last executing test programs:

1.749363207s ago: executing program 0 (id=675):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x2000006)

1.69741106s ago: executing program 0 (id=677):
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT, @ANYRES16=r1], 0x1, 0x150, &(0x7f0000000840)="$eJzs2r9K+1AUB/AzFPqj4290KlSioPmvddVR3HyD0OamwRtTEkHaFxAnweEuvoTgE/gIGd10EfQlItfe2iYt6lAbi9/P0i85JT29udwsR0/iyGapTrTdvz5+/p/EUbPt7nWYzTwaOSSipgxZntdo1uNHPcvJMOZ84yfN66hg/XX02doMxNElC7nvLKEtAAAAAAAAAAAAAAAAAAAAAABYBK2hQqMnogsWct+eqqaD4YnHuZ+kFbVXOa2pZriICX4j18ct1LdeiLR9mUJxkMi6VajXx2GjJ/hTeX3Ns6hvpoOhHkZe4Af+qeO4bWvHsnYd8/1eZvmO2q3qibL8zpodJ9Om5s0evjNvpp5/bS0UV+flX5s8f4TFhXxyRW6Pyvv5s+Gf2ua/pZ8VCl+eK6ti/P7r1t3WvTz/jE7Mu+riMpazwv8OAJ94CwAA//8lxDRw")
setpgid(r1, r1)
r2 = getpgid(r1)
setpgid(0x0, r2)
mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, 0x0)
chdir(&(0x7f0000000280)='./file1\x00')

1.697098197s ago: executing program 2 (id=678):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94)

1.609341061s ago: executing program 2 (id=680):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.60908236s ago: executing program 1 (id=681):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x1, 0x1, 0x0, 0x1000}, 0x6})

1.547495528s ago: executing program 2 (id=682):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e)

1.5472189s ago: executing program 0 (id=683):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}}}], 0x20}, 0x20002800)

1.498831618s ago: executing program 1 (id=684):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.498694357s ago: executing program 1 (id=685):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000001c0)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

1.497832151s ago: executing program 0 (id=686):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1f}, {0x4}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x27, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xfffffff7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x39}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffff9}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x68}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

1.41870801s ago: executing program 1 (id=687):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000007f000014001a80100005800c000680080001"], 0x34}, 0x1, 0x0, 0x0, 0x40040d8}, 0x0)

1.418509983s ago: executing program 2 (id=688):
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x18d7, &(0x7f0000001800)={0x0, 0x579a, 0x0, 0x0, 0x40085}, &(0x7f0000000400), &(0x7f0000ffe000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, &(0x7f0000000180), 0xfe)

1.337627592s ago: executing program 1 (id=689):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4242, 0x5c)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

1.332810349s ago: executing program 0 (id=690):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)

1.227941772s ago: executing program 0 (id=691):
syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a"], 0x0)

228.857153ms ago: executing program 2 (id=692):
r0 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
migrate_pages(r0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)

59.263527ms ago: executing program 2 (id=693):
syz_mount_image$jfs(&(0x7f00000021c0), &(0x7f0000002140)='./bus\x00', 0x2008010, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6286, &(0x7f000000dc80)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
msgsnd(0x0, 0x0, 0x401, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mknodat(r1, &(0x7f0000000080)='./bus\x00', 0x2, 0x7)

0s ago: executing program 1 (id=694):
syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28898' (ED25519) to the list of known hosts.
syzkaller login: [   57.238484][ T5830] cgroup: Unknown subsys name 'net'
[   57.342522][ T5830] cgroup: Unknown subsys name 'cpuset'
[   57.348771][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.140670][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.141415][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.145865][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.149021][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.154170][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.158329][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.162070][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.163078][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.166075][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.171838][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.177689][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.181051][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.186991][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.210056][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.217765][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.224012][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.552924][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   63.636591][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   63.739090][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.742712][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.746509][ T5847] bridge_slave_0: entered allmulticast mode
[   63.750472][ T5847] bridge_slave_0: entered promiscuous mode
[   63.756490][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.759673][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.762800][ T5847] bridge_slave_1: entered allmulticast mode
[   63.766934][ T5847] bridge_slave_1: entered promiscuous mode
[   63.770830][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   63.856795][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.861939][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.864996][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.869244][ T5845] bridge_slave_0: entered allmulticast mode
[   63.872351][ T5845] bridge_slave_0: entered promiscuous mode
[   63.890731][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.907448][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.910501][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.913614][ T5845] bridge_slave_1: entered allmulticast mode
[   63.917755][ T5845] bridge_slave_1: entered promiscuous mode
[   63.978594][ T5847] team0: Port device team_slave_0 added
[   63.983999][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.002798][ T5847] team0: Port device team_slave_1 added
[   64.007762][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.037249][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.040383][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.043488][ T5844] bridge_slave_0: entered allmulticast mode
[   64.049004][ T5844] bridge_slave_0: entered promiscuous mode
[   64.078481][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.081540][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.084701][ T5844] bridge_slave_1: entered allmulticast mode
[   64.089657][ T5844] bridge_slave_1: entered promiscuous mode
[   64.118715][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.121677][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.132903][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.140118][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.143242][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.154222][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.174367][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.180662][ T5845] team0: Port device team_slave_0 added
[   64.187194][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.198588][ T5845] team0: Port device team_slave_1 added
[   64.253743][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.256354][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.265301][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.272291][ T5844] team0: Port device team_slave_0 added
[   64.279862][ T5847] hsr_slave_0: entered promiscuous mode
[   64.282585][ T5847] hsr_slave_1: entered promiscuous mode
[   64.286694][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.289027][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.299559][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.307892][ T5844] team0: Port device team_slave_1 added
[   64.342523][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.344929][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.355160][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.360212][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.362684][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.373187][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.396456][ T5845] hsr_slave_0: entered promiscuous mode
[   64.399657][ T5845] hsr_slave_1: entered promiscuous mode
[   64.402562][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   64.405175][ T5845] Cannot create hsr debugfs directory
[   64.550226][ T5844] hsr_slave_0: entered promiscuous mode
[   64.553404][ T5844] hsr_slave_1: entered promiscuous mode
[   64.557171][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   64.559696][ T5844] Cannot create hsr debugfs directory
[   64.789037][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.806401][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.823159][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.837788][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.888658][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.910437][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.935925][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.942356][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.993500][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.009073][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.023819][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.035856][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.088098][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.124180][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   65.149287][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.152489][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.172373][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.183472][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.186515][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.217556][   T54] Bluetooth: hci2: command tx timeout
[   65.217564][ T5855] Bluetooth: hci1: command tx timeout
[   65.230863][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   65.243802][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.253563][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.256903][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.269157][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.272208][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.296250][   T54] Bluetooth: hci0: command tx timeout
[   65.319728][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   65.341468][  T151] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.344513][  T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.363468][  T151] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.366180][  T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.507704][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.521962][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.599999][ T5845] veth0_vlan: entered promiscuous mode
[   65.602679][ T5847] veth0_vlan: entered promiscuous mode
[   65.608120][ T5845] veth1_vlan: entered promiscuous mode
[   65.628986][ T5847] veth1_vlan: entered promiscuous mode
[   65.640149][ T5845] veth0_macvtap: entered promiscuous mode
[   65.644847][ T5845] veth1_macvtap: entered promiscuous mode
[   65.660926][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.668778][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.675139][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.691140][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.700693][ T5861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.712731][ T5861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.717700][ T5861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.741641][ T5847] veth0_macvtap: entered promiscuous mode
[   65.765167][ T5847] veth1_macvtap: entered promiscuous mode
[   65.795341][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.798388][ T5844] veth0_vlan: entered promiscuous mode
[   65.799905][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.809384][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.829140][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.845169][ T5844] veth1_vlan: entered promiscuous mode
[   65.862929][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.868763][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.872402][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.881337][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.890217][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.894925][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.969144][ T5844] veth0_macvtap: entered promiscuous mode
[   66.007722][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.008121][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.016882][ T5844] veth1_macvtap: entered promiscuous mode
[   66.028056][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.066952][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.069532][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.074907][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.092051][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.109140][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.112913][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.130849][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.134654][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.245874][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.249143][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.307170][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.310695][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.372292][ T5915] loop2: detected capacity change from 0 to 32768
[   66.378964][ T5915] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3 (5915)
[   66.394342][ T5915] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   66.398848][ T5915] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   66.402447][ T5915] BTRFS info (device loop2): using free-space-tree
[   66.449562][ T5920] loop1: detected capacity change from 0 to 256
[   66.450263][ T5913] loop0: detected capacity change from 0 to 32768
[   66.458516][ T5913] BTRFS info: device /dev/loop0 (7:0) using temp-fsid f1d00b3f-6d54-4da1-b187-cb755f115be6
[   66.462136][ T5913] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5913)
[   66.470215][ T5920] exfat: Deprecated parameter 'utf8'
[   66.478976][ T5913] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   66.482288][ T5913] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   66.489283][ T5920] exfat: Deprecated parameter 'utf8'
[   66.491572][ T5920] exfat: Deprecated parameter 'utf8'
[   66.518275][ T5913] BTRFS info (device loop0): disk space caching is enabled
[   66.521920][ T5913] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   66.526468][ T5920] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[   66.699896][ T5915] BTRFS info (device loop2 state M): resize thread pool 4 -> 2097158
[   66.702702][ T5915] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048
[   66.707062][ T5915] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[   66.711086][ T5915] BTRFS warning (device loop2 state M): remount supports changing free space tree only from RO to RW
[   66.715069][ T5915] BTRFS info (device loop2 state M): disabling log replay at mount time
[   66.718871][ T5915] BTRFS info (device loop2 state M): force clearing of disk cache
[   66.721422][ T5915] BTRFS info (device loop2 state M): ignoring bad roots
[   66.723717][ T5915] BTRFS info (device loop2 state M): ignoring data csums
[   66.726346][ T5915] BTRFS info (device loop2 state M): ignoring meta csums
[   66.731295][ T5915] BTRFS info (device loop2 state M): ignoring unknown super block flags
[   66.767102][ T5847] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   66.926216][ T5913] BTRFS info (device loop0): rebuilding free space tree
[   66.980061][ T5913] BTRFS info (device loop0): disabling free space tree
[   66.985391][ T5913] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   66.998805][ T5913] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   67.157888][ T5845] BTRFS info (device loop0): last unmount of filesystem f1d00b3f-6d54-4da1-b187-cb755f115be6
[   67.265588][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'.
[   67.297204][   T54] Bluetooth: hci2: command tx timeout
[   67.297229][ T5855] Bluetooth: hci1: command tx timeout
[   67.307656][ T5965] mmap: syz.2.7 (5965) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   67.326873][ T5966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'.
[   67.375894][ T5855] Bluetooth: hci0: command tx timeout
[   67.718336][ T5980] loop0: detected capacity change from 0 to 512
[   67.749766][ T5982] netlink: 'syz.2.15': attribute type 2 has an invalid length.
[   67.749867][ T5980] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   67.764261][ T5980] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[   67.772279][ T5980] EXT4-fs (loop0): 1 truncate cleaned up
[   67.779384][ T5980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.881468][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.920787][ T5992] netlink: 'syz.0.19': attribute type 10 has an invalid length.
[   67.965224][ T5992] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   67.982994][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.040221][ T5996] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   68.119033][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23'.
[   68.122787][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23'.
[   69.375832][ T5855] Bluetooth: hci1: command tx timeout
[   69.375964][   T54] Bluetooth: hci2: command tx timeout
[   69.405989][ T2276] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   69.455572][   T54] Bluetooth: hci0: command tx timeout
[   69.575494][ T2276] usb 3-1: Using ep0 maxpacket: 32
[   69.596117][ T2276] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[   69.599430][ T2276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.602722][ T2276] usb 3-1: Product: syz
[   69.604817][ T2276] usb 3-1: Manufacturer: syz
[   69.607127][ T2276] usb 3-1: SerialNumber: syz
[   69.619890][ T2276] usb 3-1: config 0 descriptor??
[   70.057647][ T2276] airspy 3-1:0.0: Board ID: 00
[   70.059521][ T2276] airspy 3-1:0.0: Firmware version: 
[   70.880490][ T2276] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f
[   70.918781][ T2276] airspy 3-1:0.0: Registered as swradio24
[   70.930504][ T2276] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[   70.955865][ T2276] usb 3-1: USB disconnect, device number 2
[   71.380087][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.383651][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.455789][   T54] Bluetooth: hci1: command tx timeout
[   71.456154][ T5855] Bluetooth: hci2: command tx timeout
[   71.536174][ T5855] Bluetooth: hci0: command tx timeout
[   72.749098][ T6056] netlink: 'syz.0.47': attribute type 1 has an invalid length.
[   72.770336][ T6056] bond1 (unregistering): Released all slaves
[   72.887080][ T6054] loop2: detected capacity change from 0 to 32768
[   72.921951][ T6054] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   72.948703][ T6054] XFS (loop2): Ending clean mount
[   72.980003][ T5847] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   73.452075][ T6083] loop2: detected capacity change from 0 to 32768
[   73.455319][ T6083] =======================================================
[   73.455319][ T6083] WARNING: The mand mount option has been deprecated and
[   73.455319][ T6083]          and is ignored by this kernel. Remove the mand
[   73.455319][ T6083]          option from the mount to silence this warning.
[   73.455319][ T6083] =======================================================
[   73.498360][ T6083] JBD2: Ignoring recovery information on journal
[   73.522710][ T6083] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   73.533403][ T6083] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature 
[   73.542201][ T6083] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   73.546530][ T6083] OCFS2: File system is now read-only.
[   73.552003][ T6083] (syz.2.55,6083,1):ocfs2_search_chain:1852 ERROR: status = -30
[   73.555176][ T6083] (syz.2.55,6083,1):ocfs2_search_chain:1940 ERROR: status = -30
[   73.559823][ T6083] (syz.2.55,6083,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[   73.562962][ T6083] (syz.2.55,6083,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[   73.566336][ T6083] (syz.2.55,6083,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[   73.569495][ T6083] (syz.2.55,6083,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[   73.572618][ T6083] (syz.2.55,6083,1):ocfs2_mknod_locked:641 ERROR: status = -30
[   73.575671][ T6083] (syz.2.55,6083,1):ocfs2_symlink:1956 ERROR: status = -30
[   73.578844][ T6083] (syz.2.55,6083,1):ocfs2_symlink:2080 ERROR: status = -30
[   73.665129][ T5847] ocfs2: Unmounting device (7,2) on (node local)
[   73.880962][ T6092] process 'syz.2.58' launched './file2' with NULL argv: empty string added
[   74.124290][ T6088] loop1: detected capacity change from 0 to 32768
[   74.468363][ T6099] loop1: detected capacity change from 0 to 256
[   74.478027][ T6099] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   74.481813][ T6099] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   74.492621][ T6099] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   74.649307][ T6101] loop1: detected capacity change from 0 to 512
[   74.657198][ T6101] EXT4-fs: inline encryption not supported
[   74.672097][ T6101] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   74.692708][ T6101] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   74.728713][ T6101] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   74.742224][ T6101] EXT4-fs (loop1): 1 truncate cleaned up
[   74.750527][ T6101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.829568][ T6101] syz.1.62 (6101) used greatest stack depth: 19336 bytes left
[   74.887414][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.159990][ T6115] loop2: detected capacity change from 0 to 256
[   75.163742][ T6115] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   75.173807][ T6115] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   75.222364][ T6115] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2d0d25cc, utbl_chksum : 0xe619d30d)
[   75.496756][ T2207] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   75.508254][ T2207] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   75.514673][ T2207] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   75.525076][ T2207] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   75.531378][ T2207] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   75.540286][ T2207] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   75.543666][ T2207] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   75.549372][ T2207] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   75.558283][ T2207] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   75.562464][ T2207] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   75.571501][ T2207] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[   75.583768][ T6122] batman_adv: batadv0: Adding interface: dummy0
[   75.590134][ T6122] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.605244][ T6122] batman_adv: batadv0: Interface activated: dummy0
[   76.519195][ T6147] loop0: detected capacity change from 0 to 40427
[   76.531637][ T6147] F2FS-fs (loop0): build fault injection rate: 771
[   76.543143][ T6147] F2FS-fs (loop0): invalid crc value
[   76.577912][ T6147] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   76.583100][ T6147] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   76.624581][ T5845] syz-executor: attempt to access beyond end of device
[   76.624581][ T5845] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   76.634152][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   76.634163][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.634167][ T5845] Call Trace:
[   76.634171][ T5845]  <TASK>
[   76.634174][ T5845]  dump_stack_lvl+0x189/0x250
[   76.634187][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.634195][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[   76.634202][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   76.634211][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.634223][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[   76.634236][ T5845]  f2fs_write_end_io+0x886/0xb60
[   76.634249][ T5845]  __submit_merged_bio+0x27a/0x6a0
[   76.634261][ T5845]  __submit_merged_write_cond+0x255/0x530
[   76.634272][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[   76.634295][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   76.634331][ T5845]  ? __lock_acquire+0xab9/0xd20
[   76.634344][ T5845]  ? do_raw_spin_lock+0x121/0x290
[   76.634356][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   76.634364][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   76.634373][ T5845]  do_writepages+0x32e/0x550
[   76.634387][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   76.634396][ T5845]  filemap_fdatawrite+0x199/0x240
[   76.634405][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   76.634454][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   76.634465][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[   76.634478][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[   76.634494][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   76.634516][ T5845]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   76.634522][ T5845]  ? kfree+0x18e/0x440
[   76.634531][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[   76.634539][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[   76.634548][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[   76.634554][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[   76.634565][ T5845]  ? shrinker_free+0x2ce/0x3e0
[   76.634574][ T5845]  deactivate_locked_super+0xbc/0x130
[   76.634583][ T5845]  cleanup_mnt+0x425/0x4c0
[   76.634590][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.634600][ T5845]  task_work_run+0x1d4/0x260
[   76.634610][ T5845]  ? __pfx_task_work_run+0x10/0x10
[   76.634617][ T5845]  ? __x64_sys_umount+0x122/0x160
[   76.634627][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[   76.634638][ T5845]  exit_to_user_mode_loop+0xec/0x110
[   76.634647][ T5845]  do_syscall_64+0x2bd/0x3b0
[   76.634655][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.634663][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.634670][ T5845]  ? exc_page_fault+0x9f/0xf0
[   76.634679][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.634685][ T5845] RIP: 0033:0x7f5ad2d8ff17
[   76.634692][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   76.634698][ T5845] RSP: 002b:00007ffe8ca8ab28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   76.634706][ T5845] RAX: 0000000000000000 RBX: 00007f5ad2e11c05 RCX: 00007f5ad2d8ff17
[   76.634710][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8ca8abe0
[   76.634714][ T5845] RBP: 00007ffe8ca8abe0 R08: 0000000000000000 R09: 0000000000000000
[   76.634718][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8ca8bc70
[   76.634722][ T5845] R13: 00007f5ad2e11c05 R14: 0000000000012ab2 R15: 00007ffe8ca8bcb0
[   76.634733][ T5845]  </TASK>
[   76.634736][ T5845] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   76.769600][ T2207] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   76.930271][ T2207] usb 2-1: config 2 has an invalid interface number: 233 but max is 0
[   76.933922][ T2207] usb 2-1: config 2 has no interface number 0
[   76.937795][ T2207] usb 2-1: config 2 interface 233 has no altsetting 0
[   76.952890][ T2207] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0109, bcdDevice=33.00
[   76.957561][ T2207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.973874][ T2207] usb 2-1: Product: syz
[   76.978258][ T2207] usb 2-1: Manufacturer: syz
[   76.984976][ T2207] usb 2-1: SerialNumber: syz
[   77.171724][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'.
[   77.251453][ T2207] ftdi_sio 2-1:2.233: FTDI USB Serial Device converter detected
[   77.277371][ T2207] usb 2-1: Detected FT232HP
[   77.280335][ T2207] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   77.286175][ T2207] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   77.294126][ T2207] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   77.313356][ T2207] usb 2-1: USB disconnect, device number 2
[   77.354588][ T2207] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   77.368402][ T6161] syz.0.85 uses obsolete (PF_INET,SOCK_PACKET)
[   77.368822][ T2207] ftdi_sio 2-1:2.233: device disconnected
[   77.462895][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'.
[   77.735596][ T5899] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   77.885630][ T5899] usb 1-1: Using ep0 maxpacket: 8
[   77.908303][ T5899] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   77.911920][ T5899] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   77.921294][ T5899] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   77.927135][ T5899] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   77.931566][ T5899] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   77.944813][ T5899] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   77.951205][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.370602][ T5899] usb 1-1: USB disconnect, device number 2
[   78.479863][ T6190] loop2: detected capacity change from 0 to 40427
[   78.484087][ T6190] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   78.487640][ T6190] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   78.497034][ T6190] F2FS-fs (loop2): invalid crc value
[   78.505012][ T6190] F2FS-fs (loop2): invalid journal entries nats 26624 sits 6
[   78.508363][ T6190] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-22)
[   78.944715][ T6202] loop0: detected capacity change from 0 to 1024
[   78.948918][ T6202] hfsplus: type requires a 4 character value
[   79.102068][ T6208] loop0: detected capacity change from 0 to 512
[   79.120676][ T6208] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.106: bad orphan inode 11
[   79.132058][ T6208] ext4_test_bit(bit=10, block=4) = 1
[   79.137759][ T6208] is_bad_inode(inode)=0
[   79.139778][ T6208] NEXT_ORPHAN(inode)=2080374784
[   79.142089][ T6208] max_ino=32
[   79.144256][ T6208] i_nlink=0
[   79.147209][ T6208] EXT4-fs (loop0): 1 truncate cleaned up
[   79.152464][ T6208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.167593][ T6208] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.106: bg 0: block 393: padding at end of block bitmap is not set
[   79.175824][ T6208] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   79.208884][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.282261][ T6204] loop1: detected capacity change from 0 to 32768
[   79.315135][ T6204] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   79.338690][ T6220] loop0: detected capacity change from 0 to 256
[   79.359196][ T6220] FAT-fs (loop0): Directory bread(block 64) failed
[   79.362268][ T6220] FAT-fs (loop0): Directory bread(block 65) failed
[   79.365264][ T6220] FAT-fs (loop0): Directory bread(block 66) failed
[   79.371216][ T6220] FAT-fs (loop0): Directory bread(block 67) failed
[   79.374165][ T6220] FAT-fs (loop0): Directory bread(block 68) failed
[   79.375042][ T6204] XFS (loop1): Ending clean mount
[   79.378989][ T6220] FAT-fs (loop0): Directory bread(block 69) failed
[   79.382329][ T6220] FAT-fs (loop0): Directory bread(block 70) failed
[   79.385325][ T6220] FAT-fs (loop0): Directory bread(block 71) failed
[   79.392241][ T6220] FAT-fs (loop0): Directory bread(block 72) failed
[   79.395049][ T6220] FAT-fs (loop0): Directory bread(block 73) failed
[   79.452153][ T5844] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   80.094809][ T6224] loop0: detected capacity change from 0 to 40427
[   80.107578][ T6224] F2FS-fs: heap/no_heap options were deprecated
[   80.135335][ T6224] F2FS-fs (loop0): invalid crc value
[   80.138461][ T6224] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[   80.261187][ T6224] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   80.270665][ T6224] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   80.776464][ T6241] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   80.779414][ T6241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   80.786185][ T6241] vhci_hcd vhci_hcd.0: Device attached
[   80.797632][ T6242] vhci_hcd: connection closed
[   80.807169][   T12] vhci_hcd: stop threads
[   80.811432][   T12] vhci_hcd: release socket
[   80.813427][   T12] vhci_hcd: disconnect device
[   82.062919][ T2207] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   82.221368][ T2207] usb 3-1: Using ep0 maxpacket: 32
[   82.235267][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[   82.236740][ T2207] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   82.239752][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[   82.243311][ T2207] usb 3-1: config 0 has no interface number 0
[   82.263776][ T2207] usb 3-1: config 0 interface 184 has no altsetting 0
[   82.276322][ T2207] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   82.282436][ T2207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.297950][ T2207] usb 3-1: Product: syz
[   82.299976][ T2207] usb 3-1: Manufacturer: syz
[   82.312483][ T2207] usb 3-1: SerialNumber: syz
[   82.335906][ T2207] usb 3-1: config 0 descriptor??
[   82.357656][ T2207] smsc75xx v1.0.0
[   82.550384][ T2207] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[   82.556489][ T2207] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[   82.581450][ T2207] usb 3-1: USB disconnect, device number 3
[   83.841901][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'.
[   84.152742][ T6301] loop0: detected capacity change from 0 to 1764
[   84.292713][ T6316] sctp: [Deprecated]: syz.0.145 (pid 6316) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.292713][ T6316] Use struct sctp_sack_info instead
[   84.832609][ T6354] loop1: detected capacity change from 0 to 2048
[   84.866584][ T6354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.903391][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.225559][ T5899] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   85.387858][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.392424][ T5899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   85.401510][ T5899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   85.405286][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   85.409495][ T5899] usb 2-1: SerialNumber: syz
[   85.426171][ T5899] usb 2-1: bad CDC descriptors
[   85.430216][ T5899] usb-storage 2-1:1.0: USB Mass Storage device detected
[   85.443455][ T5899] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   85.651158][ T6262] usb 2-1: USB disconnect, device number 3
[   85.708490][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.165'.
[   85.712825][ T6377] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[   85.717663][ T6377] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   86.740013][ T6385] loop1: detected capacity change from 0 to 32768
[   86.743615][   T10] cfg80211: failed to load regulatory.db
[   86.744850][ T6385] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.168 (6385)
[   86.757019][ T6385] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.762051][ T6385] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   86.778922][ T6385] BTRFS info (device loop1): disk space caching is enabled
[   86.782517][ T6385] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   86.798844][ T6395] loop0: detected capacity change from 0 to 1024
[   86.829747][ T6395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.841566][ T6395] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   86.857987][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.866971][ T6385] BTRFS info (device loop1): rebuilding free space tree
[   86.887455][ T6385] BTRFS info (device loop1): disabling free space tree
[   86.895687][ T6385] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   86.905832][ T6385] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   87.065662][ T5844] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   88.324164][ T6427] loop2: detected capacity change from 0 to 4096
[   88.617056][ T6435] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   88.620051][ T6435] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   88.628719][ T6437] loop2: detected capacity change from 0 to 256
[   88.631443][ T6437] exfat: Deprecated parameter 'namecase'
[   88.856752][ T6431] loop1: detected capacity change from 0 to 32768
[   88.872094][ T6431] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.180 (6431)
[   89.186808][ T6431] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   89.197622][ T6431] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   89.205118][ T6431] BTRFS info (device loop1): using free-space-tree
[   89.339148][ T5844] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   89.378999][ T6470] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.515197][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'.
[   89.558319][ T6478] netlink: 152 bytes leftover after parsing attributes in process `syz.2.194'.
[   89.561699][ T6478] tipc: Started in network mode
[   89.563964][ T6478] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711
[   89.575095][ T6478] tipc: Enabled bearer <udp:syz0>, priority 10
[   89.633032][ T6481] Bluetooth: MGMT ver 1.23
[   89.721270][ T6486] loop2: detected capacity change from 0 to 512
[   89.724594][ T6486] EXT4-fs: inline encryption not supported
[   89.766493][ T6486] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.197: corrupted in-inode xattr: invalid ea_ino
[   89.780526][ T6486] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.197: couldn't read orphan inode 15 (err -117)
[   89.788202][ T6486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.793356][   T33] audit: type=1326 audit(1755254179.378:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.0.199" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ad2d8ebe9 code=0x0
[   89.803857][ T6486] cgroup: name respecified
[   89.820401][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.975584][ T5850] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   90.105579][ T5899] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   90.128401][ T5850] usb 2-1: config 4 has an invalid interface number: 39 but max is 0
[   90.132055][ T5850] usb 2-1: config 4 has no interface number 0
[   90.134722][ T5850] usb 2-1: config 4 interface 39 has no altsetting 0
[   90.142168][ T5850] usb 2-1: New USB device found, idVendor=19d2, idProduct=1061, bcdDevice=9f.df
[   90.146263][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.149769][ T5850] usb 2-1: Product: syz
[   90.151598][ T5850] usb 2-1: Manufacturer: syz
[   90.153635][ T5850] usb 2-1: SerialNumber: syz
[   90.255571][ T5899] usb 3-1: Using ep0 maxpacket: 16
[   90.260022][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.264663][ T5899] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   90.269644][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.276443][ T5899] usb 3-1: config 0 descriptor??
[   90.372729][ T5850] option 2-1:4.39: GSM modem (1-port) converter detected
[   90.381685][ T5850] usb 2-1: USB disconnect, device number 4
[   90.387665][ T5850] option 2-1:4.39: device disconnected
[   90.707447][ T5899] mcp2221 0003:04D8:00DD.0002: item fetching failed at offset 2/5
[   90.711138][ T5899] mcp2221 0003:04D8:00DD.0002: can't parse reports
[   90.717414][ T5850] tipc: Node number set to 4269801514
[   90.720193][ T5899] mcp2221 0003:04D8:00DD.0002: probe with driver mcp2221 failed with error -22
[   90.839259][   T33] audit: type=1326 audit(1755254180.428:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.0.205" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ad2d8ebe9 code=0x0
[   90.905243][ T6262] usb 3-1: USB disconnect, device number 4
[   90.929192][ T6510] program syz.1.207 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   91.159088][ T6517] loop1: detected capacity change from 0 to 32768
[   91.170042][ T6517] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   91.189858][ T6517] (syz.1.210,6517,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[   91.221731][ T5844] ocfs2: Unmounting device (7,1) on (node local)
[   91.482972][ T6525] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   91.517506][ T6525] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   91.993241][ T6533] loop0: detected capacity change from 0 to 4096
[   92.029182][ T6536] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.149014][ T6542] [U] 2
[   92.150439][ T6541] [U] 2
[   92.295670][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   92.525567][   T10] usb 3-1: Using ep0 maxpacket: 16
[   92.528656][   T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   92.531933][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.535731][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   92.541248][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   92.544515][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.547903][   T10] usb 3-1: Product: syz
[   92.549313][   T10] usb 3-1: Manufacturer: syz
[   92.550876][   T10] usb 3-1: SerialNumber: syz
[   92.742258][ T6563] netlink: 60 bytes leftover after parsing attributes in process `syz.1.228'.
[   92.745854][ T6562] netlink: 60 bytes leftover after parsing attributes in process `syz.1.228'.
[   92.749142][ T6563] netlink: 60 bytes leftover after parsing attributes in process `syz.1.228'.
[   92.875139][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.232'.
[   92.907925][ T6573] netlink: 'syz.1.233': attribute type 29 has an invalid length.
[   92.965245][   T10] usb 3-1: 0:2 : does not exist
[   93.550801][ T6590] tc_dump_action: action bad kind
[   93.669213][ T6598] netlink: 208 bytes leftover after parsing attributes in process `syz.0.242'.
[   93.832656][   T10] usb 3-1: USB disconnect, device number 5
[   93.859649][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   93.899226][ T6612] loop1: detected capacity change from 0 to 512
[   93.930127][ T6612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   93.934584][ T6612] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   93.970877][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   94.079935][ T6611] loop0: detected capacity change from 0 to 32768
[   94.142019][ T6611] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   94.142031][ T6611]   allowing incompatible features above 0.0: (unknown version)
[   94.142035][ T6611]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   94.157421][ T6611] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   94.160206][ T6611] bcachefs (loop0): initializing new filesystem
[   94.167230][ T6611] bcachefs (loop0): going read-write
[   94.172990][ T6611] bcachefs (loop0): marking superblocks
[   94.185268][ T6611] bcachefs (loop0): initializing freespace
[   94.190497][ T6611] bcachefs (loop0): done initializing freespace
[   94.195138][ T6611] bcachefs (loop0): reading snapshots table
[   94.197891][ T6611] bcachefs (loop0): reading snapshots done
[   94.212218][ T6611] bcachefs (loop0): done starting filesystem
[   94.241011][ T6611] syz.0.248 (6611) used greatest stack depth: 17448 bytes left
[   94.254964][ T5845] bcachefs (loop0): shutting down
[   94.259435][ T5845] bcachefs (loop0): going read-only
[   94.262126][ T5845] bcachefs (loop0): finished waiting for writes to stop
[   94.269441][ T5845] bcachefs (loop0): flushing journal and stopping allocators, journal seq 1
[   94.310517][ T5845] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 2
[   94.317420][ T5845] bcachefs (loop0): clean shutdown complete, journal seq 3
[   94.325016][ T5845] bcachefs (loop0): marking filesystem clean
[   94.356999][ T5845] bcachefs (loop0): shutdown complete
[   94.517041][ T6619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   94.673301][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.258'.
[   94.699627][ T6657] loop2: detected capacity change from 0 to 1024
[   94.720971][ T6657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.737791][ T6657] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.761100][ T6657] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.259: lblock 1 mapped to illegal pblock 1 (length 1)
[   94.775633][ T6657] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[   94.784669][ T6657] EXT4-fs (loop2): This should not happen!! Data will be lost
[   94.784669][ T6657] 
[   94.792111][ T6657] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.259: lblock 1 mapped to illegal pblock 1 (length 1)
[   94.798755][ T6657] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[   94.802803][ T6657] EXT4-fs (loop2): This should not happen!! Data will be lost
[   94.802803][ T6657] 
[   94.837179][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.982688][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'.
[   95.361370][ T6690] loop2: detected capacity change from 0 to 32768
[   95.373209][ T6690] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   95.388229][ T6690] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[   95.394898][ T6690] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30
[   95.407326][ T6690] XFS (loop2): Ending clean mount
[   95.421977][ T6690] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1803 dinode
[   95.426265][ T6690] XFS (loop2): Unmount and run xfs_repair
[   95.435054][ T6690] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   95.445859][ T6690] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[   95.449912][ T6690] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.456635][ T6690] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[   95.472604][ T6690] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[   95.476745][ T6690] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.480266][ T6690] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[   95.483719][ T6690] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[   95.488088][ T6690] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[   95.500263][ T5847] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   95.690946][ T6708] loop2: detected capacity change from 0 to 512
[   95.694316][ T6708] EXT4-fs: Ignoring removed bh option
[   95.726425][ T6708] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   95.742224][ T6708] EXT4-fs (loop2): invalid journal inode
[   95.744852][ T6708] EXT4-fs (loop2): can't get journal size
[   95.767843][ T6708] EXT4-fs (loop2): 1 truncate cleaned up
[   95.773685][ T6708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.831750][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.009417][ T6724] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[   96.012291][ T6724] PKCS7: Only support pkcs7_signedData type
[   96.019389][ T6722] loop2: detected capacity change from 0 to 128
[   96.052388][ T6722] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   96.060022][ T6722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.968555][   T24] IPVS: starting estimator thread 0...
[   97.066419][ T6736] IPVS: using max 40 ests per chain, 96000 per kthread
[   97.316770][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   97.475540][   T24] usb 1-1: Using ep0 maxpacket: 8
[   97.480310][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[   97.484730][   T24] usb 1-1: config 5 has an invalid interface number: 128 but max is 0
[   97.490934][   T24] usb 1-1: config 5 has no interface number 0
[   97.493523][   T24] usb 1-1: config 5 interface 128 has no altsetting 0
[   97.499467][   T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=5f.dc
[   97.503276][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.508362][   T24] usb 1-1: Product: syz
[   97.510170][   T24] usb 1-1: Manufacturer: syz
[   97.512977][   T24] usb 1-1: SerialNumber: syz
[   97.575623][ T5850] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   97.725947][ T5850] usb 2-1: Using ep0 maxpacket: 8
[   97.730463][   T24] iowarrior 1-1:5.128: no interrupt-out endpoint found
[   97.734713][ T5850] usb 2-1: unable to get BOS descriptor or descriptor too short
[   97.741638][   T24] usb 1-1: USB disconnect, device number 3
[   97.746737][ T5850] usb 2-1: config 8 has an invalid interface number: 154 but max is 0
[   97.749631][ T5850] usb 2-1: config 8 has no interface number 0
[   97.752204][ T5850] usb 2-1: config 8 interface 154 has no altsetting 0
[   97.757257][ T5850] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=4f.f6
[   97.760627][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.764049][ T5850] usb 2-1: Product: syz
[   97.766421][ T5850] usb 2-1: Manufacturer: syz
[   97.768415][ T5850] usb 2-1: SerialNumber: syz
[   97.986571][ T5850] mdc800 2-1:8.154: probe fails -> wrong Interface
[   97.991770][ T5850] usb 2-1: USB disconnect, device number 5
[   98.819652][ T6762] loop2: detected capacity change from 0 to 512
[   98.835850][ T6762] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0f000002)
[   99.164129][ T6770] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.830670][ T6779] batadv1: entered promiscuous mode
[   99.861570][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv1
[  100.062132][ T6782] netlink: 648 bytes leftover after parsing attributes in process `syz.0.303'.
[  100.069932][ T6765] syz.1.298 (6765): drop_caches: 2
[  100.503583][ T6794] loop0: detected capacity change from 0 to 2048
[  100.529027][ T6794] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  100.534854][ T6794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.731877][ T6800] loop0: detected capacity change from 0 to 32768
[  100.751523][ T6800] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  100.764904][ T6800] XFS (loop0): Ending clean mount
[  100.773237][ T6800] XFS (loop0): Quotacheck needed: Please wait.
[  100.804393][ T6800] XFS (loop0): Quotacheck: Done.
[  100.841308][ T5845] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  100.979016][ T6823] loop2: detected capacity change from 0 to 2048
[  100.982427][ T6823] UDF-fs: error (device loop2): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0)
[  100.991393][ T6823] UDF-fs: Scanning with blocksize 512 failed
[  101.002200][ T6823] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  101.005184][ T6823] UDF-fs: Scanning with blocksize 1024 failed
[  101.012117][ T6823] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  101.016347][ T6823] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  101.018898][ T6823] UDF-fs: Scanning with blocksize 2048 failed
[  101.039841][ T6823] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  101.044991][ T6823] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  101.048963][ T6823] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  101.051817][ T6823] UDF-fs: Scanning with blocksize 4096 failed
[  101.054145][ T6823] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  101.089112][ T6825] loop0: detected capacity change from 0 to 4096
[  101.094470][ T6825] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  101.122246][ T6827] netlink: 'syz.2.316': attribute type 1 has an invalid length.
[  101.127086][ T6825] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  101.150934][ T6825] ntfs3(loop0): ino=1b, mi_enum_attr
[  101.163648][ T6825] ntfs3(loop0): ino=1b, "file0" mi_enum_attr
[  101.167277][ T6825] ntfs3(loop0): ino=1b, "file0" mi_enum_attr
[  101.170018][ T6825] ntfs3(loop0): ino=1b, "file0" mi_enum_attr
[  101.172666][ T6825] ntfs3(loop0): ino=1b, "file0" mi_enum_attr
[  101.175242][ T6825] ntfs3(loop0): ino=1b, "file0" mi_enum_attr
[  101.179173][ T6825] ntfs3(loop0): ino=1b, "file0" attr_set_size
[  101.375572][ T6846] loop1: detected capacity change from 0 to 512
[  101.378537][ T6846] EXT4-fs: Ignoring removed bh option
[  101.403896][ T6846] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  101.421896][ T6846] EXT4-fs (loop1): 1 truncate cleaned up
[  101.447088][ T6846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.565914][ T6855] loop0: detected capacity change from 0 to 8
[  101.645279][ T6859] loop2: detected capacity change from 0 to 4096
[  101.846013][ T6859] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  101.876502][ T6859] ntfs3(loop2): ino=1a, mi_enum_attr
[  101.879219][ T6859] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  101.883980][ T6859] ntfs3(loop2): ino=1a, mi_enum_attr
[  101.887246][ T6859] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  101.913798][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.333'.
[  102.397671][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.668527][ T6900] capability: warning: `syz.2.345' uses deprecated v2 capabilities in a way that may be insecure
[  102.994706][ T6897] loop1: detected capacity change from 0 to 32768
[  103.043507][ T6897] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.078609][ T6897] XFS (loop1): Ending clean mount
[  103.089562][ T6897] XFS (loop1): Quotacheck needed: Please wait.
[  103.110295][ T6897] XFS (loop1): Quotacheck: Done.
[  103.177809][ T5844] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.297138][ T6939] loop1: detected capacity change from 0 to 4096
[  103.306069][ T6939] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  103.319339][ T6939] ntfs3(loop1): $Secure::$SDH is corrupted.
[  103.321460][ T6939] ntfs3(loop1): Failed to initialize $Secure (-22).
[  103.420896][ T6944] loop1: detected capacity change from 0 to 256
[  103.425931][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  103.438619][ T6944] exfat: Deprecated parameter 'utf8'
[  103.440889][ T6944] exfat: Deprecated parameter 'namecase'
[  103.443350][ T6944] exfat: Deprecated parameter 'namecase'
[  103.446400][ T6944] exfat: Deprecated parameter 'utf8'
[  103.454944][ T6944] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d)
[  103.463470][ T6944] exFAT-fs (loop1): start_clu is invalid cluster(0x400)
[  103.575901][   T10] usb 3-1: Using ep0 maxpacket: 8
[  103.580635][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  103.585372][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.592733][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  103.597292][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.600787][   T10] usb 3-1: Product: syz
[  103.602713][   T10] usb 3-1: Manufacturer: syz
[  103.604853][   T10] usb 3-1: SerialNumber: syz
[  103.754305][ T6948] loop1: detected capacity change from 0 to 32768
[  103.766303][ T6948] XFS: noikeep mount option is deprecated.
[  103.785925][ T6948] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.809220][ T6948] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  103.818297][   T10] cdc_mbim 3-1:1.0: MBIM functional descriptor missing
[  103.820133][ T6948] XFS (loop1): Starting recovery (logdev: internal)
[  103.821467][   T10] cdc_mbim 3-1:1.0: bind() failure
[  103.831379][   T10] usb 3-1: USB disconnect, device number 6
[  103.847316][ T6948] XFS (loop1): Ending recovery (logdev: internal)
[  103.890098][ T5844] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  104.295547][ T5850] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  104.375329][ T6970] loop1: detected capacity change from 0 to 40427
[  104.390714][ T6970] F2FS-fs (loop1): invalid crc value
[  104.445616][ T5850] usb 1-1: Using ep0 maxpacket: 8
[  104.452295][ T5850] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  104.459868][ T5850] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  104.470892][ T5850] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  104.478112][ T6970] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  104.482682][ T6970] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  104.485278][ T5850] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  104.499333][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.508064][ T5850] usb 1-1: Product: syz
[  104.509872][ T5850] usb 1-1: Manufacturer: syz
[  104.511866][ T5850] usb 1-1: SerialNumber: syz
[  104.530033][ T5844] syz-executor: attempt to access beyond end of device
[  104.530033][ T5844] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  104.537281][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  104.537297][ T5844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.537303][ T5844] Call Trace:
[  104.537309][ T5844]  <TASK>
[  104.537314][ T5844]  dump_stack_lvl+0x189/0x250
[  104.537355][ T5844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.537371][ T5844]  ? __pfx_queue_work_on+0x10/0x10
[  104.537383][ T5844]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  104.537399][ T5844]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  104.537421][ T5844]  f2fs_handle_critical_error+0x37c/0x540
[  104.537444][ T5844]  f2fs_write_end_io+0x886/0xb60
[  104.537473][ T5844]  __submit_merged_bio+0x27a/0x6a0
[  104.537494][ T5844]  __submit_merged_write_cond+0x255/0x530
[  104.537517][ T5844]  f2fs_write_data_pages+0x261d/0x3000
[  104.537561][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.537588][ T5844]  ? arch_stack_walk+0xfc/0x150
[  104.537633][ T5844]  ? __mod_zone_page_state+0xd7/0x140
[  104.537661][ T5844]  ? folios_put_refs+0x560/0x640
[  104.537686][ T5844]  ? __lock_acquire+0xab9/0xd20
[  104.537709][ T5844]  ? do_raw_spin_lock+0x121/0x290
[  104.537733][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  104.537747][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.537765][ T5844]  do_writepages+0x32e/0x550
[  104.537790][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  104.537807][ T5844]  filemap_fdatawrite+0x199/0x240
[  104.537825][ T5844]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  104.537878][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  104.537895][ T5844]  f2fs_sync_dirty_inodes+0x31f/0x830
[  104.537921][ T5844]  f2fs_write_checkpoint+0x95a/0x1df0
[  104.537951][ T5844]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  104.538026][ T5844]  ? kill_f2fs_super+0x298/0x6c0
[  104.538043][ T5844]  kill_f2fs_super+0x2c3/0x6c0
[  104.538061][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  104.538070][ T5844]  ? radix_tree_delete_item+0x2b6/0x400
[  104.538093][ T5844]  ? shrinker_free+0x2ce/0x3e0
[  104.538107][ T5844]  deactivate_locked_super+0xbc/0x130
[  104.538123][ T5844]  cleanup_mnt+0x425/0x4c0
[  104.538137][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.538173][ T5844]  task_work_run+0x1d4/0x260
[  104.538192][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  104.538205][ T5844]  ? __x64_sys_umount+0x122/0x160
[  104.538225][ T5844]  ? exit_to_user_mode_loop+0x40/0x110
[  104.538245][ T5844]  exit_to_user_mode_loop+0xec/0x110
[  104.538262][ T5844]  do_syscall_64+0x2bd/0x3b0
[  104.538276][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.538290][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.538303][ T5844]  ? exc_page_fault+0x9f/0xf0
[  104.538319][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.538330][ T5844] RIP: 0033:0x7fedcd98ff17
[  104.538340][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  104.538349][ T5844] RSP: 002b:00007ffe194323e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  104.538362][ T5844] RAX: 0000000000000000 RBX: 00007fedcda11c05 RCX: 00007fedcd98ff17
[  104.538370][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe194324a0
[  104.538376][ T5844] RBP: 00007ffe194324a0 R08: 0000000000000000 R09: 0000000000000000
[  104.538383][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe19433530
[  104.538390][ T5844] R13: 00007fedcda11c05 R14: 00000000000197a7 R15: 00007ffe19433570
[  104.538410][ T5844]  </TASK>
[  104.539739][ T5844] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  104.745934][ T5850] adutux 1-1:168.0: interrupt endpoints not found
[  104.754973][ T5850] usb 1-1: USB disconnect, device number 4
[  105.534454][ T6992] netlink: 'syz.1.373': attribute type 10 has an invalid length.
[  105.548772][ T6992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.558696][ T6992] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  105.577023][ T6992] netlink: 'syz.1.373': attribute type 10 has an invalid length.
[  105.579669][ T6992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.373'.
[  105.583368][ T6992] batadv0: entered promiscuous mode
[  105.588757][ T6992] batadv0: entered allmulticast mode
[  105.597502][ T6992] bond0: (slave batadv0): Releasing backup interface
[  105.616320][ T6992] bridge0: port 3(batadv0) entered blocking state
[  105.618620][ T6992] bridge0: port 3(batadv0) entered disabled state
[  105.804601][ T6996] binder: 6995:6996 ioctl c0306201 200000000240 returned -14
[  105.959867][ T6994] loop0: detected capacity change from 0 to 32768
[  105.977613][ T6994] lmLogInit: exit(-22)
[  105.979525][ T6994] lmLogOpen: exit(-22)
[  105.998876][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  106.003105][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  106.367246][ T6262] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  106.517691][ T6262] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  106.522256][ T6262] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  106.527758][ T6262] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  106.531581][ T6262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.575905][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  106.730939][   T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  106.734937][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.738528][   T10] usb 2-1: Product: syz
[  106.740065][   T10] usb 2-1: Manufacturer: syz
[  106.741723][   T10] usb 2-1: SerialNumber: syz
[  106.750824][ T5855] Bluetooth: hci2: Malformed LE Event: 0x0d
[  106.752177][ T5850] usb 3-1: USB disconnect, device number 7
[  106.754584][   T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  106.781899][   T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  106.999004][    C0] usb 2-1: ath: unknown panic pattern!
[  107.211521][ T6262] usb 2-1: USB disconnect, device number 6
[  107.270923][ T7023] ptrace attach of "/syz-executor exec"[5845] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[  107.329921][ T7028] loop0: detected capacity change from 0 to 2048
[  107.386419][ T7028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.632078][ T7045] syz.2.396(7045): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  107.736649][ T2207] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  107.832658][ T7047] loop2: detected capacity change from 0 to 40427
[  107.837988][ T7047] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  107.840414][ T7047] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  107.844149][ T7047] F2FS-fs (loop2): invalid crc value
[  107.855766][   T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  107.858904][   T10] ath9k_htc: Failed to initialize the device
[  107.866174][ T6262] usb 2-1: ath9k_htc: USB layer deinitialized
[  107.886799][ T2207] usb 1-1: Using ep0 maxpacket: 32
[  107.888822][ T7047] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  107.898378][ T7047] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  107.901893][ T7047] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  107.906750][ T2207] usb 1-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=11.bf
[  107.912449][ T2207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.919069][ T2207] usb 1-1: Product: syz
[  107.920972][ T2207] usb 1-1: Manufacturer: syz
[  107.923005][ T2207] usb 1-1: SerialNumber: syz
[  107.928901][ T2207] usb 1-1: config 0 descriptor??
[  107.937526][ T7047] syz.2.397: attempt to access beyond end of device
[  107.937526][ T7047] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  107.938094][ T2207] usb 1-1: MBOX3: Invalid descriptor size=18.
[  107.970219][ T5847] syz-executor: attempt to access beyond end of device
[  107.970219][ T5847] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  107.976737][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  107.976752][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.976760][ T5847] Call Trace:
[  107.976765][ T5847]  <TASK>
[  107.976770][ T5847]  dump_stack_lvl+0x189/0x250
[  107.976791][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.976806][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[  107.976818][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  107.976833][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  107.976857][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[  107.976881][ T5847]  f2fs_write_end_io+0x886/0xb60
[  107.976908][ T5847]  __submit_merged_bio+0x27a/0x6a0
[  107.976929][ T5847]  __submit_merged_write_cond+0x255/0x530
[  107.976977][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[  107.977025][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.977082][ T5847]  ? stack_depot_save_flags+0x41b/0x860
[  107.977116][ T5847]  ? __lock_acquire+0xab9/0xd20
[  107.977140][ T5847]  ? do_raw_spin_lock+0x121/0x290
[  107.977164][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  107.977179][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.977196][ T5847]  do_writepages+0x32e/0x550
[  107.977222][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  107.977240][ T5847]  filemap_fdatawrite+0x199/0x240
[  107.977257][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  107.977320][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  107.977338][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[  107.977364][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[  107.977399][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  107.977450][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[  107.977468][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[  107.977485][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[  107.977495][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[  107.977516][ T5847]  ? shrinker_free+0x2ce/0x3e0
[  107.977532][ T5847]  deactivate_locked_super+0xbc/0x130
[  107.977549][ T5847]  cleanup_mnt+0x425/0x4c0
[  107.977562][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.977581][ T5847]  task_work_run+0x1d4/0x260
[  107.977599][ T5847]  ? __pfx_task_work_run+0x10/0x10
[  107.977613][ T5847]  ? __x64_sys_umount+0x122/0x160
[  107.977631][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[  107.977650][ T5847]  exit_to_user_mode_loop+0xec/0x110
[  107.977667][ T5847]  do_syscall_64+0x2bd/0x3b0
[  107.977681][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.977694][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.977706][ T5847]  ? exc_page_fault+0x9f/0xf0
[  107.977722][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.977734][ T5847] RIP: 0033:0x7f023338ff17
[  107.977744][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  107.977753][ T5847] RSP: 002b:00007ffcc6971bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  107.977767][ T5847] RAX: 0000000000000000 RBX: 00007f0233411c05 RCX: 00007f023338ff17
[  107.977774][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc6971c90
[  107.977780][ T5847] RBP: 00007ffcc6971c90 R08: 0000000000000000 R09: 0000000000000000
[  107.977787][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc6972d20
[  107.977793][ T5847] R13: 00007f0233411c05 R14: 000000000001a51a R15: 00007ffcc6972d60
[  107.977816][ T5847]  </TASK>
[  107.977821][ T5847] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  108.151752][ T2207] usb 1-1: USB disconnect, device number 5
[  108.295873][ T6262] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  108.379379][ T7060] loop2: detected capacity change from 0 to 256
[  108.407431][ T7060] FAT-fs (loop2): Directory bread(block 64) failed
[  108.410487][ T7060] FAT-fs (loop2): Directory bread(block 65) failed
[  108.413422][ T7060] FAT-fs (loop2): Directory bread(block 66) failed
[  108.418323][ T7060] FAT-fs (loop2): Directory bread(block 67) failed
[  108.421163][ T7060] FAT-fs (loop2): Directory bread(block 68) failed
[  108.423993][ T7060] FAT-fs (loop2): Directory bread(block 69) failed
[  108.426838][ T7060] FAT-fs (loop2): Directory bread(block 70) failed
[  108.429758][ T7060] FAT-fs (loop2): Directory bread(block 71) failed
[  108.435093][ T7060] FAT-fs (loop2): Directory bread(block 72) failed
[  108.440402][ T7060] FAT-fs (loop2): Directory bread(block 73) failed
[  108.447704][ T6262] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  108.451620][ T6262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.462093][ T6262] usb 2-1: config 0 descriptor??
[  108.894316][ T7069] loop0: detected capacity change from 0 to 40427
[  108.907395][ T7069] F2FS-fs (loop0): Image doesn't support compression
[  108.909761][ T7069] F2FS-fs (loop0): build fault injection rate: 690
[  108.917016][ T7069] F2FS-fs (loop0): invalid crc value
[  108.955139][ T7069] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  108.960905][ T7069] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  108.998111][ T5845] syz-executor: attempt to access beyond end of device
[  108.998111][ T5845] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  109.005629][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  109.005640][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.005644][ T5845] Call Trace:
[  109.005647][ T5845]  <TASK>
[  109.005650][ T5845]  dump_stack_lvl+0x189/0x250
[  109.005664][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.005672][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  109.005679][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.005688][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.005701][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  109.005713][ T5845]  f2fs_write_end_io+0x886/0xb60
[  109.005726][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  109.005738][ T5845]  __submit_merged_write_cond+0x255/0x530
[  109.005749][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  109.005771][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.005801][ T5845]  ? folios_put_refs+0x559/0x640
[  109.005813][ T5845]  ? __lock_acquire+0xab9/0xd20
[  109.005826][ T5845]  ? do_raw_spin_lock+0x121/0x290
[  109.005838][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  109.005846][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.005856][ T5845]  do_writepages+0x32e/0x550
[  109.005868][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  109.005877][ T5845]  filemap_fdatawrite+0x199/0x240
[  109.005887][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  109.005913][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  109.005923][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  109.005965][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[  109.005993][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  109.006021][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[  109.006030][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[  109.006039][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  109.006044][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[  109.006056][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  109.006065][ T5845]  deactivate_locked_super+0xbc/0x130
[  109.006076][ T5845]  cleanup_mnt+0x425/0x4c0
[  109.006089][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.006105][ T5845]  task_work_run+0x1d4/0x260
[  109.006122][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  109.006131][ T5845]  ? __x64_sys_umount+0x122/0x160
[  109.006142][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[  109.006153][ T5845]  exit_to_user_mode_loop+0xec/0x110
[  109.006162][ T5845]  do_syscall_64+0x2bd/0x3b0
[  109.006171][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.006178][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.006185][ T5845]  ? exc_page_fault+0x9f/0xf0
[  109.006194][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.006200][ T5845] RIP: 0033:0x7f5ad2d8ff17
[  109.006207][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  109.006213][ T5845] RSP: 002b:00007ffe8ca8ab28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  109.006221][ T5845] RAX: 0000000000000000 RBX: 00007f5ad2e11c05 RCX: 00007f5ad2d8ff17
[  109.006225][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8ca8abe0
[  109.006229][ T5845] RBP: 00007ffe8ca8abe0 R08: 0000000000000000 R09: 0000000000000000
[  109.006233][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8ca8bc70
[  109.006237][ T5845] R13: 00007f5ad2e11c05 R14: 000000000001a923 R15: 00007ffe8ca8bcb0
[  109.006248][ T5845]  </TASK>
[  109.006251][ T5845] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  109.031899][ T7081] delete_channel: no stack
[  109.137433][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  109.137449][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.137454][ T5845] Call Trace:
[  109.137457][ T5845]  <TASK>
[  109.137460][ T5845]  dump_stack_lvl+0x189/0x250
[  109.137474][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.137482][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  109.137489][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.137499][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.137513][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  109.137526][ T5845]  f2fs_write_end_io+0x886/0xb60
[  109.137541][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  109.137553][ T5845]  __submit_merged_write_cond+0x255/0x530
[  109.137571][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  109.137596][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.137631][ T5845]  ? folios_put_refs+0x559/0x640
[  109.137645][ T5845]  ? __lock_acquire+0xab9/0xd20
[  109.137661][ T5845]  ? do_raw_spin_lock+0x121/0x290
[  109.137675][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  109.137683][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.137692][ T5845]  do_writepages+0x32e/0x550
[  109.137706][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  109.137716][ T5845]  filemap_fdatawrite+0x199/0x240
[  109.137725][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  109.137755][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  109.137765][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  109.137779][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[  109.137797][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  109.137825][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[  109.137834][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[  109.137844][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  109.137850][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[  109.137862][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  109.137871][ T5845]  deactivate_locked_super+0xbc/0x130
[  109.137880][ T5845]  cleanup_mnt+0x425/0x4c0
[  109.137888][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.137899][ T5845]  task_work_run+0x1d4/0x260
[  109.137909][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  109.137916][ T5845]  ? __x64_sys_umount+0x122/0x160
[  109.137950][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[  109.137963][ T5845]  exit_to_user_mode_loop+0xec/0x110
[  109.137974][ T5845]  do_syscall_64+0x2bd/0x3b0
[  109.137987][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.137999][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.138009][ T5845]  ? exc_page_fault+0x9f/0xf0
[  109.138024][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.138035][ T5845] RIP: 0033:0x7f5ad2d8ff17
[  109.138046][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  109.138054][ T5845] RSP: 002b:00007ffe8ca8ab28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  109.138066][ T5845] RAX: 0000000000000000 RBX: 00007f5ad2e11c05 RCX: 00007f5ad2d8ff17
[  109.138074][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8ca8abe0
[  109.138080][ T5845] RBP: 00007ffe8ca8abe0 R08: 0000000000000000 R09: 0000000000000000
[  109.138086][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8ca8bc70
[  109.138093][ T5845] R13: 00007f5ad2e11c05 R14: 000000000001a923 R15: 00007ffe8ca8bcb0
[  109.138115][ T5845]  </TASK>
[  109.138120][ T5845] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  109.323161][   T33] audit: type=1326 audit(1755254198.908:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023338ebe9 code=0x7ff00000
[  109.333149][   T33] audit: type=1326 audit(1755254198.908:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023338ebe9 code=0x7ff00000
[  109.342735][   T33] audit: type=1326 audit(1755254198.908:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023338ebe9 code=0x7ff00000
[  109.352108][   T33] audit: type=1326 audit(1755254198.908:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023338ebe9 code=0x7ff00000
[  109.361281][   T33] audit: type=1326 audit(1755254198.908:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023338ebe9 code=0x7ff00000
[  109.370268][   T33] audit: type=1326 audit(1755254198.908:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023338ebe9 code=0x7ff00000
[  109.385498][   T33] audit: type=1326 audit(1755254198.908:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023338ebe9 code=0x7ff00000
[  109.392902][   T33] audit: type=1326 audit(1755254198.908:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023338ebe9 code=0x7ff00000
[  109.401288][   T33] audit: type=1326 audit(1755254198.908:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023338ebe9 code=0x7ff00000
[  109.408568][   T33] audit: type=1326 audit(1755254198.908:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023338ebe9 code=0x7ff00000
[  109.464302][ T6262] usbhid 2-1:0.0: can't add hid device: -71
[  109.478856][ T6262] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  109.506870][ T6262] usb 2-1: USB disconnect, device number 7
[  109.669465][ T5879] IPVS: starting estimator thread 0...
[  109.767409][ T7101] IPVS: using max 39 ests per chain, 93600 per kthread
[  109.871025][ T7112] loop0: detected capacity change from 0 to 1024
[  109.905655][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  109.954190][ T1096] hfsplus: b-tree write err: -5, ino 4
[  110.084869][   T24] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  110.089169][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.092658][   T24] usb 3-1: Product: syz
[  110.094444][   T24] usb 3-1: Manufacturer: syz
[  110.105336][ T7123] loop1: detected capacity change from 0 to 8
[  110.105545][   T24] usb 3-1: SerialNumber: syz
[  110.114399][   T24] usb 3-1: config 0 descriptor??
[  110.123428][ T7123] SQUASHFS error: zlib decompression failed, data probably corrupt
[  110.131141][   T24] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 008
[  110.131578][ T7123] SQUASHFS error: Failed to read block 0x9b: -5
[  110.151223][ T7123] SQUASHFS error: Unable to read metadata cache entry [99]
[  110.154746][ T7123] SQUASHFS error: Unable to read inode 0x127
[  110.301493][ T7127] macsec1: entered promiscuous mode
[  110.303824][ T7127] macsec1: entered allmulticast mode
[  110.332049][   T24]  (null): failure setting delay to 10us
[  110.345708][   T24] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  110.362121][   T24] usb 3-1: USB disconnect, device number 8
[  110.611232][ T7139] netlink: 'syz.1.431': attribute type 3 has an invalid length.
[  110.613848][ T7139] netlink: 'syz.1.431': attribute type 1 has an invalid length.
[  110.617186][ T7139] netlink: 216 bytes leftover after parsing attributes in process `syz.1.431'.
[  110.620525][ T7139] NCSI netlink: No device for ifindex 33022
[  111.198411][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'.
[  111.393257][ T7154] netlink: 'syz.2.441': attribute type 1 has an invalid length.
[  111.396418][ T7154] netlink: 212 bytes leftover after parsing attributes in process `syz.2.441'.
[  111.399432][ T7154] netlink: 'syz.2.441': attribute type 1 has an invalid length.
[  111.816499][ T7183] netlink: 'syz.2.454': attribute type 25 has an invalid length.
[  111.868101][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'.
[  111.871649][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'.
[  111.926526][ T7191] loop1: detected capacity change from 0 to 512
[  111.933707][ T7191] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.459: casefold flag without casefold feature
[  111.942989][ T7191] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.459: couldn't read orphan inode 15 (err -117)
[  111.962963][ T7191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.995354][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.199412][ T7209] loop1: detected capacity change from 0 to 256
[  112.207692][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  112.376634][   T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  112.380560][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.395378][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.408386][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  112.414654][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  112.420611][   T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  112.427760][   T10] usb 3-1: Manufacturer: syz
[  112.435192][   T10] usb 3-1: config 0 descriptor??
[  112.514761][ T7223] netlink: 'syz.1.470': attribute type 3 has an invalid length.
[  112.656017][ T7229] loop1: detected capacity change from 0 to 16
[  112.670332][ T7229] erofs (device loop1): mounted with root inode @ nid 36.
[  112.795730][ T5879] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  112.857316][   T10] hid_parser_main: 73 callbacks suppressed
[  112.857327][   T10] appleir 0003:05AC:8243.0003: unknown main item tag 0x0
[  112.869062][   T10] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  112.945756][ T5879] usb 1-1: Using ep0 maxpacket: 32
[  112.949151][ T5879] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  112.952441][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.957119][ T5879] usb 1-1: config 0 descriptor??
[  112.961239][ T5879] gspca_main: nw80x-2.14.0 probing 055f:d001
[  113.129618][ T5850] usb 3-1: USB disconnect, device number 9
[  113.167806][ T5879] gspca_nw80x: reg_w err -71
[  113.172180][ T5879] nw80x 1-1:0.0: probe with driver nw80x failed with error -71
[  113.178151][ T5879] usb 1-1: USB disconnect, device number 6
[  114.587376][ T7287] Invalid ELF header magic: != ELF
[  115.795818][ T5850] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  115.970224][ T5850] usb 2-1: config 0 has an invalid interface number: 242 but max is 0
[  115.974188][ T5850] usb 2-1: config 0 has no interface number 0
[  115.990166][ T5850] usb 2-1: config 0 interface 242 has no altsetting 0
[  116.011023][ T5850] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=51.ba
[  116.025660][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.033780][ T5850] usb 2-1: Product: syz
[  116.036232][ T5850] usb 2-1: Manufacturer: syz
[  116.041363][ T5850] usb 2-1: SerialNumber: syz
[  116.063057][ T5850] usb 2-1: config 0 descriptor??
[  116.296701][ T5850] qmi_wwan 2-1:0.242: bogus CDC Union: master=0, slave=1
[  116.303405][ T5850] qmi_wwan 2-1:0.242: probe with driver qmi_wwan failed with error -22
[  116.312997][ T5850] usb 2-1: USB disconnect, device number 8
[  116.326280][ T5879] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  116.533466][ T5879] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.546438][ T5879] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.553781][ T5879] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  116.563514][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  116.567407][ T5879] usb 1-1: SerialNumber: syz
[  116.794661][ T5879] usb 1-1: 0:2 : does not exist
[  116.820600][ T5879] usb 1-1: USB disconnect, device number 7
[  116.887509][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  116.952675][ T7312] loop2: detected capacity change from 0 to 40427
[  116.960102][ T7312] F2FS-fs (loop2): Image doesn't support compression
[  116.963471][ T7312] F2FS-fs (loop2): build fault injection rate: 690
[  116.975244][ T7312] F2FS-fs (loop2): invalid crc value
[  117.101714][ T7312] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  117.111530][ T7312] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  117.135230][ T5847] syz-executor: attempt to access beyond end of device
[  117.135230][ T5847] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  117.143895][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  117.143908][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.143912][ T5847] Call Trace:
[  117.143915][ T5847]  <TASK>
[  117.143919][ T5847]  dump_stack_lvl+0x189/0x250
[  117.143936][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.143944][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[  117.143952][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  117.143962][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  117.143975][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[  117.143989][ T5847]  f2fs_write_end_io+0x886/0xb60
[  117.144004][ T5847]  __submit_merged_bio+0x27a/0x6a0
[  117.144017][ T5847]  __submit_merged_write_cond+0x255/0x530
[  117.144029][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[  117.144054][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.144089][ T5847]  ? __mod_zone_page_state+0xd7/0x140
[  117.144104][ T5847]  ? folios_put_refs+0x560/0x640
[  117.144118][ T5847]  ? __lock_acquire+0xab9/0xd20
[  117.144132][ T5847]  ? do_raw_spin_lock+0x121/0x290
[  117.144148][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  117.144161][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.144176][ T5847]  do_writepages+0x32e/0x550
[  117.144199][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  117.144217][ T5847]  filemap_fdatawrite+0x199/0x240
[  117.144232][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  117.144287][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  117.144299][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[  117.144314][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[  117.144332][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  117.144361][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[  117.144371][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[  117.144381][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[  117.144386][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[  117.144399][ T5847]  ? shrinker_free+0x2ce/0x3e0
[  117.144409][ T5847]  deactivate_locked_super+0xbc/0x130
[  117.144419][ T5847]  cleanup_mnt+0x425/0x4c0
[  117.144427][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.144438][ T5847]  task_work_run+0x1d4/0x260
[  117.144449][ T5847]  ? __pfx_task_work_run+0x10/0x10
[  117.144457][ T5847]  ? __x64_sys_umount+0x122/0x160
[  117.144468][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[  117.144480][ T5847]  exit_to_user_mode_loop+0xec/0x110
[  117.144489][ T5847]  do_syscall_64+0x2bd/0x3b0
[  117.144498][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.144506][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.144512][ T5847]  ? exc_page_fault+0x9f/0xf0
[  117.144522][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.144528][ T5847] RIP: 0033:0x7f023338ff17
[  117.144536][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  117.144542][ T5847] RSP: 002b:00007ffcc6971bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  117.144551][ T5847] RAX: 0000000000000000 RBX: 00007f0233411c05 RCX: 00007f023338ff17
[  117.144555][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc6971c90
[  117.144559][ T5847] RBP: 00007ffcc6971c90 R08: 0000000000000000 R09: 0000000000000000
[  117.144564][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc6972d20
[  117.144568][ T5847] R13: 00007f0233411c05 R14: 000000000001c8f9 R15: 00007ffcc6972d60
[  117.144581][ T5847]  </TASK>
[  117.144584][ T5847] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  117.347379][ T5879] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  117.494563][ T7333] loop2: detected capacity change from 0 to 256
[  117.497099][ T5879] usb 2-1: Using ep0 maxpacket: 16
[  117.501875][ T5879] usb 2-1: config index 0 descriptor too short (expected 49803, got 41)
[  117.504888][ T5879] usb 2-1: config 0 has an invalid interface number: 87 but max is 0
[  117.521007][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.528899][ T7333] FAT-fs (loop2): Directory bread(block 64) failed
[  117.531444][ T7333] FAT-fs (loop2): Directory bread(block 65) failed
[  117.533751][ T7333] FAT-fs (loop2): Directory bread(block 66) failed
[  117.536632][ T5879] usb 2-1: config 0 has no interface number 0
[  117.537870][ T7333] FAT-fs (loop2): Directory bread(block 67) failed
[  117.541569][ T7333] FAT-fs (loop2): Directory bread(block 68) failed
[  117.544447][ T7333] FAT-fs (loop2): Directory bread(block 69) failed
[  117.549412][ T5879] usb 2-1: New USB device found, idVendor=046d, idProduct=0879, bcdDevice= b.28
[  117.549984][ T7333] FAT-fs (loop2): Directory bread(block 70) failed
[  117.553259][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.553276][ T5879] usb 2-1: Product: syz
[  117.553286][ T5879] usb 2-1: Manufacturer: syz
[  117.553295][ T5879] usb 2-1: SerialNumber: syz
[  117.556092][ T5879] usb 2-1: config 0 descriptor??
[  117.562103][ T7333] FAT-fs (loop2): Directory bread(block 71) failed
[  117.579594][ T7333] FAT-fs (loop2): Directory bread(block 72) failed
[  117.582733][ T7333] FAT-fs (loop2): Directory bread(block 73) failed
[  117.602161][ T7333] syz.2.517: attempt to access beyond end of device
[  117.602161][ T7333] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  117.607334][ T7333] syz.2.517: attempt to access beyond end of device
[  117.607334][ T7333] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256
[  117.612966][   T33] kauditd_printk_skb: 130 callbacks suppressed
[  117.612973][   T33] audit: type=1800 audit(1755254207.198:144): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.517" name="file0" dev="loop2" ino=1048600 res=0 errno=0
[  117.772744][   T24] usb 2-1: USB disconnect, device number 9
[  118.802672][   T33] audit: type=1326 audit(1755254208.388:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.1.524" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedcd98ebe9 code=0x0
[  119.037040][ T7368] loop1: detected capacity change from 0 to 256
[  119.041928][ T7368] FAT-fs (loop1): bogus sectors per cluster 0
[  119.044224][ T7368] FAT-fs (loop1): Can't find a valid FAT filesystem
[  119.111369][ T7372] loop6: detected capacity change from 0 to 1
[  119.132987][ T7372]  loop6: [POWERTEC] p1 p2 p3 p4 p5
[  119.135082][ T7372] loop6: p1 start 2602905181 is beyond EOD, truncated
[  119.140927][ T7372] loop6: p2 start 1745589262 is beyond EOD, truncated
[  119.143702][ T7372] loop6: p3 start 325178268 is beyond EOD, truncated
[  119.154600][ T7372] loop6: p4 start 2326339850 is beyond EOD, truncated
[  119.158555][ T7372] loop6: p5 start 2562259694 is beyond EOD, truncated
[  119.340985][ T7388] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  119.420506][ T7390] loop1: detected capacity change from 0 to 64
[  119.424820][ T7390] minix: Unknown parameter './file1/file3'
[  120.271192][ T7408] loop2: detected capacity change from 0 to 1024
[  120.274052][ T7408] EXT4-fs: Ignoring removed orlov option
[  120.282862][ T7408] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.308096][ T7408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.518697][ T6262] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  120.540522][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.691881][ T6262] usb 2-1: unable to get BOS descriptor or descriptor too short
[  120.696884][ T6262] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  120.700805][ T6262] usb 2-1: config 1 has no interface number 1
[  120.707786][ T6262] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  120.711444][ T6262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.715110][ T6262] usb 2-1: Product: syz
[  120.718838][ T6262] usb 2-1: Manufacturer: syz
[  120.721297][ T6262] usb 2-1: SerialNumber: syz
[  120.901097][ T7418] loop2: detected capacity change from 0 to 4096
[  120.909346][ T7418] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  120.949092][ T6262] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  120.951972][ T6262] usb 2-1: 2:1 : sample bitwidth 139 in over sample bytes 13
[  120.954437][ T6262] usb 2-1: 2:1 : unsupported sample bitwidth 139 in 13 bytes
[  120.982909][ T6262] usb 2-1: USB disconnect, device number 10
[  121.009188][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  121.020170][ T7418] ntfs3(loop2): ino=1a, mi_enum_attr
[  121.022644][ T7418] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  121.032587][ T7418] ntfs3(loop2): ino=1a, mi_enum_attr
[  121.034519][ T7418] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  121.081375][ T7418] ntfs3(loop2): ino=5, "/" ntfs_readdir
[  123.322088][ T7477] loop2: detected capacity change from 0 to 2048
[  123.332747][ T7477] nilfs2: Bad value for 'cp'
[  123.429654][ T7481] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.580'.
[  123.462770][ T7483] loop1: detected capacity change from 0 to 512
[  123.490219][ T7483] EXT4-fs (loop1): Test dummy encryption mode enabled
[  123.503405][ T7483] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.581064][ T7492] netlink: 'syz.2.584': attribute type 20 has an invalid length.
[  123.608923][ T7483] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  123.627804][ T7483] EXT4-fs error (device loop1): ext4_add_entry:2417: inode #2: comm syz.1.581: Directory hole found for htree leaf block 0
[  123.644448][ T7483] EXT4-fs (loop1): Remounting filesystem read-only
[  123.703749][ T5844] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  123.707953][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'.
[  123.707965][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'.
[  123.707979][ T7499] netlink: 'syz.2.586': attribute type 13 has an invalid length.
[  123.708002][ T7499] netlink: 'syz.2.586': attribute type 11 has an invalid length.
[  123.906000][ T7517] loop1: detected capacity change from 0 to 16
[  123.915050][ T7517] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  123.930498][ T7517] erofs (device loop1): mounted with root inode @ nid 36.
[  124.061146][ T7522] netlink: 'syz.1.596': attribute type 2 has an invalid length.
[  124.120768][ T7527] loop1: detected capacity change from 0 to 512
[  124.169127][ T7527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.184545][ T7527] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  124.250750][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.313634][ T7519] loop0: detected capacity change from 0 to 40427
[  124.333674][ T7519] F2FS-fs (loop0): build fault injection rate: 771
[  124.346168][ T7519] F2FS-fs (loop0): invalid crc value
[  124.458756][ T7519] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  124.463620][ T7519] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  124.500581][ T7519] syz.0.595: attempt to access beyond end of device
[  124.500581][ T7519] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  124.541304][ T5845] syz-executor: attempt to access beyond end of device
[  124.541304][ T5845] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  124.549853][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  124.549865][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.549870][ T5845] Call Trace:
[  124.549873][ T5845]  <TASK>
[  124.549877][ T5845]  dump_stack_lvl+0x189/0x250
[  124.549892][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.549901][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  124.549908][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  124.549918][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  124.549932][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  124.549946][ T5845]  f2fs_write_end_io+0x886/0xb60
[  124.549961][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  124.549974][ T5845]  __submit_merged_write_cond+0x255/0x530
[  124.549987][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  124.550012][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  124.550041][ T5845]  ? __mod_zone_page_state+0xd7/0x140
[  124.550056][ T5845]  ? folios_put_refs+0x560/0x640
[  124.550069][ T5845]  ? __pfx_folios_put_refs+0x10/0x10
[  124.550075][ T5845]  ? rcu_is_watching+0x15/0xb0
[  124.550087][ T5845]  ? __lock_acquire+0xab9/0xd20
[  124.550104][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  124.550114][ T5845]  do_writepages+0x32e/0x550
[  124.550129][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  124.550139][ T5845]  filemap_fdatawrite+0x199/0x240
[  124.550149][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  124.550180][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  124.550189][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  124.550203][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[  124.550226][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  124.550252][ T5845]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  124.550258][ T5845]  ? kfree+0x18e/0x440
[  124.550267][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[  124.550276][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[  124.550286][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  124.550291][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[  124.550305][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  124.550314][ T5845]  deactivate_locked_super+0xbc/0x130
[  124.550324][ T5845]  cleanup_mnt+0x425/0x4c0
[  124.550333][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.550343][ T5845]  task_work_run+0x1d4/0x260
[  124.550355][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  124.550362][ T5845]  ? __x64_sys_umount+0x122/0x160
[  124.550374][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[  124.550385][ T5845]  exit_to_user_mode_loop+0xec/0x110
[  124.550394][ T5845]  do_syscall_64+0x2bd/0x3b0
[  124.550403][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.550411][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.550418][ T5845]  ? exc_page_fault+0x9f/0xf0
[  124.550427][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.550433][ T5845] RIP: 0033:0x7f5ad2d8ff17
[  124.550441][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  124.550446][ T5845] RSP: 002b:00007ffe8ca8ab28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  124.550455][ T5845] RAX: 0000000000000000 RBX: 00007f5ad2e11c05 RCX: 00007f5ad2d8ff17
[  124.550460][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8ca8abe0
[  124.550463][ T5845] RBP: 00007ffe8ca8abe0 R08: 0000000000000000 R09: 0000000000000000
[  124.550467][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe8ca8bc70
[  124.550471][ T5845] R13: 00007f5ad2e11c05 R14: 000000000001e5d3 R15: 00007ffe8ca8bcb0
[  124.550484][ T5845]  </TASK>
[  124.550487][ T5845] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  125.852608][ T7578] 9pnet_virtio: no channels available for device syz
[  125.949585][   T51] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  125.965212][ T7586] loop2: detected capacity change from 0 to 8
[  125.969214][ T7586] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  126.013505][ T7588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.625'.
[  126.044791][ T7590] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  126.117391][   T51] usb 1-1: Using ep0 maxpacket: 32
[  126.133840][   T51] usb 1-1: unable to get BOS descriptor or descriptor too short
[  126.138637][   T51] usb 1-1: config 120 has an invalid interface number: 86 but max is 0
[  126.141844][   T51] usb 1-1: config 120 has no interface number 0
[  126.153859][   T51] usb 1-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af
[  126.165469][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.169510][ T7596] loop2: detected capacity change from 0 to 512
[  126.171935][   T51] usb 1-1: Product: syz
[  126.173921][   T51] usb 1-1: Manufacturer: syz
[  126.182926][   T51] usb 1-1: SerialNumber: syz
[  126.201899][ T7596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.291234][ T7601] loop1: detected capacity change from 0 to 128
[  126.340075][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.418560][   T51] huawei_cdc_ncm 1-1:120.86: More than one union descriptor, skipping ...
[  126.439799][   T51] huawei_cdc_ncm 1-1:120.86: CDC Union missing and no IAD found
[  126.449426][   T51] huawei_cdc_ncm 1-1:120.86: bind() failure
[  126.464204][   T51] usb 1-1: USB disconnect, device number 8
[  127.786922][ T7629] loop2: detected capacity change from 0 to 128
[  127.801162][ T7629] FAT-fs (loop2): FAT read failed (blocknr 33568)
[  127.937162][ T7635] warning: `syz.2.646' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  128.231401][ T7637] loop2: detected capacity change from 0 to 32768
[  128.236325][ T7645] loop0: detected capacity change from 0 to 8192
[  128.240536][ T7637] XFS: ikeep mount option is deprecated.
[  128.269975][ T7637] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  128.318123][ T7637] XFS (loop2): Ending clean mount
[  128.324965][ T7637] XFS (loop2): Quotacheck needed: Please wait.
[  128.372167][ T7637] XFS (loop2): Quotacheck: Done.
[  128.457251][ T5847] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  128.504060][ T7662] loop1: detected capacity change from 0 to 256
[  128.551572][ T7662] FAT-fs (loop1): Directory bread(block 64) failed
[  128.554212][ T7662] FAT-fs (loop1): Directory bread(block 65) failed
[  128.575837][ T7662] FAT-fs (loop1): Directory bread(block 66) failed
[  128.578548][ T7662] FAT-fs (loop1): Directory bread(block 67) failed
[  128.581552][ T7662] FAT-fs (loop1): Directory bread(block 68) failed
[  128.584135][ T7662] FAT-fs (loop1): Directory bread(block 69) failed
[  128.587737][ T7662] FAT-fs (loop1): Directory bread(block 70) failed
[  128.594357][ T7662] FAT-fs (loop1): Directory bread(block 71) failed
[  128.605580][ T7662] FAT-fs (loop1): Directory bread(block 72) failed
[  128.608273][ T7662] FAT-fs (loop1): Directory bread(block 73) failed
[  128.901320][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'.
[  128.904867][ T7674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.230007][ T7676] loop2: detected capacity change from 0 to 32768
[  129.247398][ T7676] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.662 (7676)
[  129.272050][ T7676] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  129.282954][ T7676] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  129.369581][ T7676] BTRFS info (device loop2): rebuilding free space tree
[  129.395219][ T7676] BTRFS info (device loop2): disabling free space tree
[  129.398477][ T7676] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.401826][ T7676] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  129.579983][   T33] audit: type=1800 audit(1755254219.048:146): pid=7676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.662" name="file1" dev="loop2" ino=260 res=0 errno=0
[  129.581497][ T5847] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  130.634709][ T7726] loop0: detected capacity change from 0 to 24
[  130.787762][ T7746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.686'.
[  130.798835][ T7746] netlink: 3 bytes leftover after parsing attributes in process `syz.0.686'.
[  131.947553][ T7752] loop1: detected capacity change from 0 to 32768
[  131.997747][   T33] audit: type=1800 audit(1755254221.588:147): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.689" name="file1" dev="loop1" ino=4 res=0 errno=0
[  132.025556][   T51] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  132.198535][   T51] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  132.201808][   T51] usb 1-1: config 0 has no interface number 0
[  132.208091][   T51] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  132.208694][ T7752] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root
[  132.208694][ T7752] 
[  132.211971][   T51] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  132.219353][ T7752] ERROR: (device loop1): remounting filesystem as read-only
[  132.230423][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.257462][ T5844] ------------[ cut here ]------------
[  132.259833][ T5844] kernel BUG at fs/jfs/inode.c:169!
[  132.261775][ T5844] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  132.264723][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  132.270037][ T5844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.274022][ T5844] RIP: 0010:jfs_evict_inode+0x438/0x440
[  132.276227][ T5844] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 53 7d e8 fe e9 16 fe ff ff e8 29 14 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  132.283809][ T5844] RSP: 0018:ffffc90004407ae0 EFLAGS: 00010293
[  132.286245][ T5844] RAX: ffffffff833a9767 RBX: ffff8881143fc4b8 RCX: ffff88810937b980
[  132.289394][ T5844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881143fc4b8
[  132.292558][ T5844] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  132.295719][ T5844] R10: dffffc0000000000 R11: ffffffff833a7460 R12: dffffc0000000000
[  132.298879][ T5844] R13: dffffc0000000000 R14: ffff8881143fc140 R15: ffffffff833a9330
[  132.302040][ T5844] FS:  000055558b39e500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  132.305506][ T5844] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.308125][ T5844] CR2: 00007ffe19431c38 CR3: 000000001fc36000 CR4: 00000000000006f0
[  132.311308][ T5844] Call Trace:
[  132.312690][ T5844]  <TASK>
[  132.313889][ T5844]  ? evict+0x4f8/0x9c0
[  132.315533][ T5844]  ? __pfx_jfs_evict_inode+0x10/0x10
[  132.317674][ T5844]  evict+0x504/0x9c0
[  132.319268][ T5844]  ? __pfx_evict+0x10/0x10
[  132.321094][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  132.323163][ T5844]  evict_inodes+0x64c/0x6d0
[  132.325020][ T5844]  ? __pfx_evict_inodes+0x10/0x10
[  132.327052][ T5844]  generic_shutdown_super+0x9a/0x2c0
[  132.329173][ T5844]  kill_block_super+0x44/0x90
[  132.331085][ T5844]  deactivate_locked_super+0xbc/0x130
[  132.333206][ T5844]  cleanup_mnt+0x425/0x4c0
[  132.335029][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.337101][ T5844]  task_work_run+0x1d4/0x260
[  132.338984][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  132.341054][ T5844]  ? __x64_sys_umount+0x122/0x160
[  132.343093][ T5844]  ? exit_to_user_mode_loop+0x40/0x110
[  132.345249][ T5844]  exit_to_user_mode_loop+0xec/0x110
[  132.347340][ T5844]  do_syscall_64+0x2bd/0x3b0
[  132.349207][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.351261][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.353598][ T5844]  ? exc_page_fault+0x9f/0xf0
[  132.355484][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.357855][ T5844] RIP: 0033:0x7fedcd98ff17
[  132.359661][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  132.367098][ T5844] RSP: 002b:00007ffe194323e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  132.370420][ T5844] RAX: 0000000000000000 RBX: 00007fedcda11c05 RCX: 00007fedcd98ff17
[  132.373607][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe194324a0
[  132.376747][ T5844] RBP: 00007ffe194324a0 R08: 0000000000000000 R09: 0000000000000000
[  132.379891][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe19433530
[  132.382920][ T5844] R13: 00007fedcda11c05 R14: 00000000000203f1 R15: 00007ffe19433570
[  132.386081][ T5844]  </TASK>
[  132.387348][ T5844] Modules linked in:
[  132.389859][ T5844] ---[ end trace 0000000000000000 ]---
[  132.392165][   T51] usb 1-1: config 0 descriptor??
[  132.400304][   T51] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input4
[  132.412602][ T5844] RIP: 0010:jfs_evict_inode+0x438/0x440
[  132.440508][ T5844] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 53 7d e8 fe e9 16 fe ff ff e8 29 14 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  132.448484][ T5844] RSP: 0018:ffffc90004407ae0 EFLAGS: 00010293
[  132.459294][ T5844] RAX: ffffffff833a9767 RBX: ffff8881143fc4b8 RCX: ffff88810937b980
[  132.464029][ T5844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881143fc4b8
[  132.468743][ T5844] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  132.471964][ T5844] R10: dffffc0000000000 R11: ffffffff833a7460 R12: dffffc0000000000
[  132.475161][ T5844] R13: dffffc0000000000 R14: ffff8881143fc140 R15: ffffffff833a9330
[  132.479982][ T5844] FS:  000055558b39e500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  132.483493][ T5844] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.486651][ T5844] CR2: 000055b50a683d10 CR3: 000000001fc36000 CR4: 00000000000006f0
[  132.490054][ T5844] Kernel panic - not syncing: Fatal exception
[  132.493293][ T5844] Kernel Offset: disabled
[  132.495059][ T5844] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:37:02  Registers:
info registers vcpu 0

CPU#0
RAX=ffffea0001094800 RBX=ffff88804b03fd00 RCX=ffffffff99ab9303 RDX=0000000000000000
RSI=0000000000000004 RDI=00000000ffffffff RBP=ffffc900075766f0 RSP=ffffc90007576480
R8 =ffff88804b03fd03 R9 =1ffff11009607fa0 R10=dffffc0000000000 R11=ffffed1009607fa1
R12=dffffc0000000000 R13=ffffea0001094800 R14=0000000000000001 R15=ffffc9000757675c
RIP=ffffffff82160082 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0229814000 CR3=000000010f666000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900044071f0
R8 =ffff88801fce0237 R9 =1ffff11003f9c046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98d0 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558b39e500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe19431c38 CR3=000000001fc36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f5ad2e12ee7 XMM09=0000000000000000 00007f5ad2e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
