last executing test programs:

20.122928439s ago: executing program 1 (id=520):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f"], 0x20)

20.122811462s ago: executing program 1 (id=521):
add_key(0x0, 0x0, &(0x7f0000000d80)="0000000000000004", 0x8, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x80000)
read(r2, &(0x7f00000000c0)=""/226, 0xe2)

19.238772479s ago: executing program 1 (id=540):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r2, 0x402, 0x8000003d)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

19.237826613s ago: executing program 1 (id=542):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000004c0)={[{@nobarrier}, {@gid}, {}, {@force}, {}, {@nodecompose}, {@nls={'nls', 0x3d, 'default'}}]}, 0x44, 0x6fc, &(0x7f0000003180)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x307, &(0x7f0000000080)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0)
ioctl$FIBMAP(r1, 0x1, 0xfffffffffffffffe)
renameat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00', 0x2)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)

19.157040708s ago: executing program 1 (id=545):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e255000001"], 0x50)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000240), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
listen(r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

18.713855062s ago: executing program 1 (id=546):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@coherency_buffered}, {@heartbeat_none}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@commit={'commit', 0x3d, 0xf7}}, {@journal_async_commit}, {@localflocks}, {@nointr}, {@resv_level={'resv_level', 0x3d, 0x7}}]}, 0x25, 0x442b, &(0x7f0000004480)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

18.620094367s ago: executing program 32 (id=546):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@coherency_buffered}, {@heartbeat_none}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@commit={'commit', 0x3d, 0xf7}}, {@journal_async_commit}, {@localflocks}, {@nointr}, {@resv_level={'resv_level', 0x3d, 0x7}}]}, 0x25, 0x442b, &(0x7f0000004480)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

3.823428334s ago: executing program 2 (id=746):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20044081, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x40}, 0x1c)
shutdown(r0, 0x0)
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=""/69, 0x45}], 0x1}, 0x40000112)

3.823263636s ago: executing program 2 (id=748):
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
writev(r0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000440)='Y', 0x1}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

3.294733253s ago: executing program 0 (id=756):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x40, 0xb, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002)

3.294535951s ago: executing program 0 (id=757):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x4008800)

3.234225428s ago: executing program 0 (id=758):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fcntl$dupfd(r0, 0x406, r0)

3.233993047s ago: executing program 0 (id=759):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="85000000a00000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
write$P9_RSTATu(r7, 0x0, 0x5a)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

2.670752766s ago: executing program 3 (id=762):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
set_robust_list(&(0x7f0000000180)={0x0, 0x5}, 0x18)

2.650484503s ago: executing program 3 (id=763):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x40, 0x8, 0x4, "586ba34a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x19, 0x2, "498f"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x7fff}, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

336.39778ms ago: executing program 2 (id=764):
syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dda000028060000010000000000000000000000000002fe8000000000000000000000000000aa000040"], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

252.626361ms ago: executing program 2 (id=765):
io_pgetevents(0x0, 0xfffffffffffffff8, 0x4, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={[0xfffffffffffffffd]}})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f})

249.130779ms ago: executing program 3 (id=766):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000e90000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000000240001800a000100717565756500000014000280080004400000001006000340000100000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)

141.916446ms ago: executing program 2 (id=767):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff}, [@alu={0x4, 0x0, 0x2, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000000000000079104800000000007100"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x2}, 0x94)

141.69753ms ago: executing program 0 (id=768):
syz_mount_image$hfsplus(&(0x7f0000000480), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x616, &(0x7f0000002600)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

141.558292ms ago: executing program 3 (id=769):
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0}, 0x18)

141.391394ms ago: executing program 2 (id=770):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00')
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f0000005440)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="4a4654aa3bb734d314", @ANYRES8=r0, @ANYRESOCT], 0xb, 0x0, &(0x7f0000000000))

54.325348ms ago: executing program 3 (id=771):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0)

237.228µs ago: executing program 0 (id=772):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0)

0s ago: executing program 3 (id=773):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

d blocking state
[   47.032678][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.035179][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.037474][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.043587][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.047841][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.051207][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.054779][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.057468][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.124771][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.144364][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   47.149709][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.161336][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.164014][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.171944][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.174431][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.180018][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.190172][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   47.201041][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.203512][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.224089][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   47.227996][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.230740][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.248156][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.250428][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.261217][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.263577][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.278889][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.282064][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.379172][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.411613][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.415705][ T5849] veth0_vlan: entered promiscuous mode
[   47.430565][ T5849] veth1_vlan: entered promiscuous mode
[   47.435536][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.474612][ T5844] veth0_vlan: entered promiscuous mode
[   47.481146][ T5849] veth0_macvtap: entered promiscuous mode
[   47.486895][ T5844] veth1_vlan: entered promiscuous mode
[   47.489781][ T5849] veth1_macvtap: entered promiscuous mode
[   47.495295][ T5852] veth0_vlan: entered promiscuous mode
[   47.508133][ T5852] veth1_vlan: entered promiscuous mode
[   47.517096][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.528216][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.541611][ T5743] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.544844][ T5743] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.548429][ T5844] veth0_macvtap: entered promiscuous mode
[   47.555743][ T5844] veth1_macvtap: entered promiscuous mode
[   47.558591][ T5852] veth0_macvtap: entered promiscuous mode
[   47.562602][ T5852] veth1_macvtap: entered promiscuous mode
[   47.565898][ T5743] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.576037][ T5743] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.594822][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.598097][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.612698][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.618917][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.624622][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.638049][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.643883][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.647753][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.651123][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.654343][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.665898][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.669343][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.681778][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.688426][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.706549][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.720666][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.760916][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.764921][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.774102][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.786418][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.788874][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.833740][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.835696][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.838343][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.839425][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.904060][ T5236] Bluetooth: hci1: command tx timeout
[   47.904440][   T53] Bluetooth: hci0: command tx timeout
[   47.983151][   T53] Bluetooth: hci2: command tx timeout
[   48.099614][ T5929] Invalid option length (65058) for dns_resolver key
[   48.781528][ T5940] syz.2.15: attempt to access beyond end of device
[   48.781528][ T5940] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   48.786129][ T5940] efs: cannot read volume header
[   49.098291][ T5944] loop0: detected capacity change from 0 to 1024
[   49.179216][ T5944] hfsplus: bad catalog entry type
[   49.215139][ T1097] hfsplus: b-tree write err: -5, ino 4
[   49.672452][ T5971] syz.0.28: attempt to access beyond end of device
[   49.672452][ T5971] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0
[   49.681346][ T5971] vxfs: unable to read disk superblock at 1
[   49.689090][ T5971] syz.0.28: attempt to access beyond end of device
[   49.689090][ T5971] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0
[   49.699085][ T5971] vxfs: unable to read disk superblock at 8
[   49.701083][ T5971] vxfs: can't find superblock.
[   49.771030][ T5980] Zero length message leads to an empty skb
[   49.787753][ T5982] netlink: 128 bytes leftover after parsing attributes in process `syz.1.34'.
[   49.804246][ T5984] loop0: detected capacity change from 0 to 512
[   49.830979][ T5984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.840422][ T5984] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.866356][   T33] audit: type=1800 audit(1755064780.606:2): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.35" name="file1" dev="loop0" ino=15 res=0 errno=0
[   49.869237][ T5989] loop1: detected capacity change from 0 to 4096
[   49.873399][   T33] audit: type=1800 audit(1755064780.616:3): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.35" name="file1" dev="loop0" ino=15 res=0 errno=0
[   49.884306][ T5989] ntfs3(loop1): ino=3, Correct links count -> 2.
[   49.928940][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.983053][   T53] Bluetooth: hci0: command tx timeout
[   49.993081][   T53] Bluetooth: hci1: command tx timeout
[   50.069217][   T53] Bluetooth: hci2: command tx timeout
[   50.476312][   T33] audit: type=1326 audit(1755064781.216:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.27" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25d8ebe9 code=0x7fc00000
[   50.513033][ T6004] serio: Serial port ptm0
[   51.615588][ T6044] loop2: detected capacity change from 0 to 64
[   51.665675][ T6031] loop1: detected capacity change from 0 to 32768
[   51.673771][ T6031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.53 (6031)
[   51.704117][ T6031] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   51.707708][ T6031] BTRFS info (device loop1 state S): using crc32c (crc32c-lib) checksum algorithm
[   51.721824][   T27] BTRFS warning (device loop1 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[   51.734338][ T4624] BTRFS warning (device loop1 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[   51.739506][   T27] BTRFS warning (device loop1 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[   51.745873][ T4624] BTRFS warning (device loop1 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[   51.757684][ T6031] BTRFS error (device loop1 state S): logical 6881280 len 1638400 found bg but no related chunk
[   51.763709][ T6064] netlink: 'syz.2.60': attribute type 1 has an invalid length.
[   51.801061][ T5844] BTRFS info (device loop1 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   52.038420][ T6076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   52.063020][   T53] Bluetooth: hci1: command tx timeout
[   52.063062][ T5236] Bluetooth: hci0: command tx timeout
[   52.083310][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   52.142909][ T5236] Bluetooth: hci2: command tx timeout
[   52.172834][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   52.252854][   T24] usb 3-1: Using ep0 maxpacket: 32
[   52.257129][   T24] usb 3-1: config 0 has an invalid interface number: 225 but max is 0
[   52.259972][   T24] usb 3-1: config 0 has no interface number 0
[   52.264176][   T24] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79
[   52.267043][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.269583][   T24] usb 3-1: Product: syz
[   52.270929][   T24] usb 3-1: Manufacturer: syz
[   52.272439][   T24] usb 3-1: SerialNumber: syz
[   52.276607][   T24] usb 3-1: config 0 descriptor??
[   52.322954][   T10] usb 2-1: Using ep0 maxpacket: 16
[   52.327934][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   52.332268][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   52.338085][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   52.341264][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   52.345193][   T10] usb 2-1: Product: syz
[   52.346585][   T10] usb 2-1: Manufacturer: syz
[   52.348323][   T10] usb 2-1: SerialNumber: syz
[   52.352283][   T10] usb 2-1: config 0 descriptor??
[   52.357689][   T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   52.360901][   T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[   52.691438][   T24] mos7840 3-1:0.225: required endpoints missing
[   52.697650][   T24] usb 3-1: USB disconnect, device number 2
[   52.985792][   T10] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[   52.988877][   T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[   53.365725][ T6086] @: renamed from bond_slave_0 (while UP)
[   53.494147][ T6096] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.498426][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'.
[   53.600448][   T10] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[   53.614581][   T10] em28xx 2-1:0.0: couldn't setup AC97 register 2
[   53.619071][   T10] em28xx 2-1:0.0: couldn't setup AC97 register 4
[   53.822513][   T10] em28xx 2-1:0.0: couldn't setup AC97 register 6
[   53.826143][   T10] em28xx 2-1:0.0: couldn't setup AC97 register 54
[   53.828520][   T10] em28xx 2-1:0.0: couldn't setup AC97 register 56
[   53.837243][   T10] usb 2-1: USB disconnect, device number 2
[   54.002266][ T6132] loop2: detected capacity change from 0 to 256
[   54.008577][ T6132] =======================================================
[   54.008577][ T6132] WARNING: The mand mount option has been deprecated and
[   54.008577][ T6132]          and is ignored by this kernel. Remove the mand
[   54.008577][ T6132]          option from the mount to silence this warning.
[   54.008577][ T6132] =======================================================
[   54.020848][ T6132] vfat: Bad value for 'shortname'
[   54.092884][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   54.142934][ T5236] Bluetooth: hci1: command tx timeout
[   54.142954][   T53] Bluetooth: hci0: command tx timeout
[   54.223301][   T53] Bluetooth: hci2: command tx timeout
[   54.242851][   T24] usb 1-1: Using ep0 maxpacket: 8
[   54.251018][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[   54.255117][   T24] usb 1-1: unable to read config index 0 descriptor/start: -71
[   54.257496][   T24] usb 1-1: can't read configurations, error -71
[   54.273236][ T5888] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   54.432847][ T5888] usb 3-1: Using ep0 maxpacket: 16
[   54.438073][ T5888] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 116, changing to 10
[   54.443196][ T5888] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 24940, setting to 1024
[   54.447743][ T5888] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   54.456811][ T5888] usb 3-1: config 0 interface 0 has no altsetting 0
[   54.459537][ T5888] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   54.463725][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.470504][ T5888] usb 3-1: config 0 descriptor??
[   54.470866][ T6136] loop1: detected capacity change from 0 to 32768
[   54.495681][ T6136] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   54.514290][ T6136] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[   54.520955][ T6136] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   54.525206][ T6136] OCFS2: File system is now read-only.
[   54.527047][ T6136] (syz.1.92,6136,0):ocfs2_find_leaf:1948 ERROR: status = -30
[   54.529482][ T6136] (syz.1.92,6136,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[   54.532182][ T6136] (syz.1.92,6136,0):ocfs2_fiemap:786 ERROR: status = -30
[   54.604893][ T5844] ocfs2: Unmounting device (7,1) on (node local)
[   54.725227][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'.
[   54.847150][ T6150] loop0: detected capacity change from 0 to 2048
[   54.853812][ T6150] EXT4-fs: Invalid want_extra_isize 9
[   54.886320][ T5888] hid (null): invalid report_size 27418
[   54.897948][ T5888] hid (null): unknown global tag 0xe
[   54.899785][ T5888] hid (null): unknown global tag 0xe
[   54.901608][ T5888] hid (null): global environment stack overflow
[   54.905973][ T5888] hid (null): unknown global tag 0xd
[   54.907767][ T5888] hid (null): unknown global tag 0xe
[   54.909904][ T5888] hid (null): unknown global tag 0xd
[   54.912183][ T5888] hid (null): unknown global tag 0x8b
[   55.090143][ T5888] usb 3-1: USB disconnect, device number 3
[   55.262026][ T6162] syz.1.103 uses obsolete (PF_INET,SOCK_PACKET)
[   55.592812][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   55.742850][   T10] usb 2-1: Using ep0 maxpacket: 32
[   55.754502][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.758120][   T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   55.760967][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.765232][   T10] usb 2-1: config 0 descriptor??
[   55.902800][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   55.912789][ T6155] comedi comedi2: reset error (fatal)
[   56.038970][ T6184] batadv_slave_1: entered promiscuous mode
[   56.041487][ T6184] batadv_slave_1: left promiscuous mode
[   56.053531][ T5886] usb 3-1: Using ep0 maxpacket: 32
[   56.074966][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[   56.085358][ T5886] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[   56.088913][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.092587][ T5886] usb 3-1: Product: syz
[   56.095640][ T5886] usb 3-1: Manufacturer: syz
[   56.097247][ T5886] usb 3-1: SerialNumber: syz
[   56.103361][ T5886] usb 3-1: config 0 descriptor??
[   56.115781][ T5886] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   56.179691][   T10] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0
[   56.182203][   T10] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0
[   56.183575][ T6186] loop0: detected capacity change from 0 to 32768
[   56.190210][ T6186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.114 (6186)
[   56.194458][   T10] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0
[   56.194480][   T10] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0
[   56.194490][   T10] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0
[   56.203777][   T10] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[   56.221668][ T6186] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   56.226164][ T6186] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   56.228953][ T6186] BTRFS info (device loop0): using free-space-tree
[   56.300257][ T5849] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   56.316923][   T60] usb 3-1: USB disconnect, device number 4
[   56.319222][ T5887] usb 3-1: Failed to submit usb control message: -71
[   56.328147][ T5887] usb 3-1: unable to send the bmi data to the device: -71
[   56.334471][ T5887] usb 3-1: unable to get target info from device
[   56.338768][ T5887] usb 3-1: could not get target info (-71)
[   56.355182][ T5887] usb 3-1: could not probe fw (-71)
[   56.426562][ T6210] netlink: 64 bytes leftover after parsing attributes in process `syz.0.116'.
[   56.445063][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.449156][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.455381][   T10] koneplus 0003:1E7D:2D51.0002: couldn't init struct koneplus_device
[   56.460637][   T10] koneplus 0003:1E7D:2D51.0002: couldn't install mouse
[   56.476494][   T10] koneplus 0003:1E7D:2D51.0002: probe with driver koneplus failed with error -71
[   56.481821][   T10] usb 2-1: USB disconnect, device number 3
[   56.546229][ T6217] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   56.845151][ T6235] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[   56.855868][ T6237] loop2: detected capacity change from 0 to 64
[   56.869214][ T6237] syz.2.128: attempt to access beyond end of device
[   56.869214][ T6237] loop2: rw=0, sector=16777216, nr_sectors = 2 limit=64
[   56.878548][ T6237] Buffer I/O error on dev loop2, logical block 8388608, async page read
[   56.894928][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'.
[   56.898007][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'.
[   57.028209][ T6251] bridge0: entered promiscuous mode
[   57.030525][ T6251] bond0: entered promiscuous mode
[   57.032185][ T6251] bond_slave_0: entered promiscuous mode
[   57.041993][ T6251] bond_slave_1: entered promiscuous mode
[   57.045683][ T6251] hsr1: entered allmulticast mode
[   57.047616][ T6251] bridge0: entered allmulticast mode
[   57.049553][ T6251] bond0: entered allmulticast mode
[   57.051484][ T6251] bond_slave_0: entered allmulticast mode
[   57.054272][ T6251] bond_slave_1: entered allmulticast mode
[   57.250766][ T6270] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component
[   57.472425][ T6284] loop0: detected capacity change from 0 to 8
[   57.491662][ T6284] SQUASHFS error: Failed to read block 0x63a: -5
[   57.495554][ T6284] SQUASHFS error: Unable to read metadata cache entry [638]
[   57.498284][ T6284] SQUASHFS error: Unable to read directory block [26067d:0]
[   57.811176][ T6249] syz.2.134 (6249): drop_caches: 2
[   57.821596][ T6249] syz.2.134 (6249): drop_caches: 2
[   58.154291][ T5886] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   58.330771][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short
[   58.336282][ T5886] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[   58.339836][ T5886] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 2
[   58.344710][ T5886] usb 3-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0
[   58.348283][ T5886] usb 3-1: config 66 interface 0 has no altsetting 0
[   58.356888][ T5886] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[   58.360036][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.363080][ T5886] usb 3-1: Product: syz
[   58.364712][ T5886] usb 3-1: Manufacturer: syz
[   58.366546][ T5886] usb 3-1: SerialNumber: syz
[   58.616389][ T5886] ati_remote2 3-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1
[   58.634451][ T5886] usb 3-1: USB disconnect, device number 5
[   59.254168][ T6316] loop0: detected capacity change from 0 to 32768
[   59.263332][ T6316] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   59.263332][ T6316] clean (size 2912):
[   59.263332][ T6316] flags:          0
[   59.263332][ T6316] journal_seq:    10
[   59.263332][ T6316] usage: type=inodes v=8
[   59.263332][ T6316] usage: type=key_version v=0
[   59.263332][ T6316] usage: type=reserved v=0
[   59.263332][ T6316] usage: type=reserved v=0
[   59.263332][ T6316] usage: type=reserved v=0
[   59.263332][ T6316] usage: type=reserved v=0
[   59.263332][ T6316] data_usage: btree: 1/1 [0]=2816
[   59.263332][ T6316] data_usage: journal: 1/1 [0]=0
[   59.263332][ T6316] data_usage: user: 1/1 [0]=16
[   59.263332][ T6316] dev_usage: dev=0  
[   59.263332][ T6316]   free: buckets=83 sectors=0 fragmented=0
[   59.263332][ T6316]   sb: buckets=25 sectors=6152 fragmented=248
[   59.263332][ T6316]   journal: buckets=8 sectors=2048 fragmented=0
[   59.263332][ T6316]   btree: buckets=11 sectors=2816 fragmented=0
[   59.263332][ T6316]   user: buckets=1 sectors=16 fragmented=240
[   59.263332][ T6316]   cached: buckets=0 sectors=0 fragmented=0
[   59.263332][ T6316]   parity: buckets=0 sectors=0 fragmented=0
[   59.263332][ T6316]   stripe: buckets=0 sectors=0 fragmented=0
[   59.263332][ T6316]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   59.263332][ T6316]   need_discard: buckets=0 sectors=0 fragmented=0
[   59.263332][ T6316] clock: read=0
[   59.263332][ T6316] clock: write=1280
[   59.263332][ T6316] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 POS_MAX len 511 ver 0: seq c
[   59.263447][ T6316] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   59.381436][ T6319] loop2: detected capacity change from 0 to 32768
[   59.391649][ T6319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.165 (6319)
[   59.400631][ T6319] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.405850][ T6319] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   59.408801][ T6319] BTRFS info (device loop2): using free-space-tree
[   59.485560][ T6319] BTRFS info (device loop2): Snapshot src from another FS
[   59.492822][ T5888] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   59.500330][ T5852] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.575945][ T6349] netlink: 'syz.2.170': attribute type 21 has an invalid length.
[   59.584132][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'.
[   59.626188][ T6353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'.
[   59.671173][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short
[   59.676715][ T5888] usb 2-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   59.680897][ T5888] usb 2-1: config 1 interface 0 has no altsetting 0
[   59.686294][ T6358] Set syz0 is full, maxelem 0 reached
[   59.695408][ T5888] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   59.700595][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.713658][ T5888] usb 2-1: Product: syz
[   59.714997][ T5888] usb 2-1: Manufacturer: syz
[   59.717412][ T5888] usb 2-1: SerialNumber: syz
[   59.891449][ T6373] loop0: detected capacity change from 0 to 2048
[   59.896890][ T6373] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   59.908778][ T6374] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   59.932647][ T5888] usbhid 2-1:1.0: can't add hid device: -22
[   59.934897][ T5888] usbhid 2-1:1.0: probe with driver usbhid failed with error -22
[   59.939479][ T5888] usb 2-1: USB disconnect, device number 4
[   60.212856][ T5939] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   60.374331][ T5939] usb 1-1: config 0 has an invalid interface number: 81 but max is 0
[   60.377095][ T5939] usb 1-1: config 0 has no interface number 0
[   60.379143][ T5939] usb 1-1: config 0 interface 81 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   60.382703][ T5939] usb 1-1: config 0 interface 81 has no altsetting 0
[   60.387172][ T5939] usb 1-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=40.a8
[   60.390218][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.393785][ T5939] usb 1-1: Product: syz
[   60.395185][ T5939] usb 1-1: Manufacturer: syz
[   60.396743][ T5939] usb 1-1: SerialNumber: syz
[   60.403061][ T5939] usb 1-1: config 0 descriptor??
[   60.405467][ T6376] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   60.619075][ T5939] HFC-S_USB 1-1:0.81: probe with driver HFC-S_USB failed with error -5
[   60.634468][ T5939] usb 1-1: USB disconnect, device number 4
[   60.945937][ T6394] veth3: entered promiscuous mode
[   61.645704][ T6407] loop2: detected capacity change from 0 to 32768
[   61.650882][ T6407] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.196 (6407)
[   61.728530][   T33] audit: type=1326 audit(1755064792.466:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.1.197" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe85cd8ebe9 code=0x0
[   62.069166][ T6407] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   62.083513][ T6407] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   62.090847][ T6407] BTRFS info (device loop2): using free-space-tree
[   62.188781][   T53] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff
[   62.224031][ T6407] BTRFS info (device loop2): rebuilding free space tree
[   62.340834][ T6453] BTRFS info (device loop2): space_info DATA+METADATA (sub-group id 0) has 94208 free, is not full
[   62.345649][ T6453] BTRFS info (device loop2): space_info total=3276800, used=53248, pinned=20480, reserved=1499136, may_use=1609728, readonly=0 zone_unusable=0
[   62.351386][ T6453] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1441792
[   62.355090][ T6453] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0
[   62.357781][ T6453] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0
[   62.360296][ T6453] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0
[   62.363093][ T6453] BTRFS info (device loop2): delayed_refs_rsv: size 196608 reserved 65536
[   62.583340][ T5888] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   62.595078][ T5852] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   62.643209][ T5939] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   62.745025][ T5888] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[   62.924090][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.927798][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.931072][ T5939] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   63.423799][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   63.427209][ T5888] usb 2-1: config 0 has no interface number 0
[   63.429970][ T5888] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30
[   63.558694][   T33] audit: type=1326 audit(1755064794.296:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.2.212" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25d8ebe9 code=0x7fc00000
[   63.559199][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.569706][ T5888] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   63.573508][ T5888] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239
[   63.579496][ T5939] usb 1-1: config 0 descriptor??
[   63.584842][ T5888] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46
[   63.587873][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.593426][ T5888] usb 2-1: Product: syz
[   63.600009][ T5888] usb 2-1: Manufacturer: syz
[   63.601630][ T5888] usb 2-1: SerialNumber: syz
[   63.605343][ T5888] usb 2-1: config 0 descriptor??
[   63.620820][ T5888] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5
[   63.815982][ T5888] usb 2-1: USB disconnect, device number 5
[   63.825026][ T6471] fanotify: failed to encode fid (type=0, len=0, err=-2)
[   63.847750][ T6474] netlink: 'syz.2.219': attribute type 10 has an invalid length.
[   63.854491][ T6474] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   63.884900][ T6476] macsec1: entered promiscuous mode
[   63.887099][ T6476] hsr0: entered promiscuous mode
[   63.888845][ T6476] macsec1: entered allmulticast mode
[   63.890666][ T6476] hsr0: entered allmulticast mode
[   63.892282][ T6476] hsr_slave_0: entered allmulticast mode
[   63.894618][ T6476] hsr_slave_1: entered allmulticast mode
[   63.939566][ T6480] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   63.965997][ T6482] warning: `syz.2.223' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.993260][ T6484] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   64.001906][ T6484] CIFS mount error: No usable UNC path provided in device string!
[   64.001906][ T6484] 
[   64.005697][ T6484] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   64.097562][ T6493] loop2: detected capacity change from 0 to 764
[   64.106328][ T6493] Symlink component flag not implemented
[   64.108330][ T6493] Symlink component flag not implemented (7)
[   64.160590][ T6497] loop2: detected capacity change from 0 to 2048
[   64.166143][ T6497] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   64.181611][ T6498] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   64.224941][ T6500] IPv6: NLM_F_REPLACE set, but no existing node found!
[   64.405256][ T5939] hid-led 0003:27B8:01ED.0003: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0
[   64.414815][ T5939] hid-led 0003:27B8:01ED.0003: ThingM blink(1) initialized
[   64.684444][   T60] usb 1-1: USB disconnect, device number 5
[   64.709769][ T6511] loop1: detected capacity change from 0 to 2048
[   64.716834][ T6511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   65.026557][ T6517] loop1: detected capacity change from 0 to 736
[   65.582704][ T6537] loop0: detected capacity change from 0 to 32768
[   65.582860][   T60] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   65.595751][ T6537] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   65.615207][ T6537] XFS (loop0): Ending clean mount
[   65.620467][ T6537] XFS (loop0): Quotacheck needed: Please wait.
[   65.672478][ T6537] XFS (loop0): Quotacheck: Done.
[   65.714332][ T5849] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   65.772792][   T60] usb 3-1: Using ep0 maxpacket: 16
[   65.778920][ T6549] loop1: detected capacity change from 0 to 256
[   65.788565][   T60] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[   65.796953][   T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.797568][ T6549] exfat: Deprecated parameter 'namecase'
[   65.799753][   T60] usb 3-1: Product: syz
[   65.801586][ T6549] exfat: Deprecated parameter 'utf8'
[   65.809896][   T60] usb 3-1: Manufacturer: syz
[   65.811639][   T60] usb 3-1: SerialNumber: syz
[   65.815517][   T60] usb 3-1: config 0 descriptor??
[   65.825316][ T6549] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[   66.274881][   T60] usb 3-1: ignoring: not an USB2CAN converter
[   66.300212][ T6558] loop0: detected capacity change from 0 to 32768
[   66.308645][   T60] usb 3-1: USB disconnect, device number 6
[   66.411781][ T6558] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[   66.411793][ T6558]   allowing incompatible features above 0.0: (unknown version)
[   66.411797][ T6558]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   66.423975][ T6558] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   66.426511][ T6558] bcachefs (loop0): initializing new filesystem
[   66.434182][ T6558] bcachefs (loop0): going read-write
[   66.440525][ T6558] bcachefs (loop0): marking superblocks
[   66.447889][ T6558] bcachefs (loop0): initializing freespace
[   66.451893][ T6558] bcachefs (loop0): done initializing freespace
[   66.455250][ T6558] bcachefs (loop0): reading snapshots table
[   66.457159][ T6558] bcachefs (loop0): reading snapshots done
[   66.473614][ T6558] bcachefs (loop0): done starting filesystem
[   66.484179][   T33] audit: type=1800 audit(1755064797.226:7): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.253" name="file1" dev="loop0" ino=4098 res=0 errno=0
[   66.487884][ T6558] syz.0.253 (6558) used greatest stack depth: 16760 bytes left
[   66.509132][ T5849] bcachefs (loop0): shutting down
[   66.511019][ T5849] bcachefs (loop0): going read-only
[   66.514543][ T5849] bcachefs (loop0): finished waiting for writes to stop
[   66.518389][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[   66.540676][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[   66.545925][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 4
[   66.548771][ T5849] bcachefs (loop0): marking filesystem clean
[   66.565030][ T5849] bcachefs (loop0): shutdown complete
[   66.850604][ T6578] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[   67.260388][ T6591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'.
[   67.544018][ T5939] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   67.694298][ T5939] usb 3-1: config index 0 descriptor too short (expected 897, got 27)
[   67.701155][ T5939] usb 3-1: config 2 has an invalid interface number: 1 but max is -1
[   67.703981][ T5939] usb 3-1: config 2 has an invalid interface number: 1 but max is -1
[   67.710774][ T5939] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 0
[   67.719504][ T5939] usb 3-1: config 2 has no interface number 0
[   67.725342][ T5939] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da
[   67.728196][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.731390][ T5939] usb 3-1: Product: syz
[   67.733430][ T5939] usb 3-1: Manufacturer: syz
[   67.735050][ T5939] usb 3-1: SerialNumber: syz
[   67.739856][ T6595] loop1: detected capacity change from 0 to 4096
[   67.773312][ T6595] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   67.790868][ T6595] ntfs3(loop1): ino=1e, "file1" attr_set_size
[   67.944153][ T5939] cdc_ncm 3-1:2.1: CDC Union missing and no IAD found
[   67.946468][ T5939] cdc_ncm 3-1:2.1: bind() failure
[   67.949404][ T5939] usb 3-1: no audio or video endpoints found
[   67.974703][ T5939] usb 3-1: USB disconnect, device number 7
[   68.001385][ T6611] netlink: 'syz.0.270': attribute type 9 has an invalid length.
[   68.005356][ T6611] netlink: 147436 bytes leftover after parsing attributes in process `syz.0.270'.
[   68.033784][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'.
[   68.098605][ T6619] loop0: detected capacity change from 0 to 1024
[   68.101193][ T6619] EXT4-fs: Ignoring removed orlov option
[   68.116809][ T6619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.128705][ T6619] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.274: Allocating blocks 481-513 which overlap fs metadata
[   68.154571][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.185268][ T6624] Illegal XDP return value 38 on prog  (id 23) dev N/A, expect packet loss!
[   68.203779][ T5877] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   68.362859][ T5877] usb 2-1: Using ep0 maxpacket: 16
[   68.366437][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   68.369620][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   68.373073][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   68.376179][ T5877] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   68.379569][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   68.386822][ T5877] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   68.389603][ T5877] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   68.392029][ T5877] usb 2-1: Manufacturer: syz
[   68.396568][ T5877] usb 2-1: config 0 descriptor??
[   68.482903][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   68.642880][ T5886] usb 1-1: Using ep0 maxpacket: 16
[   68.644557][ T5877] rc_core: IR keymap rc-hauppauge not found
[   68.646591][ T5877] Registered IR keymap rc-empty
[   68.649317][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.655263][ T5886] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba
[   68.658271][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.660858][ T5886] usb 1-1: Product: syz
[   68.662204][ T5886] usb 1-1: Manufacturer: syz
[   68.663985][ T5886] usb 1-1: SerialNumber: syz
[   68.666333][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.669276][ T5886] usb 1-1: config 0 descriptor??
[   68.694490][ T5877] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   68.699847][ T5877] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input4
[   68.703587][ T5939] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   68.708736][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.732865][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.763488][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.792926][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.812910][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.832895][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.852831][ T5939] usb 3-1: Using ep0 maxpacket: 32
[   68.852890][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.858317][ T5939] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[   68.860975][ T5939] usb 3-1: config 0 has no interface number 0
[   68.866407][ T5939] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   68.869381][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.873084][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.874449][ T5939] usb 3-1: Product: syz
[   68.876749][ T5939] usb 3-1: Manufacturer: syz
[   68.878246][ T5939] usb 3-1: SerialNumber: syz
[   68.878729][ T5886] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22
[   68.881001][ T5939] usb 3-1: config 0 descriptor??
[   68.891685][ T5939] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   68.893039][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.912866][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.934465][ T5877] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   68.937405][ T5877] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   69.056840][ T5877] usb 2-1: USB disconnect, device number 6
[   69.087900][ T5886] usb 1-1: USB disconnect, device number 6
[   69.100317][ T5939] usb 3-1: qt2_attach - failed to power on unit: -71
[   69.102537][ T5939] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71
[   69.114392][ T5939] usb 3-1: USB disconnect, device number 8
[   69.119078][   T53] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260
[   69.657729][ T6641] netlink: 'syz.2.282': attribute type 39 has an invalid length.
[   69.794974][ T6648] loop1: detected capacity change from 0 to 4096
[   69.876597][ T6653] binder_alloc: 6651: pid 6651 spamming oneway? 1 buffers allocated for a total size of 4096
[   69.887247][ T6653] binder_alloc: 6651: pid 6651 spamming oneway? 2 buffers allocated for a total size of 5120
[   69.977621][ T6662] capability: warning: `syz.2.291' uses 32-bit capabilities (legacy support in use)
[   70.235422][ T6677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.295'.
[   70.246972][ T6677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.295'.
[   70.276676][ T6677] loop0: detected capacity change from 0 to 512
[   70.281427][ T6677] EXT4-fs: Ignoring removed mblk_io_submit option
[   70.283679][ T6677] EXT4-fs: Ignoring removed bh option
[   70.288369][ T6677] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   70.292614][ T6677] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   70.323072][ T6677] EXT4-fs (loop0): 1 truncate cleaned up
[   70.331287][ T6677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.377865][ T6666] loop2: detected capacity change from 0 to 32768
[   70.385609][ T6666] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.293 (6666)
[   70.400681][ T6666] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   70.408619][ T6666] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   70.415574][ T6666] BTRFS info (device loop2): disk space caching is enabled
[   70.426413][ T6666] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   70.427906][ T6683] trusted_key: encrypted_key: master key parameter is missing
[   70.466530][ T6688] program syz.1.301 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.537617][ T6666] BTRFS info (device loop2): rebuilding free space tree
[   70.550591][ T6666] BTRFS info (device loop2): disabling free space tree
[   70.557618][ T6666] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   70.565083][ T6666] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   70.586633][ T6666] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same
[   70.603120][ T5852] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   70.784144][ T6710] loop1: detected capacity change from 0 to 32768
[   70.790778][ T6710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.306 (6710)
[   70.813000][ T6710] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   70.819669][ T6710] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   70.826630][ T6710] BTRFS info (device loop1): using free-space-tree
[   70.846319][ T6712] loop2: detected capacity change from 0 to 32768
[   70.850063][ T6712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.305 (6712)
[   70.866527][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.868655][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.917619][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.921650][ T6712] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   70.925368][ T6712] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   70.928183][ T6712] BTRFS info (device loop2): using free-space-tree
[   70.999529][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'.
[   71.041726][ T5852] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.042645][ T5844] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   71.181755][   T33] audit: type=1326 audit(1755064801.916:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25d8ebe9 code=0x7ffc0000
[   71.285708][   T33] audit: type=1326 audit(1755064801.916:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25d8ebe9 code=0x7ffc0000
[   71.297909][   T33] audit: type=1326 audit(1755064801.916:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f8a25d8ebe9 code=0x7ffc0000
[   71.312818][   T33] audit: type=1326 audit(1755064801.916:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25d8ebe9 code=0x7ffc0000
[   71.327285][ T6751] loop0: detected capacity change from 0 to 32768
[   71.329581][   T33] audit: type=1326 audit(1755064801.916:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25d8ebe9 code=0x7ffc0000
[   71.339534][   T33] audit: type=1326 audit(1755064801.916:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a25d8ebe9 code=0x7ffc0000
[   71.351041][ T6751] XFS: noikeep mount option is deprecated.
[   71.354102][   T33] audit: type=1326 audit(1755064801.916:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25d8ebe9 code=0x7ffc0000
[   71.361128][   T33] audit: type=1326 audit(1755064801.916:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.2.311" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a25d8ebe9 code=0x7ffc0000
[   71.636175][ T6751] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   71.663505][ T6757] loop1: detected capacity change from 0 to 32768
[   71.668783][ T6757] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   71.668783][ T6757] clean (size 2912):
[   71.668783][ T6757] flags:          0
[   71.668783][ T6757] journal_seq:    8
[   71.668783][ T6757] prio_ptrs: 
[   71.668783][ T6757] usage: type=key_version v=0
[   71.668783][ T6757] usage: type=reserved v=0
[   71.668783][ T6757] usage: type=reserved v=0
[   71.668783][ T6757] usage: type=reserved v=0
[   71.668783][ T6757] usage: type=reserved v=0
[   71.668783][ T6757] data_usage: btree: 1/1 [0]=2816
[   71.668783][ T6757] data_usage: journal: 1/1 [0]=0
[   71.668783][ T6757] data_usage: user: 1/1 [0]=32
[   71.668783][ T6757] dev_usage: dev=0  
[   71.668783][ T6757]   free: buckets=83 sectors=0 fragmented=0
[   71.668783][ T6757]   sb: buckets=25 sectors=6152 fragmented=248
[   71.668783][ T6757]   journal: buckets=8 sectors=2048 fragmented=0
[   71.668783][ T6757]   btree: buckets=11 sectors=2816 fragmented=0
[   71.668783][ T6757]   user: buckets=1 sectors=32 fragmented=224
[   71.668783][ T6757]   cached: buckets=0 sectors=0 fragmented=0
[   71.668783][ T6757]   parity: buckets=0 sectors=0 fragmented=0
[   71.668783][ T6757]   stripe: buckets=0 sectors=0 fragmented=0
[   71.668783][ T6757]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   71.668783][ T6757]   need_discard: buckets=0 sectors=0 fragmented=0
[   71.668783][ T6757] clock: read=0
[   71.668783][ T6757] clock: write=1288
[   71.668783][ T6757] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[   71.668874][ T6757] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   71.686622][ T6751] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   71.780386][ T6751] XFS (loop0): Starting recovery (logdev: internal)
[   71.792650][ T6751] XFS (loop0): Ending recovery (logdev: internal)
[   71.808023][ T5849] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   71.820816][ T6773] loop2: detected capacity change from 0 to 128
[   71.834665][ T6773] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[   71.841539][ T6773] hpfs: filesystem error: improperly stopped
[   71.845128][ T6773] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   71.854360][ T6773] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[   71.859831][ T6773] hpfs: You really don't want any checks? You are crazy...
[   71.871891][ T6773] hpfs: hpfs_map_sector(): read error
[   71.878879][ T6773] hpfs: code page support is disabled
[   71.881377][ T6773] hpfs: hpfs_map_sector(): read error
[   71.886893][ T6773] hpfs: hpfs_map_sector(): read error
[   71.888760][ T6773] hpfs: filesystem error: unable to find root dir
[   71.950754][ T6777] netlink: 'syz.2.317': attribute type 2 has an invalid length.
[   71.965018][ T6777] : entered promiscuous mode
[   72.114443][ T6791] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[   72.204624][ T6794] loop0: detected capacity change from 0 to 4096
[   72.398140][ T6794] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   72.403247][ T6794] ntfs3(loop0): Failed to load $Extend (-22).
[   72.407742][ T6794] ntfs3(loop0): Failed to initialize $Extend.
[   72.418144][ T6794] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB
[   72.675507][ T6821] loop1: detected capacity change from 0 to 1024
[   72.742275][ T6813] loop2: detected capacity change from 0 to 32768
[   72.743209][   T83] hfsplus: b-tree write err: -5, ino 4
[   72.759960][ T6813] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   72.790719][ T6832] netlink: 'syz.0.342': attribute type 4 has an invalid length.
[   72.808675][ T6832] netlink: 152 bytes leftover after parsing attributes in process `syz.0.342'.
[   72.812892][ T6813] XFS (loop2): Ending clean mount
[   72.822041][ T6813] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[   72.830405][ T6832] : renamed from bond0 (while UP)
[   72.894431][ T5852] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   72.938849][ T6837] loop1: detected capacity change from 0 to 32768
[   72.973690][ T6844] loop0: detected capacity change from 0 to 128
[   72.989666][ T6837] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   73.005235][ T6837] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   73.018823][ T6837] XFS (loop1): Starting recovery (logdev: internal)
[   73.049692][ T6837] XFS (loop1): Ending recovery (logdev: internal)
[   73.055269][ T6837] XFS (loop1): Quotacheck needed: Please wait.
[   73.061891][ T6844] FAT-fs (loop0): Directory bread(block 32) failed
[   73.069962][ T6844] FAT-fs (loop0): Directory bread(block 33) failed
[   73.072076][ T6844] FAT-fs (loop0): Directory bread(block 34) failed
[   73.073286][ T6837] XFS (loop1): Quotacheck: Done.
[   73.080621][ T6844] FAT-fs (loop0): Directory bread(block 35) failed
[   73.085344][ T6844] FAT-fs (loop0): Directory bread(block 36) failed
[   73.087383][ T6844] FAT-fs (loop0): Directory bread(block 37) failed
[   73.097620][ T6844] FAT-fs (loop0): Directory bread(block 38) failed
[   73.100125][ T6844] FAT-fs (loop0): Directory bread(block 39) failed
[   73.103674][ T5844] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   73.118265][ T6844] FAT-fs (loop0): Directory bread(block 40) failed
[   73.120468][ T6844] FAT-fs (loop0): Directory bread(block 41) failed
[   73.363518][ T6858] loop1: detected capacity change from 0 to 32768
[   73.370910][ T6858] JBD2: Ignoring recovery information on journal
[   73.399800][ T6858] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   73.438773][ T5844] ocfs2: Unmounting device (7,1) on (node local)
[   73.439782][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.447999][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.456140][ T6863] loop2: detected capacity change from 0 to 32768
[   73.488766][ T6863] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   73.546816][ T5852] (syz-executor,5852,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[   73.551793][ T5852] ocfs2: Unmounting device (7,2) on (node local)
[   73.587559][ T6873] netlink: 'syz.1.353': attribute type 10 has an invalid length.
[   73.649225][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.661026][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.820194][ T6873] team0: Port device dummy0 added
[   73.898230][ T6880] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   73.901999][ T6880] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   74.035969][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.042928][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.046496][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.049302][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.116598][ T6884] loop1: detected capacity change from 0 to 1024
[   74.119295][ T6884] EXT4-fs: Ignoring removed orlov option
[   74.128401][ T6884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.158463][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.324133][ T6895] loop1: detected capacity change from 0 to 32768
[   74.364306][ T6895] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   74.364318][ T6895]   allowing incompatible features above 0.0: (unknown version)
[   74.364323][ T6895]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   74.379565][ T6895] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   74.382244][ T6895] bcachefs (loop1): initializing new filesystem
[   74.389284][ T6895] bcachefs (loop1): going read-write
[   74.393304][ T6895] bcachefs (loop1): marking superblocks
[   74.403818][ T6895] bcachefs (loop1): initializing freespace
[   74.408244][ T6895] bcachefs (loop1): done initializing freespace
[   74.412835][ T6895] bcachefs (loop1): reading snapshots table
[   74.414851][ T6895] bcachefs (loop1): reading snapshots done
[   74.428918][ T6895] bcachefs (loop1): done starting filesystem
[   74.473805][ T5844] bcachefs (loop1): shutting down
[   74.475668][ T5844] bcachefs (loop1): going read-only
[   74.477631][ T5844] bcachefs (loop1): finished waiting for writes to stop
[   74.480477][ T5844] bcachefs (loop1): flushing journal and stopping allocators, journal seq 1
[   74.495856][ T5844] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 2
[   74.500574][ T5844] bcachefs (loop1): clean shutdown complete, journal seq 3
[   74.505800][ T5844] bcachefs (loop1): marking filesystem clean
[   74.516859][ T5844] bcachefs (loop1): shutdown complete
[   74.610084][ T6910] loop2: detected capacity change from 0 to 1024
[   74.613628][ T6910] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   74.621732][ T6910] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.364: Invalid block bitmap block 0 in block_group 0
[   74.627913][ T6910] Quota error (device loop2): write_blk: dquota write failed
[   74.630402][ T6910] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   74.635058][ T6910] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.364: Failed to acquire dquot type 0
[   74.639183][ T6910] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.364: Freeing blocks not in datazone - block = 0, count = 4096
[   74.645426][ T6910] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.364: Invalid inode bitmap blk 0 in block_group 0
[   74.650259][ T6910] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[   74.655762][ T6910] EXT4-fs (loop2): 1 orphan inode deleted
[   74.655829][ T1097] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u9:9: Failed to release dquot type 0
[   74.658536][ T6910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.686169][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.063067][ T5939] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   75.181507][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'.
[   75.213760][ T5939] usb 3-1: Using ep0 maxpacket: 8
[   75.222582][ T5939] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   75.223439][ T6933] CUSE: unknown device info "!"
[   75.227766][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.227928][ T6933] CUSE: zero length info key specified
[   75.230803][ T5939] usb 3-1: Product: syz
[   75.230815][ T5939] usb 3-1: Manufacturer: syz
[   75.230821][ T5939] usb 3-1: SerialNumber: syz
[   75.237599][ T5939] usb 3-1: config 0 descriptor??
[   75.246066][ T5939] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   75.248576][ T5939] usb 3-1: setting power ON
[   75.250206][ T5939] dvb-usb: bulk message failed: -22 (2/0)
[   75.267476][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   75.270893][ T5939] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   75.280224][ T5939] usb 3-1: media controller created
[   75.290663][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   75.304304][ T5939] usb 3-1: selecting invalid altsetting 6
[   75.306265][ T5939] usb 3-1: digital interface selection failed (-22)
[   75.308394][ T5939] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   75.326471][ T5939] usb 3-1: setting power OFF
[   75.328202][ T5939] dvb-usb: bulk message failed: -22 (2/0)
[   75.330085][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   75.334251][ T5939] (NULL device *): no alternate interface
[   75.379632][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   75.469763][ T5939] usb 3-1: USB disconnect, device number 9
[   75.526615][ T6944] bridge_slave_1: left allmulticast mode
[   75.528526][ T6944] bridge_slave_1: left promiscuous mode
[   75.530523][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.561676][ T6949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.624910][ T6953] loop0: detected capacity change from 0 to 512
[   75.650923][ T6953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.659273][ T6953] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.683549][ T6953] EXT4-fs error (device loop0): ext4_get_first_dir_block:3544: inode #12: comm syz.0.382: directory missing '.'
[   75.694500][ T6953] EXT4-fs (loop0): Remounting filesystem read-only
[   75.717281][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.897376][ T6975] netlink: 'syz.1.390': attribute type 1 has an invalid length.
[   75.916594][ T6975] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.945597][ T6975] bond1: (slave ip6erspan0): making interface the new active one
[   75.949040][ T6975] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[   75.949841][ T6980] loop0: detected capacity change from 0 to 512
[   75.987057][ T6980] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   76.014639][ T6980] EXT4-fs (loop0): 1 truncate cleaned up
[   76.020965][ T6980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.057517][ T6987] loop2: detected capacity change from 0 to 4096
[   76.073783][ T6987] ntfs3(loop2): Failed to load $MFT (-22).
[   76.093955][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.300520][ T7005] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024)
[   76.313576][ T7005] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   76.334670][ T7003] loop1: detected capacity change from 0 to 4096
[   76.339565][ T7003] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   76.363110][ T7003] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[   76.377836][ T7003] ntfs3(loop1): ino=1b, mi_enum_attr
[   76.379830][ T7003] ntfs3(loop1): ino=1b, "file0" mi_enum_attr
[   76.381822][ T7003] ntfs3(loop1): ino=1b, "file0" mi_enum_attr
[   76.385941][ T7003] ntfs3(loop1): ino=1b, "file0" mi_enum_attr
[   76.387963][ T7003] ntfs3(loop1): ino=1b, "file0" mi_enum_attr
[   76.390005][ T7003] ntfs3(loop1): ino=1b, "file0" mi_enum_attr
[   76.391904][ T7003] ntfs3(loop1): ino=1b, "file0" attr_set_size
[   76.480270][ T6995] loop2: detected capacity change from 0 to 40427
[   76.487721][ T6995] F2FS-fs (loop2): build fault injection type: 0x7
[   76.505027][ T6995] F2FS-fs (loop2): invalid crc value
[   76.513425][ T7017] loop0: detected capacity change from 0 to 16
[   76.539943][ T7017] erofs (device loop0): mounted with root inode @ nid 36.
[   76.579364][ T6995] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   76.591033][ T6995] F2FS-fs (loop2): Start checkpoint disabled!
[   76.608705][ T6995] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   76.705220][ T6995] syz.2.399: attempt to access beyond end of device
[   76.705220][ T6995] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   76.764336][   T83] kworker/u9:3: attempt to access beyond end of device
[   76.764336][   T83] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[   76.789542][   T83] kworker/u9:3: attempt to access beyond end of device
[   76.789542][   T83] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   76.811946][   T83] CPU: 0 UID: 0 PID: 83 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   76.811966][   T83] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.811973][   T83] Workqueue: writeback wb_workfn (flush-7:2)
[   76.811993][   T83] Call Trace:
[   76.811998][   T83]  <TASK>
[   76.812003][   T83]  dump_stack_lvl+0x189/0x250
[   76.812022][   T83]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.812034][   T83]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   76.812046][   T83]  ? __pfx_queue_work_on+0x10/0x10
[   76.812057][   T83]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   76.812069][   T83]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.812089][   T83]  f2fs_handle_critical_error+0x37c/0x540
[   76.812108][   T83]  f2fs_write_end_io+0x886/0xb60
[   76.812163][   T83]  __submit_merged_bio+0x27a/0x6a0
[   76.812175][   T83]  ? up_write+0x1c4/0x420
[   76.812191][   T83]  __submit_merged_write_cond+0x44c/0x530
[   76.812209][   T83]  f2fs_sync_node_pages+0x1479/0x15e0
[   76.812236][   T83]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   76.812248][   T83]  ? __percpu_counter_sum+0x1c2/0x1e0
[   76.812280][   T83]  ? f2fs_update_inode+0x43e/0x2620
[   76.812294][   T83]  ? rcu_is_watching+0x15/0xb0
[   76.812305][   T83]  ? blk_start_plug+0x52/0x1b0
[   76.812321][   T83]  f2fs_write_node_pages+0x303/0x6e0
[   76.812338][   T83]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   76.812361][   T83]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   76.812374][   T83]  do_writepages+0x32e/0x550
[   76.812392][   T83]  ? reacquire_held_locks+0x127/0x1d0
[   76.812403][   T83]  ? writeback_sb_inodes+0x384/0x1010
[   76.812423][   T83]  __writeback_single_inode+0x145/0xff0
[   76.812445][   T83]  ? do_raw_spin_unlock+0x4d/0x240
[   76.812463][   T83]  writeback_sb_inodes+0x6c7/0x1010
[   76.812498][   T83]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   76.812544][   T83]  ? rcu_is_watching+0x15/0xb0
[   76.812563][   T83]  wb_writeback+0x43b/0xaf0
[   76.812584][   T83]  ? queue_io+0x391/0x590
[   76.812601][   T83]  ? __pfx_wb_writeback+0x10/0x10
[   76.812622][   T83]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.812639][   T83]  wb_workfn+0x409/0xef0
[   76.812664][   T83]  ? __pfx_wb_workfn+0x10/0x10
[   76.812680][   T83]  ? __lock_acquire+0xab9/0xd20
[   76.812704][   T83]  ? process_scheduled_works+0x9ef/0x17b0
[   76.812741][   T83]  ? process_scheduled_works+0x9ef/0x17b0
[   76.812752][   T83]  ? process_scheduled_works+0x9ef/0x17b0
[   76.812764][   T83]  process_scheduled_works+0xae1/0x17b0
[   76.812796][   T83]  ? __pfx_process_scheduled_works+0x10/0x10
[   76.812829][   T83]  worker_thread+0x8a0/0xda0
[   76.812865][   T83]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.812884][   T83]  ? __kthread_parkme+0x7b/0x200
[   76.812905][   T83]  kthread+0x711/0x8a0
[   76.812922][   T83]  ? __pfx_worker_thread+0x10/0x10
[   76.812934][   T83]  ? __pfx_kthread+0x10/0x10
[   76.812950][   T83]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.812962][   T83]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.812975][   T83]  ? __pfx_kthread+0x10/0x10
[   76.812990][   T83]  ret_from_fork+0x3fc/0x770
[   76.813005][   T83]  ? __pfx_ret_from_fork+0x10/0x10
[   76.813022][   T83]  ? __switch_to_asm+0x39/0x70
[   76.813037][   T83]  ? __switch_to_asm+0x33/0x70
[   76.813051][   T83]  ? __pfx_kthread+0x10/0x10
[   76.813066][   T83]  ret_from_fork_asm+0x1a/0x30
[   76.813094][   T83]  </TASK>
[   76.944371][   T83] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   76.956456][   T83] CPU: 0 UID: 0 PID: 83 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   76.956469][   T83] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.956474][   T83] Workqueue: writeback wb_workfn (flush-7:2)
[   76.956488][   T83] Call Trace:
[   76.956491][   T83]  <TASK>
[   76.956495][   T83]  dump_stack_lvl+0x189/0x250
[   76.956508][   T83]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.956516][   T83]  ? __pfx_queue_work_on+0x10/0x10
[   76.956523][   T83]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   76.956532][   T83]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.956545][   T83]  f2fs_handle_critical_error+0x37c/0x540
[   76.956558][   T83]  f2fs_write_end_io+0x886/0xb60
[   76.956577][   T83]  __submit_merged_bio+0x27a/0x6a0
[   76.956585][   T83]  ? up_write+0x1c4/0x420
[   76.956596][   T83]  __submit_merged_write_cond+0x44c/0x530
[   76.956608][   T83]  f2fs_sync_node_pages+0x1479/0x15e0
[   76.956625][   T83]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   76.956633][   T83]  ? __percpu_counter_sum+0x1c2/0x1e0
[   76.956655][   T83]  ? f2fs_update_inode+0x43e/0x2620
[   76.956665][   T83]  ? rcu_is_watching+0x15/0xb0
[   76.956673][   T83]  ? blk_start_plug+0x52/0x1b0
[   76.956684][   T83]  f2fs_write_node_pages+0x303/0x6e0
[   76.956695][   T83]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   76.956711][   T83]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   76.956719][   T83]  do_writepages+0x32e/0x550
[   76.956731][   T83]  ? reacquire_held_locks+0x127/0x1d0
[   76.956738][   T83]  ? writeback_sb_inodes+0x384/0x1010
[   76.956752][   T83]  __writeback_single_inode+0x145/0xff0
[   76.956761][   T83]  ? do_raw_spin_unlock+0x4d/0x240
[   76.956771][   T83]  writeback_sb_inodes+0x6c7/0x1010
[   76.956793][   T83]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   76.956822][   T83]  ? rcu_is_watching+0x15/0xb0
[   76.956833][   T83]  wb_writeback+0x43b/0xaf0
[   76.956846][   T83]  ? queue_io+0x391/0x590
[   76.956871][   T83]  ? __pfx_wb_writeback+0x10/0x10
[   76.956887][   T83]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.956897][   T83]  wb_workfn+0x409/0xef0
[   76.956912][   T83]  ? __pfx_wb_workfn+0x10/0x10
[   76.956922][   T83]  ? __lock_acquire+0xab9/0xd20
[   76.956937][   T83]  ? process_scheduled_works+0x9ef/0x17b0
[   76.956948][   T83]  ? process_scheduled_works+0x9ef/0x17b0
[   76.956954][   T83]  ? process_scheduled_works+0x9ef/0x17b0
[   76.956962][   T83]  process_scheduled_works+0xae1/0x17b0
[   76.956983][   T83]  ? __pfx_process_scheduled_works+0x10/0x10
[   76.957003][   T83]  worker_thread+0x8a0/0xda0
[   76.957011][   T83]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.957023][   T83]  ? __kthread_parkme+0x7b/0x200
[   76.957036][   T83]  kthread+0x711/0x8a0
[   76.957046][   T83]  ? __pfx_worker_thread+0x10/0x10
[   76.957053][   T83]  ? __pfx_kthread+0x10/0x10
[   76.957063][   T83]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.957070][   T83]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.957077][   T83]  ? __pfx_kthread+0x10/0x10
[   76.957086][   T83]  ret_from_fork+0x3fc/0x770
[   76.957095][   T83]  ? __pfx_ret_from_fork+0x10/0x10
[   76.957106][   T83]  ? __switch_to_asm+0x39/0x70
[   76.957138][   T83]  ? __switch_to_asm+0x33/0x70
[   76.957146][   T83]  ? __pfx_kthread+0x10/0x10
[   76.957156][   T83]  ret_from_fork_asm+0x1a/0x30
[   76.957173][   T83]  </TASK>
[   76.958864][   T83] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   78.017773][ T7049] netlink: 'syz.2.423': attribute type 1 has an invalid length.
[   78.094822][ T7057] loop2: detected capacity change from 0 to 1024
[   78.103595][ T7055] netlink: 84 bytes leftover after parsing attributes in process `syz.1.426'.
[   78.136918][ T7057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.191068][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.311997][ T7078] netlink: 'syz.2.435': attribute type 4 has an invalid length.
[   78.371509][ T7083] loop0: detected capacity change from 0 to 2048
[   78.376932][ T7083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   78.431079][ T7071] loop1: detected capacity change from 0 to 32768
[   78.462669][ T7071] JBD2: Ignoring recovery information on journal
[   78.514521][ T7071] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   78.534448][   T33] kauditd_printk_skb: 1 callbacks suppressed
[   78.534457][   T33] audit: type=1800 audit(1755064809.276:16): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.433" name="blkio.bfq.io_queued_recursive" dev="loop1" ino=17056 res=0 errno=0
[   78.562508][ T5844] ocfs2: Unmounting device (7,1) on (node local)
[   78.650110][ T7104] loop1: detected capacity change from 0 to 512
[   78.653641][ T7104] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.660628][ T7104] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.680961][ T7104] EXT4-fs (loop1): 1 truncate cleaned up
[   78.685219][ T7104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.706303][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.766199][ T7102] loop0: detected capacity change from 0 to 32768
[   78.785582][ T7102] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   78.812309][ T7102] XFS (loop0): Ending clean mount
[   78.822858][ T7102] XFS (loop0): Quotacheck needed: Please wait.
[   78.841781][ T7102] XFS (loop0): Quotacheck: Done.
[   78.858039][ T5849] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.526671][ T7152] loop2: detected capacity change from 0 to 32768
[   79.532845][ T7152] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 2 start >= end (16259633109040355076 >= 202532834100012515)
[   79.532845][ T7152] journal_seq_blacklist (size 64):
[   79.532845][ T7152] 0-9895604649984 8747515680081339234-12315680807489264408 16259633109040355076-202532834100012515
[   79.532845][ T7152] 
[   79.544290][ T7152] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist
[   80.134703][ T7160] loop1: detected capacity change from 0 to 1024
[   80.145402][ T7160] hfsplus: invalid btree flag
[   80.148687][ T7160] hfsplus: failed to load catalog file
[   80.434985][ T7173] netlink: 3 bytes leftover after parsing attributes in process `syz.0.471'.
[   80.439230][ T7173] netlink: 3 bytes leftover after parsing attributes in process `syz.0.471'.
[   80.442144][ T7173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.484040][ T7175] loop0: detected capacity change from 0 to 16
[   80.491670][ T7175] erofs (device loop0): mounted with root inode @ nid 36.
[   80.524468][ T5888] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[   80.675235][ T5888] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   80.678327][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.690545][ T5888] usb 2-1: config 0 descriptor??
[   80.697173][ T7205] loop0: detected capacity change from 0 to 512
[   80.711163][ T7205] EXT4-fs: Ignoring removed oldalloc option
[   80.725094][ T7205] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.480: Parent and EA inode have the same ino 15
[   80.737568][ T7205] EXT4-fs (loop0): 1 orphan inode deleted
[   80.740195][ T7205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.747994][   T33] audit: type=1800 audit(1755064811.486:17): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.480" name="file0" dev="loop0" ino=13 res=0 errno=0
[   80.776955][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.810351][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'.
[   80.831561][ T7215] loop0: detected capacity change from 0 to 2048
[   80.849290][ T7215] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.902881][ T5888] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   81.015673][ T7226] loop2: detected capacity change from 0 to 1024
[   81.105504][  T972] cfg80211: failed to load regulatory.db
[   81.113600][ T5888] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   81.116828][ T5888] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   81.120204][ T5888] asix 2-1:0.0: probe with driver asix failed with error -71
[   81.149595][ T5888] usb 2-1: USB disconnect, device number 7
[   81.903243][ T5877] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   82.063863][ T5877] usb 2-1: not running at top speed; connect to a high speed hub
[   82.067348][ T5877] usb 2-1: config 10 has an invalid interface number: 102 but max is 0
[   82.070002][ T5877] usb 2-1: config 10 has no interface number 0
[   82.072066][ T5877] usb 2-1: config 10 interface 102 has no altsetting 0
[   82.076311][ T5877] usb 2-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=c1.e2
[   82.079331][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.081942][ T5877] usb 2-1: Product: syz
[   82.083567][ T5877] usb 2-1: Manufacturer: syz
[   82.085230][ T5877] usb 2-1: SerialNumber: syz
[   82.217576][ T7254] loop2: detected capacity change from 0 to 64
[   82.232613][ T7254] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[   82.298060][ T5877] dvb-usb: found a 'TeVii S421 PCI' in warm state.
[   82.300233][ T5877] dw2102: su3000_power_ctrl: 1, initialized 0
[   82.302228][ T5877] dvb-usb: bulk message failed: -22 (2/0)
[   82.309401][ T5877] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   82.314153][ T5877] dvb-usb: TeVii S421 PCI error while loading driver (-19)
[   82.319684][ T5877] usb 2-1: USB disconnect, device number 8
[   82.502972][ T5939] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   82.652866][ T5939] usb 3-1: Using ep0 maxpacket: 16
[   82.657131][ T5939] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   82.660775][ T5939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.666439][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   82.672176][ T5939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   82.676192][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.679767][ T5939] usb 3-1: Product: syz
[   82.681653][ T5939] usb 3-1: Manufacturer: syz
[   82.683714][ T5939] usb 3-1: SerialNumber: syz
[   83.098768][ T5939] usb 3-1: 0:2 : does not exist
[   83.184157][   T53] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[   83.276474][ T7262] loop0: detected capacity change from 0 to 4096
[   83.281276][ T7262] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   83.349137][ T7264] loop0: detected capacity change from 0 to 256
[   83.437131][ T7266] loop0: detected capacity change from 0 to 4096
[   83.587376][ T5877] libceph: connect (1)[c::]:6789 error -101
[   83.590432][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[   83.595546][ T5877] libceph: connect (1)[c::]:6789 error -101
[   83.598092][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[   83.646544][ T5877] libceph: connect (1)[c::]:6789 error -101
[   83.648654][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[   83.855220][ T5877] libceph: connect (1)[c::]:6789 error -101
[   83.857296][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[   83.904550][ T5877] libceph: connect (1)[c::]:6789 error -101
[   83.906650][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[   83.909244][ T5939] usb 3-1: USB disconnect, device number 10
[   84.363802][ T5877] libceph: connect (1)[c::]:6789 error -101
[   84.366561][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[   84.409349][ T7277] ceph: No mds server is up or the cluster is laggy
[   84.409424][ T7274] ceph: No mds server is up or the cluster is laggy
[   84.415059][ T5877] libceph: connect (1)[c::]:6789 error -101
[   84.421609][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[   84.488739][ T7306] loop8: detected capacity change from 0 to 8
[   84.495728][ T7306] Dev loop8: unable to read RDB block 8
[   84.499266][ T7306]  loop8: unable to read partition table
[   84.501208][ T7306] loop8: partition table beyond EOD, truncated
[   84.503765][ T7306] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[   84.573728][ T7313] input: syz1 as /devices/virtual/input/input5
[   84.707186][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'.
[   84.710360][ T7329] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   84.714668][ T7329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.836379][ T7337] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   84.840256][ T5939] IPVS: starting estimator thread 0...
[   84.867637][ T7346] loop1: detected capacity change from 0 to 1024
[   84.925058][ T5844] hfsplus: bad catalog entry type
[   84.972871][ T7343] IPVS: using max 79 ests per chain, 189600 per kthread
[   85.183139][ T5939] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   85.247083][   T68] hfsplus: b-tree write err: -5, ino 4
[   85.344311][ T5939] usb 1-1: Using ep0 maxpacket: 16
[   85.349527][ T5743] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.357615][ T5939] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   85.361546][ T5939] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[   85.368897][ T5939] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   85.376310][ T5939] usb 1-1: config 1 has no interface number 1
[   85.380849][ T5939] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   85.385495][ T5939] usb 1-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   85.389386][ T5939] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   85.393164][ T5939] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   85.398775][ T5939] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   85.401830][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.405852][ T5939] usb 1-1: Product: syz
[   85.407612][ T5939] usb 1-1: Manufacturer: syz
[   85.409239][ T5939] usb 1-1: SerialNumber: syz
[   85.427246][ T5743] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.492902][ T5743] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.546679][ T5743] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.589671][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.593955][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.597556][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.600881][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.603690][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.646510][ T5939] usb 1-1: USB disconnect, device number 7
[   85.675410][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   85.727777][ T5743] bridge_slave_1: left allmulticast mode
[   85.729872][ T5743] bridge_slave_1: left promiscuous mode
[   85.732897][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.738404][ T5743] bridge_slave_0: left allmulticast mode
[   85.740195][ T5743] bridge_slave_0: left promiscuous mode
[   85.741975][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.855259][ T5743] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[   85.866603][ T7360] loop2: detected capacity change from 0 to 1024
[   85.906949][ T7362] smb3: Unexpected value for 'rdma'
[   86.340492][ T5743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.346085][ T5743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.349627][ T5743] bond0 (unregistering): Released all slaves
[   86.419056][ T5743] bond1 (unregistering): Released all slaves
[   86.425809][ T5743] bond2 (unregistering): Released all slaves
[   86.513733][ T7356] chnl_net:caif_netlink_parms(): no params data found
[   86.593507][  T972] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   86.608601][ T7356] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.610866][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.613682][ T7356] bridge_slave_0: entered allmulticast mode
[   86.616386][ T7356] bridge_slave_0: entered promiscuous mode
[   86.635050][ T7356] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.637404][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.639778][ T7356] bridge_slave_1: entered allmulticast mode
[   86.644488][ T7356] bridge_slave_1: entered promiscuous mode
[   86.679235][ T7356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.684499][ T7356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.705257][ T7356] team0: Port device team_slave_0 added
[   86.710624][ T7356] team0: Port device team_slave_1 added
[   86.732157][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.734553][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.743466][ T7356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.745833][  T972] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   86.748168][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.752384][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.754410][  T972] usb 1-1: config 0 interface 0 has no altsetting 0
[   86.761309][ T7356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.775966][ T5743] hsr_slave_0: left promiscuous mode
[   86.835266][ T5743] hsr_slave_1: left promiscuous mode
[   86.837207][  T972] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   86.840098][  T972] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   86.842680][  T972] usb 1-1: Product: syz
[   86.851268][  T972] usb 1-1: Manufacturer: syz
[   86.852902][  T972] usb 1-1: SerialNumber: syz
[   86.854760][ T5743] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.857513][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.861189][  T972] usb 1-1: config 0 descriptor??
[   86.866144][ T5743] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.872901][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.876011][  T972] usb 1-1: selecting invalid altsetting 0
[   86.899553][ T5743] veth1_macvtap: left promiscuous mode
[   86.901663][ T5743] veth0_macvtap: left promiscuous mode
[   86.904205][ T5743] veth1_vlan: left promiscuous mode
[   86.906056][ T5743] veth0_vlan: left promiscuous mode
[   87.122838][   T60] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   87.145508][  T972] usb 1-1: USB disconnect, device number 8
[   87.200295][ T5743] team0 (unregistering): Port device team_slave_1 removed
[   87.228444][ T5743] team0 (unregistering): Port device team_slave_0 removed
[   87.278308][   T60] usb 3-1: config 7 descriptor has 1 excess byte, ignoring
[   87.280766][   T60] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2
[   87.295767][   T60] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[   87.298751][   T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.301375][   T60] usb 3-1: Product: syz
[   87.308611][   T60] usb 3-1: Manufacturer: syz
[   87.310176][   T60] usb 3-1: SerialNumber: syz
[   87.325256][   T60] rndis_host 3-1:7.0: skipping garbage
[   87.327116][   T60] usb 3-1: bad CDC descriptors
[   87.329232][   T60] option 3-1:7.0: GSM modem (1-port) converter detected
[   87.439899][ T5743] team0 (unregistering): Port device dummy0 removed
[   87.528224][   T60] usb 3-1: USB disconnect, device number 11
[   87.531168][   T60] option 3-1:7.0: device disconnected
[   87.562275][ T7356] hsr_slave_0: entered promiscuous mode
[   87.564785][ T7356] hsr_slave_1: entered promiscuous mode
[   87.662913][ T5236] Bluetooth: hci0: command tx timeout
[   87.726826][ T7356] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.732665][ T7356] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.738489][ T7356] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.745812][ T7356] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.802509][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.814806][ T7356] 8021q: adding VLAN 0 to HW filter on device team0
[   87.819902][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.822215][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.834750][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.837311][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.333307][  T972] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[   88.505255][  T972] usb 3-1: config 8 has an invalid interface number: 95 but max is 0
[   88.508084][  T972] usb 3-1: config 8 has no interface number 0
[   88.512250][  T972] usb 3-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=29.78
[   88.515659][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.520302][  T972] usb 3-1: Product: syz
[   88.523866][  T972] usb 3-1: Manufacturer: syz
[   88.526815][  T972] usb 3-1: SerialNumber: syz
[   88.746036][  T972] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.95/input/input6
[   88.755657][ T5280] bcm5974 3-1:8.95: could not read from device
[   88.870355][  T972] usb 3-1: USB disconnect, device number 12
[   88.877387][ T5280] bcm5974 3-1:8.95: could not read from device
[   88.984492][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.005681][ T7356] veth0_vlan: entered promiscuous mode
[   89.010743][ T7356] veth1_vlan: entered promiscuous mode
[   89.026746][ T7356] veth0_macvtap: entered promiscuous mode
[   89.031053][ T7356] veth1_macvtap: entered promiscuous mode
[   89.039784][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.046383][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.051917][ T5743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.057401][ T5743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.065512][ T5743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.072238][ T5743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.117038][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.119618][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.135713][ T4620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.139037][ T4620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.285061][ T7460] netlink: 'syz.2.557': attribute type 1 has an invalid length.
[   89.288323][ T7460] netlink: 240 bytes leftover after parsing attributes in process `syz.2.557'.
[   89.531558][ T7480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'.
[   89.699630][ T7496] netlink: 892 bytes leftover after parsing attributes in process `syz.3.570'.
[   89.719362][ T7495] loop2: detected capacity change from 0 to 4096
[   89.724785][ T7495] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   89.743134][ T5236] Bluetooth: hci0: command tx timeout
[   89.748991][ T7495] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   89.754601][ T7495] ntfs3(loop2): ino=19, mi_enum_attr
[   89.768284][ T7495] ntfs3(loop2): failed to convert "c46c" to default
[   89.773784][ T7495] ntfs3(loop2): ino=20, mi_enum_attr
[   89.817675][ T7499] loop2: detected capacity change from 0 to 128
[   89.829704][ T7499] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback.
[   89.854418][ T5852] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   89.863493][  T972] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   89.957438][ T7508] loop2: detected capacity change from 0 to 512
[   89.966860][ T7508] EXT4-fs: Ignoring removed i_version option
[   89.979275][ T7508] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   89.986549][ T7508] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   89.995212][ T7508] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   90.000253][ T7508] EXT4-fs (loop2): 1 truncate cleaned up
[   90.003505][ T7508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.029384][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.041596][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.052865][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.060280][  T972] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   90.066876][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.082665][  T972] usb 1-1: config 0 descriptor??
[   90.356397][ T7531] loop2: detected capacity change from 0 to 164
[   90.492289][  T972] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[   90.509750][  T972] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0
[   90.516730][  T972] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints?
[   90.576714][ T7538] loop3: detected capacity change from 0 to 4096
[   90.786577][    C0] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71
[   90.787056][ T5888] usb 1-1: USB disconnect, device number 9
[   90.798302][ T7552] 9pnet: p9_errstr2errno: server reported unknown error @cF	S+
[   91.094206][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'.
[   91.103267][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'.
[   91.104441][ T5872] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.109576][ T5872] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.114046][ T5872] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.116900][ T5872] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.771416][ T7569] loop0: detected capacity change from 0 to 131072
[   91.812673][ T7569] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   91.813671][ T7573] 9pnet_fd: Insufficient options for proto=fd
[   91.818406][ T7569] F2FS-fs (loop0): Mounted with checkpoint version = 1b41e955
[   91.823210][ T5236] Bluetooth: hci0: command tx timeout
[   91.832862][   T60] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   91.960724][ T7573] loop3: detected capacity change from 0 to 40427
[   91.968187][ T7573] F2FS-fs (loop3): invalid crc value
[   91.997015][ T7573] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   92.000702][ T7573] F2FS-fs (loop3): Start checkpoint disabled!
[   92.008969][ T7573] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   92.042987][   T60] usb 3-1: Using ep0 maxpacket: 32
[   92.053737][   T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.057297][   T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.060505][   T60] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   92.071640][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.076273][   T60] usb 3-1: config 0 descriptor??
[   92.346243][ T7586] loop0: detected capacity change from 0 to 8
[   92.354199][ T7586] squashfs image failed sanity check
[   92.500159][   T60] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[   92.532444][ T7598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.608'.
[   92.556771][   T33] audit: type=1326 audit(1755064823.296:18): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.609" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f994178ebe9 code=0x0
[   92.737746][ T7604] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   92.750963][  T972] usb 3-1: USB disconnect, device number 13
[   92.907158][ T7606] loop3: detected capacity change from 0 to 40427
[   92.911856][ T7606] F2FS-fs (loop3): invalid crc value
[   92.940334][ T7606] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   92.944398][ T7606] F2FS-fs (loop3): Start checkpoint disabled!
[   92.948248][ T7606] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   92.972523][ T7606] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   92.990196][ T1089] kworker/u9:5: attempt to access beyond end of device
[   92.990196][ T1089] loop3: rw=1, sector=45096, nr_sectors = 128 limit=40427
[   92.996661][ T1089] kworker/u9:5: attempt to access beyond end of device
[   92.996661][ T1089] loop3: rw=2049, sector=45224, nr_sectors = 16 limit=40427
[   93.001241][ T1089] CPU: 0 UID: 0 PID: 1089 Comm: kworker/u9:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   93.001252][ T1089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.001256][ T1089] Workqueue: writeback wb_workfn (flush-7:3)
[   93.001270][ T1089] Call Trace:
[   93.001273][ T1089]  <TASK>
[   93.001277][ T1089]  dump_stack_lvl+0x189/0x250
[   93.001289][ T1089]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.001297][ T1089]  ? __pfx_queue_work_on+0x10/0x10
[   93.001305][ T1089]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.001313][ T1089]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   93.001326][ T1089]  f2fs_handle_critical_error+0x37c/0x540
[   93.001339][ T1089]  f2fs_write_end_io+0x886/0xb60
[   93.001357][ T1089]  __submit_merged_bio+0x27a/0x6a0
[   93.001369][ T1089]  __submit_merged_write_cond+0x255/0x530
[   93.001381][ T1089]  f2fs_write_data_pages+0x261d/0x3000
[   93.001406][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   93.001451][ T1089]  ? f2fs_write_meta_pages+0x357/0x450
[   93.001465][ T1089]  ? __lock_acquire+0xab9/0xd20
[   93.001478][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   93.001488][ T1089]  do_writepages+0x32e/0x550
[   93.001501][ T1089]  ? reacquire_held_locks+0x127/0x1d0
[   93.001508][ T1089]  ? writeback_sb_inodes+0x384/0x1010
[   93.001521][ T1089]  __writeback_single_inode+0x145/0xff0
[   93.001530][ T1089]  ? do_raw_spin_unlock+0x4d/0x240
[   93.001541][ T1089]  writeback_sb_inodes+0x6c7/0x1010
[   93.001562][ T1089]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   93.001597][ T1089]  ? rcu_is_watching+0x15/0xb0
[   93.001610][ T1089]  wb_writeback+0x43b/0xaf0
[   93.001623][ T1089]  ? queue_io+0x391/0x590
[   93.001633][ T1089]  ? __pfx_wb_writeback+0x10/0x10
[   93.001646][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.001656][ T1089]  wb_workfn+0x409/0xef0
[   93.001671][ T1089]  ? __pfx_wb_workfn+0x10/0x10
[   93.001681][ T1089]  ? __lock_acquire+0xab9/0xd20
[   93.001696][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   93.001706][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.001713][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   93.001719][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   93.001727][ T1089]  process_scheduled_works+0xae1/0x17b0
[   93.001748][ T1089]  ? __pfx_process_scheduled_works+0x10/0x10
[   93.001767][ T1089]  worker_thread+0x8a0/0xda0
[   93.001787][ T1089]  kthread+0x711/0x8a0
[   93.001797][ T1089]  ? __pfx_worker_thread+0x10/0x10
[   93.001804][ T1089]  ? __pfx_kthread+0x10/0x10
[   93.001814][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.001821][ T1089]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.001829][ T1089]  ? __pfx_kthread+0x10/0x10
[   93.001838][ T1089]  ret_from_fork+0x3fc/0x770
[   93.001847][ T1089]  ? __pfx_ret_from_fork+0x10/0x10
[   93.001858][ T1089]  ? __switch_to_asm+0x39/0x70
[   93.001866][ T1089]  ? __switch_to_asm+0x33/0x70
[   93.001874][ T1089]  ? __pfx_kthread+0x10/0x10
[   93.001884][ T1089]  ret_from_fork_asm+0x1a/0x30
[   93.001922][ T1089]  </TASK>
[   93.001925][ T1089] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   93.104290][ T1089] CPU: 0 UID: 0 PID: 1089 Comm: kworker/u9:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   93.104302][ T1089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.104307][ T1089] Workqueue: writeback wb_workfn (flush-7:3)
[   93.104320][ T1089] Call Trace:
[   93.104323][ T1089]  <TASK>
[   93.104327][ T1089]  dump_stack_lvl+0x189/0x250
[   93.104339][ T1089]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.104348][ T1089]  ? __pfx_queue_work_on+0x10/0x10
[   93.104355][ T1089]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.104363][ T1089]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   93.104377][ T1089]  f2fs_handle_critical_error+0x37c/0x540
[   93.104389][ T1089]  f2fs_write_end_io+0x886/0xb60
[   93.104407][ T1089]  __submit_merged_bio+0x27a/0x6a0
[   93.104419][ T1089]  __submit_merged_write_cond+0x255/0x530
[   93.104431][ T1089]  f2fs_write_data_pages+0x261d/0x3000
[   93.104456][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   93.104502][ T1089]  ? f2fs_write_meta_pages+0x357/0x450
[   93.104516][ T1089]  ? __lock_acquire+0xab9/0xd20
[   93.104528][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   93.104538][ T1089]  do_writepages+0x32e/0x550
[   93.104550][ T1089]  ? reacquire_held_locks+0x127/0x1d0
[   93.104557][ T1089]  ? writeback_sb_inodes+0x384/0x1010
[   93.104570][ T1089]  __writeback_single_inode+0x145/0xff0
[   93.104579][ T1089]  ? do_raw_spin_unlock+0x4d/0x240
[   93.104590][ T1089]  writeback_sb_inodes+0x6c7/0x1010
[   93.104611][ T1089]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   93.104639][ T1089]  ? rcu_is_watching+0x15/0xb0
[   93.104651][ T1089]  wb_writeback+0x43b/0xaf0
[   93.104664][ T1089]  ? queue_io+0x391/0x590
[   93.104674][ T1089]  ? __pfx_wb_writeback+0x10/0x10
[   93.104687][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.104697][ T1089]  wb_workfn+0x409/0xef0
[   93.104712][ T1089]  ? __pfx_wb_workfn+0x10/0x10
[   93.104721][ T1089]  ? __lock_acquire+0xab9/0xd20
[   93.104736][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   93.104746][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.104753][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   93.104759][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[   93.104767][ T1089]  process_scheduled_works+0xae1/0x17b0
[   93.104787][ T1089]  ? __pfx_process_scheduled_works+0x10/0x10
[   93.104807][ T1089]  worker_thread+0x8a0/0xda0
[   93.104827][ T1089]  kthread+0x711/0x8a0
[   93.104837][ T1089]  ? __pfx_worker_thread+0x10/0x10
[   93.104844][ T1089]  ? __pfx_kthread+0x10/0x10
[   93.104853][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.104860][ T1089]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.104868][ T1089]  ? __pfx_kthread+0x10/0x10
[   93.104877][ T1089]  ret_from_fork+0x3fc/0x770
[   93.104886][ T1089]  ? __pfx_ret_from_fork+0x10/0x10
[   93.104922][ T1089]  ? __switch_to_asm+0x39/0x70
[   93.104932][ T1089]  ? __switch_to_asm+0x33/0x70
[   93.104940][ T1089]  ? __pfx_kthread+0x10/0x10
[   93.104949][ T1089]  ret_from_fork_asm+0x1a/0x30
[   93.104965][ T1089]  </TASK>
[   93.104969][ T1089] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   93.477971][ T7626] loop0: detected capacity change from 0 to 256
[   93.492602][   T60] IPVS: starting estimator thread 0...
[   93.495178][   T33] audit: type=1800 audit(1755064824.226:19): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.620" name="file1" dev="loop0" ino=1048603 res=0 errno=0
[   93.593727][ T7627] IPVS: using max 79 ests per chain, 189600 per kthread
[   93.709559][ T7635] loop0: detected capacity change from 0 to 32768
[   93.714869][ T7635] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.624 (7635)
[   93.725952][ T7635] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   93.730251][ T7635] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   93.734272][ T7635] BTRFS info (device loop0): using free-space-tree
[   93.779093][ T7635] BTRFS info (device loop0): balance: start -susage=34359738372,drange=7..526332,limit=42949673007,stripes=4294967295..4
[   93.783440][ T7635] BTRFS info (device loop0): balance: ended with status: 0
[   93.823914][ T5849] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   93.904469][ T5236] Bluetooth: hci0: command tx timeout
[   94.120479][ T7684] loop4: detected capacity change from 0 to 7
[   94.125521][ T7684] Dev loop4: unable to read RDB block 7
[   94.127497][ T7684]  loop4: AHDI p1 p2
[   94.128912][ T7684] loop4: partition table partially beyond EOD, truncated
[   94.131370][ T7684] loop4: p1 size 4227858431 extends beyond EOD, truncated
[   94.165828][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   94.179275][ T7688] loop3: detected capacity change from 0 to 256
[   94.290509][ T7696] loop0: detected capacity change from 0 to 512
[   94.335219][ T7696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.350629][ T7696] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.367324][   T33] audit: type=1800 audit(1755064825.106:20): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.645" name="file2" dev="loop0" ino=16 res=0 errno=0
[   94.390703][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.635266][ T7722] tipc: Started in network mode
[   94.637207][ T7722] tipc: Node identity ac14140f, cluster identity 4711
[   94.639729][ T7722] tipc: New replicast peer: 255.255.255.255
[   94.642063][ T7722] tipc: Enabled bearer <udp:syz2>, priority 10
[   94.669779][ T7724] loop3: detected capacity change from 0 to 1024
[   94.688367][ T7724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.697611][ T7724] EXT4-fs (loop3): shut down requested (0)
[   94.721570][ T7356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.915695][ T7739] process 'syz.3.662' launched './file1' with NULL argv: empty string added
[   95.838488][ T5939] tipc: Node number set to 2886997007
[   96.113449][ T7760] loop2: detected capacity change from 0 to 2048
[   96.128183][ T7760] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.206738][ T7766] loop2: detected capacity change from 0 to 512
[   96.852834][ T5888] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   97.002886][ T5888] usb 1-1: Using ep0 maxpacket: 16
[   97.006416][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.009966][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.014224][ T5888] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[   97.017211][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.021762][ T5888] usb 1-1: config 0 descriptor??
[   97.249719][ T7804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.262566][ T7804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.298407][ T7806] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   97.301270][ T7806] overlayfs: failed to set xattr on upper
[   97.303589][ T7806] overlayfs: ...falling back to redirect_dir=nofollow.
[   97.305825][ T7806] overlayfs: ...falling back to index=off.
[   97.307851][ T7806] overlayfs: ...falling back to uuid=null.
[   97.335415][ T7808] loop3: detected capacity change from 0 to 128
[   97.340544][ T7808] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   97.344917][ T7808] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   97.367196][ T7356] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.404126][ T7812] loop3: detected capacity change from 0 to 1024
[   97.410666][ T7812] EXT4-fs: Ignoring removed orlov option
[   97.426640][ T7812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.435156][ T5888] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0
[   97.442796][   T60] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   97.462526][ T7356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.518687][ T7818] netlink: 'syz.3.692': attribute type 29 has an invalid length.
[   97.521944][ T7818] netlink: 'syz.3.692': attribute type 29 has an invalid length.
[   97.592808][   T60] usb 3-1: Using ep0 maxpacket: 32
[   97.597618][   T60] usb 3-1: config 0 has an invalid interface number: 3 but max is 0
[   97.600369][   T60] usb 3-1: config 0 has no interface number 0
[   97.602352][   T60] usb 3-1: config 0 interface 3 has no altsetting 0
[   97.608993][   T60] usb 3-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=34.a4
[   97.612062][   T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.615125][   T60] usb 3-1: Product: syz
[   97.616536][   T60] usb 3-1: Manufacturer: syz
[   97.618071][   T60] usb 3-1: SerialNumber: syz
[   97.621776][   T60] usb 3-1: config 0 descriptor??
[   97.631163][ T5888] corsair 0003:1B1C:1B02.0006: Failed to get K90 initial state (error -71).
[   97.639876][ T5888] usb 1-1: USB disconnect, device number 10
[   97.831540][   T60] usb 3-1: active config #0 != 1 ??
[   97.835042][   T60] usb 3-1: USB disconnect, device number 14
[   98.227854][ T7830] loop0: detected capacity change from 0 to 128
[   98.236062][ T7830] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   98.243913][ T7830] ext4 filesystem being mounted at /250/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   98.265246][ T5849] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   98.526316][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'.
[   98.538029][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'.
[   98.566977][ T5872] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.570019][ T5872] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.585426][ T5872] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.598493][ T5872] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.766965][ T7880] loop3: detected capacity change from 0 to 512
[   98.785356][ T7880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.789403][ T7880] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   98.810277][ T7887] loop2: detected capacity change from 0 to 8
[   98.820722][ T7880] EXT4-fs (loop3): shut down requested (0)
[   98.978120][ T7356] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.068033][   T68] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   99.658473][ T7931] capability: warning: `syz.0.739' uses deprecated v2 capabilities in a way that may be insecure
[   99.702556][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'.
[   99.732028][ T7937] loop0: detected capacity change from 0 to 512
[   99.755996][ T7937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.759955][ T7937] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.229226][ T7958] netlink: 'syz.3.745': attribute type 63 has an invalid length.
[  100.409669][ T7977] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  100.409669][ T7977] The task syz.3.751 (7977) triggered the difference, watch for misbehavior.
[  100.512963][  T972] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  100.644855][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.722827][  T972] usb 3-1: Using ep0 maxpacket: 8
[  100.734766][  T972] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  100.740891][  T972] usb 3-1: config 0 has no interface number 0
[  100.746191][  T972] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  100.750002][  T972] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  100.754121][  T972] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  100.757588][  T972] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  100.761703][  T972] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  100.765330][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.772972][  T972] usb 3-1: config 0 descriptor??
[  100.781625][  T972] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  101.090699][ T7997] tipc: Started in network mode
[  101.092413][ T7997] tipc: Node identity ac14140f, cluster identity 4711
[  101.094973][ T7997] tipc: New replicast peer: 255.255.255.255
[  101.097190][ T7997] tipc: Enabled bearer <udp:syz2>, priority 10
[  101.398627][   T33] audit: type=1326 audit(1755064832.136:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d918ebe9 code=0x7ffc0000
[  101.406135][   T33] audit: type=1326 audit(1755064832.146:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d918ebe9 code=0x7ffc0000
[  101.417471][   T33] audit: type=1326 audit(1755064832.156:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.762" exe="/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd0d918ebe9 code=0x7ffc0000
[  101.437426][   T33] audit: type=1326 audit(1755064832.156:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d918ebe9 code=0x7ffc0000
[  101.454561][   T33] audit: type=1326 audit(1755064832.156:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d918ebe9 code=0x7ffc0000
[  101.732861][ T6633] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  101.882914][ T6633] usb 4-1: Using ep0 maxpacket: 8
[  101.886333][ T6633] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.889636][ T6633] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  101.892620][ T6633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.902585][ T6633] usb 4-1: config 0 descriptor??
[  101.906770][ T6633] gspca_main: vc032x-2.14.0 probing 046d:0892
[  102.092849][  T972] tipc: Node number set to 2886997007
[  103.190126][   T60] usb 3-1: USB disconnect, device number 15
[  103.198950][   T60] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  103.314452][ T6633] gspca_vc032x: reg_w err -71
[  103.316379][ T6633] vc032x 4-1:0.0: probe with driver vc032x failed with error -71
[  103.321648][ T6633] usb 4-1: USB disconnect, device number 2
[  103.771401][ T8036] C: renamed from team_slave_0 (while UP)
[  103.777663][ T8036] netlink: 'syz.2.764': attribute type 3 has an invalid length.
[  103.780941][ T8036] netlink: 152 bytes leftover after parsing attributes in process `syz.2.764'.
[  103.784798][ T8036] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  103.957272][ T8045] loop0: detected capacity change from 0 to 1024
[  103.958955][ T8048] loop2: detected capacity change from 0 to 1024
[  103.994720][   T33] audit: type=1800 audit(1755064834.726:26): pid=8048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.770" name="file1" dev="loop2" ino=20 res=0 errno=0
Connection to localhost closed by remote host.
[  104.867179][ T5743] bridge_slave_0: left allmulticast mode
[  104.869553][ T5743] bridge_slave_0: left promiscuous mode
[  104.871967][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.985443][ T5743] bridge0 (unregistering): left promiscuous mode
[  105.121663][ T5743]  (unregistering): left promiscuous mode
[  105.123803][ T5743] bond_slave_0: left promiscuous mode
[  105.125608][ T5743] bond_slave_1: left promiscuous mode
[  105.136250][ T5743]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.139055][ T5743] bond_slave_0: left allmulticast mode
[  105.141967][ T5743]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.145134][ T5743] bond_slave_1: left allmulticast mode
[  105.147122][ T5743]  (unregistering): Released all slaves
[  105.205932][ T5743] tipc: Disabling bearer <udp:syz2>
[  105.215712][ T5743] tipc: Left network mode
[  105.368382][ T5743] hsr_slave_0: left promiscuous mode
[  105.372938][ T5743] hsr_slave_1: left promiscuous mode
[  105.375621][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.378331][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.578563][ T5743] team0 (unregistering): Port device team_slave_1 removed
[  105.600887][ T5743] team0 (unregistering): Port device team_slave_0 removed
[  106.039486][ T5743] IPVS: stop unused estimator thread 0...
[  106.141379][ T5743] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.145840][ T5743] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.227469][ T5743] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.230828][ T5743] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.298103][ T5743] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.301505][ T5743] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.342309][ T5743] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.345850][ T5743] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.446836][ T5743] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.450216][ T5743] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.510145][ T5743] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.514202][ T5743] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.576983][ T5743] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.580369][ T5743] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.635616][ T5743] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.639029][ T5743] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.752945][ T5743] bridge_slave_1: left allmulticast mode
[  106.754789][ T5743] bridge_slave_1: left promiscuous mode
[  106.756724][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.761498][ T5743] bridge_slave_0: left allmulticast mode
[  106.766244][ T5743] bridge_slave_0: left promiscuous mode
[  106.768183][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.774424][ T5743] bridge_slave_1: left allmulticast mode
[  106.776301][ T5743] bridge_slave_1: left promiscuous mode
[  106.778186][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.784797][ T5743] bridge_slave_0: left allmulticast mode
[  106.786671][ T5743] bridge_slave_0: left promiscuous mode
[  106.788586][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.036953][ T5743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.041249][ T5743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.045518][ T5743] bond0 (unregistering): Released all slaves
[  107.256249][ T5743] bond0 (unregistering): (slave 5@): Releasing backup interface
[  107.259919][ T5743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.263736][ T5743] bond0 (unregistering): Released all slaves
[  107.315520][ T5743] : left promiscuous mode
[  107.386850][ T5743] tipc: Disabling bearer <udp:syz2>
[  107.392358][ T5743] tipc: Left network mode
[  107.677108][ T5743] hsr_slave_0: left promiscuous mode
[  107.679179][ T5743] hsr_slave_1: left promiscuous mode
[  107.681161][ T5743] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.686685][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.689452][ T5743] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.691883][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.697555][ T5743] hsr_slave_0: left promiscuous mode
[  107.699639][ T5743] hsr_slave_1: left promiscuous mode
[  107.701622][ T5743] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.705272][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.708338][ T5743] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.710783][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.725073][ T5743] veth1_macvtap: left promiscuous mode
[  107.726933][ T5743] veth0_macvtap: left promiscuous mode
[  107.728807][ T5743] veth1_vlan: left promiscuous mode
[  107.730551][ T5743] veth0_vlan: left promiscuous mode
[  107.734284][ T5743] hsr0: left allmulticast mode
[  107.735906][ T5743] hsr0: left promiscuous mode
[  107.737563][ T5743] veth1_macvtap: left promiscuous mode
[  107.739348][ T5743] veth0_macvtap: left promiscuous mode
[  107.741211][ T5743] veth1_vlan: left promiscuous mode
[  107.743737][ T5743] veth0_vlan: left promiscuous mode
[  108.033822][ T5743] team0 (unregistering): Port device team_slave_1 removed
[  108.056334][ T5743] team0 (unregistering): Port device team_slave_0 removed
[  108.488100][ T5743] team0 (unregistering): Port device team_slave_1 removed
[  108.510566][ T5743] team0 (unregistering): Port device C removed
[  109.170181][ T5743] IPVS: stop unused estimator thread 0...
[  109.183541][ T5743] ------------[ cut here ]------------
[  109.185830][ T5743] WARNING: CPU: 1 PID: 5743 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  109.189797][ T5743] Modules linked in:
[  109.191752][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  109.197726][ T5743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.201778][ T5743] Workqueue: netns cleanup_net
[  109.204161][ T5743] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  109.206530][ T5743] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 9e e2 f7 e8 f1 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  109.214859][ T5743] RSP: 0018:ffffc90002f2f898 EFLAGS: 00010293
[  109.217750][ T5743] RAX: ffffffff8a2135bf RBX: ffff88802c192440 RCX: ffff88801f4fd640
[  109.221125][ T5743] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff88801f4fd640
[  109.224733][ T5743] RBP: ffffc90002f2f9b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  109.227995][ T5743] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  109.231367][ T5743] R13: 1ffff920005e5f40 R14: ffff88802c1938c0 R15: dffffc0000000000
[  109.235020][ T5743] FS:  0000000000000000(0000) GS:ffff8881a3c24000(0000) knlGS:0000000000000000
[  109.238573][ T5743] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  109.241252][ T5743] CR2: 00007ffc73ce0f48 CR3: 000000000df36000 CR4: 00000000000006f0
[  109.245031][ T5743] Call Trace:
[  109.246512][ T5743]  <TASK>
[  109.247813][ T5743]  xfrm_net_exit+0x2d/0x70
[  109.249741][ T5743]  ops_undo_list+0x49a/0x990
[  109.251903][ T5743]  ? __pfx_ops_undo_list+0x10/0x10
[  109.254383][ T5743]  ? do_raw_spin_unlock+0x4d/0x240
[  109.256848][ T5743]  cleanup_net+0x4c5/0x800
[  109.258770][ T5743]  ? __pfx_cleanup_net+0x10/0x10
[  109.260813][ T5743]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.263300][ T5743]  ? process_scheduled_works+0x9ef/0x17b0
[  109.265526][ T5743]  ? process_scheduled_works+0x9ef/0x17b0
[  109.267875][ T5743]  process_scheduled_works+0xae1/0x17b0
[  109.270134][ T5743]  ? __pfx_process_scheduled_works+0x10/0x10
[  109.272628][ T5743]  worker_thread+0x8a0/0xda0
[  109.275251][ T5743]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.277800][ T5743]  ? __kthread_parkme+0x7b/0x200
[  109.279872][ T5743]  kthread+0x711/0x8a0
[  109.281640][ T5743]  ? __pfx_worker_thread+0x10/0x10
[  109.284314][ T5743]  ? __pfx_kthread+0x10/0x10
[  109.286317][ T5743]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.288133][ T5743]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.290313][ T5743]  ? __pfx_kthread+0x10/0x10
[  109.292197][ T5743]  ret_from_fork+0x3fc/0x770
[  109.294090][ T5743]  ? __pfx_ret_from_fork+0x10/0x10
[  109.295782][ T5743]  ? __switch_to_asm+0x39/0x70
[  109.297359][ T5743]  ? __switch_to_asm+0x33/0x70
[  109.298937][ T5743]  ? __pfx_kthread+0x10/0x10
[  109.300468][ T5743]  ret_from_fork_asm+0x1a/0x30
[  109.302067][ T5743]  </TASK>
[  109.303349][ T5743] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  109.305743][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  109.309650][ T5743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.312918][ T5743] Workqueue: netns cleanup_net
[  109.314477][ T5743] Call Trace:
[  109.315582][ T5743]  <TASK>
[  109.316563][ T5743]  dump_stack_lvl+0x99/0x250
[  109.318082][ T5743]  ? __asan_memcpy+0x40/0x70
[  109.319587][ T5743]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.321283][ T5743]  ? __pfx__printk+0x10/0x10
[  109.322820][ T5743]  vpanic+0x281/0x750
[  109.324140][ T5743]  ? __pfx__printk+0x10/0x10
[  109.325662][ T5743]  ? __pfx_vpanic+0x10/0x10
[  109.327164][ T5743]  ? is_bpf_text_address+0x292/0x2b0
[  109.328892][ T5743]  panic+0xb9/0xc0
[  109.330140][ T5743]  ? __pfx_panic+0x10/0x10
[  109.331612][ T5743]  __warn+0x31b/0x4b0
[  109.332936][ T5743]  ? xfrm_state_fini+0x270/0x2f0
[  109.334546][ T5743]  ? xfrm_state_fini+0x270/0x2f0
[  109.336177][ T5743]  report_bug+0x2be/0x4f0
[  109.337585][ T5743]  ? xfrm_state_fini+0x270/0x2f0
[  109.339221][ T5743]  ? xfrm_state_fini+0x270/0x2f0
[  109.340882][ T5743]  ? xfrm_state_fini+0x272/0x2f0
[  109.342520][ T5743]  handle_bug+0x84/0x160
[  109.343940][ T5743]  exc_invalid_op+0x1a/0x50
[  109.345447][ T5743]  asm_exc_invalid_op+0x1a/0x20
[  109.347047][ T5743] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  109.348788][ T5743] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 9e e2 f7 e8 f1 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  109.355045][ T5743] RSP: 0018:ffffc90002f2f898 EFLAGS: 00010293
[  109.357057][ T5743] RAX: ffffffff8a2135bf RBX: ffff88802c192440 RCX: ffff88801f4fd640
[  109.359645][ T5743] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff88801f4fd640
[  109.362254][ T5743] RBP: ffffc90002f2f9b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  109.364856][ T5743] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  109.367314][ T5743] R13: 1ffff920005e5f40 R14: ffff88802c1938c0 R15: dffffc0000000000
[  109.369895][ T5743]  ? xfrm_state_fini+0x26f/0x2f0
[  109.371533][ T5743]  ? xfrm_state_fini+0x26f/0x2f0
[  109.373105][ T5743]  xfrm_net_exit+0x2d/0x70
[  109.374551][ T5743]  ops_undo_list+0x49a/0x990
[  109.376097][ T5743]  ? __pfx_ops_undo_list+0x10/0x10
[  109.377792][ T5743]  ? do_raw_spin_unlock+0x4d/0x240
[  109.379496][ T5743]  cleanup_net+0x4c5/0x800
[  109.380994][ T5743]  ? __pfx_cleanup_net+0x10/0x10
[  109.382598][ T5743]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.384283][ T5743]  ? process_scheduled_works+0x9ef/0x17b0
[  109.386165][ T5743]  ? process_scheduled_works+0x9ef/0x17b0
[  109.388043][ T5743]  process_scheduled_works+0xae1/0x17b0
[  109.389880][ T5743]  ? __pfx_process_scheduled_works+0x10/0x10
[  109.391857][ T5743]  worker_thread+0x8a0/0xda0
[  109.393389][ T5743]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.395478][ T5743]  ? __kthread_parkme+0x7b/0x200
[  109.397120][ T5743]  kthread+0x711/0x8a0
[  109.398478][ T5743]  ? __pfx_worker_thread+0x10/0x10
[  109.400192][ T5743]  ? __pfx_kthread+0x10/0x10
[  109.401734][ T5743]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.403442][ T5743]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.405168][ T5743]  ? __pfx_kthread+0x10/0x10
[  109.406722][ T5743]  ret_from_fork+0x3fc/0x770
[  109.408243][ T5743]  ? __pfx_ret_from_fork+0x10/0x10
[  109.409918][ T5743]  ? __switch_to_asm+0x39/0x70
[  109.411497][ T5743]  ? __switch_to_asm+0x33/0x70
[  109.413080][ T5743]  ? __pfx_kthread+0x10/0x10
[  109.414586][ T5743]  ret_from_fork_asm+0x1a/0x30
[  109.416163][ T5743]  </TASK>
[  109.417837][ T5743] Kernel Offset: disabled
[  109.419273][ T5743] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:00:40  Registers:
info registers vcpu 0

CPU#0
RAX=ec684b9cc1cdf000 RBX=ffffffff81968308 RCX=ec684b9cc1cdf000 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055cc51a84950 CR3=000000010c97c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffff000000 ffffffffffffffff XMM01=0000000000706d63 0000000000000000
XMM02=0000000000ffffff 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffffffffff000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002f2f030
R8 =ffff888106b58237 R9 =1ffff11020d6b046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18d1 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc73ce0f48 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=ffffffff00000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
