last executing test programs:

13m9.070573937s ago: executing program 3 (id=412):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
r1 = epoll_create(0x3ff)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001})

13m8.13148497s ago: executing program 3 (id=415):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44051}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

13m7.161156785s ago: executing program 3 (id=418):
r0 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sync_file_range(r1, 0x12ce, 0x100000000, 0x2)

13m6.314473733s ago: executing program 3 (id=422):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000006c0)={[{@utf8no}, {@utf8no}, {@fat=@errors_continue}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@numtail}, {@shortname_win95}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@utf8no}, {}]}, 0x6, 0x2d2, &(0x7f00000008c0)="$eJzs3T9rZFUYB+D3JpOZWQUnhZUIHtDCatlsazOL7IKYymUKtdDgZmHJBCWBgH/wupWtjYWFn0AQ/CA2fgPBVrBzhYUj9869eyebMJu7OBHd5ymSkzPnN+c9d4bkpsibD18+PLiT4u79L36N8biIjWlM40ER27ERra/ilOk3AQD8lz3IOf7IC31yRUSM11cWALBGF/v5P+iGP11KWQDAGt1+9723b+zu3nwnpXHcOvz6ZFb9Zl99vtIuuRfz2I9rMYmHEfWNwlbUdwvV8FbOuRykyna8dliezE5mEYcf/NyEb/weUed3YhLb9dSju406/9buzZ06nj55ocuXVR3PVfm7cW9a5a/HJF58FD6Vv55SGkVKS/uXMRvG668u8vX+V2MSv3wUH8c87tRFdPkvd1J6M3/75+fvV+VV+aI8mY3qdZ28eakvDAAAAAAAAAAAAAAAAAAAAAAA/2tXF7130ijq/j3VVNN/Z/Nh9cVWpNZyf5+y+hhNH+Dacn+gnHOZ4/u2v861lFJuFnb5Qbw0WG4sCAAAAAAAAAAAAAAAAAAAAM+u408/O9ibz/eP/pFB2w1gEBF/3Y542ueZLs28EqsXj5o99+bzjWZ4es1geSY22zVFxMoyqkM87dUYRK+zXzlTczP44ce+u4+fvGar2qvoV2HPQfvuOtgrzr+Go2hnxk0Z3w0jujXDuOBew8dn8mTxPLnXAYfnPjTpffbh8/WgXLEmilWFvfHb4so1M2depmF9Vc+NbzWDpfhj740LvZ9jvIif/V5R6NYBAAAAAAAAAAAAAAAAAABr1f317zkP3l8Z3cijtZUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJeq+///PQZlE94/Oh48YfEwjo7/5SMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwDPg7AAD//+RmV1Y=")
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mlock(&(0x7f0000a53000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)

13m4.524487121s ago: executing program 3 (id=427):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r1 = syz_open_pts(r0, 0xa0200)
dup3(r1, r0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')

13m3.293233412s ago: executing program 3 (id=431):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x5f6}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0)

13m0.793148532s ago: executing program 32 (id=431):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x5f6}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0)

6m20.652662298s ago: executing program 1 (id=1758):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="01", 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r2, 0x0, 0x20}, 0xc)

6m19.701801751s ago: executing program 1 (id=1762):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000)
r0 = socket$packet(0x11, 0x2, 0x300)
recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

6m18.444948202s ago: executing program 1 (id=1767):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000000)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x0, 0xf0}, 0xff}, 0x18, &(0x7f0000000180)={0x0, 0xf5}, 0x4}, 0x1)

6m16.567971912s ago: executing program 1 (id=1774):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
lremovexattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@random={'security.', '[\x00'})

6m14.778301992s ago: executing program 1 (id=1778):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0xdc}, &(0x7f0000000040)=0x8)

6m13.579896411s ago: executing program 1 (id=1782):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0)
inotify_init1(0x0)
ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)=0xfffffffd)

6m9.9081957s ago: executing program 33 (id=1782):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0)
inotify_init1(0x0)
ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)=0xfffffffd)

1m25.865047747s ago: executing program 6 (id=2750):
unshare(0x2040400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0}}, 0x10)

1m24.956459341s ago: executing program 6 (id=2753):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

1m23.585458615s ago: executing program 6 (id=2761):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9)
sendto$inet6(r0, &(0x7f0000000240)="b1", 0x1, 0x4040044, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c)

1m22.670451769s ago: executing program 6 (id=2765):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6282, &(0x7f000000f900)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/9, 0x9)

1m21.026572336s ago: executing program 6 (id=2772):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x80000001, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"})
dup2(r0, r1)
close_range(r1, 0xffffffffffffffff, 0x0)

1m19.881591312s ago: executing program 6 (id=2778):
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0)
io_setup(0x6, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r0, 0x0}])
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd})

1m17.928654749s ago: executing program 34 (id=2778):
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0)
io_setup(0x6, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r0, 0x0}])
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd})

18.369688773s ago: executing program 5 (id=2951):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14)
sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x11}}}], 0x40}}], 0x1, 0x0)

17.056699239s ago: executing program 5 (id=2956):
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/96, 0x60}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0xc8, 0x65, 0x100, 0x170bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0xe}, {0xc, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x8c, 0x2, [@TCA_BPF_ACT={0x88, 0x1, [@m_ife={0x84, 0x2, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xa670}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x8e, 0x0, 0x333, 0x3}}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x8030)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

14.970013763s ago: executing program 5 (id=2960):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x5, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20)

13.979695534s ago: executing program 5 (id=2965):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='errors=continue,discard_unit=section,alloc_mode=default,active_logs=6,acl,fault_injection=00000000000000001262,acl,noacl,compress_cache,background_gc=off,nobarrier,compress_cache,mode=lfs,errors=remount-ro,nocheckpoint_merge,mode=fragment:segment,inline_dmntry,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8)
writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000001c0)="7bf128db4a", 0x5}], 0x2)

11.049469046s ago: executing program 7 (id=2972):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x400000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000009c0)={r2, @in6={{0xa, 0x4e20, 0x9, @private2, 0x2}}, [0x2, 0x3, 0x1, 0x2, 0x3e7, 0x85f9, 0x2, 0x2c3b, 0xfffffffffffffffb, 0xfffffffffffff518, 0x0, 0x9, 0xa, 0x7, 0xbe8872e]}, &(0x7f0000000040)=0x100)

10.903368689s ago: executing program 5 (id=2973):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}})

9.100069209s ago: executing program 4 (id=2977):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

8.715999052s ago: executing program 7 (id=2979):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0)

7.500809362s ago: executing program 0 (id=2980):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd(0x4)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040))

7.255283232s ago: executing program 7 (id=2981):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.161603141s ago: executing program 4 (id=2983):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x24}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x31}, 0x0, 0x6, 0x0, 0x100, 0x1, 0x80000, r1})

6.471342233s ago: executing program 0 (id=2984):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0xcd3, &(0x7f0000000400)={0x0, 0x5889, 0x1000, 0x0, 0xffeffc03}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0)

6.299430976s ago: executing program 2 (id=2985):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4)
sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)

6.082179067s ago: executing program 4 (id=2986):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21)

5.341274048s ago: executing program 2 (id=2987):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0)
ftruncate(r1, 0xc17a)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x3f}}], 0x1, 0x4000800)

5.0064223s ago: executing program 4 (id=2988):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

4.754667473s ago: executing program 0 (id=2989):
r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x2bce, 0x10100, 0x1, 0x313}, &(0x7f00000005c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103})
io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0)

4.242587974s ago: executing program 2 (id=2990):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)

3.599262985s ago: executing program 0 (id=2991):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000001280)={[{@errors_remount}, {@lazytime}, {@resgid}, {@dioread_nolock}, {@nojournal_checksum}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@usrjquota}]}, 0x1, 0x788, &(0x7f0000002800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
fadvise64(r0, 0x7f, 0x80000001, 0x4)
sync_file_range(r0, 0x0, 0x400, 0x3)

3.191270327s ago: executing program 4 (id=2992):
io_setup(0x7, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000240))
io_getevents(r0, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0)
r1 = eventfd(0xb1)
io_submit(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000000100)={0x3a00, 0x0, 0x0, 0x5, 0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, r1, 0x0, 0x0, 0x9, 0x0, 0x1, r1}])

3.066885602s ago: executing program 2 (id=2993):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c010, &(0x7f00000000c0)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)

2.971780231s ago: executing program 7 (id=2994):
r0 = syz_io_uring_setup(0x29c5, &(0x7f00000001c0)={0x0, 0x936d, 0x40, 0x3, 0x44}, &(0x7f0000000240), &(0x7f0000000280))
r1 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x10000004})
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340)={0xa0000000})

1.978544074s ago: executing program 2 (id=2995):
r0 = socket$inet6(0xa, 0x80003, 0xff)
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4)

1.830582022s ago: executing program 5 (id=2996):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)

1.665804546s ago: executing program 7 (id=2997):
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)

1.367807676s ago: executing program 4 (id=2998):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x6e)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x1, 0x3f, 0x0, 0x0)

1.073295528s ago: executing program 0 (id=2999):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x10000)

1.019980596s ago: executing program 2 (id=3000):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000b9f000/0x3000)=nil, 0x3000}})

578.00584ms ago: executing program 7 (id=3001):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2ca, &(0x7f0000003380)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000))
ftruncate(r0, 0x1000)

0s ago: executing program 0 (id=3002):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000091, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)

kernel console output (not intermixed with test programs):

:50:50:50
[  829.857947][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  832.281626][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1924'.
[  833.140153][ T5285] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  833.350216][ T5285] usb 5-1: Using ep0 maxpacket: 16
[  833.354089][T11534] loop0: detected capacity change from 0 to 256
[  833.383019][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  833.436690][ T5285] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  833.468690][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.501051][ T5285] usb 5-1: Product: syz
[  833.525906][ T5285] usb 5-1: Manufacturer: syz
[  833.536161][T11534] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  833.560568][ T5285] usb 5-1: SerialNumber: syz
[  833.607639][ T5285] usb 5-1: config 0 descriptor??
[  833.746071][ T5285] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  833.779425][ T5285] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  834.265531][T11538] loop5: detected capacity change from 0 to 2048
[  834.325744][ T5285] em28xx 5-1:0.0: chip ID is em2765
[  834.442645][T11538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  834.692488][ T5285] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  834.771094][ T5285] em28xx 5-1:0.0: board has no eeprom
[  834.890323][ T5285] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  834.922196][ T5285] em28xx 5-1:0.0: dvb set to bulk mode.
[  834.928412][   T40] em28xx 5-1:0.0: Binding DVB extension
[  835.042842][ T5285] usb 5-1: USB disconnect, device number 11
[  835.083413][ T5285] em28xx 5-1:0.0: Disconnecting em28xx
[  835.274436][   T40] em28xx 5-1:0.0: Registering input extension
[  835.293114][ T5285] em28xx 5-1:0.0: Closing input extension
[  835.410670][ T5285] em28xx 5-1:0.0: Freeing device
[  837.830245][ T5285] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  838.020880][ T5285] usb 5-1: Using ep0 maxpacket: 32
[  838.046707][ T5285] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  838.072229][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.122160][ T5285] usb 5-1: config 0 descriptor??
[  838.190399][ T5285] gspca_main: sq930x-2.14.0 probing 041e:403c
[  838.939432][T11600] loop5: detected capacity change from 0 to 128
[  838.982389][T11598] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.1954'.
[  839.203987][T11600] tipc: Started in network mode
[  839.209307][T11600] tipc: Node identity 080211000001, cluster identity 4711
[  839.250989][T11600] tipc: Enabled bearer <eth:wlan1>, priority 10
[  839.258390][ T5285] gspca_sq930x: ucbus_write failed -71
[  839.286497][ T5285] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  839.297222][T11603] loop0: detected capacity change from 0 to 256
[  839.354137][ T5285] usb 5-1: USB disconnect, device number 12
[  840.361915][ T5830] tipc: Node number set to 134418688
[  840.757524][T11614] loop0: detected capacity change from 0 to 2048
[  841.012537][T11614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  841.219578][T11614] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  841.326369][T11614] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  841.444913][T11627] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 10 with max blocks 1 with error 28
[  841.500094][T11614] EXT4-fs (loop0): This should not happen!! Data will be lost
[  841.500094][T11614] 
[  841.563814][T11627] EXT4-fs (loop0): This should not happen!! Data will be lost
[  841.563814][T11627] 
[  841.644637][T11614] EXT4-fs (loop0): Total free blocks count 0
[  841.667308][T11627] EXT4-fs (loop0): Total free blocks count 0
[  841.734308][T11614] EXT4-fs (loop0): Free/Dirty block details
[  841.761177][T11627] EXT4-fs (loop0): Free/Dirty block details
[  841.808422][T11614] EXT4-fs (loop0): free_blocks=2415919104
[  842.064573][T11628] IPVS: Scheduler module ip_vs_ not found
[  842.596540][T11641] loop5: detected capacity change from 0 to 2048
[  842.831783][T11641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  843.571602][T11651] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1972'.
[  844.570223][T11661] sctp: [Deprecated]: syz.5.1975 (pid 11661) Use of int in maxseg socket option.
[  844.570223][T11661] Use struct sctp_assoc_value instead
[  845.065145][T11665] loop4: detected capacity change from 0 to 256
[  845.065510][T11659] loop6: detected capacity change from 0 to 32768
[  845.251492][T11659] JBD2: Ignoring recovery information on journal
[  845.335194][T11659] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  845.929629][T11665] FAT-fs (loop4): Directory bread(block 64) failed
[  845.938920][T11665] FAT-fs (loop4): Directory bread(block 65) failed
[  846.021945][T11665] FAT-fs (loop4): Directory bread(block 66) failed
[  846.073104][T11665] FAT-fs (loop4): Directory bread(block 67) failed
[  846.152792][T11665] FAT-fs (loop4): Directory bread(block 68) failed
[  846.159696][T11665] FAT-fs (loop4): Directory bread(block 69) failed
[  846.238777][T11665] FAT-fs (loop4): Directory bread(block 70) failed
[  846.393679][T11665] FAT-fs (loop4): Directory bread(block 71) failed
[  846.484382][T11665] FAT-fs (loop4): Directory bread(block 72) failed
[  846.556512][T11665] FAT-fs (loop4): Directory bread(block 73) failed
[  846.986143][T11674] loop5: detected capacity change from 0 to 32768
[  847.106045][T11087] ocfs2: Unmounting device (7,6) on (node local)
[  849.291245][T11698] syzkaller1: entered promiscuous mode
[  849.353788][T11698] syzkaller1: entered allmulticast mode
[  849.404120][T11701] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  849.657955][T11703] 9p: Bad value for 'rfdno'
[  850.841729][T11705] loop6: detected capacity change from 0 to 32768
[  851.008731][T11705] JBD2: Ignoring recovery information on journal
[  851.176360][T11705] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  851.786579][T11723] overlayfs: failed to resolve './cgroup': -2
[  851.947416][T11087] ocfs2: Unmounting device (7,6) on (node local)
[  853.047250][T11725] loop0: detected capacity change from 0 to 32768
[  853.477483][T11735] loop4: detected capacity change from 0 to 1024
[  853.818566][T11735] hfsplus: b-tree write err: -5, ino 2
[  854.628234][   T34] hfsplus: b-tree write err: -5, ino 25
[  854.671768][   T34] hfsplus: b-tree write err: -5, ino 4
[  854.737846][   T34] hfsplus: b-tree write err: -5, ino 2
[  854.771120][   T34] hfsplus: b-tree write err: -5, ino 26
[  855.578044][T11753] loop4: detected capacity change from 0 to 512
[  855.695828][T11753] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  855.895954][T11753] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2005: bad orphan inode 131083
[  855.951147][T11753] loop4: lost filesystem error report for type 5 error -117
[  855.959979][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  855.974468][    C0] EXT4-fs (loop4): initial error at time 1771322037: ext4_orphan_get:1417
[  855.983532][    C0] EXT4-fs (loop4): last error at time 1771322037: ext4_orphan_get:1417
[  856.005590][T11753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  856.526291][T11765] loop5: detected capacity change from 0 to 512
[  856.610068][ T5830] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  856.613317][T11765] EXT4-fs: Ignoring removed nobh option
[  856.720071][T11765] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  856.837254][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  856.984558][T11765] EXT4-fs (loop5): 1 truncate cleaned up
[  857.005600][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  857.018535][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  857.069003][T11765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  857.088210][ T5830] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  857.115867][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.138951][ T5830] usb 7-1: config 0 descriptor??
[  857.918046][ T5830] hid-led 0003:27B8:01ED.000E: probe with driver hid-led failed with error -71
[  858.061200][ T5830] usb 7-1: USB disconnect, device number 2
[  858.298418][ T7263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  859.050337][T11786] loop4: detected capacity change from 0 to 64
[  859.116492][T11786] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  859.230949][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'.
[  860.525795][T11807] loop4: detected capacity change from 0 to 512
[  860.800727][T11807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  860.930516][T11807] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  861.266020][   T29] audit: type=1800 audit(1771322042.465:89): pid=11813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2023" name="file1" dev="loop4" ino=15 res=0 errno=0
[  861.420142][ T5830] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  862.302919][T11808] loop6: detected capacity change from 0 to 65536
[  862.427816][T11808] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  862.470022][ T5830] usb 1-1: Using ep0 maxpacket: 32
[  862.490022][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  862.511820][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  862.525746][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  862.593902][ T5830] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  862.708018][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.783473][ T5830] usb 1-1: config 0 descriptor??
[  862.815370][T11808] XFS (loop6): Ending clean mount
[  862.838452][T11808] XFS (loop6): Quotacheck needed: Please wait.
[  862.999638][T11808] XFS (loop6): Quotacheck: Done.
[  863.254021][T11087] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  863.915612][ T5830] usbhid 1-1:0.0: can't add hid device: -71
[  863.991388][ T5830] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  864.069316][ T5830] usb 1-1: USB disconnect, device number 12
[  864.193500][T11839] netlink: 83 bytes leftover after parsing attributes in process `syz.6.2031'.
[  867.280379][T11870] loop0: detected capacity change from 0 to 32768
[  868.585012][T11883] loop5: detected capacity change from 0 to 1024
[  868.912581][T11880] loop4: detected capacity change from 0 to 40427
[  868.934002][T11880] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  868.943592][T11880] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  869.007535][T11880] F2FS-fs (loop4): invalid crc value
[  869.397975][T11883] hfsplus: xattr searching failed
[  869.418595][T11880] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  869.485312][   T29] audit: type=1800 audit(1771322050.695:90): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2049" name="file1" dev="loop5" ino=2 res=0 errno=0
[  869.503477][T11880] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  869.513863][T11880] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  869.536615][T11892] hfsplus: xattr searching failed
[  869.664432][   T29] audit: type=1800 audit(1771322050.825:91): pid=11892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2049" name="file1" dev="loop5" ino=2 res=0 errno=0
[  869.824279][T11897] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  871.690647][T11902] loop0: detected capacity change from 0 to 1024
[  871.890979][T11907] netlink: 182 bytes leftover after parsing attributes in process `syz.5.2055'.
[  871.985054][T11902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  872.825260][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  873.715921][T11925] loop0: detected capacity change from 0 to 128
[  873.909983][T11925] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  874.001032][T11925] hpfs: filesystem error: improperly stopped
[  874.007326][T11925] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  874.130895][T11925] hpfs: You really don't want any checks? You are crazy...
[  874.210748][T11925] hpfs: hpfs_map_sector(): read error
[  874.216685][T11925] hpfs: code page support is disabled
[  874.280892][T11925] hpfs: hpfs_map_4sectors(): unaligned read
[  874.287493][T11925] hpfs: hpfs_map_4sectors(): unaligned read
[  874.342067][T11925] hpfs: filesystem error: unable to find root dir
[  875.195656][T11941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2066'.
[  875.249956][T11941] bond0: ARP target 128.0.0.0 is already present
[  875.256869][T11941] bond0: option arp_ip_target: invalid value (128)
[  876.977782][T11959] loop0: detected capacity change from 0 to 128
[  877.068478][T11959] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  877.150460][T11959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  877.412328][T11964] loop5: detected capacity change from 0 to 64
[  878.401680][T11971] loop0: detected capacity change from 0 to 2048
[  878.513576][T11975] loop5: detected capacity change from 0 to 256
[  878.568919][T11971] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  878.633159][T11975] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  879.495110][T11980] loop6: detected capacity change from 0 to 512
[  879.721919][T11980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  879.829469][T11980] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  879.998888][T11980] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 1869770799 (only 1 groups)
[  880.619076][T11087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  881.766208][T11994] loop4: detected capacity change from 0 to 32768
[  881.778824][T11994] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2087 (11994)
[  881.868732][T11994] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  881.879868][T11994] BTRFS info (device loop4): using blake2b checksum algorithm
[  882.057816][T12001] loop0: detected capacity change from 0 to 2048
[  882.267276][T11994] BTRFS info (device loop4): enabling ssd optimizations
[  882.275381][T11994] BTRFS info (device loop4): turning on async discard
[  882.282793][T11994] BTRFS info (device loop4): enabling free space tree
[  882.290374][T11994] BTRFS info (device loop4): use zstd compression, level 3
[  882.293574][T12017] bridge0: entered allmulticast mode
[  882.380456][T12001] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  882.642274][T12021] loop6: detected capacity change from 0 to 8
[  882.756322][T12021] SQUASHFS error: lzo decompression failed, data probably corrupt
[  882.757625][ T5775] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  882.798291][T12021] SQUASHFS error: Failed to read block 0x91: -5
[  882.850306][T12021] SQUASHFS error: Unable to read metadata cache entry [8f]
[  882.880223][T12021] SQUASHFS error: Unable to read inode 0x11f
[  885.105401][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  885.118418][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  886.312029][ T5830] kernel write not supported for file /712/loginuid (pid: 5830 comm: kworker/0:4)
[  886.841367][T12050] loop6: detected capacity change from 0 to 32768
[  887.500904][ T5830] IPVS: starting estimator thread 0...
[  887.613141][T12066] IPVS: using max 192 ests per chain, 9600 per kthread
[  892.094922][T12106] loop4: detected capacity change from 0 to 4096
[  893.836953][T12123] loop5: detected capacity change from 0 to 32768
[  893.851476][T12123] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2138 (12123)
[  893.880039][T12123] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  893.892352][T12123] BTRFS info (device loop5): using blake2b checksum algorithm
[  894.398682][T12123] BTRFS info (device loop5): enabling ssd optimizations
[  894.406704][T12123] BTRFS info (device loop5): turning on async discard
[  894.414281][T12123] BTRFS info (device loop5): enabling free space tree
[  894.421899][T12123] BTRFS info (device loop5): use zstd compression, level 3
[  894.701403][T12144] loop6: detected capacity change from 0 to 4096
[  895.051855][ T7263] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  895.191321][T12144] ntfs3(loop6): ino=1a, mi_enum_attr
[  895.221374][T12144] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  897.229584][T12173] loop4: detected capacity change from 0 to 512
[  897.331934][T12173] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  897.451692][T12173] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2152: bg 0: block 384: padding at end of block bitmap is not set
[  897.469238][T12164] loop0: detected capacity change from 0 to 8192
[  897.541176][T12173] loop4: lost filesystem error report for type 5 error -117
[  897.547204][T12173] EXT4-fs (loop4): Remounting filesystem read-only
[  897.555238][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  897.555344][    C1] EXT4-fs (loop4): initial error at time 1771322078: ext4_validate_block_bitmap:441
[  897.555492][    C1] EXT4-fs (loop4): last error at time 1771322078: ext4_validate_block_bitmap:441
[  897.671164][T12173] EXT4-fs (loop4): 1 truncate cleaned up
[  897.737911][T12173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  897.970914][T12173] EXT4-fs (loop4): shut down requested (2)
[  898.438012][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  899.702012][T12193] loop6: detected capacity change from 0 to 2048
[  899.937003][T12195] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  900.026112][T12196] loop0: detected capacity change from 0 to 16
[  900.172233][T12196] erofs (device loop0): mounted with root inode @ nid 36.
[  900.218488][T12193] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12
[  900.318815][T12193] Remounting filesystem read-only
[  900.402487][T12192] loop5: detected capacity change from 0 to 40427
[  900.453119][T12192] F2FS-fs (loop5): invalid crc value
[  900.858571][T12192] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  900.873324][T12192] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  902.401312][T12208] loop4: detected capacity change from 0 to 4096
[  902.490251][T12208] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  902.570775][T12208] ntfs3(loop4): ino=3, mi_enum_attr
[  905.828780][T12236] loop5: detected capacity change from 0 to 1024
[  906.337458][ T5830] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  906.524707][   T13] hfsplus: b-tree write err: -5, ino 25
[  906.539468][   T13] hfsplus: b-tree write err: -5, ino 4
[  906.585478][   T13] hfsplus: b-tree write err: -5, ino 2
[  906.594534][ T5830] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  906.650292][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.783754][ T5830] usb 5-1: config 0 descriptor??
[  906.854977][ T5830] cp210x 5-1:0.0: cp210x converter detected
[  907.250472][ T5830] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  907.353751][ T5830] usb 5-1: cp210x converter now attached to ttyUSB0
[  907.535765][   T40] usb 5-1: USB disconnect, device number 13
[  907.644669][   T40] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  907.776345][T12253] loop0: detected capacity change from 0 to 128
[  907.796827][   T40] cp210x 5-1:0.0: device disconnected
[  908.043659][T12259] loop5: detected capacity change from 0 to 512
[  909.183294][T12265] loop4: detected capacity change from 0 to 512
[  909.569673][T12265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  910.182131][ T5830] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  910.431966][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  910.456630][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  910.509171][ T5830] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  910.540978][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.611886][ T5830] usb 6-1: config 0 descriptor??
[  910.664011][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  911.188793][ T5830] lenovo 0003:17EF:6047.000F: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0
[  911.360806][ T5830] usb 6-1: USB disconnect, device number 7
[  911.495150][T12281] loop4: detected capacity change from 0 to 512
[  911.605230][T12281] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  911.759512][T12281] EXT4-fs (loop4): 1 truncate cleaned up
[  911.962090][T12281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  912.164827][T12288] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.4.2194: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  912.252693][T12288] EXT4-fs (loop4): Remounting filesystem read-only
[  912.301421][T12288] EXT4-fs warning (device loop4): ext4_rename_delete:3729: inode #2: comm syz.4.2194: Deleting old file: nlink 5, error=-117
[  912.374828][T12290] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2198'.
[  912.566019][T12285] fido_id[12285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  913.614484][T12293] loop5: detected capacity change from 0 to 32768
[  913.801975][T12294] loop6: detected capacity change from 0 to 32768
[  913.924651][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  914.697344][T12299] loop4: detected capacity change from 0 to 256
[  914.829140][T12299] exfat: Deprecated parameter 'utf8'
[  915.047878][T12299] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  915.780860][   T29] audit: type=1326 audit(1771322096.985:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.5.2207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadc999bf79 code=0x0
[  915.871482][T12313] loop0: detected capacity change from 0 to 512
[  916.149545][T12313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  916.245864][T12313] ext4 filesystem being mounted at /433/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  916.555426][T12320] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  916.741266][T12320] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  916.830403][T12320] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.2208: Failed to acquire dquot type 0
[  917.543757][T12326] loop6: detected capacity change from 0 to 512
[  917.748739][T12326] EXT4-fs: Ignoring removed nobh option
[  917.833124][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  918.130337][T12326] fscrypt (loop6, inode 2): Error -61 getting encryption context
[  918.353988][T12327] loop4: detected capacity change from 0 to 40427
[  918.360295][T12326] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61
[  918.399870][T12327] F2FS-fs (loop4): Invalid log blocks per segment (1)
[  918.406907][T12327] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  918.417645][T12327] F2FS-fs (loop4): Image doesn't support compression
[  918.424820][T12327] F2FS-fs (loop4): build fault injection rate: 690
[  918.431965][T12327] F2FS-fs (loop4): build fault injection type: 0x35f7
[  918.452649][T12327] F2FS-fs (loop4): invalid crc value
[  918.474597][T12326] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.2211: inode has both inline data and extents flags
[  918.522141][T12326] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  918.524151][T12326] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2211: couldn't read orphan inode 13 (err -117)
[  918.534035][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  918.534148][    C0] EXT4-fs (loop6): initial error at time 1771322099: ext4_orphan_get:1391: inode 13
[  918.534336][    C0] EXT4-fs (loop6): last error at time 1771322099: ext4_orphan_get:1391: inode 13
[  918.741071][T12326] loop6: lost filesystem error report for type 5 error -117
[  918.825732][T12326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  918.923639][T12327] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  918.934956][T12327] F2FS-fs (loop4): Start checkpoint disabled!
[  918.983387][T12327] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  919.006946][T12327] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  919.014646][T12327] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  919.144888][T12327] block device autoloading is deprecated and will be removed.
[  919.265147][T12326] EXT4-fs (loop6): shut down requested (1)
[  919.360915][T12336] loop0: detected capacity change from 0 to 1024
[  919.478311][T12336] EXT4-fs: Ignoring removed bh option
[  919.584237][T12336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  919.774985][T12336] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  919.867824][T12336] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  920.105672][T11087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  920.517333][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  920.747637][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2219'.
[  922.529300][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  922.539461][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: kworker/u9:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  922.539674][ T5779] Tainted: [L]=SOFTLOCKUP
[  922.539744][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  922.539874][ T5779] Workqueue: hci2 hci_rx_work
[  922.540087][ T5779] Call Trace:
[  922.540147][ T5779]  <TASK>
[  922.540204][ T5779]  __dump_stack+0x26/0x30
[  922.540391][ T5779]  dump_stack_lvl+0x14c/0x1c0
[  922.540580][ T5779]  dump_stack+0x1e/0x25
[  922.540746][ T5779]  sysfs_create_dir_ns+0x46c/0x540
[  922.540990][ T5779]  kobject_add_internal+0x1084/0x19b0
[  922.541268][ T5779]  kobject_add+0x2c1/0x410
[  922.541529][ T5779]  ? kmsan_get_metadata+0xf1/0x160
[  922.541738][ T5779]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  922.541984][ T5779]  device_add+0xa70/0x1c00
[  922.542176][ T5779]  hci_conn_add_sysfs+0x159/0x2e0
[  922.542382][ T5779]  le_conn_complete_evt+0x1d0a/0x2250
[  922.542601][ T5779]  hci_le_conn_complete_evt+0x157/0x260
[  922.542997][ T5779]  hci_le_meta_evt+0x6eb/0x960
[  922.543228][ T5779]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  922.543502][ T5779]  hci_event_packet+0xce2/0x1e40
[  922.543717][ T5779]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  922.544007][ T5779]  hci_rx_work+0x8c3/0xfc0
[  922.544217][ T5779]  ? kmsan_get_metadata+0xf1/0x160
[  922.544448][ T5779]  ? __pfx_hci_rx_work+0x10/0x10
[  922.544661][ T5779]  process_scheduled_works+0xb21/0x1e30
[  922.544938][ T5779]  worker_thread+0xede/0x1580
[  922.545166][ T5779]  kthread+0x53f/0x600
[  922.545366][ T5779]  ? __pfx_worker_thread+0x10/0x10
[  922.545567][ T5779]  ? __pfx_kthread+0x10/0x10
[  922.545767][ T5779]  ret_from_fork+0x20f/0x910
[  922.545954][ T5779]  ? __switch_to+0x51c/0x750
[  922.546168][ T5779]  ? __pfx_kthread+0x10/0x10
[  922.546374][ T5779]  ret_from_fork_asm+0x1a/0x30
[  922.546622][ T5779]  </TASK>
[  922.776338][ T5779] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  922.795427][ T5779] Bluetooth: hci2: failed to register connection device
[  922.920321][T12361] loop0: detected capacity change from 0 to 256
[  922.930737][T12361] exfat: Deprecated parameter 'utf8'
[  922.936879][T12361] exfat: Deprecated parameter 'utf8'
[  923.153122][T12361] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  924.088669][T12369] loop6: detected capacity change from 0 to 164
[  924.286129][T12369] rock: directory entry would overflow storage
[  924.381350][T12369] rock: sig=0x66, size=4, remaining=3
[  924.734216][T12369] rock: directory entry would overflow storage
[  924.930544][T12369] rock: sig=0x66, size=4, remaining=3
[  925.365761][T12371] loop0: detected capacity change from 0 to 32768
[  925.492420][T12371] (syz.0.2228,12371,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  925.509156][T12371] (syz.0.2228,12371,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  925.586866][T12371] JBD2: Ignoring recovery information on journal
[  925.766809][T12371] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  926.207990][ T5770] ocfs2: Unmounting device (7,0) on (node local)
[  926.871095][   T40] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  927.080836][   T40] usb 5-1: Using ep0 maxpacket: 32
[  927.152258][   T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  927.200608][   T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  927.290026][   T40] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  927.370701][   T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.415236][   T40] usb 5-1: config 0 descriptor??
[  928.072396][   T40] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  928.240463][T12396] loop5: detected capacity change from 0 to 128
[  928.269148][ T5830] usb 5-1: USB disconnect, device number 14
[  929.791271][T12401] loop0: detected capacity change from 0 to 32768
[  929.808236][T12401] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2241 (12401)
[  929.845344][T12401] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  929.860414][T12401] BTRFS info (device loop0): using sha256 checksum algorithm
[  929.891977][T12398] fido_id[12398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  930.324802][T12401] BTRFS info (device loop0): rebuilding free space tree
[  930.357025][T12401] BTRFS info (device loop0): disabling free space tree
[  930.364521][T12401] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  930.378570][T12401] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  930.410222][T12401] BTRFS info (device loop0): setting nodatasum
[  930.416976][T12401] BTRFS info (device loop0): setting nodatacow
[  930.424453][T12401] BTRFS info (device loop0): turning off barriers
[  930.431303][T12401] BTRFS info (device loop0): force clearing of disk cache
[  930.661844][ T5770] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  930.957645][   T40] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  931.250219][   T40] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  931.318919][   T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  931.350450][   T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  931.375827][   T40] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  931.456186][   T40] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  931.477059][   T40] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  931.528417][   T40] usb 6-1: Manufacturer: syz
[  931.569425][   T40] usb 6-1: config 0 descriptor??
[  932.076884][   T40] appleir 0003:05AC:8243.0011: unknown main item tag 0x0
[  932.191117][   T40] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  932.345689][   T40] usb 6-1: USB disconnect, device number 8
[  933.348184][T12442] fido_id[12442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  935.381709][T12462] loop0: detected capacity change from 0 to 8
[  935.444789][T12462] squashfs: Unknown parameter '017777777777777777777770177777777777777777777701777777777777777777777ÿÿ0xffffffffffffffff0xffffffffffffffff'
[  935.696910][T12460] loop5: detected capacity change from 0 to 4096
[  935.892875][T12460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  936.160067][T12460] EXT4-fs (loop5): shut down requested (1)
[  936.452915][T12473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2263'.
[  937.297689][ T7263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.360391][ T5779] Bluetooth: hci1: command 0x0406 tx timeout
[  940.540762][T12503] loop4: detected capacity change from 0 to 32768
[  940.586981][T12503] (syz.4.2273,12503,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  940.603188][T12503] (syz.4.2273,12503,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  940.799998][T12503] JBD2: Ignoring recovery information on journal
[  940.945718][T12511] loop0: detected capacity change from 0 to 1024
[  940.975584][T12503] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  941.271170][ T5775] ocfs2: Unmounting device (7,4) on (node local)
[  941.459672][T12517] hfsplus: catalog searching failed
[  943.113568][ T7106] hfsplus: b-tree write err: -5, ino 3
[  943.310919][T12522] loop6: detected capacity change from 0 to 40427
[  943.375997][T12522] F2FS-fs (loop6): Image doesn't support compression
[  943.384317][T12522] F2FS-fs (loop6): build fault injection rate: 690
[  943.406939][T12522] F2FS-fs (loop6): invalid crc value
[  943.880967][T12522] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  943.899948][T12522] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  943.985517][T12523] loop5: detected capacity change from 0 to 65536
[  944.128294][T12523] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  944.542151][T12535] loop2: detected capacity change from 0 to 7
[  944.565023][T12523] XFS (loop5): Ending clean mount
[  944.609449][T12523] XFS (loop5): Quotacheck needed: Please wait.
[  944.636750][ T5928] Dev loop2: unable to read RDB block 7
[  944.668079][T12523] XFS (loop5): Quotacheck: Done.
[  944.684401][ T5928]  loop2: unable to read partition table
[  944.713949][ T5928] loop2: partition table beyond EOD, truncated
[  944.772426][T12535] Dev loop2: unable to read RDB block 7
[  944.778392][T12535]  loop2: unable to read partition table
[  944.951497][T12535] loop2: partition table beyond EOD, truncated
[  945.032212][T12535] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  945.257200][ T7263] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  946.558195][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  946.566729][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  949.885777][T12565] loop5: detected capacity change from 0 to 40427
[  949.896286][T12565] F2FS-fs: heap/no_heap options were deprecated
[  949.909391][T12565] F2FS-fs (loop5): build fault injection rate: 19
[  949.916437][T12565] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  949.941972][T12565] F2FS-fs (loop5): invalid crc value
[  950.040938][T12565] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80
[  950.370068][T12565] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0
[  950.388850][T12565] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  950.406002][T12565] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  950.767268][    C1] F2FS-fs (loop5): inject write IO error in f2fs_write_end_io of bio_endio+0x1006/0x1160
[  950.777873][    C1] CPU: 1 UID: 0 PID: 16 Comm: rcu_preempt Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  950.778061][    C1] Tainted: [L]=SOFTLOCKUP
[  950.778124][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  950.778220][    C1] Call Trace:
[  950.778271][    C1]  <IRQ>
[  950.778324][    C1]  __dump_stack+0x26/0x30
[  950.778503][    C1]  dump_stack_lvl+0x14c/0x1c0
[  950.778713][    C1]  dump_stack+0x1e/0x25
[  950.778870][    C1]  f2fs_handle_critical_error+0xa6f/0xc20
[  950.779082][    C1]  f2fs_stop_checkpoint+0x65/0x80
[  950.779273][    C1]  f2fs_write_end_io+0x12e6/0x2560
[  950.779526][    C1]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  950.779713][    C1]  bio_endio+0x1006/0x1160
[  950.779908][    C1]  blk_update_request+0xf02/0x1a80
[  950.780134][    C1]  blk_mq_end_request+0x50/0xb0
[  950.780322][    C1]  blk_flush_complete_seq+0xad8/0x18c0
[  950.780572][    C1]  flush_end_io+0x12e5/0x17b0
[  950.780812][    C1]  ? __pfx_flush_end_io+0x10/0x10
[  950.781000][    C1]  __blk_mq_end_request+0x847/0x9d0
[  950.781190][    C1]  ? __pfx_flush_end_io+0x10/0x10
[  950.781397][    C1]  blk_mq_end_request+0x6e/0xb0
[  950.781596][    C1]  lo_complete_rq+0x188/0x3a0
[  950.781769][    C1]  ? __pfx_lo_complete_rq+0x10/0x10
[  950.781944][    C1]  blk_done_softirq+0x112/0x1f0
[  950.782113][    C1]  ? __pfx_blk_done_softirq+0x10/0x10
[  950.782277][    C1]  handle_softirqs+0x171/0x7e0
[  950.782505][    C1]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  950.782726][    C1]  __irq_exit_rcu+0x65/0x170
[  950.782922][    C1]  irq_exit_rcu+0x12/0x20
[  950.783109][    C1]  sysvec_apic_timer_interrupt+0x84/0x90
[  950.783299][    C1]  </IRQ>
[  950.783353][    C1]  <TASK>
[  950.783417][    C1]  asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  950.783608][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x33/0x60
[  950.783818][    C1] Code: 56 53 48 89 f3 49 89 fe e8 9a 93 a3 f1 4c 89 f7 e8 d2 86 a3 f1 c6 00 00 41 c6 06 00 f7 c3 00 02 00 00 74 01 fb be 04 00 00 00 <48> c7 c7 28 40 84 95 e8 e1 88 a3 f1 65 ff 0d a2 e5 7c 04 74 0a 5b
[  950.783962][    C1] RSP: 0018:ffff888100733c08 EFLAGS: 00000206
[  950.784100][    C1] RAX: ffff88823f308b40 RBX: 0000000000000286 RCX: 0000000000b39b2e
[  950.784211][    C1] RDX: ffff88823ebd6b40 RSI: 0000000000000004 RDI: ffffffff92980b40
[  950.784326][    C1] RBP: ffff888100733c18 R08: ffffea000000000f R09: 0000000000000000
[  950.784443][    C1] R10: ffff88823f308b40 R11: 0000000000000000 R12: ffffffff92980b40
[  950.784558][    C1] R13: 0000000000000000 R14: ffffffff92980b40 R15: 0000000000000000
[  950.784713][    C1]  ? _raw_spin_unlock_irqrestore+0x1e/0x60
[  950.784890][    C1]  rcu_report_qs_rnp+0x670/0x950
[  950.785129][    C1]  rcu_report_qs_rdp+0x4ff/0x5c0
[  950.785312][    C1]  rcu_gp_init+0x1b18/0x1c90
[  950.785553][    C1]  rcu_gp_kthread+0x1da/0x380
[  950.785790][    C1]  kthread+0x53f/0x600
[  950.785978][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  950.786210][    C1]  ? __pfx_kthread+0x10/0x10
[  950.786393][    C1]  ret_from_fork+0x20f/0x910
[  950.786560][    C1]  ? __switch_to+0x51c/0x750
[  950.786773][    C1]  ? __pfx_kthread+0x10/0x10
[  950.786962][    C1]  ret_from_fork_asm+0x1a/0x30
[  950.787193][    C1]  </TASK>
[  950.787250][    C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  951.104770][ T7263] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint
[  951.780567][T12579] loop4: detected capacity change from 0 to 64
[  951.911071][T12579] syz.4.2301: attempt to access beyond end of device
[  951.911071][T12579] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  953.113653][T12586] netlink: 'syz.4.2304': attribute type 29 has an invalid length.
[  953.235331][T12590] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2304'.
[  953.315402][T12588] netlink: 'syz.4.2304': attribute type 29 has an invalid length.
[  954.816158][T12603] loop4: detected capacity change from 0 to 128
[  954.992048][T12603] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  955.059564][T12610] loop5: detected capacity change from 0 to 256
[  955.087405][T12603] ext4 filesystem being mounted at /454/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  955.142373][T12610] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  955.221051][T12610] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  955.733074][ T5775] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  957.440962][T12624] loop5: detected capacity change from 0 to 40427
[  957.547941][T12624] F2FS-fs (loop5): invalid crc value
[  957.938303][T12624] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  957.971039][T12624] F2FS-fs (loop5): Start checkpoint disabled!
[  958.002646][T12624] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  958.012130][T12624] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  959.099303][T12643] netlink: 'syz.4.2325': attribute type 5 has an invalid length.
[  959.770277][ T5830] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  959.989456][ T5830] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  960.080886][ T5830] usb 1-1: config 0 interface 0 has no altsetting 0
[  960.134851][ T5830] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  960.179992][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  960.210722][ T5830] usb 1-1: Product: syz
[  960.242816][ T5830] usb 1-1: Manufacturer: syz
[  960.247665][ T5830] usb 1-1: SerialNumber: syz
[  960.326336][ T5830] usb 1-1: config 0 descriptor??
[  960.448157][ T5830] usb 1-1: selecting invalid altsetting 0
[  960.816367][T12645] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled
[  961.183924][T12664] loop5: detected capacity change from 0 to 512
[  961.246555][ T5830] usb 1-1: USB disconnect, device number 13
[  961.422486][T12664] EXT4-fs (loop5): 1 truncate cleaned up
[  961.476714][T12664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  961.641093][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  961.693190][   T29] audit: type=1800 audit(1771322142.905:93): pid=12664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2332" name="bus" dev="loop5" ino=18 res=0 errno=0
[  961.730806][T12670] loop4: detected capacity change from 0 to 256
[  961.788066][T12670] exfat: Deprecated parameter 'utf8'
[  961.809385][T12664] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2332: bg 0: block 465: padding at end of block bitmap is not set
[  961.830773][T12670] exfat: Deprecated parameter 'utf8'
[  961.946812][T12664] EXT4-fs (loop5): Remounting filesystem read-only
[  961.985858][T12670] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  962.310462][T12673] netlink: 63 bytes leftover after parsing attributes in process `syz.6.2335'.
[  962.338102][T12674] netlink: 'syz.2.2336': attribute type 11 has an invalid length.
[  962.395913][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'.
[  962.706944][ T7263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  963.435872][T12684] loop0: detected capacity change from 0 to 128
[  963.506590][T12681] loop5: detected capacity change from 0 to 2048
[  963.572273][T12684] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  963.623566][T12681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  966.514252][T12711] tipc: Enabled bearer <udp:s>, priority 10
[  968.644297][T12735] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2364'.
[  969.684652][T12750] loop4: detected capacity change from 0 to 512
[  969.798692][T12750] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.2371: corrupted in-inode xattr: bad e_name length
[  969.822080][T12750] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  969.823960][T12750] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2371: couldn't read orphan inode 15 (err -117)
[  969.833794][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  969.833907][    C1] EXT4-fs (loop4): initial error at time 1771322151: ext4_iget_extra_inode:5025: inode 15
[  969.834097][    C1] EXT4-fs (loop4): last error at time 1771322151: ext4_iget_extra_inode:5025: inode 15
[  969.950793][T12750] loop4: lost filesystem error report for type 5 error -117
[  970.002851][T12750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  970.536366][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  970.907824][T12763] loop4: detected capacity change from 0 to 128
[  970.970899][T12763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  970.995932][T12763] System zones: 1-3, 19-19, 35-36
[  971.006905][T12763] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  971.043053][T12763] ext4 filesystem being mounted at /468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  971.210193][T12763] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 79 (only 1 groups)
[  971.442361][T12768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2377'.
[  971.792687][ T5775] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  976.058930][T12819] loop0: detected capacity change from 0 to 128
[  976.089104][T12819] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  976.206478][T12819] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8)
[  976.251653][T12819] FAT-fs (loop0): Filesystem has been set read-only
[  976.263264][T12819] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522)
[  977.452014][T12836] loop5: detected capacity change from 0 to 512
[  977.501999][T12836] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  977.544714][T12836] EXT4-fs (loop5): invalid journal inode
[  977.557442][T12836] EXT4-fs (loop5): can't get journal size
[  977.593683][T12836] EXT4-fs (loop5): 1 truncate cleaned up
[  977.632778][T12836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  977.667326][   T29] audit: type=1326 audit(1771322158.875:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7fc00000
[  977.809479][   T29] audit: type=1326 audit(1771322158.875:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce9299bf79 code=0x7fc00000
[  977.897073][   T29] audit: type=1326 audit(1771322158.875:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7fc00000
[  977.936948][   T29] audit: type=1326 audit(1771322158.875:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7fc00000
[  978.002741][   T29] audit: type=1326 audit(1771322158.875:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7fc00000
[  978.100291][   T29] audit: type=1326 audit(1771322158.875:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7fc00000
[  978.245475][   T29] audit: type=1326 audit(1771322158.875:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12824 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7fc00000
[  978.358625][ T7263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  980.144809][T12862] loop4: detected capacity change from 0 to 256
[  980.327255][T12862] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  982.948429][T12889] loop4: detected capacity change from 0 to 1024
[  983.041620][T12889] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data
[  987.567977][   T29] audit: type=1326 audit(1771322168.735:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12931 comm="syz.2.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431b39bf79 code=0x7fc00000
[  987.570403][T12929] loop4: detected capacity change from 0 to 40427
[  987.619010][T12929] F2FS-fs (loop4): Invalid log blocks per segment (1)
[  987.626293][T12929] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  987.662666][T12929] F2FS-fs (loop4): Image doesn't support compression
[  987.669787][T12929] F2FS-fs (loop4): build fault injection rate: 690
[  987.676858][T12929] F2FS-fs (loop4): build fault injection type: 0x35f7
[  987.692487][T12929] F2FS-fs (loop4): invalid crc value
[  988.041225][T12929] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  988.059318][T12929] F2FS-fs (loop4): Start checkpoint disabled!
[  988.075630][T12929] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  988.107034][T12929] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  988.115381][T12929] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  988.575083][   T13] kworker/u8:1: attempt to access beyond end of device
[  988.575083][   T13] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  988.651274][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  988.651471][   T13] Tainted: [L]=SOFTLOCKUP
[  988.651527][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  988.651649][   T13] Workqueue: writeback wb_workfn (flush-7:4)
[  988.651841][   T13] Call Trace:
[  988.651895][   T13]  <TASK>
[  988.651949][   T13]  __dump_stack+0x26/0x30
[  988.652126][   T13]  dump_stack_lvl+0x14c/0x1c0
[  988.652412][   T13]  dump_stack+0x1e/0x25
[  988.652577][   T13]  f2fs_handle_critical_error+0xa6f/0xc20
[  988.652793][   T13]  f2fs_stop_checkpoint+0x65/0x80
[  988.652971][   T13]  f2fs_write_end_io+0x12e6/0x2560
[  988.653227][   T13]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  988.653410][   T13]  bio_endio+0x1006/0x1160
[  988.653603][   T13]  submit_bio_noacct+0x533/0x2960
[  988.653858][   T13]  submit_bio+0x57a/0x620
[  988.654055][   T13]  f2fs_submit_write_bio+0x115/0x350
[  988.654240][   T13]  __submit_merged_bio+0x16f/0x780
[  988.654409][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  988.654627][   T13]  __submit_merged_write_cond+0x4ba/0xae0
[  988.654830][   T13]  f2fs_write_data_pages+0x5073/0x5e10
[  988.655176][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  988.655381][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  988.655595][   T13]  ? __update_load_avg_cfs_rq+0xd80/0x1060
[  988.655822][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  988.656020][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  988.656234][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  988.656425][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  988.656629][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  988.656816][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  988.656997][   T13]  do_writepages+0x3f2/0x860
[  988.657203][   T13]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  988.657431][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  988.657625][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  988.657844][   T13]  __writeback_single_inode+0xfc/0x1440
[  988.658042][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  988.658263][   T13]  writeback_sb_inodes+0xb52/0x1f40
[  988.658613][   T13]  wb_writeback+0x4f1/0xcd0
[  988.658817][   T13]  ? queue_io+0x4a1/0x800
[  988.658995][   T13]  wb_workfn+0x3b9/0x19b0
[  988.659150][   T13]  ? kmsan_get_metadata+0xf1/0x160
[  988.659380][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  988.659530][   T13]  process_scheduled_works+0xb21/0x1e30
[  988.659773][   T13]  worker_thread+0xede/0x1580
[  988.659986][   T13]  kthread+0x53f/0x600
[  988.660174][   T13]  ? __pfx_worker_thread+0x10/0x10
[  988.660367][   T13]  ? __pfx_kthread+0x10/0x10
[  988.660559][   T13]  ret_from_fork+0x20f/0x910
[  988.660726][   T13]  ? __switch_to+0x51c/0x750
[  988.660928][   T13]  ? __pfx_kthread+0x10/0x10
[  988.661115][   T13]  ret_from_fork_asm+0x1a/0x30
[  988.661352][   T13]  </TASK>
[  989.002420][   T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  994.492316][T12984] veth1_to_bond: entered allmulticast mode
[  994.518093][T12984] veth1_to_bond: left allmulticast mode
[  996.111030][T13002] loop5: detected capacity change from 0 to 256
[  996.151912][T13002] exfat: Deprecated parameter 'utf8'
[  996.360287][T13002] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  996.690346][T13008] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2478'.
[  997.594371][T13014] ip6tnl1: entered promiscuous mode
[  997.652807][T13014] ip6tnl1: entered allmulticast mode
[  999.740320][T13030] loop0: detected capacity change from 0 to 32768
[ 1000.012648][T13030] jfs_strtoUCS: char2uni returned -22.
[ 1000.018548][T13030] charset = cp950, char = 0xe9
[ 1000.327699][T13038] loop4: detected capacity change from 0 to 256
[ 1000.439654][T13038] exfat: Deprecated parameter 'utf8'
[ 1000.711330][T13033] loop5: detected capacity change from 0 to 40427
[ 1000.756807][T13033] F2FS-fs (loop5): invalid crc value
[ 1000.867520][T13038] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d)
[ 1001.098124][T13033] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1001.112780][T13033] F2FS-fs (loop5): Start checkpoint disabled!
[ 1001.148610][T13033] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[ 1001.167298][T13033] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1001.812534][   T12] kworker/u8:0: attempt to access beyond end of device
[ 1001.812534][   T12] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1001.905430][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1001.905632][   T12] Tainted: [L]=SOFTLOCKUP
[ 1001.905702][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1001.905826][   T12] Workqueue: writeback wb_workfn (flush-7:5)
[ 1001.906024][   T12] Call Trace:
[ 1001.906080][   T12]  <TASK>
[ 1001.906139][   T12]  __dump_stack+0x26/0x30
[ 1001.906314][   T12]  dump_stack_lvl+0x14c/0x1c0
[ 1001.906496][   T12]  dump_stack+0x1e/0x25
[ 1001.906663][   T12]  f2fs_handle_critical_error+0xa6f/0xc20
[ 1001.906872][   T12]  f2fs_stop_checkpoint+0x65/0x80
[ 1001.907054][   T12]  f2fs_write_end_io+0x12e6/0x2560
[ 1001.907318][   T12]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1001.907500][   T12]  bio_endio+0x1006/0x1160
[ 1001.907693][   T12]  submit_bio_noacct+0x533/0x2960
[ 1001.907950][   T12]  submit_bio+0x57a/0x620
[ 1001.908193][   T12]  f2fs_submit_write_bio+0x115/0x350
[ 1001.908368][   T12]  __submit_merged_bio+0x16f/0x780
[ 1001.908542][   T12]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1001.908760][   T12]  __submit_merged_write_cond+0x4ba/0xae0
[ 1001.908962][   T12]  f2fs_write_data_pages+0x5073/0x5e10
[ 1001.909330][   T12]  ? kmsan_get_metadata+0xf1/0x160
[ 1001.909528][   T12]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1001.909743][   T12]  ? __update_load_avg_cfs_rq+0xd80/0x1060
[ 1001.909983][   T12]  ? kmsan_get_metadata+0xf1/0x160
[ 1001.910191][   T12]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1001.910397][   T12]  ? kmsan_get_metadata+0xf1/0x160
[ 1001.910592][   T12]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1001.910796][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1001.910978][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1001.911162][   T12]  do_writepages+0x3f2/0x860
[ 1001.911371][   T12]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1001.911581][   T12]  ? queue_io+0x7a1/0x800
[ 1001.911745][   T12]  ? kmsan_get_metadata+0xf1/0x160
[ 1001.911968][   T12]  __writeback_single_inode+0xfc/0x1440
[ 1001.912169][   T12]  ? kmsan_get_metadata+0xf1/0x160
[ 1001.912384][   T12]  writeback_sb_inodes+0xb52/0x1f40
[ 1001.912719][   T12]  wb_writeback+0x4f1/0xcd0
[ 1001.912927][   T12]  ? queue_io+0x4a1/0x800
[ 1001.913113][   T12]  wb_workfn+0x3b9/0x19b0
[ 1001.913265][   T12]  ? kmsan_get_metadata+0xf1/0x160
[ 1001.913491][   T12]  ? __pfx_wb_workfn+0x10/0x10
[ 1001.913638][   T12]  process_scheduled_works+0xb21/0x1e30
[ 1001.913884][   T12]  worker_thread+0xede/0x1580
[ 1001.914099][   T12]  kthread+0x53f/0x600
[ 1001.914287][   T12]  ? __pfx_worker_thread+0x10/0x10
[ 1001.914468][   T12]  ? __pfx_kthread+0x10/0x10
[ 1001.914660][   T12]  ret_from_fork+0x20f/0x910
[ 1001.914827][   T12]  ? __switch_to+0x51c/0x750
[ 1001.915034][   T12]  ? __pfx_kthread+0x10/0x10
[ 1001.915230][   T12]  ret_from_fork_asm+0x1a/0x30
[ 1001.915458][   T12]  </TASK>
[ 1002.519373][T13051] loop6: detected capacity change from 0 to 128
[ 1002.531303][T13051] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1002.600852][   T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1002.696972][T13051] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1003.688481][T13059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2499'.
[ 1003.776260][T13060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2499'.
[ 1004.130685][ T7124] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1004.578912][T13064] loop0: detected capacity change from 0 to 4096
[ 1004.719610][T13066] loop4: detected capacity change from 0 to 1024
[ 1004.786573][T13066] EXT4-fs: inline encryption not supported
[ 1004.802032][T13066] EXT4-fs: Ignoring removed bh option
[ 1004.817312][T13069] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1004.863859][T13066] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[ 1004.982618][T13066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1005.074632][   T29] audit: type=1804 audit(1771322186.285:102): pid=13064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2501" name="/newroot/499/file1/file1" dev="loop0" ino=15 res=1 errno=0
[ 1005.217676][T13066] EXT4-fs error (device loop4): ext4_check_all_de:660: inode #12: block 7: comm syz.4.2503: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[ 1005.412407][T13075] EXT4-fs error (device loop4): ext4_check_all_de:660: inode #12: block 7: comm syz.4.2503: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[ 1005.630617][ T5830] NILFS (loop0): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed
[ 1005.945843][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1006.928937][T13079] loop0: detected capacity change from 0 to 32768
[ 1007.096268][T13079] 
[ 1007.096268][T13079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.096268][T13079] 
[ 1007.141491][T13079] 
[ 1007.141491][T13079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.141491][T13079] 
[ 1007.152521][T13079] 
[ 1007.152521][T13079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.152521][T13079] 
[ 1007.164515][T13079] 
[ 1007.164515][T13079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.164515][T13079] 
[ 1007.178194][T13079] 
[ 1007.178194][T13079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.178194][T13079] 
[ 1007.189646][T13079] 
[ 1007.189646][T13079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.189646][T13079] 
[ 1007.202289][T13079] 
[ 1007.202289][T13079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.202289][T13079] 
[ 1007.222014][  T111] 
[ 1007.222014][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.222014][  T111] 
[ 1007.273247][T13084] 
[ 1007.273247][T13084]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.273247][T13084] 
[ 1007.384781][T13084] 
[ 1007.384781][T13084]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.384781][T13084] 
[ 1007.440717][T13084] 
[ 1007.440717][T13084]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.440717][T13084] 
[ 1007.467482][T13084] 
[ 1007.467482][T13084]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.467482][T13084] 
[ 1007.531783][  T110] 
[ 1007.531783][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1007.531783][  T110] 
[ 1007.992159][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1007.998891][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1008.070525][ T5770] 
[ 1008.070525][ T5770]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1008.070525][ T5770] 
[ 1008.117515][ T5770] 
[ 1008.117515][ T5770]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1008.117515][ T5770] 
[ 1008.618726][T13098] input: syz1 as /devices/virtual/input/input22
[ 1009.010440][   T40] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1009.220559][   T40] usb 6-1: Using ep0 maxpacket: 16
[ 1009.289626][   T40] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1009.315972][   T40] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16
[ 1009.367737][   T40] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1009.415052][   T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1009.469577][   T40] usb 6-1: SerialNumber: syz
[ 1009.541029][T13100] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1009.601181][T13100] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1009.635490][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2516'.
[ 1009.712148][T13113] netlink: 'syz.0.2516': attribute type 15 has an invalid length.
[ 1009.875857][   T40] usb 6-1: USB disconnect, device number 9
[ 1010.670762][T13120] sctp: [Deprecated]: syz.6.2519 (pid 13120) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1010.670762][T13120] Use struct sctp_sack_info instead
[ 1012.447594][T13133] loop0: detected capacity change from 0 to 32768
[ 1012.458873][T13133] xfs: Deprecated parameter 'attr2'
[ 1012.464590][T13133] XFS: attr2 mount option is deprecated.
[ 1012.541947][T13138] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[ 1012.650914][T13133] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1012.670503][   T40] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1012.841804][   T40] usb 6-1: Using ep0 maxpacket: 16
[ 1012.885950][   T40] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1012.941693][   T29] audit: type=1326 audit(1771322194.145:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.2.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431b39bf79 code=0x7ffc0000
[ 1012.949215][   T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.051865][   T29] audit: type=1326 audit(1771322194.205:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.2.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431b39bf79 code=0x7ffc0000
[ 1013.078751][T13133] XFS (loop0): Ending clean mount
[ 1013.101874][T13133] XFS (loop0): Quotacheck needed: Please wait.
[ 1013.120792][   T40] usb 6-1: config 0 descriptor??
[ 1013.167476][T13133] XFS (loop0): Quotacheck: Done.
[ 1013.190095][   T29] audit: type=1326 audit(1771322194.235:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.2.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f431b39bf79 code=0x7ffc0000
[ 1013.237136][   T29] audit: type=1326 audit(1771322194.235:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.2.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431b39bf79 code=0x7ffc0000
[ 1013.304897][   T40] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1013.380245][   T29] audit: type=1326 audit(1771322194.235:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.2.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431b39bf79 code=0x7ffc0000
[ 1013.497593][   T29] audit: type=1326 audit(1771322194.235:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.2.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f431b39bf79 code=0x7ffc0000
[ 1013.614854][   T29] audit: type=1326 audit(1771322194.255:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.2.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431b39bf79 code=0x7ffc0000
[ 1013.743427][ T5770] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1013.759438][   T29] audit: type=1326 audit(1771322194.255:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.2.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f431b39bf79 code=0x7ffc0000
[ 1013.792088][   T29] audit: type=1326 audit(1771322194.265:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.2.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431b39bf79 code=0x7ffc0000
[ 1013.838408][   T29] audit: type=1326 audit(1771322194.265:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.2.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f431b39bf79 code=0x7ffc0000
[ 1014.276130][   T40] usb 6-1: USB disconnect, device number 10
[ 1015.139035][T13162] loop0: detected capacity change from 0 to 32768
[ 1015.174899][T13162] (syz.0.2532,13162,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1015.191285][T13162] (syz.0.2532,13162,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1015.249948][T13162] JBD2: Ignoring recovery information on journal
[ 1015.343884][T13162] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1015.973304][ T5770] ocfs2: Unmounting device (7,0) on (node local)
[ 1016.789567][T13176] loop5: detected capacity change from 0 to 512
[ 1016.821474][T13179] loop4: detected capacity change from 0 to 64
[ 1017.031160][T13176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1017.111137][T13176] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1017.291731][T13184] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000
[ 1017.678914][ T7263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1019.550005][   T40] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1019.752159][   T40] usb 6-1: Using ep0 maxpacket: 16
[ 1019.803355][   T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1019.847902][   T40] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1019.884146][T13209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2550'.
[ 1019.905488][   T40] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1019.949350][   T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1020.010276][   T40] usb 6-1: config 0 descriptor??
[ 1021.347973][   T40] usbhid 6-1:0.0: can't add hid device: -71
[ 1021.365927][   T40] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1021.436109][   T40] usb 6-1: USB disconnect, device number 11
[ 1022.475429][T13232] loop6: detected capacity change from 0 to 1024
[ 1022.513350][ T5830] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[ 1022.722901][ T5830] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1022.780055][ T5830] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1022.848302][ T5830] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[ 1022.895261][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.926900][ T5830] usb 1-1: Product: syz
[ 1022.958214][ T5830] usb 1-1: Manufacturer: syz
[ 1022.961076][T13232] hfsplus: catalog searching failed
[ 1022.985376][ T5830] usb 1-1: SerialNumber: syz
[ 1023.021176][ T5830] usb 1-1: config 0 descriptor??
[ 1023.080120][   T40] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1023.269126][   T40] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1023.296192][ T5830] usb 1-1: USB disconnect, device number 14
[ 1023.309252][   T40] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1023.410272][   T40] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1023.470480][   T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1023.499037][   T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1023.538432][   T34] hfsplus: b-tree write err: -5, ino 3
[ 1023.554076][   T40] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1023.586973][   T40] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1023.612223][   T40] usb 5-1: Product: syz
[ 1023.616659][   T40] usb 5-1: Manufacturer: syz
[ 1023.626152][T11087] hfsplus: node 4:3 still has 1 user(s)!
[ 1023.672528][   T40] cdc_wdm 5-1:1.0: skipping garbage
[ 1023.688794][   T40] cdc_wdm 5-1:1.0: skipping garbage
[ 1023.736681][   T40] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1023.757862][   T40] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1024.004130][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'.
[ 1024.322450][T13248] loop6: detected capacity change from 0 to 512
[ 1024.570620][T13252] batadv_slave_1: entered promiscuous mode
[ 1024.630142][ T5830] usb 5-1: USB disconnect, device number 15
[ 1024.696445][T13251] batadv_slave_1: left promiscuous mode
[ 1024.727134][T13248] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[ 1024.840498][T13248] System zones: 0-2, 18-18, 34-35
[ 1025.006197][T13248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1025.130709][T13248] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1025.890493][   T29] kauditd_printk_skb: 1 callbacks suppressed
[ 1025.890586][   T29] audit: type=1326 audit(1771322207.085:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41e19bf79 code=0x7ffc0000
[ 1026.067077][   T29] audit: type=1326 audit(1771322207.145:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41e19bf79 code=0x7ffc0000
[ 1026.098495][T13270] loop0: detected capacity change from 0 to 64
[ 1026.177578][   T29] audit: type=1326 audit(1771322207.165:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe41e19bf79 code=0x7ffc0000
[ 1026.292283][   T29] audit: type=1326 audit(1771322207.165:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41e19bf79 code=0x7ffc0000
[ 1026.395807][   T29] audit: type=1326 audit(1771322207.165:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41e19bf79 code=0x7ffc0000
[ 1026.492640][T11087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1026.540332][   T29] audit: type=1326 audit(1771322207.175:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe41e19bf79 code=0x7ffc0000
[ 1026.675804][   T29] audit: type=1326 audit(1771322207.185:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41e19bf79 code=0x7ffc0000
[ 1027.724356][   T29] audit: type=1326 audit(1771322207.195:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fe41e19bf79 code=0x7ffc0000
[ 1027.749057][   T29] audit: type=1326 audit(1771322207.195:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41e19bf79 code=0x7ffc0000
[ 1028.636940][T13274] loop4: detected capacity change from 0 to 65536
[ 1028.651697][   T29] audit: type=1326 audit(1771322207.195:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fe41e19bf79 code=0x7ffc0000
[ 1028.754802][T13274] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1028.985958][T13274] XFS (loop4): Ending clean mount
[ 1029.011251][T13274] XFS (loop4): syz.4.2577 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[ 1029.191719][ T5775] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1034.366242][T13344] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1038.129381][T13399] overlayfs: failed to clone upperpath
[ 1038.190308][T13400] raw_sendmsg: syz.0.2624 forgot to set AF_INET. Fix it!
[ 1038.606553][T13403] loop6: detected capacity change from 0 to 128
[ 1038.741370][T13403] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1038.768822][T13403] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1039.246503][T11087] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1039.779354][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'.
[ 1040.617492][T13411] loop5: detected capacity change from 0 to 40427
[ 1040.635656][T13411] F2FS-fs (loop5): invalid crc value
[ 1041.076886][T13411] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1041.157911][T13411] F2FS-fs (loop5): Start checkpoint disabled!
[ 1041.216526][T13411] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[ 1041.235753][T13411] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1042.071494][ T9319] kworker/u8:40: attempt to access beyond end of device
[ 1042.071494][ T9319] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1042.206772][T13426] loop6: detected capacity change from 0 to 1024
[ 1042.231870][ T9319] CPU: 1 UID: 0 PID: 9319 Comm: kworker/u8:40 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1042.232084][ T9319] Tainted: [L]=SOFTLOCKUP
[ 1042.232144][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1042.232274][ T9319] Workqueue: writeback wb_workfn (flush-7:5)
[ 1042.232471][ T9319] Call Trace:
[ 1042.232530][ T9319]  <TASK>
[ 1042.232588][ T9319]  __dump_stack+0x26/0x30
[ 1042.232778][ T9319]  dump_stack_lvl+0x14c/0x1c0
[ 1042.232969][ T9319]  dump_stack+0x1e/0x25
[ 1042.233153][ T9319]  f2fs_handle_critical_error+0xa6f/0xc20
[ 1042.233379][ T9319]  f2fs_stop_checkpoint+0x65/0x80
[ 1042.233571][ T9319]  f2fs_write_end_io+0x12e6/0x2560
[ 1042.233835][ T9319]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1042.234030][ T9319]  bio_endio+0x1006/0x1160
[ 1042.234245][ T9319]  submit_bio_noacct+0x533/0x2960
[ 1042.234518][ T9319]  submit_bio+0x57a/0x620
[ 1042.234731][ T9319]  f2fs_submit_write_bio+0x115/0x350
[ 1042.234914][ T9319]  __submit_merged_bio+0x16f/0x780
[ 1042.235097][ T9319]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1042.235333][ T9319]  __submit_merged_write_cond+0x4ba/0xae0
[ 1042.235550][ T9319]  f2fs_write_data_pages+0x5073/0x5e10
[ 1042.235916][ T9319]  ? kmsan_get_metadata+0xf1/0x160
[ 1042.236152][ T9319]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1042.236382][ T9319]  ? __update_load_avg_cfs_rq+0xd80/0x1060
[ 1042.236623][ T9319]  ? kmsan_get_metadata+0xf1/0x160
[ 1042.236832][ T9319]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1042.237104][ T9319]  ? kmsan_get_metadata+0xf1/0x160
[ 1042.237310][ T9319]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1042.237530][ T9319]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1042.237725][ T9319]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1042.237918][ T9319]  do_writepages+0x3f2/0x860
[ 1042.238146][ T9319]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1042.238375][ T9319]  ? queue_io+0x7a1/0x800
[ 1042.238557][ T9319]  ? kmsan_get_metadata+0xf1/0x160
[ 1042.238793][ T9319]  __writeback_single_inode+0xfc/0x1440
[ 1042.238999][ T9319]  ? kmsan_get_metadata+0xf1/0x160
[ 1042.239232][ T9319]  writeback_sb_inodes+0xb52/0x1f40
[ 1042.239599][ T9319]  wb_writeback+0x4f1/0xcd0
[ 1042.239807][ T9319]  ? queue_io+0x4a1/0x800
[ 1042.239992][ T9319]  wb_workfn+0x3b9/0x19b0
[ 1042.240162][ T9319]  ? kmsan_get_metadata+0xf1/0x160
[ 1042.240404][ T9319]  ? __pfx_wb_workfn+0x10/0x10
[ 1042.240565][ T9319]  process_scheduled_works+0xb21/0x1e30
[ 1042.240835][ T9319]  worker_thread+0xede/0x1580
[ 1042.241067][ T9319]  kthread+0x53f/0x600
[ 1042.241267][ T9319]  ? __pfx_worker_thread+0x10/0x10
[ 1042.241465][ T9319]  ? __pfx_kthread+0x10/0x10
[ 1042.241663][ T9319]  ret_from_fork+0x20f/0x910
[ 1042.241836][ T9319]  ? __switch_to+0x51c/0x750
[ 1042.242060][ T9319]  ? __pfx_kthread+0x10/0x10
[ 1042.242274][ T9319]  ret_from_fork_asm+0x1a/0x30
[ 1042.242523][ T9319]  </TASK>
[ 1042.503807][T13426] EXT4-fs: inline encryption not supported
[ 1042.568462][ T9319] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1042.866756][T13426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1043.430788][T11087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1044.102632][T13442] loop6: detected capacity change from 0 to 1024
[ 1044.293216][T13442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1044.310597][T13442] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1044.383825][   T29] kauditd_printk_skb: 1 callbacks suppressed
[ 1044.383916][   T29] audit: type=1800 audit(1771322225.595:125): pid=13442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2640" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1044.878401][T11087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1047.422738][T13482] loop4: detected capacity change from 0 to 512
[ 1047.836278][T13482] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1047.849982][T13482] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1047.974413][T13482] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2657: bad orphan inode 131083
[ 1048.087791][T13482] loop4: lost filesystem error report for type 5 error -117
[ 1048.142105][T13482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1048.390379][T13492] loop5: detected capacity change from 0 to 4096
[ 1048.785451][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1048.988582][T13495] loop2: detected capacity change from 0 to 7
[ 1049.044713][T13495] Dev loop2: unable to read RDB block 7
[ 1049.083567][T13495]  loop2: unable to read partition table
[ 1049.122298][T13495] loop2: partition table beyond EOD, truncated
[ 1049.158228][T13495] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1050.013083][T13503] overlayfs: failed to clone upperpath
[ 1050.027779][T13502] loop6: detected capacity change from 0 to 256
[ 1050.203977][T13502] exFAT-fs (loop6): error, invalid access to FAT bad cluster (entry 0x00000005)
[ 1050.258529][T13502] exFAT-fs (loop6): failed to count the number of clusters in root
[ 1050.308711][T13502] exFAT-fs (loop6): failed to recognize exfat type
[ 1050.649272][ T5830] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1050.848095][ T5830] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[ 1050.923003][ T5830] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1050.980325][ T5830] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1051.061947][ T5830] usb 7-1: config 220 has no interface number 2
[ 1051.091774][ T5830] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1051.185608][ T5830] usb 7-1: config 220 interface 0 has no altsetting 0
[ 1051.229954][ T5830] usb 7-1: config 220 interface 76 has no altsetting 0
[ 1051.272914][ T5830] usb 7-1: config 220 interface 1 has no altsetting 0
[ 1051.343229][ T5830] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1051.384592][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.445394][ T5830] usb 7-1: Product: syz
[ 1051.466560][ T5830] usb 7-1: Manufacturer: syz
[ 1051.487642][ T5830] usb 7-1: SerialNumber: syz
[ 1051.725764][   T29] audit: type=1326 audit(1771322232.935:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7ffc0000
[ 1051.836603][ T5830] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1051.865545][   T29] audit: type=1326 audit(1771322232.935:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7ffc0000
[ 1051.893304][ T5830] uvcvideo 7-1:220.0: No valid video chain found.
[ 1051.943659][ T5830] usb 7-1: selecting invalid altsetting 0
[ 1052.000493][   T29] audit: type=1326 audit(1771322232.935:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7ffc0000
[ 1052.096136][ T5830] usb 7-1: selecting invalid altsetting 0
[ 1052.125377][ T5830] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[ 1052.168051][   T29] audit: type=1326 audit(1771322232.975:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fce9299bf79 code=0x7ffc0000
[ 1052.221407][ T5830] usb 7-1: USB disconnect, device number 3
[ 1052.240175][   T29] audit: type=1326 audit(1771322232.975:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7ffc0000
[ 1052.300211][   T29] audit: type=1326 audit(1771322232.975:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7ffc0000
[ 1052.397381][T13511] loop4: detected capacity change from 0 to 4096
[ 1052.453967][T13511] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[ 1052.478130][   T29] audit: type=1326 audit(1771322233.025:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7ffc0000
[ 1052.548780][   T29] audit: type=1326 audit(1771322233.025:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7ffc0000
[ 1052.577671][   T29] audit: type=1326 audit(1771322233.035:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fce9299bf79 code=0x7ffc0000
[ 1052.743897][   T29] audit: type=1326 audit(1771322233.035:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9299bf79 code=0x7ffc0000
[ 1052.957741][T13511] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1053.004549][T13511] ntfs3(loop4): Failed to load $Extend (-22).
[ 1053.055763][T13511] ntfs3(loop4): Failed to initialize $Extend.
[ 1053.078737][T13528] gretap0: entered promiscuous mode
[ 1054.163768][T13539] loop4: detected capacity change from 0 to 2048
[ 1054.321069][T13539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1054.490284][ T5830] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1054.699994][ T5830] usb 1-1: Using ep0 maxpacket: 16
[ 1054.761980][ T5830] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1054.793184][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.837456][ T5830] usb 1-1: Product: syz
[ 1054.862050][ T5830] usb 1-1: Manufacturer: syz
[ 1054.891064][ T5830] usb 1-1: SerialNumber: syz
[ 1054.939167][ T5830] usb 1-1: config 0 descriptor??
[ 1055.007879][ T5830] visor 1-1:0.0: Sony Clie 3.5 converter detected
[ 1055.201547][ T5830] usb 1-1: clie_3_5_startup: get config number bad return length: 0
[ 1055.240825][ T5830] visor 1-1:0.0: probe with driver visor failed with error -5
[ 1055.422007][ T5830] usb 1-1: USB disconnect, device number 15
[ 1057.494514][T13579] loop5: detected capacity change from 0 to 64
[ 1059.566046][T13592] loop5: detected capacity change from 0 to 40427
[ 1059.581762][T13592] F2FS-fs (loop5): Image doesn't support compression
[ 1059.588877][T13592] F2FS-fs (loop5): build fault injection rate: 690
[ 1059.610595][T13592] F2FS-fs (loop5): invalid crc value
[ 1059.992613][T13592] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1060.004820][T13592] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1061.137776][T13609] loop0: detected capacity change from 0 to 4096
[ 1062.310089][   T40] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1062.564104][   T40] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[ 1062.610334][   T29] kauditd_printk_skb: 13 callbacks suppressed
[ 1062.610424][   T29] audit: type=1326 audit(1771322243.805:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz.0.2720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce9299bf79 code=0x0
[ 1062.661839][   T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[ 1062.728247][   T40] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[ 1062.731367][T13630] loop6: detected capacity change from 0 to 256
[ 1062.802525][   T40] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1062.850187][   T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.858592][   T40] usb 5-1: Product: syz
[ 1062.939881][   T40] usb 5-1: Manufacturer: syz
[ 1062.944831][   T40] usb 5-1: SerialNumber: syz
[ 1063.023124][   T40] usb 5-1: config 0 descriptor??
[ 1063.031950][T13623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1063.349950][T13623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1064.039983][   T40] usb 5-1: USB disconnect, device number 16
[ 1064.140218][T13637] bridge0: port 3(gretap0) entered blocking state
[ 1064.163110][T13637] bridge0: port 3(gretap0) entered disabled state
[ 1064.188151][T13637] gretap0: entered allmulticast mode
[ 1064.246563][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1064.316287][T13637] gretap0: entered promiscuous mode
[ 1064.400479][T13639] gretap0: left allmulticast mode
[ 1064.405780][T13639] gretap0: left promiscuous mode
[ 1064.469948][T13639] bridge0: port 3(gretap0) entered disabled state
[ 1066.910639][T13661] loop4: detected capacity change from 0 to 32768
[ 1067.037379][T13661] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1067.501030][T13661] XFS (loop4): Ending clean mount
[ 1067.642223][T13684] loop6: detected capacity change from 0 to 2048
[ 1067.703990][ T5775] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1067.750096][T13684] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1067.837525][T13684] NILFS (loop6): mounting unchecked fs
[ 1067.957239][T13684] NILFS (loop6): recovery complete
[ 1067.985911][T13691] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1068.553878][T13697] input: syz0 as /devices/virtual/input/input24
[ 1069.428033][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1069.435555][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1070.044213][T13699] loop5: detected capacity change from 0 to 8192
[ 1070.096430][T13709] binder: BINDER_SET_CONTEXT_MGR already set
[ 1070.190091][T13709] binder: 13706:13709 ioctl 4018620d 200000000100 returned -16
[ 1070.785703][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2751'.
[ 1070.831160][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2751'.
[ 1071.310557][T13721] loop8: detected capacity change from 0 to 7
[ 1071.381458][T13721] Dev loop8: unable to read RDB block 7
[ 1071.407085][T13721]  loop8: AHDI p1 p2 p3
[ 1071.470111][T13721] loop8: partition table partially beyond EOD, truncated
[ 1071.531867][T13721] loop8: p1 start 1601398130 is beyond EOD, truncated
[ 1071.590174][T13721] loop8: p2 start 1702059890 is beyond EOD, truncated
[ 1071.604980][T13724] Dev loop8: unable to read RDB block 7
[ 1071.641712][T13724]  loop8: AHDI p1 p2 p3
[ 1071.646140][T13724] loop8: partition table partially beyond EOD, truncated
[ 1071.747277][T13724] loop8: p1 start 1601398130 is beyond EOD, truncated
[ 1071.845388][T13724] loop8: p2 start 1702059890 is beyond EOD, truncated
[ 1072.231859][T13733] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2758'.
[ 1074.486338][T13751] loop6: detected capacity change from 0 to 32768
[ 1074.643915][T13751] 
[ 1074.643915][T13751]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1074.643915][T13751] 
[ 1074.811080][T11087] ERROR: (device loop6): diWrite: ixpxd invalid
[ 1074.811080][T11087] 
[ 1074.870881][T11087] ERROR: (device loop6): txAbort: 
[ 1074.870881][T11087] 
[ 1075.736162][T11087] 
[ 1075.736162][T11087]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1075.736162][T11087] 
[ 1075.782156][T11087] 
[ 1075.782156][T11087]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1075.782156][T11087] 
[ 1076.145976][ T7124] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.566093][ T7124] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.826026][ T7124] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.058048][ T7124] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.510682][ T7124] bridge_slave_1: left allmulticast mode
[ 1077.520588][ T7124] bridge_slave_1: left promiscuous mode
[ 1077.527379][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1077.545308][ T7124] bridge_slave_0: left allmulticast mode
[ 1077.567509][ T7124] bridge_slave_0: left promiscuous mode
[ 1077.575994][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1078.431560][ T7124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1078.498928][ T7124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1078.558880][ T7124] bond0 (unregistering): Released all slaves
[ 1079.340008][   T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1079.375291][T13794] loop2: detected capacity change from 0 to 7
[ 1079.411512][T13794] Dev loop2: unable to read RDB block 7
[ 1079.417549][T13794]  loop2: unable to read partition table
[ 1079.476456][T13794] loop2: partition table beyond EOD, truncated
[ 1079.529983][T13794] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1079.550306][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 1079.648155][   T10] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1079.686603][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.692998][T12653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1079.696279][   T10] usb 6-1: Product: syz
[ 1079.707291][   T10] usb 6-1: Manufacturer: syz
[ 1079.715919][   T10] usb 6-1: SerialNumber: syz
[ 1079.716367][T12653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1079.732392][T12653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1079.748153][T12653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1079.782230][T12653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1080.088474][   T10] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1080.173189][   T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1080.230268][   T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1080.260014][   T10] usb 6-1: media controller created
[ 1080.452551][ T7124] hsr_slave_0: left promiscuous mode
[ 1080.517355][ T7124] hsr_slave_1: left promiscuous mode
[ 1080.553138][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1080.611385][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1080.625804][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1080.654474][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1080.703217][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1080.952760][ T7124] veth1_macvtap: left promiscuous mode
[ 1081.011659][ T7124] veth0_macvtap: left promiscuous mode
[ 1081.099777][ T7124] veth1_vlan: left promiscuous mode
[ 1081.132554][ T7124] veth0_vlan: left promiscuous mode
[ 1081.180450][   T10] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1081.890051][ T9819] Bluetooth: hci1: command tx timeout
[ 1082.458905][T13822] loop5: detected capacity change from 0 to 128
[ 1082.481592][   T10] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1082.491962][T13805] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1082.558475][   T10] usb 6-1: USB disconnect, device number 12
[ 1082.569444][T13822] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1082.646814][T13822] hpfs: filesystem error: improperly stopped
[ 1082.674686][T13822] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1082.684428][T13805] usb 1-1: Using ep0 maxpacket: 32
[ 1082.744843][T13805] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[ 1082.780227][T13822] hpfs: You really don't want any checks? You are crazy...
[ 1082.800325][T13805] usb 1-1: config 0 has no interface number 0
[ 1082.830958][T13822] hpfs: hpfs_map_sector(): read error
[ 1082.895280][T13805] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1082.910174][T13822] hpfs: code page support is disabled
[ 1082.934905][T13805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.950809][T13822] hpfs: hpfs_map_4sectors(): unaligned read
[ 1082.997984][T13822] hpfs: hpfs_map_4sectors(): unaligned read
[ 1083.010964][T13805] usb 1-1: Product: syz
[ 1083.040525][T13805] usb 1-1: Manufacturer: syz
[ 1083.056194][T13822] hpfs: filesystem error: unable to find root dir
[ 1083.064412][T13805] usb 1-1: SerialNumber: syz
[ 1083.117870][T13805] usb 1-1: config 0 descriptor??
[ 1083.243434][T13822] hpfs: hpfs_map_4sectors(): unaligned read
[ 1083.362920][T13822] hpfs: hpfs_map_sector(): read error
[ 1083.960234][ T9819] Bluetooth: hci1: command tx timeout
[ 1084.313210][T13805] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[ 1084.372409][T13805] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1084.418127][T13805] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1084.452048][T13805] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[ 1084.571599][T13805] usb 1-1: USB disconnect, device number 16
[ 1084.982124][ T7124] team0 (unregistering): Port device team_slave_1 removed
[ 1085.067871][ T7124] team0 (unregistering): Port device team_slave_0 removed
[ 1086.040131][ T9819] Bluetooth: hci1: command tx timeout
[ 1086.188807][T13854] loop0: detected capacity change from 0 to 256
[ 1087.287199][T13864] loop0: detected capacity change from 0 to 512
[ 1087.352989][T13864] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1088.121330][ T9819] Bluetooth: hci1: command tx timeout
[ 1089.590016][T11552] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1089.820563][T11552] usb 5-1: Using ep0 maxpacket: 32
[ 1089.878822][T11552] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1089.898684][T13799] chnl_net:caif_netlink_parms(): no params data found
[ 1089.965502][T11552] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[ 1090.040289][T11552] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[ 1090.077025][T11552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.116425][T11552] usb 5-1: Product: syz
[ 1090.122246][T11552] usb 5-1: Manufacturer: syz
[ 1090.160272][T11552] usb 5-1: SerialNumber: syz
[ 1090.515108][   T40] usb 5-1: USB disconnect, device number 17
[ 1091.359572][T13903] loop0: detected capacity change from 0 to 512
[ 1091.633300][T13903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 1091.700410][T13903] ext4 filesystem being mounted at /565/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1092.391319][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 1092.469894][T13799] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1092.496834][T13799] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1092.560654][T13799] bridge_slave_0: entered allmulticast mode
[ 1092.604396][T13799] bridge_slave_0: entered promiscuous mode
[ 1092.710917][T13799] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1092.730860][T13799] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1092.739049][T13799] bridge_slave_1: entered allmulticast mode
[ 1092.854773][T13799] bridge_slave_1: entered promiscuous mode
[ 1093.318421][T13799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1093.433759][T13799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1093.807192][T13799] team0: Port device team_slave_0 added
[ 1093.867145][T13799] team0: Port device team_slave_1 added
[ 1094.124742][T13799] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1094.149371][T13799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1094.236511][T13799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1094.325189][T13799] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1094.343949][T13799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1094.387965][T13799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1095.332617][T13799] hsr_slave_0: entered promiscuous mode
[ 1095.416063][T13799] hsr_slave_1: entered promiscuous mode
[ 1095.621599][T13942] loop4: detected capacity change from 0 to 32768
[ 1096.913876][T13954] loop0: detected capacity change from 0 to 512
[ 1097.385454][T13950] loop4: detected capacity change from 0 to 40427
[ 1097.401599][T13950] F2FS-fs (loop4): build fault injection rate: 19
[ 1097.408580][T13950] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[ 1097.433746][T13950] F2FS-fs (loop4): invalid crc value
[ 1097.456433][T13954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1097.532543][T13954] ext4 filesystem being mounted at /567/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1097.625502][T13950] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80
[ 1097.696214][T13954] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.2837: corrupted inode contents
[ 1097.868946][T13954] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.2837: mark_inode_dirty error
[ 1097.952347][T13950] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0
[ 1097.972717][T13950] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1098.001869][T13950] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1098.076023][T13954] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.2837: corrupted inode contents
[ 1098.218139][T13954] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.2837: mark_inode_dirty error
[ 1098.362921][T13967] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.2837: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18]
[ 1098.362921][T13967] 
[ 1098.488362][T13954] EXT4-fs error (device loop0): ext4_lookup:1782: inode #18: comm syz.0.2837: 'bus' linked to parent dir
[ 1098.904205][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1099.043896][T13799] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1099.225148][T13799] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1099.431060][T13799] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1099.576705][T13799] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1101.468410][T13799] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1102.042940][T13799] 8021q: adding VLAN 0 to HW filter on device team0
[ 1102.367070][ T7153] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1102.374872][ T7153] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1102.694036][T14002] loop4: detected capacity change from 0 to 40427
[ 1102.707560][T14002] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[ 1102.714884][T14002] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1102.788170][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1102.796620][ T7153] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1103.101628][T14002] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1103.124351][T14002] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1103.131939][T14002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1105.364426][T14021] loop0: detected capacity change from 0 to 4096
[ 1105.475720][T14021] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[ 1105.961551][T14021] ntfs3(loop0): ino=1a, mi_enum_attr
[ 1105.993192][T14021] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[ 1106.170940][T14037] loop5: detected capacity change from 0 to 512
[ 1106.285911][T14037] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1106.392521][T14021] ntfs3(loop0): ino=1e, "file1" ntfs3_write_inode failed, -22.
[ 1106.472171][T14037] EXT4-fs (loop5): 1 truncate cleaned up
[ 1106.508409][T13799] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1106.551765][T14037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1106.830483][   T29] audit: type=1800 audit(1771322288.045:150): pid=14037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2861" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1107.418634][ T7263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1108.270275][T13805] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1108.518137][T13805] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1108.611251][T13805] usb 6-1: config 0 has no interfaces?
[ 1108.617146][T13805] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1108.721531][T13805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1108.882680][T13805] usb 6-1: config 0 descriptor??
[ 1108.944727][T14063] loop4: detected capacity change from 0 to 32768
[ 1108.976227][T14063] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2867 (14063)
[ 1109.017936][T14063] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1109.032210][T14063] BTRFS info (device loop4): using sha256 checksum algorithm
[ 1109.263935][ T5285] usb 6-1: USB disconnect, device number 13
[ 1109.334646][T14063] BTRFS info (device loop4): rebuilding free space tree
[ 1109.441207][T14063] BTRFS info (device loop4): disabling free space tree
[ 1109.448637][T14063] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1109.460666][T14063] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1109.512723][T14063] BTRFS info (device loop4): setting nodatasum
[ 1109.519433][T14063] BTRFS info (device loop4): setting nodatacow
[ 1109.526109][T14063] BTRFS info (device loop4): turning off barriers
[ 1109.533130][T14063] BTRFS info (device loop4): force clearing of disk cache
[ 1110.001587][ T5775] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1111.568882][T14099] loop0: detected capacity change from 0 to 2048
[ 1111.675936][T13799] veth0_vlan: entered promiscuous mode
[ 1111.712717][T14099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1111.919447][T13799] veth1_vlan: entered promiscuous mode
[ 1112.151885][T14099] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 1438: i_size: 65536 lbcount: 69632 extent 129+69120
[ 1112.790660][T13799] veth0_macvtap: entered promiscuous mode
[ 1112.918399][T13799] veth1_macvtap: entered promiscuous mode
[ 1113.449485][T13799] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1113.498647][T14113] loop0: detected capacity change from 0 to 256
[ 1113.620040][   T40] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1113.638547][T13799] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1113.830215][   T34] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.855381][   T40] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1113.860193][   T34] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.898771][   T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.945993][   T34] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.951475][   T40] usb 6-1: config 0 descriptor??
[ 1113.999168][   T34] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1114.077024][   T40] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1114.990439][   T40] gspca_stv06xx: I2C: Read error writing address: -71
[ 1115.154455][   T40] usb 6-1: USB disconnect, device number 14
[ 1117.744448][T14139] loop5: detected capacity change from 0 to 32768
[ 1117.951758][T14139] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[ 1117.963768][T14139] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1118.538147][T14139] XFS (loop5): Ending clean mount
[ 1118.585341][T14139] XFS (loop5): Quotacheck needed: Please wait.
[ 1118.661529][T14139] XFS (loop5): Quotacheck: Done.
[ 1118.714395][   T29] audit: type=1800 audit(1771322299.925:151): pid=14139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2887" name="file1" dev="loop5" ino=4422 res=0 errno=0
[ 1118.911307][ T7263] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1119.390285][T14170] loop4: detected capacity change from 0 to 256
[ 1119.774154][T14170] FAT-fs (loop4): Directory bread(block 64) failed
[ 1119.802859][T14170] FAT-fs (loop4): Directory bread(block 65) failed
[ 1119.825270][T14178] loop0: detected capacity change from 0 to 1024
[ 1119.837282][T14170] FAT-fs (loop4): Directory bread(block 66) failed
[ 1119.870018][T14170] FAT-fs (loop4): Directory bread(block 67) failed
[ 1119.916566][T14170] FAT-fs (loop4): Directory bread(block 68) failed
[ 1119.963690][T14170] FAT-fs (loop4): Directory bread(block 69) failed
[ 1120.006838][T14170] FAT-fs (loop4): Directory bread(block 70) failed
[ 1120.024686][T14178] hfsplus: b-tree write err: -5, ino 2
[ 1120.066026][T14170] FAT-fs (loop4): Directory bread(block 71) failed
[ 1120.086314][T14170] FAT-fs (loop4): Directory bread(block 72) failed
[ 1120.130482][T14170] FAT-fs (loop4): Directory bread(block 73) failed
[ 1120.591513][ T9319] hfsplus: b-tree write err: -5, ino 25
[ 1120.620975][ T9319] hfsplus: b-tree write err: -5, ino 4
[ 1120.656984][ T9319] hfsplus: b-tree write err: -5, ino 2
[ 1120.696545][ T9319] hfsplus: b-tree write err: -5, ino 26
[ 1120.719292][T14186] loop5: detected capacity change from 0 to 256
[ 1120.928648][T14186] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[ 1122.556214][T14197] loop4: detected capacity change from 0 to 32768
[ 1122.568254][T14197] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2902 (14197)
[ 1122.595494][T14197] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1122.606749][T14197] BTRFS info (device loop4): using sha256 checksum algorithm
[ 1122.672586][T14201] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2903'.
[ 1122.941428][T14197] BTRFS info (device loop4): enabling ssd optimizations
[ 1122.948912][T14197] BTRFS info (device loop4): turning on async discard
[ 1122.956543][T14197] BTRFS info (device loop4): enabling free space tree
[ 1123.390671][ T5775] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1123.399555][T14220] loop0: detected capacity change from 0 to 2048
[ 1123.613368][T14220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1124.235698][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1125.926535][T14244] loop0: detected capacity change from 0 to 32768
[ 1125.986168][T14244] xfs: Deprecated parameter 'attr2'
[ 1125.991806][T14244] XFS: attr2 mount option is deprecated.
[ 1126.059913][T14244] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1126.399454][T14244] XFS (loop0): Ending clean mount
[ 1126.416673][T14244] XFS (loop0): Quotacheck needed: Please wait.
[ 1126.559922][ T7147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1126.569278][ T7147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1126.604070][T14244] XFS (loop0): Quotacheck: Done.
[ 1126.790157][ T5770] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1126.801884][T14259] /dev/nullb0: Can't lookup blockdev
[ 1127.157021][ T7106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1127.211623][ T7106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.413057][T14287] loop7: detected capacity change from 0 to 32768
[ 1130.525948][T14287] JBD2: Ignoring recovery information on journal
[ 1130.635306][T14287] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 1130.874081][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1130.890513][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1130.939897][ T5942] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1131.160662][ T5942] usb 6-1: Using ep0 maxpacket: 8
[ 1131.232081][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1131.310069][ T5942] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1131.319557][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1131.415591][T13799] ocfs2: Unmounting device (7,7) on (node local)
[ 1131.457784][ T5942] usb 6-1: config 0 descriptor??
[ 1131.601941][ T5942] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1132.231998][T14311] netlink: 'syz.7.2930': attribute type 4 has an invalid length.
[ 1132.671805][ T5942] gspca_vc032x: reg_r err -71
[ 1132.677041][ T5942] vc032x 6-1:0.0: probe with driver vc032x failed with error -71
[ 1132.878258][ T5942] usb 6-1: USB disconnect, device number 15
[ 1133.337647][T14321] loop7: detected capacity change from 0 to 256
[ 1133.984255][T14321] FAT-fs (loop7): Directory bread(block 64) failed
[ 1134.034522][T14321] FAT-fs (loop7): Directory bread(block 65) failed
[ 1134.070478][T14321] FAT-fs (loop7): Directory bread(block 66) failed
[ 1134.118566][T14321] FAT-fs (loop7): Directory bread(block 67) failed
[ 1134.180598][T14321] FAT-fs (loop7): Directory bread(block 68) failed
[ 1134.250015][T14321] FAT-fs (loop7): Directory bread(block 69) failed
[ 1134.330695][T14321] FAT-fs (loop7): Directory bread(block 70) failed
[ 1134.410597][T14321] FAT-fs (loop7): Directory bread(block 71) failed
[ 1134.418148][T14321] FAT-fs (loop7): Directory bread(block 72) failed
[ 1134.571575][T14321] FAT-fs (loop7): Directory bread(block 73) failed
[ 1135.110825][T14331] loop0: detected capacity change from 0 to 32768
[ 1135.132428][T14331] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2939 (14331)
[ 1135.160759][T14331] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1135.173447][T14331] BTRFS info (device loop0): using sha256 checksum algorithm
[ 1135.190570][T14331] workqueue: max_active 33554440 requested for btrfs-worker is out of range, clamping between 1 and 2048
[ 1135.204887][T14331] workqueue: max_active 33554440 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[ 1135.263507][T14331] workqueue: max_active 33554440 requested for btrfs-endio is out of range, clamping between 1 and 2048
[ 1135.279262][T14331] workqueue: max_active 33554440 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[ 1135.385664][T14331] workqueue: max_active 33554440 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[ 1135.441191][T14331] workqueue: max_active 33554440 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[ 1135.635887][T14331] BTRFS info (device loop0): rebuilding free space tree
[ 1135.678609][T14331] BTRFS info (device loop0): disabling free space tree
[ 1135.688252][T14331] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1135.698877][T14331] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1135.764556][T14331] BTRFS info (device loop0): disabling tree log
[ 1135.771584][T14331] BTRFS info (device loop0): turning on async discard
[ 1135.778879][T14331] BTRFS info (device loop0): force clearing of disk cache
[ 1136.531946][ T5770] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1136.727784][T14361] sctp: [Deprecated]: syz.7.2944 (pid 14361) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1136.727784][T14361] Use struct sctp_sack_info instead
[ 1137.618055][T14371] loop4: detected capacity change from 0 to 512
[ 1137.748285][T14371] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1137.866639][T14371] EXT4-fs (loop4): 1 truncate cleaned up
[ 1138.002371][T14371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1138.254691][T14371] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.2949: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1138.427288][T14371] EXT4-fs (loop4): Remounting filesystem read-only
[ 1139.319032][ T5775] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1141.243498][T12653] Bluetooth: hci1: command 0x0405 tx timeout
[ 1143.370935][T14416] loop0: detected capacity change from 0 to 32768
[ 1143.390267][T14416] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2964 (14416)
[ 1143.574400][T14419] loop5: detected capacity change from 0 to 40427
[ 1143.596081][T14416] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1143.614023][T14416] BTRFS info (device loop0): using crc32c checksum algorithm
[ 1143.646120][T14419] F2FS-fs (loop5): Image doesn't support compression
[ 1143.657004][T14419] F2FS-fs (loop5): build fault injection rate: 690
[ 1143.673323][T14419] F2FS-fs (loop5): invalid crc value
[ 1143.944791][T14416] BTRFS info (device loop0): enabling ssd optimizations
[ 1143.952575][T14416] BTRFS info (device loop0): turning on async discard
[ 1143.960589][T14416] BTRFS info (device loop0): enabling free space tree
[ 1144.048362][T14419] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1144.059949][T14419] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1144.268290][   T29] audit: type=1800 audit(1771322325.475:152): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2965" name="file1" dev="loop5" ino=10 res=0 errno=0
[ 1144.437726][ T5770] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1145.007289][ T7263] syz-executor: attempt to access beyond end of device
[ 1145.007289][ T7263] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1145.117034][ T7263] CPU: 0 UID: 0 PID: 7263 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1145.117236][ T7263] Tainted: [L]=SOFTLOCKUP
[ 1145.117297][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1145.117391][ T7263] Call Trace:
[ 1145.117452][ T7263]  <TASK>
[ 1145.117508][ T7263]  __dump_stack+0x26/0x30
[ 1145.117705][ T7263]  dump_stack_lvl+0x14c/0x1c0
[ 1145.117906][ T7263]  dump_stack+0x1e/0x25
[ 1145.118079][ T7263]  f2fs_handle_critical_error+0xa6f/0xc20
[ 1145.118305][ T7263]  f2fs_stop_checkpoint+0x65/0x80
[ 1145.118494][ T7263]  f2fs_write_end_io+0x12e6/0x2560
[ 1145.118757][ T7263]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1145.118953][ T7263]  bio_endio+0x1006/0x1160
[ 1145.119160][ T7263]  submit_bio_noacct+0x533/0x2960
[ 1145.119428][ T7263]  submit_bio+0x57a/0x620
[ 1145.119640][ T7263]  f2fs_submit_write_bio+0x115/0x350
[ 1145.119820][ T7263]  __submit_merged_bio+0x16f/0x780
[ 1145.119991][ T7263]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1145.120213][ T7263]  __submit_merged_write_cond+0x4ba/0xae0
[ 1145.120422][ T7263]  f2fs_write_data_pages+0x5073/0x5e10
[ 1145.120778][ T7263]  ? kmsan_get_metadata+0xf1/0x160
[ 1145.121005][ T7263]  ? folio_batch_move_lru+0x6a2/0x6d0
[ 1145.121209][ T7263]  ? __msan_warning+0x1b/0x30
[ 1145.121393][ T7263]  ? filter_irq_stacks+0x13f/0x190
[ 1145.121615][ T7263]  ? stack_depot_save_flags+0x35/0x790
[ 1145.121817][ T7263]  ? kmsan_get_metadata+0xf1/0x160
[ 1145.122044][ T7263]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1145.122259][ T7263]  ? kmsan_get_metadata+0xf1/0x160
[ 1145.122467][ T7263]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1145.122678][ T7263]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1145.123087][ T7263]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1145.123278][ T7263]  do_writepages+0x3f2/0x860
[ 1145.123499][ T7263]  ? _raw_spin_unlock+0x30/0x50
[ 1145.123645][ T7263]  ? wbc_attach_and_unlock_inode+0x131/0x660
[ 1145.123917][ T7263]  filemap_fdatawrite+0x207/0x260
[ 1145.124176][ T7263]  f2fs_sync_dirty_inodes+0x2aa/0xaa0
[ 1145.124409][ T7263]  f2fs_write_checkpoint+0x10e1/0x3d20
[ 1145.124772][ T7263]  kill_f2fs_super+0x320/0x990
[ 1145.125018][ T7263]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1145.125207][ T7263]  deactivate_locked_super+0xcb/0x3c0
[ 1145.125394][ T7263]  deactivate_super+0x12f/0x140
[ 1145.125556][ T7263]  cleanup_mnt+0x7eb/0x870
[ 1145.125723][ T7263]  ? __pfx___cleanup_mnt+0x10/0x10
[ 1145.125886][ T7263]  __cleanup_mnt+0x22/0x30
[ 1145.126028][ T7263]  task_work_run+0x208/0x2b0
[ 1145.126247][ T7263]  exit_to_user_mode_loop+0x306/0x1b60
[ 1145.126475][ T7263]  ? user_path_at+0x1fc/0x330
[ 1145.126649][ T7263]  ? __x64_sys_umount+0x1dc/0x250
[ 1145.126861][ T7263]  do_syscall_64+0x24d/0xf80
[ 1145.127036][ T7263]  ? clear_bhb_loop+0x50/0xa0
[ 1145.127203][ T7263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1145.127370][ T7263] RIP: 0033:0x7fadc999d1d7
[ 1145.127489][ T7263] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1145.127624][ T7263] RSP: 002b:00007ffca3b8ab98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1145.127770][ T7263] RAX: 0000000000000000 RBX: 00007fadc9a31c3b RCX: 00007fadc999d1d7
[ 1145.127904][ T7263] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca3b8ac50
[ 1145.127998][ T7263] RBP: 00007ffca3b8ac50 R08: 00007ffca3b8bc50 R09: 00000000ffffffff
[ 1145.128103][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca3b8bce0
[ 1145.128198][ T7263] R13: 00007fadc9a31c3b R14: 000000000011761f R15: 00007ffca3b8bd20
[ 1145.128355][ T7263]  </TASK>
[ 1145.690539][ T7263] F2FS-fs (loop5): Remounting filesystem read-only
[ 1148.230021][T14471] loop4: detected capacity change from 0 to 32768
[ 1153.248829][T14517] loop0: detected capacity change from 0 to 2048
[ 1153.611978][T14517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1153.767040][T14517] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1154.183726][T14536] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2991: bg 0: block 345: padding at end of block bitmap is not set
[ 1154.236939][T14536] EXT4-fs (loop0): Remounting filesystem read-only
[ 1154.244871][ T7153] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[ 1154.763599][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2997'.
[ 1154.811340][T14543] bond0: Unable to set down delay as MII monitoring is disabled
[ 1154.840637][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1155.846779][T14561] loop7: detected capacity change from 0 to 256
[ 1156.106746][ T5974] =====================================================
[ 1156.114779][ T5974] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400
[ 1156.122957][ T5974]  _copy_to_iter+0xef3/0x3400
[ 1156.128058][ T5974]  copy_page_to_iter+0x482/0x900
[ 1156.137778][ T5974]  filemap_read+0xd03/0x2300
[ 1156.142889][ T5974]  blkdev_read_iter+0x89f/0xb00
[ 1156.148304][ T5974]  vfs_read+0x8ec/0xf90
[ 1156.152877][ T5974]  ksys_read+0x1d9/0x470
[ 1156.157334][ T5974]  __x64_sys_read+0x97/0xf0
[ 1156.163590][ T5974]  x64_sys_call+0x311c/0x3ea0
[ 1156.168629][ T5974]  do_syscall_64+0x134/0xf80
[ 1156.173809][ T5974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1156.180247][ T5974] 
[ 1156.182670][ T5974] Uninit was stored to memory at:
[ 1156.188108][ T5974]  _copy_to_iter+0x130f/0x3400
[ 1156.193284][ T5974]  copy_page_to_iter+0x482/0x900
[ 1156.198725][ T5974]  shmem_file_read_iter+0x904/0x1140
[ 1156.204522][ T5974]  lo_rw_aio+0x1164/0x14a0
[ 1156.209158][ T5974]  loop_process_work+0xf05/0x1ff0
[ 1156.214700][ T5974]  loop_rootcg_workfn+0x2b/0x40
[ 1156.220985][ T5974]  process_scheduled_works+0xb21/0x1e30
[ 1156.226930][ T5974]  worker_thread+0xede/0x1580
[ 1156.231988][ T5974]  kthread+0x53f/0x600
[ 1156.236275][ T5974]  ret_from_fork+0x20f/0x910
[ 1156.241248][ T5974]  ret_from_fork_asm+0x1a/0x30
[ 1156.246322][ T5974] 
[ 1156.248912][ T5974] Uninit was stored to memory at:
[ 1156.255555][ T5974]  copy_folio_from_iter_atomic+0xea0/0x38b0
[ 1156.262065][ T5974]  generic_perform_write+0x8b7/0x1050
[ 1156.269586][ T5974]  shmem_file_write_iter+0x2b7/0x2f0
[ 1156.275478][ T5974]  lo_rw_aio+0x1164/0x14a0
[ 1156.283209][ T5974]  loop_process_work+0xf05/0x1ff0
[ 1156.288924][ T5974]  loop_workfn+0x3e/0x60
[ 1156.293641][ T5974]  process_scheduled_works+0xb21/0x1e30
[ 1156.299496][ T5974]  worker_thread+0xede/0x1580
[ 1156.304669][ T5974]  kthread+0x53f/0x600
[ 1156.309318][ T5974]  ret_from_fork+0x20f/0x910
[ 1156.314463][ T5974]  ret_from_fork_asm+0x1a/0x30
[ 1156.319562][ T5974] 
[ 1156.322252][ T5974] Uninit was stored to memory at:
[ 1156.327783][ T5974]  lmWriteRecord+0x12f6/0x1df0
[ 1156.333101][ T5974]  lmLogInit+0x2004/0x27a0
[ 1156.337719][ T5974]  lmLogOpen+0xadc/0x2130
[ 1156.342715][ T5974]  jfs_mount_rw+0xdf/0x9f0
[ 1156.347418][ T5974]  jfs_fill_super+0xabf/0x18f0
[ 1156.353150][ T5974]  get_tree_bdev_flags+0x6e6/0x920
[ 1156.358580][ T5974]  get_tree_bdev+0x38/0x50
[ 1156.363556][ T5974]  jfs_get_tree+0x35/0x40
[ 1156.369717][ T5974]  vfs_get_tree+0xb3/0x5d0
[ 1156.374524][ T5974]  do_new_mount+0x885/0x1dd0
[ 1156.379434][ T5974]  path_mount+0x7a2/0x20b0
[ 1156.384416][ T5974]  __se_sys_mount+0x704/0x7f0
[ 1156.389451][ T5974]  __x64_sys_mount+0xe4/0x150
[ 1156.394736][ T5974]  x64_sys_call+0x39f0/0x3ea0
[ 1156.400690][ T5974]  do_syscall_64+0x134/0xf80
[ 1156.405610][ T5974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1156.411950][ T5974] 
[ 1156.414410][ T5974] Local variable lrd created at:
[ 1156.419556][ T5974]  lmLogInit+0x41/0x27a0
[ 1156.424290][ T5974]  lmLogOpen+0xadc/0x2130
[ 1156.429168][ T5974] 
[ 1156.431976][ T5974] Bytes 2572-2575 of 4096 are uninitialized
[ 1156.438270][ T5974] Memory access of size 4096 starts at ffff888128103000
[ 1156.446436][ T5974] Data copied to user address 00007fd115393000
[ 1156.453116][ T5974] 
[ 1156.455633][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1156.466599][ T5974] Tainted: [L]=SOFTLOCKUP
[ 1156.472398][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1156.483202][ T5974] =====================================================
[ 1156.490785][ T5974] Disabling lock debugging due to kernel taint
[ 1157.008113][ T5974] Kernel panic - not syncing: kmsan.panic set ...
[ 1157.014764][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: udevd Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[ 1157.025882][ T5974] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[ 1157.031557][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1157.041877][ T5974] Call Trace:
[ 1157.045551][ T5974]  <TASK>
[ 1157.048717][ T5974]  __dump_stack+0x26/0x30
[ 1157.053623][ T5974]  dump_stack_lvl+0x50/0x1c0
[ 1157.058658][ T5974]  ? dump_stack+0x12/0x25
[ 1157.063217][ T5974]  dump_stack+0x1e/0x25
[ 1157.067694][ T5974]  vpanic+0x7b4/0x1430
[ 1157.072479][ T5974]  panic+0x15d/0x160
[ 1157.076663][ T5974]  kmsan_report+0x31a/0x320
[ 1157.081527][ T5974]  ? kmsan_internal_check_memory+0x166/0x240
[ 1157.087916][ T5974]  ? kmsan_copy_to_user+0xef/0x190
[ 1157.093426][ T5974]  ? _copy_to_iter+0xef3/0x3400
[ 1157.098669][ T5974]  ? copy_page_to_iter+0x482/0x900
[ 1157.104123][ T5974]  ? filemap_read+0xd03/0x2300
[ 1157.109256][ T5974]  ? blkdev_read_iter+0x89f/0xb00
[ 1157.114453][ T5974]  ? vfs_read+0x8ec/0xf90
[ 1157.119378][ T5974]  ? ksys_read+0x1d9/0x470
[ 1157.124298][ T5974]  ? __x64_sys_read+0x97/0xf0
[ 1157.129378][ T5974]  ? x64_sys_call+0x311c/0x3ea0
[ 1157.134638][ T5974]  ? do_syscall_64+0x134/0xf80
[ 1157.139970][ T5974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1157.146270][ T5974]  ? kmsan_internal_unpoison_memory+0x14/0x20
[ 1157.152871][ T5974]  ? up_read+0x6a/0xf0
[ 1157.157207][ T5974]  ? kmsan_get_metadata+0xf1/0x160
[ 1157.162893][ T5974]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1157.169029][ T5974]  ? raw_irqentry_exit_cond_resched+0x3f/0x80
[ 1157.175439][ T5974]  ? irqentry_exit+0x8f/0x6d0
[ 1157.180584][ T5974]  ? kmsan_get_metadata+0xf1/0x160
[ 1157.186054][ T5974]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1157.192324][ T5974]  kmsan_internal_check_memory+0x166/0x240
[ 1157.198375][ T5974]  kmsan_copy_to_user+0xef/0x190
[ 1157.203626][ T5974]  _copy_to_iter+0xef3/0x3400
[ 1157.208877][ T5974]  ? kmsan_get_shadow_origin_ptr+0x35/0xb0
[ 1157.215044][ T5974]  ? filemap_get_pages+0x398d/0x3d30
[ 1157.220619][ T5974]  copy_page_to_iter+0x482/0x900
[ 1157.225845][ T5974]  filemap_read+0xd03/0x2300
[ 1157.230835][ T5974]  ? kmsan_get_metadata+0xf1/0x160
[ 1157.236472][ T5974]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1157.242627][ T5974]  ? __rcu_read_unlock+0x6c/0xd0
[ 1157.247966][ T5974]  ? aa_file_perm+0x417/0x27c0
[ 1157.253141][ T5974]  blkdev_read_iter+0x89f/0xb00
[ 1157.258219][ T5974]  vfs_read+0x8ec/0xf90
[ 1157.262680][ T5974]  ? __pfx_blkdev_read_iter+0x10/0x10
[ 1157.268347][ T5974]  ksys_read+0x1d9/0x470
[ 1157.272895][ T5974]  __x64_sys_read+0x97/0xf0
[ 1157.277621][ T5974]  x64_sys_call+0x311c/0x3ea0
[ 1157.282533][ T5974]  do_syscall_64+0x134/0xf80
[ 1157.287348][ T5974]  ? clear_bhb_loop+0x50/0xa0
[ 1157.292260][ T5974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1157.298648][ T5974] RIP: 0033:0x7fd1154a7407
[ 1157.303317][ T5974] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1157.323496][ T5974] RSP: 002b:00007fffc1b75140 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 1157.332210][ T5974] RAX: ffffffffffffffda RBX: 00007fd115b65880 RCX: 00007fd1154a7407
[ 1157.340336][ T5974] RDX: 0000000000010000 RSI: 00007fd115390000 RDI: 0000000000000009
[ 1157.348544][ T5974] RBP: 000055aede44dfc0 R08: 0000000000000000 R09: 0000000000000000
[ 1157.356991][ T5974] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000018
[ 1157.365294][ T5974] R13: 0000000000f00000 R14: 000055aede43b428 R15: 00007fd115c8c39c
[ 1157.373584][ T5974]  </TASK>
[ 1157.377145][ T5974] Kernel Offset: disabled
[ 1157.381891][ T5974] Rebooting in 86400 seconds..