last executing test programs:

2m18.127437795s ago: executing program 2 (id=23):
mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

2m17.841069248s ago: executing program 2 (id=26):
syz_mount_image$reiserfs(&(0x7f0000000200), &(0x7f0000000580)='./file1\x00', 0x8488, &(0x7f00000005c0), 0xfe, 0x1101, &(0x7f0000001640)="$eJzs2T+LE0EYB+Df7MZ/VWSvXwQtLOS4I36BKxTSWtuIXOVVl0rx4/hx9AqxP67X4sB+ZU02UQkEkqgcPA8s8+7LO7vvlDMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I2SryU5qJJmyFVJStK2F9OrJO2Qv/+xrlLy4nQ6e3Y+eT5LUv8sL/eGkpKkOX54t5k0k+a4eXpw8ujT7O27N6/Ozk7PlzVtLq/3v5Sy6AcAAAD4Xbezz//5/wAAAMAmeztIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhSN17FzRBUSUrSthfTqyTtmnm3/lF/AAAAwO5Kqrwcr8vPjwFWnuTLuCzz/fi99PFRPqyZv1G1fc8AAABww3V3FsGv9+vl9mo//jij5da5zz3IKIeH8/fFkG8nSZ3k6I+PX16/fz08pav/9loAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAHO3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAGCvAAAA///e69c/")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='v', 0x1}], 0x1, 0x800fff, 0xc, 0x4)

2m16.819891796s ago: executing program 2 (id=32):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x4}, 0x8)

2m16.543485339s ago: executing program 2 (id=33):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000008c0)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

2m15.996325745s ago: executing program 2 (id=38):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
connect$pppoe(r0, 0x0, 0x0)

2m14.284165155s ago: executing program 2 (id=53):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7f454c4603090c008100000000000004030006"], 0x40)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

2m13.901337093s ago: executing program 32 (id=53):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7f454c4603090c008100000000000004030006"], 0x40)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

2m9.400871954s ago: executing program 3 (id=85):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x28)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="de49f241"], 0xd)

2m9.216317392s ago: executing program 3 (id=86):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

2m9.000028742s ago: executing program 3 (id=87):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f0000000100)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@abort}]}, 0x1, 0x548, &(0x7f00000008c0)="$eJzs3c9vI1cdAPDvOLGT3U2bbekBELRLW1jQap2Nt11VPUA5IYQqIXoEaRsSbxTFjqPYKU1YifTMFYlKnODIH8C5J+5cENy4lAMSPyJQg8Rh0IwnWSexk7SbxJH9+WhHnjdjz/e9Tea98dfxvADG1q2I2ImISkS8GxGzxfakWOKt7pI975Pdx4t7u48Xk0jTd/6Z5PuzbdHzmsyN4pjTEfGD70T8ODket721vbrQaNQ3ivJcp7k+197avrvSXFiuL9fXarUH8w/uvXH/9dqnaM30iXtfalaKtS9//Iedb/w0q9ZMsaW3Heep2/TyQZzMZER87yKCDcFE0Z7KsCvCZ1KKiOcj4uX8/J+NifynCQCMsjSdjXS2twwAjLpuDiwpVYtcwEyUStVqN4f3QlwvNVrtzp1Hrc21pW6u7GaUS49WGvV7Ra7wZpSTrDyfrz8p146U70fEcxHxi6nIy9XFVmNpmBc+ADDGbhwZ//8z1R3/AYARd/KfzQAAo8j4DwDjx/gPAOPH+A8A46c7/l/7tC9L0/RnF1EdAOAS5ON/n5t0AQCjS/4fAMbK999+O1vSveL+10vvbW2utt67u1Rvr1abm4vVxdbGenW51VrO79nTPO14jVZrff612Hz/5jfX25259tb2w2Zrc63zML+v98N6OX/WziW0DAAY5LmXPvpzko3Ib17Ll+iZy6E81JoBF6007AoAQzNxfJNPA2BMdGf78rc/MI6evMcfNOwPnNlRegBGxGlXANP9viCUpml6cVUCLtjtL8j/w7gq8v+T8n4wfvrk/w/J5wb2ISGMpMlhVwAYmjRNzjrnf5z1iQDA1XZCjv/mZV6HAMMz4PP/54vH3xYfDvxo6egzPrzIWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDVtj//b7WY5ncmSqVqNeKZfAKgcvJopVG/FxHPRsSfpspTWXl+yHUGAJ5W6W9JMf/X7dlXZw7tevHGwWolIn7yq3d++f5Cp7Pxx4hK8q+p/e2dD4vttVODTV9ECwCAk+2P0/ljzxv5T3YfL+4vl1mfv3+7e1WQxd3brcTeQfzJmMwfp6McEdf/nRTlrqQnd/E0dj6IiM/3a38SM3kOpHvJcjR+FvuZc4o/cab4pUPxS8UEzaXi/+Jz51AXGDcfZf3PW/3Ov1Lcyh/7n//TeQ/19Ir+LzvU4l7eBz6Jv9//TQzo/24dP9xU3xiv/f673bVrx/d9EPHFyYj92Hs9/c/+HPHJgPivnrGNf/nSiy8P2pf+OuJ29I/fG2uu01yfa29t311pLizXl+trtdqD+Qf33rj/em0uz1HPDR4N/vHmnWePbCr3tv/6gPjdn/x0DGr/VweNQUfe5f7mf+/+8CsD6pbF//or/eKX4oUT4mcN+NrAFh+2cP13A993Z/GXjrc/yf5NntL+O2eM//Fft49NGw4ADE97a3t1odGob1gZ0ZXK1ajG+axkv7JXoBp9V751WbEq0X/Xz1/pntNHdqXpiQesRN9XNQb1GOeRdQOugoOTPiL+O+zKAAAAAAAAAAAAAAAAfV3GN5aG3UYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG1/8DAAD//6XW2Bk=")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

2m8.696708896s ago: executing program 3 (id=88):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0)
mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[])

2m8.148033852s ago: executing program 3 (id=90):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2)

2m7.008135566s ago: executing program 3 (id=93):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'geneve0\x00', {0x4}, 0x67be})
recvmmsg$unix(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x36102, 0x0)

2m6.456275231s ago: executing program 33 (id=93):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'geneve0\x00', {0x4}, 0x67be})
recvmmsg$unix(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x36102, 0x0)

3.383968401s ago: executing program 4 (id=1295):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x1ec, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1b0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x110, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xdc, 0xf, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x240, 0x1, 0x4, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x27}]}, {0x8d, 0x6, "63c05f8c9e4954364707888dd512113a633b28ad3f2e12a124b26d24dfc58593b18028f8543ff49b39492643cccf8af2f593670bb1b3d4fc1e22166a779be7422df4e9a376b24a82be7d26e7b54c5246ae4544f04fc515e293453ed76d22be5bdece4e77995202370e6b066c011dc25a92aae4918c981737686cb8ffd276f5ef73e2c08d570e29273b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x80, 0x1, [@m_gact={0x7c, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x4d, 0x6, "6c76009d13f825044b800966ce940c2c7b9f493fab8615784b8098e0bf93830684467772dcf70dd296b1021a75a6ea2e6abbee4340b6d453b727be840490ec6680430eef0b6509445f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.800132335s ago: executing program 4 (id=1313):
syz_open_procfs$namespace(0x0, 0x0)
setuid(0xee01)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{&(0x7f0000000dc0)={0xa, 0x4e22, 0x8, @empty, 0x5}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hopopts_2292={{0x18, 0x29, 0x36, {0xff}}}], 0x18}}], 0x2, 0x40800)

1.508339899s ago: executing program 4 (id=1317):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='f', 0x1)

1.334309998s ago: executing program 1 (id=1319):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
write(r0, &(0x7f0000000000)="19", 0x1)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)

1.264272181s ago: executing program 4 (id=1320):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/afs/sysname\x00', 0x0, 0x23)
pread64(r0, &(0x7f0000000380)=""/48, 0x30, 0x7)

1.207564043s ago: executing program 1 (id=1321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xa0, 0x3, "06275c852770226714b06026799504d26462d0f7a66ead44d6899e1445d97832ad457d06138b69af69d529be95f1911eab1846eb51bda151a6b0736302fdfb9f2c903fa06bb26b5a1ce76b17878e8174d345499079f1da597f0326854d62b1f5d97f2de35a9cb60da0764d08dbaf74939de34af914a3ea3f02ca57df07e9ed10aecb90bdbabcfcdd62e3ef6913b29a63fd42d9276dc54b68f9bc26a0"}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x124}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
close(0x3)

1.0562195s ago: executing program 1 (id=1323):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
ppoll(&(0x7f0000000040)=[{r0, 0x240}], 0x1, 0x0, 0x0, 0x0)
shutdown(r0, 0x0)

1.024461512s ago: executing program 0 (id=1324):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5)
vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000)
close(r0)

970.398515ms ago: executing program 4 (id=1325):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x1, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e25, 0x20080000, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x2, 0xba}}}], 0x18}, 0x880)

876.559389ms ago: executing program 1 (id=1327):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)

789.114393ms ago: executing program 0 (id=1328):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000010c0)={0x1, 0x0, [{0xc0000103, 0x0, 0xfee00bfc}]})

728.267776ms ago: executing program 1 (id=1329):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000000c0)="02", 0x500, 0x4)

727.985736ms ago: executing program 5 (id=1330):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r0 = memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4)
ftruncate(r0, 0x200000)
preadv(r0, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x1, 0x1fffef, 0x0)

660.218989ms ago: executing program 4 (id=1331):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000000)={0x6, 0x76d5, 0x3, 0xfffffff9, 0xb, 0x7})

597.148442ms ago: executing program 5 (id=1332):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='md', 0x2)

524.210306ms ago: executing program 1 (id=1333):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000480)=ANY=[@ANYBLOB="696f636861727365743d63703733372c6e6f696e746567726974792c696f636861727365743d69736f383835392d322c6572726f72733d636f6e74696e75652c646973636172642c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f71756f74612c696f636861727365743d63703836392c6572726f72733d636f6e74696e75652c67727071756f74612c00b7b5c85fd673808550e32e51a59133ec4f5f689edcb4070f7bcbd738e05986111cdb11c1ab6afe0f4b610d8aa9ffe540c2f97fbf970bda40883f0c7f627763a62d54a62be0c00d48"], 0x24, 0x628f, &(0x7f00000065c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd)
fcntl$setlease(r0, 0x400, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

489.615497ms ago: executing program 0 (id=1334):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f0000000080)={[{@gid}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@part={'part', 0x3d, 0xc}}]}, 0x2, 0x34b, &(0x7f00000008c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000240)=""/85, 0x55)
getdents(r0, 0x0, 0x0)

488.793677ms ago: executing program 5 (id=1335):
unshare(0x22020400)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000260005"], 0x2c}}, 0x800)
recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0)

316.199225ms ago: executing program 0 (id=1336):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03006009250d698cbe512490", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

315.978685ms ago: executing program 5 (id=1337):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
io_setup(0x4, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r0, 0x0, 0x0, 0x3b2}])

195.40761ms ago: executing program 0 (id=1338):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000aa00400000c0a010100000000000000000a0000070900020073797a31000000002c00038028000080080003400000000118000b80140001800c0001007061796c6f61640004000280040001800900010073797a31000000004804038044040080e4010a803000028008000180ffffffff0900020073797a31000000000900020073797a30000000000900020073797a3100000000440002800900020073797a30000000000800034000000001080003400000000208000180fffffffc0900020073797a3000000000080003400000000408000340000000020c0002800800034000000003100002800900020073797a320000000089000100753006e1e1b32cfbacafbc110b9e5481dfcfea3c35394ee3cb78b7a3eece36eda63e8c6dc97e882c11660adf58f07ddd62228ec86fc36d89fe46f26da07fe5704a18ef065664f62feb4d473d782bf3746d2ee44e0a81fe49a414a0e119219a64af5f7d6426148ba4e677fd4760e329b7271ed2285f8be8e6206edcd031fc6844ec12f4b1a300000014000100c4f37ef39f81e2a810f1fe1ca0c6801430000280080003400000000308000180ffff18ff080001800000000008000340000000030900020073797a30000000007e0001002a9242a4674ec9284e2ba31dad310e669dceccb2b7bcc6efe4f481edfea8c3d928d07486a3f947eacd1a8b0a5b92310034c46335aabc37fdca187c891ba7fcd588ed86a40265784c5f234621d53fb2fe5883584be9ec4286d1594334f5561fe731b36caf0d612e415a282f806fc2ded667028fc11dd952564a7900000c000540000000000000000924020180440002801900020073797a320000000008000340000000030900020073797a3100000000080003400000000108000340000000040800034000000004080003400000000140000280080003400000000208000340000000010800034000000001080003400000000108000180ffffffff08000340000000040900020073797a32000000000f000100bb7b7f8ff9681655ae5936001c00028008000180ffffffff080001800000000008000180fffffffc2c0002800800034000000002080003400000000208000180fffffffd080003400000000208000180fffffffe2800028008000180fffffffc08000180fffffffe08000340000000020900020073797a310000000030000280080003400000000408000180ffffffff0900020073797a300000000008000180fffffffb08000340000000028600010029d68221e87c000935e7187e29c3ea759c54e42dbfeb0465c5abda21d700f9313c26a261f5aaf30034bb1ae9b6843c6972e824fbbbed648c035a2c19ec8f023025a4d312c30ffc937574eaf8043086a236cc3c65ec03d0d2a39cbbdecd0c8ff8503b4e23af107e14c314c28483dffc49fad50b4a86fa17b034e49ff473f57caf20670000630001004c1ddc4094ac3d34da00cf069efb996a91d11baf74767ab9f0ed5f4557de3963a6cc328fc467b01af2588069ec48b7559fb290bafbffeb1f5e1664c178237afbd472d1b7754083e7d1a75e492025bad24b2ee4a5cc97890462e64034e7e318000800034000000002"], 0x4c8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

142.940833ms ago: executing program 5 (id=1339):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f00000006c0)={@my=0x0, 0x3})

296.27µs ago: executing program 0 (id=1340):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x8, 0x4)

0s ago: executing program 5 (id=1341):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x709d2a, 0x0, {0x0, 0x0, 0x0, r1, 0x16a82, 0x80}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc10}, 0x4c0c0)

kernel console output (not intermixed with test programs):

s going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.334863][ T6119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.348861][ T6119] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.356206][ T6119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.382838][ T6119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.426004][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.443321][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.460185][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.471247][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.489157][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.499992][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.518464][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.592335][ T2959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.620424][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.643247][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.653067][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.675259][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.685349][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.703056][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.713682][   T51] Bluetooth: hci1: command tx timeout
[   90.725233][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.797705][ T6119] hsr_slave_0: entered promiscuous mode
[   90.808323][ T6119] hsr_slave_1: entered promiscuous mode
[   90.815042][ T6119] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.822606][ T6119] Cannot create hsr debugfs directory
[   90.841430][ T2959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.854648][ T5980] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.867280][ T5980] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.876267][ T5980] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.885268][ T5980] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.942426][ T2959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.024199][   T51] Bluetooth: hci2: command tx timeout
[   91.047868][ T2959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.310325][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.339914][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.418437][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.433506][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.081349][ T6183] loop4: detected capacity change from 0 to 8192
[   92.605765][ T6110] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.783983][   T51] Bluetooth: hci1: command tx timeout
[   92.866676][ T6110] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.003534][ T6110] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.100632][ T6110] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.114462][   T51] Bluetooth: hci2: command tx timeout
[   93.135269][ T6119] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   93.182334][ T6119] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   93.238219][ T6119] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   93.295620][ T6119] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   93.627381][ T6224] loop4: detected capacity change from 0 to 4096
[   93.694847][ T2959] hsr_slave_0: left promiscuous mode
[   93.701107][ T2959] hsr_slave_1: left promiscuous mode
[   93.711844][ T6224] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[   93.718894][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.722341][ T6224] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[   93.746220][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.765156][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.783535][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.791649][ T2959] bridge_slave_1: left allmulticast mode
[   93.800133][   T27] audit: type=1800 audit(1790222126.341:4): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.112" name="bus" dev="loop4" ino=33 res=0 errno=0
[   93.823348][ T2959] bridge_slave_1: left promiscuous mode
[   93.829501][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.838989][ T2959] bridge_slave_0: left allmulticast mode
[   93.845055][ T2959] bridge_slave_0: left promiscuous mode
[   93.851173][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.851826][   T59] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22.
[   93.875106][ T5980] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[   93.882400][ T5980] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   93.882442][ T2959] hsr_slave_0: left promiscuous mode
[   93.896133][ T5980] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[   93.902737][ T2959] hsr_slave_1: left promiscuous mode
[   93.908189][  T131] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22.
[   93.917936][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.925422][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.948351][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.962721][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.972837][ T2959] bridge_slave_1: left allmulticast mode
[   93.979241][ T2959] bridge_slave_1: left promiscuous mode
[   93.985967][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.996120][ T2959] bridge_slave_0: left allmulticast mode
[   94.001787][ T2959] bridge_slave_0: left promiscuous mode
[   94.007991][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.040822][ T2959] veth1_macvtap: left promiscuous mode
[   94.046513][ T2959] veth0_macvtap: left promiscuous mode
[   94.052155][ T2959] veth1_vlan: left promiscuous mode
[   94.058479][ T2959] veth0_vlan: left promiscuous mode
[   94.069377][ T2959] veth1_macvtap: left promiscuous mode
[   94.075718][ T2959] veth0_macvtap: left promiscuous mode
[   94.081430][ T2959] veth1_vlan: left promiscuous mode
[   94.088798][ T2959] veth0_vlan: left promiscuous mode
[   94.617782][ T2959] team0 (unregistering): Port device team_slave_1 removed
[   94.649965][ T2959] team0 (unregistering): Port device team_slave_0 removed
[   94.683698][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.725057][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.873466][   T51] Bluetooth: hci1: command tx timeout
[   94.962907][ T2959] bond0 (unregistering): Released all slaves
[   95.193558][   T51] Bluetooth: hci2: command tx timeout
[   95.370195][ T2959] team0 (unregistering): Port device team_slave_1 removed
[   95.404728][ T2959] team0 (unregistering): Port device team_slave_0 removed
[   95.438747][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.476998][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.701723][ T2959] bond0 (unregistering): Released all slaves
[   95.838186][ T6119] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.886564][ T6119] 8021q: adding VLAN 0 to HW filter on device team0
[   95.896951][ T6110] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.926830][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.934006][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.962158][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.969344][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.036875][ T6110] 8021q: adding VLAN 0 to HW filter on device team0
[   96.081539][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.088739][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.120651][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.127821][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.539229][ T6119] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.642792][ T6110] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.747157][ T6110] veth0_vlan: entered promiscuous mode
[   96.767948][ T6110] veth1_vlan: entered promiscuous mode
[   96.821882][ T6110] veth0_macvtap: entered promiscuous mode
[   96.836938][ T6110] veth1_macvtap: entered promiscuous mode
[   96.861258][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.880899][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.891538][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.907079][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.919307][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.930094][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.941052][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.951456][   T51] Bluetooth: hci1: command tx timeout
[   96.952513][ T6110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.970672][ T6110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.981507][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.011731][ T6110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.021173][ T6110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.033726][ T6110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.042564][ T6110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.081043][ T6119] veth0_vlan: entered promiscuous mode
[   97.094830][ T6119] veth1_vlan: entered promiscuous mode
[   97.207230][ T6119] veth0_macvtap: entered promiscuous mode
[   97.220309][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.232482][ T6119] veth1_macvtap: entered promiscuous mode
[   97.243590][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.265027][   T51] Bluetooth: hci2: command tx timeout
[   97.270315][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.285622][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.306465][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.325637][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.343269][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.363245][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.379734][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.412915][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.427396][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.437637][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.448206][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.458623][ T6119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.472497][ T6119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.484509][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.507308][ T6119] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.533878][ T6119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.542582][ T6119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.551793][ T6119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.569760][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.594668][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.746037][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.783470][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.790540][ T6269] process 'syz.1.119' launched '/dev/fd/3' with NULL argv: empty string added
[   97.902171][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.935403][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.086371][ T6272] loop4: detected capacity change from 0 to 8192
[   98.131765][ T6272] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   98.175117][ T6272] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[   98.184647][ T6277] loop0: detected capacity change from 0 to 8192
[   98.186317][ T6272] REISERFS (device loop4): using ordered data mode
[   98.198773][ T6272] reiserfs: using flush barriers
[   98.206407][ T6272] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   98.242359][ T6272] REISERFS (device loop4): checking transaction log (loop4)
[   98.510013][ T6289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.115'.
[   98.645849][ T6272] REISERFS (device loop4): Using rupasov hash to sort names
[   98.685407][ T6272] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   98.923362][   T27] audit: type=1804 audit(1790222131.461:5): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.120" name="/newroot/4/file0/file0" dev="loop4" ino=4 res=1 errno=0
[   99.421189][ T6308] loop0: detected capacity change from 0 to 1024
[   99.845049][ T6318] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   99.982591][ T6321] loop4: detected capacity change from 0 to 128
[  100.018867][ T6321] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  100.070261][ T6321] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  100.137080][ T6325] bond0: entered promiscuous mode
[  100.173356][ T6325] bond_slave_0: entered promiscuous mode
[  100.224993][ T6325] bond_slave_1: entered promiscuous mode
[  100.263870][ T6325] batadv0: entered promiscuous mode
[  100.278333][   T59] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  100.291525][ T6325] 8021q: adding VLAN 0 to HW filter on device hsr1
[  100.599025][ T6340] loop0: detected capacity change from 0 to 512
[  100.621846][ T6343] loop1: detected capacity change from 0 to 256
[  100.659250][ T6343] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.671163][ T6345] capability: warning: `syz.4.132' uses 32-bit capabilities (legacy support in use)
[  100.688565][ T6340] EXT4-fs (loop0): 1 truncate cleaned up
[  100.705239][ T6340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.724985][ T6345] program syz.4.132 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  100.788751][ T6340] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.138: bg 0: block 465: padding at end of block bitmap is not set
[  100.831547][ T6340] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  100.991488][ T6342] loop5: detected capacity change from 0 to 8192
[  101.048658][ T6110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.056241][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.134'.
[  101.523608][ T5835] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  101.728558][ T5835] usb 1-1: not running at top speed; connect to a high speed hub
[  101.740087][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.756440][ T6370] TCP: TCP_TX_DELAY enabled
[  101.771253][ T5835] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  101.804474][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.839585][ T5835] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected
[  101.866537][ T5835] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81
[  101.901394][ T5835] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1
[  101.944625][ T5835] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84
[  101.981986][ T5835] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[  102.025683][ T5835] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  102.065577][ T5835] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88
[  102.111357][ T5835] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6
[  102.139799][ T5835] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  102.406917][ T5811] usb 1-1: USB disconnect, device number 2
[  102.434411][ T5811] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  102.502049][ T5811] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  102.537072][ T5811] keyspan 1-1:1.0: device disconnected
[  102.776267][ T6400] loop5: detected capacity change from 0 to 512
[  102.841648][ T6400] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.148: corrupted in-inode xattr: e_value out of bounds
[  102.893332][ T6400] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.148: couldn't read orphan inode 15 (err -117)
[  102.911965][ T6400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.099614][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.486037][ T6416] tipc: Started in network mode
[  103.513832][ T6416] tipc: Node identity ac14142f, cluster identity 4711
[  103.532151][ T6416] tipc: New replicast peer: 127.0.0.1
[  103.546454][ T6416] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.597635][ T6392] loop4: detected capacity change from 0 to 40427
[  103.617475][ T6420] tipc: New replicast peer: 255.255.255.255
[  103.631514][ T6392] F2FS-fs (loop4): invalid crc value
[  103.671610][ T6392] F2FS-fs (loop4): Found nat_bits in checkpoint
[  103.893293][ T6392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  104.087009][ T5980] syz-executor: attempt to access beyond end of device
[  104.087009][ T5980] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  104.135153][ T5980] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  104.193014][ T6439] warning: `syz.0.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  104.242879][ T6406] loop1: detected capacity change from 0 to 40427
[  104.282998][ T6406] F2FS-fs (loop1): invalid crc value
[  104.312748][ T6406] F2FS-fs (loop1): Found nat_bits in checkpoint
[  104.497033][ T6406] F2FS-fs (loop1): Start checkpoint disabled!
[  104.526128][ T6406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  104.665244][    T9] tipc: Node number set to 2886997039
[  105.005180][ T1143] kworker/u4:6: attempt to access beyond end of device
[  105.005180][ T1143] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  105.064211][ T1143] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  105.079786][ T1143] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  105.118024][ T1143] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  105.139399][ T1143] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  106.133461][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  106.343300][    T9] usb 5-1: Using ep0 maxpacket: 8
[  106.350358][    T9] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  106.373379][    T9] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  106.389141][    T9] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  106.408560][    T9] usb 5-1: config 250 has no interface number 0
[  106.425725][    T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  106.464205][    T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  106.501212][    T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36
[  106.541818][    T9] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  106.584032][    T9] usb 5-1: config 250 interface 228 has no altsetting 0
[  106.593003][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  106.618237][    T9] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  106.641856][ T6499] i2c i2c-0: new_device: Instantiated device stusb1600 at 0x28
[  106.643344][    T9] usb 5-1: Product: syz
[  106.658173][    T9] usb 5-1: SerialNumber: syz
[  106.686518][    T9] hub 5-1:250.228: bad descriptor, ignoring hub
[  106.692804][    T9] hub: probe of 5-1:250.228 failed with error -5
[  106.906859][    T9] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  107.124590][ T6515] loop0: detected capacity change from 0 to 1024
[  107.347215][    C1] usblp0: nonzero read bulk status received: -71
[  107.405076][ T1143] hfsplus: b-tree write err: -5, ino 3
[  107.418606][ T5812] usb 5-1: USB disconnect, device number 2
[  107.430310][ T5812] usblp0: removed
[  107.469017][ T6523] loop1: detected capacity change from 0 to 512
[  107.515923][ T6523] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.632466][ T6523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.666330][ T6523] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.875361][ T6513] loop5: detected capacity change from 0 to 32768
[  107.913189][ T6513] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.176 (6513)
[  107.968254][ T6513] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  108.008531][ T6513] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  108.054929][ T6513] BTRFS info (device loop5): using free space tree
[  108.078676][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.265845][ T6513] BTRFS info (device loop5): enabling ssd optimizations
[  108.294801][ T6513] BTRFS info (device loop5): auto enabling async discard
[  108.336759][ T6562] loop4: detected capacity change from 0 to 1024
[  108.583736][ T6566] loop0: detected capacity change from 0 to 512
[  108.605098][ T6566] EXT4-fs: Ignoring removed i_version option
[  108.609819][ T6569] loop4: detected capacity change from 0 to 64
[  108.639998][ T6119] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  108.653441][ T6566] EXT4-fs: Ignoring removed nobh option
[  108.713442][ T6566] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  108.754739][ T6566] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  108.876181][ T6566] EXT4-fs (loop0): 1 truncate cleaned up
[  108.903456][ T6566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.247066][ T6566] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  109.355639][ T6559] loop1: detected capacity change from 0 to 32768
[  109.416478][ T6110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.518351][ T6559] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  109.670029][ T6559] XFS (loop1): Ending clean mount
[  110.190009][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.193'.
[  110.271069][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.197'.
[  110.298338][ T5777] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  110.330880][ T6619] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.338612][ T6619] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.376287][ T6619] bridge0: entered allmulticast mode
[  110.897922][ T6639] loop5: detected capacity change from 0 to 8
[  110.962426][ T6639] SQUASHFS error: Unknown LZ4 version
[  110.982335][ T6639] squashfs image failed sanity check
[  111.055555][ T5783] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  111.308518][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'.
[  111.666110][ T6667] program syz.5.213 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  111.906508][ T6680] loop1: detected capacity change from 0 to 8
[  111.950506][ T6680] SQUASHFS error: zlib decompression failed, data probably corrupt
[  111.954474][ T6677] program syz.5.217 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  111.972250][ T6680] SQUASHFS error: Failed to read block 0x9b: -5
[  111.999587][ T6680] SQUASHFS error: Unable to read metadata cache entry [99]
[  112.012556][ T6680] SQUASHFS error: Unable to read inode 0x127
[  112.681706][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'.
[  113.178762][ T6738] loop1: detected capacity change from 0 to 64
[  113.957785][ T6730] loop4: detected capacity change from 0 to 32768
[  114.024350][ T6759] loop5: detected capacity change from 0 to 512
[  114.110026][ T6730] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  114.120040][ T6761] loop1: detected capacity change from 0 to 2048
[  114.131628][ T6759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.171357][ T6761] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  114.204376][ T6759] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.267667][ T6761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  114.387113][ T6759] EXT4-fs error (device loop5): __ext4_new_inode:1292: comm syz.5.243: failed to insert inode 16: doubly allocated?
[  114.532386][   T27] audit: type=1400 audit(1790222147.071:6): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=223A6F pid=6772 comm="syz.0.246" name=223A6F offset=35
[  114.578609][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.753349][ T5980] ocfs2: Unmounting device (7,4) on (node local)
[  114.787147][ T6783] loop5: detected capacity change from 0 to 128
[  115.130326][ T6793] loop5: detected capacity change from 0 to 512
[  115.161569][ T6793] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.253: corrupted inode contents
[  115.203427][ T6793] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  115.301041][ T6793] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.253: corrupted inode contents
[  115.350388][ T6793] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.253: mark_inode_dirty error
[  115.409876][ T6793] EXT4-fs (loop5): 1 orphan inode deleted
[  115.434453][ T6793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.573347][   T28] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  115.625017][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.706509][ T6814] loop1: detected capacity change from 0 to 128
[  115.774756][   T28] usb 1-1: not running at top speed; connect to a high speed hub
[  115.785304][   T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.815246][   T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  115.828615][   T28] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  115.850506][   T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.888934][   T28] usb 1-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  116.123966][   T28] usb 1-1: Failed to query (GET_INFO) UVC control 1 on unit 1: 0 (exp. 1).
[  116.325025][   T28] usb 1-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1).
[  116.348797][   T28] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[  116.363494][   T28] usb 1-1: No streaming interface found for terminal 2.
[  116.403459][   T28] usb 1-1: USB disconnect, device number 3
[  116.830226][ T6852] mtrr: base(0x20000000) is not aligned on a size(0x40000000) boundary
[  117.347105][ T6866] loop0: detected capacity change from 0 to 2048
[  117.411945][ T6869] kvm: kvm [6867]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd
[  117.479853][ T6866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.546362][ T6877] loop5: detected capacity change from 0 to 128
[  117.694882][ T6877] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.736707][ T6110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.767820][ T6877] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.844472][ T6877] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.285: No space for directory leaf checksum. Please run e2fsck -D.
[  117.917253][ T6877] EXT4-fs error (device loop5): __ext4_find_entry:1698: inode #2: comm syz.5.285: checksumming directory block 0
[  118.066977][ T6119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  118.566631][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'.
[  118.670837][ T6918] loop0: detected capacity change from 0 to 4096
[  118.713717][ T6921] loop4: detected capacity change from 0 to 512
[  118.760843][ T6918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.790235][ T6921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.795352][ T6918] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.299: corrupted inode contents
[  118.815983][ T6918] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #15: comm syz.0.299: mark_inode_dirty error
[  118.829491][ T6918] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.299: corrupted inode contents
[  118.847037][ T6921] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.878635][ T6918] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #15: comm syz.0.299: mark_inode_dirty error
[  118.934236][ T6918] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.299: corrupted inode contents
[  118.952701][ T6921] EXT4-fs error (device loop4): __ext4_new_inode:1292: comm syz.4.301: failed to insert inode 16: doubly allocated?
[  118.958843][ T6918] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #15: comm syz.0.299: mark_inode_dirty error
[  118.982018][ T6918] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.299: corrupted inode contents
[  119.003171][ T6918] EXT4-fs error (device loop0): ext4_truncate:4314: inode #15: comm syz.0.299: mark_inode_dirty error
[  119.021422][ T6918] EXT4-fs error (device loop0) in ext4_setattr:5695: Corrupt filesystem
[  119.048340][ T6928] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.299: corrupted inode contents
[  119.076602][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.371462][ T6941] loop4: detected capacity change from 0 to 128
[  119.408267][ T6941] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  119.450148][ T6944] loop1: detected capacity change from 0 to 1024
[  119.701396][ T6110] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  119.731791][ T6110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.083526][ T7012] i2c i2c-0: delete_device: Can't parse I2C address
[  121.084292][ T7014] nbd: socks must be embedded in a SOCK_ITEM attr
[  121.286234][ T7019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.327'.
[  121.340230][ T7021] loop0: detected capacity change from 0 to 64
[  121.376420][ T7021] hfs: unable to parse mount options
[  121.437745][ T6971] loop5: detected capacity change from 0 to 40427
[  121.446528][ T7021] loop0: detected capacity change from 0 to 64
[  121.481350][ T6971] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff
[  121.498449][ T7023] loop4: detected capacity change from 0 to 512
[  121.538382][ T6971] F2FS-fs (loop5): invalid crc value
[  121.587450][ T6971] F2FS-fs (loop5): Found nat_bits in checkpoint
[  121.819802][ T6971] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  121.876239][ T7034] netlink: 76 bytes leftover after parsing attributes in process `syz.0.332'.
[  122.021802][ T7038] loop0: detected capacity change from 0 to 512
[  122.037779][ T7033] loop4: detected capacity change from 0 to 8192
[  122.047946][ T7038] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  122.061044][ T7033] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  122.075814][ T7033] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  122.084098][ T7038] EXT4-fs (loop0): 1 truncate cleaned up
[  122.085425][ T7033] REISERFS (device loop4): using ordered data mode
[  122.098050][ T7033] reiserfs: using flush barriers
[  122.111019][ T7033] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  122.126116][ T7038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.127824][ T7033] REISERFS (device loop4): checking transaction log (loop4)
[  122.152654][ T7033] REISERFS (device loop4): Using r5 hash to sort names
[  122.159906][ T7033] REISERFS (device loop4): using 3.5.x disk format
[  122.167930][ T7033] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  122.186935][ T7042] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  122.227389][   T27] audit: type=1800 audit(1790222154.761:7): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.335" name="file1" dev="loop0" ino=15 res=0 errno=0
[  122.347760][ T6110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.852947][ T7060] loop0: detected capacity change from 0 to 2048
[  122.925358][ T7062] loop1: detected capacity change from 0 to 64
[  122.964768][ T7060]  loop0: p3 < > p4 < >
[  122.968988][ T7060] loop0: partition table partially beyond EOD, truncated
[  123.012199][ T7060] loop0: p3 start 4284289 is beyond EOD, truncated
[  123.448663][ T7077] Bluetooth: MGMT ver 1.22
[  123.587223][ T7082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  123.645149][ T7082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.658205][ T7084] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.356: iget: bad extended attribute block 134217728
[  123.681822][ T7082] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.708585][ T7084] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.356: couldn't read orphan inode 15 (err -117)
[  123.772928][ T7084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.907971][   T27] audit: type=1800 audit(1790222156.441:8): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.356" name="file0" dev="loop1" ino=13 res=0 errno=0
[  123.996440][ T7095] input: syz1 as /devices/virtual/input/input8
[  124.018061][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.022577][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.243382][   T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  124.438438][   T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.472662][   T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.499932][   T28] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  124.509374][   T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.695389][ T7119] msr: Write to unrecognized MSR 0x0 by syz.5.371 (pid: 7119).
[  124.715335][ T7119] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details.
[  124.726408][ T7121] set_capacity_and_notify: 2 callbacks suppressed
[  124.726447][ T7121] loop1: detected capacity change from 0 to 2048
[  124.811441][ T7123] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.943075][ T7126] sctp: [Deprecated]: syz.4.373 (pid 7126) Use of int in maxseg socket option.
[  124.943075][ T7126] Use struct sctp_assoc_value instead
[  124.983061][   T27] audit: type=1800 audit(1790222157.511:9): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.372" name="bus" dev="loop1" ino=2097152 res=0 errno=0
[  125.012941][   T28] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  125.048613][ T7121] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[  125.060064][   T28] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0
[  125.079645][   T28] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0001/input/input9
[  125.442851][   T28] usb 1-1: USB disconnect, device number 4
[  125.480705][ T7138] loop1: detected capacity change from 0 to 512
[  125.504361][ T7138] EXT4-fs: Ignoring removed nobh option
[  125.521397][ T7138] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  125.580100][ T7138] EXT4-fs (loop1): 1 truncate cleaned up
[  125.633097][   T27] audit: type=1400 audit(1790222158.171:10): apparmor="STATUS" info="empty profile name" error=-71 profile="unconfined" name=":/o" pid=7141 comm="syz.4.379" name=":/o" offset=35
[  125.642907][ T7138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.840267][ T7138] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  125.905116][   T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  125.913884][   T51] Bluetooth: hci2: Injecting HCI hardware error event
[  125.922080][   T51] Bluetooth: hci2: hardware error 0x00
[  126.020993][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.093418][  T971] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  126.107751][ T7161] loop5: detected capacity change from 0 to 2048
[  126.190903][ T7166] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.279504][   T27] audit: type=1800 audit(1790222158.811:11): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.385" name="bus" dev="loop5" ino=2097152 res=0 errno=0
[  126.323406][  T971] usb 5-1: Using ep0 maxpacket: 8
[  126.334644][ T7161] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  126.374735][  T971] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  126.384741][  T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.412865][  T971] usb 5-1: Product: syz
[  126.427645][  T971] usb 5-1: Manufacturer: syz
[  126.432277][  T971] usb 5-1: SerialNumber: syz
[  126.454827][  T971] usb 5-1: config 0 descriptor??
[  126.478291][  T971] gspca_main: se401-2.14.0 probing 047d:5003
[  126.543799][ T7172] mmap: syz.1.388 (7172) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  126.663804][ T5811] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  126.855484][ T5811] usb 1-1: Using ep0 maxpacket: 32
[  126.876063][ T5811] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  126.893447][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.931866][ T5811] usb 1-1: config 0 descriptor??
[  126.952387][ T5811] as10x_usb: device has been detected
[  126.982614][ T5811] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  127.047182][ T5811] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  127.099971][  T971] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12
[  127.123820][ T5811] as10x_usb: error during firmware upload part1
[  127.130695][ T5811] Registered device nBox DVB-T Dongle
[  127.235528][  T971] usb 1-1: USB disconnect, device number 5
[  127.331581][  T971] Unregistered device nBox DVB-T Dongle
[  127.343199][  T971] as10x_usb: device has been disconnected
[  127.415472][    T9] usb 5-1: USB disconnect, device number 3
[  127.496294][ T7184] loop5: detected capacity change from 0 to 32768
[  127.506144][ T7198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.394'.
[  127.520321][ T7184] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.391 (7184)
[  127.564662][ T7184] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  127.608421][ T7184] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  127.636515][ T7184] BTRFS info (device loop5): force clearing of disk cache
[  127.653931][ T7184] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  127.686611][ T7184] BTRFS info (device loop5): use zstd compression, level 3
[  127.709227][ T7184] BTRFS info (device loop5): using free space tree
[  127.839510][ T7184] BTRFS info (device loop5): enabling ssd optimizations
[  127.907510][ T7184] BTRFS info (device loop5): rebuilding free space tree
[  127.985368][   T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  128.518681][ T7244] loop4: detected capacity change from 0 to 16
[  128.538904][ T6119] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  128.553092][ T7244] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  128.679918][ T7247] loop0: detected capacity change from 0 to 512
[  128.735476][ T7247] EXT4-fs: Ignoring removed nobh option
[  128.761179][ T7247] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  128.783197][ T7247] EXT4-fs (loop0): 1 truncate cleaned up
[  128.812363][ T7247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.950450][ T7247] EXT4-fs warning (device loop0): ext4_group_add:1742: No reserved GDT blocks, can't resize
[  129.064674][ T6110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.457839][ T7271] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.467873][ T7271] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.477298][ T7271] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.486422][ T7271] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.909638][ T7294] raw_sendmsg: syz.0.419 forgot to set AF_INET. Fix it!
[  130.017618][ T7295] loop4: detected capacity change from 0 to 1024
[  130.049575][ T7295] EXT4-fs: Ignoring removed bh option
[  130.105808][ T7295] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  130.174529][ T7295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.237697][ T7302] loop0: detected capacity change from 0 to 4096
[  130.377352][ T7302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.393550][   T27] audit: type=1804 audit(1790222162.941:12): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.420" name="/newroot/95/file1/file1" dev="loop4" ino=15 res=1 errno=0
[  130.499884][ T7302] EXT4-fs (loop0): shut down requested (2)
[  130.622362][ T6110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.677431][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.243140][ T7337] loop1: detected capacity change from 0 to 256
[  131.831612][ T7361] __sock_release: fasync list not empty!
[  132.501374][ T7390] loop1: detected capacity change from 0 to 512
[  132.518266][ T7390] EXT4-fs: Invalid want_extra_isize 206
[  132.553420][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.5.451'.
[  132.582317][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  132.873976][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  132.880324][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  133.444573][ T7398] loop0: detected capacity change from 0 to 32768
[  133.460649][ T7398] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.452 (7398)
[  133.534058][ T7398] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  133.588568][ T7398] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  133.614374][ T7398] BTRFS info (device loop0): using free space tree
[  133.790521][ T7438] loop4: detected capacity change from 0 to 128
[  133.796951][ T7398] BTRFS info (device loop0): enabling ssd optimizations
[  133.798134][ T7405] loop1: detected capacity change from 0 to 40427
[  133.806831][ T7398] BTRFS info (device loop0): auto enabling async discard
[  133.863361][ T7405] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  133.880423][ T7405] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  133.896510][ T7441] kernel write not supported for file /167/net/netstat (pid: 7441 comm: syz.0.452)
[  133.929576][ T7438] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  133.955466][ T7405] F2FS-fs (loop1): invalid crc value
[  133.967880][ T6110] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  134.006163][ T7438] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  134.199700][ T5980] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  134.220772][ T7405] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  134.237228][ T7405] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  134.494462][ T5777] syz-executor: attempt to access beyond end of device
[  134.494462][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  134.545250][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  135.023423][ T5776] Bluetooth: hci4: command 0x1003 tx timeout
[  135.023547][   T51] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  135.338681][ T7482] WARNING! power/level is deprecated; use power/control instead
[  135.646249][ T7496] tap0: tun_chr_ioctl cmd 1074025677
[  135.651727][ T7496] tap0: linktype set to 1
[  135.738043][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.476'.
[  136.163044][ T7518] loop0: detected capacity change from 0 to 512
[  136.200889][ T7518] EXT4-fs: Ignoring removed bh option
[  136.249300][ T7518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.285988][ T7518] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.306833][ T7525] loop1: detected capacity change from 0 to 256
[  136.354729][ T7518] EXT4-fs error (device loop0): ext4_get_first_dir_block:3586: inode #12: comm syz.0.482: Directory hole found for htree leaf block 0
[  136.472966][ T6110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.742327][ T7538] program syz.1.488 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.996524][ T7510] loop5: detected capacity change from 0 to 32768
[  137.018707][ T7548] loop0: detected capacity change from 0 to 256
[  137.040889][ T7510] XFS: attr2 mount option is deprecated.
[  137.040903][ T7548] exfat: Deprecated parameter 'utf8'
[  137.153313][ T7510] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.191248][ T7548] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  137.213302][ T5812] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  137.329972][ T7548] netlink: 116 bytes leftover after parsing attributes in process `syz.0.492'.
[  137.348267][ T7510] XFS (loop5): Ending clean mount
[  137.378199][ T7510] XFS (loop5): Quotacheck needed: Please wait.
[  137.414584][ T5812] usb 5-1: Using ep0 maxpacket: 16
[  137.428854][ T5812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.458290][ T5812] usb 5-1: config 0 has no interfaces?
[  137.479936][ T5812] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  137.495156][ T7510] XFS (loop5): Quotacheck: Done.
[  137.502516][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.530511][ T5812] usb 5-1: config 0 descriptor??
[  137.729004][ T6119] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.763397][   T28] usb 5-1: USB disconnect, device number 4
[  138.181722][ T7587] loop5: detected capacity change from 0 to 512
[  138.228905][ T7587] EXT4-fs (loop5): 1 truncate cleaned up
[  138.240244][ T7587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.342940][ T7587] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.501: bg 0: block 465: padding at end of block bitmap is not set
[  138.481805][ T7587] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  138.507984][ T7587] EXT4-fs (loop5): This should not happen!! Data will be lost
[  138.507984][ T7587] 
[  138.531784][ T7587] EXT4-fs (loop5): Total free blocks count 0
[  138.554241][ T7587] EXT4-fs (loop5): Free/Dirty block details
[  138.563177][ T7587] EXT4-fs (loop5): free_blocks=0
[  138.584671][ T7587] EXT4-fs (loop5): dirty_blocks=5
[  138.591754][ T7587] EXT4-fs (loop5): Block reservation details
[  138.601729][ T7587] EXT4-fs (loop5): i_reserved_data_blocks=5
[  138.695773][   T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 3 with error 28
[  138.866410][ T7612] netlink: 112 bytes leftover after parsing attributes in process `syz.0.508'.
[  138.952914][ T7616] loop4: detected capacity change from 0 to 512
[  138.997554][ T7616] EXT4-fs: Ignoring removed oldalloc option
[  139.016295][ T7616] EXT4-fs (loop4): Test dummy encryption mode enabled
[  139.065329][ T7616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.149087][ T7627] loop5: detected capacity change from 0 to 64
[  139.165421][ T7627] MINIX-fs: mounting file system with errors, running fsck is recommended
[  139.199538][ T7627] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  139.260092][ T7627] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  139.558385][ T7616] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  139.568818][  T789] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  139.655132][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.787107][  T789] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.813294][  T789] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  139.840371][  T789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  139.858396][  T789] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  139.872181][  T789] usb 1-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice=80.00
[  139.887832][  T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.923172][  T789] usb 1-1: Product: syz
[  139.931718][  T789] usb 1-1: Manufacturer: syz
[  139.946621][  T789] usb 1-1: SerialNumber: syz
[  139.992092][   T51] Bluetooth: hci4: urb ffff888026088600 submission failed (90)
[  140.007046][ T7661] loop4: detected capacity change from 0 to 512
[  140.037070][ T7661] FAT-fs (loop4): Directory bread(block 199916) failed
[  140.070713][ T7661] FAT-fs (loop4): Directory bread(block 199917) failed
[  140.090935][ T7661] FAT-fs (loop4): Directory bread(block 199918) failed
[  140.103370][ T7661] FAT-fs (loop4): Directory bread(block 199919) failed
[  140.111831][ T7661] FAT-fs (loop4): Directory bread(block 199920) failed
[  140.119766][ T7661] FAT-fs (loop4): Directory bread(block 199921) failed
[  140.127745][ T7661] FAT-fs (loop4): Directory bread(block 199922) failed
[  140.138286][ T7661] FAT-fs (loop4): Directory bread(block 199923) failed
[  140.173035][ T7661] FAT-fs (loop4): FAT read failed (blocknr 128)
[  140.209793][ T5811] usb 1-1: USB disconnect, device number 6
[  140.457468][ T7673] loop4: detected capacity change from 0 to 256
[  140.581291][ T7673] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  140.624892][ T7678] loop1: detected capacity change from 0 to 256
[  140.708804][ T7678] FAT-fs (loop1): Directory bread(block 64) failed
[  140.751258][ T7678] FAT-fs (loop1): Directory bread(block 65) failed
[  140.773506][ T7678] FAT-fs (loop1): Directory bread(block 66) failed
[  140.793391][ T7678] FAT-fs (loop1): Directory bread(block 67) failed
[  140.825962][ T7678] FAT-fs (loop1): Directory bread(block 68) failed
[  140.838118][ T7678] FAT-fs (loop1): Directory bread(block 69) failed
[  140.850056][ T7678] FAT-fs (loop1): Directory bread(block 70) failed
[  140.871452][ T7682] netlink: 'syz.4.522': attribute type 4 has an invalid length.
[  140.885390][ T7678] FAT-fs (loop1): Directory bread(block 71) failed
[  140.887931][ T7682] netlink: 17 bytes leftover after parsing attributes in process `syz.4.522'.
[  140.896333][ T7678] FAT-fs (loop1): Directory bread(block 72) failed
[  140.908588][ T7678] FAT-fs (loop1): Directory bread(block 73) failed
[  141.301378][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'.
[  141.542756][ T7705] set_capacity_and_notify: 1 callbacks suppressed
[  141.542770][ T7705] loop1: detected capacity change from 0 to 512
[  141.576312][ T7707] lo: entered promiscuous mode
[  141.577526][ T7705] EXT4-fs (loop1): 1 truncate cleaned up
[  141.581100][ T7707] lo: entered allmulticast mode
[  141.582778][ T7707] tunl0: entered promiscuous mode
[  141.615115][ T7705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.617560][ T7707] tunl0: entered allmulticast mode
[  141.634902][ T7707] gre0: entered promiscuous mode
[  141.639874][ T7707] gre0: entered allmulticast mode
[  141.646034][ T7707] gretap0: entered promiscuous mode
[  141.652019][ T7707] gretap0: entered allmulticast mode
[  141.659194][ T7707] erspan0: entered promiscuous mode
[  141.664793][ T7707] erspan0: entered allmulticast mode
[  141.672693][ T7707] ip_vti0: entered promiscuous mode
[  141.678186][ T7707] ip_vti0: entered allmulticast mode
[  141.694588][ T7707] ip6_vti0: entered promiscuous mode
[  141.699909][ T7707] ip6_vti0: entered allmulticast mode
[  141.706540][ T7707] sit0: entered promiscuous mode
[  141.713285][ T7707] sit0: entered allmulticast mode
[  141.719340][ T7707] ip6tnl0: entered promiscuous mode
[  141.724696][ T7707] ip6tnl0: entered allmulticast mode
[  141.730933][ T7707] ip6gre0: entered promiscuous mode
[  141.736447][ T7707] ip6gre0: entered allmulticast mode
[  141.742723][ T7707] syz_tun: entered promiscuous mode
[  141.746250][ T7705] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.534: bg 0: block 465: padding at end of block bitmap is not set
[  141.748497][ T7707] syz_tun: entered allmulticast mode
[  141.774178][ T7707] ip6gretap0: entered promiscuous mode
[  141.779731][ T7707] ip6gretap0: entered allmulticast mode
[  141.796380][ T7707] bridge0: entered promiscuous mode
[  141.800087][ T7705] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  141.812669][ T7707] bridge0: entered allmulticast mode
[  141.842537][ T7705] EXT4-fs (loop1): This should not happen!! Data will be lost
[  141.842537][ T7705] 
[  141.859509][ T7705] EXT4-fs (loop1): Total free blocks count 0
[  141.865923][ T7705] EXT4-fs (loop1): Free/Dirty block details
[  141.871986][ T7705] EXT4-fs (loop1): free_blocks=0
[  141.881668][ T7705] EXT4-fs (loop1): dirty_blocks=5
[  141.888159][ T7705] EXT4-fs (loop1): Block reservation details
[  141.900021][ T7705] EXT4-fs (loop1): i_reserved_data_blocks=5
[  142.029347][ T2959] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 3 with error 28
[  142.141899][ T7718] loop0: detected capacity change from 0 to 1024
[  142.236992][ T7718] hfsplus: invalid length 32517 has been corrected to 255
[  142.332163][   T27] audit: type=1800 audit(1790222174.871:13): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.539" name="file1" dev="loop0" ino=20 res=0 errno=0
[  142.395572][ T7718] hfsplus: b-tree write err: -5, ino 20
[  142.524366][ T2959] hfsplus: b-tree write err: -5, ino 20
[  142.589808][   T27] audit: type=1326 audit(1790222175.131:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.5.546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ede59e159 code=0x7ffc0000
[  142.656971][   T27] audit: type=1326 audit(1790222175.171:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.5.546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ede59e159 code=0x7ffc0000
[  142.744463][   T27] audit: type=1326 audit(1790222175.171:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.5.546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ede59e159 code=0x7ffc0000
[  142.784293][   T27] audit: type=1326 audit(1790222175.171:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.5.546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8ede59e159 code=0x7ffc0000
[  142.813152][   T27] audit: type=1326 audit(1790222175.171:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.5.546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ede59e159 code=0x7ffc0000
[  142.840004][   T27] audit: type=1326 audit(1790222175.171:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.5.546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ede59e159 code=0x7ffc0000
[  142.887907][   T27] audit: type=1326 audit(1790222175.171:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.5.546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ede59e159 code=0x7ffc0000
[  142.951755][ T7720] loop4: detected capacity change from 0 to 32768
[  142.968788][ T7740] loop0: detected capacity change from 0 to 512
[  142.971284][   T27] audit: type=1326 audit(1790222175.171:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.5.546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ede59e159 code=0x7ffc0000
[  143.008469][   T27] audit: type=1326 audit(1790222175.171:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.5.546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ede59e159 code=0x7ffc0000
[  143.010126][ T7720] JBD2: Ignoring recovery information on journal
[  143.056014][ T7740] EXT4-fs (loop0): 1 truncate cleaned up
[  143.062924][ T7740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.222160][ T7740] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.549: bg 0: block 465: padding at end of block bitmap is not set
[  143.283162][ T7720] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  143.307860][ T7740] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  143.376373][ T7740] EXT4-fs (loop0): This should not happen!! Data will be lost
[  143.376373][ T7740] 
[  143.395746][ T7740] EXT4-fs (loop0): Total free blocks count 0
[  143.402265][ T7740] EXT4-fs (loop0): Free/Dirty block details
[  143.414035][ T7740] EXT4-fs (loop0): free_blocks=0
[  143.419005][ T7740] EXT4-fs (loop0): dirty_blocks=5
[  143.437268][ T7740] EXT4-fs (loop0): Block reservation details
[  143.459370][ T7740] EXT4-fs (loop0): i_reserved_data_blocks=5
[  143.584068][   T59] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 3 with error 28
[  143.669945][ T5980] ocfs2: Unmounting device (7,4) on (node local)
[  143.942101][ T7760] loop9: detected capacity change from 0 to 524287998
[  145.258719][ T7793] loop4: detected capacity change from 0 to 32768
[  145.281390][ T7793] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.571 (7793)
[  145.325129][ T7793] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  145.338676][ T7793] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  145.368120][ T7793] BTRFS info (device loop4): force clearing of disk cache
[  145.383775][ T7793] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  145.397212][ T7793] BTRFS info (device loop4): use zstd compression, level 3
[  145.404734][ T7793] BTRFS info (device loop4): using free space tree
[  145.467527][ T7793] BTRFS info (device loop4): enabling ssd optimizations
[  145.504327][ T7793] BTRFS info (device loop4): rebuilding free space tree
[  145.802555][ T5980] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  145.862668][ T7825] bond1 (unregistering): Released all slaves
[  146.094867][ T7830] loop5: detected capacity change from 0 to 22
[  146.122962][ T7830] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  146.164229][ T7830] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  147.376594][ T7874] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[  147.377120][ T7875] loop0: detected capacity change from 0 to 256
[  147.457152][ T7877] loop1: detected capacity change from 0 to 128
[  147.588730][ T7881] jffs2: notice: (7881) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  147.811699][ T7884] loop5: detected capacity change from 0 to 4096
[  147.929658][ T7884] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  148.059055][ T7884] ntfs3: loop5: mft corrupted
[  148.081098][ T7884] ntfs3: loop5: Failed to load $Extend (-22).
[  148.110577][ T7884] ntfs3: loop5: Failed to initialize $Extend.
[  148.149003][ T7899] loop1: detected capacity change from 0 to 512
[  148.184384][ T7899] EXT4-fs: Ignoring removed bh option
[  148.214071][ T7899] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  148.269724][ T7899] EXT4-fs (loop1): 1 truncate cleaned up
[  148.300155][ T7899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.359757][   T27] kauditd_printk_skb: 10 callbacks suppressed
[  148.359769][   T27] audit: type=1800 audit(1790222180.901:33): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.607" name="file1" dev="loop5" ino=30 res=0 errno=0
[  148.391916][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.065343][ T7921] vlan2: entered promiscuous mode
[  149.093298][ T7921] bond0: entered promiscuous mode
[  149.110984][ T7921] bond_slave_0: entered promiscuous mode
[  149.123523][ T7921] bond_slave_1: entered promiscuous mode
[  149.156517][ T7923] loop0: detected capacity change from 0 to 4096
[  149.178591][ T7923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.371813][ T7923] EXT4-fs (loop0): Online defrag not supported with bigalloc
[  149.497163][ T6110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.641417][ T7940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.630'.
[  149.881944][ T7948] loop1: detected capacity change from 0 to 512
[  149.914979][ T7948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  149.970563][ T7948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.989388][ T7948] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.176570][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.590670][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.645'.
[  150.614421][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.645'.
[  150.626673][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'.
[  151.305703][ T7962] loop0: detected capacity change from 0 to 40427
[  151.321626][ T7962] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  151.329639][ T7962] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  151.378899][ T7962] F2FS-fs (loop0): invalid crc_offset: 33558524
[  151.392007][ T7992] loop1: detected capacity change from 0 to 8192
[  151.412790][ T7962] F2FS-fs (loop0): Found nat_bits in checkpoint
[  151.618643][ T7962] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  151.649950][ T7962] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  152.121176][ T8018] loop5: detected capacity change from 0 to 512
[  153.129502][ T8051] i2c i2c-0: new_device: Invalid device name
[  153.195025][ T8052] loop0: detected capacity change from 0 to 4096
[  153.339277][ T8052] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  153.362241][ T8052] ntfs3: loop0: mft corrupted
[  153.369131][ T8052] ntfs3: loop0: Failed to load $Extend (-22).
[  153.379454][ T8052] ntfs3: loop0: Failed to initialize $Extend.
[  153.435418][ T8059] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.672'.
[  153.453294][   T27] audit: type=1800 audit(1790222185.981:34): pid=8052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.669" name="file1" dev="loop0" ino=30 res=0 errno=0
[  153.643079][ T8065] input: syz0 as /devices/virtual/input/input13
[  153.865057][ T8070] program syz.4.676 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  153.900469][ T8074] loop1: detected capacity change from 0 to 256
[  153.911684][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'.
[  153.923263][ T8076] netlink: 'syz.0.677': attribute type 21 has an invalid length.
[  154.483004][ T8095] loop1: detected capacity change from 0 to 4096
[  154.551422][ T8102] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  154.551422][ T8102] The task syz.5.689 (8102) triggered the difference, watch for misbehavior.
[  154.591745][ T8095] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  154.640594][ T8095] ntfs3: loop1: mft corrupted
[  154.653666][ T8095] ntfs3: loop1: Failed to load $Extend (-22).
[  154.660633][ T8095] ntfs3: loop1: Failed to initialize $Extend.
[  154.737325][   T27] audit: type=1800 audit(1790222187.281:35): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.687" name="file1" dev="loop1" ino=30 res=0 errno=0
[  154.853353][ T5836] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  155.064024][ T5836] usb 1-1: Using ep0 maxpacket: 32
[  155.093174][ T8114] tun0: tun_chr_ioctl cmd 1074025677
[  155.123491][ T8114] tun0: linktype set to 769
[  155.256861][ T5836] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  155.270072][ T5836] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  155.280077][ T5836] usb 1-1: config 0 interface 0 has no altsetting 0
[  155.289877][ T5836] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  155.299177][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.307778][ T5836] usb 1-1: Product: syz
[  155.312025][ T5836] usb 1-1: Manufacturer: syz
[  155.316779][ T5836] usb 1-1: SerialNumber: syz
[  155.324099][ T5836] usb 1-1: config 0 descriptor??
[  155.755234][ T5836] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  155.957255][ T8140] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  155.964940][ T8140] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  155.972170][ T8140] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  155.979459][ T8140] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  155.986728][ T8140] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  155.994012][ T8140] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  156.001240][ T8140] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  156.008517][ T8140] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  156.015790][ T8140] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  156.023028][ T8140] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  156.104343][ T5811] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  156.158863][ T5836] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  156.233901][ T5836] usb 1-1: USB disconnect, device number 7
[  156.293786][ T5811] usb 5-1: Using ep0 maxpacket: 32
[  156.302605][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.330438][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.351203][ T5811] usb 5-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00
[  156.400011][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.411593][ T5811] usb 5-1: config 0 descriptor??
[  156.849994][ T5811] wacom 0003:056A:00FA.0002: unknown main item tag 0x7
[  156.874564][ T5811] wacom 0003:056A:00FA.0002: unbalanced collection at end of report description
[  156.886248][ T5811] wacom 0003:056A:00FA.0002: parse failed
[  156.892627][ T5811] wacom: probe of 0003:056A:00FA.0002 failed with error -22
[  157.102946][ T5811] usb 5-1: USB disconnect, device number 5
[  157.435036][ T8179] loop5: detected capacity change from 0 to 128
[  157.467744][ T8179] EXT4-fs (loop5): Test dummy encryption mode enabled
[  157.517268][ T8179] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.562570][ T8179] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.615599][ T8163] loop1: detected capacity change from 0 to 40427
[  157.623704][ T8163] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  157.632159][ T8163] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  157.668513][ T8163] F2FS-fs (loop1): invalid crc_offset: 33558524
[  157.687815][ T8163] F2FS-fs (loop1): Found nat_bits in checkpoint
[  157.814740][ T8163] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  157.815766][ T6119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  157.824645][ T8163] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  157.998665][ T8193] loop4: detected capacity change from 0 to 512
[  158.045609][ T8193] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.724: inode has both inline data and extents flags
[  158.071679][ T8193] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.724: couldn't read orphan inode 15 (err -117)
[  158.087331][ T8193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.206216][ T8200] loop0: detected capacity change from 0 to 256
[  158.263545][ T8200] FAT-fs (loop0): Directory bread(block 64) failed
[  158.270118][ T8200] FAT-fs (loop0): Directory bread(block 65) failed
[  158.297142][ T8200] FAT-fs (loop0): Directory bread(block 66) failed
[  158.325897][ T8200] FAT-fs (loop0): Directory bread(block 67) failed
[  158.343433][ T8200] FAT-fs (loop0): Directory bread(block 68) failed
[  158.349977][ T8200] FAT-fs (loop0): Directory bread(block 69) failed
[  158.361391][ T8200] FAT-fs (loop0): Directory bread(block 70) failed
[  158.376647][ T8200] FAT-fs (loop0): Directory bread(block 71) failed
[  158.384111][ T8200] FAT-fs (loop0): Directory bread(block 72) failed
[  158.394461][ T8200] FAT-fs (loop0): Directory bread(block 73) failed
[  158.780548][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.021792][ T8219] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  159.089015][ T8222] loop0: detected capacity change from 0 to 256
[  159.111225][ T8222] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  159.133044][   T27] audit: type=1800 audit(1790222191.671:36): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.736" name="file1" dev="loop0" ino=1048661 res=0 errno=0
[  159.134138][ T8222] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264)
[  159.169759][ T8222] FAT-fs (loop0): Filesystem has been set read-only
[  159.201084][ T8222] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008)
[  159.233416][  T971] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  159.428419][  T971] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  159.440554][  T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.449550][  T971] usb 5-1: Product: syz
[  159.463336][  T971] usb 5-1: Manufacturer: syz
[  159.469427][  T971] usb 5-1: SerialNumber: syz
[  159.476977][  T971] usb 5-1: config 0 descriptor??
[  159.718999][  T971] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  159.942387][ T8240] use of bytesused == 0 is deprecated and will be removed in the future,
[  159.962029][ T8240] use the actual size instead.
[  160.356816][  T971] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  160.384352][  T971] usb 5-1: USB disconnect, device number 6
[  160.750803][ T8248] loop5: detected capacity change from 0 to 32768
[  160.810593][ T8248] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  160.918772][ T8248] XFS (loop5): Ending clean mount
[  160.929779][ T8248] XFS (loop5): Quotacheck needed: Please wait.
[  161.063025][ T8248] XFS (loop5): Quotacheck: Done.
[  161.315765][ T6119] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  162.653047][ T8303] loop1: detected capacity change from 0 to 512
[  162.659318][ T8305] loop4: detected capacity change from 0 to 256
[  162.700003][ T8303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.713177][   T27] audit: type=1800 audit(1790222195.241:37): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.770" name="file1" dev="loop4" ino=1048662 res=0 errno=0
[  162.721066][ T8305] FAT-fs (loop4): error, clusters badly computed (0 != 128)
[  162.751550][ T8305] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  162.764606][ T8303] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.889084][ T8303] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.769: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  162.904092][ T8305] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  163.020349][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.198182][ T8299] loop5: detected capacity change from 0 to 32768
[  163.237739][ T8299] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  163.314787][ T8299] XFS (loop5): Ending clean mount
[  163.728312][ T6119] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  164.190846][ T8343] loop5: detected capacity change from 0 to 512
[  164.231106][ T8344] loop4: detected capacity change from 0 to 1024
[  164.260723][ T8343] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.776: corrupted in-inode xattr: invalid ea_ino
[  164.310344][ T8343] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.776: couldn't read orphan inode 15 (err -117)
[  164.366168][ T8351] ip6gre1: entered promiscuous mode
[  164.371411][ T8351] ip6gre1: entered allmulticast mode
[  164.405348][ T8343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.575236][ T8357] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  164.594231][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.712577][ T8359] bridge0: entered promiscuous mode
[  164.737750][ T8359] vlan2: entered promiscuous mode
[  164.861733][ T8355] syz.1.786 (8355) used greatest stack depth: 17896 bytes left
[  165.193426][  T971] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  165.243860][ T8376] loop7: detected capacity change from 0 to 7
[  165.263623][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.273017][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  165.283238][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.292423][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  165.303552][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.312726][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  165.322650][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.331839][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  165.342332][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.351546][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  165.354003][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'.
[  165.364018][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.377324][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  165.387772][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.391862][ T8379] netlink: 60 bytes leftover after parsing attributes in process `syz.1.797'.
[  165.410600][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.419806][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  165.419909][  T971] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  165.428162][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.797'.
[  165.437029][ T8376] ldm_validate_partition_table(): Disk read failed.
[  165.474973][  T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.477951][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.492224][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  165.493177][  T971] usb 5-1: Product: syz
[  165.501761][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.513437][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  165.520256][  T971] usb 5-1: Manufacturer: syz
[  165.523140][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  165.536642][ T8376] Dev loop7: unable to read RDB block 0
[  165.542851][  T971] usb 5-1: SerialNumber: syz
[  165.544139][ T8376]  loop7: unable to read partition table
[  165.554394][ T8376] loop7: partition table beyond EOD, truncated
[  165.561252][ T8376] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  165.579121][  T971] usb 5-1: config 0 descriptor??
[  165.601207][  T971] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  166.233634][  T971] gspca_sunplus: reg_w_riv err -71
[  166.244359][  T971] sunplus: probe of 5-1:0.0 failed with error -71
[  166.268859][  T971] usb 5-1: USB disconnect, device number 7
[  166.284105][ T8406] loop5: detected capacity change from 0 to 256
[  166.301537][ T8406] exfat: Deprecated parameter 'utf8'
[  166.335743][ T8406] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d)
[  166.642981][  T789] IPVS: starting estimator thread 0...
[  166.733478][ T8416] IPVS: using max 19 ests per chain, 45600 per kthread
[  168.143408][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  168.285408][ T8459] input: syz1 as /devices/virtual/input/input14
[  169.194789][ T8490] loop5: detected capacity change from 0 to 128
[  169.240877][ T8490] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  169.306772][ T8490] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  169.597438][ T6119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  170.399711][ T8517] loop5: detected capacity change from 0 to 2048
[  170.471002][ T8517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.623486][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.713765][ T8523] loop4: detected capacity change from 0 to 4096
[  170.759991][ T8523] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  170.800081][ T8523] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  170.841698][ T8523] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  170.857799][ T8523] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[  170.871972][ T8523] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  170.887270][ T8523] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  170.946618][ T8523] ntfs: volume version 3.1.
[  170.962540][ T8523] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota.
[  171.003667][ T8523] ntfs: (device loop4): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  171.113038][ T8523] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp932.  You might want to try to use the mount option nls=utf8.
[  171.134789][ T8523] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  171.679446][ T8548] loop4: detected capacity change from 0 to 2364
[  171.876850][ T8552] loop4: detected capacity change from 0 to 1024
[  171.900412][ T8552] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  171.951700][ T8552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002]
[  171.962939][ T8552] System zones: 0-1, 3-12
[  171.971144][ T8552] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.066459][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  172.788204][ T8561] loop4: detected capacity change from 0 to 40427
[  172.848804][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'.
[  172.857957][ T8561] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64)
[  172.877278][ T8561] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  172.913975][ T8561] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  172.941213][ T8561] F2FS-fs (loop4): invalid crc value
[  172.959787][ T8561] F2FS-fs (loop4): Found nat_bits in checkpoint
[  173.060380][ T8566] loop5: detected capacity change from 0 to 32768
[  173.070761][ T8561] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  173.093638][ T8561] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  173.446512][ T5980] syz-executor: attempt to access beyond end of device
[  173.446512][ T5980] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  173.447883][ T8584] netlink: 32 bytes leftover after parsing attributes in process `syz.5.883'.
[  173.489028][ T5980] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  174.639586][ T8606] loop4: detected capacity change from 0 to 40427
[  174.666810][ T8606] F2FS-fs (loop4): invalid crc value
[  174.692414][ T8606] F2FS-fs (loop4): Found nat_bits in checkpoint
[  174.852177][ T8606] F2FS-fs (loop4): Start checkpoint disabled!
[  174.907237][ T8606] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  175.037139][ T8630] kAFS: bad VL server IP address
[  175.208051][   T12] kworker/u4:1: attempt to access beyond end of device
[  175.208051][   T12] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  175.223420][   T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  175.235070][   T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  175.243660][   T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  175.563927][ T8639] netlink: 316 bytes leftover after parsing attributes in process `syz.5.905'.
[  175.668453][ T8643] loop4: detected capacity change from 0 to 128
[  175.708079][ T8643] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  175.742001][ T8643] hpfs: filesystem error: improperly stopped
[  175.757435][ T8643] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  175.775521][ T8643] hpfs: You really don't want any checks? You are crazy...
[  175.810927][ T8643] hpfs: hpfs_map_sector(): read error
[  175.827355][ T8643] hpfs: code page support is disabled
[  175.832896][ T8643] hpfs: hpfs_map_4sectors(): unaligned read
[  175.868720][ T8643] hpfs: hpfs_map_4sectors(): unaligned read
[  175.890458][ T8643] hpfs: filesystem error: unable to find root dir
[  176.058258][ T8658] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  176.709182][    C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81357752 (__mcheck_cpu_init_clear_banks+0x102/0x1e0)
[  176.724599][    C0] Call Trace:
[  176.727875][    C0]  <IRQ>
[  176.730713][    C0]  mce_cpu_restart+0xce/0x1b0
[  176.735388][    C0]  ? mce_restart+0x180/0x180
[  176.739975][    C0]  __flush_smp_call_function_queue+0x325/0x9f0
[  176.746128][    C0]  ? mce_restart+0x180/0x180
[  176.750716][    C0]  __sysvec_call_function_single+0x98/0x370
[  176.756605][    C0]  sysvec_call_function_single+0x9c/0xc0
[  176.762233][    C0]  </IRQ>
[  176.765159][    C0]  <TASK>
[  176.768083][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  176.774067][    C0] RIP: 0010:lock_acquire+0x208/0x420
[  176.779352][    C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25
[  176.798953][    C0] RSP: 0018:ffffc900037772c0 EFLAGS: 00000206
[  176.805015][    C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 4c473150a22d3100
[  176.812977][    C0] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0
[  176.820940][    C0] RBP: ffffc900037773e0 R08: dffffc0000000000 R09: 1ffffffff223d6a0
[  176.828906][    C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff920006eee64
[  176.836869][    C0] R13: ffff8880b8e42118 R14: 0000000000000246 R15: dffffc0000000000
[  176.844849][    C0]  ? __lock_acquire+0x1262/0x7d80
[  176.849880][    C0]  ? read_lock_is_recursive+0x20/0x20
[  176.855253][    C0]  ? do_raw_spin_trylock+0xb2/0x190
[  176.860453][    C0]  ? do_raw_spin_lock+0x2b0/0x2b0
[  176.865477][    C0]  _raw_spin_trylock+0x47/0x80
[  176.870233][    C0]  ? get_page_from_freelist+0x48e/0x22a0
[  176.875860][    C0]  get_page_from_freelist+0x48e/0x22a0
[  176.881309][    C0]  ? verify_lock_unused+0x140/0x140
[  176.886517][    C0]  ? __next_zones_zonelist+0x9d/0x130
[  176.891895][    C0]  __alloc_pages+0x1f0/0x460
[  176.896479][    C0]  ? zone_statistics+0x170/0x170
[  176.901415][    C0]  ? alloc_pages+0x4e1/0x740
[  176.906010][    C0]  __get_free_pages+0xc/0x30
[  176.910591][    C0]  __tlb_remove_page_size+0x282/0x490
[  176.915964][    C0]  unmap_page_range+0x176b/0x32f0
[  176.921009][    C0]  ? copy_page_range+0x3700/0x3700
[  176.926125][    C0]  unmap_vmas+0x286/0x3f0
[  176.930454][    C0]  ? unmap_page_range+0x32f0/0x32f0
[  176.935652][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  176.940684][    C0]  exit_mmap+0x238/0xb90
[  176.944932][    C0]  ? vm_brk+0x30/0x30
[  176.948907][    C0]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  176.954546][    C0]  ? uprobe_clear_state+0x278/0x290
[  176.959741][    C0]  __mmput+0x118/0x3a0
[  176.963809][    C0]  exit_mm+0x23f/0x340
[  176.967872][    C0]  ? sysctl_delayacct+0x220/0x220
[  176.972887][    C0]  ? do_exit+0x2530/0x2530
[  176.977304][    C0]  do_exit+0x909/0x2530
[  176.981464][    C0]  ? put_task_struct+0xc0/0xc0
[  176.986229][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  176.992213][    C0]  ? do_group_exit+0x21d/0x2f0
[  176.996969][    C0]  ? lock_chain_count+0x20/0x20
[  177.001831][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  177.007036][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  177.012238][    C0]  do_group_exit+0x22d/0x2f0
[  177.016828][    C0]  __x64_sys_exit_group+0x3f/0x40
[  177.021848][    C0]  do_syscall_64+0x55/0xb0
[  177.026260][    C0]  ? clear_bhb_loop+0x40/0x90
[  177.030934][    C0]  ? clear_bhb_loop+0x40/0x90
[  177.035611][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.041500][    C0] RIP: 0033:0x7f7a19d9e159
[  177.045920][    C0] Code: Unable to access opcode bytes at 0x7f7a19d9e12f.
[  177.052930][    C0] RSP: 002b:00007ffc8cac90d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  177.061345][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7a19d9e159
[  177.069320][    C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  177.077287][    C0] RBP: 00007ffc8cac913c R08: 0000000000000000 R09: 00000000000927c0
[  177.085255][    C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000d3
[  177.093219][    C0] R13: 00000000000927c0 R14: 000000000002b1e1 R15: 00007ffc8cac9190
[  177.101201][    C0]  </TASK>
[  177.552743][ T8706] loop4: detected capacity change from 0 to 4096
[  177.564808][ T8706] EXT4-fs: Ignoring removed nobh option
[  177.570642][ T8706] EXT4-fs: Ignoring removed bh option
[  177.606454][ T8706] EXT4-fs (loop4): Test dummy encryption mode enabled
[  177.637057][ T8706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.822059][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.236592][ T8727] netlink: 'syz.1.943': attribute type 14 has an invalid length.
[  178.468992][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[  178.829793][ T8755] loop4: detected capacity change from 0 to 512
[  178.852613][ T8755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  178.949803][ T8755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.991070][ T8755] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.150954][ T8755] EXT4-fs error (device loop4): ext4_empty_dir:3147: inode #12: block 32: comm syz.4.955: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  179.179726][ T8755] EXT4-fs (loop4): Remounting filesystem read-only
[  179.190343][ T8755] EXT4-fs warning (device loop4): ext4_empty_dir:3149: inode #12: comm syz.4.955: directory missing '.'
[  179.316458][ T5980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.323713][  T971] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  179.525154][  T971] usb 6-1: Using ep0 maxpacket: 8
[  179.551257][  T971] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  179.581338][  T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.596642][  T971] usb 6-1: Product: syz
[  179.603514][  T971] usb 6-1: Manufacturer: syz
[  179.608137][  T971] usb 6-1: SerialNumber: syz
[  179.643868][  T971] usb 6-1: config 0 descriptor??
[  179.767566][ T8785] rnbd_client L127: Can't parse path i�t�-$���w��bAa�<
[  179.767566][ T8785] yͅ�\��@: -22
[  179.867562][  T971] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  179.947415][ T8778] loop4: detected capacity change from 0 to 32768
[  179.960903][ T8778] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.965 (8778)
[  179.990139][ T8778] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  180.011086][ T8778] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  180.022909][ T8778] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  180.027906][ T8787] sctp: [Deprecated]: syz.1.970 (pid 8787) Use of int in maxseg socket option.
[  180.027906][ T8787] Use struct sctp_assoc_value instead
[  180.033003][ T8778] BTRFS info (device loop4): use zstd compression, level 3
[  180.063106][ T8778] BTRFS info (device loop4): using free space tree
[  180.181666][ T8778] BTRFS info (device loop4): enabling ssd optimizations
[  180.200818][ T8778] BTRFS info (device loop4): auto enabling async discard
[  180.473912][  T971] usb write operation failed. (-71)
[  180.526879][  T971] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  180.550167][  T971] dvbdev: DVB: registering new adapter (Terratec H7)
[  180.571348][  T971] usb 6-1: media controller created
[  180.599484][  T971] usb read operation failed. (-71)
[  180.620674][  T971] usb write operation failed. (-71)
[  180.690812][  T971] dvb_usb_az6007: probe of 6-1:0.0 failed with error -5
[  180.744831][  T971] usb 6-1: USB disconnect, device number 2
[  180.776050][ T5980] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  181.371404][ T8820] loop5: detected capacity change from 0 to 256
[  181.433569][ T8820] overlayfs: failed to resolve './file1': -2
[  181.439708][ T8823] block2mtd: illegal erase size
[  181.891708][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.5.982'.
[  182.042562][ T8814] loop4: detected capacity change from 0 to 40427
[  182.051703][ T8814] F2FS-fs (loop4): invalid crc value
[  182.081810][ T8814] F2FS-fs (loop4): Found nat_bits in checkpoint
[  182.223542][ T8814] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  182.265975][ T8814] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  182.645116][ T8858] loop5: detected capacity change from 0 to 8192
[  183.140884][ T5836] hid-generic 0005:4C4A:0007.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  183.412296][ T8888] loop4: detected capacity change from 0 to 1024
[  183.455818][ T8888] EXT4-fs error (device loop4): __ext4_fill_super:5517: comm syz.4.1007: inode #2: comm syz.4.1007: iget: illegal inode #
[  183.469983][ T8890] sctp: [Deprecated]: syz.5.1008 (pid 8890) Use of int in max_burst socket option deprecated.
[  183.469983][ T8890] Use struct sctp_assoc_value instead
[  183.493653][ T8888] EXT4-fs (loop4): get root inode failed
[  183.499468][ T8888] EXT4-fs (loop4): mount failed
[  183.786928][ T8897] input: syz1 as /devices/virtual/input/input15
[  183.909770][ T8899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1012'.
[  183.928652][ T8899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1012'.
[  184.353531][ T8901] loop5: detected capacity change from 0 to 32768
[  184.881036][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1024'.
[  185.061985][ T8933] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1028'.
[  185.783339][ T5836] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  185.983945][ T5836] usb 6-1: Using ep0 maxpacket: 16
[  185.992211][ T5836] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.013527][ T5836] usb 6-1: config 0 interface 0 has no altsetting 0
[  186.020320][ T5836] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  186.047182][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.069269][ T5836] usb 6-1: config 0 descriptor??
[  186.155788][ T8953] loop4: detected capacity change from 0 to 40427
[  186.170433][ T8953] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  186.208839][ T8953] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  186.218929][ T8953] F2FS-fs (loop4): invalid crc value
[  186.237085][ T8953] F2FS-fs (loop4): Found nat_bits in checkpoint
[  186.332724][ T8953] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  186.354155][ T8953] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  186.509842][ T5836] mcp2221 0003:04D8:00DD.0004: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  186.832605][ T8977] sctp: [Deprecated]: syz.0.1045 (pid 8977) Use of struct sctp_assoc_value in delayed_ack socket option.
[  186.832605][ T8977] Use struct sctp_sack_info instead
[  186.933487][ T5836] usb 6-1: USB disconnect, device number 3
[  187.064159][ T8981] loop4: detected capacity change from 0 to 512
[  187.583964][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1057'.
[  187.604955][ T9003] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1057'.
[  187.639937][ T9003] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  187.771181][ T9009] loop4: detected capacity change from 0 to 256
[  188.133379][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  188.271015][ T5776] Bluetooth: hci1: link tx timeout
[  188.278199][ T5776] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  188.290440][   T51] Bluetooth: hci1: link tx timeout
[  188.296248][   T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  188.304103][   T51] Bluetooth: hci1: link tx timeout
[  188.309233][   T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  188.317212][   T51] Bluetooth: hci1: link tx timeout
[  188.322539][   T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  188.343316][    T9] usb 6-1: Using ep0 maxpacket: 8
[  188.350944][    T9] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  188.359155][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  188.370406][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  188.380727][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  188.392658][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  188.403164][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  188.419233][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  188.428483][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.661439][    T9] usb 6-1: GET_CAPABILITIES returned 0
[  188.675518][    T9] usbtmc 6-1:16.0: can't read capabilities
[  188.710756][ T2959] bond0: (slave bond_slave_0): interface is now down
[  188.725417][ T2959] bond0: (slave bond_slave_1): interface is now down
[  188.747432][   T27] kauditd_printk_skb: 22 callbacks suppressed
[  188.747444][   T27] audit: type=1400 audit(1790222221.301:60): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=9039 comm="syz.1.1073" name="p" offset=79
[  188.758053][ T2959] bond0: now running without any active interface!
[  188.837758][   T27] audit: type=1326 audit(1790222221.381:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccf79e159 code=0x7ffc0000
[  188.877749][    C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  188.893355][ T9012] usbtmc 6-1:16.0: Unable to send data, error -71
[  188.913940][    T9] usb 6-1: USB disconnect, device number 4
[  188.918201][   T27] audit: type=1326 audit(1790222221.381:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccf79e159 code=0x7ffc0000
[  188.998256][   T27] audit: type=1326 audit(1790222221.411:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccf79e159 code=0x7ffc0000
[  189.028977][   T27] audit: type=1326 audit(1790222221.411:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1ccf79e159 code=0x7ffc0000
[  189.067440][   T27] audit: type=1326 audit(1790222221.411:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccf79e159 code=0x7ffc0000
[  189.099842][   T27] audit: type=1326 audit(1790222221.411:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccf79e159 code=0x7ffc0000
[  189.156766][   T27] audit: type=1326 audit(1790222221.411:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccf79e159 code=0x7ffc0000
[  189.182083][   T27] audit: type=1326 audit(1790222221.411:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ccf79e159 code=0x7ffc0000
[  189.255233][   T27] audit: type=1326 audit(1790222221.411:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.1.1075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ccf79e159 code=0x7ffc0000
[  190.258669][ T9093] ima: Unable to open file: /e (-2)
[  190.264045][ T9092] ima: policy update failed
[  190.270232][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1099'.
[  190.303714][ T5087] Bluetooth: hci1: command 0x0405 tx timeout
[  190.424480][ T9103] program syz.1.1102 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  190.981690][ T9127] kAFS: bad VL server IP address
[  191.265771][ T5776] Bluetooth: hci3: command 0x0406 tx timeout
[  191.452310][ T9147] net_ratelimit: 3255 callbacks suppressed
[  191.452327][ T9147] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  192.086137][ T9167] loop5: detected capacity change from 0 to 4096
[  192.103508][ T9167] NILFS (loop5): invalid segment: Checksum error in segment payload
[  192.134090][ T9167] NILFS (loop5): trying rollback from an earlier position
[  192.226944][ T9167] NILFS (loop5): recovery complete
[  192.242487][ T9172] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.452115][ T9177] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.1134'.
[  192.986622][   T23] wiimote 0005:057E:0306.0005: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  193.007238][   T23] wiimote 0005:057E:0306.0005: New device registered
[  193.013031][ T9183] loop4: detected capacity change from 0 to 40427
[  193.048385][ T9183] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  193.058441][ T9183] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  193.067960][ T9183] F2FS-fs (loop4): invalid crc value
[  193.252873][ T9183] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  193.265933][   T28] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  193.273663][ T9183] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  193.350834][ T5980] syz-executor: attempt to access beyond end of device
[  193.350834][ T5980] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.378212][ T5980] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  193.504996][   T28] usb 1-1: Using ep0 maxpacket: 8
[  193.525346][   T28] usb 1-1: config 0 has no interfaces?
[  193.547909][   T28] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  193.563179][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.583876][   T28] usb 1-1: Product: syz
[  193.593293][   T28] usb 1-1: Manufacturer: syz
[  193.597964][   T28] usb 1-1: SerialNumber: syz
[  193.624023][   T28] usb 1-1: config 0 descriptor??
[  193.773433][ T9214] rnbd_client L127: Can't parse path hp:127.0.0.1\ߐ?:�b�Ez���[�������۵��>,: -22
[  193.840798][ T9195] wiimote 0005:057E:0306.0005: Unhandled report 0 size 23
[  193.864964][   T28] usb 1-1: USB disconnect, device number 8
[  193.873632][ T9194] wiimote 0005:057E:0306.0005: Device removed
[  193.899353][ T9217] loop4: detected capacity change from 0 to 512
[  194.086242][  T789] wiimote 0005:057E:0306.0005: detected device: Nintendo Wii Remote (Gen 1)
[  194.169770][  T789] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input17
[  194.192907][  T789] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input18
[  194.240446][  T789] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0005/input/input16
[  194.308771][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.315428][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.593455][   T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  194.659267][  T971] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  194.801771][   T23] usb 5-1: config 0 has no interfaces?
[  194.807423][   T23] usb 5-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40
[  194.816533][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.834078][   T23] usb 5-1: config 0 descriptor??
[  194.844966][  T971] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  194.861797][  T971] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  194.887905][  T971] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  194.900099][  T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.910109][  T971] usb 6-1: Product: syz
[  194.915724][  T971] usb 6-1: Manufacturer: syz
[  194.920520][  T971] usb 6-1: SerialNumber: syz
[  194.943121][  T971] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected
[  194.964782][  T971] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  194.977029][  T971] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  195.063559][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.077830][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.097678][  T971] usb 5-1: USB disconnect, device number 8
[  195.663373][  T971] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  195.845272][  T971] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.855251][  T971] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  195.867772][  T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.879919][  T971] hub 5-1:1.0: bad descriptor, ignoring hub
[  195.890056][  T971] hub: probe of 5-1:1.0 failed with error -5
[  195.901593][  T971] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  196.226500][ T9229] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[  196.234085][  T971] usb 5-1: USB disconnect, device number 9
[  196.239212][ T9229] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[  196.252271][ T9229] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[  196.258991][  T971] idmouse 5-1:1.0: disconnected
[  196.262995][ T9229] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32
[  196.291270][   T23] usb 6-1: USB disconnect, device number 5
[  196.306352][   T23] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  196.326040][   T23] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  196.338786][   T23] ti_usb_3410_5052 6-1:2.0: device disconnected
[  196.915083][ T9237] loop4: detected capacity change from 0 to 32768
[  197.197493][   T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  197.237971][  T971] smpboot: CPU 1 is now offline
[  197.395291][   T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.407323][   T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  197.425235][   T23] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  197.437486][   T23] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  197.457818][   T23] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  197.494572][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.923402][  T971] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  198.104598][  T971] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  198.119068][  T971] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  198.152267][  T971] usb 5-1: config 0 interface 0 has no altsetting 0
[  198.166172][  T971] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00
[  198.193350][  T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.227119][  T971] usb 5-1: config 0 descriptor??
[  198.326038][   T23] gud 6-1:1.0: Failed to get connectors (error=-71)
[  198.338395][   T23] gud: probe of 6-1:1.0 failed with error -71
[  198.390443][   T23] usb 6-1: USB disconnect, device number 6
[  198.664901][  T971] hid-generic 0003:1B1C:1B29.0006: hidraw1: USB HID v0.00 Device [HID 1b1c:1b29] on usb-dummy_hcd.4-1/input0
[  198.988287][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.045996][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.095884][    T9] usb 5-1: USB disconnect, device number 10
[  200.343816][ T9295] loop5: detected capacity change from 0 to 32768
[  200.378806][ T9295] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  200.487109][ T9295] XFS (loop5): Ending clean mount
[  200.696544][ T6119] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  200.911406][ T9321] loop5: detected capacity change from 0 to 128
[  200.992842][ T9321] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  201.065541][ T9321] hpfs: filesystem error: improperly stopped
[  201.071549][ T9321] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  201.152978][ T9321] hpfs: You really don't want any checks? You are crazy...
[  201.212769][ T9321] hpfs: Code page index out of array
[  201.243334][ T9321] hpfs: code page support is disabled
[  201.274268][ T9321] hpfs: hpfs_map_4sectors(): unaligned read
[  201.280229][ T9321] hpfs: hpfs_map_4sectors(): unaligned read
[  201.336432][ T9321] hpfs: filesystem error: unable to find root dir
[  201.486598][ T9321] hpfs: hpfs_map_4sectors(): unaligned read
[  201.514278][ T9321] hpfs: hpfs_map_4sectors(): unaligned read
[  201.850812][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'.
[  201.877229][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1207'.
[  201.886601][ T9346] loop5: detected capacity change from 0 to 128
[  201.905116][ T9346] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  201.936565][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'.
[  201.967822][ T9346] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  201.978518][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1207'.
[  202.070548][ T9310] loop4: detected capacity change from 0 to 40427
[  202.187248][ T9310] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff
[  202.285922][ T9310] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x30e4
[  202.352762][ T9310] F2FS-fs (loop4): invalid crc value
[  202.417551][ T9310] F2FS-fs (loop4): Found nat_bits in checkpoint
[  202.578859][ T9310] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  202.719479][ T9310] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  202.880990][ T9310] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  203.031294][ T9310] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x634/0x7f0
[  203.244914][ T5980] syz-executor: attempt to access beyond end of device
[  203.244914][ T5980] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.350669][ T9388] loop5: detected capacity change from 0 to 16
[  203.369548][ T9388] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  203.455607][ T5980] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  203.505578][ T5776] Bluetooth: hci0: command 0x0406 tx timeout
[  203.665495][ T9397] clocksource: Switched to clocksource acpi_pm
[  204.062791][ T9413] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1236'.
[  204.713366][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  204.842332][ T9428] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1242'.
[  204.927549][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.968865][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  205.033925][    T9] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  205.073997][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.136383][    T9] cxacru 6-1:1.0: usbatm_usb_probe: bind failed: -19!
[  205.450027][ T5836] usb 6-1: USB disconnect, device number 7
[  205.520663][ T9443] loop4: detected capacity change from 0 to 256
[  207.094998][ T9467] loop5: detected capacity change from 0 to 32768
[  207.138692][ T9467] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1260 (9467)
[  207.199744][ T9467] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  207.235927][ T9467] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  207.272439][ T9467] BTRFS info (device loop5): use zlib compression, level 3
[  207.297693][ T9467] BTRFS info (device loop5): using free space tree
[  207.365903][ T9467] BTRFS info (device loop5): enabling ssd optimizations
[  207.394215][ T9467] BTRFS info (device loop5): auto enabling async discard
[  207.809034][ T6119] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  208.005418][ T9494] program syz.4.1263 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  209.523118][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  209.724749][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.755600][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.782572][    T9] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  209.808729][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.841250][    T9] usb 6-1: config 0 descriptor??
[  210.169956][ T9530] loop4: detected capacity change from 0 to 40427
[  210.205824][ T9530] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  210.278248][    T9] hid-led 0003:1D34:000A.0007: unknown main item tag 0x0
[  210.292508][ T9530] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  210.308750][    T9] hid-led 0003:1D34:000A.0007: unknown main item tag 0x0
[  210.325144][    T9] hid-led 0003:1D34:000A.0007: unknown main item tag 0x0
[  210.349210][ T9530] F2FS-fs (loop4): Image doesn't support compression
[  210.389118][ T9530] F2FS-fs (loop4): Image doesn't support compression
[  210.460095][ T9530] F2FS-fs (loop4): invalid crc value
[  210.475167][    T9] hid-led 0003:1D34:000A.0007: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.5-1/input0
[  210.558855][    T9] hid-led 0003:1D34:000A.0007: Dream Cheeky Webmail Notifier initialized
[  210.684876][    T9] usb 6-1: USB disconnect, device number 8
[  210.777677][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'.
[  210.834859][ T9530] F2FS-fs (loop4): Start checkpoint disabled!
[  210.894465][ T9530] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  210.926155][ T9530] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  211.085107][   T42] kworker/u4:2: attempt to access beyond end of device
[  211.085107][   T42] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  211.116469][   T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  211.182797][ T5812] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  211.397708][ T5812] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[  211.427534][ T5812] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  211.442226][ T9568] block device autoloading is deprecated and will be removed.
[  211.474450][ T5812] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  211.532074][ T5812] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  211.553518][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.605049][ T9559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  211.640488][ T5812] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  211.720013][ T5812] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  211.845631][ T5836] usb 1-1: USB disconnect, device number 9
[  211.866521][ T5836] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  211.929427][ T5836] cyberjack 1-1:1.0: device disconnected
[  211.977379][ T9581] loop5: detected capacity change from 0 to 512
[  212.016473][ T9581] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1304: iget: bad i_size value: 38620345925642
[  212.059920][ T9581] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1304: couldn't read orphan inode 15 (err -117)
[  212.096393][ T9581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.130412][ T9587] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  212.165009][ T9581] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.1304: bg 0: block 5: invalid block bitmap
[  212.211020][ T9581] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28
[  212.258070][ T9581] EXT4-fs (loop5): This should not happen!! Data will be lost
[  212.258070][ T9581] 
[  212.276507][ T9581] EXT4-fs (loop5): Total free blocks count 0
[  212.286618][ T9581] EXT4-fs (loop5): Free/Dirty block details
[  212.292505][ T9581] EXT4-fs (loop5): free_blocks=0
[  212.303850][ T9581] EXT4-fs (loop5): dirty_blocks=1
[  212.314379][ T9581] EXT4-fs (loop5): Block reservation details
[  212.320474][ T9581] EXT4-fs (loop5): i_reserved_data_blocks=1
[  212.399389][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.808849][ T9606] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  213.074816][ T9617] loop5: detected capacity change from 0 to 128
[  213.106997][ T9617] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  213.171876][ T9617] ext4 filesystem being mounted at /321/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  213.253058][ T9617] fscrypt (loop5, inode 12): Mutually exclusive encryption flags (0x15)
[  213.335373][ T6119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  214.081176][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1335'.
[  214.262616][ T5812] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  214.344387][ T9663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1338'.
[  214.472735][ T5812] usb 5-1: Using ep0 maxpacket: 8
[  214.509904][ T5812] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  214.528465][ T5812] usb 5-1: config 179 has no interface number 0
[  214.547591][ T5812] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  214.572019][ T5812] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  214.595868][ T5812] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  214.627809][ T5812] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  214.648316][ T5812] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  214.665045][ T5812] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  214.674470][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.687312][ T9652] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  255.741585][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  255.747923][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  317.179103][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  317.185620][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  334.630600][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  371.570309][   T29] INFO: task kworker/u4:1:12 blocked for more than 143 seconds.
[  371.577981][   T29]       Tainted: G S                 syzkaller #0
[  371.598653][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  371.618078][   T29] task:kworker/u4:1    state:D stack:22664 pid:12    ppid:2      flags:0x00004000
[  371.636932][   T29] Workqueue: writeback wb_workfn (flush-8:0)
[  371.646629][   T29] Call Trace:
[  371.655277][   T29]  <TASK>
[  371.658272][   T29]  __schedule+0x15ae/0x4660
[  371.663995][   T29]  ? blk_mq_start_stopped_hw_queues+0x260/0x260
[  371.673231][   T29]  ? blk_mq_start_stopped_hw_queues+0x260/0x260
[  371.679526][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  371.686828][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  371.694662][   T29]  ? asan.module_dtor+0x20/0x20
[  371.699575][   T29]  ? blk_check_plugged+0x250/0x250
[  371.705876][   T29]  ? rq_wait_inc_below+0x11f/0x1a0
[  371.713703][   T29]  ? wq_worker_sleeping+0x63/0x240
[  371.718876][   T29]  schedule+0xbd/0x170
[  371.725097][   T29]  io_schedule+0x80/0xd0
[  371.740088][   T29]  rq_qos_wait+0x22b/0x360
[  371.744573][   T29]  ? wbt_inflight_cb+0x2f0/0x2f0
[  371.749561][   T29]  ? rq_depth_scale_down+0x2f0/0x2f0
[  371.764628][   T29]  ? rq_qos_wait+0x360/0x360
[  371.769294][   T29]  ? wbt_exit+0xb0/0xb0
[  371.775494][   T29]  ? blk_bio_list_merge+0xd0/0xd0
[  371.782401][   T29]  wbt_wait+0x34a/0x580
[  371.786617][   T29]  ? rwb_trace_step+0x320/0x320
[  371.793401][   T29]  ? dd_depth_updated+0x110/0x110
[  371.798546][   T29]  ? rwb_trace_step+0x320/0x320
[  371.805515][   T29]  __rq_qos_throttle+0x65/0xb0
[  371.816164][   T29]  blk_mq_submit_bio+0x8fb/0x2220
[  371.823175][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  371.828259][   T29]  ? blk_mq_plug_issue_direct+0x550/0x550
[  371.837694][   T29]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  371.846679][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  371.853794][   T29]  ? ktime_get+0x7f/0x280
[  371.858182][   T29]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  371.867958][   T29]  ? ktime_get_real_ts64+0x440/0x440
[  371.876967][   T29]  __submit_bio+0x12b/0x260
[  371.884588][   T29]  ? blk_free_queue_rcu+0x40/0x40
[  371.889681][   T29]  submit_bio_noacct_nocheck+0x6e8/0x9c0
[  371.898714][   T29]  ? __folio_end_writeback+0xe10/0xe10
[  371.904566][   T29]  ? __mod_lruvec_page_state+0xa5/0x410
[  371.913638][   T29]  ? should_fail_request+0x70/0x70
[  371.918809][   T29]  ? submit_bio_noacct+0xfba/0x1b30
[  371.924352][   T29]  ext4_bio_write_folio+0x16a4/0x22d0
[  371.929875][   T29]  mpage_submit_folio+0x231/0x3c0
[  371.939602][   T29]  mpage_process_page_bufs+0x6bf/0x8c0
[  371.946120][   T29]  mpage_prepare_extent_to_map+0xecd/0x1f80
[  371.956183][   T29]  ? trace_ext4_writepages+0x1c0/0x1c0
[  371.961987][   T29]  ? kmem_cache_alloc+0x1a6/0x2c0
[  371.967077][   T29]  ext4_do_writepages+0xb46/0x3990
[  371.977394][   T29]  ? ext4_normal_submit_inode_data_buffers+0x240/0x240
[  371.986394][   T29]  ? rcu_read_lock_any_held+0xb4/0x140
[  371.995367][   T29]  ? __lock_acquire+0x1336/0x7d80
[  372.000698][   T29]  ext4_writepages+0x1dd/0x350
[  372.005517][   T29]  ? ext4_read_folio+0x2f0/0x2f0
[  372.015118][   T29]  ? __rwlock_init+0x150/0x150
[  372.020387][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  372.025769][   T29]  ? ext4_read_folio+0x2f0/0x2f0
[  372.034211][   T29]  do_writepages+0x351/0x590
[  372.039504][   T29]  ? folio_clear_dirty_for_io+0xca0/0xca0
[  372.046161][   T29]  ? writeback_sb_inodes+0x4bd/0x1020
[  372.056158][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  372.062221][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  372.067308][   T29]  __writeback_single_inode+0x14e/0xee0
[  372.076442][   T29]  writeback_sb_inodes+0x813/0x1020
[  372.083479][   T29]  ? queue_io+0x530/0x530
[  372.087950][   T29]  __writeback_inodes_wb+0x114/0x240
[  372.098630][   T29]  wb_writeback+0x472/0xbe0
[  372.103530][   T29]  ? queue_io+0x2d1/0x530
[  372.107984][   T29]  ? percpu_ref_tryget+0x250/0x250
[  372.116694][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  372.123117][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  372.128222][   T29]  wb_workfn+0xad7/0xe60
[  372.136648][   T29]  ? inode_wait_for_writeback+0x230/0x230
[  372.143899][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  372.153494][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  372.158642][   T29]  ? read_lock_is_recursive+0x20/0x20
[  372.164530][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  372.169786][   T29]  ? process_scheduled_works+0x975/0x1600
[  372.181726][   T29]  ? process_scheduled_works+0x975/0x1600
[  372.187520][   T29]  process_scheduled_works+0xa60/0x1600
[  372.197221][   T29]  ? worker_attach_to_pool+0x370/0x370
[  372.205294][   T29]  ? assign_work+0x3cc/0x5d0
[  372.213425][   T29]  worker_thread+0xa5e/0xfe0
[  372.218156][   T29]  kthread+0x2fa/0x390
[  372.223450][   T29]  ? pr_cont_work+0x550/0x550
[  372.228186][   T29]  ? kthread_blkcg+0xd0/0xd0
[  372.235897][   T29]  ret_from_fork+0x48/0x80
[  372.242651][   T29]  ? kthread_blkcg+0xd0/0xd0
[  372.247338][   T29]  ret_from_fork_asm+0x11/0x20
[  372.254942][   T29]  </TASK>
[  372.258113][   T29] INFO: task jbd2/sda1-8:5103 blocked for more than 144 seconds.
[  372.267252][   T29]       Tainted: G S                 syzkaller #0
[  372.276259][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  372.288660][   T29] task:jbd2/sda1-8     state:D stack:26024 pid:5103  ppid:2      flags:0x00004000
[  372.302891][   T29] Call Trace:
[  372.306235][   T29]  <TASK>
[  372.309222][   T29]  __schedule+0x15ae/0x4660
[  372.317360][   T29]  ? asan.module_dtor+0x20/0x20
[  372.324352][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  372.329522][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  372.337464][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  372.345018][   T29]  schedule+0xbd/0x170
[  372.349152][   T29]  io_schedule+0x80/0xd0
[  372.356215][   T29]  bit_wait_io+0x11/0xd0
[  372.361672][   T29]  __wait_on_bit+0x9f/0x2c0
[  372.366244][   T29]  ? bit_wait+0xd0/0xd0
[  372.373211][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  372.378795][   T29]  ? bit_wait+0xd0/0xd0
[  372.384174][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  372.388996][   T29]  ? do_raw_write_lock+0x11e/0x260
[  372.398441][   T29]  ? bit_waitqueue+0x30/0x30
[  372.405174][   T29]  ? do_raw_read_unlock+0x3d/0x80
[  372.414210][   T29]  jbd2_journal_commit_transaction+0x2e8d/0x5ad0
[  372.423180][   T29]  ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0
[  372.432903][   T29]  ? lock_chain_count+0x20/0x20
[  372.437843][   T29]  ? _raw_spin_unlock+0x40/0x40
[  372.443896][   T29]  ? __try_to_del_timer_sync+0x1c2/0x280
[  372.453411][   T29]  ? __timer_delete_sync+0x23d/0x2e0
[  372.458793][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  372.465241][   T29]  ? timer_delete_sync+0x20/0x20
[  372.472893][   T29]  ? do_raw_read_unlock+0x80/0x80
[  372.477985][   T29]  ? prepare_to_wait+0x1aa/0x200
[  372.484093][   T29]  kjournald2+0x40f/0x810
[  372.488485][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  372.496429][   T29]  ? wake_bit_function+0x200/0x200
[  372.504215][   T29]  ? _raw_spin_unlock+0x40/0x40
[  372.509186][   T29]  ? __kthread_parkme+0x71/0x1c0
[  372.516893][   T29]  ? __kthread_parkme+0x15b/0x1c0
[  372.524593][   T29]  kthread+0x2fa/0x390
[  372.528778][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  372.539266][   T29]  ? kthread_blkcg+0xd0/0xd0
[  372.545275][   T29]  ret_from_fork+0x48/0x80
[  372.553453][   T29]  ? kthread_blkcg+0xd0/0xd0
[  372.558163][   T29]  ret_from_fork_asm+0x11/0x20
[  372.564121][   T29]  </TASK>
[  372.567201][   T29] INFO: task syz-executor:5758 blocked for more than 144 seconds.
[  372.577850][   T29]       Tainted: G S                 syzkaller #0
[  372.585322][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  372.596767][   T29] task:syz-executor    state:D stack:22888 pid:5758  ppid:5757   flags:0x00004002
[  372.607253][   T29] Call Trace:
[  372.614600][   T29]  <TASK>
[  372.617594][   T29]  __schedule+0x15ae/0x4660
[  372.623317][   T29]  ? mark_lock+0x94/0x320
[  372.627713][   T29]  ? asan.module_dtor+0x20/0x20
[  372.638021][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  372.645521][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  372.655375][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  372.661762][   T29]  schedule+0xbd/0x170
[  372.665895][   T29]  io_schedule+0x80/0xd0
[  372.672952][   T29]  bit_wait_io+0x11/0xd0
[  372.677255][   T29]  __wait_on_bit+0x9f/0x2c0
[  372.683177][   T29]  ? bit_wait+0xd0/0xd0
[  372.687387][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  372.695640][   T29]  ? bit_wait+0xd0/0xd0
[  372.700930][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  372.705822][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  372.713595][   T29]  ? bit_waitqueue+0x30/0x30
[  372.718241][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  372.726334][   T29]  do_get_write_access+0x5c9/0xe00
[  372.734189][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  372.743197][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  372.749415][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  372.762964][   T29]  ? __might_sleep+0xe0/0xe0
[  372.767620][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  372.780101][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  372.785660][   T29]  ext4_dirty_inode+0xcb/0x110
[  372.797691][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  372.803773][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  372.808858][   T29]  file_update_time+0x187/0x1a0
[  372.817306][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  372.822631][   T29]  ? do_wp_page+0x4ce/0x34d0
[  372.827300][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  372.838599][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  372.843911][   T29]  do_page_mkwrite+0x153/0x3f0
[  372.848738][   T29]  do_wp_page+0xd4d/0x34d0
[  372.861301][   T29]  ? folio_put+0xd0/0xd0
[  372.865612][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  372.875333][   T29]  ? __rwlock_init+0x150/0x150
[  372.880414][   T29]  handle_mm_fault+0x1306/0x4a50
[  372.885407][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  372.893921][   T29]  ? numa_migrate_prep+0x350/0x350
[  372.899096][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  372.904949][   T29]  do_user_addr_fault+0x736/0x12d0
[  372.913539][   T29]  exc_page_fault+0x64/0x100
[  372.918190][   T29]  ? clear_bhb_loop+0x40/0x90
[  372.923232][   T29]  asm_exc_page_fault+0x26/0x30
[  372.928202][   T29] RIP: 0033:0x7feaa8c7c6e2
[  372.937475][   T29] RSP: 002b:00007ffc7724d5f0 EFLAGS: 00010202
[  372.945446][   T29] RAX: 00007feaa6b2c000 RBX: 000055558683f300 RCX: 0000000000000002
[  372.957084][   T29] RDX: 0000000000001edd RSI: 0000555586849720 RDI: 0000000000000004
[  372.968137][   T29] RBP: 00007ffc7724daf0 R08: 0000555586849730 R09: 0000000000000092
[  372.979775][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc7724d930
[  372.994420][   T29] R13: 00007ffc7724d720 R14: 585858582e7a7973 R15: 00007ffc7724d670
[  373.002819][   T29]  </TASK>
[  373.005938][   T29] INFO: task syz.4.1331:9650 blocked for more than 144 seconds.
[  373.017828][   T29]       Tainted: G S                 syzkaller #0
[  373.024665][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  373.033788][   T29] task:syz.4.1331      state:D stack:27048 pid:9650  ppid:5980   flags:0x00004004
[  373.046413][   T29] Call Trace:
[  373.049750][   T29]  <TASK>
[  373.054465][   T29]  __schedule+0x15ae/0x4660
[  373.059055][   T29]  ? mark_lock+0x94/0x320
[  373.068059][   T29]  ? asan.module_dtor+0x20/0x20
[  373.073239][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  373.078322][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  373.089211][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  373.097628][   T29]  schedule+0xbd/0x170
[  373.105170][   T29]  io_schedule+0x80/0xd0
[  373.109474][   T29]  bit_wait_io+0x11/0xd0
[  373.114118][   T29]  __wait_on_bit+0x9f/0x2c0
[  373.118738][   T29]  ? bit_wait+0xd0/0xd0
[  373.126580][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  373.132333][   T29]  ? bit_wait+0xd0/0xd0
[  373.136564][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  373.141739][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  373.146887][   T29]  ? bit_waitqueue+0x30/0x30
[  373.154934][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  373.161808][   T29]  do_get_write_access+0x5c9/0xe00
[  373.168158][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  373.178101][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  373.184614][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  373.195789][   T29]  ? __might_sleep+0xe0/0xe0
[  373.203548][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  373.209198][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  373.218313][   T29]  ext4_dirty_inode+0xcb/0x110
[  373.223385][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  373.229247][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  373.237970][   T29]  file_update_time+0x187/0x1a0
[  373.243140][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  373.248222][   T29]  ? filemap_fault+0x103c/0x1540
[  373.253820][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  373.259599][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  373.272003][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  373.277098][   T29]  do_page_mkwrite+0x153/0x3f0
[  373.284617][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  373.289618][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  373.295756][   T29]  ? numa_migrate_prep+0x350/0x350
[  373.305214][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  373.313379][   T29]  do_user_addr_fault+0x736/0x12d0
[  373.318560][   T29]  exc_page_fault+0x64/0x100
[  373.325907][   T29]  asm_exc_page_fault+0x26/0x30
[  373.331934][   T29] RIP: 0033:0x7fe597a72809
[  373.336401][   T29] RSP: 002b:00007ffd793c1aa0 EFLAGS: 00010202
[  373.345339][   T29] RAX: 0000001b31a24000 RBX: 0000000000000000 RCX: 00000000003ffde8
[  373.353629][   T29] RDX: 0000001b31a23ffc RSI: 00000000003ffde8 RDI: 00007fe598955700
[  373.365048][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fe597e12000
[  373.375403][   T29] R10: 00007fe598955700 R11: 0000000000000000 R12: 0000000000000000
[  373.388226][   T29] R13: 0000000000015e6a R14: ffffffff81321eae R15: 00007fe598955720
[  373.396488][   T29]  ? fpregs_activate+0x8e/0x1b0
[  373.404794][   T29]  </TASK>
[  373.407870][   T29] INFO: task syz.1.1333:9651 blocked for more than 145 seconds.
[  373.417469][   T29]       Tainted: G S                 syzkaller #0
[  373.429365][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  373.438426][   T29] task:syz.1.1333      state:D stack:27048 pid:9651  ppid:5777   flags:0x00004004
[  373.451435][   T29] Call Trace:
[  373.454779][   T29]  <TASK>
[  373.457762][   T29]  __schedule+0x15ae/0x4660
[  373.464521][   T29]  ? mark_lock+0x94/0x320
[  373.468913][   T29]  ? asan.module_dtor+0x20/0x20
[  373.477003][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  373.483980][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  373.499490][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  373.506661][   T29]  schedule+0xbd/0x170
[  373.512758][   T29]  io_schedule+0x80/0xd0
[  373.517071][   T29]  bit_wait_io+0x11/0xd0
[  373.524657][   T29]  __wait_on_bit+0x9f/0x2c0
[  373.529230][   T29]  ? bit_wait+0xd0/0xd0
[  373.537205][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  373.544697][   T29]  ? bit_wait+0xd0/0xd0
[  373.548912][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  373.555618][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  373.562708][   T29]  ? bit_waitqueue+0x30/0x30
[  373.567419][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  373.575701][   T29]  do_get_write_access+0x5c9/0xe00
[  373.582802][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  373.588842][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  373.597007][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  373.606673][   T29]  ? __might_sleep+0xe0/0xe0
[  373.614240][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  373.621738][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  373.627327][   T29]  ext4_dirty_inode+0xcb/0x110
[  373.635451][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  373.645001][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  373.652091][   T29]  file_update_time+0x187/0x1a0
[  373.657060][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  373.664114][   T29]  ? filemap_fault+0x103c/0x1540
[  373.669112][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  373.678054][   T29]  ? pte_alloc_one+0x3b6/0x540
[  373.684747][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  373.692929][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  373.698012][   T29]  do_page_mkwrite+0x153/0x3f0
[  373.704827][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  373.713202][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  373.718261][   T29]  ? numa_migrate_prep+0x350/0x350
[  373.726425][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  373.733679][   T29]  do_user_addr_fault+0x736/0x12d0
[  373.738879][   T29]  exc_page_fault+0x64/0x100
[  373.743964][   T29]  asm_exc_page_fault+0x26/0x30
[  373.748869][   T29] RIP: 0033:0x7f1ccf672809
[  373.760010][   T29] RSP: 002b:00007ffdd3f0bcc0 EFLAGS: 00010202
[  373.766208][   T29] RAX: 0000001b2d624000 RBX: 0000000000000000 RCX: 00000000003ffde8
[  373.776965][   T29] RDX: 0000001b2d623ffc RSI: 00000000003ffde8 RDI: 00007f1cd0555700
[  373.787525][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f1ccfa12000
[  373.798267][   T29] R10: 00007f1cd0555700 R11: 0000000000000000 R12: 0000000000000000
[  373.807363][   T29] R13: 000000000007ffff R14: ffffffff81c1f2ab R15: 00007f1cd0555720
[  373.830988][   T29]  ? shmem_write_begin+0x3b/0x430
[  373.836084][   T29]  </TASK>
[  373.839204][   T29] INFO: task syz.0.1340:9666 blocked for more than 145 seconds.
[  373.851378][   T29]       Tainted: G S                 syzkaller #0
[  373.857843][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  373.870535][   T29] task:syz.0.1340      state:D stack:27048 pid:9666  ppid:6110   flags:0x00004004
[  373.885669][   T29] Call Trace:
[  373.889061][   T29]  <TASK>
[  373.894845][   T29]  __schedule+0x15ae/0x4660
[  373.899414][   T29]  ? mark_lock+0x94/0x320
[  373.907198][   T29]  ? asan.module_dtor+0x20/0x20
[  373.912397][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  373.917478][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  373.926850][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  373.932440][   T29]  schedule+0xbd/0x170
[  373.936571][   T29]  io_schedule+0x80/0xd0
[  373.945861][   T29]  bit_wait_io+0x11/0xd0
[  373.950505][   T29]  __wait_on_bit+0x9f/0x2c0
[  373.955064][   T29]  ? bit_wait+0xd0/0xd0
[  373.959265][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  373.968480][   T29]  ? bit_wait+0xd0/0xd0
[  373.976707][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  373.985992][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  373.992936][   T29]  ? bit_waitqueue+0x30/0x30
[  373.997582][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  374.006483][   T29]  do_get_write_access+0x5c9/0xe00
[  374.011918][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  374.017952][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  374.027792][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  374.034284][   T29]  ? __might_sleep+0xe0/0xe0
[  374.038934][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  374.044889][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  374.055485][   T29]  ext4_dirty_inode+0xcb/0x110
[  374.060525][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  374.066387][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  374.075035][   T29]  file_update_time+0x187/0x1a0
[  374.081693][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  374.087897][   T29]  ? filemap_fault+0x103c/0x1540
[  374.097324][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  374.105257][   T29]  ? pte_alloc_one+0x3b6/0x540
[  374.113762][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  374.120286][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  374.125374][   T29]  do_page_mkwrite+0x153/0x3f0
[  374.134975][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  374.140246][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  374.145270][   T29]  ? numa_migrate_prep+0x350/0x350
[  374.154021][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  374.159368][   T29]  do_user_addr_fault+0x736/0x12d0
[  374.166466][   T29]  exc_page_fault+0x64/0x100
[  374.174570][   T29]  asm_exc_page_fault+0x26/0x30
[  374.179542][   T29] RIP: 0033:0x7f7a19c727a9
[  374.184308][   T29] RSP: 002b:00007ffc8cac8de0 EFLAGS: 00010202
[  374.196661][   T29] RAX: 0000001b31c24000 RBX: ffffffff8130675b RCX: 0000001b31c23ff8
[  374.206005][   T29] RDX: 00000000003ffde8 RSI: 00000000003ffde8 RDI: 00007f7a1ab55700
[  374.219084][   T29] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f7a1a012000
[  374.227483][   T29] R10: 00007f7a1ab55700 R11: 0000000000000000 R12: 00007f7a1a026038
[  374.238938][   T29] R13: 0000000000000000 R14: ffffffff81306e31 R15: 00007f7a1ab55720
[  374.247178][   T29]  ? __x64_sys_mmap+0x21/0x130
[  374.252327][   T29]  ? ia32_restore_sigcontext+0x1eb/0x600
[  374.258025][   T29]  </TASK>
[  374.264733][   T29] INFO: task syz.5.1341:9668 blocked for more than 146 seconds.
[  374.274274][   T29]       Tainted: G S                 syzkaller #0
[  374.284458][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  374.296710][   T29] task:syz.5.1341      state:D stack:27560 pid:9668  ppid:6119   flags:0x00004004
[  374.311260][   T29] Call Trace:
[  374.314604][   T29]  <TASK>
[  374.317592][   T29]  __schedule+0x15ae/0x4660
[  374.327258][   T29]  ? mark_lock+0x94/0x320
[  374.333627][   T29]  ? asan.module_dtor+0x20/0x20
[  374.338618][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  374.345738][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  374.353537][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  374.358825][   T29]  schedule+0xbd/0x170
[  374.363291][   T29]  io_schedule+0x80/0xd0
[  374.367628][   T29]  bit_wait_io+0x11/0xd0
[  374.375735][   T29]  __wait_on_bit+0x9f/0x2c0
[  374.382026][   T29]  ? bit_wait+0xd0/0xd0
[  374.386237][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  374.396371][   T29]  ? bit_wait+0xd0/0xd0
[  374.400801][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  374.405618][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  374.415699][   T29]  ? bit_waitqueue+0x30/0x30
[  374.420633][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  374.425891][   T29]  do_get_write_access+0x5c9/0xe00
[  374.437337][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  374.443773][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  374.453463][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  374.459676][   T29]  ? __might_sleep+0xe0/0xe0
[  374.464724][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  374.473836][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  374.479362][   T29]  ext4_dirty_inode+0xcb/0x110
[  374.484470][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  374.496251][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  374.501584][   T29]  file_update_time+0x187/0x1a0
[  374.506498][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  374.515077][   T29]  ? filemap_fault+0x103c/0x1540
[  374.521786][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  374.527571][   T29]  ? pte_alloc_one+0x3b6/0x540
[  374.536004][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  374.545362][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  374.554013][   T29]  do_page_mkwrite+0x153/0x3f0
[  374.558838][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  374.564107][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  374.569108][   T29]  ? numa_migrate_prep+0x350/0x350
[  374.577762][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  374.583327][   T29]  do_user_addr_fault+0x736/0x12d0
[  374.588525][   T29]  exc_page_fault+0x64/0x100
[  374.597500][   T29]  ? clear_bhb_loop+0x40/0x90
[  374.603997][   T29]  asm_exc_page_fault+0x26/0x30
[  374.608910][   T29] RIP: 0033:0x7f8ede46baa3
[  374.616108][   T29] RSP: 002b:00007ffc023f2880 EFLAGS: 00010246
[  374.623296][   T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32064000
[  374.635505][   T29] RDX: 0000001b32024000 RSI: 0000000000400000 RDI: 00007f8ede7e0708
[  374.643823][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  374.657040][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  374.665456][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc023f2b10
[  374.676885][   T29]  </TASK>
[  374.680204][   T29] 
[  374.680204][   T29] Showing all locks held in the system:
[  374.687974][   T29] 4 locks held by kworker/u4:1/12:
[  374.696875][   T29]  #0: ffff888141e42138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  374.709410][   T29]  #1: ffffc90000117d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  374.728065][   T29]  #2: ffff88814dfa20e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[  374.738922][   T29]  #3: ffff88814dfa4c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  374.754373][   T29] 1 lock held by khungtaskd/29:
[  374.759268][   T29]  #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  374.769331][   T29] 1 lock held by khugepaged/35:
[  374.779497][   T29]  #0: ffff8880312cbaa0 (&mm->mmap_lock){++++}-{3:3}, at: hpage_collapse_scan_pmd+0x216a/0x4050
[  374.793486][   T29] 2 locks held by getty/5530:
[  374.798218][   T29]  #0: ffff88802cfd50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  374.813022][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  374.823428][   T29] 3 locks held by syz-executor/5758:
[  374.828764][   T29]  #0: ffff88807a79c420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  374.843901][   T29]  #1: ffff88814dfa2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  374.869506][   T29]  #2: ffff88814dfa6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  374.885158][   T29] 3 locks held by syz.4.1331/9650:
[  374.890580][   T29]  #0: ffff8880312cbaa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  374.905300][   T29]  #1: ffff88814dfa2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  374.915342][   T29]  #2: ffff88814dfa6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  374.928431][   T29] 3 locks held by syz.1.1333/9651:
[  374.936110][   T29]  #0: ffff8880312cd720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  374.949556][   T29]  #1: ffff88814dfa2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  374.964549][   T29]  #2: ffff88814dfa6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  374.975644][   T29] 3 locks held by syz.0.1340/9666:
[  374.985591][   T29]  #0: ffff8880312ccda0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  374.997702][   T29]  #1: ffff88814dfa2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  375.010342][   T29]  #2: ffff88814dfa6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  375.024296][   T29] 3 locks held by syz.5.1341/9668:
[  375.029464][   T29]  #0: ffff8880312cb120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  375.043121][   T29]  #1: ffff88814dfa2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  375.053150][   T29]  #2: ffff88814dfa6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  375.066386][   T29] 
[  375.068781][   T29] =============================================
[  375.068781][   T29] 
[  375.079314][   T29] NMI backtrace for cpu 0
[  375.083637][   T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G S                 syzkaller #0
[  375.092291][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  375.102326][   T29] Call Trace:
[  375.105585][   T29]  <TASK>
[  375.108498][   T29]  dump_stack_lvl+0x18c/0x250
[  375.113165][   T29]  ? __wake_up_klogd+0xd9/0x100
[  375.117999][   T29]  ? show_regs_print_info+0x20/0x20
[  375.123181][   T29]  ? load_image+0x420/0x420
[  375.127676][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  375.133653][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  375.138579][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  375.144719][   T29]  ? load_image+0x420/0x420
[  375.149207][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  375.155266][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  375.161238][   T29]  watchdog+0xf59/0xfa0
[  375.165382][   T29]  ? watchdog+0x1e1/0xfa0
[  375.169701][   T29]  kthread+0x2fa/0x390
[  375.173826][   T29]  ? hungtask_pm_notify+0x50/0x50
[  375.178845][   T29]  ? kthread_blkcg+0xd0/0xd0
[  375.183417][   T29]  ret_from_fork+0x48/0x80
[  375.187838][   T29]  ? kthread_blkcg+0xd0/0xd0
[  375.192438][   T29]  ret_from_fork_asm+0x11/0x20
[  375.197197][   T29]  </TASK>
[  375.213406][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  375.220247][   T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G S                 syzkaller #0
[  375.228899][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  375.238932][   T29] Call Trace:
[  375.242190][   T29]  <TASK>
[  375.245104][   T29]  dump_stack_lvl+0x18c/0x250
[  375.249768][   T29]  ? show_regs_print_info+0x20/0x20
[  375.254946][   T29]  ? load_image+0x420/0x420
[  375.259455][   T29]  panic+0x2ca/0x720
[  375.263331][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  375.267815][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  375.273346][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  375.278703][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  375.284844][   T29]  watchdog+0xf98/0xfa0
[  375.288986][   T29]  ? watchdog+0x1e1/0xfa0
[  375.293304][   T29]  kthread+0x2fa/0x390
[  375.297370][   T29]  ? hungtask_pm_notify+0x50/0x50
[  375.302376][   T29]  ? kthread_blkcg+0xd0/0xd0
[  375.306943][   T29]  ret_from_fork+0x48/0x80
[  375.311346][   T29]  ? kthread_blkcg+0xd0/0xd0
[  375.315915][   T29]  ret_from_fork_asm+0x11/0x20
[  375.320667][   T29]  </TASK>
[  375.323745][   T29] Kernel Offset: disabled
[  375.328050][   T29] Rebooting in 86400 seconds..