.558222][ T5771] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  150.558254][ T5771] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  150.558282][ T5771] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  150.558308][ T5771] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  150.558334][ T5771] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  150.558360][ T5771] acrux 0003:1A34:0802.0006: unknown main item tag 0x0
[  150.558460][ T5771] acrux 0003:1A34:0802.0006: item fetching failed at offset 23/41
[  150.562752][ T5771] acrux 0003:1A34:0802.0006: parse failed
[  150.562833][ T5771] acrux 0003:1A34:0802.0006: probe with driver acrux failed with error -22
[  150.573374][ T7374] EXT4-fs (loop5): 1 truncate cleaned up
[  150.593794][ T7374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.808055][ T5771] usb 3-1: USB disconnect, device number 5
[  150.913052][ T6466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.297297][ T7399] rxe_eth0 speed is unknown, defaulting to 1000
[  151.331607][ T7403] loop0: detected capacity change from 0 to 1024
[  151.594177][ T7403] hfsplus: xattr search failed
[  151.632388][ T7406] hfsplus: xattr search failed
[  151.836267][ T7405] loop4: detected capacity change from 0 to 40427
[  151.870121][ T7415] loop2: detected capacity change from 0 to 256
[  151.886074][ T7405] F2FS-fs (loop4): invalid crc value
[  151.921871][ T7415] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  151.997068][ T7415] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff)
[  152.093116][ T7420] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[  152.294033][ T7405] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  152.321875][ T7405] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  152.321916][ T7405] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  152.321949][ T7405] F2FS-fs (loop4): Start checkpoint disabled!
[  152.370537][ T3406] exFAT-fs (loop2): failed to test cluster bit(11)
[  152.394483][ T7405] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  152.409708][ T7405] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  152.603909][   T86] kworker/u8:5: attempt to access beyond end of device
[  152.603909][   T86] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  152.603996][   T86] CPU: 0 UID: 0 PID: 86 Comm: kworker/u8:5 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  152.604026][   T86] Tainted: [L]=SOFTLOCKUP
[  152.604034][   T86] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  152.604048][   T86] Workqueue: writeback wb_workfn (flush-7:4)
[  152.604090][   T86] Call Trace:
[  152.604104][   T86]  <TASK>
[  152.604115][   T86]  dump_stack_lvl+0xe8/0x150
[  152.604152][   T86]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  152.604188][   T86]  f2fs_write_end_bio+0x118e/0x15d0
[  152.604246][   T86]  __submit_merged_bio+0x258/0x6a0
[  152.604273][   T86]  ? rcu_is_watching+0x16/0xb0
[  152.604314][   T86]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  152.604345][   T86]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  152.604400][   T86]  f2fs_write_data_pages+0x2a13/0x36e0
[  152.604479][   T86]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  152.604599][   T86]  ? __lock_acquire+0x747/0x2de0
[  152.604657][   T86]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  152.604697][   T86]  do_writepages+0x338/0x560
[  152.604736][   T86]  ? __lock_acquire+0x747/0x2de0
[  152.604767][   T86]  ? reacquire_held_locks+0x117/0x1a0
[  152.604797][   T86]  ? writeback_sb_inodes+0x450/0x1af0
[  152.604829][   T86]  __writeback_single_inode+0x136/0x1220
[  152.604858][   T86]  ? do_raw_spin_unlock+0xf5/0x200
[  152.604899][   T86]  writeback_sb_inodes+0x9de/0x1af0
[  152.604921][   T86]  ? __lock_acquire+0x747/0x2de0
[  152.604980][   T86]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  152.605062][   T86]  ? rcu_is_watching+0x16/0xb0
[  152.605101][   T86]  ? queue_io+0x2d3/0x470
[  152.605129][   T86]  wb_writeback+0x41c/0xad0
[  152.605157][   T86]  ? queue_io+0x2b1/0x470
[  152.605188][   T86]  ? __pfx_wb_writeback+0x10/0x10
[  152.605207][   T86]  ? do_raw_spin_lock+0x12b/0x2f0
[  152.605264][   T86]  wb_workfn+0x431/0x10f0
[  152.605323][   T86]  ? __pfx_wb_workfn+0x10/0x10
[  152.605362][   T86]  ? lockdep_hardirqs_on+0x7b/0x110
[  152.605400][   T86]  ? do_raw_spin_lock+0x12b/0x2f0
[  152.605447][   T86]  ? lock_acquire+0x115/0x350
[  152.605486][   T86]  ? rcu_is_watching+0x16/0xb0
[  152.605520][   T86]  ? process_scheduled_works+0x97a/0x1630
[  152.605553][   T86]  process_scheduled_works+0xc3d/0x1630
[  152.605629][   T86]  ? __pfx_process_scheduled_works+0x10/0x10
[  152.605671][   T86]  ? assign_work+0x3cf/0x5d0
[  152.605755][   T86]  worker_thread+0xa47/0xfb0
[  152.605827][   T86]  kthread+0x38b/0x480
[  152.605853][   T86]  ? __pfx_worker_thread+0x10/0x10
[  152.605882][   T86]  ? __pfx_kthread+0x10/0x10
[  152.605909][   T86]  ret_from_fork+0x514/0xb70
[  152.605936][   T86]  ? __pfx_ret_from_fork+0x10/0x10
[  152.605960][   T86]  ? __switch_to+0xc78/0x1410
[  152.605997][   T86]  ? __pfx_kthread+0x10/0x10
[  152.606023][   T86]  ret_from_fork_asm+0x1a/0x30
[  152.606068][   T86]  </TASK>
[  152.626639][   T86] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  152.900168][ T7432] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string
[  152.900389][ T7432] acpi device:00: uevent: failed to send synthetic uevent: -22
[  153.107792][ T7434] loop2: detected capacity change from 0 to 1024
[  153.108862][ T7434] EXT4-fs: Ignoring removed oldalloc option
[  153.108911][ T7434] EXT4-fs: Ignoring removed orlov option
[  153.155335][ T7414] loop1: detected capacity change from 0 to 32768
[  153.181445][ T7414] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.507 (7414)
[  153.234939][ T7434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.279095][ T7414] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.279133][ T7414] BTRFS info (device loop1): using crc32c checksum algorithm
[  153.474164][ T7414] BTRFS info (device loop1): enabling ssd optimizations
[  153.474194][ T7414] BTRFS info (device loop1): turning on flush-on-commit
[  153.474213][ T7414] BTRFS info (device loop1): enabling free space tree
[  153.474231][ T7414] BTRFS info (device loop1): enabling auto defrag
[  153.474249][ T7414] BTRFS info (device loop1): max_inline set to 4096
[  153.510294][ T5771] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  153.564746][ T5751] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  153.639950][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.654664][ T5771] usb 6-1: Using ep0 maxpacket: 32
[  153.657298][ T5771] usb 6-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  153.661203][ T5771] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  153.661230][ T5771] usb 6-1: config 0 has no interface number 0
[  153.703373][ T5771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.703401][ T5771] usb 6-1: Product: syz
[  153.703416][ T5771] usb 6-1: Manufacturer: syz
[  153.703433][ T5771] usb 6-1: SerialNumber: syz
[  153.717461][ T5751] usb 1-1: Using ep0 maxpacket: 16
[  153.727406][ T5751] usb 1-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00
[  153.729589][ T5751] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.729620][ T5751] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.729644][ T5751] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  153.729672][ T5751] usb 1-1: config 0 interface 0 has no altsetting 0
[  153.729707][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.829085][ T5612] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.831721][ T5751] usb 1-1: config 0 descriptor??
[  153.833233][ T5771] usb 6-1: config 0 descriptor??
[  153.912541][ T5771] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  154.109241][ T5771] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  154.139985][ T5771] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  154.220906][  T993] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  154.295266][ T5751] hid (null): bogus close delimiter
[  154.350057][ T7469] loop2: detected capacity change from 0 to 512
[  154.375857][  T993] usb 5-1: Using ep0 maxpacket: 32
[  154.388826][ T7469] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  154.388846][ T7469] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  154.391221][  T993] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  154.404084][  T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.429112][ T7469] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.522: bad orphan inode 131072
[  154.429142][ T7469] loop2: lost filesystem error report for type 5 error -117
[  154.437921][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  154.437944][    C1] EXT4-fs (loop2): initial error at time 1792600071: ext4_orphan_get:1430
[  154.437962][    C1] EXT4-fs (loop2): last error at time 1792600071: ext4_orphan_get:1430
[  154.486425][ T7469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.516574][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  154.517096][ T5771] usb 6-1: USB disconnect, device number 5
[  154.542683][  T993] usb 5-1: config 0 descriptor??
[  154.563682][ T5771] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  154.582720][ T5771] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  154.584171][ T5771] quatech2 6-1:0.51: device disconnected
[  154.602891][ T7466] input: syz0 as /devices/virtual/input/input13
[  154.648053][ T5759] usb 1-1: USB disconnect, device number 3
[  154.750852][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.805064][  T993] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  154.842887][  T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  154.862910][  T993] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  154.862968][  T993] usb 5-1: media controller created
[  154.970819][  T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  155.114052][  T993] az6027: usb out operation failed. (-71)
[  155.124464][  T993] az6027: usb out operation failed. (-71)
[  155.124485][  T993] stb0899_attach: Driver disabled by Kconfig
[  155.124496][  T993] az6027: no front-end attached
[  155.124496][  T993] 
[  155.125979][  T993] az6027: usb out operation failed. (-71)
[  155.125996][  T993] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  155.131842][  T993] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14
[  155.181952][  T993] dvb-usb: schedule remote query interval to 400 msecs.
[  155.181974][  T993] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  155.222825][  T993] usb 5-1: USB disconnect, device number 6
[  155.459209][  T993] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  155.739585][ T7498] netlink: 'syz.1.536': attribute type 2 has an invalid length.
[  155.739608][ T7498] netlink: 'syz.1.536': attribute type 2 has an invalid length.
[  155.940463][ T7506] loop2: detected capacity change from 0 to 2048
[  155.952221][ T7506] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  155.967005][ T7502] loop4: detected capacity change from 0 to 4096
[  155.999114][ T7502] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  156.088934][ T7488] loop0: detected capacity change from 0 to 40427
[  156.100000][ T5633] udevd[5633]: incorrect nilfs2 checksum on /dev/loop2
[  156.119462][ T7488] F2FS-fs (loop0): invalid crc value
[  156.142495][ T7502] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  156.143769][ T7502] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  156.208497][ T7512] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.311005][ T7488] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  156.352124][ T7488] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  156.953208][ T7520] loop4: detected capacity change from 0 to 4096
[  157.088439][ T7520] ntfs3(loop4): Failed to load $Extend (-22).
[  157.088466][ T7520] ntfs3(loop4): Failed to initialize $Extend.
[  157.391679][ T7538] loop2: detected capacity change from 0 to 512
[  157.412645][ T7538] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  157.441422][ T7538] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  157.444661][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  157.444685][    C0] EXT4-fs (loop2): initial error at time 1792600074: mb_free_blocks:2047: inode 11: block 64
[  157.444730][    C0] EXT4-fs (loop2): last error at time 1792600074: mb_free_blocks:2047: inode 11: block 64
[  157.465383][ T7538] EXT4-fs error (device loop2): ext4_do_update_inode:6701: inode #11: comm syz.2.550: corrupted inode contents
[  157.465487][ T7538] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  157.486982][ T7538] EXT4-fs error (device loop2): ext4_dirty_inode:7673: inode #11: comm syz.2.550: mark_inode_dirty error
[  157.487078][ T7538] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  157.499310][ T7538] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.550: invalid indirect mapped block 1 (level 1)
[  157.499417][ T7538] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  157.537322][ T7538] EXT4-fs error (device loop2): ext4_do_update_inode:6701: inode #11: comm syz.2.550: corrupted inode contents
[  157.537427][ T7538] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  157.596210][ T7538] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem
[  157.596241][ T7538] loop2: lost filesystem error report for type 5 error -117
[  157.601512][ T7538] EXT4-fs error (device loop2): ext4_do_update_inode:6701: inode #11: comm syz.2.550: corrupted inode contents
[  157.601548][ T7538] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  157.604099][ T7538] EXT4-fs error (device loop2): ext4_truncate:5538: inode #11: comm syz.2.550: mark_inode_dirty error
[  157.604132][ T7538] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  157.643149][ T7538] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem
[  157.643179][ T7538] loop2: lost filesystem error report for type 5 error -117
[  157.657065][ T7538] EXT4-fs (loop2): 1 truncate cleaned up
[  157.700795][ T7538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.819431][ T7538] EXT4-fs error (device loop2): ext4_readdir:270: inode #2: block 13: comm syz.2.550: path /110/file0: bad entry in directory: directory entry too close to block end - offset=1016, size=1024
[  157.820605][ T7541] loop1: detected capacity change from 0 to 4096
[  158.029738][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.113491][ T7551] loop4: detected capacity change from 0 to 256
[  158.714730][ T7568] loop4: detected capacity change from 0 to 16
[  158.743315][ T7568] erofs (device loop4): mounted with root inode @ nid 36.
[  158.777703][ T7568] erofs (device loop4): negative i_size @ nid 86
[  158.903954][ T7560] loop2: detected capacity change from 0 to 40427
[  158.937177][ T7560] F2FS-fs (loop2): invalid crc value
[  159.083322][ T7560] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  159.114205][ T7560] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  159.412856][ T5610] syz-executor: attempt to access beyond end of device
[  159.412856][ T5610] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  159.414161][ T5610] CPU: 1 UID: 0 PID: 5610 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  159.414197][ T5610] Tainted: [L]=SOFTLOCKUP
[  159.414206][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  159.414219][ T5610] Call Trace:
[  159.414228][ T5610]  <TASK>
[  159.414239][ T5610]  dump_stack_lvl+0xe8/0x150
[  159.414281][ T5610]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  159.414326][ T5610]  f2fs_write_end_bio+0x2b5/0x15d0
[  159.414361][ T5610]  ? blkg_put+0x22/0x240
[  159.414395][ T5610]  ? blkg_put+0x18d/0x240
[  159.414429][ T5610]  ? bio_endio+0x984/0xac0
[  159.414448][ T5610]  ? f2fs_write_end_io+0x258/0x300
[  159.414485][ T5610]  __submit_merged_bio+0x258/0x6a0
[  159.414512][ T5610]  ? rcu_is_watching+0x16/0xb0
[  159.414553][ T5610]  f2fs_submit_merged_write+0x2cc/0x610
[  159.414590][ T5610]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  159.414634][ T5610]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  159.414662][ T5610]  ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0
[  159.414700][ T5610]  f2fs_writeback_node_caches+0xf46/0x1100
[  159.414762][ T5610]  ? __pfx_f2fs_writeback_node_caches+0x10/0x10
[  159.414833][ T5610]  ? f2fs_write_checkpoint+0xe1e/0x24d0
[  159.414875][ T5610]  ? up_write+0x19d/0x4a0
[  159.414916][ T5610]  f2fs_write_checkpoint+0xe54/0x24d0
[  159.415003][ T5610]  kill_f2fs_super+0x2dc/0x700
[  159.415044][ T5610]  ? rcu_do_enqueue+0x616/0x870
[  159.415071][ T5610]  ? lockdep_hardirqs_on+0x7b/0x110
[  159.415100][ T5610]  ? __pfx_kill_f2fs_super+0x10/0x10
[  159.415157][ T5610]  ? __pfx_call_rcu+0x10/0x10
[  159.415198][ T5610]  ? shrinker_free+0x2a7/0x3b0
[  159.415238][ T5610]  deactivate_locked_super+0xbe/0x110
[  159.415268][ T5610]  cleanup_mnt+0x204/0x2a0
[  159.415305][ T5610]  task_work_run+0x1d9/0x260
[  159.415343][ T5610]  ? __pfx_task_work_run+0x10/0x10
[  159.415385][ T5610]  exit_to_user_mode_loop+0x204/0x770
[  159.415414][ T5610]  ? rcu_is_watching+0x16/0xb0
[  159.415452][ T5610]  do_syscall_64+0x328/0x520
[  159.415480][ T5610]  ? trace_irq_disable+0x3b/0x140
[  159.415509][ T5610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.415533][ T5610]  ? clear_bhb_loop+0x70/0xc0
[  159.415562][ T5610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.415585][ T5610] RIP: 0033:0x7f61e41a0797
[  159.415629][ T5610] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  159.415648][ T5610] RSP: 002b:00007ffd7c7a78e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  159.415672][ T5610] RAX: 0000000000000000 RBX: 00007f61e4235f63 RCX: 00007f61e41a0797
[  159.415688][ T5610] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7c7a79a0
[  159.415702][ T5610] RBP: 00007ffd7c7a79a0 R08: 00007ffd7c7a89a0 R09: 00000000ffffffff
[  159.415718][ T5610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7c7a8a30
[  159.415732][ T5610] R13: 00007f61e4235f63 R14: 0000000000026d66 R15: 00007ffd7c7a8a70
[  159.415775][ T5610]  </TASK>
[  159.651798][ T5610] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  159.901175][ T7587] ip_tables: iptables: counters copy to user failed while replacing table
[  159.918293][ T7587] ip_tables: iptables: counters copy to user failed while replacing table
[  160.226402][ T7598] tunl0: entered promiscuous mode
[  160.238262][ T7598] netlink: 'syz.0.575': attribute type 4 has an invalid length.
[  160.238287][ T7598] netlink: 9 bytes leftover after parsing attributes in process `syz.0.575'.
[  160.369507][ T7602] macvlan0: entered promiscuous mode
[  160.387802][  T993] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  160.479202][ T7606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.577'.
[  160.510703][ T7591] set_capacity_and_notify: 1 callbacks suppressed
[  160.510724][ T7591] loop5: detected capacity change from 0 to 32768
[  160.530194][ T7591] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.572 (7591)
[  160.558784][ T7591] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  160.558822][ T7591] BTRFS info (device loop5): using sha256 checksum algorithm
[  160.578200][  T993] usb 5-1: New USB device found: idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  160.587958][  T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.635506][  T993] usb 5-1: config 0 descriptor??
[  160.657860][  T993] gspca_main: cpia1-2.14.0 probing 0813:0001
[  160.707207][ T7591] BTRFS info (device loop5): rebuilding free space tree
[  160.723588][ T7614] loop0: detected capacity change from 0 to 2048
[  160.760309][ T7614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.789328][ T7591] BTRFS info (device loop5): disabling free space tree
[  160.789403][ T7591] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  160.789428][ T7591] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  160.828073][ T7591] BTRFS info (device loop5): checking UUID tree
[  160.828504][ T7591] BTRFS info (device loop5): turning off barriers
[  160.828527][ T7591] BTRFS info (device loop5): force clearing of disk cache
[  160.828547][ T7591] BTRFS info (device loop5): use lzo compression, level 1
[  160.907351][ T7627] loop2: detected capacity change from 0 to 256
[  160.993837][ T7629] syz.2.582: attempt to access beyond end of device
[  160.993837][ T7629] loop2: rw=2049, sector=1832, nr_sectors = 32 limit=256
[  160.993987][ T7629] syz.2.582: attempt to access beyond end of device
[  160.993987][ T7629] loop2: rw=2049, sector=1896, nr_sectors = 32 limit=256
[  160.994160][ T7629] syz.2.582: attempt to access beyond end of device
[  160.994160][ T7629] loop2: rw=2049, sector=1960, nr_sectors = 32 limit=256
[  161.036832][ T7629] syz.2.582: attempt to access beyond end of device
[  161.036832][ T7629] loop2: rw=2049, sector=2024, nr_sectors = 32 limit=256
[  161.037009][ T7629] syz.2.582: attempt to access beyond end of device
[  161.037009][ T7629] loop2: rw=2049, sector=2088, nr_sectors = 32 limit=256
[  161.037581][ T7629] syz.2.582: attempt to access beyond end of device
[  161.037581][ T7629] loop2: rw=2049, sector=2152, nr_sectors = 32 limit=256
[  161.037779][ T7629] syz.2.582: attempt to access beyond end of device
[  161.037779][ T7629] loop2: rw=2049, sector=2216, nr_sectors = 32 limit=256
[  161.037989][ T7629] syz.2.582: attempt to access beyond end of device
[  161.037989][ T7629] loop2: rw=2049, sector=2280, nr_sectors = 32 limit=256
[  161.038152][ T7629] syz.2.582: attempt to access beyond end of device
[  161.038152][ T7629] loop2: rw=2049, sector=2344, nr_sectors = 32 limit=256
[  161.158351][  T993] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  161.332647][ T6466] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  161.365447][  T993] gspca_cpia1: usb_control_msg 01, error -32
[  161.367719][  T993] gspca_cpia1: usb_control_msg 01, error -71
[  161.367740][  T993] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[  161.399915][  T993] usb 5-1: USB disconnect, device number 7
[  161.834733][ T7641] loop5: detected capacity change from 0 to 1024
[  161.998493][ T7643] loop4: detected capacity change from 0 to 512
[  162.014045][ T7643] EXT4-fs error (device loop4): __ext4_fill_super:5664: inode #2: comm syz.4.588: casefold flag without casefold feature
[  162.014081][ T7643] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  162.014308][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  162.014329][    C0] EXT4-fs (loop4): last error at time 1792600078: __ext4_fill_super:5664: inode 2
[  162.064881][ T7643] EXT4-fs (loop4): get root inode failed
[  162.064904][ T7643] EXT4-fs (loop4): mount failed
[  162.289457][ T7647] loop2: detected capacity change from 0 to 512
[  162.314414][  T993] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  162.357673][ T7647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.409637][ T7647] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  162.468411][  T993] usb 5-1: unable to get BOS descriptor or descriptor too short
[  162.469393][ T7647] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  162.470167][  T993] usb 5-1: not running at top speed; connect to a high speed hub
[  162.470206][  T993] usb 5-1: New USB device found: idVendor=1bbb, idProduct=011e, bcdDevice=a6.b7
[  162.517542][  T993] usb 5-1: config 4 has an invalid interface number: 4 but max is 0
[  162.517574][  T993] usb 5-1: config 4 has no interface number 0
[  162.517607][  T993] usb 5-1: config 4 interface 4 has no altsetting 0
[  162.547328][  T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.547360][  T993] usb 5-1: Product: syz
[  162.547378][  T993] usb 5-1: Manufacturer: syz
[  162.547396][  T993] usb 5-1: SerialNumber: syz
[  162.738945][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.829928][  T993] usb 5-1: USB disconnect, device number 8
[  163.475780][ T7661] loop2: detected capacity change from 0 to 32768
[  163.490038][ T7661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.591 (7661)
[  163.538189][ T7661] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.538219][ T7661] BTRFS info (device loop2): using crc32c checksum algorithm
[  163.641968][ T7661] BTRFS info (device loop2): enabling ssd optimizations
[  163.641995][ T7661] BTRFS info (device loop2): turning on flush-on-commit
[  163.642011][ T7661] BTRFS info (device loop2): enabling free space tree
[  163.642026][ T7661] BTRFS info (device loop2): enabling auto defrag
[  163.642042][ T7661] BTRFS info (device loop2): use lzo compression, level 1
[  163.642061][ T7661] BTRFS info (device loop2): max_inline set to 4096
[  163.928824][ T5610] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.968660][ T7703] sd 0:0:1:0: PR command failed: 1026
[  163.968709][ T7703] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  163.968753][ T7703] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  164.040316][ T7669] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  164.041744][ T7669] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  164.059928][ T7670] syz.0.596 (7670) used greatest stack depth: 17992 bytes left
[  164.283339][ T7669] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  164.333099][ T7669] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  164.333176][ T7669] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  164.413570][ T7669] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  164.442019][ T7669] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  164.450505][ T7669] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  164.491548][ T7669] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  164.540774][ T7669] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  164.540853][ T7669] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  164.566978][ T7669] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  164.650980][ T7669] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  164.651765][ T7669] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  164.677492][ T7669] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  165.183660][ T7731] netlink: 64 bytes leftover after parsing attributes in process `syz.4.618'.
[  165.244135][ T7728] loop5: detected capacity change from 0 to 4096
[  165.331291][ T7740] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  165.384445][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout
[  165.452228][ T7728] NILFS (loop5): error -22 preparing GC: cannot mark copying blocks dirty
[  165.776366][ T7746] input: syz0 as /devices/virtual/input/input15
[  165.901463][ T7755] block nbd1: server does not support multiple connections per device.
[  165.903639][ T7755] block nbd1: shutting down sockets
[  166.030920][ T7757] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2)
[  166.063736][ T7761] netlink: 'syz.2.631': attribute type 12 has an invalid length.
[  166.063763][ T7761] netlink: 'syz.2.631': attribute type 29 has an invalid length.
[  166.063778][ T7761] netlink: 148 bytes leftover after parsing attributes in process `syz.2.631'.
[  166.063817][ T7761] netlink: 'syz.2.631': attribute type 1 has an invalid length.
[  166.063831][ T7761] netlink: 'syz.2.631': attribute type 2 has an invalid length.
[  166.364115][ T7769] loop2: detected capacity change from 0 to 512
[  166.374907][ T7750] loop4: detected capacity change from 0 to 32768
[  166.383802][ T7750] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.626 (7750)
[  166.424384][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  166.425391][ T7772] loop1: detected capacity change from 0 to 512
[  166.429779][ T7750] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  166.429812][ T7750] BTRFS info (device loop4): using sha256 checksum algorithm
[  166.491479][ T7772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  166.491627][ T7772] System zones: 1-12
[  166.513884][ T7769] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  166.515054][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  166.573687][ T7772] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.636: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  166.573853][ T7772] loop1: lost filesystem error report for type 5 error -117
[  166.574692][    C0] EXT4-fs (loop1): initial error at time 1792600083: ext4_xattr_inode_iget:473
[  166.574800][    C0] EXT4-fs (loop1): last error at time 1792600083: ext4_xattr_inode_iget:473
[  166.597492][   T54] Bluetooth: hci3: command 0x0c1a tx timeout
[  166.677583][ T7772] EXT4-fs (loop1): 1 orphan inode deleted
[  166.683123][ T7750] BTRFS info (device loop4): rebuilding free space tree
[  166.716120][ T7772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.745019][ T7769] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  166.769503][ T7750] BTRFS info (device loop4): disabling free space tree
[  166.769571][ T7750] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  166.769607][ T7750] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  166.844158][ T7750] BTRFS info (device loop4): checking UUID tree
[  166.850605][ T7750] BTRFS info (device loop4): turning off barriers
[  166.850675][ T7750] BTRFS info (device loop4): force clearing of disk cache
[  166.850696][ T7750] BTRFS info (device loop4): use lzo compression, level 1
[  167.002683][   T63] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  167.122226][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.124103][ T5609] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  167.464379][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  167.493972][ T7803] loop0: detected capacity change from 0 to 2048
[  167.582288][ T7803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.645855][ T7803] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  167.854877][ T7803] overlayfs: failed to verify upper root origin
[  168.009704][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.175182][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.5.653'.
[  168.175308][ T7827] netlink: 32 bytes leftover after parsing attributes in process `syz.5.653'.
[  168.175328][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.5.653'.
[  168.176419][ T7827] netlink: 32 bytes leftover after parsing attributes in process `syz.5.653'.
[  168.283645][ T7833] loop5: detected capacity change from 0 to 512
[  168.323456][ T7830] loop1: detected capacity change from 0 to 1024
[  168.414343][ T7833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.414468][ T7833] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.585460][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  168.675351][   T54] Bluetooth: hci3: command 0x0c1a tx timeout
[  168.763089][ T6466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.003258][   T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.158639][   T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.298501][   T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.371103][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  169.373046][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  169.373953][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  169.403538][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  169.404169][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  169.476929][   T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  169.546064][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  169.548236][   T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.624870][   T26] usb 2-1: Using ep0 maxpacket: 32
[  169.626369][   T26] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  169.627778][   T26] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  169.627809][   T26] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  169.627837][   T26] usb 2-1: config 0 interface 0 has no altsetting 0
[  169.640492][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.640521][   T26] usb 2-1: Product: syz
[  169.640537][   T26] usb 2-1: Manufacturer: syz
[  169.640553][   T26] usb 2-1: SerialNumber: syz
[  169.723465][   T26] usb 2-1: config 0 descriptor??
[  170.172977][   T26] gs_usb 2-1:0.0: Configuring for 162 interfaces
[  170.226299][   T63] bridge_slave_1: left allmulticast mode
[  170.226329][   T63] bridge_slave_1: left promiscuous mode
[  170.226614][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.263511][ T7862] loop0: detected capacity change from 0 to 32768
[  170.275191][   T63] bridge_slave_0: left allmulticast mode
[  170.275220][   T63] bridge_slave_0: left promiscuous mode
[  170.275494][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.278460][ T7862] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.665 (7862)
[  170.320281][ T7862] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  170.320320][ T7862] BTRFS info (device loop0): using blake2b checksum algorithm
[  170.401716][ T7871] loop2: detected capacity change from 0 to 1024
[  170.437994][ T7855] loop5: detected capacity change from 0 to 32768
[  170.512540][ T7855] JBD2: Ignoring recovery information on journal
[  170.545906][ T7862] BTRFS info (device loop0): enabling ssd optimizations
[  170.545937][ T7862] BTRFS info (device loop0): using spread ssd allocation scheme
[  170.545955][ T7862] BTRFS info (device loop0): turning off barriers
[  170.545974][ T7862] BTRFS info (device loop0): enabling free space tree
[  170.545991][ T7862] BTRFS info (device loop0): enabling auto defrag
[  170.546010][ T7862] BTRFS info (device loop0): force zlib compression, level 3
[  170.643777][ T7855] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  170.667091][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  170.715229][ T5611] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  170.747879][   T54] Bluetooth: hci3: command 0x0c1a tx timeout
[  171.382665][ T5751] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  171.402236][ T6466] ocfs2: Unmounting device (7,5) on (node local)
[  171.475202][   T54] Bluetooth: hci1: command tx timeout
[  171.537234][ T5751] usb 1-1: New USB device found: idVendor=2001, idProduct=b301, bcdDevice=45.b0
[  171.537281][ T5751] usb 1-1: too many configurations: 129, using maximum allowed: 8
[  171.539694][ T5751] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  171.539741][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  171.541033][ T5751] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  171.541087][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  171.542206][ T5751] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  171.542247][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  171.549153][ T5751] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  171.549272][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  171.568315][ T5751] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  171.568437][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  171.584186][ T5751] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  171.586531][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  171.603204][ T5751] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  171.603324][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  171.663780][ T5751] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 72, using maximum allowed: 30
[  171.663919][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  171.714723][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.714800][ T5751] usb 1-1: Product: syz
[  171.714851][ T5751] usb 1-1: Manufacturer: syz
[  171.714893][ T5751] usb 1-1: SerialNumber: syz
[  171.796921][ T5751] r8152-cfgselector 1-1: Unknown version 0x0000
[  171.796952][ T5751] r8152-cfgselector 1-1: config 0 descriptor??
[  171.906878][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.936445][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.961356][   T63] bond0 (unregistering): Released all slaves
[  172.106318][   T31] r8152-cfgselector 1-1: USB disconnect, device number 4
[  172.260104][   T26] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[  172.379959][ T7897] netlink: 'syz.1.671': attribute type 1 has an invalid length.
[  172.437375][ T7858] rxe_eth0 speed is unknown, defaulting to 1000
[  172.561154][   T26] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[  172.586944][   T26] usb 2-1: USB disconnect, device number 7
[  172.735192][ T7920] loop1: detected capacity change from 0 to 1024
[  173.545880][   T54] Bluetooth: hci1: command tx timeout
[  173.581837][ T7939] loop2: detected capacity change from 0 to 512
[  173.601876][ T7939] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  173.601898][ T7939] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  173.671043][ T7939] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #16: comm syz.2.684: invalid indirect mapped block 32768 (level 2)
[  173.680908][ T7939] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  173.681689][ T7940] veth1_macvtap: left promiscuous mode
[  173.685963][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  173.685986][    C0] EXT4-fs (loop2): initial error at time 1792600090: ext4_free_branches:1040: inode 16
[  173.686019][    C0] EXT4-fs (loop2): last error at time 1792600090: ext4_free_branches:1040: inode 16
[  173.802280][ T7940] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[  173.847340][ T7939] EXT4-fs (loop2): 1 orphan inode deleted
[  173.847367][ T7939] EXT4-fs (loop2): 1 truncate cleaned up
[  173.910664][ T7939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.162877][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.387074][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.688'.
[  174.387113][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.688'.
[  174.532839][   T63] hsr_slave_0: left promiscuous mode
[  174.538391][   T63] hsr_slave_1: left promiscuous mode
[  174.546234][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.546261][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.550851][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.550876][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.600530][   T63] veth1_macvtap: left promiscuous mode
[  174.600597][   T63] veth0_macvtap: left promiscuous mode
[  174.600718][   T63] veth1_vlan: left promiscuous mode
[  174.600794][   T63] veth0_vlan: left promiscuous mode
[  175.105940][   T63] team0 (unregistering): Port device team_slave_1 removed
[  175.129259][   T63] team0 (unregistering): Port device team_slave_0 removed
[  175.435352][ T7970] loop5: detected capacity change from 0 to 32768
[  175.454520][ T5736] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  175.476473][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.476473][ T7970] 
[  175.476509][ T7970] xtLookup: xtSearch returned -5
[  175.476520][ T7970] free_index: error reading directory table
[  175.476529][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.476529][ T7970] 
[  175.476550][ T7970] xtLookup: xtSearch returned -5
[  175.476568][ T7970] free_index: error reading directory table
[  175.476577][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.476577][ T7970] 
[  175.476597][ T7970] xtLookup: xtSearch returned -5
[  175.476606][ T7970] free_index: error reading directory table
[  175.476615][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.476615][ T7970] 
[  175.476634][ T7970] xtLookup: xtSearch returned -5
[  175.476643][ T7970] free_index: error reading directory table
[  175.476652][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.476652][ T7970] 
[  175.476670][ T7970] xtLookup: xtSearch returned -5
[  175.476679][ T7970] free_index: error reading directory table
[  175.476689][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.476689][ T7970] 
[  175.476709][ T7970] xtLookup: xtSearch returned -5
[  175.476718][ T7970] add_index: get/read_metapage failed!
[  175.476730][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.476730][ T7970] 
[  175.476749][ T7970] xtLookup: xtSearch returned -5
[  175.476758][ T7970] free_index: error reading directory table
[  175.476767][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.476767][ T7970] 
[  175.476785][ T7970] xtLookup: xtSearch returned -5
[  175.476794][ T7970] free_index: error reading directory table
[  175.476803][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.476803][ T7970] 
[  175.476822][ T7970] xtLookup: xtSearch returned -5
[  175.476832][ T7970] free_index: error reading directory table
[  175.476840][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.476840][ T7970] 
[  175.476859][ T7970] xtLookup: xtSearch returned -5
[  175.476868][ T7970] free_index: error reading directory table
[  175.476877][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.476877][ T7970] 
[  175.476896][ T7970] xtLookup: xtSearch returned -5
[  175.476905][ T7970] free_index: error reading directory table
[  175.479955][ T7970] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  175.479955][ T7970] 
[  175.479989][ T7970] xtLookup: xtSearch returned -5
[  175.480001][ T7970] add_index: get/read_metapage failed!
[  175.625136][   T54] Bluetooth: hci1: command tx timeout
[  175.679594][ T5736] usb 1-1: New USB device found: idVendor=045e, idProduct=00e3, bcdDevice=0.00
[  175.709648][ T5736] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  175.709752][ T5736] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024
[  175.709834][ T5736] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  175.709907][ T5736] usb 1-1: config 0 interface 0 has no altsetting 0
[  175.710051][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.823453][ T5736] usb 1-1: config 0 descriptor??
[  175.830478][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5
[  175.833971][ T7972] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  175.907667][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'.
[  175.933961][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.289934][ T5736] microsoft 0003:045E:00E3.0008: ignoring exceeding usage max
[  176.333909][ T5736] microsoft 0003:045E:00E3.0008: hidraw0: USB HID v0.10 Joystick [HID 045e:00e3] on usb-dummy_hcd.0-1/input0
[  176.577985][    T9] usb 1-1: USB disconnect, device number 5
[  176.580180][ T7994] loop2: detected capacity change from 0 to 64
[  176.612636][ T7990] fido_id[7990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:00E3.0008/report_descriptor': No such file or directory
[  177.042497][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.042665][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.042994][ T7858] bridge_slave_0: entered allmulticast mode
[  177.052776][ T7858] bridge_slave_0: entered promiscuous mode
[  177.077493][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.077613][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.077764][ T7858] bridge_slave_1: entered allmulticast mode
[  177.082942][ T7858] bridge_slave_1: entered promiscuous mode
[  177.206442][ T7985] loop1: detected capacity change from 0 to 32768
[  177.246700][ T7985] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  177.278256][ T7985] JBD2: Ignoring recovery information on journal
[  177.322266][ T7858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.325289][ T7998] loop5: detected capacity change from 0 to 32768
[  177.354310][ T7858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.407181][ T7985] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  177.448417][ T7858] team0: Port device team_slave_0 added
[  177.452049][ T7998] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.478950][ T7858] team0: Port device team_slave_1 added
[  177.689920][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.689940][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.689968][ T7858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.716557][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.716609][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.716684][ T7858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.728005][   T54] Bluetooth: hci1: command tx timeout
[  177.824375][ T7998] XFS (loop5): Ending clean mount
[  177.969601][ T7998] XFS (loop5): Quotacheck needed: Please wait.
[  178.065550][ T5612] ocfs2: Unmounting device (7,1) on (node local)
[  178.135946][ T8027] ima: Unable to open file: /eas (-2)
[  178.142164][ T8026] ima: policy update failed
[  178.142375][   T32] kauditd_printk_skb: 3 callbacks suppressed
[  178.142390][   T32] audit: type=1802 audit(1792600094.733:334): pid=8026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.707" res=0 errno=-22
[  178.191318][ T7858] hsr_slave_0: entered promiscuous mode
[  178.192244][ T7858] hsr_slave_1: entered promiscuous mode
[  178.192849][ T7858] debugfs: 'hsr0' already exists in 'hsr'
[  178.192873][ T7858] Cannot create hsr debugfs directory
[  178.236513][ T7998] XFS (loop5): Quotacheck: Done.
[  178.439594][ T6466] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.857113][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6
[  179.221159][ T8051] loop0: detected capacity change from 0 to 1024
[  179.334778][   T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  179.459171][ T8029] loop1: detected capacity change from 0 to 40427
[  179.494338][   T31] usb 6-1: Using ep0 maxpacket: 16
[  179.495535][   T31] usb 6-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[  179.499473][   T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.499524][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  179.499555][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  179.499577][   T31] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  179.499600][   T31] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  179.501381][   T31] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  179.501407][   T31] usb 6-1: Manufacturer: syz
[  179.591220][   T31] usb 6-1: config 0 descriptor??
[  179.620720][ T8029] F2FS-fs (loop1): invalid crc value
[  179.975324][   T31] rc_core: IR keymap rc-hauppauge not found
[  179.975351][   T31] Registered IR keymap rc-empty
[  179.975989][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.009689][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.026800][   T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  180.031321][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.036577][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.064582][   T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17
[  180.073020][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.095265][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.114449][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.135419][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.156306][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.174523][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.194575][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.214454][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.234391][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.238800][ T8029] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.263382][   T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.288952][   T31] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  180.288979][   T31] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  180.314351][ T8029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  180.379956][ T8029] bio_check_eod: 84 callbacks suppressed
[  180.379979][ T8029] syz.1.708: attempt to access beyond end of device
[  180.379979][ T8029] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  180.411626][ T8029] CPU: 1 UID: 0 PID: 8029 Comm: syz.1.708 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  180.411663][ T8029] Tainted: [L]=SOFTLOCKUP
[  180.411671][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  180.411703][ T8029] Call Trace:
[  180.411713][ T8029]  <TASK>
[  180.411723][ T8029]  dump_stack_lvl+0xe8/0x150
[  180.411764][ T8029]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  180.411798][ T8029]  f2fs_write_end_bio+0x118e/0x15d0
[  180.411850][ T8029]  __submit_merged_bio+0x258/0x6a0
[  180.411876][ T8029]  ? rcu_is_watching+0x16/0xb0
[  180.411915][ T8029]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  180.411946][ T8029]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  180.412000][ T8029]  f2fs_write_data_pages+0x2a13/0x36e0
[  180.412081][ T8029]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.412110][ T8029]  ? is_bpf_text_address+0x26/0x2b0
[  180.412160][ T8029]  ? arch_stack_walk+0xfb/0x150
[  180.412218][ T8029]  ? add_lock_to_list+0xc7/0x100
[  180.412253][ T8029]  ? lockdep_unlock+0x5c/0xd0
[  180.412275][ T8029]  ? __lock_acquire+0x1511/0x2de0
[  180.412332][ T8029]  ? do_raw_spin_lock+0x12b/0x2f0
[  180.412380][ T8029]  ? do_raw_spin_unlock+0xf5/0x200
[  180.412414][ T8029]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.412449][ T8029]  do_writepages+0x338/0x560
[  180.412496][ T8029]  ? do_raw_spin_unlock+0xf5/0x200
[  180.412535][ T8029]  filemap_fdatawrite+0x1e9/0x2f0
[  180.412561][ T8029]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  180.412636][ T8029]  ? do_raw_spin_unlock+0xf5/0x200
[  180.412677][ T8029]  f2fs_sync_dirty_inodes+0x471/0x970
[  180.412730][ T8029]  f2fs_write_checkpoint+0x860/0x24d0
[  180.412804][ T8029]  f2fs_issue_checkpoint+0x424/0x6f0
[  180.412841][ T8029]  ? __lock_acquire+0x1511/0x2de0
[  180.412874][ T8029]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  180.412921][ T8029]  ? rcu_is_watching+0x16/0xb0
[  180.412953][ T8029]  ? __up_read+0x29c/0x930
[  180.413033][ T8029]  ? f2fs_sync_fs+0x1f2/0x3c0
[  180.413071][ T8029]  f2fs_do_sync_file+0xc5a/0x1880
[  180.413099][ T8029]  ? __se_sys_futex+0x3a8/0x450
[  180.413140][ T8029]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  180.413170][ T8029]  ? f2fs_sync_file+0xe9/0x160
[  180.413201][ T8029]  __x64_sys_fsync+0x12a/0x180
[  180.413237][ T8029]  do_syscall_64+0x166/0x520
[  180.413267][ T8029]  ? trace_irq_disable+0x3b/0x140
[  180.413295][ T8029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.413319][ T8029]  ? clear_bhb_loop+0x70/0xc0
[  180.413349][ T8029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.413373][ T8029] RIP: 0033:0x7fce6b79f559
[  180.413395][ T8029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.413415][ T8029] RSP: 002b:00007fce6c6fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000004a
[  180.413439][ T8029] RAX: ffffffffffffffda RBX: 00007fce6ba25fa0 RCX: 00007fce6b79f559
[  180.413457][ T8029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  180.413471][ T8029] RBP: 00007fce6b836b20 R08: 0000000000000000 R09: 0000000000000000
[  180.413484][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.413498][ T8029] R13: 00007fce6ba26038 R14: 00007fce6ba25fa0 R15: 00007fff7a75fa78
[  180.413536][ T8029]  </TASK>
[  180.431121][ T8029] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  180.738050][ T5736] usb 6-1: USB disconnect, device number 6
[  181.029049][ T7858] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  181.048397][ T7858] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  181.050952][ T7858] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  181.076036][ T7858] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  181.076997][ T7858] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  181.110073][ T7858] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  181.111088][ T7858] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  181.140290][ T7858] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  181.319804][ T7858] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.386604][ T7858] 8021q: adding VLAN 0 to HW filter on device team0
[  181.431998][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.432114][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.509471][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.509584][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.007680][ T8117] loop2: detected capacity change from 0 to 4096
[  182.039147][ T8120] loop1: detected capacity change from 0 to 4096
[  182.121933][ T8117] ntfs3(loop2): ino=19, mi_enum_attr
[  182.121967][ T8117] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  182.169922][ T8120] ntfs3(loop1): ino=9, mi_enum_attr
[  182.169955][ T8120] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  182.179533][ T8120] ntfs3(loop1): ino=9, mi_enum_attr
[  182.179831][ T8120] ntfs3(loop1): ino=b, mi_enum_attr
[  182.179994][ T8120] ntfs3(loop1): Failed to load $Extend (-22).
[  182.180012][ T8120] ntfs3(loop1): Failed to initialize $Extend.
[  182.402887][ T8133] loop5: detected capacity change from 0 to 16
[  182.462119][ T8133] erofs (device loop5): mounted with root inode @ nid 36.
[  182.516834][ T8133] syz.5.732: attempt to access beyond end of device
[  182.516834][ T8133] loop5: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16
[  182.549345][ T8133] syz.5.732: attempt to access beyond end of device
[  182.549345][ T8133] loop5: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16
[  182.553190][   T32] audit: type=1800 audit(1792600099.143:335): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.732" name="file1" dev="loop5" ino=86 res=0 errno=-5
[  182.567279][ T8133] syz.5.732: attempt to access beyond end of device
[  182.567279][ T8133] loop5: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16
[  182.568759][   T32] audit: type=1800 audit(1792600099.163:336): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.732" name="file1" dev="loop5" ino=86 res=0 errno=-5
[  182.973775][   T32] audit: type=1800 audit(1792600099.563:337): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.736" name="file0" dev="tmpfs" ino=904 res=0 errno=-22
[  183.591058][ T7858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.463909][ T7858] veth0_vlan: entered promiscuous mode
[  184.499543][ T8184] loop0: detected capacity change from 0 to 32768
[  184.503819][ T7858] veth1_vlan: entered promiscuous mode
[  184.528695][ T8184] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  184.573510][ T8186] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  184.573734][ T8186] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  184.573916][ T8186] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  184.574107][ T8186] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  184.574862][ T8186] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  184.574953][ T8186] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  184.580793][ T8180] loop2: detected capacity change from 0 to 32768
[  184.646237][ T8184] XFS (loop0): Ending clean mount
[  184.650435][ T8186] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  184.659687][ T8180] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  184.759738][ T7858] veth0_macvtap: entered promiscuous mode
[  184.778548][ T8180] XFS (loop2): Ending clean mount
[  184.811120][ T7858] veth1_macvtap: entered promiscuous mode
[  184.826676][   T32] audit: type=1800 audit(1792600101.423:338): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.747" name="file1" dev="loop2" ino=6150 res=0 errno=-22
[  184.966827][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.028972][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.046548][ T5611] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  185.059431][ T5610] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  185.203072][ T1031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.207151][ T1031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.367469][   T86] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.368642][   T86] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.569528][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.569553][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.783827][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.783852][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.866110][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  186.063665][ T8243] loop5: detected capacity change from 0 to 512
[  186.173477][ T8243] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory
[  186.183658][ T8243] loop5: lost filesystem error report for type 5 error -12
[  186.185383][    C0] EXT4-fs (loop5): initial error at time 1792600102: ext4_process_orphan:346
[  186.185417][    C0] EXT4-fs (loop5): last error at time 1792600102: ext4_process_orphan:346
[  186.247913][ T8243] EXT4-fs (loop5): 2 truncates cleaned up
[  186.255695][ T8243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.410208][ T6466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.584588][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  186.584648][   T54] Bluetooth: hci4: command 0x0c1a tx timeout
[  186.584685][   T54] Bluetooth: hci3: command 0x0c1a tx timeout
[  186.584712][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  186.754992][    T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  186.848110][ T8236] loop2: detected capacity change from 0 to 32768
[  186.909567][    T9] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40
[  186.910775][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  186.910809][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.911838][    T9] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  186.911863][    T9] usb 5-1: Product: syz
[  186.961008][ T8236] JBD2: Ignoring recovery information on journal
[  186.981139][    T9] usb 5-1: config 0 descriptor??
[  187.001689][    T9] hub 5-1:0.0: USB hub found
[  187.078002][ T8274] loop1: detected capacity change from 0 to 128
[  187.081924][ T8274] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  187.111268][ T8274] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  187.157546][ T8275] usbip-vudc usbip-vudc.0: gadget not bound
[  187.197354][ T8236] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  187.204771][    T9] hub 5-1:0.0: 1 port detected
[  187.406168][    T9] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  187.430750][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  187.430862][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  187.467135][    T9] usb 5-1: USB disconnect, device number 9
[  187.628378][ T8280] sctp: [Deprecated]: syz.0.766 (pid 8280) Use of int in max_burst socket option deprecated.
[  187.628378][ T8280] Use struct sctp_assoc_value instead
[  187.653429][ T5610] ocfs2: Unmounting device (7,2) on (node local)
[  188.193787][ T8302] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[7858] was attempted by ""[8302]
[  188.388009][ T5736] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  188.535248][ T5736] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  188.536511][ T5736] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  188.536545][ T5736] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  188.536570][ T5736] usb 3-1: config 0 interface 0 has no altsetting 0
[  188.539144][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  188.539183][ T5736] usb 3-1: Product: syz
[  188.539199][ T5736] usb 3-1: Manufacturer: syz
[  188.539214][ T5736] usb 3-1: SerialNumber: syz
[  188.614638][ T5736] usb 3-1: config 0 descriptor??
[  188.643241][ T5736] usb 3-1: selecting invalid altsetting 0
[  188.663802][ T8316] capability: warning: `syz.5.779' uses 32-bit capabilities (legacy support in use)
[  188.665973][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout
[  188.666012][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout
[  188.882918][ T5736] usb 3-1: USB disconnect, device number 6
[  189.142141][ T8332] netlink: 25 bytes leftover after parsing attributes in process `syz.5.787'.
[  189.145181][ T8332] eql: entered promiscuous mode
[  189.165917][ T8332] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.787'.
[  189.166134][ T8332] 0ªX¹¦Dö»: renamed from eql
[  189.173505][ T8332] 0ªX¹¦Dö»: remember to turn off Van-Jacobson compression on your slave devices
[  189.173538][ T8332] 0ªX¹¦Dö»: left promiscuous mode
[  189.173554][ T8332] 0ªX¹¦Dö»: entered allmulticast mode
[  189.562550][ T8326] loop0: detected capacity change from 0 to 32768
[  189.589513][ T8326] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.784 (8326)
[  189.626186][ T8326] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  189.626222][ T8326] BTRFS info (device loop0): using sha256 checksum algorithm
[  189.989894][ T8362] loop1: detected capacity change from 0 to 1024
[  190.656825][ T8348] loop5: detected capacity change from 0 to 131072
[  190.662825][ T8348] F2FS-fs (loop5): Test dummy encryption mode enabled
[  190.671034][ T8348] F2FS-fs (loop5): invalid crc value
[  190.762161][ T8326] BTRFS info (device loop0): rebuilding free space tree
[  190.764380][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  190.764417][   T54] Bluetooth: hci4: command 0x0c1a tx timeout
[  190.795931][ T8348] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  190.796421][ T8348] loop5: lost filesystem error report for type 5 error -117
[  190.802153][ T8348] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  190.806920][ T8348] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0
[  190.806995][ T8348] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  190.807077][ T8348] F2FS-fs (loop5): Start checkpoint disabled!
[  190.831268][ T8348] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0
[  190.873558][ T8348] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  190.892710][ T8326] BTRFS info (device loop0): disabling free space tree
[  190.892778][ T8326] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  190.892806][ T8326] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  191.000604][ T8326] BTRFS info (device loop0): checking UUID tree
[  191.009783][ T8326] BTRFS info (device loop0): turning off barriers
[  191.009867][ T8326] BTRFS info (device loop0): force clearing of disk cache
[  191.019264][ T8326] BTRFS info (device loop0): use lzo compression, level 1
[  191.273861][ T8361] mmap: syz.2.796 (8361) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  191.439451][ T5611] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  191.850363][ T8392] loop5: detected capacity change from 0 to 164
[  192.149222][ T8383] loop1: detected capacity change from 0 to 32768
[  192.350980][   T32] audit: type=1326 audit(1792600109.944:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.5.810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0039f559 code=0x7ffc0000
[  192.378829][   T32] audit: type=1326 audit(1792600109.944:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.5.810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0039f559 code=0x7ffc0000
[  192.425502][   T32] audit: type=1326 audit(1792600110.024:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.5.810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7faa0039f559 code=0x7ffc0000
[  192.425650][   T32] audit: type=1326 audit(1792600110.024:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.5.810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0039f559 code=0x7ffc0000
[  192.425822][   T32] audit: type=1326 audit(1792600110.024:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.5.810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0039f559 code=0x7ffc0000
[  192.460285][   T32] audit: type=1326 audit(1792600110.034:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.5.810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7faa0039f559 code=0x7ffc0000
[  192.460349][   T32] audit: type=1326 audit(1792600110.034:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.5.810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0039f559 code=0x7ffc0000
[  192.488599][   T32] audit: type=1326 audit(1792600110.064:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.5.810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0039f559 code=0x7ffc0000
[  192.599024][   T32] audit: type=1326 audit(1792600110.194:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.5.810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7faa0039f559 code=0x7ffc0000
[  192.599084][   T32] audit: type=1326 audit(1792600110.194:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.5.810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0039f559 code=0x7ffc0000
[  192.824302][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout
[  193.036991][ T8418] loop5: detected capacity change from 0 to 1024
[  193.851878][ T8445] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  194.065941][ T8454] loop2: detected capacity change from 0 to 512
[  194.101290][ T8454] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.830: corrupted in-inode xattr: invalid ea_ino
[  194.101330][ T8454] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  194.102728][ T8454] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.830: couldn't read orphan inode 15 (err -117)
[  194.102763][ T8454] loop2: lost filesystem error report for type 5 error -117
[  194.104263][    C1] EXT4-fs (loop2): error count since last fsck: 2
[  194.104284][    C1] EXT4-fs (loop2): initial error at time 1792600111: ext4_iget_extra_inode:6027: inode 15
[  194.104316][    C1] EXT4-fs (loop2): last error at time 1792600111: ext4_orphan_get:1409
[  194.163947][ T8454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.223895][ T8454] EXT4-fs (loop2): shut down requested (2)
[  194.298400][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.508847][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  194.508909][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  194.588974][ T8440] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  194.589197][ T8440] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  194.589367][ T8440] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  194.589561][ T8440] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  194.589784][ T8440] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  194.854387][ T5699] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  194.916436][ T8469] loop0: detected capacity change from 0 to 32768
[  194.961420][ T8482] loop4: detected capacity change from 0 to 4096
[  195.008455][ T8469] read_mapping_page failed!
[  195.008477][ T8469] ERROR: (device loop0): txCommit: 
[  195.008477][ T8469] 
[  195.027992][ T5699] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  195.029833][ T5699] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  195.029865][ T5699] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  195.029888][ T5699] usb 6-1: config 0 interface 0 has no altsetting 0
[  195.048764][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  195.048866][ T5699] usb 6-1: Product: syz
[  195.048955][ T5699] usb 6-1: Manufacturer: syz
[  195.048992][ T5699] usb 6-1: SerialNumber: syz
[  195.098729][ T5699] usb 6-1: config 0 descriptor??
[  195.180476][ T5699] usb 6-1: selecting invalid altsetting 0
[  195.238008][ T8482] gfs2: path_lookup on c::: returned error -22
[  195.691253][ T5699] usb 6-1: USB disconnect, device number 7
[  195.821071][ T8494] macvlan0: entered promiscuous mode
[  195.821796][ T8494] netlink: 'syz.2.846': attribute type 2 has an invalid length.
[  195.821817][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[  195.864390][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout
[  196.073094][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  196.418179][ T8507] loop5: detected capacity change from 0 to 64
[  196.499195][ T8490] loop0: detected capacity change from 0 to 40427
[  196.522945][ T8490] F2FS-fs (loop0): invalid crc value
[  196.619039][ T8490] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  196.638870][ T8490] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  196.666181][   T54] Bluetooth: hci4: command 0x0c1a tx timeout
[  196.666201][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout
[  196.666224][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  196.666280][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout
[  196.802617][ T8490] syz.0.844: attempt to access beyond end of device
[  196.802617][ T8490] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  196.879529][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.0.844 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  196.879577][ T8490] Tainted: [L]=SOFTLOCKUP
[  196.879586][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  196.879607][ T8490] Call Trace:
[  196.879614][ T8490]  <TASK>
[  196.879621][ T8490]  dump_stack_lvl+0xe8/0x150
[  196.879652][ T8490]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  196.879677][ T8490]  f2fs_write_end_bio+0x118e/0x15d0
[  196.879715][ T8490]  __submit_merged_bio+0x258/0x6a0
[  196.879735][ T8490]  ? rcu_is_watching+0x16/0xb0
[  196.879762][ T8490]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  196.879785][ T8490]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  196.879864][ T8490]  f2fs_write_data_pages+0x2a13/0x36e0
[  196.879916][ T8490]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  196.879937][ T8490]  ? is_bpf_text_address+0x26/0x2b0
[  196.879972][ T8490]  ? arch_stack_walk+0xfb/0x150
[  196.880013][ T8490]  ? add_lock_to_list+0xc7/0x100
[  196.880037][ T8490]  ? lockdep_unlock+0x5c/0xd0
[  196.880051][ T8490]  ? __lock_acquire+0x1511/0x2de0
[  196.880091][ T8490]  ? do_raw_spin_lock+0x12b/0x2f0
[  196.880124][ T8490]  ? do_raw_spin_unlock+0xf5/0x200
[  196.880149][ T8490]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  196.880172][ T8490]  do_writepages+0x338/0x560
[  196.880205][ T8490]  ? do_raw_spin_unlock+0xf5/0x200
[  196.880233][ T8490]  filemap_fdatawrite+0x1e9/0x2f0
[  196.880252][ T8490]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  196.880304][ T8490]  ? do_raw_spin_unlock+0xf5/0x200
[  196.880332][ T8490]  f2fs_sync_dirty_inodes+0x471/0x970
[  196.880369][ T8490]  f2fs_write_checkpoint+0x860/0x24d0
[  196.880421][ T8490]  f2fs_issue_checkpoint+0x424/0x6f0
[  196.880447][ T8490]  ? __lock_acquire+0x747/0x2de0
[  196.880469][ T8490]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  196.880503][ T8490]  ? rcu_is_watching+0x16/0xb0
[  196.880525][ T8490]  ? __up_read+0x29c/0x930
[  196.880586][ T8490]  ? f2fs_sync_fs+0x1f2/0x3c0
[  196.880627][ T8490]  f2fs_do_sync_file+0xc5a/0x1880
[  196.880655][ T8490]  ? __se_sys_futex+0x3a8/0x450
[  196.880711][ T8490]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  196.880733][ T8490]  ? f2fs_sync_file+0xe9/0x160
[  196.880760][ T8490]  __x64_sys_fsync+0x12a/0x180
[  196.880786][ T8490]  do_syscall_64+0x166/0x520
[  196.880812][ T8490]  ? trace_irq_disable+0x3b/0x140
[  196.880832][ T8490]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.880849][ T8490]  ? clear_bhb_loop+0x70/0xc0
[  196.880869][ T8490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.880885][ T8490] RIP: 0033:0x7f040979f559
[  196.880899][ T8490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.880913][ T8490] RSP: 002b:00007f040a647028 EFLAGS: 00000246 ORIG_RAX: 000000000000004a
[  196.880931][ T8490] RAX: ffffffffffffffda RBX: 00007f0409a25fa0 RCX: 00007f040979f559
[  196.880942][ T8490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  196.880951][ T8490] RBP: 00007f0409836b20 R08: 0000000000000000 R09: 0000000000000000
[  196.880961][ T8490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.880970][ T8490] R13: 00007f0409a26038 R14: 00007f0409a25fa0 R15: 00007ffcfef82d98
[  196.880997][ T8490]  </TASK>
[  196.895612][ T8490] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  197.358043][ T8500] loop2: detected capacity change from 0 to 32768
[  198.524918][ T8523] loop4: detected capacity change from 0 to 131072
[  198.549431][ T8523] xfs: Deprecated parameter 'ikeep'
[  198.549453][ T8523] XFS: ikeep mount option is deprecated.
[  198.588899][ T8523] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  198.656544][ T8541] loop2: detected capacity change from 0 to 512
[  198.663305][ T8541] EXT4-fs: Ignoring removed nobh option
[  198.736462][ T8523] XFS (loop4): Starting recovery (logdev: internal)
[  198.750519][ T8541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.750839][ T8541] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.808575][ T8523] XFS (loop4): Ending recovery (logdev: internal)
[  198.813074][ T8523] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  198.951064][ T8549] loop0: detected capacity change from 0 to 512
[  198.970714][ T8549] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  199.036051][ T8549] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  199.038750][ T8549] EXT4-fs (loop0): Remounting filesystem read-only
[  199.055752][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  199.055780][    C0] EXT4-fs (loop0): initial error at time 1792600116: ext4_mb_generate_buddy:1315
[  199.055807][    C0] EXT4-fs (loop0): last error at time 1792600116: ext4_mb_generate_buddy:1315
[  199.097152][ T8549] EXT4-fs (loop0): 1 truncate cleaned up
[  199.103399][ T8549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.103528][ T8549] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.136657][ T1031] __quota_error: 1 callbacks suppressed
[  199.136676][ T1031] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  199.136939][ T1031] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  199.136963][ T1031] Quota error (device loop0): write_blk: dquota write failed
[  199.136987][ T1031] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[  199.137006][ T1031] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  199.137025][ T1031] Quota error (device loop0): write_blk: dquota write failed
[  199.137040][ T1031] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[  199.137136][ T1031] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  199.137156][ T1031] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  199.137176][ T1031] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  199.137306][ T1031] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  199.502065][ T8558] loop1: detected capacity change from 0 to 128
[  199.537388][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.559533][ T8558] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  199.574546][ T8558] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.912527][ T5612] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  200.160887][ T8572] loop2: detected capacity change from 0 to 512
[  200.298311][ T8575] ipvlan2: entered promiscuous mode
[  200.354862][ T8575] team0: Device ipvlan2 failed to register rx_handler
[  200.707540][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.878'.
[  200.912571][ T3406] IPVS: starting estimator thread 0...
[  200.965781][ T5699] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  201.006042][ T8599] IPVS: using max 24 ests per chain, 57600 per kthread
[  201.007071][ T5699] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  201.195456][   T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  201.198329][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.268279][ T5699] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  201.348541][   T26] usb 2-1: Using ep0 maxpacket: 8
[  201.349584][ T8613] could not open pipe file descriptor
[  201.350750][   T26] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  201.351910][   T26] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  201.351963][   T26] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  201.351988][   T26] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  201.352015][   T26] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  201.352041][   T26] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  201.352085][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.548769][ T8589] ceph: No mds server is up or the cluster is laggy
[  201.612523][ T8618] sd 0:0:1:0: PR command failed: 1026
[  201.612600][ T8618] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  201.612645][ T8618] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  201.738509][   T26] usb 2-1: GET_CAPABILITIES returned 0
[  201.738562][   T26] usbtmc 2-1:16.0: can't read capabilities
[  201.798439][ T8622] loop5: detected capacity change from 0 to 256
[  201.920358][   T32] audit: type=1400 audit(1792600119.514:350): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8626 comm="syz.2.890" name="unknown" offset=28
[  202.023103][ T1578] usb 2-1: USB disconnect, device number 8
[  202.282106][ T8638] netlink: 'syz.0.896': attribute type 1 has an invalid length.
[  202.282135][ T8638] netlink: 'syz.0.896': attribute type 7 has an invalid length.
[  202.282150][ T8638] netlink: 'syz.0.896': attribute type 8 has an invalid length.
[  202.282165][ T8638] netlink: 208 bytes leftover after parsing attributes in process `syz.0.896'.
[  202.282207][ T8638] NCSI netlink: No device for ifindex 1073545264
[  202.545009][ T8631] loop4: detected capacity change from 0 to 32768
[  202.567725][ T8631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.892 (8631)
[  202.574135][ T8644] tap0: tun_chr_ioctl cmd 1074025677
[  202.583321][ T8644] tap0: linktype set to 805
[  202.605103][ T8631] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.605144][ T8631] BTRFS info (device loop4): using crc32c checksum algorithm
[  202.766090][ T8631] BTRFS info (device loop4): enabling ssd optimizations
[  202.766122][ T8631] BTRFS info (device loop4): turning on flush-on-commit
[  202.766140][ T8631] BTRFS info (device loop4): enabling free space tree
[  202.766158][ T8631] BTRFS info (device loop4): enabling auto defrag
[  202.766177][ T8631] BTRFS info (device loop4): use lzo compression, level 1
[  202.766227][ T8631] BTRFS info (device loop4): max_inline set to 4096
[  203.246825][ T7858] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.301046][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'.
[  203.301071][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'.
[  203.301098][ T8668] netlink: 'syz.2.904': attribute type 11 has an invalid length.
[  203.399659][ T8668] Zero length message leads to an empty skb
[  203.442048][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.908'.
[  203.455837][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.908'.
[  203.457496][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.908'.
[  203.488732][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.908'.
[  203.955316][ T5699] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  203.960715][ T8693] rxe_eth0 speed is unknown, defaulting to 1000
[  204.007628][ T8694] loop2: detected capacity change from 0 to 128
[  204.105555][ T5699] usb 6-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  204.107329][ T5699] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.107355][ T5699] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  204.107404][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.112753][ T5699] usb 6-1: config 0 descriptor??
[  204.166249][ T8694] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  204.166290][ T8694] hpfs: filesystem error: improperly stopped
[  204.166306][ T8694] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  204.166323][ T8694] hpfs: You really don't want any checks? You are crazy...
[  204.166341][ T8694] hpfs: Code page index out of array
[  204.166349][ T8694] hpfs: code page support is disabled
[  204.167562][ T8694] hpfs: hpfs_map_4sectors(): unaligned read
[  204.171084][ T8694] hpfs: hpfs_map_4sectors(): unaligned read
[  204.172876][ T8694] hpfs: filesystem error: unable to find root dir
[  204.240865][ T5699] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  204.240956][ T5699] dvb-usb: bulk message failed: -22 (3/0)
[  204.260900][ T5699] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  204.262079][ T5699] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  204.262132][ T5699] usb 6-1: media controller created
[  204.286225][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  204.295621][ T5699] dvb-usb: bulk message failed: -22 (6/0)
[  204.296065][ T5699] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  204.318215][ T5699] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18
[  204.323037][ T5699] dvb-usb: schedule remote query interval to 150 msecs.
[  204.323066][ T5699] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  204.477933][ T5699] dvb-usb: bulk message failed: -22 (1/0)
[  204.477990][ T5699] dvb-usb: error while querying for an remote control event.
[  204.510083][ T8682] dvb-usb: bulk message failed: -22 (2/0)
[  204.512033][ T8694] hpfs: hpfs_map_4sectors(): unaligned read
[  204.522494][ T5770] usb 6-1: USB disconnect, device number 8
[  204.743853][ T5770] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  205.422224][ T8706] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  205.910784][ T8719] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.087172][ T8719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.286141][ T8719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.367025][ T8719] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.434282][   T26] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  206.494588][ T3406] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.527373][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.586782][   T26] usb 5-1: New USB device found: idVendor=5543, idProduct=0064, bcdDevice=0.00
[  206.589216][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  206.589273][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.628491][   T26] usb 5-1: Device is not authorized for usage
[  206.652014][   T63] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.668727][   T63] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.221122][ T8739] loop2: detected capacity change from 0 to 32768
[  207.298942][ T8739] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  207.353050][ T8739] XFS (loop2): Ending clean mount
[  207.492280][ T8768] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers
[  207.644367][ T5610] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  207.828255][ T8779] loop1: detected capacity change from 0 to 1024
[  207.981693][ T8782] loop9: detected capacity change from 0 to 524287936
[  208.222316][ T8792] loop2: detected capacity change from 0 to 256
[  208.363261][ T8797] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd19
[  208.471921][ T8799] loop2: detected capacity change from 0 to 1024
[  208.511806][ T8799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  208.511928][ T8799] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.543742][ T8805] loop0: detected capacity change from 0 to 512
[  208.555493][ T8805] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  208.591879][ T8805] EXT4-fs (loop0): 1 orphan inode deleted
[  208.593644][ T8805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.593998][ T8805] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.638191][ T8799] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 16: comm syz.2.957: path /195/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  208.661214][ T8799] EXT4-fs (loop2): Remounting filesystem read-only
[  208.711821][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.741812][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  208.928044][ T5699] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  209.074268][ T5699] usb 6-1: Using ep0 maxpacket: 32
[  209.074978][ T5699] usb 6-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  209.077339][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  209.077374][ T5699] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  209.077412][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  209.077439][ T5699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  209.079523][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.079548][ T5699] usb 6-1: Product: syz
[  209.079564][ T5699] usb 6-1: Manufacturer: syz
[  209.079579][ T5699] usb 6-1: SerialNumber: syz
[  209.083881][ T5699] usb 6-1: config 0 descriptor??
[  209.092985][ T8808] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  209.100614][ T8818] loop0: detected capacity change from 0 to 4096
[  209.208769][ T5699] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19
[  209.209267][ T8822] jffs2: notice: (8822) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  209.223254][ T8818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.282540][ T8818] EXT4-fs (loop0): shut down requested (0)
[  209.360668][ T1578] usb 5-1: USB disconnect, device number 10
[  209.687491][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.915464][ T8833] loop0: detected capacity change from 0 to 1024
[  210.069140][    C0] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  210.091485][ T1578] usb 6-1: USB disconnect, device number 9
[  210.091486][    C0] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[  210.434312][ T8820] loop2: detected capacity change from 0 to 32768
[  210.529115][ T8820] add_index: next_index = 0.  Resetting!
[  210.529139][ T8820] find_entry called with index >= next_index
[  210.529149][ T8820] find_entry called with index >= next_index
[  210.529158][ T8820] find_entry called with index >= next_index
[  210.529167][ T8820] find_entry called with index >= next_index
[  210.575675][ T8820] non-latin1 character 0x3ff found in JFS file name
[  210.575697][ T8820] mount with iocharset=utf8 to access
[  210.653841][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'.
[  210.687407][ T8846] loop5: detected capacity change from 0 to 256
[  210.721701][ T8846] exfat: Deprecated parameter 'utf8'
[  210.755390][ T8846] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  211.009110][ T8856] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  211.222695][ T8861] netlink: 104 bytes leftover after parsing attributes in process `syz.5.981'.
[  212.818140][ T8882] set_capacity_and_notify: 1 callbacks suppressed
[  212.818160][ T8882] loop4: detected capacity change from 0 to 32768
[  212.856608][ T8882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.990 (8882)
[  212.902535][ T8882] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.902573][ T8882] BTRFS info (device loop4): using crc32c checksum algorithm
[  213.050028][ T8882] BTRFS info (device loop4): enabling ssd optimizations
[  213.050059][ T8882] BTRFS info (device loop4): turning on flush-on-commit
[  213.050078][ T8882] BTRFS info (device loop4): enabling free space tree
[  213.050097][ T8882] BTRFS info (device loop4): enabling auto defrag
[  213.050117][ T8882] BTRFS info (device loop4): use lzo compression, level 1
[  213.050139][ T8882] BTRFS info (device loop4): max_inline set to 4096
[  213.253023][ T8884] loop2: detected capacity change from 0 to 40427
[  213.288033][ T8884] F2FS-fs (loop2): invalid crc value
[  213.709421][ T8884] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  213.769058][ T8884] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  213.808321][ T7858] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  214.148130][ T8884] syz.2.992: attempt to access beyond end of device
[  214.148130][ T8884] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  214.151562][ T8884] CPU: 0 UID: 0 PID: 8884 Comm: syz.2.992 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  214.151602][ T8884] Tainted: [L]=SOFTLOCKUP
[  214.151611][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  214.151626][ T8884] Call Trace:
[  214.151635][ T8884]  <TASK>
[  214.151645][ T8884]  dump_stack_lvl+0xe8/0x150
[  214.151685][ T8884]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  214.151719][ T8884]  f2fs_write_end_bio+0x2b5/0x15d0
[  214.151754][ T8884]  ? blkg_put+0x22/0x240
[  214.151787][ T8884]  ? blkg_put+0x18d/0x240
[  214.151822][ T8884]  ? bio_endio+0x984/0xac0
[  214.151841][ T8884]  ? f2fs_write_end_io+0x258/0x300
[  214.151886][ T8884]  __submit_merged_bio+0x258/0x6a0
[  214.151913][ T8884]  ? rcu_is_watching+0x16/0xb0
[  214.151952][ T8884]  f2fs_submit_merged_write+0x2cc/0x610
[  214.151986][ T8884]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  214.152027][ T8884]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  214.152056][ T8884]  ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0
[  214.152095][ T8884]  f2fs_writeback_node_caches+0xf46/0x1100
[  214.152154][ T8884]  ? __pfx_f2fs_writeback_node_caches+0x10/0x10
[  214.152220][ T8884]  ? f2fs_write_checkpoint+0xe1e/0x24d0
[  214.152256][ T8884]  ? up_write+0x19d/0x4a0
[  214.152292][ T8884]  f2fs_write_checkpoint+0xe54/0x24d0
[  214.152373][ T8884]  f2fs_issue_checkpoint+0x424/0x6f0
[  214.152422][ T8884]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  214.152460][ T8884]  ? __pfx_from_kgid+0x10/0x10
[  214.152496][ T8884]  ? rcu_is_watching+0x16/0xb0
[  214.152526][ T8884]  ? __up_read+0x29c/0x930
[  214.152615][ T8884]  ? f2fs_sync_fs+0x1f2/0x3c0
[  214.152646][ T8884]  f2fs_unlink+0x225/0x600
[  214.152677][ T8884]  vfs_rmdir+0x3e6/0x6a0
[  214.152709][ T8884]  ? bpf_lsm_path_rmdir+0x9/0x20
[  214.152738][ T8884]  filename_rmdir+0x292/0x520
[  214.152779][ T8884]  ? __pfx_filename_rmdir+0x10/0x10
[  214.152822][ T8884]  ? do_getname+0x151/0x250
[  214.152849][ T8884]  __se_sys_rmdir+0x2e/0x140
[  214.152894][ T8884]  do_syscall_64+0x166/0x520
[  214.152923][ T8884]  ? trace_irq_disable+0x3b/0x140
[  214.152952][ T8884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.152976][ T8884]  ? clear_bhb_loop+0x70/0xc0
[  214.153006][ T8884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.153028][ T8884] RIP: 0033:0x7f61e419f559
[  214.153051][ T8884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.153071][ T8884] RSP: 002b:00007f61e23f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  214.153097][ T8884] RAX: ffffffffffffffda RBX: 00007f61e4425fa0 RCX: 00007f61e419f559
[  214.153115][ T8884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  214.153130][ T8884] RBP: 00007f61e4236b20 R08: 0000000000000000 R09: 0000000000000000
[  214.153145][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.153159][ T8884] R13: 00007f61e4426038 R14: 00007f61e4425fa0 R15: 00007ffd7c7a8678
[  214.153201][ T8884]  </TASK>
[  214.153478][ T8884] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  215.017960][ T8929] loop1: detected capacity change from 0 to 512
[  215.034691][ T8929] EXT4-fs: Ignoring removed i_version option
[  215.035679][ T8929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  215.107509][ T8929] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem
[  215.107536][ T8929] loop1: lost filesystem error report for type 5 error -117
[  215.118544][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  215.118569][    C0] EXT4-fs (loop1): initial error at time 1792600132: ext4_process_orphan:346
[  215.118593][    C0] EXT4-fs (loop1): last error at time 1792600132: ext4_process_orphan:346
[  215.155408][ T8929] EXT4-fs (loop1): Remounting filesystem read-only
[  215.162855][ T8929] EXT4-fs (loop1): 2 truncates cleaned up
[  215.173100][ T8929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.334367][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.480458][ T8933] loop0: detected capacity change from 0 to 1024
[  215.507899][ T8933] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  215.531086][ T8933] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.1003: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  215.531138][ T8933] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  215.531501][ T8933] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1003: couldn't read orphan inode 11 (err -117)
[  215.531532][ T8933] loop0: lost filesystem error report for type 5 error -117
[  215.534230][    C0] EXT4-fs (loop0): error count since last fsck: 2
[  215.534253][    C0] EXT4-fs (loop0): initial error at time 1792600133: ext4_ext_check_inode:521: inode 11
[  215.534286][    C0] EXT4-fs (loop0): last error at time 1792600133: ext4_orphan_get:1409
[  215.552234][ T8933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.811851][ T8938] EXT4-fs: Ignoring removed bh option
[  215.811949][ T8938] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (4096), stripe is disabled
[  215.855987][ T8933] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #3: block 2: comm syz.0.1003: lblock 2 mapped to illegal pblock 2 (length 1)
[  215.860388][ T8933] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  215.860441][ T8933] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #3: block 48: comm syz.0.1003: lblock 0 mapped to illegal pblock 48 (length 1)
[  215.860833][ T8933] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  215.860855][ T8933] EXT4-fs error (device loop0): ext4_acquire_dquot:7120: comm syz.0.1003: Failed to acquire dquot type 0
[  216.077277][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.078414][ T5611] EXT4-fs error (device loop0): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0
[  216.078446][ T5611] loop0: lost filesystem error report for type 5 error -117
[  216.083952][ T5611] EXT4-fs error (device loop0) in ext4_reserve_inode_write:7453: Corrupt filesystem
[  216.083980][ T5611] loop0: lost filesystem error report for type 5 error -117
[  216.172753][ T5611] EXT4-fs error (device loop0): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error
[  216.172806][ T5611] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  216.175283][ T5611] EXT4-fs error (device loop0): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0
[  216.175365][ T5611] loop0: lost filesystem error report for type 5 error -117
[  216.493931][   T32] audit: type=1326 audit(1792600134.084:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.4.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065039f559 code=0x7ffc0000
[  216.494082][   T32] audit: type=1326 audit(1792600134.084:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.4.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065039f559 code=0x7ffc0000
[  216.569582][   T32] audit: type=1326 audit(1792600134.164:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.4.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f065039f559 code=0x7ffc0000
[  216.569796][   T32] audit: type=1326 audit(1792600134.164:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.4.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065039f559 code=0x7ffc0000
[  216.569960][   T32] audit: type=1326 audit(1792600134.164:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.4.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065039f559 code=0x7ffc0000
[  216.604962][   T32] audit: type=1326 audit(1792600134.174:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.4.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f065039f559 code=0x7ffc0000
[  216.605119][   T32] audit: type=1326 audit(1792600134.174:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.4.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065039f559 code=0x7ffc0000
[  216.605241][   T32] audit: type=1326 audit(1792600134.174:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.4.1013" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065039f559 code=0x7ffc0000
[  216.903046][ T8941] loop2: detected capacity change from 0 to 32768
[  216.970673][ T8941] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[  216.970673][ T8941] 
[  216.971465][ T8941] ERROR: (device loop2): remounting filesystem as read-only
[  216.971525][ T8941] ialloc: diAlloc returned -5!
[  217.017586][ T8941] ERROR: (device loop2): dbAllocAG: unable to allocate blocks
[  217.017586][ T8941] 
[  217.017629][ T8941] ERROR: (device loop2): dbDiscardAG: -EIO
[  217.017629][ T8941] 
[  217.654284][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  217.702943][ T9001] loop2: detected capacity change from 0 to 512
[  217.740458][ T9001] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.1033: corrupted in-inode xattr: e_value size too large
[  217.740500][ T9001] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  217.756609][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  217.756638][    C1] EXT4-fs (loop2): initial error at time 1792600135: ext4_iget_extra_inode:6027: inode 15
[  217.756674][    C1] EXT4-fs (loop2): last error at time 1792600135: ext4_iget_extra_inode:6027: inode 15
[  217.800247][ T9001] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1033: couldn't read orphan inode 15 (err -117)
[  217.800284][ T9001] loop2: lost filesystem error report for type 5 error -117
[  217.816788][ T9001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.818121][    T9] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[  217.844594][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.844623][    T9] usb 2-1: Product: syz
[  217.844639][    T9] usb 2-1: Manufacturer: syz
[  217.844653][    T9] usb 2-1: SerialNumber: syz
[  218.443180][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.523730][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  218.523795][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  218.578619][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  218.601550][    T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  218.607688][ T5736] kernel read not supported for file /142/attr/sockcreate (pid: 5736 comm: kworker/0:5)
[  218.656250][    T9] usb 2-1: USB disconnect, device number 9
[  218.783969][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.941065][ T9030] loop5: detected capacity change from 0 to 1024
[  218.962628][ T9030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[  218.994443][   T26] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  219.037369][ T6466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  219.146812][   T26] usb 5-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  219.164876][   T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.164906][   T26] usb 5-1: Product: syz
[  219.164922][   T26] usb 5-1: Manufacturer: syz
[  219.164938][   T26] usb 5-1: SerialNumber: syz
[  219.171418][   T26] usb 5-1: Device is not authorized for usage
[  219.226278][ T9038] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1048'.
[  219.390989][ T9045] ipvlan2: entered allmulticast mode
[  219.391014][ T9045] batadv_slave_1: entered allmulticast mode
[  219.425971][ T9045] batman_adv: batadv0: Adding interface: ipvlan2
[  219.425988][ T9045] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.426012][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.426025][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.426036][ T9045] batman_adv: batadv0: Interface activated: ipvlan2
[  219.935612][ T5699] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  220.034435][ T9066] loop5: detected capacity change from 0 to 128
[  220.076755][ T9066] ufs: ufs_fill_super(): fragment size 3265016187 is not a power of 2
[  220.123887][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short
[  220.123927][ T5699] usb 2-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00
[  220.138722][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.155695][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  220.155716][ T5699] usb 2-1: Product: syz
[  220.155726][ T5699] usb 2-1: Manufacturer: syz
[  220.204847][ T5699] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2)
[  220.273436][ T9069] loop5: detected capacity change from 0 to 8
[  220.284129][   T63] IPVS: starting estimator thread 0...
[  220.375513][ T9071] IPVS: using max 37 ests per chain, 88800 per kthread
[  220.507074][ T9077] ipvlan2: entered allmulticast mode
[  220.507109][ T9077] batadv_slave_1: entered allmulticast mode
[  220.510344][ T9077] batman_adv: batadv0: Adding interface: ipvlan2
[  220.510362][ T9077] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  220.510395][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.510414][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.510429][ T9077] batman_adv: batadv0: Interface activated: ipvlan2
[  220.613989][ T5699] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  220.675325][ T5699] videodev: could not get a free minor
[  220.675350][ T5699] uvcvideo 2-1:1.1: Failed to register meta-cap device (-23).
[  220.745073][ T9081] loop5: detected capacity change from 0 to 1024
[  220.753064][ T9081] EXT4-fs: Ignoring removed orlov option
[  220.791152][ T9081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.842367][ T5699] usb 2-1: USB disconnect, device number 10
[  220.905850][ T9081] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  220.990067][ T6466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.449429][ T9105] loop0: detected capacity change from 0 to 256
[  221.452367][ T9105] exfat: Deprecated parameter 'utf8'
[  221.453676][ T9105] exfat: Deprecated parameter 'utf8'
[  221.500842][ T9105] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  221.767875][ T9114] netlink: 4412 bytes leftover after parsing attributes in process `syz.1.1080'.
[  221.800868][   T26] usb 5-1: USB disconnect, device number 11
[  222.480087][ T9138] loop5: detected capacity change from 0 to 512
[  222.498972][ T9138] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.1092: iget: bad i_size value: 38620345925642
[  222.499011][ T9138] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  222.514602][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  222.514631][    C1] EXT4-fs (loop5): initial error at time 1792600140: ext4_orphan_get:1404: inode 15
[  222.514663][    C1] EXT4-fs (loop5): last error at time 1792600140: ext4_orphan_get:1404: inode 15
[  222.515528][ T9138] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1092: couldn't read orphan inode 15 (err -117)
[  222.515561][ T9138] loop5: lost filesystem error report for type 5 error -117
[  222.570655][ T9138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.601115][   T32] kauditd_printk_skb: 3 callbacks suppressed
[  222.601136][   T32] audit: type=1800 audit(1792600140.194:362): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1092" name="bus" dev="loop5" ino=18 res=0 errno=-22
[  222.696108][ T6466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.827710][ T9124] loop0: detected capacity change from 0 to 32768
[  222.890372][ T9124] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  222.961439][ T9124] XFS (loop0): Ending clean mount
[  222.991676][   T32] audit: type=1800 audit(1792600140.584:363): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1084" name="file1" dev="loop0" ino=4422 res=0 errno=-22
[  223.054294][ T1578] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  223.220661][ T1578] usb 6-1: not running at top speed; connect to a high speed hub
[  223.220703][ T1578] usb 6-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00
[  223.260537][ T1578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.260564][ T1578] usb 6-1: Product: syz
[  223.260577][ T1578] usb 6-1: Manufacturer: syz
[  223.260590][ T1578] usb 6-1: SerialNumber: syz
[  223.310339][ T1578] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected
[  223.328508][ T1578] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  223.347098][ T1578] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  223.363331][ T1578] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  223.383826][ T1578] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  223.541314][   T86] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.782629][   T86] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.888985][   T86] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.997237][   T86] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.366560][   T86] bridge_slave_1: left allmulticast mode
[  224.366589][   T86] bridge_slave_1: left promiscuous mode
[  224.366862][   T86] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.376271][   T86] bridge_slave_0: left allmulticast mode
[  224.376426][   T86] bridge_slave_0: left promiscuous mode
[  224.377347][   T86] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.969440][   T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.975495][   T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.999162][   T86] bond0 (unregistering): Released all slaves
[  225.157099][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5
[  225.573341][   T86] hsr_slave_0: left promiscuous mode
[  225.580610][   T86] hsr_slave_1: left promiscuous mode
[  225.581652][   T86] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.581674][   T86] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.583063][   T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.583083][   T86] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.634010][   T86] veth0_macvtap: left promiscuous mode
[  225.640415][   T86] veth1_vlan: left promiscuous mode
[  225.640810][   T86] veth0_vlan: left promiscuous mode
[  226.066883][   T86] team0 (unregistering): Port device team_slave_1 removed
[  226.101354][   T86] team0 (unregistering): Port device team_slave_0 removed
[  226.276363][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6
[  226.930050][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7
[  227.469539][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8
[  255.950891][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  255.950956][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  317.388812][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  317.388930][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  378.836085][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  378.836149][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  383.947564][   T35] INFO: task kworker/u8:1:13 blocked in I/O wait for more than 143 seconds.
[  383.947593][   T35]       Tainted: G             L       syzkaller #0
[  383.947604][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.947612][   T35] task:kworker/u8:1    state:D stack:21608 pid:13    tgid:13    ppid:2      task_flags:0x4248060 flags:0x00080000
[  383.950050][   T35] Workqueue: writeback wb_workfn (flush-8:0)
[  383.950205][   T35] Call Trace:
[  383.950236][   T35]  <TASK>
[  383.950288][   T35]  __schedule+0x17dd/0x5820
[  383.950372][   T35]  ? blk_mq_flush_plug_list+0x415/0x540
[  383.950501][   T35]  ? unwind_next_frame+0x1baf/0x2550
[  383.950589][   T35]  ? __blk_flush_plug+0x416/0x4d0
[  
** replaying previous printk message **
[  383.950663][   T35]  ? __pfx___schedule+0x10/0x10
[  383.950754][   T35]  ? schedule+0x90/0x2b0
[  383.950838][   T35]  schedule+0x164/0x2b0
[  383.950912][   T35]  io_schedule+0x7f/0xd0
[  383.950987][   T35]  bit_wait_io+0x13/0x110
[  383.951066][   T35]  __wait_on_bit+0xac/0x300
[  383.951140][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  383.951235][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  383.951313][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  383.951390][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  383.951476][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  383.951599][   T35]  do_get_write_access+0x658/0x10c0
[  383.951739][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  383.951816][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  383.951920][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  383.951998][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  383.952104][   T35]  ext4_reserve_inode_write+0x294/0x360
[  383.952212][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  383.952311][   T35]  ext4_dirty_inode+0xd0/0x110
[  383.952397][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  383.952472][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  383.952579][   T35]  ext4_new_meta_blocks+0x2f8/0x410
[  383.952664][   T35]  ? __pfx_ext4_new_meta_blocks+0x10/0x10
[  383.952743][   T35]  ? kasan_quarantine_put+0xbb/0x1f0
[  383.952809][   T35]  ? lockdep_hardirqs_on+0x7b/0x110
[  383.952886][   T35]  ? ext4_inode_to_goal_block+0x319/0x460
[  383.952986][   T35]  ext4_ext_insert_extent+0x14fd/0x4bf0
[  383.953136][   T35]  ? ext4_ext_search_right+0x39a/0x860
[  383.953224][   T35]  ? __asan_memcpy+0x40/0x70
[  383.953295][   T35]  ? __pfx_ext4_ext_insert_extent+0x10/0x10
[  383.953393][   T35]  ? ext4_ext_find_goal+0xf0/0x1e0
[  383.953481][   T35]  ext4_ext_map_blocks+0x15bf/0x5480
[  383.953622][   T35]  ? stack_trace_save+0xa9/0x100
[  383.953701][   T35]  ? ext4_alloc_io_end_vec+0x2b/0x160
[  383.953778][   T35]  ? stack_depot_save_flags+0x33/0x7f0
[  383.953893][   T35]  ? __pfx_ext4_ext_map_blocks+0x10/0x10
[  383.954024][   T35]  ? down_write+0x166/0x200
[  383.955917][   T35]  ext4_map_create_blocks+0x116/0x530
[  383.955999][   T35]  ? ext4_fc_track_inode+0xf3/0x3f0
[  383.956086][   T35]  ext4_map_blocks+0xe8e/0x1c60
[  383.956222][   T35]  ? __pfx_ext4_map_blocks+0x10/0x10
[  383.956277][   T35]  ? kmem_cache_alloc_noprof+0x151/0x600
[  383.956364][   T35]  ? ext4_inode_journal_mode+0x3d6/0x4d0
[  383.956450][   T35]  ext4_do_writepages+0x1978/0x44a0
[  383.956589][   T35]  ? kfree+0x1c5/0x650
[  383.956693][   T35]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  383.956770][   T35]  ? __pfx_ext4_do_writepages+0x10/0x10
[  383.956852][   T35]  ? __lock_acquire+0x747/0x2de0
[  383.956948][   T35]  ? __lock_acquire+0x747/0x2de0
[  383.957034][   T35]  ? __lock_acquire+0x747/0x2de0
[  383.957121][   T35]  ? lock_acquire+0x115/0x350
[  383.958931][   T35]  ext4_writepages+0x1fe/0x4e0
[  383.958972][   T35]  ? __pfx_ext4_writepages+0x10/0x10
[  383.959017][   T35]  ? do_raw_spin_unlock+0xf5/0x200
[  383.959046][   T35]  ? __pfx_ext4_writepages+0x10/0x10
[  383.959073][   T35]  do_writepages+0x338/0x560
[  383.959102][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  383.959133][   T35]  ? reacquire_held_locks+0x117/0x1a0
[  383.959158][   T35]  ? writeback_sb_inodes+0x450/0x1af0
[  383.959192][   T35]  __writeback_single_inode+0x136/0x1220
[  383.959216][   T35]  ? do_raw_spin_unlock+0xf5/0x200
[  383.959246][   T35]  writeback_sb_inodes+0x9de/0x1af0
[  383.959289][   T35]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  383.959343][   T35]  ? __pfx_down_read_trylock+0x10/0x10
[  383.959386][   T35]  __writeback_inodes_wb+0x114/0x240
[  383.959415][   T35]  wb_writeback+0x42f/0xad0
[  383.959438][   T35]  ? queue_io+0x2b1/0x470
[  383.959463][   T35]  ? __pfx_wb_writeback+0x10/0x10
[  383.959479][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  383.959521][   T35]  wb_workfn+0xc92/0x10f0
[  383.959564][   T35]  ? __pfx_wb_workfn+0x10/0x10
[  383.959595][   T35]  ? trace_irq_disable+0x3b/0x140
[  383.959640][   T35]  ? lock_acquire+0x115/0x350
[  383.959670][   T35]  ? rcu_is_watching+0x16/0xb0
[  383.959697][   T35]  ? process_scheduled_works+0x97a/0x1630
[  383.959723][   T35]  process_scheduled_works+0xc3d/0x1630
[  383.959779][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  383.959812][   T35]  ? assign_work+0x3cf/0x5d0
[  383.959840][   T35]  worker_thread+0xa47/0xfb0
[  383.959892][   T35]  kthread+0x38b/0x480
[  383.959915][   T35]  ? __pfx_worker_thread+0x10/0x10
[  383.959940][   T35]  ? __pfx_kthread+0x10/0x10
[  383.959961][   T35]  ret_from_fork+0x514/0xb70
[  383.959985][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  383.960006][   T35]  ? __switch_to+0xc78/0x1410
[  383.960036][   T35]  ? __pfx_kthread+0x10/0x10
[  383.960057][   T35]  ret_from_fork_asm+0x1a/0x30
[  383.960090][   T35]  </TASK>
[  383.960212][   T35] INFO: task jbd2/sda1-8:4940 blocked in I/O wait for more than 143 seconds.
[  383.960230][   T35]       Tainted: G             L       syzkaller #0
[  383.960240][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.960248][   T35] task:jbd2/sda1-8     state:D stack:25104 pid:4940  tgid:4940  ppid:2      task_flags:0x240040 flags:0x00080000
[  383.960303][   T35] Call Trace:
[  383.960309][   T35]  <TASK>
[  383.960321][   T35]  __schedule+0x17dd/0x5820
[  383.965812][   T35]  ? percpu_ref_put_many+0x18e/0x240
[  383.965944][   T35]  ? blk_mq_dispatch_list+0xd2c/0xe10
[  383.966032][   T35]  ? __pfx___schedule+0x10/0x10
[  383.966157][   T35]  ? schedule+0x90/0x2b0
[  383.966237][   T35]  schedule+0x164/0x2b0
[  383.966315][   T35]  io_schedule+0x7f/0xd0
[  383.966388][   T35]  bit_wait_io+0x13/0x110
[  383.966476][   T35]  __wait_on_bit+0xac/0x300
[  383.966565][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  383.966652][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  383.966724][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  383.966801][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  383.966890][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  383.966986][   T35]  ? __wait_on_buffer+0xe/0x80
[  383.967083][   T35]  jbd2_journal_commit_transaction+0x2f6e/0x5c80
[  383.967338][   T35]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  383.967448][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  383.967516][   T35]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  383.967546][   T35]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  383.967571][   T35]  ? __timer_delete_sync+0x4a7/0x520
[  383.967603][   T35]  kjournald2+0x3bc/0x740
[  383.967654][   T35]  ? __pfx_kjournald2+0x10/0x10
[  383.967687][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  383.967721][   T35]  ? __kthread_parkme+0x71/0x1f0
[  383.967757][   T35]  ? __kthread_parkme+0x199/0x1f0
[  383.967796][   T35]  kthread+0x38b/0x480
[  383.967847][   T35]  ? __pfx_kjournald2+0x10/0x10
[  383.967944][   T35]  ? __pfx_kthread+0x10/0x10
[  383.968019][   T35]  ret_from_fork+0x514/0xb70
[  383.968088][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  383.968153][   T35]  ? __switch_to+0xc78/0x1410
[  383.968258][   T35]  ? __pfx_kthread+0x10/0x10
[  383.968325][   T35]  ret_from_fork_asm+0x1a/0x30
[  383.968434][   T35]  </TASK>
[  383.968498][   T35] INFO: task syz-executor:5599 blocked in I/O wait for more than 143 seconds.
[  383.968553][   T35]       Tainted: G             L       syzkaller #0
[  383.968591][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.968619][   T35] task:syz-executor    state:D stack:20960 pid:5599  tgid:5599  ppid:5598   task_flags:0x440100 flags:0x00080002
[  383.968779][   T35] Call Trace:
[  383.968804][   T35]  <TASK>
[  383.968945][   T35]  __schedule+0x17dd/0x5820
[  383.969063][   T35]  ? lock_acquire+0x115/0x350
[  383.971666][   T35]  ? __pfx___schedule+0x10/0x10
[  383.971823][   T35]  ? schedule+0x90/0x2b0
[  383.971910][   T35]  schedule+0x164/0x2b0
[  383.971993][   T35]  io_schedule+0x7f/0xd0
[  383.972081][   T35]  bit_wait_io+0x13/0x110
[  383.972192][   T35]  __wait_on_bit+0xac/0x300
[  383.972277][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  383.972363][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  383.972439][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  383.972515][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  383.972602][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  383.972717][   T35]  do_get_write_access+0x658/0x10c0
[  383.972850][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  383.972935][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  383.973044][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  383.973121][   T35]  ? trace_kmem_cache_alloc+0x29/0xe0
[  383.974993][   T35]  ? jbd2__journal_start+0x145/0x5d0
[  383.975102][   T35]  ext4_reserve_inode_write+0x294/0x360
[  383.975224][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  383.975323][   T35]  ext4_dirty_inode+0xd0/0x110
[  383.975408][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  383.975485][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  383.975603][   T35]  file_update_time_flags+0x399/0x440
[  383.975694][   T35]  ext4_page_mkwrite+0x21f/0x1470
[  383.975825][   T35]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  383.975934][   T35]  do_page_mkwrite+0x147/0x310
[  383.976002][   T35]  do_wp_page+0x1a85/0x4b60
[  383.976144][   T35]  ? __pfx_do_wp_page+0x10/0x10
[  383.976230][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  383.976328][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  383.976482][   T35]  handle_mm_fault+0x15c1/0x3540
[  383.980572][   T35]  ? handle_mm_fault+0xee/0x3540
[  383.980719][   T35]  ? __pfx_handle_mm_fault+0x10/0x10
[  383.980795][   T35]  ? lock_vma_under_rcu+0x45a/0x500
[  383.980880][   T35]  ? __pfx_set_user_sigmask+0x10/0x10
[  383.981026][   T35]  do_user_addr_fault+0xb35/0x1480
[  383.981169][   T35]  ? trace_page_fault_user+0x84/0x1e0
[  383.981249][   T35]  exc_page_fault+0x6a/0xc0
[  383.981337][   T35]  asm_exc_page_fault+0x26/0x30
[  383.981378][   T35] RIP: 0033:0x7fa0f467dae2
[  383.981418][   T35] RSP: 002b:00007ffe31f31af0 EFLAGS: 00010202
[  383.981465][   T35] RAX: 00007fa0f278c000 RBX: 0000555581e99650 RCX: 0000000000000002
[  383.981502][   T35] RDX: 000000000000029a RSI: 0000555581f06bb0 RDI: 0000000000000004
[  383.981543][   T35] RBP: 00007ffe31f31ff0 R08: 0000555581f06f58 R09: 00000000000000a4
[  383.981579][   T35] R10: 0000000000004000 R11: 0000000000000001 R12: 00007ffe31f31e30
[  383.981621][   T35] R13: 00007ffe31f31c20 R14: 585858582e7a7973 R15: 00007ffe31f31b70
[  383.981706][   T35]  </TASK>
[  383.981837][   T35] INFO: task syz.0.1084:9122 blocked in I/O wait for more than 143 seconds.
[  383.981893][   T35]       Tainted: G             L       syzkaller #0
[  383.981926][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.981956][   T35] task:syz.0.1084      state:D stack:24408 pid:9122  tgid:9122  ppid:5611   task_flags:0x440040 flags:0x00080002
[  383.987487][   T35] Call Trace:
[  383.987515][   T35]  <TASK>
[  383.987569][   T35]  __schedule+0x17dd/0x5820
[  383.987697][   T35]  ? lock_acquire+0x115/0x350
[  383.987803][   T35]  ? __pfx___schedule+0x10/0x10
[  383.987899][   T35]  ? schedule+0x90/0x2b0
[  383.987973][   T35]  schedule+0x164/0x2b0
[  383.988054][   T35]  io_schedule+0x7f/0xd0
[  383.988128][   T35]  bit_wait_io+0x13/0x110
[  383.988211][   T35]  __wait_on_bit+0xac/0x300
[  383.988283][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  383.988360][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  383.988434][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  383.988506][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  383.988590][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  383.988703][   T35]  do_get_write_access+0x658/0x10c0
[  383.988806][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  383.988834][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  383.988871][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  383.988902][   T35]  ? trace_kmem_cache_alloc+0x29/0xe0
[  383.988923][   T35]  ? jbd2__journal_start+0x145/0x5d0
[  383.988954][   T35]  ext4_reserve_inode_write+0x294/0x360
[  383.989041][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  383.989369][   T35]  ext4_dirty_inode+0xd0/0x110
[  383.989782][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  383.989891][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  383.990003][   T35]  file_update_time_flags+0x399/0x440
[  383.990099][   T35]  ext4_page_mkwrite+0x21f/0x1470
[  383.990202][   T35]  ? __pfx_filemap_fault+0x10/0x10
[  383.990292][   T35]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  383.990418][   T35]  do_page_mkwrite+0x147/0x310
[  383.990506][   T35]  do_pte_missing+0x70f/0x3570
[  383.994773][   T35]  ? handle_mm_fault+0xee/0x3540
[  383.994912][   T35]  handle_mm_fault+0x1a2a/0x3540
[  383.995008][   T35]  ? handle_mm_fault+0xee/0x3540
[  383.995054][   T35]  ? __pfx_handle_mm_fault+0x10/0x10
[  383.995084][   T35]  ? lock_vma_under_rcu+0x45a/0x500
[  383.995141][   T35]  do_user_addr_fault+0xb35/0x1480
[  383.995179][   T35]  ? trace_page_fault_user+0x84/0x1e0
[  383.995227][   T35]  exc_page_fault+0x6a/0xc0
[  383.995309][   T35]  asm_exc_page_fault+0x26/0x30
[  383.995391][   T35] RIP: 0033:0x7f0409673ba9
[  383.995445][   T35] RSP: 002b:00007ffcfef82e30 EFLAGS: 00010202
[  383.995508][   T35] RAX: 0000001b33613000 RBX: ffffffff84c9d7b2 RCX: 0000001b33612ff8
[  383.995553][   T35] RDX: 0000001b3302421c RSI: 0000000000000008 RDI: 00007f040a555720
[  383.995629][   T35] RBP: 00000000000000e5 R08: 00007f0409a10000 R09: 00007f0409a12000
[  383.995690][   T35] R10: 0000000084c9d7b6 R11: 0000000000000003 R12: 00007f0409a26038
[  383.995725][   T35] R13: 0000000000000133 R14: ffffffff84c9d5ec R15: 00007f040a555720
[  383.995768][   T35]  ? submit_bio+0x8c/0x460
[  383.995854][   T35]  ? submit_bio+0x252/0x460
[  383.995955][   T35]  </TASK>
[  383.995985][   T35] INFO: task syz.5.1096:9144 blocked in I/O wait for more than 143 seconds.
[  383.996037][   T35]       Tainted: G             L       syzkaller #0
[  383.996068][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.996098][   T35] task:syz.5.1096      state:D stack:25576 pid:9144  tgid:9144  ppid:6466   task_flags:0x440040 flags:0x00080002
[  383.998462][   T35] Call Trace:
[  383.998489][   T35]  <TASK>
[  383.998503][   T35]  __schedule+0x17dd/0x5820
[  383.998555][   T35]  ? lock_acquire+0x115/0x350
[  383.998591][   T35]  ? __pfx___schedule+0x10/0x10
[  383.998626][   T35]  ? schedule+0x90/0x2b0
[  383.998655][   T35]  schedule+0x164/0x2b0
[  383.998815][   T35]  io_schedule+0x7f/0xd0
[  383.998856][   T35]  bit_wait_io+0x13/0x110
[  383.998889][   T35]  __wait_on_bit+0xac/0x300
[  383.998917][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  383.998949][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  383.998981][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  383.999006][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  383.999037][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  383.999081][   T35]  do_get_write_access+0x658/0x10c0
[  383.999127][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  383.999157][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  383.999316][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  383.999417][   T35]  ? trace_kmem_cache_alloc+0x29/0xe0
[  383.999487][   T35]  ? jbd2__journal_start+0x145/0x5d0
[  383.999587][   T35]  ext4_reserve_inode_write+0x294/0x360
[  383.999725][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  383.999845][   T35]  ext4_dirty_inode+0xd0/0x110
[  383.999931][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  384.001754][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  384.001885][   T35]  file_update_time_flags+0x399/0x440
[  384.001981][   T35]  ext4_page_mkwrite+0x21f/0x1470
[  384.002108][   T35]  ? __pfx_filemap_fault+0x10/0x10
[  384.002154][   T35]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  384.002205][   T35]  do_page_mkwrite+0x147/0x310
[  384.002235][   T35]  do_pte_missing+0x70f/0x3570
[  384.002345][   T35]  ? handle_mm_fault+0xee/0x3540
[  384.002445][   T35]  handle_mm_fault+0x1a2a/0x3540
[  384.002564][   T35]  ? handle_mm_fault+0xee/0x3540
[  384.002685][   T35]  ? __pfx_handle_mm_fault+0x10/0x10
[  384.002769][   T35]  ? lock_vma_under_rcu+0x45a/0x500
[  384.002922][   T35]  do_user_addr_fault+0xb35/0x1480
[  384.003027][   T35]  ? trace_page_fault_user+0x84/0x1e0
[  384.003093][   T35]  exc_page_fault+0x6a/0xc0
[  384.003180][   T35]  asm_exc_page_fault+0x26/0x30
[  384.003442][   T35] RIP: 0033:0x7faa00274332
[  384.003499][   T35] RSP: 002b:00007fff243442f0 EFLAGS: 00010202
[  384.003561][   T35] RAX: 0000000000001008 RBX: 00007faa01155720 RCX: 0000000000000000
[  384.003605][   T35] RDX: 0000001b30623000 RSI: 0000000000000008 RDI: 00007faa01155720
[  384.003647][   T35] RBP: 0000000000000696 R08: 00007faa00610000 R09: 00007faa00626038
[  384.003683][   T35] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff8bf0e487
[  384.003711][   T35] R13: 00007faa00626038 R14: 00000000000000df R15: fffffffffffff000
[  384.003771][   T35]  ? kobject_get_unless_zero+0x67/0x1f0
[  384.003885][   T35]  </TASK>
[  384.003928][   T35] INFO: task syz.2.1098:9159 blocked in I/O wait for more than 143 seconds.
[  384.003984][   T35]       Tainted: G             L       syzkaller #0
[  384.004016][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  384.004046][   T35] task:syz.2.1098      state:D stack:26696 pid:9159  tgid:9159  ppid:5610   task_flags:0x440040 flags:0x00080002
[  384.004534][   T35] Call Trace:
[  384.004558][   T35]  <TASK>
[  384.004592][   T35]  __schedule+0x17dd/0x5820
[  384.004712][   T35]  ? __lock_acquire+0x747/0x2de0
[  384.004818][   T35]  ? __pfx___schedule+0x10/0x10
[  384.004922][   T35]  ? schedule+0x90/0x2b0
[  384.005032][   T35]  schedule+0x164/0x2b0
[  384.005115][   T35]  io_schedule+0x7f/0xd0
[  384.005221][   T35]  bit_wait_io+0x13/0x110
[  384.005307][   T35]  __wait_on_bit+0xac/0x300
[  384.005386][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  384.005473][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  384.005551][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  384.005620][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  384.005700][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  384.005810][   T35]  do_get_write_access+0x658/0x10c0
[  384.006004][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  384.006075][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  384.006203][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  384.006312][   T35]  ext4_reserve_inode_write+0x294/0x360
[  384.006420][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  384.006518][   T35]  ext4_dirty_inode+0xd0/0x110
[  384.006606][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  384.006691][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  384.006754][   T35]  ? mnt_get_write_access+0x216/0x280
[  384.006783][   T35]  ? ext4_file_mmap_prepare+0x277/0x450
[  384.006811][   T35]  touch_atime+0x568/0x670
[  384.006837][   T35]  ? ext4_file_mmap_prepare+0x277/0x450
[  384.006868][   T35]  ext4_file_mmap_prepare+0x277/0x450
[  384.006900][   T35]  mmap_region+0xef9/0x2840
[  384.006931][   T35]  ? __update_page_owner_handle+0x5a/0x580
[  384.006966][   T35]  ? __update_page_owner_handle+0x5a/0x580
[  384.007004][   T35]  ? lock_acquire+0x115/0x350
[  384.007031][   T35]  ? __page_table_check_zero+0x6c/0x430
[  384.007060][   T35]  ? __pfx_mmap_region+0x10/0x10
[  384.007089][   T35]  ? __page_table_check_zero+0x6c/0x430
[  384.007129][   T35]  ? __page_table_check_zero+0x6c/0x430
[  384.007161][   T35]  ? __page_table_check_zero+0x3c3/0x430
[  384.007187][   T35]  ? __page_table_check_zero+0x6c/0x430
[  384.007256][   T35]  ? lock_acquire+0x115/0x350
[  384.007451][   T35]  ? mt_find+0x186/0x630
[  384.007559][   T35]  ? mt_find+0x5ff/0x630
[  384.007646][   T35]  ? mt_find+0x186/0x630
[  384.007729][   T35]  ? __pfx_mt_find+0x10/0x10
[  384.007838][   T35]  ? bpf_lsm_mmap_addr+0x9/0x50
[  384.007916][   T35]  ? security_mmap_addr+0x71/0x240
[  384.007983][   T35]  ? shmem_mapping+0xd/0x50
[  384.008042][   T35]  ? memfd_check_seals_mmap+0xc5/0x220
[  384.008107][   T35]  do_mmap+0xe0a/0x1300
[  384.008219][   T35]  ? __pfx_do_mmap+0x10/0x10
[  384.008327][   T35]  ? vm_mmap_pgoff+0x1ed/0x520
[  384.008384][   T35]  ? down_write_killable+0x179/0x230
[  384.008470][   T35]  ? lock_acquire+0x115/0x350
[  384.008536][   T35]  ? __pfx_down_write_killable+0x10/0x10
[  384.008624][   T35]  ? apparmor_mmap_file+0x2e7/0x390
[  384.008746][   T35]  vm_mmap_pgoff+0x27a/0x520
[  384.008850][   T35]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  384.008942][   T35]  ? __fget_files+0x2a/0x420
[  384.009026][   T35]  ? __fget_files+0x3a2/0x420
[  384.009083][   T35]  ? __fget_files+0x2a/0x420
[  384.009159][   T35]  ksys_mmap_pgoff+0x4dc/0x760
[  384.009273][   T35]  do_syscall_64+0x166/0x520
[  384.009341][   T35]  ? trace_irq_disable+0x3b/0x140
[  384.009415][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.009479][   T35]  ? clear_bhb_loop+0x70/0xc0
[  384.009548][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.009612][   T35] RIP: 0033:0x7f61e419f2c2
[  384.009664][   T35] RSP: 002b:00007ffd7c7a8798 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  384.009731][   T35] RAX: ffffffffffffffda RBX: 0000001b33264000 RCX: 00007f61e419f2c2
[  384.009775][   T35] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b33264000
[  384.009816][   T35] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  384.009851][   T35] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000d9
[  384.009891][   T35] R13: 00000000000927c0 R14: 000000000003666c R15: 00007ffd7c7a8a70
[  384.009980][   T35]  </TASK>
[  384.010296][   T35] 
[  384.010296][   T35] Showing all locks held in the system:
[  384.010329][   T35] locks held by kworker/u8:1/13: 6, on CPU#1:
[  384.010381][   T35]  #0: ffff888021ae3948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  384.010554][   T35]  #1: ffffc90000127c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  384.010722][   T35]  #2: ffff888036cda0e8 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  384.010878][   T35]  #3: ffff888036cd0cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[  384.011044][   T35]  #4: ffff888036cd8950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  384.011179][   T35]  #5: ffff8880771feed8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0xacb/0x1c60
[  384.011357][   T35] locks held by pr/ttyS0/34: 2, last CPU#1:
[  384.011386][   T35]  #0: ffffffff8fc33f58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  384.011542][   T35]  #1: ffffffff9bda46b8 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  384.011844][   T35] locks held by khungtaskd/35: 1, last CPU#0:
[  384.011887][   T35]  #0: ffffffff8fd5a4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  384.012098][   T35] locks held by kworker/u8:8/1031: 2, last CPU#1:
[  384.012147][   T35]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  384.012322][   T35]  #1: ffffc90004f9fc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  384.012567][   T35] locks held by getty/5368: 2, on CPU#1:
[  384.012609][   T35]  #0: ffff888032ec00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  384.012781][   T35]  #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  384.012901][   T35] locks held by syz-executor/5599: 3, on CPU#0:
[  384.012917][   T35]  #0: ffff88807aca2bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  384.012977][   T35]  #1: ffff888036cda558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  384.013075][   T35]  #2: ffff888036cd8950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  384.013262][   T35] locks held by syz.0.1084/9122: 3, on CPU#1:
[  384.013305][   T35]  #0: ffff888024738808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  384.013467][   T35]  #1: ffff888036cda558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  384.013628][   T35]  #2: ffff888036cd8950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  384.013761][   T35] locks held by syz.5.1096/9144: 3, on CPU#1:
[  384.013802][   T35]  #0: ffff888075e7d308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  384.013956][   T35]  #1: ffff888036cda558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  384.017941][   T35]  #2: ffff888036cd8950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  384.018113][   T35] locks held by syz.2.1098/9159: 3, on CPU#0:
[  384.018157][   T35]  #0: ffff88807f217180 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520
[  384.018319][   T35]  #1: ffff888036cda460 (sb_writers#4){++++}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  384.018377][   T35]  #2: ffff888036cd8950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  384.018432][   T35] 
[  384.018438][   T35] =============================================
[  384.018438][   T35] 
[  384.018466][   T35] NMI backtrace for cpu 0
[  384.018516][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  384.018601][   T35] Tainted: [L]=SOFTLOCKUP
[  384.018617][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  384.018650][   T35] Call Trace:
[  384.018680][   T35]  <TASK>
[  384.018697][   T35]  dump_stack_lvl+0xe8/0x150
[  384.018787][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  384.018853][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  384.018926][   T35]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  384.018987][   T35]  sys_info+0x135/0x170
[  384.019072][   T35]  watchdog+0x1073/0x10f0
[  384.019164][   T35]  ? watchdog+0x209/0x10f0
[  384.019259][   T35]  kthread+0x38b/0x480
[  384.019323][   T35]  ? __pfx_watchdog+0x10/0x10
[  384.019381][   T35]  ? __pfx_kthread+0x10/0x10
[  384.019447][   T35]  ret_from_fork+0x514/0xb70
[  384.019522][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  384.019579][   T35]  ? __switch_to+0xc78/0x1410
[  384.019676][   T35]  ? __pfx_kthread+0x10/0x10
[  384.019730][   T35]  ret_from_fork_asm+0x1a/0x30
[  384.019845][   T35]  </TASK>
[  384.019914][   T35] Sending NMI from CPU 0 to CPUs 1:
[  384.019983][    C1] NMI backtrace for cpu 1
[  384.019998][    C1] CPU: 1 UID: 0 PID: 34 Comm: pr/ttyS0 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  384.020023][    C1] Tainted: [L]=SOFTLOCKUP
[  384.020030][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  384.020041][    C1] RIP: 0010:io_serial_out+0x7c/0xc0
[  384.020064][    C1] Code: ff 44 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2c c9 bb fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 07 3c 79 06 cc 44 89 f9 80 e1 07 38 c1
[  384.020080][    C1] RSP: 0018:ffffc90000aa7900 EFLAGS: 00000002
[  384.020096][    C1] RAX: 0000000000000035 RBX: 0000000000000035 RCX: 0000000000000000
[  384.020108][    C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020
[  384.020119][    C1] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004
[  384.020130][    C1] R10: dffffc0000000000 R11: ffffffff85840cd0 R12: dffffc0000000000
[  384.020145][    C1] R13: 0000000000000035 R14: ffffffff9bda46e0 R15: 0000000000000000
[  384.020157][    C1] FS:  0000000000000000(0000) GS:ffff888123b6a000(0000) knlGS:0000000000000000
[  384.020182][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  384.020200][    C1] CR2: 000055e2e2a2e660 CR3: 000000000fb48000 CR4: 00000000003526f0
[  384.020217][    C1] Call Trace:
[  384.020224][    C1]  <TASK>
[  384.020233][    C1]  __serial8250_console_fifo_write+0x1e6/0x3e0
[  384.020268][    C1]  serial8250_console_write+0xa7e/0x1200
[  384.020293][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  384.020311][    C1]  ? __schedule+0x17f3/0x5820
[  384.020342][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  384.020375][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  384.020401][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  384.020438][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  384.020461][    C1]  nbcon_kthread_func+0x6d9/0x8d0
[  384.020487][    C1]  ? nbcon_kthread_func+0x163/0x8d0
[  384.020508][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  384.020533][    C1]  ? __kthread_parkme+0x71/0x1f0
[  384.020562][    C1]  ? __kthread_parkme+0x199/0x1f0
[  384.020593][    C1]  kthread+0x38b/0x480
[  384.020611][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  384.020632][    C1]  ? __pfx_kthread+0x10/0x10
[  384.020651][    C1]  ret_from_fork+0x514/0xb70
[  384.020670][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  384.020696][    C1]  ? __switch_to+0xc78/0x1410
[  384.020723][    C1]  ? __pfx_kthread+0x10/0x10
[  384.020743][    C1]  ret_from_fork_asm+0x1a/0x30
[  384.020769][    C1]  </TASK>
[  384.024066][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  386.714993][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  386.725789][   T35] Tainted: [L]=SOFTLOCKUP
[  386.730149][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  386.740235][   T35] Call Trace:
[  386.743540][   T35]  <TASK>
[  386.746493][   T35]  vpanic+0x26f/0x710
[  386.750519][   T35]  panic+0xc5/0xd0
[  386.754272][   T35]  ? __pfx_panic+0x10/0x10
[  386.758729][   T35]  ? preempt_schedule_common+0x7f/0xd0
[  386.764243][   T35]  ? preempt_schedule_thunk+0x16/0x40
[  386.769669][   T35]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  386.775859][   T35]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  386.782049][   T35]  watchdog+0x10e7/0x10f0
[  386.786446][   T35]  ? watchdog+0x209/0x10f0
[  386.790931][   T35]  kthread+0x38b/0x480
[  386.795042][   T35]  ? __pfx_watchdog+0x10/0x10
[  386.799754][   T35]  ? __pfx_kthread+0x10/0x10
[  386.804381][   T35]  ret_from_fork+0x514/0xb70
[  386.809010][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  386.814171][   T35]  ? __switch_to+0xc78/0x1410
[  386.818885][   T35]  ? __pfx_kthread+0x10/0x10
[  386.823508][   T35]  ret_from_fork_asm+0x1a/0x30
[  386.828307][   T35]  </TASK>
[  386.831379][   T35] Kernel Offset: disabled
[  386.835738][   T35] Rebooting in 86400 seconds..