last executing test programs:

7.38603266s ago: executing program 2 (id=789):
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000180)=""/82, 0x52)

7.319054018s ago: executing program 2 (id=790):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
getsockname$packet(r1, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x36)
r3 = socket$kcm(0x10, 0x2, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, 0x0, 0x4000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)

5.814715285s ago: executing program 2 (id=803):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

5.738664151s ago: executing program 2 (id=805):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

5.542252506s ago: executing program 2 (id=809):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x4, 0xffff}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x38)

5.398842967s ago: executing program 2 (id=811):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x20, 0xc, 0x1, "97"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.179218482s ago: executing program 32 (id=811):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x20, 0xc, 0x1, "97"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.338632262s ago: executing program 1 (id=832):
socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$adfs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x4002, &(0x7f00000003c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYRES8=r1, @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB="2c657569c32b", @ANYRESDEC=0x0, @ANYRESDEC], 0x1, 0x9dcf, &(0x7f0000013cc0)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
syz_mount_image$udf(&(0x7f0000001a40), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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")

1.438282639s ago: executing program 1 (id=837):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000})

1.047421035s ago: executing program 1 (id=838):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0)

956.790074ms ago: executing program 1 (id=839):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES16=0x0], 0x1, 0x196, &(0x7f0000000200)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

892.280674ms ago: executing program 1 (id=840):
r0 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x5)

755.199001ms ago: executing program 1 (id=841):
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
keyctl$clear(0x7, 0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000000000000053bc2f344158f25a1d3344b0e040f5bc6680b964a6e9a8a69b7adc28f75a151a160cd270e5aa8b4c41e359"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x60, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

541.539531ms ago: executing program 0 (id=842):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f003)
truncate(&(0x7f0000000180)='./file1\x00', 0x400000f001)

201.138096ms ago: executing program 0 (id=843):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

141.186506ms ago: executing program 0 (id=844):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000101000000080009000200000014001f00000000000000000000000000000000011400200000004000000000000000ffffac1414bb0500070000000000060002000100000008000a"], 0x5c}}, 0x0)

140.798481ms ago: executing program 0 (id=845):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x2, 0x34325241, 0x0, 0x2, [{0x6}, {0x3}, {}, {0x3}, {0xfffffffd}, {0xd360}, {0x8000, 0xfff}, {0x0, 0x80003}], 0x10, 0x0, 0x1, 0x0, 0x5}})

70.837578ms ago: executing program 0 (id=846):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f000000b480)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47e2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf6585081d5028efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a27325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafeda79e98e9dcbf01dc5bcbd5c199b9e95c24b000000000000000000", @ANYRES8, @ANYBLOB="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", @ANYRES8], 0x1, 0x1f9, &(0x7f0000000340)="$eJzs201u00AYxvHHTuK05ftrw4INC1hADGkk6AKJHoAVO3ZVG6qKFBBh0wgJumHFJTgGO27CBVqJnsBohokal9ieOML56P8ntX47mieeRH2tcSQLwLl11f4OFKhhqyS5E5vjqxeS6rnRqIr1Afh/ksA2faZo/PBKfgrAYqj9Hj/ezGzwH8Mi5CoALLLjzZrdB/wMpF8nn7aP3E/Dc/9wvBlKNffHSD6SVrzyh4E93q5LRyP5ptIvEHzJ2L98/5u/p3R+1Xf97vxrZ/JrRUFzy2QchvZw/246f0HSRUmXJF2WdMXda12TdH3M+XfOnP+W5/qBaZj/vlZqxKtt0/lWzoSmclvRdM/rvV730URnPdVw+ccl85HLt6fMr5fMN12+tf2ut5M563nJVwfyhf/0/2QK+z/T6deH2f2f/wXkcEaZ/q9NOB9YRv2DwZutXq/7wadoaHQk9ExVUEQqGTfbB1M8O3lpr0fz8XaWoxhuJM1I3X3Ogwd5qa8zX3N1xWrRnG/u45vVCmd3TQJQjfjj/vu4fzB4uLe/tdvd7b5tdzaedtbbnScbsd2Xx9PcnQOYZ/0kST7bwm9+8R05AAAAAAAAAAAAAACo2g1JNwvm+D5LBwAAAGC+VfE40azfIwAAAAAAAAAAAAAAAAAAALAs/gQAAP//Q3EyaQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

0s ago: executing program 0 (id=847):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400006000908000240000000000800044000000000080003400000000108000540000000040900010073797a30000000000900020073797a32"], 0x98}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19294' (ED25519) to the list of known hosts.
syzkaller login: [   48.937071][ T5775] cgroup: Unknown subsys name 'net'
[   49.008864][ T5775] cgroup: Unknown subsys name 'cpuset'
[   49.014265][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.461864][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.652091][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.655804][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.659231][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.663224][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.666458][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.712602][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.715973][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.719734][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.723160][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.726675][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.749700][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.753652][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.756859][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.760807][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.763816][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.904845][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   55.008054][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.027986][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.031463][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.034328][ T5837] bridge_slave_0: entered allmulticast mode
[   55.037799][ T5837] bridge_slave_0: entered promiscuous mode
[   55.079085][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.081898][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.084852][ T5837] bridge_slave_1: entered allmulticast mode
[   55.088543][ T5837] bridge_slave_1: entered promiscuous mode
[   55.141096][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.152863][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.193207][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   55.220456][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.223207][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.225847][ T5841] bridge_slave_0: entered allmulticast mode
[   55.230573][ T5841] bridge_slave_0: entered promiscuous mode
[   55.234980][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.238946][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.242092][ T5841] bridge_slave_1: entered allmulticast mode
[   55.246046][ T5841] bridge_slave_1: entered promiscuous mode
[   55.263533][ T5837] team0: Port device team_slave_0 added
[   55.293418][ T5837] team0: Port device team_slave_1 added
[   55.323705][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.331200][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.333911][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.343733][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.350498][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.387885][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.391221][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.402468][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.414516][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.417483][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.422133][ T5843] bridge_slave_0: entered allmulticast mode
[   55.425799][ T5843] bridge_slave_0: entered promiscuous mode
[   55.431363][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.434377][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.438238][ T5843] bridge_slave_1: entered allmulticast mode
[   55.441971][ T5843] bridge_slave_1: entered promiscuous mode
[   55.458342][ T5841] team0: Port device team_slave_0 added
[   55.463805][ T5841] team0: Port device team_slave_1 added
[   55.520141][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.524998][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.527182][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.536352][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.556981][ T5837] hsr_slave_0: entered promiscuous mode
[   55.560017][ T5837] hsr_slave_1: entered promiscuous mode
[   55.564761][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.568801][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.571556][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.582403][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.632741][ T5843] team0: Port device team_slave_0 added
[   55.654623][ T5843] team0: Port device team_slave_1 added
[   55.715248][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.717883][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.729662][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.737877][ T5841] hsr_slave_0: entered promiscuous mode
[   55.740455][ T5841] hsr_slave_1: entered promiscuous mode
[   55.742690][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   55.745028][ T5841] Cannot create hsr debugfs directory
[   55.754034][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.757011][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.767535][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.838998][ T5843] hsr_slave_0: entered promiscuous mode
[   55.842086][ T5843] hsr_slave_1: entered promiscuous mode
[   55.845062][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   55.847559][ T5843] Cannot create hsr debugfs directory
[   56.067986][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.082007][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.089854][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.104534][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.137043][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.146339][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.161224][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.170058][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.212825][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.218527][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.224128][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.233534][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.296634][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.324017][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   56.339199][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.344561][  T187] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.347018][  T187] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.357867][  T187] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.360275][  T187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.392356][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.403249][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.416082][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.418915][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.437013][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.439476][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.475378][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   56.494672][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.497799][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.517072][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.520263][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.547987][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.659672][ T5837] veth0_vlan: entered promiscuous mode
[   56.665922][ T5837] veth1_vlan: entered promiscuous mode
[   56.703732][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.706609][ T5837] veth0_macvtap: entered promiscuous mode
[   56.709282][ T5233] Bluetooth: hci0: command tx timeout
[   56.715597][ T5837] veth1_macvtap: entered promiscuous mode
[   56.741431][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.754459][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.770260][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.778106][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.788705][ T5233] Bluetooth: hci2: command tx timeout
[   56.790678][ T5233] Bluetooth: hci1: command tx timeout
[   56.794926][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.797835][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.804000][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.814320][ T5843] veth0_vlan: entered promiscuous mode
[   56.843999][ T5843] veth1_vlan: entered promiscuous mode
[   56.887637][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.894649][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.904139][ T5841] veth0_vlan: entered promiscuous mode
[   56.934645][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.935670][ T5843] veth0_macvtap: entered promiscuous mode
[   56.937865][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.945583][ T5841] veth1_vlan: entered promiscuous mode
[   56.955690][ T5843] veth1_macvtap: entered promiscuous mode
[   56.996662][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.005179][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.014311][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.022653][ T5841] veth0_macvtap: entered promiscuous mode
[   57.031916][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.059101][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.062618][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.067016][ T5841] veth1_macvtap: entered promiscuous mode
[   57.078049][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.107701][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.136130][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.176652][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.177644][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.183747][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.185688][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.186532][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.195368][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.243370][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.246019][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.292447][ T5907] cgroup: Need name or subsystem set
[   57.353108][  T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.355767][  T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.462996][  T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.473534][  T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.788852][ T5838] Bluetooth: hci0: command tx timeout
[   58.820918][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.831773][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.835213][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.878307][ T5838] Bluetooth: hci1: command tx timeout
[   58.880541][ T5838] Bluetooth: hci2: command tx timeout
[   59.019310][ T5930] loop2: detected capacity change from 0 to 512
[   59.022095][ T5930] =======================================================
[   59.022095][ T5930] WARNING: The mand mount option has been deprecated and
[   59.022095][ T5930]          and is ignored by this kernel. Remove the mand
[   59.022095][ T5930]          option from the mount to silence this warning.
[   59.022095][ T5930] =======================================================
[   59.038725][ T5930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   59.064011][ T5930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.068999][ T5930] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.106917][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.618764][ T5887] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   59.791974][ T5887] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.796204][ T5887] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   59.810595][ T5887] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   59.814361][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   59.817525][ T5887] usb 2-1: SerialNumber: syz
[   60.013156][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'.
[   60.055977][ T5887] usb 2-1: 0:2 : does not exist
[   60.095808][ T5887] usb 2-1: USB disconnect, device number 2
[   60.146627][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   60.868305][ T5838] Bluetooth: hci0: command tx timeout
[   60.949003][ T5838] Bluetooth: hci2: command tx timeout
[   60.949034][ T5233] Bluetooth: hci1: command tx timeout
[   61.042537][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   61.189238][ T5905] usb 3-1: Using ep0 maxpacket: 16
[   61.194595][ T5905] usb 3-1: config 8 has an invalid interface number: 206 but max is 0
[   61.197346][ T5905] usb 3-1: config 8 has no interface number 0
[   61.199782][ T5905] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[   61.203750][ T5905] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[   61.207532][ T5905] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[   61.214154][ T5905] usb 3-1: config 8 interface 206 has no altsetting 0
[   61.227637][ T5905] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[   61.231770][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.234749][ T5905] usb 3-1: Product: syz
[   61.236296][ T5905] usb 3-1: Manufacturer: syz
[   61.237818][ T5905] usb 3-1: SerialNumber: syz
[   61.305915][ T6001] loop0: detected capacity change from 0 to 512
[   61.312609][ T6001] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   61.330031][ T6001] block device autoloading is deprecated and will be removed.
[   61.333749][ T6001] EXT4-fs (loop0): external journal has bad superblock
[   61.413117][ T6003] loop0: detected capacity change from 0 to 128
[   61.426429][ T6003] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   61.433093][ T6003] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   61.454461][ T5905] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected
[   61.475642][ T5905] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[   61.486547][ T5905] usb 3-1: USB disconnect, device number 2
[   61.500218][ T5905] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[   61.504381][ T5905] garmin_gps 3-1:8.206: device disconnected
[   61.507214][ T6003] EXT4-fs (loop0): shut down requested (1)
[   61.533530][ T5837] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   61.828949][ T6010] loop1: detected capacity change from 0 to 4096
[   61.914862][ T6011] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   61.962618][ T6010] syz.1.40 (6010) used greatest stack depth: 18624 bytes left
[   62.320895][   T27] Bluetooth: hci3: Frame reassembly failed (-84)
[   62.326619][   T27] Bluetooth: hci3: Frame reassembly failed (-84)
[   62.333652][ T6016] Bluetooth: hci3: Frame reassembly failed (-84)
[   62.616264][ T6021] loop2: detected capacity change from 0 to 512
[   62.717917][ T6021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.726482][ T6021] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.768616][ T6021] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.45: corrupted inode contents
[   62.775772][ T6021] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.45: mark_inode_dirty error
[   62.787296][ T6021] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.45: corrupted inode contents
[   62.798667][ T6021] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.45: mark_inode_dirty error
[   62.879831][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.959307][ T5838] Bluetooth: hci0: command tx timeout
[   63.028601][ T5846] Bluetooth: hci1: command tx timeout
[   63.129910][ T6031] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   63.512886][ T5838] Bluetooth: hci2: command tx timeout
[   63.637286][ T6031] loop2: detected capacity change from 0 to 32768
[   63.720802][ T6031] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   63.767965][ T6031] XFS (loop2): Ending clean mount
[   63.772160][ T6031] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   64.118302][ T5905] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   64.268332][ T5905] usb 1-1: Using ep0 maxpacket: 16
[   64.272694][ T5905] usb 1-1: unable to get BOS descriptor or descriptor too short
[   64.276937][ T5905] usb 1-1: config 5 has an invalid interface number: 29 but max is 0
[   64.280416][ T5905] usb 1-1: config 5 has no interface number 0
[   64.283146][ T5905] usb 1-1: config 5 interface 29 has no altsetting 0
[   64.290226][ T5905] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=90.00
[   64.293907][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.297117][ T5905] usb 1-1: Product: syz
[   64.298975][ T5905] usb 1-1: Manufacturer: syz
[   64.301153][ T5905] usb 1-1: SerialNumber: syz
[   64.388389][ T5838] Bluetooth: hci3: command 0x1003 tx timeout
[   64.389944][ T5233] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   64.478495][ T6048] netlink: 92 bytes leftover after parsing attributes in process `syz.1.52'.
[   64.482678][ T6048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.535962][ T5905] usb 1-1: Found UVC 0.00 device syz (05ac:8501)
[   64.549310][ T5905] usb 1-1: No valid video chain found.
[   64.554165][ T5905] usb 1-1: USB disconnect, device number 2
[   64.624242][ T6054] loop2: detected capacity change from 0 to 256
[   64.776274][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'.
[   64.800769][ T6062] sg_write: data in/out 768/4 bytes for SCSI command 0x77-- guessing data in;
[   64.800769][ T6062]    program syz.2.59 not setting count and/or reply_len properly
[   65.399529][ T6074] process 'syz.0.64' launched './file2' with NULL argv: empty string added
[   65.559218][ T6083] Attempt to restore checkpoint with obsolete wellknown handles
[   66.513373][ T6105] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   66.902038][ T6115] kAFS: No cell specified
[   66.962381][ T6119] loop2: detected capacity change from 0 to 128
[   66.975920][ T6119] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   66.981953][ T6119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   67.118282][  T793] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   67.137974][ T6125] loop2: detected capacity change from 0 to 128
[   67.144218][ T6125] affs: No valid root block on device loop2
[   67.278316][  T793] usb 2-1: Using ep0 maxpacket: 32
[   67.283308][  T793] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[   67.286542][  T793] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   67.289895][  T793] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[   67.312433][ T6125] loop2: detected capacity change from 0 to 32768
[   67.317066][ T6125] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.86 (6125)
[   67.327625][ T6125] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   67.336069][ T6125] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   67.339247][ T6125] BTRFS info (device loop2): using free-space-tree
[   67.345317][  T793] usb 2-1: config 1 has no interface number 0
[   67.347369][  T793] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   67.352221][  T793] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   67.362753][  T793] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   67.367458][  T793] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   67.373403][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.388880][  T793] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[   67.462023][ T6125] BTRFS info (device loop2): device stats zeroed by syz.2.86 (6125)
[   67.513402][ T5843] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   67.583996][  T793] snd_usb_pod 2-1:1.1: cannot start listening: -90
[   67.586517][  T793] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[   67.596588][  T793] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -90
[   67.791395][  T793] usb 2-1: USB disconnect, device number 3
[   67.894056][ T6160] loop2: detected capacity change from 0 to 4096
[   67.925426][ T6160] ntfs3(loop2): failed to convert "0080" to cp860
[   67.929766][ T6160] ntfs3(loop2): failed to convert name for inode 1e.
[   67.932480][ T6160] ntfs3(loop2): ino=1f, mi_enum_attr
[   67.934551][ T6160] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   68.261771][ T6172] loop2: detected capacity change from 0 to 4096
[   68.265066][ T6172] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   68.295046][ T6172] ntfs3(loop2): Failed to load $Extend (-22).
[   68.297201][ T6172] ntfs3(loop2): Failed to initialize $Extend.
[   68.421502][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'.
[   68.604162][ T6174] loop0: detected capacity change from 0 to 40427
[   68.615764][ T6174] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   68.625902][ T6174] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   68.661797][ T6174] F2FS-fs (loop0): invalid crc value
[   68.723306][ T6174] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   68.734850][ T6174] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   68.734963][ T6178] loop2: detected capacity change from 0 to 32768
[   68.737647][ T6174] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   68.808228][ T6178] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   68.894169][   T33] audit: type=1800 audit(1755269495.244:2): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file1" dev="loop2" ino=17058 res=0 errno=0
[   69.047719][ T5843] ocfs2: Unmounting device (7,2) on (node local)
[   69.543093][ T6203] sctp: [Deprecated]: syz.2.112 (pid 6203) Use of struct sctp_assoc_value in delayed_ack socket option.
[   69.543093][ T6203] Use struct sctp_sack_info instead
[   69.704117][ T6205] netlink: 'syz.2.113': attribute type 3 has an invalid length.
[   69.707280][ T6205] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.113'.
[   69.897634][ T6209] capability: warning: `syz.2.115' uses deprecated v2 capabilities in a way that may be insecure
[   70.124058][ T6216] loop1: detected capacity change from 0 to 1024
[   70.237398][ T6221] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.362633][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'.
[   70.725620][ T6252] tmpfs: Bad value for 'mpol'
[   70.832131][ T6258] loop1: detected capacity change from 0 to 1024
[   70.835672][ T6258] hfsplus: Unknown parameter 'barrir'
[   71.005062][ T6255] loop0: detected capacity change from 0 to 32768
[   71.009113][ T6255] btrfs: Deprecated parameter 'usebackuproot'
[   71.023053][ T6255] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   71.026321][ T6255] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.135 (6255)
[   71.048921][ T6255] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   71.052809][ T6255] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   71.059399][ T6255] BTRFS info (device loop0): using free-space-tree
[   71.099444][  T187] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   71.104798][ T6255] BTRFS error (device loop0): failed to load root extent
[   71.107466][ T6255] BTRFS warning (device loop0): try to load backup roots slot 1
[   71.122084][  T187] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   71.126689][ T6255] BTRFS warning (device loop0): couldn't read tree root
[   71.141082][ T6255] BTRFS warning (device loop0): try to load backup roots slot 2
[   71.145955][ T5982] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   71.160262][ T6255] BTRFS warning (device loop0): couldn't read tree root
[   71.162803][ T6255] BTRFS warning (device loop0): try to load backup roots slot 3
[   71.193174][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.195644][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.207713][ T6255] BTRFS info (device loop0): rebuilding free space tree
[   71.243177][ T6255] BTRFS info (device loop0): checking UUID tree
[   71.276269][ T6267] loop1: detected capacity change from 0 to 32768
[   71.298827][ T6267] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.141 (6267)
[   71.358506][ T6267] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.364308][ T6267] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   71.377342][ T6267] BTRFS info (device loop1): using free-space-tree
[   71.460352][ T6300] ieee802154 phy0 wpan0: encryption failed: -22
[   71.613885][ T5837] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   71.701185][ T6305] loop2: detected capacity change from 0 to 16
[   71.717614][ T6305] erofs (device loop2): mounted with root inode @ nid 36.
[   71.736186][   T33] audit: type=1800 audit(71.586:3): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.146" name="file1" dev="loop2" ino=86 res=0 errno=0
[   71.825159][ T5841] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.922366][ T6316] syz_tun: entered allmulticast mode
[   71.955459][ T6316] dvmrp1: entered allmulticast mode
[   72.003811][ T6315] syz_tun: left allmulticast mode
[   72.075318][ T6326] loop2: detected capacity change from 0 to 16
[   72.099415][ T6326] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[   72.118776][ T6326] erofs (device loop2): mounted with root inode @ nid 36.
[   72.146457][ T6326] erofs (device loop2): read error -117 @ 0 of nid 36
[   72.167389][ T6330] loop1: detected capacity change from 0 to 4096
[   72.175630][ T6330] ntfs3(loop1): Primary boot: invalid bytes per sector 0.
[   72.182982][ T6330] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[   72.325209][ T6343] netlink: 'syz.1.160': attribute type 10 has an invalid length.
[   72.335536][ T6343] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   72.456563][ T6355] loop1: detected capacity change from 0 to 512
[   72.467605][ T6355] EXT4-fs: Ignoring removed i_version option
[   72.477810][ T6355] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   72.487393][ T6355] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   72.496158][ T6352] loop2: detected capacity change from 0 to 8192
[   72.500768][ T6355] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   72.514883][ T6355] EXT4-fs (loop1): 1 truncate cleaned up
[   72.527512][ T6355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.559995][ T6355] EXT4-fs warning (device loop1): ext4_group_extend:1891: can't read last block, resize aborted
[   72.575725][ T6361] loop0: detected capacity change from 0 to 512
[   72.576269][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.586672][ T6361] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent
[   72.660021][ T6363] loop1: detected capacity change from 0 to 64
[   72.686622][ T6365] netlink: 'syz.0.170': attribute type 5 has an invalid length.
[   72.696694][ T6365] netlink: 'syz.0.170': attribute type 5 has an invalid length.
[   72.704311][ T6365] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.170'.
[   73.002973][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[   74.041129][ T6385] binder: transaction release 12 bad handle 1, ret = -22
[   74.080328][ T6387] loop2: detected capacity change from 0 to 512
[   74.086890][ T6387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   74.150101][ T6387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.496734][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.611717][ T6397] syz.0.183: attempt to access beyond end of device
[   74.611717][ T6397] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[   74.612154][ T5901] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   74.617239][ T6397] FAT-fs (loop1): unable to read boot sector
[   74.656282][ T6395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.683821][ T6399] loop0: detected capacity change from 0 to 512
[   74.695043][ T6399] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   74.712473][ T6399] EXT4-fs (loop0): 1 truncate cleaned up
[   74.716375][ T6399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.721202][ T6401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.746589][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.774275][ T6395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.794844][ T5901] usb 2-1: Using ep0 maxpacket: 8
[   74.799976][ T5901] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[   74.803541][ T5901] usb 2-1: config 179 has no interface number 0
[   74.806194][ T5901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   74.811673][ T5901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   74.818356][ T5901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   74.826345][ T5901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   74.835532][ T5901] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   74.848535][ T5901] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   74.852347][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.869569][ T6393] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   75.148300][ T6415] loop0: detected capacity change from 0 to 32768
[   75.167385][ T6415] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   75.202976][ T6415] XFS (loop0): Ending clean mount
[   75.210193][ T6415] XFS (loop0): Quotacheck needed: Please wait.
[   75.230823][ T6415] XFS (loop0): Quotacheck: Done.
[   75.347505][  T793] usb 2-1: USB disconnect, device number 4
[   75.347588][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   75.347670][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   75.771857][ T5837] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   75.952892][ T6431] warning: `syz.1.195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.416395][ T6455] loop0: detected capacity change from 0 to 512
[   76.426258][ T6455] EXT4-fs: Ignoring removed bh option
[   76.442232][ T6455] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   76.455978][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'.
[   76.460292][ T6455] EXT4-fs (loop0): 1 truncate cleaned up
[   76.469450][ T6455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.475994][ T6459] Zero length message leads to an empty skb
[   76.484058][ T6455] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize
[   76.899990][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.787309][ T6495] loop2: detected capacity change from 0 to 1024
[   77.851596][ T6495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.874033][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.748856][ T6516] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   79.070042][ T6519] loop1: detected capacity change from 0 to 2048
[   79.109050][ T6520] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   79.143079][ T6522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.232'.
[   79.262845][ T6526] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   79.349958][ T6530] loop2: detected capacity change from 0 to 2048
[   79.363920][ T6530] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   79.501930][ T6536] loop0: detected capacity change from 0 to 16
[   79.515113][ T6536] erofs (device loop0): mounted with root inode @ nid 36.
[   79.578495][ T6541] netlink: 64 bytes leftover after parsing attributes in process `syz.0.241'.
[   79.581515][ T6541] netlink: 64 bytes leftover after parsing attributes in process `syz.0.241'.
[   79.710681][ T5901] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   79.716461][ T6551] netlink: 52 bytes leftover after parsing attributes in process `syz.2.245'.
[   79.878278][ T5901] usb 2-1: Using ep0 maxpacket: 8
[   79.884378][ T5901] usb 2-1: config 105 has an invalid interface number: 212 but max is 0
[   79.892371][ T5901] usb 2-1: config 105 has no interface number 0
[   79.894841][ T5901] usb 2-1: config 105 interface 212 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024
[   79.899170][ T5901] usb 2-1: config 105 interface 212 altsetting 0 endpoint 0x5 has invalid maxpacket 431, setting to 64
[   79.905719][ T5901] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=72.73
[   79.911570][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.914883][ T5901] usb 2-1: Product: syz
[   79.916635][ T5901] usb 2-1: Manufacturer: syz
[   79.920514][ T5901] usb 2-1: SerialNumber: syz
[   79.925976][ T6532] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   80.138626][ T5901] port100 2-1:105.212: NFC: Could not find bulk-in or bulk-out endpoint
[   80.145652][ T5901] usb 2-1: USB disconnect, device number 5
[   80.208286][  T793] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   80.381892][  T793] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7
[   80.385500][  T793] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[   80.389136][  T793] usb 3-1: Product: syz
[   80.390908][  T793] usb 3-1: Manufacturer: syz
[   80.393037][  T793] usb 3-1: SerialNumber: syz
[   80.396979][  T793] usb 3-1: config 0 descriptor??
[   80.404143][  T793] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware
[   80.407562][  T793] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[   80.613334][ T5905] usb 3-1: USB disconnect, device number 3
[   81.166843][ T6587] trusted_key: encrypted_key: insufficient parameters specified
[   81.240929][ T6591] netlink: 128 bytes leftover after parsing attributes in process `syz.2.265'.
[   82.217024][ T6603] loop0: detected capacity change from 0 to 2048
[   82.271854][ T6603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.320883][ T6603] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   82.331530][ T6603] EXT4-fs (loop0): Remounting filesystem read-only
[   82.334798][ T6603] overlayfs: failed to verify upper root origin
[   82.414419][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.788292][  T793] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   82.938424][  T793] usb 1-1: Using ep0 maxpacket: 8
[   82.942094][  T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   82.945934][  T793] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   82.951841][  T793] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab
[   82.955246][  T793] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   82.958556][  T793] usb 1-1: Product: syz
[   82.960113][  T793] usb 1-1: Manufacturer: syz
[   82.961951][  T793] usb 1-1: SerialNumber: syz
[   82.966292][  T793] usb 1-1: config 0 descriptor??
[   83.399022][ T6621] netlink: 'syz.2.275': attribute type 3 has an invalid length.
[   83.402035][ T6621] netlink: 716 bytes leftover after parsing attributes in process `syz.2.275'.
[   83.644905][ T6635] tunl0: entered promiscuous mode
[   83.649161][ T6635] netlink: 'syz.2.279': attribute type 4 has an invalid length.
[   83.652122][ T6635] netlink: 9 bytes leftover after parsing attributes in process `syz.2.279'.
[   84.083790][ T6638] loop2: detected capacity change from 0 to 1764
[   84.295402][ T6640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.281'.
[   84.299955][ T6640] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   84.528600][ T6642] netlink: 'syz.2.282': attribute type 4 has an invalid length.
[   84.577495][ T6646] loop2: detected capacity change from 0 to 128
[   84.597687][ T6647] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.659021][ T6646] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.687408][ T6646] __find_get_block_slow() failed. block=144115188075855873, b_blocknr=0, b_state=0x00000019, b_size=1024, device loop2 blocksize: 1024
[   84.693181][ T6646] grow_buffers: requested out-of-range block 144115188075855873 for device loop2
[   84.696878][ T6646] EXT4-fs warning (device loop2): ext4_resize_fs:2019: can't read last block, resize aborted
[   84.765099][ T5843] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.035372][ T6654] loop2: detected capacity change from 0 to 512
[   85.068869][ T6654] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   85.089928][ T6654] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[   85.563222][ T6658] loop2: detected capacity change from 0 to 2048
[   85.654485][ T2200] usb 1-1: USB disconnect, device number 3
[   85.961924][ T6666] loop1: detected capacity change from 0 to 256
[   85.980131][ T6666] exFAT-fs (loop1): bogus sector size bits : 0
[   85.982374][ T6666] exFAT-fs (loop1): failed to read boot sector
[   85.989226][ T6666] exFAT-fs (loop1): failed to recognize exfat type
[   86.073258][ T6662] loop0: detected capacity change from 0 to 32768
[   86.076593][ T6662] btrfs: Deprecated parameter 'usebackuproot'
[   86.080264][ T6662] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   86.083689][ T6662] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.290 (6662)
[   86.095658][ T6662] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.137595][ T6662] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   86.140564][ T6662] BTRFS info (device loop0): using free-space-tree
[   86.323155][ T6662] BTRFS info (device loop0): rebuilding free space tree
[   86.351606][ T6680] overlayfs: missing 'lowerdir'
[   86.478119][ T5837] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.623037][   T24] cfg80211: failed to load regulatory.db
[   86.828492][ T6703] loop0: detected capacity change from 0 to 1024
[   86.834513][ T6703] EXT4-fs: Ignoring removed mblk_io_submit option
[   86.838057][ T6703] EXT4-fs: inline encryption not supported
[   86.850493][ T6703] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   86.863175][ T6703] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.299: bad orphan inode 11
[   86.870320][ T6703] EXT4-fs (loop0): Remounting filesystem read-only
[   86.873863][ T6703] ext4_test_bit(bit=10, block=4) = 1
[   86.876508][ T6703] is_bad_inode(inode)=0
[   86.895529][ T6703] NEXT_ORPHAN(inode)=3254779904
[   86.903329][ T6703] max_ino=32
[   86.905762][ T6703] i_nlink=0
[   86.915624][ T6703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.075676][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.228378][ T6708] loop0: detected capacity change from 0 to 1024
[   87.257473][ T6708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.437082][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.722529][   T24] libceph: connect (1)[c::]:6789 error -101
[   87.725797][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   87.734861][   T24] libceph: connect (1)[c::]:6789 error -101
[   87.743515][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   88.020294][   T24] libceph: connect (1)[c::]:6789 error -101
[   88.026120][   T24] libceph: mon0 (1)[c::]:6789 connect error
[   88.286469][ T2200] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   88.440958][ T2200] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[   88.444680][ T2200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[   88.448094][ T2200] usb 2-1: Product: syz
[   88.449933][ T2200] usb 2-1: Manufacturer: syz
[   88.451902][ T2200] usb 2-1: SerialNumber: syz
[   88.456142][ T2200] usb 2-1: config 0 descriptor??
[   88.509612][ T6719] ceph: No mds server is up or the cluster is laggy
[   88.625807][ T6744] loop0: detected capacity change from 0 to 128
[   88.663978][ T2200] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[   88.671835][ T2200] dvb-usb: will use the device's hardware PID filter (table count: 32).
[   88.675649][ T2200] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[   88.679655][ T2200] usb 2-1: media controller created
[   88.688185][ T2200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   88.733924][ T2200] DVB: Unable to find symbol dib7000p_attach()
[   88.741500][ T2200] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[   88.747886][ T2200] dvb-usb: will use the device's hardware PID filter (table count: 32).
[   88.752795][ T2200] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[   88.758263][ T2200] usb 2-1: media controller created
[   88.761509][ T2200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   88.773299][ T2200] dib0700: the master dib7090 has to be initialized first
[   88.779768][ T2200] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[   88.826167][ T2200] rc_core: IR keymap rc-dib0700-rc5 not found
[   88.828346][ T2200] Registered IR keymap rc-empty
[   88.832771][ T2200] dvb-usb: could not initialize remote control.
[   88.835109][ T2200] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[   88.868679][ T2200] usb 2-1: USB disconnect, device number 6
[   88.892383][ T2200] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[   89.714191][ T6772] netlink: 'syz.1.327': attribute type 25 has an invalid length.
[   90.069658][ T6784] netlink: 'syz.0.332': attribute type 1 has an invalid length.
[   90.104189][ T6784] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.120482][ T6785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.128168][ T6784] vlan2: entered allmulticast mode
[   90.129988][ T6784] veth1: entered allmulticast mode
[   90.133433][ T6784] bond1: (slave vlan2): making interface the new active one
[   90.138782][ T6784] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   90.143491][ T6785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.400657][ T6800] loop0: detected capacity change from 0 to 4096
[   90.412827][ T6800] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   90.427223][ T6800] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[   90.432991][ T6800] ntfs3: Cannot use different iocharset when remounting!
[   90.573179][ T6810] loop0: detected capacity change from 0 to 128
[   90.577590][ T6810] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   90.588423][ T2200] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   90.735380][ T2200] usb 3-1: Using ep0 maxpacket: 8
[   90.747326][ T2200] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[   90.755281][ T2200] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.760674][ T2200] usb 3-1: config 0 has no interface number 0
[   90.763269][ T2200] usb 3-1: config 0 interface 52 has no altsetting 0
[   90.768685][ T2200] usb 3-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice= 8.00
[   90.772838][ T2200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=184
[   90.777096][ T2200] usb 3-1: SerialNumber: syz
[   90.781134][ T2200] usb 3-1: config 0 descriptor??
[   90.963423][ T6826] loop1: detected capacity change from 0 to 128
[   90.986195][  T793] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   90.995498][ T6826] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   91.007538][ T6826] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[   91.012144][ T6826] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w.
[   91.031233][ T5841] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.140585][  T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.144668][  T793] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[   91.150289][  T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.162360][  T793] usb 1-1: config 0 descriptor??
[   91.200008][ T5905] usb 3-1: USB disconnect, device number 4
[   91.445691][ T2200] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   91.586190][  T793] sunplus 0003:04FC:05D8.0001: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.0-1/input0
[   91.598709][ T2200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.603159][ T2200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.607889][ T2200] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   91.613405][ T2200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.621250][ T2200] usb 2-1: config 0 descriptor??
[   91.784985][ T5905] usb 1-1: USB disconnect, device number 4
[   92.033762][ T2200] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[   92.037167][ T2200] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[   92.041135][ T2200] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[   92.044174][ T2200] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[   92.048396][ T2200] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[   92.055695][ T2200] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[   92.173843][ T6845] loop2: detected capacity change from 0 to 32768
[   92.437631][ T2200] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 32: -71
[   92.452146][ T2200] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense firmware info: -71
[   92.465858][ T2200] playstation 0003:054C:0DF2.0002: Failed to get firmware info from DualSense
[   92.468983][ T2200] playstation 0003:054C:0DF2.0002: Failed to create dualsense.
[   92.489118][ T2200] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71
[   92.504593][ T2200] usb 2-1: USB disconnect, device number 7
[   93.266202][ T6895] tmpfs: Cannot retroactively limit inodes
[   93.457866][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'.
[   93.461819][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'.
[   93.744656][ T2200] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   93.903706][ T2200] usb 3-1: Using ep0 maxpacket: 8
[   93.909248][ T2200] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03
[   93.912546][ T2200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.915279][ T2200] usb 3-1: Product: syz
[   93.917349][ T2200] usb 3-1: Manufacturer: syz
[   93.919000][ T2200] usb 3-1: SerialNumber: syz
[   93.922124][ T2200] usb 3-1: config 0 descriptor??
[   93.927992][ T2200] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[   93.931796][ T2200] dvb-usb: bulk message failed: -22 (2/0)
[   93.935140][ T2200] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   93.939398][ T2200] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[   93.943433][ T2200] usb 3-1: media controller created
[   93.964454][ T2200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   93.982590][ T2200] dvb-usb: bulk message failed: -22 (1/0)
[   93.986647][ T2200] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[   93.997760][ T2200] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[   94.007670][ T2200] dvb-usb: schedule remote query interval to 50 msecs.
[   94.010572][ T2200] dvb-usb: bulk message failed: -22 (2/0)
[   94.013140][ T2200] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[   94.065267][ T2200] dvb-usb: bulk message failed: -22 (1/0)
[   94.072398][ T2200] dvb-usb: error while querying for an remote control event.
[   94.133727][ T2200] dvb-usb: bulk message failed: -22 (1/0)
[   94.143643][ T2200] dvb-usb: error while querying for an remote control event.
[   94.208089][ T2200] dvb-usb: bulk message failed: -22 (1/0)
[   94.209956][ T2200] dvb-usb: error while querying for an remote control event.
[   94.260843][ T6924] loop1: detected capacity change from 0 to 512
[   94.265723][ T6924] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   94.279423][ T6924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.283614][   T10] dvb-usb: bulk message failed: -22 (1/0)
[   94.283644][   T10] dvb-usb: error while querying for an remote control event.
[   94.313084][ T6924] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.398: corrupted xattr block 19: overlapping e_value 
[   94.339551][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.343879][   T10] dvb-usb: bulk message failed: -22 (1/0)
[   94.345699][   T10] dvb-usb: error while querying for an remote control event.
[   94.406217][   T10] dvb-usb: bulk message failed: -22 (1/0)
[   94.407212][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[   94.408181][   T10] dvb-usb: error while querying for an remote control event.
[   94.442914][ T2200] usb 3-1: USB disconnect, device number 5
[   94.455414][ T6941] syz.0.404 (6941): attempted to duplicate a private mapping with mremap.  This is not supported.
[   94.459663][ T6940] loop1: detected capacity change from 0 to 1024
[   94.470152][ T6940] EXT4-fs: Ignoring removed bh option
[   94.472630][ T6940] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   94.476499][ T2200] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[   94.498704][ T6940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.505815][ T6945] netlink: 'syz.0.406': attribute type 4 has an invalid length.
[   94.520218][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.626645][ T6953] binder: 6952:6953 ioctl c0306201 2000000001c0 returned -14
[   94.709252][ T6947] loop0: detected capacity change from 0 to 32768
[   94.712692][ T6947] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.408 (6947)
[   94.732165][ T6947] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   94.749182][ T6947] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   94.766929][ T6963] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   94.813560][ T6947] BTRFS info (device loop0): rebuilding free space tree
[   94.828420][ T6947] BTRFS info (device loop0): disabling free space tree
[   94.831038][ T6947] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   94.838284][ T6947] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   95.008851][ T6987] loop2: detected capacity change from 0 to 4096
[   95.014374][ T6987] EXT4-fs (loop2): Test dummy encryption mode enabled
[   95.017898][ T6987] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   95.021201][ T6987] System zones: 0-5
[   95.025223][ T6987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.057920][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.105405][  T793] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   95.253501][  T793] usb 2-1: Using ep0 maxpacket: 8
[   95.258172][  T793] usb 2-1: config index 0 descriptor too short (expected 1821, got 853)
[   95.261671][  T793] usb 2-1: config 0 has an invalid interface number: 103 but max is 2
[   95.287447][  T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.290717][  T793] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[   95.293882][  T793] usb 2-1: config 0 has no interface number 1
[   95.296209][  T793] usb 2-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7
[   95.300097][  T793] usb 2-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64
[   95.304119][  T793] usb 2-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping
[   95.307452][  T793] usb 2-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[   95.310878][  T793] usb 2-1: config 0 interface 103 has no altsetting 0
[   95.314865][  T793] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4
[   95.317867][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.320537][  T793] usb 2-1: Product: syz
[   95.321880][  T793] usb 2-1: Manufacturer: syz
[   95.323582][  T793] usb 2-1: SerialNumber: syz
[   95.326636][  T793] usb 2-1: config 0 descriptor??
[   95.461225][ T7000] loop2: detected capacity change from 0 to 1024
[   95.475886][ T7000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.565411][ T5837] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   95.567190][  T793] videodev: could not get a free minor
[   95.571468][  T793] dsbr100 2-1:0.0: couldn't register video device
[   95.574350][  T793] dsbr100 2-1:0.0: probe with driver dsbr100 failed with error -23
[   95.580557][  T793] usb 2-1: USB disconnect, device number 8
[   95.712716][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'.
[   95.834050][ T7008] overlay: filesystem on ./bus not supported
[   95.962447][ T7016] loop0: detected capacity change from 0 to 64
[   96.721238][ T7049] loop2: detected capacity change from 0 to 256
[   96.734321][ T7049] FAT-fs (loop2): Directory bread(block 64) failed
[   96.736936][ T7049] FAT-fs (loop2): Directory bread(block 65) failed
[   96.739809][ T7049] FAT-fs (loop2): Directory bread(block 66) failed
[   96.743547][ T7049] FAT-fs (loop2): Directory bread(block 67) failed
[   96.747079][ T7049] FAT-fs (loop2): Directory bread(block 68) failed
[   96.749527][ T7049] FAT-fs (loop2): Directory bread(block 69) failed
[   96.751966][ T7049] FAT-fs (loop2): Directory bread(block 70) failed
[   96.755729][ T7049] FAT-fs (loop2): Directory bread(block 71) failed
[   96.758157][ T7049] FAT-fs (loop2): Directory bread(block 72) failed
[   96.760586][ T7049] FAT-fs (loop2): Directory bread(block 73) failed
[   96.775832][ T7049] FAT-fs (loop2): Filesystem has been set read-only
[   96.802415][   T33] audit: type=1800 audit(358.642:4): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.442" name="cpu.stat" dev="loop2" ino=1048610 res=0 errno=0
[   97.294195][ T2200] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   97.444084][ T2200] usb 3-1: Using ep0 maxpacket: 16
[   97.447555][ T2200] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.450869][ T2200] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   97.479424][ T2200] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   97.482752][ T2200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.485565][ T2200] usb 3-1: Product: syz
[   97.486992][ T2200] usb 3-1: Manufacturer: syz
[   97.490688][ T2200] usb 3-1: SerialNumber: syz
[   97.761843][ T2200] usb 3-1: 0:1 : does not exist
[   97.816564][ T2200] usb 3-1: USB disconnect, device number 6
[   97.928329][ T7082] loop9: detected capacity change from 0 to 8
[   97.945903][ T5968] Dev loop9: unable to read RDB block 8
[   97.948410][ T5968]  loop9: unable to read partition table
[   97.950975][ T5968] loop9: partition table beyond EOD, truncated
[   97.971168][ T7082] Dev loop9: unable to read RDB block 8
[   97.979314][ T7082]  loop9: unable to read partition table
[   97.989865][ T7082] loop9: partition table beyond EOD, truncated
[   98.001627][ T7082] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5)
[   98.069280][ T7068] loop0: detected capacity change from 0 to 32768
[   98.104651][ T7068] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.450 (7068)
[   98.158397][ T7068] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   98.171634][ T7068] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   98.175635][ T7068] BTRFS info (device loop0): using free-space-tree
[   98.228914][ T7113] loop1: detected capacity change from 0 to 128
[   98.283821][ T7113] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   98.377789][ T5837] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   98.403101][ T5841] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   99.330288][ T7179] loop2: detected capacity change from 0 to 1024
[   99.335845][ T7179] EXT4-fs: Ignoring removed nobh option
[   99.361918][ T7179] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102]
[   99.372800][ T7179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.433098][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.480233][ T7186] Driver unsupported XDP return value 0 on prog  (id 41) dev N/A, expect packet loss!
[   99.578935][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'.
[   99.738113][ T7188] loop2: detected capacity change from 0 to 32768
[   99.749368][ T7194] net veth1_virt_wifi : renamed from virt_wifi0
[  100.109965][ T7212] loop2: detected capacity change from 0 to 4096
[  100.113037][ T7212] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  100.130722][ T7212] ntfs3(loop2): ino=1a, mi_enum_attr
[  100.132494][ T7212] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  100.164944][ T7212] ntfs3(loop2): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  100.259305][ T7222] loop2: detected capacity change from 0 to 64
[  100.517047][ T7232] capability: warning: `syz.1.500' uses 32-bit capabilities (legacy support in use)
[  100.634112][ T7230] loop2: detected capacity change from 0 to 32768
[  100.644690][ T7230] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.499 (7230)
[  100.653270][ T7230] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.657224][ T7230] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  100.660984][ T7230] BTRFS info (device loop2): disk space caching is enabled
[  100.663713][ T7230] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  100.695342][ T7230] BTRFS info (device loop2): rebuilding free space tree
[  100.702914][ T7230] BTRFS info (device loop2): disabling free space tree
[  100.705258][ T7230] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  100.708706][ T7230] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  100.732022][   T33] audit: type=1800 audit(362.594:5): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.499" name="bus" dev="loop2" ino=263 res=0 errno=0
[  100.804242][ T5843] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.841112][ T5887] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  100.991034][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'.
[  101.011161][ T5887] usb 2-1: Using ep0 maxpacket: 32
[  101.014585][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short
[  101.018554][ T5887] usb 2-1: config 0 has an invalid interface number: 129 but max is 0
[  101.022244][ T5887] usb 2-1: config 0 has no interface number 0
[  101.024273][ T5887] usb 2-1: config 0 interface 129 has no altsetting 0
[  101.028412][ T5887] usb 2-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=cb.5d
[  101.032143][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.035522][ T5887] usb 2-1: Product: syz
[  101.037179][ T5887] usb 2-1: Manufacturer: syz
[  101.042511][ T5887] usb 2-1: SerialNumber: syz
[  101.047067][ T5887] usb 2-1: config 0 descriptor??
[  101.113402][ T7283] loop2: detected capacity change from 0 to 64
[  101.199423][ T7290] loop2: detected capacity change from 0 to 256
[  101.209690][ T7290] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  101.278898][ T5887] asix 2-1:0.129 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  101.283532][ T5887] asix 2-1:0.129: probe with driver asix failed with error -71
[  101.293843][ T5887] usb 2-1: USB disconnect, device number 9
[  101.306614][ T5968] udevd[5968]: setting owner of /dev/bus/usb/002/009 to uid=0, gid=0 failed: No such file or directory
[  102.294527][ T7301] loop0: detected capacity change from 0 to 1024
[  102.440656][ T5983] hfsplus: b-tree write err: -5, ino 4
[  102.790976][ T7303] loop1: detected capacity change from 0 to 131072
[  102.794957][ T7303] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  102.797307][ T7303] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  102.801783][ T7303] F2FS-fs (loop1): invalid crc value
[  102.815592][ T7325] Bluetooth: MGMT ver 1.23
[  102.840599][ T7303] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.859592][ T7303] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  102.862200][ T7303] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  102.874033][ T7330] loop2: detected capacity change from 0 to 1024
[  102.874222][   T33] audit: type=1800 audit(364.735:6): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.513" name="file1" dev="loop1" ino=7 res=0 errno=0
[  103.081977][ T7339] loop2: detected capacity change from 0 to 4096
[  103.084726][ T7339] ntfs3: Unknown parameter 'iochaRset'
[  103.270142][ T7344] raw_sendmsg: syz.0.531 forgot to set AF_INET. Fix it!
[  104.345160][ T7362] loop1: detected capacity change from 0 to 4096
[  104.490138][ T7362] ntfs3(loop1): try to read out of volume at offset 0x3fffffc7000
[  104.789783][ T7370] loop0: detected capacity change from 0 to 8
[  104.902834][ T7377] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  105.222160][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  105.329539][ T7389] loop2: detected capacity change from 0 to 128
[  105.345749][ T7389] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  105.354956][ T7389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.378182][   T10] usb 2-1: Using ep0 maxpacket: 16
[  105.383804][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.388957][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.393088][   T10] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  105.402744][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.408626][   T10] usb 2-1: config 0 descriptor??
[  106.009253][   T10] playstation 0003:054C:05C4.0003: item fetching failed at offset 1/5
[  106.013245][   T10] playstation 0003:054C:05C4.0003: Parse failed
[  106.021177][   T10] playstation 0003:054C:05C4.0003: probe with driver playstation failed with error -22
[  106.213349][   T47] usb 2-1: USB disconnect, device number 10
[  106.321730][ T7399] netlink: 'syz.2.553': attribute type 7 has an invalid length.
[  106.334938][ T7399] : entered promiscuous mode
[  106.340450][ T5901] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  106.489736][ T5901] usb 1-1: Using ep0 maxpacket: 16
[  106.501116][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.505977][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.514245][ T5901] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  106.518861][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.522215][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'.
[  106.524117][ T5901] usb 1-1: config 0 descriptor??
[  106.581887][ T7409] binder: 7408:7409 ioctl c0306201 0 returned -14
[  106.585223][ T7409] binder: 7408:7409 ioctl 3b81 0 returned -22
[  106.631453][ T7411] netlink: 52 bytes leftover after parsing attributes in process `syz.2.559'.
[  106.947165][ T7397] loop0: detected capacity change from 0 to 512
[  106.971476][ T7397] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  106.992051][ T7397] syz.0.552: attempt to access beyond end of device
[  106.992051][ T7397] loop20: rw=0, sector=2, nr_sectors = 2 limit=0
[  107.023475][ T7397] EXT4-fs (loop0): couldn't read superblock of external journal
[  107.360783][ T7428] loop1: detected capacity change from 0 to 64
[  107.368687][ T5901] apple 0003:05AC:024B.0004: unknown main item tag 0x0
[  107.373158][ T7428] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  107.384661][ T5901] apple 0003:05AC:024B.0004: unknown main item tag 0x0
[  107.387896][ T7428] BFS-fs: bfs_fill_super(): Impossible last inode number 262303 > 513 on loop1
[  107.394276][ T5901] apple 0003:05AC:024B.0004: unknown main item tag 0x0
[  107.397467][ T5901] apple 0003:05AC:024B.0004: unknown main item tag 0x0
[  107.400544][ T5901] apple 0003:05AC:024B.0004: unknown main item tag 0x0
[  107.403548][ T5901] apple 0003:05AC:024B.0004: unknown main item tag 0x0
[  107.406394][ T5901] apple 0003:05AC:024B.0004: unknown main item tag 0x0
[  107.411940][ T5901] apple 0003:05AC:024B.0004: unknown main item tag 0x0
[  107.414966][ T5901] apple 0003:05AC:024B.0004: unknown main item tag 0x0
[  107.419022][ T5901] apple 0003:05AC:024B.0004: unknown main item tag 0x0
[  107.433646][ T5901] apple 0003:05AC:024B.0004: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0
[  107.569027][ T5901] usb 1-1: USB disconnect, device number 5
[  108.648523][ T7453] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  108.659559][ T7453] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  108.721343][ T7457] futex_wake_op: syz.1.579 tries to shift op by -1; fix this program
[  108.729926][ T7455] loop0: detected capacity change from 0 to 164
[  108.743820][ T7455] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  108.757890][ T7455] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  109.321844][ T7487] loop1: detected capacity change from 0 to 8192
[  109.794379][ T7497] loop0: detected capacity change from 0 to 40427
[  109.800473][ T7497] F2FS-fs (loop0): build fault injection rate: 14
[  109.803177][ T7497] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  109.813486][ T7497] F2FS-fs (loop0): invalid crc value
[  109.838623][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  109.848714][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  109.851052][ T7512] trusted_key: syz.1.605 sent an empty control message without MSG_MORE.
[  109.910545][ T7497] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.931346][ T7497] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  109.935931][ T7497] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  109.960293][ T7497] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  109.982101][ T7497] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  110.058986][ T5837] syz-executor: attempt to access beyond end of device
[  110.058986][ T5837] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  110.089229][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  110.089248][ T5837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.089254][ T5837] Call Trace:
[  110.089259][ T5837]  <TASK>
[  110.089264][ T5837]  dump_stack_lvl+0x189/0x250
[  110.089285][ T5837]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.089299][ T5837]  ? __pfx_queue_work_on+0x10/0x10
[  110.089310][ T5837]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  110.089325][ T5837]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  110.089348][ T5837]  f2fs_handle_critical_error+0x37c/0x540
[  110.089370][ T5837]  f2fs_write_end_io+0x886/0xb60
[  110.089425][ T5837]  __submit_merged_bio+0x27a/0x6a0
[  110.089448][ T5837]  __submit_merged_write_cond+0x255/0x530
[  110.089469][ T5837]  f2fs_write_data_pages+0x261d/0x3000
[  110.089510][ T5837]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.089575][ T5837]  ? __lock_acquire+0xab9/0xd20
[  110.089598][ T5837]  ? do_raw_spin_lock+0x121/0x290
[  110.089620][ T5837]  ? do_raw_spin_unlock+0x4d/0x240
[  110.089634][ T5837]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.089651][ T5837]  do_writepages+0x32e/0x550
[  110.089675][ T5837]  ? do_raw_spin_unlock+0x4d/0x240
[  110.089691][ T5837]  filemap_fdatawrite+0x199/0x240
[  110.089708][ T5837]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  110.089755][ T5837]  ? do_raw_spin_unlock+0x4d/0x240
[  110.089772][ T5837]  f2fs_sync_dirty_inodes+0x31f/0x830
[  110.089794][ T5837]  f2fs_write_checkpoint+0x95a/0x1df0
[  110.089823][ T5837]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  110.089868][ T5837]  ? kill_f2fs_super+0x298/0x6c0
[  110.089884][ T5837]  kill_f2fs_super+0x2c3/0x6c0
[  110.089900][ T5837]  ? __pfx_kill_f2fs_super+0x10/0x10
[  110.089910][ T5837]  ? radix_tree_delete_item+0x2b6/0x400
[  110.089929][ T5837]  ? shrinker_free+0x2ce/0x3e0
[  110.089944][ T5837]  deactivate_locked_super+0xbc/0x130
[  110.089960][ T5837]  cleanup_mnt+0x425/0x4c0
[  110.089972][ T5837]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.089989][ T5837]  task_work_run+0x1d4/0x260
[  110.090007][ T5837]  ? __pfx_task_work_run+0x10/0x10
[  110.090019][ T5837]  ? __x64_sys_umount+0x122/0x160
[  110.090045][ T5837]  ? exit_to_user_mode_loop+0x40/0x110
[  110.090063][ T5837]  exit_to_user_mode_loop+0xec/0x110
[  110.090079][ T5837]  do_syscall_64+0x2bd/0x3b0
[  110.090094][ T5837]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.090109][ T5837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.090120][ T5837]  ? exc_page_fault+0x9f/0xf0
[  110.090136][ T5837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.090146][ T5837] RIP: 0033:0x7f4e4cb8ff17
[  110.090158][ T5837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  110.090167][ T5837] RSP: 002b:00007ffca422da68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  110.090181][ T5837] RAX: 0000000000000000 RBX: 00007f4e4cc11c05 RCX: 00007f4e4cb8ff17
[  110.090189][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca422db20
[  110.090195][ T5837] RBP: 00007ffca422db20 R08: 0000000000000000 R09: 0000000000000000
[  110.090202][ T5837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca422ebb0
[  110.090209][ T5837] R13: 00007f4e4cc11c05 R14: 000000000001ad4a R15: 00007ffca422ebf0
[  110.090229][ T5837]  </TASK>
[  110.090234][ T5837] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  110.135227][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.615'.
[  110.241669][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.615'.
[  110.312541][ T7538] loop2: detected capacity change from 0 to 128
[  110.328629][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'.
[  110.346029][ T7538] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  110.379023][ T7538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.427908][ T7544] loop0: detected capacity change from 0 to 2364
[  111.080675][ T7561] loop2: detected capacity change from 0 to 4096
[  111.098008][ T7562] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.115855][ T7561] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  111.123739][ T7561] Remounting filesystem read-only
[  111.226199][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.628'.
[  111.229923][ T7566] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  111.410021][ T7570] loop1: detected capacity change from 0 to 2048
[  111.450649][ T7573] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.488540][   T33] audit: type=1800 audit(373.350:7): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.630" name="file2" dev="loop1" ino=16 res=0 errno=0
[  111.532896][ T7573] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  111.542700][ T7573] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16)
[  111.558488][ T7573] Remounting filesystem read-only
[  111.563065][ T7580] NILFS (loop1): error -2 truncating bmap (ino=16)
[  111.648891][ T5841] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  112.011334][ T7597] netlink: 36 bytes leftover after parsing attributes in process `syz.1.641'.
[  112.014275][ T7597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.641'.
[  112.017805][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'.
[  112.121810][ T7602] loop0: detected capacity change from 0 to 512
[  112.144145][ T7602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.195865][ T7602] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #12: comm syz.0.643: Directory hole found for htree leaf block 0
[  112.237355][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.287667][ T7612] loop0: detected capacity change from 0 to 256
[  112.503205][ T7625] loop1: detected capacity change from 0 to 512
[  112.512694][ T7625] EXT4-fs: Ignoring removed orlov option
[  112.520481][ T7625] EXT4-fs: Ignoring removed bh option
[  112.523167][ T7625] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  112.551203][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'.
[  112.933560][   T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  113.124040][   T47] usb 1-1: Using ep0 maxpacket: 32
[  113.128249][   T47] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  113.135239][   T47] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  113.139317][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.142753][   T47] usb 1-1: Product: syz
[  113.148158][   T47] usb 1-1: Manufacturer: syz
[  113.150706][   T47] usb 1-1: SerialNumber: syz
[  113.229075][   T47] usb 1-1: config 0 descriptor??
[  113.307889][ T7628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  113.466912][   T47] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[  113.693980][ T2200] usb 1-1: USB disconnect, device number 6
[  113.693985][    C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  113.925420][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  114.073570][   T10] usb 2-1: Using ep0 maxpacket: 8
[  114.082465][   T10] usb 2-1: config 0 has an invalid interface number: 148 but max is 0
[  114.093571][   T10] usb 2-1: config 0 has no interface number 0
[  114.100023][   T10] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36
[  114.110607][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.119240][   T10] usb 2-1: Product: syz
[  114.121029][   T10] usb 2-1: Manufacturer: syz
[  114.122979][   T10] usb 2-1: SerialNumber: syz
[  114.136799][   T10] usb 2-1: config 0 descriptor??
[  114.148520][   T10] kobil_sct 2-1:0.148: KOBIL USB smart card terminal converter detected
[  114.165966][   T10] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  114.166254][ T7654] loop2: detected capacity change from 0 to 4096
[  114.178832][ T7654] ntfs3: Unknown parameter 'Y'
[  114.359389][   T10] usb 2-1: USB disconnect, device number 11
[  114.374780][ T7660] loop0: detected capacity change from 0 to 8
[  114.378246][   T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  114.382414][   T10] kobil_sct 2-1:0.148: device disconnected
[  114.394686][ T7660] squashfs image failed sanity check
[  114.559668][ T7657] loop2: detected capacity change from 0 to 32768
[  114.589725][ T7657] find_entry called with index = 0
[  114.901234][ T7671] loop2: detected capacity change from 0 to 32768
[  115.017442][ T7671] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  115.017460][ T7671]   allowing incompatible features above 0.0: (unknown version)
[  115.017468][ T7671]   features: 
[  115.032726][ T7671] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  115.035799][ T7671] bcachefs (loop2): initializing new filesystem
[  115.045178][ T7671] bcachefs (loop2): going read-write
[  115.054838][ T7671] bcachefs (loop2): marking superblocks
[  115.075384][ T7671] bcachefs (loop2): initializing freespace
[  115.086115][ T7671] bcachefs (loop2): done initializing freespace
[  115.097551][ T7671] bcachefs (loop2): reading snapshots table
[  115.100142][ T7671] bcachefs (loop2): reading snapshots done
[  115.140721][ T7671] bcachefs (loop2): done starting filesystem
[  115.185444][ T7671] syz.2.673 (7671) used greatest stack depth: 16968 bytes left
[  115.199939][ T5843] bcachefs (loop2): shutting down
[  115.205759][ T5843] bcachefs (loop2): going read-only
[  115.208856][ T5843] bcachefs (loop2): finished waiting for writes to stop
[  115.216227][ T5843] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  115.244086][   T47] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  115.251165][ T5843] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  115.258420][ T5843] bcachefs (loop2): clean shutdown complete, journal seq 4
[  115.262472][ T5843] bcachefs (loop2): marking filesystem clean
[  115.295868][ T5843] bcachefs (loop2): shutdown complete
[  115.405117][   T47] usb 2-1: unable to get BOS descriptor or descriptor too short
[  115.408695][   T47] usb 2-1: not running at top speed; connect to a high speed hub
[  115.413613][   T47] usb 2-1: config 6 has an invalid interface number: 7 but max is 0
[  115.416697][   T47] usb 2-1: config 6 has no interface number 0
[  115.419022][   T47] usb 2-1: config 6 interface 7 altsetting 5 endpoint 0xB has invalid maxpacket 43400, setting to 64
[  115.423679][   T47] usb 2-1: config 6 interface 7 has no altsetting 0
[  115.428190][   T47] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c9.92
[  115.431696][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.435329][   T47] usb 2-1: Product: syz
[  115.436917][   T47] usb 2-1: Manufacturer: syz
[  115.438721][   T47] usb 2-1: SerialNumber: syz
[  115.650596][   T47] usb 2-1: Error in usbnet_get_endpoints (-22)
[  115.666144][   T47] usb 2-1: USB disconnect, device number 12
[  116.457243][ T7724] loop2: detected capacity change from 0 to 1024
[  116.466230][ T7724] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (4096), stripe is disabled
[  116.474327][ T7724] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  116.477526][ T7724] EXT4-fs (loop2): orphan cleanup on readonly fs
[  116.480873][ T7724] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  116.486850][ T7724] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  116.489464][ T7724] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.689: Freeing blocks not in datazone - block = 0, count = 4096
[  116.498452][ T7724] EXT4-fs (loop2): Remounting filesystem read-only
[  116.500934][ T7724] EXT4-fs (loop2): 1 orphan inode deleted
[  116.504751][ T7724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  116.575936][ T5901] IPVS: starting estimator thread 0...
[  116.619566][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.632563][   T47] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  116.672321][ T7728] IPVS: using max 81 ests per chain, 194400 per kthread
[  116.784519][   T47] usb 2-1: config 0 has no interfaces?
[  116.786862][   T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  116.790558][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.799878][   T47] usb 2-1: config 0 descriptor??
[  117.021372][   T10] usb 2-1: USB disconnect, device number 13
[  117.128712][ T7736] block nbd2: shutting down sockets
[  118.489581][ T7740] loop2: detected capacity change from 0 to 32768
[  118.543019][ T7740] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.632564][ T7740] XFS (loop2): Ending clean mount
[  118.696064][ T7740] XFS (loop2): Quotacheck needed: Please wait.
[  118.778684][ T7740] XFS (loop2): Quotacheck: Done.
[  118.855069][   T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  118.922551][ T5843] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.992687][ T7759] IPVS: Scheduler module ip_vs_ not found
[  119.032029][   T24] usb 2-1: Using ep0 maxpacket: 32
[  119.040398][   T24] usb 2-1: config 0 has an invalid interface number: 19 but max is 0
[  119.053622][   T24] usb 2-1: config 0 has no interface number 0
[  119.065489][   T24] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  119.089857][   T24] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[  119.102899][   T24] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81
[  119.121401][   T24] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024
[  119.125374][   T24] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  119.161603][   T24] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  119.193663][   T24] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57
[  119.200786][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.215183][   T24] usb 2-1: Product: syz
[  119.216594][   T24] usb 2-1: Manufacturer: syz
[  119.218173][   T24] usb 2-1: SerialNumber: syz
[  119.229582][ T7768] sock: sock_set_timeout: `syz.0.701' (pid 7768) tries to set negative timeout
[  119.236185][   T24] usb 2-1: config 0 descriptor??
[  119.238895][ T7757] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  119.243950][ T7757] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  119.256921][   T24] ipaq 2-1:0.19: PocketPC PDA converter detected
[  119.260294][   T24] usb 2-1: active config #0 != 1 ??
[  119.281985][ T7772] netlink: 'syz.2.703': attribute type 21 has an invalid length.
[  119.463357][   T24] usb 2-1: USB disconnect, device number 14
[  119.478144][ T7776] loop2: detected capacity change from 0 to 32768
[  119.484035][ T7776] bcachefs (/dev/loop2): error validating superblock: Invalid superblock layout type 7
[  119.487344][ T7776] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout_type
[  119.613913][ T7789] loop0: detected capacity change from 0 to 256
[  119.723264][   T33] audit: type=1326 audit(381.594:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.0.715" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e4cb8ebe9 code=0x0
[  120.385386][ T7810] netlink: 296 bytes leftover after parsing attributes in process `syz.1.720'.
[  120.551838][ T7816] loop1: detected capacity change from 0 to 8192
[  120.719028][ T7822] netlink: 'syz.1.728': attribute type 1 has an invalid length.
[  120.780549][ T7824] loop2: detected capacity change from 0 to 4096
[  120.787058][ T7824] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  121.072463][ T7829] loop1: detected capacity change from 0 to 40427
[  121.118381][ T7829] F2FS-fs (loop1): invalid crc value
[  121.223468][ T7829] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  121.226738][ T7829] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  121.424251][ T7858] loop2: detected capacity change from 0 to 512
[  121.433477][ T7858] EXT4-fs: Ignoring removed nomblk_io_submit option
[  121.445235][ T7858] EXT4-fs (loop2): Test dummy encryption mode enabled
[  121.466204][ T7858] EXT4-fs (loop2): 1 truncate cleaned up
[  121.468757][ T7858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.880685][ T7849] loop0: detected capacity change from 0 to 131072
[  121.923775][ T7849] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  121.926798][ T7849] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  121.983585][ T7849] F2FS-fs (loop0): invalid crc value
[  122.127350][ T7849] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.132842][ T7849] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  122.135235][ T7849] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  122.336058][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.018526][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'.
[  123.156077][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'.
[  123.482870][ T7900] loop1: detected capacity change from 0 to 40427
[  123.485437][ T7902] loop0: detected capacity change from 0 to 2048
[  123.487250][ T7900] F2FS-fs (loop1): invalid crc value
[  123.506933][ T7902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.523162][ T7900] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  123.526420][ T7900] F2FS-fs (loop1): Start checkpoint disabled!
[  123.547505][ T7900] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  123.870996][ T7916] loop0: detected capacity change from 0 to 128
[  123.950196][ T7918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.762'.
[  124.248664][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  124.382709][ T7924] loop1: detected capacity change from 0 to 512
[  124.406671][ T7924] EXT4-fs: Ignoring removed orlov option
[  124.419879][   T10] usb 3-1: Using ep0 maxpacket: 32
[  124.422631][ T7924] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  124.429373][   T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  124.434801][ T7924] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.765: corrupted in-inode xattr: e_value size too large
[  124.439905][   T10] usb 3-1: config 0 has no interface number 0
[  124.441884][   T10] usb 3-1: config 0 interface 12 has no altsetting 0
[  124.446606][ T7924] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.765: couldn't read orphan inode 15 (err -117)
[  124.453115][   T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  124.456017][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.457631][ T7924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.460148][   T10] usb 3-1: Product: syz
[  124.465391][   T10] usb 3-1: Manufacturer: syz
[  124.467363][   T10] usb 3-1: SerialNumber: syz
[  124.473536][   T10] usb 3-1: config 0 descriptor??
[  124.504012][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.911613][   T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  124.914821][   T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  124.917499][   T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  124.970949][   T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  124.985658][   T10] usb 3-1: USB disconnect, device number 7
[  125.051950][ T7932] loop0: detected capacity change from 0 to 32768
[  125.126623][ T7932] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  125.126642][ T7932]   allowing incompatible features above 0.0: (unknown version)
[  125.126649][ T7932]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  125.151674][ T7932] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  125.155261][ T7932] bcachefs (loop0): initializing new filesystem
[  125.167632][ T7932] bcachefs (loop0): going read-write
[  125.186036][ T7932] bcachefs (loop0): marking superblocks
[  125.216682][ T7932] bcachefs (loop0): initializing freespace
[  125.236061][ T7932] bcachefs (loop0): done initializing freespace
[  125.243690][ T7932] bcachefs (loop0): reading snapshots table
[  125.258113][ T7932] bcachefs (loop0): reading snapshots done
[  125.287222][ T7932] bcachefs (loop0): done starting filesystem
[  125.378379][ T7956] loop1: detected capacity change from 0 to 16
[  125.388359][ T7956] erofs (device loop1): mounted with root inode @ nid 36.
[  125.765365][ T7958] loop2: detected capacity change from 0 to 1024
[  125.769954][ T7958] EXT4-fs: Invalid commit interval -2147483647, must be smaller than 21474836
[  125.824503][ T5837] bcachefs (loop0): shutting down
[  125.826638][ T5837] bcachefs (loop0): going read-only
[  125.838521][ T5837] bcachefs (loop0): finished waiting for writes to stop
[  125.844144][ T5837] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  125.888037][ T5837] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  125.897023][ T5837] bcachefs (loop0): clean shutdown complete, journal seq 4
[  125.902433][ T5837] bcachefs (loop0): marking filesystem clean
[  125.940187][ T5837] bcachefs (loop0): shutdown complete
[  126.377447][ T5901] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  126.547822][ T5901] usb 3-1: Using ep0 maxpacket: 16
[  126.581621][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  126.589452][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  126.593155][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  126.596923][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  126.619297][ T5901] usb 3-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb
[  126.627040][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.630611][ T5901] usb 3-1: Product: syz
[  126.634216][ T5901] usb 3-1: Manufacturer: syz
[  126.636447][ T5901] usb 3-1: SerialNumber: syz
[  126.660154][ T5901] usb 3-1: config 0 descriptor??
[  126.664006][ T5901] io_ti 3-1:0.0: required endpoints missing
[  126.865856][ T5901] usb 3-1: USB disconnect, device number 8
[  127.856990][   T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  128.028860][   T10] usb 1-1: config 129 has an invalid interface number: 180 but max is 0
[  128.031744][   T10] usb 1-1: config 129 has no interface number 0
[  128.033991][   T10] usb 1-1: config 129 interface 180 has no altsetting 0
[  128.040094][   T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=9a.87
[  128.043519][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.293952][ T7992] netlink: 'syz.2.790': attribute type 3 has an invalid length.
[  128.308431][ T7992] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.790'.
[  128.316696][   T10] usb 1-1: string descriptor 0 read error: -71
[  128.349646][   T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251
[  128.378857][   T10] gspca_sn9c20x: Write register 1000 failed -71
[  128.380947][   T10] gspca_sn9c20x: Device initialization failed
[  128.394925][   T10] gspca_sn9c20x 1-1:129.180: probe with driver gspca_sn9c20x failed with error -71
[  128.460230][   T10] usb 1-1: USB disconnect, device number 7
[  129.134050][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.787343][ T8027] loop2: detected capacity change from 0 to 4096
[  129.815521][ T8027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.859749][ T8027] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  129.913644][ T8027] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  129.963638][ T5843] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[  129.972019][ T5843] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[  130.033173][ T8032] loop1: detected capacity change from 0 to 32768
[  130.070484][ T8032] ERROR: (device loop1): diAllocAG: numfree > numinos
[  130.070484][ T8032] 
[  130.105159][ T8032] ialloc: diAlloc returned -5!
[  130.123791][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.262490][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.347798][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.456131][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.601697][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.606440][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.609976][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.613712][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.618834][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.667724][   T12] bridge_slave_1: left allmulticast mode
[  130.680682][   T12] bridge_slave_1: left promiscuous mode
[  130.684964][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.696827][ T8046] loop1: detected capacity change from 0 to 32768
[  130.730597][   T12] bridge_slave_0: left allmulticast mode
[  130.732978][   T12] bridge_slave_0: left promiscuous mode
[  130.736126][ T8046] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  130.740304][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.752525][ T8046] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  130.755610][ T8060] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.819'.
[  130.882783][   T33] audit: type=1326 audit(392.759:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8065 comm="syz.0.820" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4e4cb85ba7 code=0x0
[  130.906783][ T5841] ocfs2: Unmounting device (7,1) on (node local)
[  131.002706][   T12] dvmrp1 (unregistering): left allmulticast mode
[  131.211378][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.216534][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.220320][   T12] bond0 (unregistering): Released all slaves
[  131.298248][   T12] : left promiscuous mode
[  131.420045][ T8051] chnl_net:caif_netlink_parms(): no params data found
[  131.558981][   T12] hsr_slave_0: left promiscuous mode
[  131.561171][   T12] hsr_slave_1: left promiscuous mode
[  131.563453][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.567206][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  131.569671][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.575054][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.577628][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.598706][   T12] veth1_macvtap: left promiscuous mode
[  131.601063][   T12] veth0_macvtap: left promiscuous mode
[  131.603393][   T12] veth1_vlan: left promiscuous mode
[  131.605986][   T12] veth0_vlan: left promiscuous mode
[  131.721764][   T10] usb 2-1: Using ep0 maxpacket: 8
[  131.742510][   T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  131.747382][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.767553][   T10] pvrusb2: Hardware description: Terratec Grabster AV400
[  131.770449][   T10] pvrusb2: **********
[  131.772143][   T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  131.790097][   T10] pvrusb2: Important functionality might not be entirely working.
[  131.793597][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  131.798849][   T10] pvrusb2: **********
[  131.980477][ T2397] pvrusb2: Invalid write control endpoint
[  132.086313][ T2397] pvrusb2: Invalid write control endpoint
[  132.098596][ T2397] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  132.104419][ T2397] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  132.119498][ T2397] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  132.123884][ T2397] pvrusb2: Device being rendered inoperable
[  132.133697][ T2397] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  132.139895][ T2397] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  132.163133][ T2397] pvrusb2: Attached sub-driver cx25840
[  132.176428][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  132.191133][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  132.205534][ T5905] usb 2-1: USB disconnect, device number 15
[  132.288012][   T12] team0 (unregistering): Port device team_slave_1 removed
[  132.328936][   T12] team0 (unregistering): Port device team_slave_0 removed
[  132.618385][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.620990][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.694304][ T5233] Bluetooth: hci2: command tx timeout
[  132.900698][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.903660][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.907753][ T8051] bridge_slave_0: entered allmulticast mode
[  132.911615][ T8051] bridge_slave_0: entered promiscuous mode
[  132.917842][ T8095] loop1: detected capacity change from 0 to 4096
[  132.917959][ T8051] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.923615][ T8095] ntfs3(loop1): ino=3, Correct links count -> 2.
[  132.945054][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.948062][ T8051] bridge_slave_1: entered allmulticast mode
[  132.963456][ T8051] bridge_slave_1: entered promiscuous mode
[  132.980483][ T8095] ntfs3(loop1): ino=1a, mi_enum_attr
[  132.982673][ T8095] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  133.006883][ T8095] ntfs3(loop1): Failed to load root (-22).
[  133.069355][ T8051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.094512][ T8051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.169854][ T8051] team0: Port device team_slave_0 added
[  133.178104][ T8051] team0: Port device team_slave_1 added
[  133.266923][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.269987][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.287939][ T8051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.304854][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.307735][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.398000][ T8103] loop1: detected capacity change from 0 to 128
[  133.405823][ T8103] adfs: Bad value for 'uid'
[  133.407932][ T8103] adfs: Bad value for 'uid'
[  133.583188][ T8051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.670511][ T8051] hsr_slave_0: entered promiscuous mode
[  133.672807][ T8051] hsr_slave_1: entered promiscuous mode
[  133.679838][ T8051] debugfs: 'hsr0' already exists in 'hsr'
[  133.740638][ T8100] loop1: detected capacity change from 0 to 128
[  133.741190][ T8051] Cannot create hsr debugfs directory
[  133.744722][ T8100] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  133.751462][ T8100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.795476][ T8108] loop0: detected capacity change from 0 to 512
[  133.800097][ T8108] EXT4-fs: inline encryption not supported
[  133.813003][ T8108] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  133.830776][ T8108] EXT4-fs (loop0): 1 truncate cleaned up
[  133.835314][ T8108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.871669][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.419705][ T8051] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  134.437266][ T8051] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  134.452996][ T8051] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  134.462997][ T8051] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  134.510129][ T8128] loop1: detected capacity change from 0 to 16
[  134.519142][ T8128] erofs (device loop1): mounted with root inode @ nid 36.
[  134.530131][ T8128] syz.1.839: attempt to access beyond end of device
[  134.530131][ T8128] loop1: rw=524288, sector=8, nr_sectors = 32 limit=16
[  134.551232][ T8128] syz.1.839: attempt to access beyond end of device
[  134.551232][ T8128] loop1: rw=524288, sector=40, nr_sectors = 64 limit=16
[  134.564357][ T8051] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.565465][ T8128] syz.1.839: attempt to access beyond end of device
[  134.565465][ T8128] loop1: rw=0, sector=16, nr_sectors = 8 limit=16
[  134.575006][ T8051] 8021q: adding VLAN 0 to HW filter on device team0
[  134.577786][   T33] audit: type=1800 audit(396.461:10): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.839" name="file2" dev="loop1" ino=89 res=0 errno=0
[  134.589693][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.592506][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.616251][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.619878][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.790528][ T5233] Bluetooth: hci2: command tx timeout
[  135.007852][ T8139] loop0: detected capacity change from 0 to 2048
[  135.078492][ T8139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.242638][ T8051] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.336183][ T8051] veth0_vlan: entered promiscuous mode
[  135.345026][ T8051] veth1_vlan: entered promiscuous mode
[  135.385190][ T8051] veth0_macvtap: entered promiscuous mode
[  135.400156][ T8051] veth1_macvtap: entered promiscuous mode
[  135.401002][ T8149] loop0: detected capacity change from 0 to 64
[  135.441981][ T8051] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.464897][   T12] IPVS: stop unused estimator thread 0...
[  135.472698][ T8051] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.487337][ T5874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.497222][ T5874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.500591][ T5874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.503413][   T12] ------------[ cut here ]------------
[  135.506494][   T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  135.510167][   T12] Modules linked in:
[  135.513456][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  135.518614][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.522923][   T12] Workqueue: netns cleanup_net
[  135.524938][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  135.527174][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 88 31 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 d9 e1 f7 e8 11 af 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 03 af 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  135.529673][ T5874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.534771][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  135.534788][   T12] RAX: ffffffff8a21fc7f RBX: ffff888110532440 RCX: ffff88801c2ed640
[  135.534798][   T12] RDX: 0000000000000000 RSI: ffffffff8dba60be RDI: ffff88801c2ed640
[  135.534806][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37f37 R09: 1ffffffff1f46fe6
[  135.534815][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fe7 R12: ffffffff8f630b60
[  135.534824][   T12] R13: 1ffff9200001ef40 R14: ffff8881105338c0 R15: dffffc0000000000
[  135.534832][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  135.560478][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.563621][   T12] CR2: 0000001b31c1cff8 CR3: 0000000028b16000 CR4: 00000000000006f0
[  135.567305][   T12] Call Trace:
[  135.568706][   T12]  <TASK>
[  135.569956][   T12]  xfrm_net_exit+0x2d/0x70
[  135.571781][   T12]  ops_undo_list+0x49a/0x990
[  135.573918][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  135.575972][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  135.578013][   T12]  cleanup_net+0x4c5/0x800
[  135.579864][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  135.581924][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.584253][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  135.586598][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  135.588950][   T12]  process_scheduled_works+0xae1/0x17b0
[  135.591308][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  135.594076][   T12]  worker_thread+0x8a0/0xda0
[  135.596006][   T12]  kthread+0x711/0x8a0
[  135.597657][   T12]  ? __pfx_worker_thread+0x10/0x10
[  135.599736][   T12]  ? __pfx_kthread+0x10/0x10
[  135.601703][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.603951][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.606042][   T12]  ? __pfx_kthread+0x10/0x10
[  135.607848][   T12]  ret_from_fork+0x3fc/0x770
[  135.609694][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  135.611764][   T12]  ? __switch_to_asm+0x39/0x70
[  135.613831][   T12]  ? __switch_to_asm+0x33/0x70
[  135.615749][   T12]  ? __pfx_kthread+0x10/0x10
[  135.617658][   T12]  ret_from_fork_asm+0x1a/0x30
[  135.619638][   T12]  </TASK>
[  135.620990][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  135.623970][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  135.628976][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.633029][   T12] Workqueue: netns cleanup_net
[  135.635014][   T12] Call Trace:
[  135.636430][   T12]  <TASK>
[  135.637652][   T12]  dump_stack_lvl+0x99/0x250
[  135.639589][   T12]  ? __asan_memcpy+0x40/0x70
[  135.641540][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.643636][   T12]  ? __pfx__printk+0x10/0x10
[  135.645527][   T12]  vpanic+0x281/0x750
[  135.647217][   T12]  ? __pfx__printk+0x10/0x10
[  135.649147][   T12]  ? __pfx_vpanic+0x10/0x10
[  135.651009][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  135.653150][   T12]  panic+0xb9/0xc0
[  135.654701][   T12]  ? __pfx_panic+0x10/0x10
[  135.656530][   T12]  __warn+0x31b/0x4b0
[  135.658178][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  135.660229][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  135.662251][   T12]  report_bug+0x2be/0x4f0
[  135.664002][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  135.666019][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  135.667999][   T12]  ? xfrm_state_fini+0x272/0x2f0
[  135.670077][   T12]  handle_bug+0x84/0x160
[  135.671844][   T12]  exc_invalid_op+0x1a/0x50
[  135.673727][   T12]  asm_exc_invalid_op+0x1a/0x20
[  135.675723][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  135.677979][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 88 31 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 d9 e1 f7 e8 11 af 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 03 af 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  135.685943][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  135.688523][   T12] RAX: ffffffff8a21fc7f RBX: ffff888110532440 RCX: ffff88801c2ed640
[  135.691701][   T12] RDX: 0000000000000000 RSI: ffffffff8dba60be RDI: ffff88801c2ed640
[  135.694928][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37f37 R09: 1ffffffff1f46fe6
[  135.698143][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fe7 R12: ffffffff8f630b60
[  135.701308][   T12] R13: 1ffff9200001ef40 R14: ffff8881105338c0 R15: dffffc0000000000
[  135.704568][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  135.706566][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  135.708639][   T12]  xfrm_net_exit+0x2d/0x70
[  135.710472][   T12]  ops_undo_list+0x49a/0x990
[  135.712299][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  135.714380][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  135.716487][   T12]  cleanup_net+0x4c5/0x800
[  135.718322][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  135.720394][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.722605][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  135.724980][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  135.727326][   T12]  process_scheduled_works+0xae1/0x17b0
[  135.729634][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  135.732074][   T12]  worker_thread+0x8a0/0xda0
[  135.734038][   T12]  kthread+0x711/0x8a0
[  135.735754][   T12]  ? __pfx_worker_thread+0x10/0x10
[  135.737857][   T12]  ? __pfx_kthread+0x10/0x10
[  135.739750][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.741859][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.743992][   T12]  ? __pfx_kthread+0x10/0x10
[  135.745914][   T12]  ret_from_fork+0x3fc/0x770
[  135.747798][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  135.749992][   T12]  ? __switch_to_asm+0x39/0x70
[  135.752012][   T12]  ? __switch_to_asm+0x33/0x70
[  135.753987][   T12]  ? __pfx_kthread+0x10/0x10
[  135.755843][   T12]  ret_from_fork_asm+0x1a/0x30
[  135.757847][   T12]  </TASK>
[  135.759886][   T12] Kernel Offset: disabled
[  135.761717][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:52:42  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff89624a97 RBX=ffff888100eb2980 RCX=0000000000000000 RDX=ffffc9000306f780
RSI=ffff8881051e8000 RDI=ffff888027fa5270 RBP=ffffc9000306f4d0 RSP=ffffc9000306f4d0
R8 =ffffffff8fa37f37 R9 =1ffffffff1f46fe6 R10=dffffc0000000000 R11=fffffbfff1f46fe7
R12=ffff888100eb2800 R13=1ffff110201d6530 R14=0000000000000000 R15=ffff8881051e8000
RIP=ffffffff89620ee8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc0d16dd800 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4e4cb62b10 CR3=000000001f794000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b75a54e RBX=00000000fffffffe RCX=ffff88801c2ed640 RDX=0000000000000000
RSI=0000000000000065 RDI=0000000000000000 RBP=ffffffff99af899f RSP=ffffc900000f70c8
R8 =ffff88801c2ed640 R9 =0000000000000008 R10=0000000000000007 R11=0000000000000000
R12=ffffffff8f8abaa2 R13=0000000000000012 R14=ffffffff99af898d R15=0000000000000065
RIP=ffffffff81bfabc1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31c1cff8 CR3=0000000028b16000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fedd8012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
