last executing test programs:

4m3.637792555s ago: executing program 1 (id=291):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061171c0000000000c6070000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x46}, 0x48)

4m3.567474626s ago: executing program 1 (id=292):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000001f0000000400000002"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000001000), 0x0}, 0x20)

4m3.56715424s ago: executing program 1 (id=293):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x48)

4m3.5039163s ago: executing program 1 (id=294):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@nomblk_io_submit}, {@nombcache}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

4m3.378089177s ago: executing program 1 (id=295):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x8}, 0x18)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10, 0x1, 0x0, 0x6, 0x0, 0x0, "5dc9ca561a5fbf61048955f6f876b2ff", 0x0, 0x1})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

4m3.057050531s ago: executing program 1 (id=296):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}})

4m2.906947103s ago: executing program 32 (id=296):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}})

2m59.599372043s ago: executing program 3 (id=1067):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_type(r2, &(0x7f0000000040), 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c)

2m59.211304056s ago: executing program 3 (id=1068):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20)

2m59.071462477s ago: executing program 3 (id=1069):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x19c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xe}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xf5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x68}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x43f}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xff}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}]}}, @CTA_TUPLE_REPLY={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_LABELS_MASK={0x20, 0x17, [0x8, 0xa0, 0x4, 0x1, 0x80000000, 0x0, 0x4]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x14}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4051}, 0x8000)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r0], 0xfe33)

2m58.961147241s ago: executing program 3 (id=1070):
syz_mount_image$udf(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00b96fa236bfd596c74e808dd7b85a97c6ab3f6173849702311b635ac7a4e02bb352424c"], 0x1, 0x46f, &(0x7f0000000540)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000f80)=""/4107, 0x100b)

2m58.63773424s ago: executing program 3 (id=1071):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001400000000000000000795"], &(0x7f0000000400)='GPL\x00'}, 0x90)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x38}, 0xc)

2m58.231510125s ago: executing program 3 (id=1075):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)

2m58.088129614s ago: executing program 33 (id=1075):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)

2m10.177157738s ago: executing program 2 (id=1524):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x10000000)

2m10.124948362s ago: executing program 2 (id=1525):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r1, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0)

2m10.124663754s ago: executing program 2 (id=1526):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/26, 0x1a}], 0x1, 0x4000ffe, 0xfffffffc)

2m10.047298327s ago: executing program 2 (id=1527):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12)

2m9.994840595s ago: executing program 2 (id=1528):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40800, 0x0)
read$FUSE(r3, &(0x7f0000002ac0)={0x2020}, 0x2020)

2m9.994335092s ago: executing program 2 (id=1529):
r0 = socket(0x22, 0x2, 0x3)
getsockopt$packet_buf(r0, 0x107, 0x1, 0x0, 0x0)

1m54.93495995s ago: executing program 34 (id=1529):
r0 = socket(0x22, 0x2, 0x3)
getsockopt$packet_buf(r0, 0x107, 0x1, 0x0, 0x0)

58.258457097s ago: executing program 4 (id=2301):
r0 = syz_io_uring_setup(0x49c, &(0x7f00000000c0)={0x0, 0x1079af, 0x10000, 0x4000080, 0x292}, &(0x7f0000000740)=<r1=>0x0, &(0x7f00000003c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)

58.137725795s ago: executing program 4 (id=2302):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
exit(0x8)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)

57.157502367s ago: executing program 4 (id=2306):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x3}}}})

57.157225347s ago: executing program 4 (id=2307):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4)
getdents64(r0, 0xfffffffffffffffe, 0xffffffffffffff15)

56.997165621s ago: executing program 4 (id=2308):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000001b00), 0x4)

56.64096383s ago: executing program 4 (id=2309):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x9}, &(0x7f00000000c0)=0x4, &(0x7f0000000280)=0xfffffffffffffff9, 0x606, 0x400000006, 0xf, 0x40, 0x72, 0x8000000000000000}}], 0x58, 0x90}, 0x0)

56.521826043s ago: executing program 35 (id=2309):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x9}, &(0x7f00000000c0)=0x4, &(0x7f0000000280)=0xfffffffffffffff9, 0x606, 0x400000006, 0xf, 0x40, 0x72, 0x8000000000000000}}], 0x58, 0x90}, 0x0)

6.294976863s ago: executing program 6 (id=2857):
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setresuid(0xee01, r0, r0)
r1 = gettid()
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setown(r2, 0x8, r1)
sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881)

6.294452229s ago: executing program 6 (id=2859):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000500)=[{}])

5.374044957s ago: executing program 6 (id=2867):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000001080)=0x2f)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r2}, &(0x7f0000000000)=0x8)

5.310269633s ago: executing program 6 (id=2870):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@norecovery}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
lstat(&(0x7f0000000300)='./file2\x00', 0x0)

5.165875847s ago: executing program 6 (id=2872):
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)

3.185148642s ago: executing program 6 (id=2880):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841)
sendto(r0, &(0x7f0000000040)='_', 0x1, 0x40000, 0x0, 0x0)

3.028893263s ago: executing program 36 (id=2880):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841)
sendto(r0, &(0x7f0000000040)='_', 0x1, 0x40000, 0x0, 0x0)

2.975669073s ago: executing program 5 (id=2882):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000340)={{0x0, 0x8503}, 0x51}, 0x10)

2.884774776s ago: executing program 5 (id=2883):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000030427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000003c0012800b00010067656e65766500002c000280060005004e240000080001000300000004000600060005004e2200000500030005000000040006000a000100aa"], 0x78}}, 0x20048004)

2.503835098s ago: executing program 5 (id=2884):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x800400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

2.351040836s ago: executing program 5 (id=2885):
socket(0x15, 0x5, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)

2.254767953s ago: executing program 5 (id=2886):
r0 = syz_open_dev$media(&(0x7f0000000000), 0x400, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]})

2.254546139s ago: executing program 0 (id=2887):
syslog(0x3, 0x0, 0x0)
syslog(0x2, &(0x7f0000000380)=""/24, 0x18)
syslog(0x2, &(0x7f00000003c0)=""/214, 0xd6)

2.184360873s ago: executing program 5 (id=2888):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159})
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0)

1.311401334s ago: executing program 0 (id=2889):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
write$binfmt_register(r0, &(0x7f0000000380)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, 'U]\xc5$\xe4\x92p\xa2ay\xf6\x1f\xc7\x18Z\xefU\xf7\x14<t\'@U\xdf\xf0\xbb\xb81C\x1e=\xc8\x9a\x0e\xcc\r\xec\xec\xe6W\x02\x8b\x05\xdf*<\xda\xbf\x93\xef8\x911]{\xed\xcc\x85\"pN\xb4\xcdG\xc2\x1d\x7f9\xf0\x0fZ\xecx\xbb13|\xdcI4`\xe5\xaf\xb0g\xfc\xb6\xeeQ\xb0{dX.\x9d=\xccV\xf4\xa4g\x89\x01\x1f\xd1\xcc\x9d,?\xf4\x9af\xa4!\x84\x10\x16@fi\x1dRL\x86g\xaf\xa5\x03j\xc2P\xbaR\xc2I\x88\xc4N\xac\xfb\a]\xb4\xa4\x95\xb8-\xfa\xa8\x1b\xe6\xdfg\a\xfb\'\xd27\xec\xde\xc7n(\tx\xfb\x91%\xee*\xe8\xe8\xcdzU~\xbb\xe7\x11\x18?I5\x1f\xbbD\x92s@\xf5\xb2\xe4x\t\x00\xf9\xda\xd4\x1e`\f\x9a-\x91\xe9\xc2\xcaIx\x98\xc7x\x99\x9aeP#\x89\xe4o\xc1-\x13\xd8\x8a\xcf\x18\xa4ba\x90C\xd4I\xed\x9d\xdc\x82f\xe2\xce\x1b\xba', 0x3a, '!&)%.}+!/\xe1', 0x3a, './file0'}, 0x125)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000640)='<', 0x1, 0x805, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10)

1.246919981s ago: executing program 0 (id=2890):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)

206.554568ms ago: executing program 0 (id=2891):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xa}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x2004c850)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

73.139024ms ago: executing program 0 (id=2892):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0x50}}, 0x0)

0s ago: executing program 0 (id=2893):
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[], 0x0, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000029c000/0x4000)=nil, 0x4000}})

kernel console output (not intermixed with test programs):

softirqs+0x286/0x870
[  249.209428][    C1]  ? run_ksoftirqd+0x9b/0x100
[  249.209446][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  249.209462][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.209476][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.209488][    C1]  run_ksoftirqd+0x9b/0x100
[  249.209504][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  249.209559][    C1]  smpboot_thread_fn+0x542/0xa60
[  249.209573][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.209597][    C1]  kthread+0x711/0x8a0
[  249.209615][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  249.209628][    C1]  ? __pfx_kthread+0x10/0x10
[  249.209645][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  249.209662][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.209678][    C1]  ? __pfx_kthread+0x10/0x10
[  249.209696][    C1]  ret_from_fork+0x3fc/0x770
[  249.209711][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  249.209727][    C1]  ? __switch_to_asm+0x39/0x70
[  249.209740][    C1]  ? __switch_to_asm+0x33/0x70
[  249.209753][    C1]  ? __pfx_kthread+0x10/0x10
[  249.209769][    C1]  ret_from_fork_asm+0x1a/0x30
[  249.209799][    C1]  </TASK>
[  249.209805][    C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  249.353021][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  249.353035][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  249.353041][    C1] Call Trace:
[  249.353046][    C1]  <TASK>
[  249.353050][    C1]  dump_stack_lvl+0x189/0x250
[  249.353065][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.353076][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  249.353084][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  249.353095][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  249.353109][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  249.353124][    C1]  f2fs_write_end_io+0x886/0xb60
[  249.353139][    C1]  blk_update_request+0x57e/0xe60
[  249.353156][    C1]  blk_mq_end_request+0x3e/0x70
[  249.353165][    C1]  blk_done_softirq+0x10a/0x160
[  249.353175][    C1]  handle_softirqs+0x286/0x870
[  249.353185][    C1]  ? run_ksoftirqd+0x9b/0x100
[  249.353197][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  249.353206][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.353215][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.353222][    C1]  run_ksoftirqd+0x9b/0x100
[  249.353230][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  249.353242][    C1]  smpboot_thread_fn+0x542/0xa60
[  249.353250][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.353261][    C1]  kthread+0x711/0x8a0
[  249.353273][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  249.353282][    C1]  ? __pfx_kthread+0x10/0x10
[  249.353292][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  249.353301][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.353311][    C1]  ? __pfx_kthread+0x10/0x10
[  249.353325][    C1]  ret_from_fork+0x3fc/0x770
[  249.353340][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  249.353356][    C1]  ? __switch_to_asm+0x39/0x70
[  249.353370][    C1]  ? __switch_to_asm+0x33/0x70
[  249.353383][    C1]  ? __pfx_kthread+0x10/0x10
[  249.353401][    C1]  ret_from_fork_asm+0x1a/0x30
[  249.353426][    C1]  </TASK>
[  249.353431][    C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  249.430982][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  249.431002][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  249.431010][    C1] Call Trace:
[  249.431017][    C1]  <TASK>
[  249.431024][    C1]  dump_stack_lvl+0x189/0x250
[  249.431049][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.431064][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  249.431075][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  249.431094][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  249.431119][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  249.431143][    C1]  f2fs_write_end_io+0x886/0xb60
[  249.431169][    C1]  blk_update_request+0x57e/0xe60
[  249.431197][    C1]  blk_mq_end_request+0x3e/0x70
[  249.431215][    C1]  blk_done_softirq+0x10a/0x160
[  249.431232][    C1]  handle_softirqs+0x286/0x870
[  249.431259][    C1]  ? run_ksoftirqd+0x9b/0x100
[  249.431279][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  249.431295][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.431310][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.431322][    C1]  run_ksoftirqd+0x9b/0x100
[  249.431339][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  249.431360][    C1]  smpboot_thread_fn+0x542/0xa60
[  249.431376][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.431392][    C1]  kthread+0x711/0x8a0
[  249.431414][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  249.431428][    C1]  ? __pfx_kthread+0x10/0x10
[  249.431447][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  249.431462][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.431478][    C1]  ? __pfx_kthread+0x10/0x10
[  249.431527][    C1]  ret_from_fork+0x3fc/0x770
[  249.431545][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  249.431564][    C1]  ? __switch_to_asm+0x39/0x70
[  249.431579][    C1]  ? __switch_to_asm+0x33/0x70
[  249.431596][    C1]  ? __pfx_kthread+0x10/0x10
[  249.431614][    C1]  ret_from_fork_asm+0x1a/0x30
[  249.431643][    C1]  </TASK>
[  249.431649][    C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  249.510437][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  249.510459][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  249.510469][    C1] Call Trace:
[  249.510476][    C1]  <TASK>
[  249.510508][    C1]  dump_stack_lvl+0x189/0x250
[  249.510534][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.510552][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  249.510565][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  249.510584][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  249.510609][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  249.510634][    C1]  f2fs_write_end_io+0x886/0xb60
[  249.510660][    C1]  blk_update_request+0x57e/0xe60
[  249.510689][    C1]  blk_mq_end_request+0x3e/0x70
[  249.510705][    C1]  blk_done_softirq+0x10a/0x160
[  249.510723][    C1]  handle_softirqs+0x286/0x870
[  249.510742][    C1]  ? run_ksoftirqd+0x9b/0x100
[  249.510761][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  249.510779][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.510795][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.510809][    C1]  run_ksoftirqd+0x9b/0x100
[  249.510824][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  249.510846][    C1]  smpboot_thread_fn+0x542/0xa60
[  249.510861][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  249.510881][    C1]  kthread+0x711/0x8a0
[  249.510900][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  249.510914][    C1]  ? __pfx_kthread+0x10/0x10
[  249.510932][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  249.510949][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.510965][    C1]  ? __pfx_kthread+0x10/0x10
[  249.510981][    C1]  ret_from_fork+0x3fc/0x770
[  249.510999][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  249.511018][    C1]  ? __switch_to_asm+0x39/0x70
[  249.511035][    C1]  ? __switch_to_asm+0x33/0x70
[  249.511048][    C1]  ? __pfx_kthread+0x10/0x10
[  249.511065][    C1]  ret_from_fork_asm+0x1a/0x30
[  249.511094][    C1]  </TASK>
[  249.511100][    C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  249.589181][T10463] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint
[  249.879967][   T33] audit: type=1326 audit(1755449960.810:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.1977" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1d78ebe9 code=0x7ffc0000
[  249.888835][   T33] audit: type=1326 audit(1755449960.810:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.1977" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1d78ebe9 code=0x7ffc0000
[  249.901013][   T33] audit: type=1326 audit(1755449960.810:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.1977" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5e1d78ebe9 code=0x7ffc0000
[  249.909904][   T33] audit: type=1326 audit(1755449960.810:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.1977" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1d78ebe9 code=0x7ffc0000
[  249.937131][   T33] audit: type=1326 audit(1755449960.810:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.1977" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1d78ebe9 code=0x7ffc0000
[  249.946142][   T33] audit: type=1326 audit(1755449960.810:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.1977" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e1d78ebe9 code=0x7ffc0000
[  249.960951][   T33] audit: type=1326 audit(1755449960.810:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.1977" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1d78ebe9 code=0x7ffc0000
[  249.966953][T11247] loop5: detected capacity change from 0 to 512
[  249.973257][T11247] EXT4-fs: Ignoring removed bh option
[  249.979210][   T33] audit: type=1326 audit(1755449960.810:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.1977" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5e1d78ebe9 code=0x7ffc0000
[  249.988115][   T33] audit: type=1326 audit(1755449960.810:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.1977" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1d78ebe9 code=0x7ffc0000
[  249.989593][T11247] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  250.000822][T11247] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  250.006615][T11247] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  250.018843][T11247] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  250.024020][T11247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.047591][T11247] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  250.075057][T10463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.321760][T11251] loop5: detected capacity change from 0 to 32768
[  250.324937][T11251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1980 (11251)
[  250.332482][T11251] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.336521][T11251] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  250.340282][T11251] BTRFS info (device loop5): disk space caching is enabled
[  250.350539][T11251] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  250.391344][T11251] BTRFS info (device loop5): rebuilding free space tree
[  250.401031][T11251] BTRFS info (device loop5): disabling free space tree
[  250.403870][T11251] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  250.407814][T11251] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  250.458679][   T46] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  250.463109][T10463] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.620551][   T46] usb 1-1: Using ep0 maxpacket: 32
[  250.625292][   T46] usb 1-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.629924][   T46] usb 1-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32
[  250.633889][   T46] usb 1-1: config 1 interface 0 altsetting 254 bulk endpoint 0x3 has invalid maxpacket 16
[  250.637938][   T46] usb 1-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  250.645320][   T46] usb 1-1: config 1 interface 0 has no altsetting 0
[  250.649363][   T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  250.652786][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  250.656121][   T46] usb 1-1: SerialNumber: syz
[  250.661285][T11255] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  250.664221][T11255] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  250.669673][   T46] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  250.673653][   T46] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[  250.874867][ T5907] usb 1-1: USB disconnect, device number 22
[  251.178745][T11290] loop5: detected capacity change from 0 to 32768
[  251.187560][T11290] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  251.238588][   T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  251.261288][T11293] (syz.5.1991,11293,1):ocfs2_file_write_iter:2446 ERROR: status = -27
[  251.409808][   T46] usb 5-1: Using ep0 maxpacket: 16
[  251.420560][   T46] usb 5-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6
[  251.424354][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.427297][   T46] usb 5-1: Product: syz
[  251.430663][   T46] usb 5-1: Manufacturer: syz
[  251.433774][   T46] usb 5-1: SerialNumber: syz
[  251.446028][   T46] usb 5-1: config 0 descriptor??
[  251.457942][   T46] safe_serial 5-1:0.0: safe_serial converter detected
[  251.475186][   T46] usb 5-1: safe_serial converter now attached to ttyUSB0
[  251.709827][ T5907] usb 5-1: USB disconnect, device number 10
[  251.756313][ T5907] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0
[  251.771542][ T5907] safe_serial 5-1:0.0: device disconnected
[  252.421036][T11305] openvswitch: netlink: Missing valid actions attribute.
[  252.424432][T11305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.931857][T10463] ocfs2: Unmounting device (7,5) on (node local)
[  253.031972][T11311] loop4: detected capacity change from 0 to 512
[  253.076137][T11311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.080514][T11311] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  253.179197][ T8793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.231657][T11316] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1999'.
[  253.235836][T11316] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1999'.
[  253.334978][T11320] loop5: detected capacity change from 0 to 512
[  253.343904][T11320] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  253.356100][T11320] EXT4-fs (loop5): 1 truncate cleaned up
[  253.363551][T11320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.451665][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2004'.
[  253.467827][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2004'.
[  253.472381][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'.
[  253.601360][T11329] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  253.603581][T10463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.604465][T11329] overlayfs: failed to set xattr on upper
[  253.612601][T11329] overlayfs: ...falling back to redirect_dir=nofollow.
[  253.615342][T11329] overlayfs: ...falling back to index=off.
[  253.617641][T11329] overlayfs: ...falling back to uuid=null.
[  253.622432][T11329] overlayfs: failed to clone lowerpath
[  253.782278][T11340] loop0: detected capacity change from 0 to 4096
[  253.928500][   T46] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  253.948622][ T5894] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  254.088578][   T46] usb 6-1: Using ep0 maxpacket: 8
[  254.092361][   T46] usb 6-1: config 2 has an invalid interface number: 241 but max is 0
[  254.095651][   T46] usb 6-1: config 2 has no interface number 0
[  254.097991][   T46] usb 6-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  254.102510][   T46] usb 6-1: config 2 interface 241 has no altsetting 0
[  254.107670][   T46] usb 6-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  254.111226][ T5894] usb 5-1: Using ep0 maxpacket: 32
[  254.113267][   T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.116930][   T46] usb 6-1: Product: syz
[  254.119287][   T46] usb 6-1: Manufacturer: syz
[  254.121559][   T46] usb 6-1: SerialNumber: syz
[  254.123706][ T5894] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  254.128110][ T5894] usb 5-1: config 0 has no interface number 0
[  254.131473][ T5894] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  254.135640][ T5894] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  254.141298][   T46] ti_usb_3410_5052 6-1:2.241: TI USB 3410 1 port adapter converter detected
[  254.144805][   T46] ti_usb_3410_5052 6-1:2.241: missing endpoints
[  254.148492][ T5894] usb 5-1: config 0 interface 85 has no altsetting 0
[  254.153447][ T5894] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  254.156818][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.160909][ T5894] usb 5-1: Product: syz
[  254.162558][ T5894] usb 5-1: Manufacturer: syz
[  254.164332][ T5894] usb 5-1: SerialNumber: syz
[  254.168110][ T5894] usb 5-1: config 0 descriptor??
[  254.349483][ T5907] usb 6-1: USB disconnect, device number 5
[  254.376440][ T5894] appletouch 5-1:0.85: Failed to read mode from device.
[  254.379535][ T5894] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  254.389809][ T5894] usb 5-1: USB disconnect, device number 11
[  254.593425][T11344] loop0: detected capacity change from 0 to 1024
[  254.596669][T11344] hfsplus: Bad value for 'uid'
[  255.511726][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.518338][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.775729][T11380] netlink: 'syz.4.2029': attribute type 1 has an invalid length.
[  255.779870][T11380] netlink: 'syz.4.2029': attribute type 2 has an invalid length.
[  255.782770][T11380] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.2029'.
[  255.900032][T11384] loop5: detected capacity change from 0 to 8
[  255.920350][T11384] SQUASHFS error: Failed to read block 0x738: -5
[  255.922320][T11384] SQUASHFS error: Unable to read metadata cache entry [736]
[  256.224815][T11398] netlink: 'syz.0.2038': attribute type 1 has an invalid length.
[  256.288900][  T791] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  256.311181][T11402] netfs: Couldn't get user pages (rc=-14)
[  256.433929][T11406] netlink: 'syz.0.2042': attribute type 4 has an invalid length.
[  256.456171][  T791] usb 6-1: config 0 has an invalid interface number: 3 but max is 0
[  256.461416][  T791] usb 6-1: config 0 has no interface number 0
[  256.463768][  T791] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  256.467473][  T791] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  256.473490][  T791] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  256.477564][  T791] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  256.484342][  T791] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  256.487580][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.493631][  T791] usb 6-1: config 0 descriptor??
[  256.504489][  T791] hub 6-1:0.3: bad descriptor, ignoring hub
[  256.507064][  T791] hub 6-1:0.3: probe with driver hub failed with error -5
[  256.511128][  T791] sierra 6-1:0.3: Sierra USB modem converter detected
[  256.560076][T11412] netlink: 'syz.0.2045': attribute type 10 has an invalid length.
[  256.636553][T11414] loop0: detected capacity change from 0 to 512
[  256.651576][T11414] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  256.660741][T11414] EXT4-fs (loop0): Remounting filesystem read-only
[  256.665150][T11414] EXT4-fs (loop0): 1 truncate cleaned up
[  256.669408][T11414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.680346][T11414] EXT4-fs (loop0): shut down requested (2)
[  256.718893][  T791] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[  256.722340][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.737902][  T791] usb 6-1: Sierra USB modem converter now attached to ttyUSB1
[  256.759441][  T791] usb 6-1: USB disconnect, device number 6
[  256.784724][  T791] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  256.795998][  T791] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  256.801288][  T791] sierra 6-1:0.3: device disconnected
[  256.942225][T11430] loop4: detected capacity change from 0 to 4096
[  257.100154][T11438] loop0: detected capacity change from 0 to 4096
[  257.104114][T11438] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  257.228283][T11451] loop0: detected capacity change from 0 to 1024
[  257.230952][T11451] EXT4-fs: Ignoring removed nobh option
[  257.232744][T11451] EXT4-fs: Ignoring removed bh option
[  257.251837][T11451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.270281][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.338754][T11463] loop0: detected capacity change from 0 to 16
[  257.343059][T11463] erofs (device loop0): mounted with root inode @ nid 36.
[  257.531156][T11475] loop0: detected capacity change from 0 to 256
[  257.535782][T11475] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  258.598886][T11505] sp0: Synchronizing with TNC
[  258.804512][T11495] loop4: detected capacity change from 0 to 40427
[  258.836399][T11495] F2FS-fs (loop4): invalid crc value
[  258.956353][T11495] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  258.975691][T11495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  259.217409][T11514] loop5: detected capacity change from 0 to 32768
[  259.271366][T11514] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.317992][T11514] XFS (loop5): Ending clean mount
[  259.390592][T10463] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.067927][T11540] loop4: detected capacity change from 0 to 2048
[  260.076847][T11540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.245162][T11540] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 11776 lbcount: 12288 extent 145+3072
[  260.818543][  T791] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  260.904839][T11548] loop0: detected capacity change from 0 to 512
[  260.913927][T11548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.990715][  T791] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  260.995309][  T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.001196][  T791] usb 5-1: config 0 descriptor??
[  261.111460][T11559] tmpfs: Bad value for 'mpol'
[  261.373330][T11575] netlink: 'syz.5.2113': attribute type 5 has an invalid length.
[  261.420903][  T791] ath6kl: Failed to submit usb control message: -71
[  261.423625][  T791] ath6kl: unable to send the bmi data to the device: -71
[  261.427745][  T791] ath6kl: Unable to send get target info: -71
[  261.436193][  T791] ath6kl: Failed to init ath6kl core: -71
[  261.446832][  T791] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  261.457765][  T791] usb 5-1: USB disconnect, device number 12
[  261.655032][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.720651][T11584] loop0: detected capacity change from 0 to 1024
[  261.724916][T11584] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  261.757533][T11584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.782484][T11584] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2117: missing EA_INODE flag
[  261.787010][   T33] kauditd_printk_skb: 20 callbacks suppressed
[  261.787023][   T33] audit: type=1804 audit(1755449972.710:132): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2117" name="/newroot/776/file1/file1" dev="loop0" ino=15 res=1 errno=0
[  261.799591][T11584] EXT4-fs (loop0): Remounting filesystem read-only
[  261.823740][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.857648][T11589] loop0: detected capacity change from 0 to 128
[  261.864682][T11589] FAT-fs (loop0): FAT read failed (blocknr 33568)
[  262.053043][T11597] tipc: Trying to set illegal importance in message
[  262.472901][T11581] syz.5.2116 (11581): drop_caches: 2
[  262.937018][T11626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2128'.
[  262.951404][T11626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2128'.
[  262.968544][ T5894] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  263.128544][ T5894] usb 6-1: Using ep0 maxpacket: 32
[  263.132381][ T5894] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  263.135444][ T5894] usb 6-1: config 0 has no interface number 0
[  263.137566][ T5894] usb 6-1: config 0 interface 184 has no altsetting 0
[  263.145152][ T5894] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  263.149600][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.152440][ T5894] usb 6-1: Product: syz
[  263.153876][ T5894] usb 6-1: Manufacturer: syz
[  263.155444][ T5894] usb 6-1: SerialNumber: syz
[  263.158220][ T5894] usb 6-1: config 0 descriptor??
[  263.164426][ T5894] smsc75xx v1.0.0
[  263.165635][ T5894] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  263.169482][ T5894] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22
[  263.539901][T11623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.543061][T11623] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.917951][T11623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.921359][T11623] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.163103][T11645] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2135'.
[  264.448633][    T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  264.598570][    T9] usb 1-1: Using ep0 maxpacket: 8
[  264.602365][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.607689][    T9] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  264.612654][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.615291][    T9] usb 1-1: Product: syz
[  264.616704][    T9] usb 1-1: Manufacturer: syz
[  264.618223][    T9] usb 1-1: SerialNumber: syz
[  264.621619][    T9] usb 1-1: config 0 descriptor??
[  264.625107][    T9] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22
[  264.827437][    T9] usb 1-1: USB disconnect, device number 23
[  265.646313][   T46] usb 6-1: USB disconnect, device number 7
[  265.704322][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2153'.
[  265.745630][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2155'.
[  265.765746][T11689] wg1: entered promiscuous mode
[  265.767792][T11689] wg1: entered allmulticast mode
[  266.148881][   T46] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  266.360837][   T46] usb 6-1: config 0 has an invalid interface number: 47 but max is 0
[  266.367340][   T46] usb 6-1: config 0 has no interface number 0
[  266.376899][   T46] usb 6-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04
[  266.380515][   T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.383366][   T46] usb 6-1: Product: syz
[  266.385089][   T46] usb 6-1: Manufacturer: syz
[  266.388075][   T46] usb 6-1: SerialNumber: syz
[  266.395683][   T46] usb 6-1: config 0 descriptor??
[  266.607068][   T46] go7007 6-1:0.47: probe with driver go7007 failed with error -12
[  266.611516][   T46] usb 6-1: USB disconnect, device number 8
[  266.678792][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  266.828663][    T9] usb 5-1: Using ep0 maxpacket: 32
[  266.839513][    T9] usb 5-1: config 0 has an invalid interface number: 134 but max is 0
[  266.842821][    T9] usb 5-1: config 0 has no interface number 0
[  266.851780][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice=ea.6f
[  266.855557][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.855874][T11707] loop0: detected capacity change from 0 to 512
[  266.859502][    T9] usb 5-1: Product: syz
[  266.862807][    T9] usb 5-1: Manufacturer: syz
[  266.864957][T11707] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  266.865019][    T9] usb 5-1: SerialNumber: syz
[  266.873709][T11707] FAT-fs (loop0): FAT read failed (blocknr 1568)
[  266.880501][    T9] usb 5-1: config 0 descriptor??
[  266.887752][    T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.134/input/input17
[  267.119886][   T46] usb 5-1: USB disconnect, device number 13
[  267.776402][T11742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  267.779932][T11742] IPv6: NLM_F_CREATE should be set when creating new route
[  267.782415][T11742] IPv6: NLM_F_CREATE should be set when creating new route
[  267.861498][T11749] loop0: detected capacity change from 0 to 8
[  267.891776][T11749] SQUASHFS error: xz decompression failed, data probably corrupt
[  267.894517][T11749] SQUASHFS error: Failed to read block 0x108: -5
[  267.896885][T11749] SQUASHFS error: Unable to read metadata cache entry [106]
[  267.902878][T11749] SQUASHFS error: Unable to read inode 0x11f
[  268.007477][T11762] ptrace attach of "/syz-executor exec"[5845] was attempted by "/syz-executor exec"[11762]
[  268.358837][    T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  268.532033][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  268.535505][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  268.549207][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  268.559178][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  268.580293][    T9] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  268.583270][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.586665][    T9] usb 6-1: Product: syz
[  268.589183][    T9] usb 6-1: Manufacturer: syz
[  268.590709][    T9] usb 6-1: SerialNumber: syz
[  268.596224][    T9] usb 6-1: config 0 descriptor??
[  268.602582][T11766] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  268.650447][    C1] hrtimer: interrupt took 415037 ns
[  268.708609][    T9] rc_core: IR keymap rc-imon-rsc not found
[  268.715542][    T9] Registered IR keymap rc-empty
[  268.729351][    T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  268.735691][    T9] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18
[  268.887816][   T46] usb 6-1: USB disconnect, device number 9
[  269.239466][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  269.240337][T11790] bridge2: entered promiscuous mode
[  269.277198][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'.
[  269.390068][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  269.393567][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  269.401120][    T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  269.404564][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  269.407695][    T9] usb 5-1: SerialNumber: syz
[  269.630577][    T9] usb 5-1: 0:2 : does not exist
[  269.634572][    T9] usb 5-1: unit 1 not found!
[  269.642051][    T9] usb 5-1: USB disconnect, device number 14
[  269.679461][ T5907] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  270.008580][ T5907] usb 1-1: Using ep0 maxpacket: 32
[  270.012193][ T5907] usb 1-1: config 0 interface 0 has no altsetting 0
[  270.016586][ T5907] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  270.019576][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.022317][ T5907] usb 1-1: Product: syz
[  270.023739][ T5907] usb 1-1: Manufacturer: syz
[  270.025202][ T5907] usb 1-1: SerialNumber: syz
[  270.028253][ T5907] usb 1-1: config 0 descriptor??
[  270.031741][ T5907] gs_usb 1-1:0.0: Required endpoints not found
[  270.260213][T11804] usb 1-1: USB disconnect, device number 24
[  270.413091][T11811] loop5: detected capacity change from 0 to 1024
[  270.606949][T11813] loop4: detected capacity change from 0 to 32768
[  270.627181][T11813] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  270.634805][T11813] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  270.645127][   T33] audit: type=1800 audit(1755449981.570:133): pid=11813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2210" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  270.656627][   T33] audit: type=1804 audit(1755449981.580:134): pid=11813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2210" name="/newroot/349/bus/file1" dev="loop4" ino=17058 res=1 errno=0
[  271.468342][T11826] loop0: detected capacity change from 0 to 512
[  271.476502][T11826] EXT4-fs: Ignoring removed oldalloc option
[  271.484611][T11826] EXT4-fs: Ignoring removed orlov option
[  271.492590][T11826] EXT4-fs: Invalid want_extra_isize 8
[  271.897389][ T8793] ocfs2: Unmounting device (7,4) on (node local)
[  271.925854][T11844] loop0: detected capacity change from 0 to 1024
[  271.949993][T11844] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  271.953036][T11844] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  271.968840][T11844] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #32: comm syz.0.2224: iget: special inode unallocated
[  271.978617][T11844] EXT4-fs (loop0): Remounting filesystem read-only
[  271.981474][T11844] EXT4-fs (loop0): no journal found
[  271.983347][T11844] EXT4-fs (loop0): can't get journal size
[  271.999893][T11844] EXT4-fs (loop0): filesystem is read-only
[  272.002576][T11844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  272.041321][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.091017][T11842] loop5: detected capacity change from 0 to 32768
[  272.094046][T11842] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1281 transid 8 /dev/loop5 (7:5) scanned by syz.5.2221 (11842)
[  272.301305][T11865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2233'.
[  272.325479][T11851] loop4: detected capacity change from 0 to 32768
[  272.339889][T11851] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2226 (11851)
[  272.347810][T11851] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  272.352721][T11851] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  272.355845][T11851] BTRFS info (device loop4): using free-space-tree
[  272.376538][T11875] loop0: detected capacity change from 0 to 256
[  272.381133][T11875] exfat: Deprecated parameter 'utf8'
[  272.383904][T11875] exfat: Deprecated parameter 'utf8'
[  272.395994][T11875] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d)
[  272.420920][T11851] kernel write not supported for file /794/attr/exec (pid: 11851 comm: syz.4.2226)
[  272.444208][ T8793] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  272.578500][  T791] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  272.729050][  T791] usb 6-1: Using ep0 maxpacket: 16
[  272.735455][  T791] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  272.739197][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.747682][  T791] usb 6-1: config 0 descriptor??
[  272.751999][  T791] gspca_main: sonixj-2.14.0 probing 0471:0327
[  274.179058][  T791] gspca_sonixj: i2c_w8 err -71
[  274.199272][T11918] loop4: detected capacity change from 0 to 32768
[  274.199492][  T791] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  274.206162][  T791] usb 6-1: USB disconnect, device number 10
[  274.210499][T11918] (syz.4.2251,11918,0):ocfs2_load_local_alloc:320 ERROR: Local alloc size is invalid (la_size = 33328)
[  274.214940][T11918] (syz.4.2251,11918,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[  274.218048][T11918] (syz.4.2251,11918,0):ocfs2_check_volume:2404 ERROR: status = -22
[  274.222111][T11918] (syz.4.2251,11918,0):ocfs2_check_volume:2432 ERROR: status = -22
[  274.225127][T11918] (syz.4.2251,11918,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  274.234355][T11918] (syz.4.2251,11918,0):ocfs2_fill_super:1177 ERROR: status = -22
[  274.658265][T11926] loop4: detected capacity change from 0 to 40427
[  274.661931][T11926] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  274.664890][T11926] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  274.671257][T11926] F2FS-fs (loop4): invalid crc value
[  274.736886][T11926] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  274.742256][T11926] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  274.744901][T11926] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  275.008325][T11946] loop5: detected capacity change from 0 to 512
[  275.620346][T11955] loop0: detected capacity change from 0 to 1764
[  275.777798][T11961] loop0: detected capacity change from 0 to 4096
[  275.788330][T11961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.802799][T11961] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  275.827178][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.230663][T11971] loop4: detected capacity change from 0 to 40427
[  276.233074][T11978] loop5: detected capacity change from 0 to 256
[  276.234564][T11971] F2FS-fs (loop4): build fault injection rate: 14
[  276.239212][T11971] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  276.244591][T11971] F2FS-fs (loop4): invalid crc value
[  276.250972][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  276.257042][T11978] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  276.260568][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  276.282107][ T5872] tipc: Subscription rejected, illegal request
[  276.306399][T11971] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  276.310200][T11971] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  276.314821][T11971] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  276.322404][T11971] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  276.327042][   T33] audit: type=1800 audit(1755449987.250:135): pid=11971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2272" name="file1" dev="loop4" ino=10 res=0 errno=0
[  276.335310][T11971] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_symlink+0x23a/0x880
[  276.359471][ T8793] syz-executor: attempt to access beyond end of device
[  276.359471][ T8793] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  276.368778][ T8793] CPU: 0 UID: 0 PID: 8793 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  276.368796][ T8793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.368804][ T8793] Call Trace:
[  276.368810][ T8793]  <TASK>
[  276.368816][ T8793]  dump_stack_lvl+0x189/0x250
[  276.368837][ T8793]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.368852][ T8793]  ? __pfx_queue_work_on+0x10/0x10
[  276.368864][ T8793]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  276.368881][ T8793]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  276.368905][ T8793]  f2fs_handle_critical_error+0x37c/0x540
[  276.368927][ T8793]  f2fs_write_end_io+0x886/0xb60
[  276.368954][ T8793]  __submit_merged_bio+0x27a/0x6a0
[  276.368976][ T8793]  __submit_merged_write_cond+0x255/0x530
[  276.368998][ T8793]  f2fs_write_data_pages+0x261d/0x3000
[  276.369070][ T8793]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.369086][ T8793]  ? is_bpf_text_address+0x26/0x2b0
[  276.369114][ T8793]  ? arch_stack_walk+0xfc/0x150
[  276.369153][ T8793]  ? __lock_acquire+0xab9/0xd20
[  276.369186][ T8793]  ? __lock_acquire+0xab9/0xd20
[  276.369209][ T8793]  ? do_raw_spin_lock+0x121/0x290
[  276.369233][ T8793]  ? do_raw_spin_unlock+0x4d/0x240
[  276.369248][ T8793]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.369266][ T8793]  do_writepages+0x32e/0x550
[  276.369292][ T8793]  ? do_raw_spin_unlock+0x4d/0x240
[  276.369310][ T8793]  filemap_fdatawrite+0x199/0x240
[  276.369329][ T8793]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  276.369380][ T8793]  ? do_raw_spin_unlock+0x4d/0x240
[  276.369398][ T8793]  f2fs_sync_dirty_inodes+0x31f/0x830
[  276.369423][ T8793]  f2fs_write_checkpoint+0x95a/0x1df0
[  276.369454][ T8793]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  276.369502][ T8793]  ? kill_f2fs_super+0x298/0x6c0
[  276.369519][ T8793]  kill_f2fs_super+0x2c3/0x6c0
[  276.369536][ T8793]  ? __pfx_kill_f2fs_super+0x10/0x10
[  276.369546][ T8793]  ? radix_tree_delete_item+0x2b6/0x400
[  276.369569][ T8793]  ? shrinker_free+0x2ce/0x3e0
[  276.369586][ T8793]  deactivate_locked_super+0xbc/0x130
[  276.369603][ T8793]  cleanup_mnt+0x425/0x4c0
[  276.369617][ T8793]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.369635][ T8793]  task_work_run+0x1d4/0x260
[  276.369655][ T8793]  ? __pfx_task_work_run+0x10/0x10
[  276.369669][ T8793]  ? __x64_sys_umount+0x122/0x160
[  276.369690][ T8793]  ? exit_to_user_mode_loop+0x40/0x110
[  276.369711][ T8793]  exit_to_user_mode_loop+0xec/0x110
[  276.369728][ T8793]  do_syscall_64+0x2bd/0x3b0
[  276.369743][ T8793]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.369759][ T8793]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.369777][ T8793]  ? exc_page_fault+0x9f/0xf0
[  276.369794][ T8793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.369806][ T8793] RIP: 0033:0x7f038fb8ff17
[  276.369818][ T8793] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  276.369829][ T8793] RSP: 002b:00007ffe6c7a5fa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  276.369842][ T8793] RAX: 0000000000000000 RBX: 00007f038fc11c05 RCX: 00007f038fb8ff17
[  276.369851][ T8793] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6c7a6060
[  276.369858][ T8793] RBP: 00007ffe6c7a6060 R08: 0000000000000000 R09: 0000000000000000
[  276.369866][ T8793] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6c7a70f0
[  276.369874][ T8793] R13: 00007f038fc11c05 R14: 00000000000436fd R15: 00007ffe6c7a7130
[  276.369896][ T8793]  </TASK>
[  276.369902][ T8793] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  276.875309][T12001] loop4: detected capacity change from 0 to 2048
[  276.880802][T12001] EXT4-fs: Ignoring removed mblk_io_submit option
[  276.892524][T12001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.910024][T12001] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2283: bg 0: block 234: padding at end of block bitmap is not set
[  276.916815][T12001] EXT4-fs (loop4): Remounting filesystem read-only
[  276.940692][ T8793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.218534][ T3147] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  277.371414][ T3147] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  277.374820][ T3147] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.379367][ T3147] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  277.382678][ T3147] usb 5-1: config 1 has no interface number 1
[  277.385115][ T3147] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  277.389991][ T3147] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  277.396884][ T3147] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  277.400414][ T3147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.403385][ T3147] usb 5-1: Product: syz
[  277.404976][ T3147] usb 5-1: Manufacturer: syz
[  277.406823][ T3147] usb 5-1: SerialNumber: syz
[  277.618702][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2288'.
[  277.619809][ T3147] usb 5-1: No endpoint at altset 1, falling back to MIDI 1.0
[  277.622369][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2288'.
[  277.624525][ T3147] usb 5-1: MIDIStreaming interface descriptor not found
[  277.659844][ T3147] usb 5-1: USB disconnect, device number 15
[  277.929073][   T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  278.089353][   T24] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  278.093575][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  278.096945][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  278.101742][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  278.105498][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  278.109068][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  278.113288][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  278.117114][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  278.120662][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  278.124921][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  278.129528][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  278.133044][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  278.137092][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  278.150462][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  278.153870][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  278.158360][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  278.172796][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  278.176365][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  278.180887][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  278.185085][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  278.188648][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  278.193053][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  278.198702][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  278.202422][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  278.206897][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  278.211755][   T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  278.215369][   T24] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  278.218979][   T24] usb 6-1: Product: syz
[  278.220875][   T24] usb 6-1: Manufacturer: syz
[  278.222747][   T24] usb 6-1: SerialNumber: syz
[  278.226708][   T24] usb 6-1: config 0 descriptor??
[  278.236653][   T24] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  278.321040][T12022] loop4: detected capacity change from 0 to 512
[  278.333001][T12022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.337769][T12022] ext4 filesystem being mounted at /379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  278.367318][T12022] EXT4-fs error (device loop4): ext4_xattr_block_find:1869: inode #15: comm syz.4.2292: corrupted xattr block 33: invalid ea_ino
[  278.376207][T12022] EXT4-fs (loop4): Remounting filesystem read-only
[  278.401385][ T8793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.407310][   T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  278.412495][   T52] Quota error (device loop4): write_blk: dquota write failed
[  278.415617][   T52] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[  278.419704][   T52] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  278.423693][   T52] Quota error (device loop4): write_blk: dquota write failed
[  278.426500][   T52] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[  278.430606][   T52] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  278.434454][   T52] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  278.700528][T12036] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  279.355864][T12053] loop0: detected capacity change from 0 to 32768
[  279.359561][T12053] xfs: Unknown parameter 'smackfstransmute'
[  279.938092][T12061] loop4: detected capacity change from 0 to 512
[  279.944614][T12061] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  279.951428][T12061] EXT4-fs (loop4): invalid journal inode
[  279.953999][T12061] EXT4-fs (loop4): can't get journal size
[  279.962319][T12061] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[  279.966326][T12061] System zones: 1-12, 13-13
[  279.976726][T12061] EXT4-fs (loop4): 1 truncate cleaned up
[  279.982036][T12061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.029782][ T8793] EXT4-fs error (device loop4): __ext4_iget:5464: inode #11: block 1828716567: comm syz-executor: invalid block
[  280.041606][ T8793] EXT4-fs error (device loop4): __ext4_iget:5464: inode #11: block 1828716567: comm syz-executor: invalid block
[  280.323285][ T8793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.377272][ T5714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.495510][ T5714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.584827][ T5714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.668562][ T5714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.696008][   T46] usb 6-1: USB disconnect, device number 11
[  280.709684][   T46] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  280.783476][ T5714] bridge_slave_1: left allmulticast mode
[  280.787553][ T5714] bridge_slave_1: left promiscuous mode
[  280.791021][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.801745][ T5714] bridge_slave_0: left allmulticast mode
[  280.803650][ T5714] bridge_slave_0: left promiscuous mode
[  280.805510][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.895483][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  280.903892][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  280.915143][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  280.942114][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  280.951456][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  280.969961][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  280.985430][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  280.988704][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  280.996876][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  281.001621][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  281.071477][   T46] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  281.170447][T12077] loop0: detected capacity change from 0 to 32768
[  281.205512][T12077] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  281.256954][   T46] usb 6-1: Using ep0 maxpacket: 32
[  281.274511][   T46] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  281.277550][   T46] usb 6-1: config 0 has no interface number 0
[  281.318315][   T46] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.39
[  281.335040][   T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.338106][   T46] usb 6-1: Product: syz
[  281.339915][   T46] usb 6-1: Manufacturer: syz
[  281.341759][   T46] usb 6-1: SerialNumber: syz
[  281.345968][   T46] usb 6-1: config 0 descriptor??
[  281.354223][ T5714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  281.354813][   T46] smsc95xx v2.0.0
[  281.361594][ T5714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.366628][ T5714] bond0 (unregistering): Released all slaves
[  281.415533][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[  281.744219][ T5714] hsr_slave_0: left promiscuous mode
[  281.747196][ T5714] hsr_slave_1: left promiscuous mode
[  281.760443][   T46] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  281.763757][   T46] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  281.789020][ T5714] veth1_macvtap: left promiscuous mode
[  281.790992][ T5714] veth0_macvtap: left promiscuous mode
[  281.793230][ T5714] veth1_vlan: left promiscuous mode
[  281.794982][ T5714] veth0_vlan: left promiscuous mode
[  281.836735][T12084] loop0: detected capacity change from 0 to 32768
[  281.840179][T12084] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2318 (12084)
[  281.846056][T12084] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  281.850233][T12084] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  281.853371][T12084] BTRFS info (device loop0): using free-space-tree
[  281.976194][ T5845] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  282.372140][   T46] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  282.375779][   T46] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  282.384228][   T46] usb 6-1: USB disconnect, device number 12
[  282.556431][ T5714] team0 (unregistering): Port device team_slave_1 removed
[  282.593959][ T5714] team0 (unregistering): Port device team_slave_0 removed
[  283.018934][ T5847] Bluetooth: hci2: command tx timeout
[  283.035560][T12075] chnl_net:caif_netlink_parms(): no params data found
[  283.166407][T12075] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.170624][T12075] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.183571][T12075] bridge_slave_0: entered allmulticast mode
[  283.186261][T12075] bridge_slave_0: entered promiscuous mode
[  283.199640][T12075] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.201963][T12075] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.206717][T12075] bridge_slave_1: entered allmulticast mode
[  283.210616][T12075] bridge_slave_1: entered promiscuous mode
[  283.283221][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.304243][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.319911][ T5714] IPVS: stop unused estimator thread 0...
[  283.350973][T12075] team0: Port device team_slave_0 added
[  283.354245][T12075] team0: Port device team_slave_1 added
[  283.394795][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.397313][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.409185][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.425382][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.427990][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.433811][T12140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.440351][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.492657][T12144] loop5: detected capacity change from 0 to 128
[  283.494770][T12075] hsr_slave_0: entered promiscuous mode
[  283.501404][T12075] hsr_slave_1: entered promiscuous mode
[  283.503647][T12075] debugfs: 'hsr0' already exists in 'hsr'
[  283.505716][T12146] loop0: detected capacity change from 0 to 16
[  283.507678][T12146] erofs (device loop0): mounted with root inode @ nid 36.
[  283.508095][T12075] Cannot create hsr debugfs directory
[  283.516844][   T33] audit: type=1800 audit(1755449994.440:136): pid=12144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2337" name="file2" dev="loop5" ino=1048675 res=0 errno=0
[  283.518000][T12144] syz.5.2337: attempt to access beyond end of device
[  283.518000][T12144] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128
[  283.759930][T12075] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  283.764415][T12075] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  283.769821][T12075] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  283.778015][T12075] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  284.205531][T12075] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.222435][T12075] 8021q: adding VLAN 0 to HW filter on device team0
[  284.230436][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.232750][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.240816][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.243178][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.423566][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.466737][T12171] loop0: detected capacity change from 0 to 32768
[  284.516597][T12171] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.543648][T12171] XFS (loop0): Ending clean mount
[  284.608159][T12187] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2345'.
[  284.719747][T12075] veth0_vlan: entered promiscuous mode
[  284.736200][ T5845] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.747368][T12075] veth1_vlan: entered promiscuous mode
[  284.785849][T12075] veth0_macvtap: entered promiscuous mode
[  284.800921][T12075] veth1_macvtap: entered promiscuous mode
[  284.835863][T12075] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.861325][T12075] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.924167][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.927154][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.944612][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.947954][ T5714] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.031023][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.034026][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.065870][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.069862][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.099291][ T5847] Bluetooth: hci2: command tx timeout
[  285.291221][T12206] loop5: detected capacity change from 0 to 32768
[  285.293859][T12206] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  285.383358][T12224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.406371][T12226] loop0: detected capacity change from 0 to 16
[  285.409651][T12226] erofs (device loop0): mounted with root inode @ nid 36.
[  285.656273][T12245] loop6: detected capacity change from 0 to 512
[  285.698816][ T5880] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  285.699281][T12245] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  285.705053][T12245] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  285.708889][T12245] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2371: Failed to acquire dquot type 1
[  285.716999][T12245] EXT4-fs (loop6): 1 truncate cleaned up
[  285.720945][T12245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.724794][T12245] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.743054][T12075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.842686][T12243] loop0: detected capacity change from 0 to 32768
[  285.845861][T12243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2370 (12243)
[  285.848558][ T5880] usb 6-1: Using ep0 maxpacket: 32
[  285.853681][ T5880] usb 6-1: config 4 has an invalid interface number: 8 but max is 0
[  285.855552][T12243] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  285.856770][ T5880] usb 6-1: config 4 has no interface number 0
[  285.861897][T12243] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  285.861962][T12243] BTRFS info (device loop0): using free-space-tree
[  285.871027][ T5880] usb 6-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  285.874945][ T5880] usb 6-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0
[  285.879043][ T5880] usb 6-1: config 4 interface 8 has no altsetting 0
[  285.884116][ T5880] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65
[  285.887853][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.891931][ T5880] usb 6-1: Product: syz
[  285.893765][ T5880] usb 6-1: Manufacturer: syz
[  285.895769][ T5880] usb 6-1: SerialNumber: syz
[  285.937469][ T5872] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  285.955732][ T5845] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  286.122753][ T5880] opticon 6-1:4.8: opticon converter detected
[  286.127594][ T5880] usb 6-1: opticon converter now attached to ttyUSB0
[  286.134330][ T5880] usb 6-1: USB disconnect, device number 13
[  286.144662][ T5880] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  286.149286][ T5880] opticon 6-1:4.8: device disconnected
[  286.221302][T12269] loop0: detected capacity change from 0 to 4096
[  286.225191][T12269] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  286.233079][T12269] ntfs3(loop0): try to read out of volume at offset 0xffffffff0000
[  286.235569][T12269] ntfs3(loop0): Failed to initialize $Bitmap (-5).
[  286.943691][T12292] evm: overlay not supported
[  287.178607][ T5847] Bluetooth: hci2: command tx timeout
[  287.267194][T12289] loop5: detected capacity change from 0 to 32768
[  287.272070][T12289] bcachefs (/dev/loop5): error validating superblock: Invalid option errors: too big (max 4)
[  287.276309][T12289] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big
[  287.360343][T12296] loop6: detected capacity change from 0 to 512
[  287.363727][T12296] EXT4-fs: Ignoring removed bh option
[  287.366889][T12296] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  287.375475][T12296] EXT4-fs (loop6): orphan cleanup on readonly fs
[  287.378154][T12296] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.2387: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  287.386064][T12296] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.2387: Bad quota inode: 3, type: 0
[  287.394245][T12296] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  287.400853][T12296] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  287.404855][T12296] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  287.410681][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2388'.
[  287.435087][T12075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.828167][T12311] loop6: detected capacity change from 0 to 512
[  287.839053][T12311] EXT4-fs: Ignoring removed bh option
[  287.863733][T12311] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  287.870135][T12311] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  287.902231][T12311] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  287.918249][T12311] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  287.955264][T12311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.003232][T12311] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  288.031460][T12075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.421999][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2401'.
[  288.591960][T12331] loop5: detected capacity change from 0 to 32768
[  288.602367][   T33] audit: type=1800 audit(1755449999.530:137): pid=12331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2402" name="file1" dev="loop5" ino=4 res=0 errno=0
[  288.790624][T12341] loop6: detected capacity change from 0 to 32768
[  288.914224][T12331] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root
[  288.914224][T12331] 
[  288.922845][T12331] ERROR: (device loop5): remounting filesystem as read-only
[  289.258572][ T5847] Bluetooth: hci2: command tx timeout
[  290.180549][T12369] loop6: detected capacity change from 0 to 512
[  290.184492][T12369] EXT4-fs: Ignoring removed mblk_io_submit option
[  290.193880][T12369] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  290.207643][T12369] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2419: iget: bad extended attribute block 1
[  290.214721][T12369] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2419: couldn't read orphan inode 15 (err -117)
[  290.221460][T12369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.254576][T12369] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.289055][   T33] audit: type=1326 audit(1755450001.220:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12372 comm="syz.5.2420" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1d78ebe9 code=0x0
[  290.599056][  T791] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  290.759818][  T791] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  290.763514][  T791] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  290.766522][  T791] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  290.770599][  T791] usb 7-1: config 0 interface 0 has no altsetting 0
[  290.773739][  T791] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  290.776829][  T791] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  290.780436][  T791] usb 7-1: config 0 interface 0 has no altsetting 0
[  290.783552][  T791] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  290.787180][  T791] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  290.792241][  T791] usb 7-1: config 0 interface 0 has no altsetting 0
[  290.796106][  T791] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  290.799426][  T791] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  290.803252][  T791] usb 7-1: config 0 interface 0 has no altsetting 0
[  290.806932][  T791] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  290.810011][  T791] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  290.813601][  T791] usb 7-1: config 0 interface 0 has no altsetting 0
[  290.816653][  T791] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  290.821061][  T791] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  290.824980][  T791] usb 7-1: config 0 interface 0 has no altsetting 0
[  290.829025][  T791] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  290.832181][  T791] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  290.835937][  T791] usb 7-1: config 0 interface 0 has no altsetting 0
[  290.839109][  T791] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  290.842285][  T791] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  290.845660][  T791] usb 7-1: config 0 interface 0 has no altsetting 0
[  290.851056][  T791] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  290.854702][  T791] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  290.857294][  T791] usb 7-1: Product: syz
[  290.858828][  T791] usb 7-1: Manufacturer: syz
[  290.860290][  T791] usb 7-1: SerialNumber: syz
[  290.863112][  T791] usb 7-1: config 0 descriptor??
[  290.867407][  T791] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  291.079213][ T5907] usb 7-1: USB disconnect, device number 2
[  291.097845][ T5907] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  291.359764][  T791] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  291.510238][  T791] usb 6-1: config 0 has an invalid interface number: 113 but max is 0
[  291.513491][  T791] usb 6-1: config 0 has no interface number 0
[  291.516007][  T791] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  291.520406][  T791] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  291.524162][  T791] usb 6-1: config 0 interface 113 has no altsetting 0
[  291.529507][  T791] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  291.532980][  T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.536066][  T791] usb 6-1: Product: syz
[  291.537816][  T791] usb 6-1: Manufacturer: syz
[  291.540037][  T791] usb 6-1: SerialNumber: syz
[  291.543904][  T791] usb 6-1: config 0 descriptor??
[  291.547595][  T791] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  291.750959][  T791] usb 6-1: USB disconnect, device number 14
[  291.913691][T12402] loop6: detected capacity change from 0 to 512
[  291.917016][T12402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  291.943292][T12402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.947268][T12402] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.979353][T12075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.128902][T12415] loop6: detected capacity change from 0 to 512
[  292.134616][T12415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.165246][T12075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.307830][T12426] loop6: detected capacity change from 0 to 128
[  292.310064][T12424] loop5: detected capacity change from 0 to 4096
[  292.317442][T12426] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  292.322301][T12426] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  292.713938][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2452'.
[  292.716802][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2452'.
[  292.811165][T12462] loop6: detected capacity change from 0 to 512
[  292.813728][T12462] EXT4-fs: inline encryption not supported
[  292.816060][T12462] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  292.826185][T12462] EXT4-fs (loop6): 1 truncate cleaned up
[  292.829370][T12462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.850817][T12075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.982394][T12472] loop6: detected capacity change from 0 to 2048
[  292.987373][T12472] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  293.067940][T12476] loop6: detected capacity change from 0 to 2048
[  293.073093][T12476] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  293.459457][T12508] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  294.411881][T12538] random: crng reseeded on system resumption
[  294.919413][  T791] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  295.352769][   T33] audit: type=1400 audit(1755450006.090:139): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12551 comm="syz.6.2494"
[  295.380423][  T791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.383682][  T791] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  295.386574][  T791] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  295.389917][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.395442][  T791] usb 6-1: config 0 descriptor??
[  295.400591][  T791] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  295.403230][  T791] dvb-usb: bulk message failed: -22 (3/0)
[  295.411337][  T791] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  295.415272][  T791] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  295.418053][  T791] usb 6-1: media controller created
[  295.421919][  T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  295.431922][  T791] dvb-usb: bulk message failed: -22 (6/0)
[  295.435679][  T791] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  295.442240][  T791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19
[  295.451012][  T791] dvb-usb: schedule remote query interval to 150 msecs.
[  295.453883][  T791] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  295.604668][  T791] usb 6-1: USB disconnect, device number 15
[  295.618621][  T791] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  296.228620][ T5880] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  296.384340][ T5880] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  296.387809][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.389056][  T791] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  296.391252][ T5880] usb 7-1: Product: syz
[  296.395235][ T5880] usb 7-1: Manufacturer: syz
[  296.397216][ T5880] usb 7-1: SerialNumber: syz
[  296.401343][ T5880] usb 7-1: config 0 descriptor??
[  296.406189][ T5880] gspca_main: sunplus-2.14.0 probing 055f:c230
[  296.541219][  T791] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  296.544800][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.550778][  T791] usb 6-1: config 0 descriptor??
[  296.554391][  T791] cp210x 6-1:0.0: cp210x converter detected
[  296.811451][ T5880] gspca_sunplus: reg_r err -71
[  296.813033][ T5880] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  296.816816][ T5880] usb 7-1: USB disconnect, device number 3
[  296.960876][  T791] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  297.164740][  T791] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71
[  297.167117][  T791] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  297.170440][  T791] usb 6-1: cp210x converter now attached to ttyUSB0
[  297.173737][  T791] usb 6-1: USB disconnect, device number 16
[  297.177115][  T791] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  297.179829][  T791] cp210x 6-1:0.0: device disconnected
[  297.462433][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2504'.
[  297.831930][T12593] loop0: detected capacity change from 0 to 512
[  297.859642][T12593] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  297.866754][T12593] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  297.878567][T12593] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2511: Failed to acquire dquot type 1
[  297.900739][T12593] EXT4-fs (loop0): 1 truncate cleaned up
[  297.903558][T12593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.908705][T12593] ext4 filesystem being mounted at /885/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.946324][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.983810][T12609] loop0: detected capacity change from 0 to 128
[  297.999961][T12609] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  298.004244][T12609] ext4 filesystem being mounted at /886/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.017069][T12609] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.2517: No space for directory leaf checksum. Please run e2fsck -D.
[  298.023117][T12609] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.2517: Directory block failed checksum
[  298.049345][ T5845] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  298.304941][T12625] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2521'.
[  298.330285][  T791] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  298.508578][  T791] usb 7-1: Using ep0 maxpacket: 32
[  298.515656][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.528529][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.538609][  T791] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  298.543514][  T791] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  298.547047][  T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.552331][  T791] usb 7-1: config 0 descriptor??
[  298.710139][T12627] loop5: detected capacity change from 0 to 32768
[  298.764708][T12627] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  298.764803][T12627]   allowing incompatible features above 0.0: (unknown version)
[  298.764815][T12627]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  298.780158][T12627] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  298.783122][T12627] bcachefs (loop5): initializing new filesystem
[  298.792359][T12627] bcachefs (loop5): going read-write
[  298.799775][T12627] bcachefs (loop5): marking superblocks
[  298.814787][T12627] bcachefs (loop5): initializing freespace
[  298.825864][T12627] bcachefs (loop5): done initializing freespace
[  298.831814][T12627] bcachefs (loop5): reading snapshots table
[  298.834059][T12627] bcachefs (loop5): reading snapshots done
[  298.871585][T12627] bcachefs (loop5): done starting filesystem
[  298.966884][  T791] hid (null): unknown global tag 0xc
[  298.969071][  T791] hid (null): invalid report_size 1853668426
[  298.971162][  T791] hid (null): report_id 56152 is invalid
[  298.972948][  T791] hid (null): invalid report_count 927939214
[  298.975596][  T791] hid (null): global environment stack underflow
[  298.983428][  T791] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000F/input/input20
[  298.995618][  T791] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.000F/input/input21
[  299.015961][  T791] kye 0003:0458:5011.000F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0
[  299.043749][T10463] bcachefs (loop5): shutting down
[  299.046295][T10463] bcachefs (loop5): going read-only
[  299.048367][T10463] bcachefs (loop5): finished waiting for writes to stop
[  299.056743][T10463] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  299.117881][T10463] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  299.129406][T10463] bcachefs (loop5): clean shutdown complete, journal seq 4
[  299.132840][T10463] bcachefs (loop5): marking filesystem clean
[  299.172703][   T24] usb 7-1: USB disconnect, device number 4
[  299.188015][T10463] bcachefs (loop5): shutdown complete
[  299.359816][T12652] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[  299.867370][T12680] netlink: 'syz.6.2547': attribute type 2 has an invalid length.
[  300.579122][T12695] loop5: detected capacity change from 0 to 32768
[  300.586466][T12695] (syz.5.2553,12695,1):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  300.586485][T12695] (syz.5.2553,12695,1):ocfs2_check_volume:2432 ERROR: status = -27
[  300.594812][T12695] (syz.5.2553,12695,1):ocfs2_mount_volume:1764 ERROR: status = -27
[  300.598875][T12695] (syz.5.2553,12695,1):ocfs2_fill_super:1177 ERROR: status = -27
[  300.998796][ T5907] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  301.158572][ T5880] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  301.164360][ T5907] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.168113][ T5907] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  301.173144][ T5907] usb 6-1: config 0 interface 0 has no altsetting 0
[  301.175635][ T5907] usb 6-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  301.184212][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.189775][ T5907] usb 6-1: config 0 descriptor??
[  301.320017][ T5880] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  301.322551][ T5880] usb 7-1: config 0 has no interface number 0
[  301.328227][ T5880] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  301.331384][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.334094][ T5880] usb 7-1: Product: syz
[  301.335889][ T5880] usb 7-1: Manufacturer: syz
[  301.337832][ T5880] usb 7-1: SerialNumber: syz
[  301.344132][ T5880] usb 7-1: config 0 descriptor??
[  301.551068][ T5880] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  301.555670][ T5880] usb 7-1: USB disconnect, device number 5
[  303.218849][T12720] loop0: detected capacity change from 0 to 32768
[  303.242985][T12720] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  303.253880][T12720] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  303.309912][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[  303.364328][T12733] netlink: 'syz.6.2569': attribute type 9 has an invalid length.
[  303.480435][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2571'.
[  303.726624][ T5907] usbhid 6-1:0.0: can't add hid device: -71
[  303.735837][ T5907] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  303.739898][ T5907] usb 6-1: USB disconnect, device number 17
[  303.755717][T12749] loop0: detected capacity change from 0 to 40427
[  303.758235][T12749] F2FS-fs: inline xattr size is out of range: 6 ~ 903
[  303.763166][T12751] loop5: detected capacity change from 0 to 256
[  303.791720][T12747] loop6: detected capacity change from 0 to 32768
[  303.795310][T12747] XFS (loop6): Invalid device [./bus], error=-2
[  304.659685][T12770] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.662273][T12770] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.746573][T12770] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.754911][T12770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.857892][ T5714] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.861527][ T5714] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.864473][ T5714] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.867529][ T5714] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.128097][T12797] loop6: detected capacity change from 0 to 1024
[  305.132466][T12797] EXT4-fs: Ignoring removed nobh option
[  305.134290][T12797] EXT4-fs: Ignoring removed bh option
[  305.153833][T12797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.419233][T12804] overlayfs: conflicting lowerdir path
[  305.538546][ T5907] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  305.690661][ T5907] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  305.694104][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.700063][ T5907] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  305.703759][ T5907] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  305.707089][ T5907] usb 6-1: Manufacturer: syz
[  305.711558][ T5907] usb 6-1: config 0 descriptor??
[  305.768576][ T5907] rc_core: IR keymap rc-hauppauge not found
[  305.770650][ T5907] Registered IR keymap rc-empty
[  305.773471][ T5907] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  305.779483][ T5907] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input22
[  305.921008][  T791] usb 6-1: USB disconnect, device number 18
[  306.030140][T12075] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.674689][T12812] loop5: detected capacity change from 0 to 32768
[  307.015598][T12825] netlink: 'syz.6.2608': attribute type 29 has an invalid length.
[  307.020074][T12825] netlink: 'syz.6.2608': attribute type 29 has an invalid length.
[  307.023578][T12825] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2608'.
[  307.826357][T12847] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.2618'.
[  307.830522][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2618'.
[  307.868758][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  308.022267][    T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  308.026350][    T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  308.033578][    T9] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  308.037243][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.042284][    T9] usb 7-1: Product: syz
[  308.044057][    T9] usb 7-1: Manufacturer: syz
[  308.045962][    T9] usb 7-1: SerialNumber: syz
[  308.050013][    T9] usb 7-1: config 0 descriptor??
[  308.052857][T12842] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  308.056046][T12842] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  308.263022][T12842] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  308.265622][T12842] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  308.671081][    T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  309.074643][    T9] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  309.081291][    T9] usb 7-1: USB disconnect, device number 6
[  309.918182][T12857] loop6: detected capacity change from 0 to 40427
[  309.926499][T12857] F2FS-fs (loop6): invalid crc value
[  310.361319][T12857] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  310.365099][T12857] F2FS-fs (loop6): Start checkpoint disabled!
[  310.378807][T12857] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  310.404196][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2624'.
[  310.427466][   T90] kworker/u9:3: attempt to access beyond end of device
[  310.427466][   T90] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  310.443717][   T90] CPU: 0 UID: 0 PID: 90 Comm: kworker/u9:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  310.443736][   T90] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  310.443743][   T90] Workqueue: writeback wb_workfn (flush-7:6)
[  310.443760][   T90] Call Trace:
[  310.443764][   T90]  <TASK>
[  310.443769][   T90]  dump_stack_lvl+0x189/0x250
[  310.443785][   T90]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.443799][   T90]  ? __pfx_queue_work_on+0x10/0x10
[  310.443808][   T90]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  310.443819][   T90]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  310.443835][   T90]  f2fs_handle_critical_error+0x37c/0x540
[  310.443851][   T90]  f2fs_write_end_io+0x886/0xb60
[  310.443890][   T90]  __submit_merged_bio+0x27a/0x6a0
[  310.443908][   T90]  __submit_merged_write_cond+0x255/0x530
[  310.443923][   T90]  f2fs_write_data_pages+0x261d/0x3000
[  310.443952][   T90]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  310.443971][   T90]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  310.443998][   T90]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  310.444010][   T90]  ? look_up_lock_class+0x74/0x170
[  310.444027][   T90]  ? trace_f2fs_writepages+0x7f/0x200
[  310.444038][   T90]  ? f2fs_write_node_pages+0x478/0x6e0
[  310.444051][   T90]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  310.444069][   T90]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  310.444081][   T90]  do_writepages+0x32e/0x550
[  310.444096][   T90]  ? reacquire_held_locks+0x127/0x1d0
[  310.444105][   T90]  ? writeback_sb_inodes+0x384/0x1010
[  310.444120][   T90]  __writeback_single_inode+0x145/0xff0
[  310.444130][   T90]  ? do_raw_spin_unlock+0x4d/0x240
[  310.444142][   T90]  writeback_sb_inodes+0x6c7/0x1010
[  310.444166][   T90]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  310.444199][   T90]  ? rcu_is_watching+0x15/0xb0
[  310.444214][   T90]  wb_writeback+0x43b/0xaf0
[  310.444229][   T90]  ? queue_io+0x301/0x590
[  310.444240][   T90]  ? __pfx_wb_writeback+0x10/0x10
[  310.444255][   T90]  ? _raw_spin_unlock_irq+0x23/0x50
[  310.444267][   T90]  wb_workfn+0x409/0xef0
[  310.444285][   T90]  ? __pfx_wb_workfn+0x10/0x10
[  310.444296][   T90]  ? __lock_acquire+0xab9/0xd20
[  310.444313][   T90]  ? process_scheduled_works+0x9ef/0x17b0
[  310.444326][   T90]  ? _raw_spin_unlock_irq+0x23/0x50
[  310.444335][   T90]  ? process_scheduled_works+0x9ef/0x17b0
[  310.444342][   T90]  ? process_scheduled_works+0x9ef/0x17b0
[  310.444351][   T90]  process_scheduled_works+0xae1/0x17b0
[  310.444375][   T90]  ? __pfx_process_scheduled_works+0x10/0x10
[  310.444392][   T90]  worker_thread+0x8a0/0xda0
[  310.444403][   T90]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  310.444417][   T90]  ? __kthread_parkme+0x7b/0x200
[  310.444432][   T90]  kthread+0x711/0x8a0
[  310.444443][   T90]  ? __pfx_worker_thread+0x10/0x10
[  310.444451][   T90]  ? __pfx_kthread+0x10/0x10
[  310.444462][   T90]  ? _raw_spin_unlock_irq+0x23/0x50
[  310.444470][   T90]  ? lockdep_hardirqs_on+0x9c/0x150
[  310.444479][   T90]  ? __pfx_kthread+0x10/0x10
[  310.444489][   T90]  ret_from_fork+0x3fc/0x770
[  310.444501][   T90]  ? __pfx_ret_from_fork+0x10/0x10
[  310.444513][   T90]  ? __switch_to_asm+0x39/0x70
[  310.444522][   T90]  ? __switch_to_asm+0x33/0x70
[  310.444531][   T90]  ? __pfx_kthread+0x10/0x10
[  310.444541][   T90]  ret_from_fork_asm+0x1a/0x30
[  310.444560][   T90]  </TASK>
[  310.444565][   T90] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  310.733710][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2626'.
[  311.007333][T12895] loop5: detected capacity change from 0 to 32768
[  311.018881][T12895] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  311.021979][T12895] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  311.043289][T12895] XFS (loop5): Ending clean mount
[  311.133502][T10463] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  311.193885][T12912] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  311.295945][T12914] loop0: detected capacity change from 0 to 8
[  311.402442][T12924] netlink: 'syz.0.2649': attribute type 30 has an invalid length.
[  311.544330][T12923] loop5: detected capacity change from 0 to 32768
[  311.547797][T12923] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2648 (12923)
[  311.553969][T12923] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  311.556971][T12923] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  311.560729][T12923] BTRFS info (device loop5): using free-space-tree
[  311.577169][T12923] BTRFS info (device loop5): rebuilding free space tree
[  311.646825][T10463] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  311.662880][T12928] loop0: detected capacity change from 0 to 32768
[  311.671589][T12928] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2651 (12928)
[  311.716420][T12928] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  311.723140][T12928] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  311.748653][T12928] BTRFS info (device loop0): using free-space-tree
[  311.924425][T12928] BTRFS info (device loop0): rebuilding free space tree
[  312.069263][ T5845] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  312.283359][T12974] loop0: detected capacity change from 0 to 512
[  312.286801][T12974] EXT4-fs: Ignoring removed nobh option
[  312.300413][T12974] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  312.304480][T12974] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[  312.308133][T12974] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.2656: casefold flag without casefold feature
[  312.314246][T12974] EXT4-fs (loop0): Remounting filesystem read-only
[  312.318323][T12974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.343121][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.121108][T13002] netlink: 'syz.6.2670': attribute type 83 has an invalid length.
[  313.222328][T13005] loop5: detected capacity change from 0 to 164
[  313.227141][T13005] iso9660: Bad value for 'dmode'
[  314.588580][ T5880] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  314.742798][ T5880] usb 6-1: config index 0 descriptor too short (expected 65069, got 45)
[  314.748575][ T5880] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  314.758817][ T5880] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.762369][ T5880] usb 6-1: config 0 has no interfaces?
[  314.764252][ T5880] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  314.774361][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.778182][ T5880] usb 6-1: config 0 descriptor??
[  315.006014][  T791] usb 6-1: USB disconnect, device number 19
[  315.809066][T13058] loop6: detected capacity change from 0 to 1024
[  315.813287][T13058] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  315.817790][T13058] EXT4-fs (loop6): group descriptors corrupted!
[  316.352165][T13086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2707'.
[  316.356146][T13086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2707'.
[  316.364302][T13086] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2707'.
[  316.470688][T13088] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2708'.
[  316.508826][T13088] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2708'.
[  316.512635][T13088] netlink: 19 bytes leftover after parsing attributes in process `syz.5.2708'.
[  316.812467][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2711'.
[  316.944608][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.947237][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  316.992320][T13101] loop5: detected capacity change from 0 to 256
[  317.001506][T13101] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  319.550496][T13130] loop5: detected capacity change from 0 to 512
[  319.556403][T13130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  319.707155][T13130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.720463][T13130] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.743401][T13135] loop0: detected capacity change from 0 to 1024
[  319.748253][T13135] EXT4-fs: Ignoring removed orlov option
[  319.754616][T13135] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  319.785332][T13135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.821719][T13135] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.2726: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  319.848703][T10463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.978570][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.522209][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2731'.
[  320.786140][T13168] random: crng reseeded on system resumption
[  320.894465][T13174] loop5: detected capacity change from 0 to 2048
[  320.901695][T13174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  320.994368][T13183] loop0: detected capacity change from 0 to 4096
[  321.006118][T13188] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  321.298686][ T5880] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  321.449668][ T5880] usb 7-1: too many configurations: 151, using maximum allowed: 8
[  321.471711][ T5880] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  321.480449][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  321.489391][ T5880] usb 7-1: Product: syz
[  321.492351][ T5880] usb 7-1: Manufacturer: syz
[  321.497057][ T5880] usb 7-1: SerialNumber: syz
[  321.509010][ T5880] usb 7-1: config 0 descriptor??
[  321.736364][ T5880] ims_pcu 7-1:0.0: Zero length descriptor
[  321.744357][ T5880] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22
[  321.756485][ T5880] usb 7-1: USB disconnect, device number 7
[  322.101093][T13204] loop5: detected capacity change from 0 to 32768
[  322.109021][   T33] audit: type=1800 audit(1755450033.040:140): pid=13204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2755" name="file1" dev="loop5" ino=7 res=0 errno=0
[  322.263224][T13204] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root
[  322.263224][T13204] 
[  322.268015][T13204] ERROR: (device loop5): remounting filesystem as read-only
[  322.442940][T13226] loop5: detected capacity change from 0 to 4096
[  322.449562][T13226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.487057][T10463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.573358][T13233] loop5: detected capacity change from 0 to 256
[  322.577417][T13233] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  322.582206][T13233] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  322.589640][T13233] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  322.617058][T13229] loop6: detected capacity change from 0 to 32768
[  322.664445][T13229] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  322.664472][T13229]   allowing incompatible features above 0.0: (unknown version)
[  322.664483][T13229]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  322.682623][T13229] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  322.685225][T13229] bcachefs (loop6): initializing new filesystem
[  322.696479][T13229] bcachefs (loop6): going read-write
[  322.704945][T13229] bcachefs (loop6): marking superblocks
[  322.733768][T13229] bcachefs (loop6): initializing freespace
[  322.743653][T13229] bcachefs (loop6): done initializing freespace
[  322.750615][T13229] bcachefs (loop6): reading snapshots table
[  322.752655][T13229] bcachefs (loop6): reading snapshots done
[  322.772628][T13229] bcachefs (loop6): done starting filesystem
[  322.836541][T12075] bcachefs (loop6): shutting down
[  322.838801][T12075] bcachefs (loop6): going read-only
[  322.840939][T12075] bcachefs (loop6): finished waiting for writes to stop
[  322.845116][T12075] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  322.882231][T12075] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  322.885947][T12075] bcachefs (loop6): clean shutdown complete, journal seq 4
[  322.889749][T12075] bcachefs (loop6): marking filesystem clean
[  322.901786][T12075] bcachefs (loop6): shutdown complete
[  322.948795][ T5880] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  323.101891][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.106466][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.112954][ T5880] usb 6-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  323.116528][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.123849][ T5880] usb 6-1: config 0 descriptor??
[  323.534307][ T5880] uclogic 0003:2179:0077.0010: interface is invalid, ignoring
[  323.734322][   T24] usb 6-1: USB disconnect, device number 20
[  324.098165][T13259] netlink: 'syz.6.2776': attribute type 1 has an invalid length.
[  324.287664][T13270] loop5: detected capacity change from 0 to 2048
[  324.292212][T13270] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  324.301191][T13270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  324.317712][   T33] audit: type=1800 audit(1755450035.240:141): pid=13270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2781" name="file1" dev="loop5" ino=1367 res=0 errno=0
[  324.325894][   T33] audit: type=1804 audit(1755450035.250:142): pid=13270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2781" name="/newroot/365/file0/file1" dev="loop5" ino=1367 res=1 errno=0
[  324.403296][T13275] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2780'.
[  324.557174][T13286] GUP no longer grows the stack in syz.6.2787 (13286): 200000005000-200000008000 (200000004000)
[  324.562444][T13286] CPU: 1 UID: 0 PID: 13286 Comm: syz.6.2787 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  324.562468][T13286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  324.562478][T13286] Call Trace:
[  324.562484][T13286]  <TASK>
[  324.562492][T13286]  dump_stack_lvl+0x189/0x250
[  324.562519][T13286]  ? __pfx_dump_stack_lvl+0x10/0x10
[  324.562537][T13286]  ? __pfx__printk+0x10/0x10
[  324.562555][T13286]  ? find_vma+0xe7/0x160
[  324.562617][T13286]  fixup_user_fault+0x661/0x720
[  324.562643][T13286]  fault_in_user_writeable+0x72/0xe0
[  324.562662][T13286]  futex_lock_pi+0x773/0xa90
[  324.562691][T13286]  ? __pfx_futex_lock_pi+0x10/0x10
[  324.562736][T13286]  ? __pfx_futex_wake_mark+0x10/0x10
[  324.562780][T13286]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  324.562810][T13286]  do_futex+0x292/0x420
[  324.562831][T13286]  ? __pfx_do_futex+0x10/0x10
[  324.562849][T13286]  ? __vm_munmap+0x301/0x3d0
[  324.562869][T13286]  __se_sys_futex+0x36f/0x400
[  324.562892][T13286]  ? __pfx___se_sys_futex+0x10/0x10
[  324.562909][T13286]  ? rcu_is_watching+0x15/0xb0
[  324.562926][T13286]  ? __x64_sys_futex+0x21/0xf0
[  324.562946][T13286]  do_syscall_64+0xfa/0x3b0
[  324.562969][T13286]  ? lockdep_hardirqs_on+0x9c/0x150
[  324.562987][T13286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.563003][T13286]  ? exc_page_fault+0x9f/0xf0
[  324.563025][T13286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.563041][T13286] RIP: 0033:0x7ffa46b8ebe9
[  324.563056][T13286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.563072][T13286] RSP: 002b:00007ffa479fd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  324.563090][T13286] RAX: ffffffffffffffda RBX: 00007ffa46db5fa0 RCX: 00007ffa46b8ebe9
[  324.563104][T13286] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  324.563113][T13286] RBP: 00007ffa46c11e19 R08: 0000000000000000 R09: 0000000000000000
[  324.563120][T13286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  324.563128][T13286] R13: 00007ffa46db6038 R14: 00007ffa46db5fa0 R15: 00007ffca8e9a848
[  324.563149][T13286]  </TASK>
[  325.199300][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2803'.
[  325.202925][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2803'.
[  325.293270][T13325] loop6: detected capacity change from 0 to 40427
[  325.297752][T13325] F2FS-fs (loop6): invalid crc value
[  325.333386][T13325] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  325.337663][T13325] F2FS-fs (loop6): Start checkpoint disabled!
[  325.343875][T13325] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  325.368727][   T33] audit: type=1800 audit(1755450036.290:143): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2806" name="file1" dev="loop6" ino=10 res=0 errno=0
[  325.471901][T13332] loop5: detected capacity change from 0 to 32768
[  325.482964][T13332] JBD2: Ignoring recovery information on journal
[  325.509637][T13332] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  325.520999][   T33] audit: type=1800 audit(1755450036.450:144): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2806" name="file1" dev="loop6" ino=10 res=0 errno=0
[  325.531283][T10463] ocfs2: Unmounting device (7,5) on (node local)
[  325.571950][T13325] syz.6.2806: attempt to access beyond end of device
[  325.571950][T13325] loop6: rw=2049, sector=77824, nr_sectors = 2568 limit=40427
[  325.632224][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2809'.
[  325.703752][   T26] kworker/u9:0: attempt to access beyond end of device
[  325.703752][   T26] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  325.711076][   T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  325.711093][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  325.711100][   T26] Workqueue: writeback wb_workfn (flush-7:6)
[  325.711118][   T26] Call Trace:
[  325.711122][   T26]  <TASK>
[  325.711127][   T26]  dump_stack_lvl+0x189/0x250
[  325.711143][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  325.711153][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  325.711162][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  325.711173][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  325.711206][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  325.711224][   T26]  f2fs_write_end_io+0x886/0xb60
[  325.711243][   T26]  __submit_merged_bio+0x27a/0x6a0
[  325.711257][   T26]  __submit_merged_write_cond+0x255/0x530
[  325.711271][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  325.711301][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  325.711319][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  325.711360][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  325.711381][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  325.711392][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  325.711410][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  325.711429][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  325.711440][   T26]  do_writepages+0x32e/0x550
[  325.711475][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  325.711487][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  325.711502][   T26]  __writeback_single_inode+0x145/0xff0
[  325.711512][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  325.711525][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  325.711549][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  325.711582][   T26]  ? rcu_is_watching+0x15/0xb0
[  325.711596][   T26]  wb_writeback+0x43b/0xaf0
[  325.711611][   T26]  ? queue_io+0x301/0x590
[  325.711623][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  325.711637][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  325.711649][   T26]  wb_workfn+0x409/0xef0
[  325.711666][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  325.711678][   T26]  ? __lock_acquire+0xab9/0xd20
[  325.711695][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  325.711706][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  325.711715][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  325.711722][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  325.711730][   T26]  process_scheduled_works+0xae1/0x17b0
[  325.711754][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  325.711771][   T26]  worker_thread+0x8a0/0xda0
[  325.711794][   T26]  kthread+0x711/0x8a0
[  325.711806][   T26]  ? __pfx_worker_thread+0x10/0x10
[  325.711813][   T26]  ? __pfx_kthread+0x10/0x10
[  325.711823][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  325.711832][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  325.711842][   T26]  ? __pfx_kthread+0x10/0x10
[  325.711852][   T26]  ret_from_fork+0x3fc/0x770
[  325.711863][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  325.711874][   T26]  ? __switch_to_asm+0x39/0x70
[  325.711885][   T26]  ? __switch_to_asm+0x33/0x70
[  325.711893][   T26]  ? __pfx_kthread+0x10/0x10
[  325.711903][   T26]  ret_from_fork_asm+0x1a/0x30
[  325.711921][   T26]  </TASK>
[  325.712729][   T26] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  326.016346][T13348] Bluetooth: hci0: invalid len left 7, exp >= 100
[  326.186776][T13357] Invalid option length (65058) for dns_resolver key
[  326.497347][T13362] loop5: detected capacity change from 0 to 64
[  326.585273][T13362] syz.5.2818: attempt to access beyond end of device
[  326.585273][T13362] loop5: rw=0, sector=130062, nr_sectors = 2 limit=64
[  326.592180][T13362] Buffer I/O error on dev loop5, logical block 65031, async page read
[  326.613014][T13362] Trying to free block not in datazone
[  326.615518][T13362] Trying to free block not in datazone
[  326.620799][T13362] Trying to free block not in datazone
[  326.626579][T13362] Trying to free block not in datazone
[  326.629352][T13362] Trying to free block not in datazone
[  327.245789][T13371] tipc: Can't bind to reserved service type 1
[  327.668600][  T791] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  327.733974][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2826'.
[  327.818973][  T791] usb 6-1: Using ep0 maxpacket: 32
[  327.825184][  T791] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  327.831566][  T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.834753][  T791] usb 6-1: Product: syz
[  327.836429][  T791] usb 6-1: Manufacturer: syz
[  327.837560][T13377] loop0: detected capacity change from 0 to 32768
[  327.838151][  T791] usb 6-1: SerialNumber: syz
[  327.842087][T13377] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2825 (13377)
[  327.853180][T13377] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  327.856421][T13377] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  327.860830][T13377] BTRFS info (device loop0): using free-space-tree
[  327.927695][ T5845] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  327.982094][   T33] audit: type=1326 audit(1755450038.900:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13399 comm="syz.6.2829" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa46b8ebe9 code=0x0
[  328.109625][  T791] visor 6-1:1.0: Handspring Visor / Palm OS converter detected
[  328.115138][  T791] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  328.144176][  T791] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  328.507839][T13420] loop0: detected capacity change from 0 to 16
[  328.514719][T13420] erofs (device loop0): mounted with root inode @ nid 36.
[  328.832561][T13422] erofs (device loop0): readahead error at folio 2 @ nid 89
[  328.842126][T13422] erofs (device loop0): readahead error at folio 1 @ nid 89
[  328.845273][T13422] erofs (device loop0): readahead error at folio 0 @ nid 89
[  328.850642][T13422] syz.0.2838: attempt to access beyond end of device
[  328.850642][T13422] loop0: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  328.857124][T13422] erofs (device loop0): read error -117 @ 0 of nid 89
[  328.959962][   T33] audit: type=1800 audit(1755450039.800:146): pid=13422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2838" name="file2" dev="loop0" ino=89 res=0 errno=0
[  329.704018][  T791] usb 6-1: USB disconnect, device number 21
[  329.726918][  T791] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  329.743199][  T791] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  329.744128][  T791] visor 6-1:1.0: device disconnected
[  330.465156][T13447] loop6: detected capacity change from 0 to 40427
[  330.469435][T13447] F2FS-fs: inline xattr size is out of range: 6 ~ 903
[  330.643283][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2854'.
[  330.646741][T13464] netlink: 'syz.0.2854': attribute type 6 has an invalid length.
[  330.819592][   T33] audit: type=1326 audit(1755450041.750:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13473 comm="syz.6.2859" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa46b8ebe9 code=0x0
[  331.029171][T13482] loop0: detected capacity change from 0 to 32768
[  331.032608][T13482] BTRFS warning: excessive commit interval 2147483647, use with care
[  331.036217][T13482] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2862 (13482)
[  331.042799][T13482] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  331.046080][T13482] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  331.049155][T13482] BTRFS info (device loop0): disk space caching is enabled
[  331.051378][T13482] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  331.142029][T13490] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.145233][T13490] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.176744][T13482] BTRFS info (device loop0): rebuilding free space tree
[  331.192348][T13482] BTRFS info (device loop0): disabling free space tree
[  331.195020][T13482] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  331.201105][T13482] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  331.226146][T13482] BTRFS info (device loop0 state M): max_inline set to 0
[  331.248276][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  331.675100][   T12] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.678205][   T12] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.690038][   T12] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.693076][   T12] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.747096][T13513] loop6: detected capacity change from 0 to 512
[  331.760179][T13513] EXT4-fs: Ignoring removed nomblk_io_submit option
[  331.767949][T13513] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  331.773667][T13513] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002]
[  331.777036][T13513] EXT4-fs (loop6): orphan cleanup on readonly fs
[  331.780186][T13513] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  331.783843][T13513] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  331.789527][T13513] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  331.798938][T13513] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2870: bg 0: block 40: padding at end of block bitmap is not set
[  331.805446][T13513] EXT4-fs (loop6): Remounting filesystem read-only
[  331.808038][T13513] EXT4-fs (loop6): 1 truncate cleaned up
[  331.811366][T13513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  331.899972][T13511] loop5: detected capacity change from 0 to 32768
[  331.905725][T13511] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2869 (13511)
[  331.913640][T13511] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  331.917585][T13511] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  331.922647][T13511] BTRFS info (device loop5): using free-space-tree
[  331.971037][   T33] audit: type=1800 audit(1755450042.900:148): pid=13511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2869" name="bus" dev="loop5" ino=263 res=0 errno=0
[  333.206106][T10463] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  333.521854][T13536] delete_channel: no stack
[  333.790167][T13475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.855062][ T5714] bridge_slave_1: left allmulticast mode
[  333.857251][ T5714] bridge_slave_1: left promiscuous mode
[  333.859966][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.865950][ T5714] bridge_slave_0: left allmulticast mode
[  333.868133][ T5714] bridge_slave_0: left promiscuous mode
[  333.870885][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.170420][T13552] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2883'.
[  334.387027][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  334.410687][ T5714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.411244][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  334.419300][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  334.422825][ T5714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.427004][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  334.427386][ T5714] bond0 (unregistering): Released all slaves
[  334.433032][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  334.590449][T13556] loop5: detected capacity change from 0 to 2048
[  334.594218][T13556] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  334.598157][T13556] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  334.601133][T13556] UDF-fs: Scanning with blocksize 512 failed
[  334.615402][T13556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  334.737140][T13553] chnl_net:caif_netlink_parms(): no params data found
[  334.831171][ T5714] hsr_slave_0: left promiscuous mode
[  334.834119][ T5714] hsr_slave_1: left promiscuous mode
[  334.841058][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  334.852248][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.839391][T13577] netlink: 'syz.0.2890': attribute type 4 has an invalid length.
[  335.893340][T13578] netlink: 'syz.0.2890': attribute type 4 has an invalid length.
[  335.950190][ T5714] team0 (unregistering): Port device team_slave_1 removed
[  336.011991][ T5714] team0 (unregistering): Port device team_slave_0 removed
[  336.466171][ T5236] Bluetooth: hci2: command tx timeout
[  336.799598][T13553] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.816310][T13553] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.819314][T13553] bridge_slave_0: entered allmulticast mode
[  336.822829][T13553] bridge_slave_0: entered promiscuous mode
[  336.829071][T13553] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.832944][T13553] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.836973][T13553] bridge_slave_1: entered allmulticast mode
[  336.840415][T13553] bridge_slave_1: entered promiscuous mode
[  336.914932][T13553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.921873][T13553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.008130][T13553] team0: Port device team_slave_0 added
[  337.021446][T13553] team0: Port device team_slave_1 added
[  337.106992][T13553] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.110461][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.124276][T13553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.136546][ T5714] ------------[ cut here ]------------
[  337.139297][ T5714] WARNING: CPU: 0 PID: 5714 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  337.143296][ T5714] Modules linked in:
[  337.145363][ T5714] CPU: 0 UID: 0 PID: 5714 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  337.151507][ T5714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  337.155179][ T5714] Workqueue: netns cleanup_net
[  337.157066][ T5714] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  337.159158][ T5714] Code: 05 90 df f7 4b 83 3c 2c 00 75 19 e8 a9 26 7c f7 49 81 fd f8 07 00 00 74 1d e8 9b 26 7c f7 49 83 c5 08 eb c9 e8 90 26 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  337.166125][ T5714] RSP: 0018:ffffc9000300f8b0 EFLAGS: 00010293
[  337.168061][ T5714] RAX: ffffffff8a438500 RBX: ffff888104cf8000 RCX: ffff888022b33980
[  337.170819][ T5714] RDX: 0000000000000000 RSI: ffffffff8d9b6e65 RDI: ffff888104cf8000
[  337.173340][ T5714] RBP: ffffc9000300f9b0 R08: ffffffff8fa37f37 R09: 1ffffffff1f46fe6
[  337.175830][ T5714] R10: dffffc0000000000 R11: fffffbfff1f46fe7 R12: ffff888104cf8000
[  337.178324][ T5714] R13: 0000000000000000 R14: ffff88810d8da440 R15: dffffc0000000000
[  337.180919][ T5714] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  337.183698][ T5714] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  337.185734][ T5714] CR2: 0000001b32421ff8 CR3: 000000002ecd2000 CR4: 00000000000006f0
[  337.188096][ T5714] Call Trace:
[  337.189212][ T5714]  <TASK>
[  337.190151][ T5714]  ops_undo_list+0x49a/0x990
[  337.191646][ T5714]  ? __pfx_ops_undo_list+0x10/0x10
[  337.193278][ T5714]  ? do_raw_spin_unlock+0x4d/0x240
[  337.195077][ T5714]  cleanup_net+0x4c5/0x800
[  337.196685][ T5714]  ? __pfx_cleanup_net+0x10/0x10
[  337.198743][ T5714]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.200838][ T5714]  ? process_scheduled_works+0x9ef/0x17b0
[  337.203115][ T5714]  ? process_scheduled_works+0x9ef/0x17b0
[  337.205435][ T5714]  process_scheduled_works+0xae1/0x17b0
[  337.207711][ T5714]  ? __pfx_process_scheduled_works+0x10/0x10
[  337.210489][ T5714]  worker_thread+0x8a0/0xda0
[  337.212374][ T5714]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  337.214956][ T5714]  ? __kthread_parkme+0x7b/0x200
[  337.217013][ T5714]  kthread+0x711/0x8a0
[  337.218826][ T5714]  ? __pfx_worker_thread+0x10/0x10
[  337.220916][ T5714]  ? __pfx_kthread+0x10/0x10
[  337.222833][ T5714]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.224918][ T5714]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.227023][ T5714]  ? __pfx_kthread+0x10/0x10
[  337.229197][ T5714]  ret_from_fork+0x3fc/0x770
[  337.229334][T13553] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.231256][ T5714]  ? __pfx_ret_from_fork+0x10/0x10
[  337.234041][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.235866][ T5714]  ? __switch_to_asm+0x39/0x70
[  337.246097][ T5714]  ? __switch_to_asm+0x33/0x70
[  337.247879][T13553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.248130][ T5714]  ? __pfx_kthread+0x10/0x10
[  337.253622][ T5714]  ret_from_fork_asm+0x1a/0x30
[  337.255565][ T5714]  </TASK>
[  337.256806][ T5714] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  337.259701][ T5714] CPU: 0 UID: 0 PID: 5714 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  337.264696][ T5714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  337.268476][ T5714] Workqueue: netns cleanup_net
[  337.270424][ T5714] Call Trace:
[  337.271717][ T5714]  <TASK>
[  337.272908][ T5714]  dump_stack_lvl+0x99/0x250
[  337.274931][ T5714]  ? __asan_memcpy+0x40/0x70
[  337.276783][ T5714]  ? __pfx_dump_stack_lvl+0x10/0x10
[  337.278838][ T5714]  ? __pfx__printk+0x10/0x10
[  337.280676][ T5714]  vpanic+0x281/0x750
[  337.282237][ T5714]  ? __pfx__printk+0x10/0x10
[  337.284053][ T5714]  ? __pfx_vpanic+0x10/0x10
[  337.285846][ T5714]  ? is_bpf_text_address+0x292/0x2b0
[  337.287687][ T5714]  panic+0xb9/0xc0
[  337.289186][ T5714]  ? __pfx_panic+0x10/0x10
[  337.290991][ T5714]  __warn+0x31b/0x4b0
[  337.292622][ T5714]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  337.294748][ T5714]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  337.296879][ T5714]  report_bug+0x2be/0x4f0
[  337.298609][ T5714]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  337.300733][ T5714]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  337.302857][ T5714]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  337.305020][ T5714]  handle_bug+0x84/0x160
[  337.306668][ T5714]  exc_invalid_op+0x1a/0x50
[  337.308728][ T5714]  asm_exc_invalid_op+0x1a/0x20
[  337.310704][ T5714] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  337.313076][ T5714] Code: 05 90 df f7 4b 83 3c 2c 00 75 19 e8 a9 26 7c f7 49 81 fd f8 07 00 00 74 1d e8 9b 26 7c f7 49 83 c5 08 eb c9 e8 90 26 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  337.320730][ T5714] RSP: 0018:ffffc9000300f8b0 EFLAGS: 00010293
[  337.323247][ T5714] RAX: ffffffff8a438500 RBX: ffff888104cf8000 RCX: ffff888022b33980
[  337.326521][ T5714] RDX: 0000000000000000 RSI: ffffffff8d9b6e65 RDI: ffff888104cf8000
[  337.329748][ T5714] RBP: ffffc9000300f9b0 R08: ffffffff8fa37f37 R09: 1ffffffff1f46fe6
[  337.332912][ T5714] R10: dffffc0000000000 R11: fffffbfff1f46fe7 R12: ffff888104cf8000
[  337.336094][ T5714] R13: 0000000000000000 R14: ffff88810d8da440 R15: dffffc0000000000
[  337.339272][ T5714]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  337.341487][ T5714]  ops_undo_list+0x49a/0x990
[  337.343427][ T5714]  ? __pfx_ops_undo_list+0x10/0x10
[  337.345494][ T5714]  ? do_raw_spin_unlock+0x4d/0x240
[  337.347622][ T5714]  cleanup_net+0x4c5/0x800
[  337.349468][ T5714]  ? __pfx_cleanup_net+0x10/0x10
[  337.351489][ T5714]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.353559][ T5714]  ? process_scheduled_works+0x9ef/0x17b0
[  337.355848][ T5714]  ? process_scheduled_works+0x9ef/0x17b0
[  337.358188][ T5714]  process_scheduled_works+0xae1/0x17b0
[  337.360447][ T5714]  ? __pfx_process_scheduled_works+0x10/0x10
[  337.362677][ T5714]  worker_thread+0x8a0/0xda0
[  337.364580][ T5714]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  337.367168][ T5714]  ? __kthread_parkme+0x7b/0x200
[  337.369220][ T5714]  kthread+0x711/0x8a0
[  337.370910][ T5714]  ? __pfx_worker_thread+0x10/0x10
[  337.372948][ T5714]  ? __pfx_kthread+0x10/0x10
[  337.374822][ T5714]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.376847][ T5714]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.378816][ T5714]  ? __pfx_kthread+0x10/0x10
[  337.380668][ T5714]  ret_from_fork+0x3fc/0x770
[  337.382514][ T5714]  ? __pfx_ret_from_fork+0x10/0x10
[  337.384533][ T5714]  ? __switch_to_asm+0x39/0x70
[  337.386432][ T5714]  ? __switch_to_asm+0x33/0x70
[  337.388335][ T5714]  ? __pfx_kthread+0x10/0x10
[  337.390182][ T5714]  ret_from_fork_asm+0x1a/0x30
[  337.391991][ T5714]  </TASK>
[  337.393536][ T5714] Kernel Offset: disabled
[  337.394847][ T5714] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:00:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000300f050
R8 =ffff8881065e8237 R9 =1ffff11020cbd046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98ef R14=ffffffff99dee3e0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32421ff8 CR3=000000002ecd2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff812ba184 ffffffff812ba025
XMM02=ffffffff8133c57e ffffffff8133c57e XMM03=ffffffff8133c57e ffffffff8133c57e
XMM04=ffffffff823c7c34 ffffffff823c7acd XMM05=ffffffff823c716c ffffffff823c70e4
XMM06=ffffffff823c6e22 ffffffff823c6dce XMM07=ffffffff823916a5 ffffffff82391658
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5e1d812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000005 RBX=ffff888020730b40 RCX=0e7bd96b01651200 RDX=0000000000000000
RSI=ffffffff8e139ee0 RDI=ffff888020730b40 RBP=00000000ffffffff RSP=ffffc9000367f1a0
R8 =0000000000000000 R9 =ffffffff822e4c7d R10=dffffc0000000000 R11=fffff94000941f01
R12=0000000000000246 R13=ffff888020730000 R14=ffffffff8e139ee0 R15=0000000000000002
RIP=ffffffff8b794e10 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8994ebf800 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558529c9e000 CR3=000000010e660000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
