last executing test programs:

19.279749781s ago: executing program 0 (id=2631):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d4, 0x0)

19.190457677s ago: executing program 0 (id=2632):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)

18.342877682s ago: executing program 0 (id=2651):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0x20a4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)

17.798271157s ago: executing program 0 (id=2654):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@fat=@quiet}, {@fat=@flush}, {@shortname_winnt}, {@fat=@showexec}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x27f, &(0x7f0000000e00)="$eJzs3E9rI2UYAPDHZLvtdtlNDyIoiC960UvYrZ8gyC6IBaVuRD0IszbV0DEpmViJiLs3r36OxaM3Qf0CvXjzLl6KIHjZgxjZ/LFpDewq2067+f0gzJN558n7zmQmPDOQ9+Ddrz/Z2S7q21k/KispKhF3437E2oNo4qnJsjKKL8asu/HK5T9+fv7t995/o7GxcWMzpZuNW6+up5SuvvD9Z1988+KP/cvvfHv1u+XYX/vg4Pf1X/af2X/24K9b00/v9lOWbne7/ex23kpb7WKnntJbeSsrWqndKVq9I+3beXd3d5CyztaV1d1eqyhS1hmkndYg9bup3xuk7KOs3Un1ej1dWY1FU/3PGc17m5tZ40QGQxkuzVvZ6zWy6tzG5r3TGBQAcLaUVf9/3C5Su0idh9X/lVD/nxz1/yJ4UP+vTq7fo9T/AAAAAAAAAAAAAABwHtwfDmvD4bA2XU5fyxGxEhHT92WPk5Ph+19sM3/cW4nIv9pr7jXHy3F7YzvakUcrri1F/Dk6HybG8c3XN25cSyNr8UN+Z5J/Z69ZjeVp/tTa/Pzr4/x0NH8pVmf7X49aPD0/f31u/sV4+aWZ/HrU4qcPoxt5bI3O68P8L6+n9NqbG8fyL422AwAAgCdBPf3jX/fvo/Z6mk4bcqx9vPLw+UDUHvJ84Nj99YV47kJ5+w0AAACLpBh8vpPleat3foOliDj93k/90FXjrBzw0woqEVFS779FxNk4CI81+PXT8VX/KBuX/csEAAA8bodFf9kjAQAAAAAAAAAAAAAAAAAAgMX1qJOHTbf/P3OPzXRXLWcvAQAAAAAAAAAAAAAAAAAAAAAA4Gz4OwAA///zkx7R")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

17.739645773s ago: executing program 0 (id=2656):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fsetxattr(r0, &(0x7f0000000900)=ANY=[@ANYBLOB='a'], 0x0, 0x0, 0x0)

17.502626117s ago: executing program 0 (id=2662):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)

17.314919761s ago: executing program 32 (id=2662):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)

3.899392309s ago: executing program 1 (id=2825):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0)

3.619526388s ago: executing program 1 (id=2827):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0)

3.539006681s ago: executing program 2 (id=2831):
r0 = socket(0x10, 0x2, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0xb, 0x1}, {0x4, 0x8}}}, 0x24}}, 0x0)

3.536076162s ago: executing program 2 (id=2833):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1e0e81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x9, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd100"})
write$sndseq(r0, &(0x7f0000000680)=[{0x5, 0xd2, 0x3, 0x0, @tick, {0x1, 0x1}, {0x6b}, @note={0x6, 0x3, 0x5, 0xfc, 0xcde}}], 0x1c)

3.228522618s ago: executing program 2 (id=2836):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xfffffffffffffff4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)

2.780311145s ago: executing program 2 (id=2837):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x45, {0x45, 0x11, "61639c545d2ce9daa7602630c686377369efa824c3379300000000b0d2363bdd25b77c5b7708dfd51207b2908fceb485a8995d91250100ff9ebab19ba6613600e553d7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.710048635s ago: executing program 1 (id=2838):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xdf, 0x258, &(0x7f0000000780)="$eJzs3T9oHmUcB/Df3fu+xiQvEnURxD8gIhoIcRNc4qIQkBBEBBUiIi5KIsQEt8TJxUFnLZm6hNKtaceSJXRpKXRK2wzpUmhDh4YO7XDlfS+BJG/6J33f3pXc5wPH3SV393uO3Pe5G3L3BFBZQxExFhG1iBiOiEZEJHs3eDefhnZWl/rXpiKy7Ks7SXu7fD23u99gRCxGxCcRsZom8Us9Yn7lu81761988Pdc4/2TK9/2F3qSO7Y2N77cPjHx15nxj+cvXbk1kcRYNPedV+8lh/ysnkS89jyKvSCSetkt4GlM/nH6aiv3r0fEe+38NyKN/I/3z+xLq4346P9H7fvv7ctvFtlWoPeyrNG6By5mQOWkEdGMJB2JiHw5TUdG8mf4a7WB9NeZ2d+Hf56Zm/6p7J4K6JVmxMbn5/rODh7I/81ann/g+Grl/+vJ5eut5e1a2a0BCvFWPmvlf/iHhQ9D/qFy5B+qS/6huo6Yf//RAceI+z9U12Py/3JZbQKK0Zn/RtlNAgri+R8qKcuyTP6hwuQfqmtv/gGAasn6yn4DGShL2f0PAAAAAAAAAAAAAAAAAADQaal/bWp3Kqrmhf8itj7LRxfprF9rj0e8+znygbvJvkFIkh4MSvL9O10eoEunSn77+pUb5da/+Ha59RemIxb/jIjRer3z+kt2rr9n9+oTft/4scsCR5QcWP/0m2LrH/Rgudz64+sR51v9z+hh/U8ab7Tnh/c/zR58Mf23+10eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMI8DAAA//84UXFU")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x2, @aes128, 0x10, @auto="0900012000"})

2.674373679s ago: executing program 1 (id=2839):
syz_mount_image$xfs(&(0x7f0000000080), &(0x7f0000009640)='./file1\x00', 0x804c4a, &(0x7f0000000140)={[{@lazytime}, {@noikeep}, {@lazytime}, {@bsdgroups}, {@prjquota}, {@lazytime}]}, 0x8, 0x9647, &(0x7f000001c340)="$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")
lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
listxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=""/38, 0x26)

2.303327726s ago: executing program 1 (id=2846):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095009ca0000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x80)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r0, 0x11}, 0x11)

2.232028758s ago: executing program 2 (id=2848):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$dsp(r0, &(0x7f00000012c0)="a52876", 0x3)
read$dsp(r1, &(0x7f0000001380)=""/229, 0xe5)

1.91962041s ago: executing program 2 (id=2849):
syz_usb_connect(0x0, 0x41, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0})

1.919402867s ago: executing program 1 (id=2850):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

1.772288532s ago: executing program 33 (id=2849):
syz_usb_connect(0x0, 0x41, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0})

1.726818871s ago: executing program 34 (id=2850):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

409.813155ms ago: executing program 3 (id=2854):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f00000000c0)={0xfffff000, 0x2, 0xffffa57e})
writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0)

272.325778ms ago: executing program 3 (id=2855):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x2)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5})

272.083349ms ago: executing program 3 (id=2856):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc0002})

187.546453ms ago: executing program 3 (id=2857):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x49}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

187.275757ms ago: executing program 3 (id=2858):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000200)='./file1\x00', 0x12, &(0x7f0000000480)=ANY=[], 0x5, 0xa66, &(0x7f0000000d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x110)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e84, &(0x7f0000000800)={@id={0x2, 0x0, @auto="5e0900000000000000de2d7bb114e500"}})

0s ago: executing program 3 (id=2859):
r0 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x0, 0x2900)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000180)=0x1)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0xa2e65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0xc0844123, &(0x7f0000000080)=0x5)

kernel console output (not intermixed with test programs):

inode dirty (err -117)
[  225.580930][T10946] EXT4-fs (loop1): 1 orphan inode deleted
[  225.588146][T10946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.596459][ T4401] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  225.613968][ T4401] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  225.618323][ T4401] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u9:4: Failed to release dquot type 0
[  225.643888][T10946] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1998: lblock 0 mapped to illegal pblock 48 (length 1)
[  225.650820][T10946] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117
[  225.734808][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.134746][T10962] loop0: detected capacity change from 0 to 128
[  226.507832][T10965] syz.0.2005: attempt to access beyond end of device
[  226.507832][T10965] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[  226.529833][T10958] loop1: detected capacity change from 0 to 40427
[  226.534665][T10958] F2FS-fs (loop1): Image doesn't support compression
[  226.537874][T10958] F2FS-fs (loop1): build fault injection rate: 690
[  226.544480][T10958] F2FS-fs (loop1): invalid crc value
[  226.620215][T10958] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  226.624521][T10958] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  226.696618][T10970] loop2: detected capacity change from 0 to 40427
[  226.700196][T10970] F2FS-fs: heap/no_heap options were deprecated
[  226.703564][T10970] F2FS-fs (loop2): build fault injection rate: 19
[  226.707887][T10970] F2FS-fs (loop2): build fault injection type: 0x7
[  226.715702][T10970] F2FS-fs (loop2): invalid crc value
[  226.719241][T10970] F2FS-fs (loop2): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4429/0x6ff0
[  226.722644][T10970] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[  227.240822][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2016'.
[  228.063009][T11025] loop2: detected capacity change from 0 to 1764
[  228.070173][T11025] ISOFS: Bad logical zone size 23846
[  228.181814][T11030] (unnamed net_device) (uninitialized): (slave wg2): Device is not bonding slave
[  228.185914][T11030] (unnamed net_device) (uninitialized): option active_slave: invalid value (wg2)
[  228.541638][T11043] loop2: detected capacity change from 0 to 32768
[  228.590968][T11043] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  228.663007][T11043] XFS (loop2): Metadata CRC error detected at xfs_agi_read_verify+0x12f/0x1f0, xfs_agi block 0x2 
[  228.667701][T11043] XFS (loop2): Unmount and run xfs_repair
[  228.670125][T11043] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  228.673165][T11043] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 10 00  XAGI............
[  228.677011][T11043] 00000010: 00 00 00 40 00 00 00 01 00 00 00 01 00 00 00 37  ...@...........7
[  228.680698][T11043] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff  ...@............
[  228.684390][T11043] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  228.688091][T11043] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  228.691842][T11043] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  228.695926][T11043] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  228.699669][T11043] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  228.703406][T11043] XFS (loop2): metadata I/O error in "xfs_read_agi+0x272/0x5b0" at daddr 0x2 len 1 error 74
[  228.707811][T11043] XFS (loop2): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0
[  228.711595][T11043] XFS (loop2): Failed to read root inode 0x1140, error 117
[  228.715063][T11043] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  228.870064][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'.
[  229.185225][T11073] loop2: detected capacity change from 0 to 32768
[  229.188910][T11073] XFS: ikeep mount option is deprecated.
[  229.191210][T11073] XFS: ikeep mount option is deprecated.
[  229.193615][T11073] XFS: noikeep mount option is deprecated.
[  229.201538][T11073] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.227499][T11073] XFS (loop2): Ending clean mount
[  229.283870][ T5850] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.433855][T11087] loop1: detected capacity change from 0 to 4096
[  229.443983][T11087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.476297][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.114782][T11116] loop2: detected capacity change from 0 to 2048
[  230.338699][T11123] loop0: detected capacity change from 0 to 32768
[  230.343092][T11123] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2068 (11123)
[  230.351456][T11123] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  230.356568][T11123] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  230.384432][T11123] BTRFS info (device loop0): enabling ssd optimizations
[  230.387965][T11123] BTRFS info (device loop0): enabling free space tree
[  230.490675][ T5846] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  230.714259][T11147] loop0: detected capacity change from 0 to 512
[  230.721522][T11147] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  230.725167][T11147] EXT4-fs (loop0): orphan cleanup on readonly fs
[  230.728348][T11147] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2070: iget: bad i_size value: 38620345925642
[  230.734044][T11147] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2070: couldn't read orphan inode 15 (err -117)
[  230.740424][T11147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  230.756440][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.787406][T11145] loop1: detected capacity change from 0 to 32768
[  230.796048][T11145] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  230.804873][T11145] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  230.814572][ T5874] (kworker/u8:3,5874,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  230.884150][ T5842] ocfs2: Unmounting device (7,1) on (node local)
[  230.928564][T11160] loop0: detected capacity change from 0 to 128
[  230.933693][T11160] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback.
[  230.968905][ T5846] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  231.038525][T11167] loop2: detected capacity change from 0 to 4096
[  231.046068][T11167] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  231.059655][T11167] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  231.065691][T11167] ntfs3(loop2): Failed to load $Extend (-22).
[  231.069637][T11167] ntfs3(loop2): Failed to initialize $Extend.
[  231.210119][T11171] loop1: detected capacity change from 0 to 32768
[  231.213227][T11171] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2077 (11171)
[  231.222525][T11171] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.230207][T11171] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  231.370325][T11190] loop0: detected capacity change from 0 to 4096
[  231.406720][T11171] BTRFS info (device loop1): enabling ssd optimizations
[  231.409882][T11171] BTRFS info (device loop1): enabling free space tree
[  231.441854][ T5842] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.542583][T11205] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  231.654953][T11208] loop1: detected capacity change from 0 to 1764
[  233.607989][ T6039] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  233.626159][ T5896] usb 2-1: new low-speed USB device number 26 using dummy_hcd
[  233.755704][ T6039] usb 1-1: Using ep0 maxpacket: 16
[  233.763303][ T6039] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.775609][ T6039] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  233.790080][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.796987][ T6039] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  233.802564][ T5896] usb 2-1: config 0 has no interfaces?
[  233.808096][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.812358][ T5896] usb 2-1: config 0 has no interfaces?
[  233.815694][ T6039] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  233.820380][ T6039] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  233.827630][ T6039] usb 1-1: config 1 interface 1 has no altsetting 0
[  233.830636][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.834968][ T5896] usb 2-1: config 0 has no interfaces?
[  233.842138][ T6039] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  233.847862][ T6039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.851334][ T6039] usb 1-1: Product: syz
[  233.853174][ T6039] usb 1-1: Manufacturer: syz
[  233.855252][ T6039] usb 1-1: SerialNumber: syz
[  233.861891][ T5896] usb 2-1: string descriptor 0 read error: -22
[  233.864585][ T5896] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  233.870116][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.879413][ T5896] usb 2-1: config 0 descriptor??
[  234.050984][T11252] loop2: detected capacity change from 0 to 32768
[  234.055167][T11252] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry journal: 1/3 [0 1 4]
[  234.055167][T11252] replicas_v0 (size 24):
[  234.055167][T11252] btree: 1 [0] journal: 3 [0 4 1]
[  234.055167][T11252] 
[  234.066393][T11252] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  234.113519][ T6039] usb 1-1: USB disconnect, device number 27
[  234.158778][T11233] loop1: detected capacity change from 0 to 4096
[  234.162482][T11233] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  234.179395][T11233] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  234.217722][ T5896] usb 2-1: USB disconnect, device number 26
[  234.854863][T11263] loop0: detected capacity change from 0 to 4096
[  234.874469][T11263] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  235.578475][ T5877] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  235.736942][ T5877] usb 1-1: Using ep0 maxpacket: 8
[  235.750314][ T5877] usb 1-1: config 0 has an invalid interface number: 239 but max is 0
[  235.753395][ T5877] usb 1-1: config 0 has no interface number 0
[  235.755784][ T5877] usb 1-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  235.760453][ T5877] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  235.769098][ T5877] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  235.772322][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.774863][ T5877] usb 1-1: Product: syz
[  235.776679][ T5877] usb 1-1: Manufacturer: syz
[  235.778568][ T5877] usb 1-1: SerialNumber: syz
[  235.782035][ T5877] usb 1-1: config 0 descriptor??
[  235.784917][T11275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  235.864874][T11287] loop1: detected capacity change from 0 to 32768
[  235.892125][T11287] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  235.914690][T11277] [U] 
[  235.966223][T11287] XFS (loop1): Ending clean mount
[  235.989042][T11298] loop2: detected capacity change from 0 to 64
[  235.992321][ T5842] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  236.006260][ T5877] ath6kl: Failed to submit usb control message: -71
[  236.009125][ T5877] ath6kl: unable to send the bmi data to the device: -71
[  236.012490][ T5877] ath6kl: Unable to send get target info: -71
[  236.044126][ T5877] ath6kl: Failed to init ath6kl core: -71
[  236.049228][ T5877] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71
[  236.057129][ T5877] usb 1-1: USB disconnect, device number 28
[  236.083690][T11300] netlink: 'syz.2.2129': attribute type 13 has an invalid length.
[  236.588648][T11319] netlink: 'syz.2.2138': attribute type 9 has an invalid length.
[  236.624917][T11319] netlink: 'syz.2.2138': attribute type 9 has an invalid length.
[  236.691219][T11326] loop2: detected capacity change from 0 to 512
[  236.731363][T11326] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2140: bg 0: block 5: invalid block bitmap
[  236.743214][T11326] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  236.747578][T11326] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2140: invalid indirect mapped block 4294967295 (level 1)
[  236.753873][T11326] EXT4-fs (loop2): 1 orphan inode deleted
[  236.758295][T11326] EXT4-fs (loop2): 1 truncate cleaned up
[  236.761921][T11326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.784444][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.854192][T11321] loop1: detected capacity change from 0 to 40427
[  236.860564][T11321] F2FS-fs: heap/no_heap options were deprecated
[  236.864263][T11321] F2FS-fs (loop1): invalid crc value
[  236.866788][T11321] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  236.918338][T11341] loop2: detected capacity change from 0 to 256
[  236.921931][T11341] exfat: Unknown parameter 'zero_sizeQir'
[  236.922133][T11321] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  236.929478][T11321] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  237.308612][T11356] loop2: detected capacity change from 0 to 4096
[  237.312712][T11356] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  237.405174][T11363] sp0: Synchronizing with TNC
[  237.554395][T11371] sctp: [Deprecated]: syz.2.2159 (pid 11371) Use of int in max_burst socket option.
[  237.554395][T11371] Use struct sctp_assoc_value instead
[  237.699740][T11385] loop2: detected capacity change from 0 to 512
[  237.722478][T11385] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.2166: inode #15: comm syz.2.2166: iget: illegal inode #
[  237.730651][T11385] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2166: couldn't read orphan inode 15 (err -117)
[  237.742420][T11385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.765045][T11385] EXT4-fs (loop2): shut down requested (2)
[  237.788367][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.214632][ T5896] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  238.368382][ T5896] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  238.372221][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.377929][ T5896] usb 1-1: config 0 descriptor??
[  238.586095][ T5896] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  238.725592][ T5877] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  238.791297][ T5896] [drm:udl_init] *ERROR* Selecting channel failed
[  238.803645][ T5896] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3
[  238.807155][ T5896] [drm] Initialized udl on minor 3
[  238.811773][ T5896] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  238.817951][ T5896] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  238.822545][   T51] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  238.829328][ T5896] usb 1-1: USB disconnect, device number 29
[  238.832241][   T51] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  238.879258][ T5877] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  238.882669][ T5877] usb 3-1: config 0 has no interface number 0
[  238.893008][ T5877] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  238.899392][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.903038][ T5877] usb 3-1: Product: syz
[  238.904986][ T5877] usb 3-1: Manufacturer: syz
[  238.908107][ T5877] usb 3-1: SerialNumber: syz
[  238.912566][ T5877] usb 3-1: config 0 descriptor??
[  239.084950][T11425] loop1: detected capacity change from 0 to 512
[  239.093872][T11425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.346216][ T5877] usb 3-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3)
[  239.427729][T11429] loop0: detected capacity change from 0 to 256
[  239.436930][T11429] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  239.440448][T11429] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  239.451016][T11429] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  239.536935][ T5877] usb 3-1: failed to fetch extended address, random address set
[  239.613671][ T5877] usb 3-1: USB disconnect, device number 36
[  239.930664][T11435] loop0: detected capacity change from 0 to 4096
[  239.936028][T11435] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  239.959765][T11435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.047235][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.435818][ T5896] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  240.488330][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.607098][ T5896] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  240.611011][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.622023][ T5896] usb 3-1: config 0 descriptor??
[  240.632354][ T5896] cp210x 3-1:0.0: cp210x converter detected
[  240.897964][T11447] loop1: detected capacity change from 0 to 32768
[  240.901014][T11447] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2190 (11447)
[  240.907673][T11447] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  240.911123][T11447] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  240.914220][T11447] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  240.935338][T11447] BTRFS info (device loop1): rebuilding free space tree
[  240.943429][T11447] BTRFS info (device loop1): disabling free space tree
[  240.946622][T11447] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  240.950262][T11447] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  240.955945][T11447] BTRFS info (device loop1): allowing degraded mounts
[  240.958811][T11447] BTRFS info (device loop1): enabling ssd optimizations
[  240.961686][T11447] BTRFS info (device loop1): enabling disk space caching
[  240.965014][T11447] BTRFS info (device loop1): force clearing of disk cache
[  240.968475][T11447] BTRFS info (device loop1): use zlib compression, level 3
[  240.985143][T11447] BTRFS info (device loop1): balance: start -sprofiles=data|system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=2305843009213694464,usage=512..536870912,devid=0
[  240.993512][T11447] BTRFS info (device loop1): balance: ended with status: 0
[  241.019648][ T5842] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  241.049676][ T5896] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  241.102219][T11441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.259551][ T5896] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71
[  241.262514][ T5896] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  241.270830][ T5896] usb 3-1: cp210x converter now attached to ttyUSB0
[  241.274866][ T5896] usb 3-1: USB disconnect, device number 37
[  241.279800][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  241.283219][ T5896] cp210x 3-1:0.0: device disconnected
[  241.375845][T11470] loop1: detected capacity change from 0 to 32768
[  241.379048][T11470] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2194 (11470)
[  241.385033][T11470] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  241.388409][T11470] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  241.405889][T11470] BTRFS info (device loop1): enabling ssd optimizations
[  241.408142][T11470] BTRFS info (device loop1): enabling free space tree
[  241.434460][ T5842] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  241.647870][T11491] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.802591][T11502] loop0: detected capacity change from 0 to 1024
[  241.891818][T11509] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  241.972583][T11518] loop0: detected capacity change from 0 to 1024
[  242.074309][T11518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.124961][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.337923][T11529] loop0: detected capacity change from 0 to 512
[  242.353838][T11529] EXT4-fs: inline encryption not supported
[  242.472962][T11529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.481866][T11529] ext4 filesystem being mounted at /736/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  242.493676][T11529] netlink: 'syz.0.2214': attribute type 83 has an invalid length.
[  242.522978][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.595568][   T60] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  242.745677][   T60] usb 2-1: Using ep0 maxpacket: 16
[  242.750046][   T60] usb 2-1: config 0 has an invalid interface number: 142 but max is 0
[  242.753800][   T60] usb 2-1: config 0 has no interface number 0
[  242.758815][   T60] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1
[  242.762695][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.766505][   T60] usb 2-1: Product: syz
[  242.768329][   T60] usb 2-1: Manufacturer: syz
[  242.770414][   T60] usb 2-1: SerialNumber: syz
[  242.774899][   T60] usb 2-1: config 0 descriptor??
[  242.967939][T11543] loop2: detected capacity change from 0 to 4096
[  242.971885][T11543] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  242.989667][   T60] usb 2-1: Found UVC 0.00 device syz (1bcf:0b40)
[  242.990125][T11543] ntfs3(loop2): ino=19, mi_enum_attr
[  242.992653][   T60] usb 2-1: Forcing UVC version to 1.0a
[  242.994657][T11543] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  243.002464][   T60] usb 2-1: No valid video chain found.
[  243.010887][   T60] usb 2-1: USB disconnect, device number 27
[  243.017677][T11543] ntfs3(loop2): failed to convert "c46c" to macgreek
[  243.023395][T11543] ntfs3(loop2): ino=20, mi_enum_attr
[  243.074793][T11545] bpf: Bad value for 'uid'
[  243.477531][T11555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  243.675856][T11561] loop1: detected capacity change from 0 to 1024
[  243.679666][T11561] ext4: Unknown parameter 'uid<00000000000000000000'
[  243.692142][   T33] audit: type=1326 audit(1756334913.596:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.2227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6298ebe9 code=0x7ffc0000
[  243.713395][   T33] audit: type=1326 audit(1756334913.596:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.2227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6298ebe9 code=0x7ffc0000
[  243.734368][   T33] audit: type=1326 audit(1756334913.596:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.2227" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4d6298ebe9 code=0x7ffc0000
[  243.747979][   T33] audit: type=1326 audit(1756334913.606:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11563 comm="syz.1.2227" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d629c14a5 code=0x7ffc0000
[  243.762621][   T33] audit: type=1326 audit(1756334913.606:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.2227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6298ebe9 code=0x7ffc0000
[  243.786155][   T33] audit: type=1326 audit(1756334913.606:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.2227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6298ebe9 code=0x7ffc0000
[  243.798258][   T33] audit: type=1326 audit(1756334913.616:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.2227" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4d6298ebe9 code=0x7ffc0000
[  243.815635][   T33] audit: type=1326 audit(1756334913.616:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.2227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6298ebe9 code=0x7ffc0000
[  243.824114][   T33] audit: type=1326 audit(1756334913.616:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.2227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6298ebe9 code=0x7ffc0000
[  243.826188][T11568] loop1: detected capacity change from 0 to 1024
[  243.833698][   T33] audit: type=1326 audit(1756334913.616:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.1.2227" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6298ebe9 code=0x7ffc0000
[  243.853732][T11568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.898480][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.950795][T11574] loop0: detected capacity change from 0 to 1024
[  243.957371][T11576] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2232'.
[  243.971955][T11574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  243.980845][T11574] ext4 filesystem being mounted at /741/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.000567][T11574] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.2231: lblock 3 mapped to illegal pblock 3 (length 3)
[  244.009844][T11574] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  244.015784][T11574] EXT4-fs (loop0): This should not happen!! Data will be lost
[  244.015784][T11574] 
[  244.049136][ T5016] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 8: comm kworker/u9:5: lblock 8 mapped to illegal pblock 8 (length 8)
[  244.060725][ T5016] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  244.067587][ T5016] EXT4-fs (loop0): This should not happen!! Data will be lost
[  244.067587][ T5016] 
[  244.080682][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  244.201663][T11598] loop2: detected capacity change from 0 to 16
[  244.207923][T11598] erofs (device loop2): mounted with root inode @ nid 36.
[  244.575600][   T51] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  244.739863][   T51] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  244.743647][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.754175][   T51] usb 2-1: config 0 descriptor??
[  244.761451][   T51] cp210x 2-1:0.0: cp210x converter detected
[  245.173596][   T51] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  245.193452][   T51] usb 2-1: cp210x converter now attached to ttyUSB0
[  245.385947][   T60] usb 2-1: USB disconnect, device number 28
[  245.407211][   T60] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  245.420066][   T60] cp210x 2-1:0.0: device disconnected
[  246.315817][   T51] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  246.354027][T11634] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2257'.
[  246.485633][   T51] usb 3-1: Using ep0 maxpacket: 8
[  246.495797][   T51] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[  246.499469][   T51] usb 3-1: config 0 has no interface number 0
[  246.502409][   T51] usb 3-1: config 0 interface 223 has no altsetting 0
[  246.511821][   T51] usb 3-1: New USB device found, idVendor=0543, idProduct=1923, bcdDevice=2f.36
[  246.515375][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.518661][   T51] usb 3-1: Product: syz
[  246.520310][   T51] usb 3-1: Manufacturer: syz
[  246.522107][   T51] usb 3-1: SerialNumber: syz
[  246.528573][   T51] usb 3-1: config 0 descriptor??
[  246.776081][   T51] usb 3-1: USB disconnect, device number 38
[  247.464053][T11638] loop2: detected capacity change from 0 to 256
[  247.496234][T11638] FAT-fs (loop2): Directory bread(block 64) failed
[  247.499225][T11638] FAT-fs (loop2): Directory bread(block 65) failed
[  247.510227][T11638] FAT-fs (loop2): Directory bread(block 66) failed
[  247.513448][T11638] FAT-fs (loop2): Directory bread(block 67) failed
[  247.516042][T11638] FAT-fs (loop2): Directory bread(block 68) failed
[  247.519203][T11638] FAT-fs (loop2): Directory bread(block 69) failed
[  247.522090][T11638] FAT-fs (loop2): Directory bread(block 70) failed
[  247.524841][T11638] FAT-fs (loop2): Directory bread(block 71) failed
[  247.527807][T11638] FAT-fs (loop2): Directory bread(block 72) failed
[  247.530484][T11638] FAT-fs (loop2): Directory bread(block 73) failed
[  247.822106][T11647] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2264'.
[  247.873394][T11647] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2264'.
[  247.919198][T11641] loop0: detected capacity change from 0 to 32768
[  247.930546][T11651] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2265'.
[  248.060281][T11641] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  248.060294][T11641]   allowing incompatible features above 0.0: (unknown version)
[  248.060299][T11641]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  248.075268][T11641] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  248.078822][T11641] bcachefs (loop0): initializing new filesystem
[  248.086990][T11641] bcachefs (loop0): going read-write
[  248.107994][T11641] bcachefs (loop0): marking superblocks
[  248.116614][T11641] bcachefs (loop0): initializing freespace
[  248.120923][T11641] bcachefs (loop0): done initializing freespace
[  248.125256][T11641] bcachefs (loop0): reading snapshots table
[  248.127617][T11641] bcachefs (loop0): reading snapshots done
[  248.170320][T11641] bcachefs (loop0): done starting filesystem
[  248.672820][ T6039] kernel read not supported for file /dsp (pid: 6039 comm: kworker/1:4)
[  248.903251][ T5846] bcachefs (loop0): shutting down
[  248.905605][ T5846] bcachefs (loop0): going read-only
[  248.907311][ T5846] bcachefs (loop0): finished waiting for writes to stop
[  248.913478][ T5846] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  248.958613][ T5846] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  248.966490][ T5846] bcachefs (loop0): clean shutdown complete, journal seq 5
[  248.972112][ T5846] bcachefs (loop0): marking filesystem clean
[  248.983587][ T5846] bcachefs (loop0): shutdown complete
[  250.160144][T11700] xt_time: invalid argument - start or stop time greater than 23:59:59
[  250.271508][T11706] loop2: detected capacity change from 0 to 512
[  250.298494][   T60] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  250.455692][   T60] usb 1-1: Using ep0 maxpacket: 16
[  250.460366][   T60] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.464575][   T60] usb 1-1: config 0 interface 0 has no altsetting 0
[  250.475579][   T60] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  250.479066][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.484354][   T60] usb 1-1: config 0 descriptor??
[  250.950273][   T60] cougar 0003:060B:500A.000A: usage count exceeds max: fixing up report descriptor
[  250.955709][   T60] cougar 0003:060B:500A.000A: unexpected long global item
[  250.959502][   T60] cougar 0003:060B:500A.000A: parse failed
[  250.962124][   T60] cougar 0003:060B:500A.000A: probe with driver cougar failed with error -22
[  251.145302][ T5896] usb 1-1: USB disconnect, device number 30
[  251.302376][T11724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2290'.
[  251.534969][T11714] syz.2.2286 (11714): drop_caches: 2
[  251.682953][T11733] loop2: detected capacity change from 0 to 2048
[  251.715797][T11733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.791103][T11733] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  251.804638][T11733] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[  251.811245][T11733] EXT4-fs (loop2): This should not happen!! Data will be lost
[  251.811245][T11733] 
[  251.815257][T11733] EXT4-fs (loop2): Total free blocks count 0
[  251.827477][T11733] EXT4-fs (loop2): Free/Dirty block details
[  251.833480][T11733] EXT4-fs (loop2): free_blocks=2415919504
[  251.839291][T11733] EXT4-fs (loop2): dirty_blocks=32
[  251.846145][T11733] EXT4-fs (loop2): Block reservation details
[  251.853883][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2296'.
[  251.857762][T11733] EXT4-fs (loop2): i_reserved_data_blocks=2
[  251.862648][T11741] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2296'.
[  251.949295][   T32] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  252.039311][T11743] loop2: detected capacity change from 0 to 128
[  252.050868][T11743] EXT4-fs: Mount option(s) incompatible with ext2
[  252.377982][ T5896] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  252.525960][ T5896] usb 1-1: Using ep0 maxpacket: 8
[  252.542248][ T5896] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  252.547888][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.553642][ T5896] usb 1-1: Product: syz
[  252.555709][ T5896] usb 1-1: Manufacturer: syz
[  252.557654][ T5896] usb 1-1: SerialNumber: syz
[  252.570516][ T5896] usb 1-1: config 0 descriptor??
[  252.586944][ T5896] usbtest 1-1:0.0: FX2 device
[  252.589116][ T5896] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  252.705912][ T5877] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  252.785846][ T5313] usb 1-1: USB disconnect, device number 31
[  252.829665][T11757] loop1: detected capacity change from 0 to 2048
[  252.832890][T11757] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  252.839867][T11757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  252.858492][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.862173][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.866564][ T5877] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  252.869849][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.873553][ T5877] usb 3-1: config 0 descriptor??
[  252.902255][T11759] loop1: detected capacity change from 0 to 256
[  252.909707][T11759] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001)
[  252.913229][T11759] exFAT-fs (loop1): failed to count the number of clusters in root
[  252.917950][T11759] exFAT-fs (loop1): failed to recognize exfat type
[  252.985102][T11763] bridge_slave_1: left allmulticast mode
[  252.988204][T11763] bridge_slave_1: left promiscuous mode
[  252.990231][T11763] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.001425][T11763] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  253.185088][T11771] block nbd1: Attempted send on invalid socket
[  253.188581][T11771] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.193079][T11771] block nbd1: Attempted send on invalid socket
[  253.195147][T11771] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.198490][T11771] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  253.201837][T11771] block nbd1: Attempted send on invalid socket
[  253.204525][T11771] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.207921][T11771] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  253.211781][T11771] block nbd1: Attempted send on invalid socket
[  253.213868][T11771] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.217498][T11771] block nbd1: Attempted send on invalid socket
[  253.219649][T11771] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.222755][T11771] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  253.226201][T11771] block nbd1: Attempted send on invalid socket
[  253.228324][T11771] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.231439][T11771] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  253.234955][T11771] block nbd1: Attempted send on invalid socket
[  253.237193][T11771] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.242214][   T11] block nbd1: Attempted send on invalid socket
[  253.244434][   T11] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.249765][T11771] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  253.253185][T11771] block nbd1: Attempted send on invalid socket
[  253.255363][T11771] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.260477][T11771] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  253.264059][T11771] block nbd1: Attempted send on invalid socket
[  253.266748][T11771] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.270019][T11771] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  253.273106][T11771] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  253.278100][T11771] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[  253.388212][T11778] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2314'.
[  253.423989][T11782] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  253.469510][T11785] loop0: detected capacity change from 0 to 512
[  253.472761][T11785] EXT4-fs: Ignoring removed nobh option
[  253.480374][T11785] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[  253.484568][T11785] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2317: invalid indirect mapped block 256 (level 1)
[  253.502295][T11785] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2317: invalid indirect mapped block 2683928664 (level 1)
[  253.509384][T11785] EXT4-fs (loop0): 1 truncate cleaned up
[  253.513279][T11785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.540149][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.694230][ T5877] hid-led 0003:0FC5:B080.000B: probe with driver hid-led failed with error -32
[  253.699985][ T5877] usb 3-1: USB disconnect, device number 39
[  253.764804][T11790] loop1: detected capacity change from 0 to 32768
[  253.767545][T11790] XFS: ikeep mount option is deprecated.
[  253.774157][T11790] XFS (loop1): Invalid superblock magic number
[  254.316715][T11804] loop1: detected capacity change from 0 to 64
[  254.328932][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2323'.
[  254.332677][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2323'.
[  255.182597][T11815] loop2: detected capacity change from 0 to 40427
[  255.206713][T11815] F2FS-fs (loop2): invalid crc value
[  255.339059][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.345517][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.396151][T11815] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  255.402600][T11815] F2FS-fs (loop2): Start checkpoint disabled!
[  255.408598][T11815] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  255.434077][T11815] syz.2.2327: attempt to access beyond end of device
[  255.434077][T11815] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  255.483512][   T32] kworker/u9:1: attempt to access beyond end of device
[  255.483512][   T32] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  255.490871][   T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  255.490885][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.490890][   T32] Workqueue: writeback wb_workfn (flush-7:2)
[  255.490905][   T32] Call Trace:
[  255.490909][   T32]  <TASK>
[  255.490929][   T32]  dump_stack_lvl+0x189/0x250
[  255.490944][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.490953][   T32]  ? __pfx_queue_work_on+0x10/0x10
[  255.490961][   T32]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  255.490972][   T32]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  255.490985][   T32]  f2fs_handle_critical_error+0x37c/0x540
[  255.491000][   T32]  f2fs_write_end_io+0x886/0xb60
[  255.491014][   T32]  __submit_merged_bio+0x27a/0x6a0
[  255.491026][   T32]  __submit_merged_write_cond+0x255/0x530
[  255.491038][   T32]  f2fs_write_data_pages+0x261d/0x3000
[  255.491061][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  255.491076][   T32]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  255.491097][   T32]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  255.491106][   T32]  ? look_up_lock_class+0x74/0x170
[  255.491120][   T32]  ? trace_f2fs_writepages+0x7f/0x200
[  255.491129][   T32]  ? f2fs_write_node_pages+0x478/0x6e0
[  255.491147][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  255.491157][   T32]  do_writepages+0x32e/0x550
[  255.491170][   T32]  ? reacquire_held_locks+0x127/0x1d0
[  255.491177][   T32]  ? writeback_sb_inodes+0x384/0x1010
[  255.491189][   T32]  __writeback_single_inode+0x145/0xff0
[  255.491198][   T32]  ? do_raw_spin_unlock+0x4d/0x240
[  255.491208][   T32]  writeback_sb_inodes+0x6c7/0x1010
[  255.491216][   T32]  ? finish_task_switch+0x26b/0x950
[  255.491234][   T32]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  255.491259][   T32]  ? rcu_is_watching+0x15/0xb0
[  255.491270][   T32]  wb_writeback+0x43b/0xaf0
[  255.491281][   T32]  ? queue_io+0x361/0x590
[  255.491291][   T32]  ? __pfx_wb_writeback+0x10/0x10
[  255.491303][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  255.491313][   T32]  wb_workfn+0x409/0xef0
[  255.491326][   T32]  ? __pfx_wb_workfn+0x10/0x10
[  255.491335][   T32]  ? __lock_acquire+0xab9/0xd20
[  255.491348][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  255.491358][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  255.491365][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  255.491371][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  255.491378][   T32]  process_scheduled_works+0xae1/0x17b0
[  255.491396][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  255.491409][   T32]  worker_thread+0x8a0/0xda0
[  255.491426][   T32]  kthread+0x711/0x8a0
[  255.491436][   T32]  ? __pfx_worker_thread+0x10/0x10
[  255.491443][   T32]  ? __pfx_kthread+0x10/0x10
[  255.491452][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  255.491460][   T32]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.491468][   T32]  ? __pfx_kthread+0x10/0x10
[  255.491477][   T32]  ret_from_fork+0x3fc/0x770
[  255.491485][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  255.491495][   T32]  ? __switch_to_asm+0x39/0x70
[  255.491503][   T32]  ? __switch_to_asm+0x33/0x70
[  255.491510][   T32]  ? __pfx_kthread+0x10/0x10
[  255.491519][   T32]  ret_from_fork_asm+0x1a/0x30
[  255.491534][   T32]  </TASK>
[  255.491583][   T32] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  256.246150][   T51] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  256.411082][   T51] usb 2-1: config 0 has no interfaces?
[  256.418087][   T51] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  256.421775][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  256.425044][   T51] usb 2-1: SerialNumber: syz
[  256.431249][   T51] usb 2-1: config 0 descriptor??
[  256.644545][T11825] IPVS: length: 24 != 3277873272
[  256.656183][   T51] usb 2-1: USB disconnect, device number 29
[  256.883483][T11830] loop0: detected capacity change from 0 to 32768
[  256.907640][T11830] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 75 has an invalid extent (next_free_rec 32, count 19)
[  256.915153][T11830] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  256.919325][T11830] OCFS2: File system is now read-only.
[  256.921951][T11830] (syz.0.2332,11830,1):ocfs2_get_clusters:634 ERROR: status = -30
[  256.925293][T11830] (syz.0.2332,11830,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  256.929139][T11830] (syz.0.2332,11830,1):ocfs2_bmap:469 ERROR: get_blocks() failed, block = 0
[  256.932444][T11830] (syz.0.2332,11830,1):ocfs2_bmap:470 ERROR: status = -30
[  256.935106][T11830] jbd2_journal_init_inode: Cannot locate journal superblock
[  256.938366][T11830] (syz.0.2332,11830,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  256.942391][T11830] (syz.0.2332,11830,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  256.946350][T11830] (syz.0.2332,11830,1):ocfs2_check_volume:2432 ERROR: status = -22
[  256.949462][T11830] (syz.0.2332,11830,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  256.960555][T11830] (syz.0.2332,11830,1):ocfs2_fill_super:1177 ERROR: status = -22
[  257.213350][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'.
[  257.220083][T11833] veth1_macvtap: left promiscuous mode
[  257.280433][T11835] loop1: detected capacity change from 0 to 512
[  257.309848][T11835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.328194][T11835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.537976][T11846] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2337'.
[  257.544474][T11846] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2337'.
[  257.555475][T11846] netlink: 'syz.0.2337': attribute type 5 has an invalid length.
[  257.575796][T11846] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2337'.
[  257.945744][   T60] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  258.117915][T11847] syz.2.2338 (11847): drop_caches: 2
[  258.124931][T11847] syz.2.2338 (11847): drop_caches: 2
[  258.133707][   T60] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  258.139014][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.144608][   T60] usb 1-1: config 0 descriptor??
[  258.150335][   T60] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  258.860850][T11865] loop1: detected capacity change from 0 to 1024
[  258.882826][T11865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.894920][T11865] ext4 filesystem being mounted at /768/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.948270][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.463421][   T60] usb 1-1: USB disconnect, device number 32
[  259.513634][T11899] loop1: detected capacity change from 0 to 128
[  259.522147][T11899] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  259.529682][T11899] ext4 filesystem being mounted at /779/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  259.560754][ T5842] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  259.675188][T11912] libceph: resolve 'R' (ret=-3): failed
[  259.827934][ T5313] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  259.995676][ T5313] usb 3-1: Using ep0 maxpacket: 8
[  260.000114][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  260.006670][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  260.013241][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  260.021750][ T5313] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[  260.026466][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.030231][ T5313] usb 3-1: Product: syz
[  260.035198][ T5313] usb 3-1: Manufacturer: syz
[  260.037504][ T5313] usb 3-1: SerialNumber: syz
[  260.041999][ T5313] usb 3-1: config 0 descriptor??
[  260.057996][ T5313] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8
[  260.264785][ T5313] usb 3-1: USB disconnect, device number 40
[  260.367598][T11935] loop0: detected capacity change from 0 to 32768
[  260.481469][T11935] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  260.481489][T11935]   allowing incompatible features above 0.0: (unknown version)
[  260.481498][T11935]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  260.537654][T11935] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  260.541266][T11935] bcachefs (loop0): initializing new filesystem
[  260.563908][T11935] bcachefs (loop0): going read-write
[  260.580908][T11935] bcachefs (loop0): marking superblocks
[  260.631632][T11935] bcachefs (loop0): initializing freespace
[  260.646998][T11935] bcachefs (loop0): done initializing freespace
[  260.669060][T11935] bcachefs (loop0): reading snapshots table
[  260.674949][T11935] bcachefs (loop0): reading snapshots done
[  260.719449][T11935] bcachefs (loop0): done starting filesystem
[  260.759877][T11935] bcachefs (loop0): requested incompat feature 1.27: fast_device_removal currently not enabled, allowed up to 1.27: fast_device_removal
[  260.759877][T11935]   set version_upgrade=incompat to enable
[  260.766975][T11935] bcachefs (loop0): Cannot remove without losing data
[  260.809394][ T5846] bcachefs (loop0): shutting down
[  260.822241][ T5846] bcachefs (loop0): going read-only
[  260.824415][ T5846] bcachefs (loop0): finished waiting for writes to stop
[  260.831357][ T5846] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  260.923821][ T5846] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  260.933956][ T5846] bcachefs (loop0): clean shutdown complete, journal seq 4
[  260.944428][ T5846] bcachefs (loop0): marking filesystem clean
[  260.988743][ T5846] bcachefs (loop0): shutdown complete
[  261.748331][T11968] netlink: 'syz.1.2387': attribute type 29 has an invalid length.
[  261.798557][T11970] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2388'.
[  262.111039][T11985] loop1: detected capacity change from 0 to 16
[  262.135103][T11985] erofs (device loop1): mounted with root inode @ nid 36.
[  262.151873][T11985] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  262.166259][T11985] erofs (device loop1): failed to decompress -46 in[60, 4036] out[1851]
[  262.173914][T11985] erofs (device loop1): read error -117 @ 43 of nid 36
[  263.016582][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.021338][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.404377][T12016] loop0: detected capacity change from 0 to 2048
[  263.425840][T12016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  263.654042][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'.
[  263.704090][T12018] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  263.760414][T12020] netlink: 'syz.1.2406': attribute type 8 has an invalid length.
[  264.056334][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.059877][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.613058][T12053] netlink: 'syz.1.2422': attribute type 1 has an invalid length.
[  264.699493][T12053] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2422'.
[  264.702608][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2422'.
[  264.897515][T12062] tmpfs: Unknown parameter 'no'
[  265.193151][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.196277][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.225977][ T5313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.275322][T12068] loop1: detected capacity change from 0 to 1024
[  265.301328][T12068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  265.308643][T12068] ext4 filesystem being mounted at /808/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.315295][   T33] kauditd_printk_skb: 21 callbacks suppressed
[  265.315304][   T33] audit: type=1800 audit(1756334935.216:333): pid=12068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2427" name="file1" dev="loop1" ino=15 res=0 errno=0
[  265.331839][T12068] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2427: lblock 3 mapped to illegal pblock 3 (length 3)
[  265.341652][T12068] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  265.347202][T12068] EXT4-fs (loop1): This should not happen!! Data will be lost
[  265.347202][T12068] 
[  265.361983][T12068] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm syz.1.2427: lblock 8 mapped to illegal pblock 8 (length 8)
[  265.373065][T12068] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  265.379532][T12068] EXT4-fs (loop1): This should not happen!! Data will be lost
[  265.379532][T12068] 
[  265.398746][T12068] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  265.407754][T12068] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  265.414855][T12068] EXT4-fs (loop1): This should not happen!! Data will be lost
[  265.414855][T12068] 
[  265.419453][T12068] EXT4-fs (loop1): Total free blocks count 0
[  265.421767][T12068] EXT4-fs (loop1): Free/Dirty block details
[  265.424372][T12068] EXT4-fs (loop1): free_blocks=4293918720
[  265.443698][T12068] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.2427: lblock 0 mapped to illegal pblock 0 (length 3)
[  265.485852][ T1091] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 7: comm kworker/u10:5: lblock 7 mapped to illegal pblock 7 (length 1)
[  265.487417][T12077] vxcan0: tx drop: invalid da for name 0x0000000080000001
[  266.015905][T12113] Bluetooth: MGMT ver 1.23
[  266.215927][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.219460][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.406330][   T60] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  266.544295][T12134] loop0: detected capacity change from 0 to 4096
[  266.550470][T12134] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  266.558029][   T60] usb 3-1: unable to get BOS descriptor or descriptor too short
[  266.562107][   T60] usb 3-1: not running at top speed; connect to a high speed hub
[  266.563227][T12134] ntfs3(loop0): ino=1a, mi_enum_attr
[  266.567704][T12134] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  266.569106][   T60] usb 3-1: config 4 has an invalid interface number: 32 but max is 0
[  266.574001][   T60] usb 3-1: config 4 has no interface number 0
[  266.579790][   T60] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  266.583595][   T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.589955][   T60] usb 3-1: Product: syz
[  266.591922][   T60] usb 3-1: Manufacturer: syz
[  266.593997][   T60] usb 3-1: SerialNumber: syz
[  266.612909][T12134] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_sync_inode failed, -22.
[  266.639909][   T26] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22.
[  266.810988][   T60] usb 3-1: Found UVC 0.02 device syz (17dc:0202)
[  266.813666][   T60] usb 3-1: No valid video chain found.
[  266.819119][   T60] usb 3-1: USB disconnect, device number 41
[  266.889840][T12136] loop0: detected capacity change from 0 to 32768
[  266.893141][T12136] XFS: ikeep mount option is deprecated.
[  266.895507][T12136] XFS: ikeep mount option is deprecated.
[  266.897666][T12136] XFS: noikeep mount option is deprecated.
[  266.903863][T12136] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  266.929583][T12136] XFS (loop0): Ending clean mount
[  266.944895][   T33] audit: type=1800 audit(1756334936.846:334): pid=12136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2458" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  266.994644][ T5846] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  267.316828][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.445541][T12163] nfs: Unknown parameter ''
[  267.773310][T12167] delete_channel: no stack
[  268.196201][T12176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2472'.
[  268.200546][T12176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2472'.
[  268.295979][   T60] net_ratelimit: 1 callbacks suppressed
[  268.295995][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.376337][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.379940][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.484652][   T33] audit: type=1326 audit(1756334938.386:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.2.2468" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906b18ebe9 code=0x7fc00000
[  268.576168][ T6039] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  268.635611][ T5896] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  268.728665][ T6039] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[  268.732479][ T6039] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204
[  268.736649][ T6039] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.741062][ T6039] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.745005][ T6039] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  268.750615][ T6039] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  268.754317][ T6039] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.760183][ T6039] usb 2-1: config 0 descriptor??
[  268.785781][ T5896] usb 1-1: Using ep0 maxpacket: 16
[  268.791223][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short
[  268.796306][ T5896] usb 1-1: config 9 has an invalid interface number: 48 but max is 0
[  268.799888][ T5896] usb 1-1: config 9 has no interface number 0
[  268.802579][ T5896] usb 1-1: config 9 interface 48 has no altsetting 0
[  268.807088][T12202] loop2: detected capacity change from 0 to 4096
[  268.808875][ T5896] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b
[  268.813483][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.817233][ T5896] usb 1-1: Product: syz
[  268.819072][ T5896] usb 1-1: Manufacturer: syz
[  268.821116][ T5896] usb 1-1: SerialNumber: syz
[  268.936654][T12206] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2487'.
[  268.940624][T12206] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2487'.
[  268.944328][T12206] netlink: 'syz.2.2487': attribute type 6 has an invalid length.
[  268.948568][T12206] netlink: 'syz.2.2487': attribute type 5 has an invalid length.
[  268.951534][T12206] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2487'.
[  269.029232][T12210] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  269.049401][ T5896] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  269.069530][T12212] loop2: detected capacity change from 0 to 256
[  269.074434][T12212] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  269.175294][ T6039] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.000C/input/input16
[  269.256456][ T6039] uclogic 0003:28BD:0909.000C: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0
[  269.287198][   T33] audit: type=1326 audit(1756334939.196:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.2492" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f906b18ebe9 code=0x0
[  269.415733][T10215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.419241][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.433612][T12182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.440616][T12182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.450230][ T5313] usb 2-1: USB disconnect, device number 30
[  269.453525][ T5896] gspca_vc032x: reg_w err -71
[  269.455603][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.457879][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.460864][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.463157][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.465402][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.468758][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.471435][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.474169][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.477311][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.480777][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.483374][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.486190][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.488694][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.491447][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.493914][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.496888][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.499111][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.501337][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.504205][ T5896] gspca_vc032x: I2c Bus Busy Wait 00
[  269.506497][ T5896] gspca_vc032x: Unknown sensor...
[  269.508597][ T5896] vc032x 1-1:9.48: probe with driver vc032x failed with error -22
[  269.513259][ T5896] usb 1-1: USB disconnect, device number 33
[  270.247405][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2499'.
[  270.459539][T10215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.462320][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.134733][T12242] loop0: detected capacity change from 0 to 8
[  271.148340][T12242] SQUASHFS error: lzo decompression failed, data probably corrupt
[  271.151608][T12242] SQUASHFS error: Failed to read block 0x28d: -5
[  271.154245][T12242] SQUASHFS error: Unable to read metadata cache entry [28b]
[  271.157400][T12242] SQUASHFS error: Unable to read inode 0x11f
[  271.348823][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.501292][T10215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.555863][T12248] loop0: detected capacity change from 0 to 256
[  271.562523][T12248] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  271.566620][T12248] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  271.579199][T12248] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  271.623003][T12248] exFAT-fs (loop0): abnormal access to deleted dentry
[  272.371104][T12252] loop0: detected capacity change from 0 to 40427
[  272.374199][T12252] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  272.377181][T12252] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  272.380352][T12252] F2FS-fs (loop0): build fault injection type: 0x0
[  272.385543][T12252] F2FS-fs (loop0): invalid crc value
[  272.414244][T12252] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  272.419257][T12252] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  272.421729][T12252] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  272.427996][T12252] F2FS-fs (loop0): build fault injection type: 0x0
[  272.643549][T12268] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  272.677908][T12272] loop0: detected capacity change from 0 to 256
[  272.693290][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2516'.
[  272.893893][T12276] loop0: detected capacity change from 0 to 32768
[  272.913531][T12280] loop1: detected capacity change from 0 to 32768
[  272.916663][T12280] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2519 (12280)
[  272.932473][T12280] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  272.936334][T12280] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  272.995685][T12296] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  272.995685][T12296] The task syz.2.2520 (12296) triggered the difference, watch for misbehavior.
[  273.003279][T12280] BTRFS info (device loop1): setting nodatasum
[  273.006144][T12280] BTRFS info (device loop1): setting nodatacow
[  273.008910][T12280] BTRFS info (device loop1): enabling free space tree
[  273.011992][T12280] BTRFS info (device loop1): enabling auto defrag
[  273.018996][T12280] BTRFS info (device loop1): max_inline set to 0
[  273.037121][   T33] audit: type=1800 audit(1756334942.946:337): pid=12280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2519" name="bus" dev="loop1" ino=263 res=0 errno=0
[  273.074560][T12302] loop0: detected capacity change from 0 to 1024
[  273.093360][T12302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.102406][ T5842] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.247938][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.353081][T12314] loop1: detected capacity change from 0 to 512
[  273.371835][T12314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.377341][T12314] ext4 filesystem being mounted at /848/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  273.397661][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.575976][T10215] net_ratelimit: 3 callbacks suppressed
[  273.575993][T10215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.581957][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.735752][ T5877] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  273.885789][ T5877] usb 2-1: Using ep0 maxpacket: 16
[  273.891350][ T5877] usb 2-1: config 252 has an invalid interface number: 165 but max is 0
[  273.895124][ T5877] usb 2-1: config 252 has no interface number 0
[  273.901974][ T5877] usb 2-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd
[  273.908691][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.917682][ T5877] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[  273.922047][ T5877] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  274.125939][T10215] usb 2-1: USB disconnect, device number 31
[  274.375920][ T5313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.425632][ T5896] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  274.507582][T12356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.584360][ T5896] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  274.588927][ T5896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  274.592317][ T5896] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.602848][ T5896] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  274.607646][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.610780][ T5896] usb 3-1: Product: syz
[  274.612487][ T5896] usb 3-1: Manufacturer: syz
[  274.614316][ T5896] usb 3-1: SerialNumber: syz
[  274.616638][T10215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.619981][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.627477][ T5896] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  274.630160][ T5896] cdc_ncm 3-1:1.0: bind() failure
[  274.898762][ T5877] usb 3-1: USB disconnect, device number 42
[  275.008653][T12374] loop0: detected capacity change from 0 to 128
[  275.126415][T12375] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  275.135941][T12373] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  275.790872][T12377] loop2: detected capacity change from 0 to 40427
[  275.824180][T12377] F2FS-fs (loop2): invalid crc value
[  275.870629][T12377] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  275.875354][T12377] F2FS-fs (loop2): Start checkpoint disabled!
[  275.882114][T12377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  275.893535][T10215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.896770][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.971209][T12384] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  275.989178][T12384] syz.2.2554: attempt to access beyond end of device
[  275.989178][T12384] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  276.245772][T10215] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  276.405552][T10215] usb 1-1: Using ep0 maxpacket: 8
[  276.412535][T10215] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  276.417398][T10215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.421530][T10215] usb 1-1: Product: syz
[  276.423443][T10215] usb 1-1: Manufacturer: syz
[  276.428222][   T84] kworker/u10:3: attempt to access beyond end of device
[  276.428222][   T84] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  276.434073][T10215] usb 1-1: SerialNumber: syz
[  276.435640][   T84] CPU: 0 UID: 0 PID: 84 Comm: kworker/u10:3 Not tainted syzkaller #0 PREEMPT(full) 
[  276.435656][   T84] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.435663][   T84] Workqueue: writeback wb_workfn (flush-7:2)
[  276.435683][   T84] Call Trace:
[  276.435688][   T84]  <TASK>
[  276.435694][   T84]  dump_stack_lvl+0x189/0x250
[  276.435744][   T84]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.435756][   T84]  ? __pfx_queue_work_on+0x10/0x10
[  276.435768][   T84]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  276.435784][   T84]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  276.435807][   T84]  f2fs_handle_critical_error+0x37c/0x540
[  276.435827][   T84]  f2fs_write_end_io+0x886/0xb60
[  276.435851][   T84]  __submit_merged_bio+0x27a/0x6a0
[  276.435871][   T84]  __submit_merged_write_cond+0x255/0x530
[  276.435892][   T84]  f2fs_write_data_pages+0x261d/0x3000
[  276.435929][   T84]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.435998][   T84]  ? f2fs_write_meta_pages+0x357/0x450
[  276.436021][   T84]  ? __lock_acquire+0xab9/0xd20
[  276.436038][   T84]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.436055][   T84]  do_writepages+0x32e/0x550
[  276.436074][   T84]  ? reacquire_held_locks+0x127/0x1d0
[  276.436086][   T84]  ? writeback_sb_inodes+0x384/0x1010
[  276.436105][   T84]  __writeback_single_inode+0x145/0xff0
[  276.436118][   T84]  ? do_raw_spin_unlock+0x4d/0x240
[  276.436133][   T84]  writeback_sb_inodes+0x6c7/0x1010
[  276.436166][   T84]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  276.436208][   T84]  ? rcu_is_watching+0x15/0xb0
[  276.436228][   T84]  wb_writeback+0x43b/0xaf0
[  276.436248][   T84]  ? queue_io+0x361/0x590
[  276.436264][   T84]  ? __pfx_wb_writeback+0x10/0x10
[  276.436282][   T84]  ? _raw_spin_unlock_irq+0x23/0x50
[  276.436300][   T84]  wb_workfn+0x409/0xef0
[  276.436323][   T84]  ? __pfx_wb_workfn+0x10/0x10
[  276.436339][   T84]  ? __lock_acquire+0xab9/0xd20
[  276.436360][   T84]  ? process_scheduled_works+0x9ef/0x17b0
[  276.436374][   T84]  ? _raw_spin_unlock_irq+0x23/0x50
[  276.436388][   T84]  ? process_scheduled_works+0x9ef/0x17b0
[  276.436397][   T84]  ? process_scheduled_works+0x9ef/0x17b0
[  276.436409][   T84]  process_scheduled_works+0xae1/0x17b0
[  276.436441][   T84]  ? __pfx_process_scheduled_works+0x10/0x10
[  276.436463][   T84]  worker_thread+0x8a0/0xda0
[  276.436492][   T84]  kthread+0x711/0x8a0
[  276.436511][   T84]  ? __pfx_worker_thread+0x10/0x10
[  276.436522][   T84]  ? __pfx_kthread+0x10/0x10
[  276.436535][   T84]  ? _raw_spin_unlock_irq+0x23/0x50
[  276.436548][   T84]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.436563][   T84]  ? __pfx_kthread+0x10/0x10
[  276.436576][   T84]  ret_from_fork+0x3fc/0x770
[  276.436591][   T84]  ? __pfx_ret_from_fork+0x10/0x10
[  276.436607][   T84]  ? __switch_to_asm+0x39/0x70
[  276.436619][   T84]  ? __switch_to_asm+0x33/0x70
[  276.436630][   T84]  ? __pfx_kthread+0x10/0x10
[  276.436644][   T84]  ret_from_fork_asm+0x1a/0x30
[  276.436669][   T84]  </TASK>
[  276.436674][   T84] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  276.445724][T10215] usb 1-1: config 0 descriptor??
[  276.451953][   T84] CPU: 0 UID: 0 PID: 84 Comm: kworker/u10:3 Not tainted syzkaller #0 PREEMPT(full) 
[  276.451972][   T84] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.451980][   T84] Workqueue: writeback wb_workfn (flush-7:2)
[  276.451999][   T84] Call Trace:
[  276.452004][   T84]  <TASK>
[  276.452010][   T84]  dump_stack_lvl+0x189/0x250
[  276.452030][   T84]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.452044][   T84]  ? __pfx_queue_work_on+0x10/0x10
[  276.452055][   T84]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  276.452072][   T84]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  276.452095][   T84]  f2fs_handle_critical_error+0x37c/0x540
[  276.452117][   T84]  f2fs_write_end_io+0x886/0xb60
[  276.452143][   T84]  __submit_merged_bio+0x27a/0x6a0
[  276.452164][   T84]  __submit_merged_write_cond+0x255/0x530
[  276.452184][   T84]  f2fs_write_data_pages+0x261d/0x3000
[  276.452229][   T84]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.452308][   T84]  ? f2fs_write_meta_pages+0x357/0x450
[  276.452334][   T84]  ? __lock_acquire+0xab9/0xd20
[  276.452355][   T84]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.452371][   T84]  do_writepages+0x32e/0x550
[  276.452390][   T84]  ? reacquire_held_locks+0x127/0x1d0
[  276.452402][   T84]  ? writeback_sb_inodes+0x384/0x1010
[  276.452422][   T84]  __writeback_single_inode+0x145/0xff0
[  276.452438][   T84]  ? do_raw_spin_unlock+0x4d/0x240
[  276.452455][   T84]  writeback_sb_inodes+0x6c7/0x1010
[  276.452489][   T84]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  276.452538][   T84]  ? rcu_is_watching+0x15/0xb0
[  276.452558][   T84]  wb_writeback+0x43b/0xaf0
[  276.452580][   T84]  ? queue_io+0x361/0x590
[  276.452595][   T84]  ? __pfx_wb_writeback+0x10/0x10
[  276.452617][   T84]  ? _raw_spin_unlock_irq+0x23/0x50
[  276.452635][   T84]  wb_workfn+0x409/0xef0
[  276.452661][   T84]  ? __pfx_wb_workfn+0x10/0x10
[  276.452679][   T84]  ? __lock_acquire+0xab9/0xd20
[  276.452728][   T84]  ? process_scheduled_works+0x9ef/0x17b0
[  276.452752][   T84]  ? _raw_spin_unlock_irq+0x23/0x50
[  276.452764][   T84]  ? process_scheduled_works+0x9ef/0x17b0
[  276.452774][   T84]  ? process_scheduled_works+0x9ef/0x17b0
[  276.452788][   T84]  process_scheduled_works+0xae1/0x17b0
[  276.452823][   T84]  ? __pfx_process_scheduled_works+0x10/0x10
[  276.452849][   T84]  worker_thread+0x8a0/0xda0
[  276.452883][   T84]  kthread+0x711/0x8a0
[  276.452901][   T84]  ? __pfx_worker_thread+0x10/0x10
[  276.452912][   T84]  ? __pfx_kthread+0x10/0x10
[  276.452928][   T84]  ? _raw_spin_unlock_irq+0x23/0x50
[  276.452941][   T84]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.452957][   T84]  ? __pfx_kthread+0x10/0x10
[  276.452971][   T84]  ret_from_fork+0x3fc/0x770
[  276.452986][   T84]  ? __pfx_ret_from_fork+0x10/0x10
[  276.453003][   T84]  ? __switch_to_asm+0x39/0x70
[  276.453016][   T84]  ? __switch_to_asm+0x33/0x70
[  276.453029][   T84]  ? __pfx_kthread+0x10/0x10
[  276.453043][   T84]  ret_from_fork_asm+0x1a/0x30
[  276.453070][   T84]  </TASK>
[  276.453075][   T84] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  276.463350][T10215] usb 1-1: selecting invalid altsetting 3
[  276.681292][T10215] comedi comedi5: could not set alternate setting 3 in high speed
[  276.684198][T10215] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device.
[  276.689296][T10215] usbdux 1-1:0.0: probe with driver usbdux failed with error -22
[  276.693589][T10215] usb 1-1: USB disconnect, device number 34
[  276.909382][T12402] loop1: detected capacity change from 0 to 4096
[  276.917382][T12402] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  276.944431][T12402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.951282][T10215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.962259][T12402] EXT4-fs (loop1): shut down requested (2)
[  276.993925][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.024680][T12409] loop2: detected capacity change from 0 to 1024
[  277.049513][T12409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.060555][T12409] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.2568: missing EA_INODE flag
[  277.070353][T12409] EXT4-fs (loop2): Remounting filesystem read-only
[  277.084347][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.145872][T12417] loop1: detected capacity change from 0 to 4096
[  277.152877][T12417] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  277.158417][T12417] ntfs3(loop1): ino=0, mi_enum_attr
[  277.163613][T12417] ntfs3(loop1): volume is dirty and "force" flag is not set!
[  277.243619][T12431] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  277.253744][T12431] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  277.262065][T12431] overlayfs: missing 'lowerdir'
[  277.621166][T12440] loop2: detected capacity change from 0 to 40427
[  277.625335][T12440] F2FS-fs (loop2): build fault injection rate: 14
[  277.628058][T12440] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  277.632425][T12440] F2FS-fs (loop2): invalid crc value
[  277.637598][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  277.647565][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  277.699177][T12440] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  277.702758][T12440] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  277.709486][T12440] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  277.720022][T12440] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  277.726590][T12440] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  277.731892][T12440] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  277.742147][T12440] syz.2.2580: attempt to access beyond end of device
[  277.742147][T12440] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  277.748437][T12440] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of f2fs_mpage_readpages+0x18df/0x1ac0
[  277.753226][T12440] syz.2.2580: attempt to access beyond end of device
[  277.753226][T12440] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  277.769770][T12440] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of __f2fs_tmpfile+0x77/0x360
[  277.775176][T12440] overlayfs: upper fs does not support tmpfile.
[  277.782194][T12440] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  277.813931][ T5850] F2FS-fs (loop2): inconsistent node block, node_type:0, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  277.828225][ T5850] syz-executor: attempt to access beyond end of device
[  277.828225][ T5850] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  277.833761][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  277.833775][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  277.833781][ T5850] Call Trace:
[  277.833786][ T5850]  <TASK>
[  277.833790][ T5850]  dump_stack_lvl+0x189/0x250
[  277.833809][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.833821][ T5850]  ? __pfx_queue_work_on+0x10/0x10
[  277.833832][ T5850]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  277.833845][ T5850]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  277.833866][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[  277.833886][ T5850]  f2fs_write_end_io+0x886/0xb60
[  277.833909][ T5850]  __submit_merged_bio+0x27a/0x6a0
[  277.833928][ T5850]  __submit_merged_write_cond+0x255/0x530
[  277.833946][ T5850]  f2fs_write_data_pages+0x261d/0x3000
[  277.833986][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  277.834012][ T5850]  ? is_bpf_text_address+0x26/0x2b0
[  277.834052][ T5850]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  277.834065][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.834096][ T5850]  ? __lock_acquire+0xab9/0xd20
[  277.834122][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  277.834138][ T5850]  do_writepages+0x32e/0x550
[  277.834160][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  277.834175][ T5850]  filemap_fdatawrite+0x199/0x240
[  277.834189][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  277.834237][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  277.834252][ T5850]  f2fs_sync_dirty_inodes+0x31f/0x830
[  277.834274][ T5850]  f2fs_write_checkpoint+0x95a/0x1df0
[  277.834302][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  277.834348][ T5850]  ? kill_f2fs_super+0x298/0x6c0
[  277.834362][ T5850]  kill_f2fs_super+0x2c3/0x6c0
[  277.834377][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[  277.834385][ T5850]  ? radix_tree_delete_item+0x2b6/0x400
[  277.834404][ T5850]  ? shrinker_free+0x2ce/0x3e0
[  277.834417][ T5850]  deactivate_locked_super+0xbc/0x130
[  277.834431][ T5850]  cleanup_mnt+0x425/0x4c0
[  277.834442][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.834458][ T5850]  task_work_run+0x1d4/0x260
[  277.834473][ T5850]  ? __pfx_task_work_run+0x10/0x10
[  277.834484][ T5850]  ? __x64_sys_umount+0x122/0x160
[  277.834501][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[  277.834518][ T5850]  exit_to_user_mode_loop+0xec/0x110
[  277.834532][ T5850]  do_syscall_64+0x2bd/0x3b0
[  277.834546][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.834558][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.834568][ T5850]  ? exc_page_fault+0x9f/0xf0
[  277.834583][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.834592][ T5850] RIP: 0033:0x7f906b18ff17
[  277.834602][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  277.834610][ T5850] RSP: 002b:00007ffea69caae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  277.834622][ T5850] RAX: 0000000000000000 RBX: 00007f906b211c05 RCX: 00007f906b18ff17
[  277.834629][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea69caba0
[  277.834635][ T5850] RBP: 00007ffea69caba0 R08: 0000000000000000 R09: 0000000000000000
[  277.834641][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea69cbc30
[  277.834647][ T5850] R13: 00007f906b211c05 R14: 0000000000043cb3 R15: 00007ffea69cbc70
[  277.834667][ T5850]  </TASK>
[  277.834672][ T5850] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  278.384066][T12456] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2586'.
[  278.430130][T12458] libceph: resolve '400' (ret=-3): failed
[  278.435871][T12448] loop2: detected capacity change from 0 to 32768
[  278.457734][T12448] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  278.471204][T12448] XFS (loop2): Ending clean mount
[  278.479968][   T33] audit: type=1800 audit(1756334948.386:338): pid=12448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2581" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  278.502017][T12448] Direct I/O collision with buffered writes! File: /file1 Comm: syz.2.2581
[  278.540081][ T5850] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  279.027765][ T6039] net_ratelimit: 4 callbacks suppressed
[  279.027782][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.033523][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.110595][T12475] loop2: detected capacity change from 0 to 16
[  279.113978][T12475] erofs (device loop2): mounted with root inode @ nid 36.
[  279.121740][T12475] syz.2.2590: attempt to access beyond end of device
[  279.121740][T12475] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16
[  279.134196][T12475] syz.2.2590: attempt to access beyond end of device
[  279.134196][T12475] loop2: rw=524288, sector=40, nr_sectors = 64 limit=16
[  279.141197][T12475] syz.2.2590: attempt to access beyond end of device
[  279.141197][T12475] loop2: rw=0, sector=16, nr_sectors = 8 limit=16
[  279.147727][   T33] audit: type=1800 audit(1756334949.056:339): pid=12475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2590" name="file2" dev="loop2" ino=89 res=0 errno=0
[  279.421314][T12496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.425506][T12496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.429294][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  279.751272][T12526] loop2: detected capacity change from 0 to 512
[  279.755166][T12526] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  279.763664][T12526] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  279.810778][T12528] loop2: detected capacity change from 0 to 1024
[  279.820992][T12528] hfsplus: bad catalog entry type
[  279.840585][   T84] hfsplus: b-tree write err: -5, ino 4
[  279.915689][   T60] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  280.055889][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.059209][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.067597][   T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  280.072450][   T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.076774][   T60] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  280.080821][   T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.086479][   T60] usb 1-1: config 0 descriptor??
[  280.175528][ T5877] usb 3-1: new low-speed USB device number 43 using dummy_hcd
[  280.328790][ T5877] usb 3-1: config 4 has an invalid interface number: 19 but max is 0
[  280.332474][ T5877] usb 3-1: config 4 has no interface number 0
[  280.335276][ T5877] usb 3-1: config 4 interface 19 altsetting 8 endpoint 0x5 is Bulk; changing to Interrupt
[  280.339735][ T5877] usb 3-1: config 4 interface 19 has no altsetting 0
[  280.342776][ T5877] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff42, bcdDevice=b8.2c
[  280.346720][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.352257][T12534] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  280.500014][   T60] uclogic 0003:145F:0212.000D: interface is invalid, ignoring
[  280.560445][ T5877] usb 3-1: string descriptor 0 read error: -71
[  280.564000][ T5877] option 3-1:4.19: GSM modem (1-port) converter detected
[  280.572097][ T5877] usb 3-1: USB disconnect, device number 43
[  280.578206][ T5877] option 3-1:4.19: device disconnected
[  280.698504][   T60] usb 1-1: USB disconnect, device number 35
[  281.118626][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.136984][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.140065][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.405763][   T60] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  281.595557][   T60] usb 3-1: Using ep0 maxpacket: 16
[  281.601485][   T60] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30
[  281.608152][   T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.611889][   T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  281.623596][   T60] usb 3-1: New USB device found, idVendor=1e71, idProduct=2006, bcdDevice= 0.00
[  281.628954][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.634348][   T60] usb 3-1: config 0 descriptor??
[  281.648801][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'.
[  281.653204][T12572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2636'.
[  281.680772][T12564] loop0: detected capacity change from 0 to 32768
[  281.685279][T12564] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2632 (12564)
[  281.691795][T12564] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  281.695151][T12564] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  281.698732][T12564] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  281.748026][T12564] BTRFS info (device loop0): rebuilding free space tree
[  281.757841][T12564] BTRFS info (device loop0): disabling free space tree
[  281.760271][T12564] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  281.763540][T12564] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  281.773846][T12564] BTRFS info (device loop0): setting nodatasum
[  281.777245][T12564] BTRFS info (device loop0): setting nodatacow
[  281.779611][T12564] BTRFS info (device loop0): enabling ssd optimizations
[  281.782475][T12564] BTRFS info (device loop0): turning off barriers
[  281.785089][T12564] BTRFS info (device loop0): turning on flush-on-commit
[  281.787968][T12564] BTRFS info (device loop0): enabling disk space caching
[  281.790782][T12564] BTRFS info (device loop0): force clearing of disk cache
[  281.793643][T12564] BTRFS info (device loop0): doing ref verification
[  281.796638][T12564] BTRFS info (device loop0): max_inline set to 4096
[  281.846237][   T33] audit: type=1800 audit(1756334951.756:340): pid=12564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2632" name="file1" dev="loop0" ino=264 res=0 errno=0
[  282.053951][   T60] nzxt-smart2 0003:1E71:2006.000E: item fetching failed at offset 10/11
[  282.065811][   T60] nzxt-smart2 0003:1E71:2006.000E: probe with driver nzxt-smart2 failed with error -22
[  282.070798][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'.
[  282.248549][   T60] usb 3-1: USB disconnect, device number 44
[  282.656450][ T5846] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.889177][T12625] loop0: detected capacity change from 0 to 128
[  283.252373][ T5910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.255831][ T5313] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  283.389448][ T5910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.430499][ T5313] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  283.434112][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.439004][ T5313] usb 3-1: Product: syz
[  283.440801][ T5313] usb 3-1: Manufacturer: syz
[  283.442815][ T5313] usb 3-1: SerialNumber: syz
[  283.446837][T12637] loop1: detected capacity change from 0 to 32768
[  283.477035][T12637] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  283.484850][ T5910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.515191][T12637] XFS (loop1): Ending clean mount
[  283.598797][ T5910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.617184][ T5842] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  283.637197][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  283.641571][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  283.645065][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  283.662879][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  283.672170][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  283.741734][T12647] lo speed is unknown, defaulting to 1000
[  283.954419][ T5910] batadv1: left allmulticast mode
[  283.958981][ T5910] batadv1: left promiscuous mode
[  283.963828][ T5910] bridge0: port 3(batadv1) entered disabled state
[  283.977261][ T5910] bridge_slave_1: left allmulticast mode
[  283.979351][ T5910] bridge_slave_1: left promiscuous mode
[  283.981717][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.997625][ T5910] bridge_slave_0: left allmulticast mode
[  283.999534][ T5910] bridge_slave_0: left promiscuous mode
[  284.001653][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.242581][ T5910] bond2 (unregistering): (slave ip6erspan0): Releasing active interface
[  284.902475][ T5910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.926784][ T5910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.936669][ T5910] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  284.964642][ T5910] bond0 (unregistering): Released all slaves
[  285.138108][ T5910] bond1 (unregistering): Released all slaves
[  285.333326][ T5910] bond2 (unregistering): Released all slaves
[  285.393106][T12647] chnl_net:caif_netlink_parms(): no params data found
[  285.500220][ T5313] net_ratelimit: 3 callbacks suppressed
[  285.500309][ T5313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO
[  285.516923][ T5313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  285.523779][ T5313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  285.551489][ T5313] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  285.552965][ T5910] tipc: Left network mode
[  285.560322][ T5313] usb 3-1: USB disconnect, device number 45
[  285.736451][ T5845] Bluetooth: hci1: command tx timeout
[  285.831278][T12647] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.834881][T12647] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.846174][T12647] bridge_slave_0: entered allmulticast mode
[  285.856944][T12647] bridge_slave_0: entered promiscuous mode
[  285.863892][T12647] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.867189][T12647] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.869746][T12647] bridge_slave_1: entered allmulticast mode
[  285.874801][T12647] bridge_slave_1: entered promiscuous mode
[  285.958862][ T5910] hsr_slave_0: left promiscuous mode
[  285.961681][ T5910] hsr_slave_1: left promiscuous mode
[  285.964623][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.967659][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.972430][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.974900][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.008813][ T5910] veth0_macvtap: left promiscuous mode
[  286.011105][ T5910] veth1_vlan: left promiscuous mode
[  286.013187][ T5910] veth0_vlan: left promiscuous mode
[  286.349621][T12662] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2666'.
[  286.656232][ T5910] team0 (unregistering): Port device team_slave_1 removed
[  286.701406][ T5910] team0 (unregistering): Port device team_slave_0 removed
[  287.232011][T12647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.240737][T12647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.255611][ T5313] lo speed is unknown, defaulting to 1000
[  287.259645][ T5313] infiniband syz0: ib_query_port failed (-19)
[  287.370507][T12647] team0: Port device team_slave_0 added
[  287.378526][T12647] team0: Port device team_slave_1 added
[  287.458335][T12647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.460660][T12647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.481966][T12647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.491058][T12647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.494080][T12647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.505949][T12647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.598417][T12647] hsr_slave_0: entered promiscuous mode
[  287.601587][T12647] hsr_slave_1: entered promiscuous mode
[  287.624836][T12677] loop1: detected capacity change from 0 to 32768
[  287.677436][T12677] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  287.688656][T12677] XFS (loop1): Ending clean mount
[  287.753596][ T5842] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  287.818173][ T5845] Bluetooth: hci1: command tx timeout
[  287.821645][ T5910] IPVS: stop unused estimator thread 0...
[  287.942015][T12647] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  287.947499][T12647] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  287.952058][T12647] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  287.966131][T12647] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  287.995641][ T5313] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  288.047526][T12647] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.073261][T12647] 8021q: adding VLAN 0 to HW filter on device team0
[  288.078604][T12692] loop1: detected capacity change from 0 to 32768
[  288.081632][T12692] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2676 (12692)
[  288.090077][T12692] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  288.092056][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.093464][T12692] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  288.096619][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.099614][T12692] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  288.108784][T12692] BTRFS info (device loop1): rebuilding free space tree
[  288.120550][T12692] BTRFS info (device loop1): disabling free space tree
[  288.124779][T12692] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  288.126132][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.130634][T12692] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  288.131460][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.151622][T12692] BTRFS info (device loop1): setting nodatasum
[  288.154248][T12692] BTRFS info (device loop1): allowing degraded mounts
[  288.159808][ T5313] usb 3-1: Using ep0 maxpacket: 16
[  288.162157][T12692] BTRFS info (device loop1): enabling disk space caching
[  288.170347][T12692] BTRFS info (device loop1): force clearing of disk cache
[  288.171101][ T5313] usb 3-1: config 0 interface 0 has no altsetting 0
[  288.172778][T12692] BTRFS info (device loop1): force zlib compression, level 3
[  288.181349][ T5313] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  288.185101][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.200373][ T5313] usb 3-1: config 0 descriptor??
[  288.233718][ T5842] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  288.472462][T12647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.491335][T12721] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2678'.
[  288.531622][T12647] veth0_vlan: entered promiscuous mode
[  288.542497][T12647] veth1_vlan: entered promiscuous mode
[  288.562634][T12647] veth0_macvtap: entered promiscuous mode
[  288.578443][T12647] veth1_macvtap: entered promiscuous mode
[  288.589598][T12647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.597194][T12647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.609810][ T5910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.613779][ T5910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.616298][ T5896] kernel write not supported for file /1968/clear_refs (pid: 5896 comm: kworker/1:3)
[  288.624268][ T5910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.632848][ T5313] aureal 0003:0755:2626.000F: unknown main item tag 0x0
[  288.638830][ T5313] aureal 0003:0755:2626.000F: unknown main item tag 0x0
[  288.644002][ T5313] aureal 0003:0755:2626.000F: unknown main item tag 0x0
[  288.647151][ T5910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.651142][ T5313] aureal 0003:0755:2626.000F: unknown main item tag 0x0
[  288.653600][ T5313] aureal 0003:0755:2626.000F: unknown main item tag 0x0
[  288.694353][ T5313] aureal 0003:0755:2626.000F: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.2-1/input0
[  288.729193][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.732069][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.758369][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.761065][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.828514][ T5896] usb 3-1: USB disconnect, device number 46
[  289.196986][T12731] loop1: detected capacity change from 0 to 32768
[  289.201928][T12731] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2683 (12731)
[  289.214092][T12731] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  289.218840][T12731] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  289.222339][T12731] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  289.317723][T12731] BTRFS info (device loop1): rebuilding free space tree
[  289.348062][T12731] BTRFS info (device loop1): disabling free space tree
[  289.350950][T12731] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  289.354400][T12731] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  289.386180][T12731] BTRFS info (device loop1): allowing degraded mounts
[  289.395817][T12731] BTRFS info (device loop1): enabling ssd optimizations
[  289.400349][T12731] BTRFS info (device loop1): enabling disk space caching
[  289.403556][T12731] BTRFS info (device loop1): force clearing of disk cache
[  289.411358][T12731] BTRFS info (device loop1): use zlib compression, level 3
[  289.502154][T12731] BTRFS info (device loop1): balance: start -f -sprofiles=data|system|metadata|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0x1ffffffff800,usage=18446744073709551615,usage=4294967295..4294967295,drange=18446744073709551612..0
[  289.522380][T12731] BTRFS info (device loop1): balance: ended with status: 0
[  289.725917][ T5842] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  289.869957][T12759] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2
[  289.976143][ T5845] Bluetooth: hci1: command tx timeout
[  291.620242][T12814] loop1: detected capacity change from 0 to 16
[  291.623510][T12814] erofs (device loop1): mounted with root inode @ nid 36.
[  291.969854][T12837] binder: 12836:12837 ioctl c0306201 200000000080 returned -14
[  292.051392][T12843] loop3: detected capacity change from 0 to 4096
[  292.055712][ T5845] Bluetooth: hci1: command tx timeout
[  292.077351][T12843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.106747][T12647] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.149144][T12852] vivid-000: disconnect
[  292.152220][T12851] vivid-000: reconnect
[  292.177237][T12854] loop3: detected capacity change from 0 to 2048
[  292.188967][T12856] syz_tun: entered allmulticast mode
[  292.222350][T12854] Alternate GPT is invalid, using primary GPT.
[  292.224904][T12854]  loop3: p1 p2 p3
[  292.234505][T12854] loop3: partition table partially beyond EOD, truncated
[  292.258447][T12858] bridge2: entered allmulticast mode
[  292.266907][ T6039] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  292.303095][T12860] lo speed is unknown, defaulting to 1000
[  292.309462][T12860] lo speed is unknown, defaulting to 1000
[  292.312404][T12860] lo speed is unknown, defaulting to 1000
[  292.324631][T12860] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  292.344659][T12860] lo speed is unknown, defaulting to 1000
[  292.351058][T12860] lo speed is unknown, defaulting to 1000
[  292.354377][T12860] lo speed is unknown, defaulting to 1000
[  292.425665][ T6039] usb 2-1: Using ep0 maxpacket: 32
[  292.431650][ T6039] usb 2-1: config 0 has an invalid interface number: 30 but max is 0
[  292.434849][ T6039] usb 2-1: config 0 has no interface number 0
[  292.440031][ T6039] usb 2-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0
[  292.443465][ T6039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.446750][ T6039] usb 2-1: Product: syz
[  292.448474][ T6039] usb 2-1: Manufacturer: syz
[  292.450293][ T6039] usb 2-1: SerialNumber: syz
[  292.461285][ T6039] usb 2-1: config 0 descriptor??
[  292.467176][ T6039] quatech2 2-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected
[  292.467342][T12871] loop3: detected capacity change from 0 to 256
[  292.480799][T12871] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  292.485319][T12871] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  292.494610][T12871] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  292.573355][T12878] loop2: detected capacity change from 0 to 512
[  292.580957][T12879] netlink: 'syz.3.2741': attribute type 8 has an invalid length.
[  292.593444][T12879] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  292.593798][T12878] EXT4-fs error (device loop2): ext4_init_orphan_info:585: comm syz.2.2742: inode #0: comm syz.2.2742: iget: illegal inode #
[  292.604240][T12878] EXT4-fs (loop2): Remounting filesystem read-only
[  292.608186][T12878] EXT4-fs (loop2): get orphan inode failed
[  292.611032][T12878] EXT4-fs (loop2): mount failed
[  292.673075][ T5845] Bluetooth: hci2: unexpected event for opcode 0x0401
[  292.680418][ T6039] usb 2-1: qt2_attach - failed to power on unit: -71
[  292.684031][ T6039] quatech2 2-1:0.30: probe with driver quatech2 failed with error -71
[  292.689244][ T6039] usb 2-1: USB disconnect, device number 32
[  292.915547][T10215] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  292.946306][   T51] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  293.078758][T10215] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  293.082263][T10215] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.087592][T10215] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  293.091393][T10215] usb 3-1: config 1 has no interface number 1
[  293.094015][T10215] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  293.100909][T10215] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  293.109035][   T51] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  293.113576][   T51] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  293.119666][T10215] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  293.123395][T10215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.126960][   T51] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  293.130714][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.135234][T10215] usb 3-1: Product: syz
[  293.137325][T10215] usb 3-1: Manufacturer: syz
[  293.139333][T10215] usb 3-1: SerialNumber: syz
[  293.146159][T12886] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  293.152877][   T51] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  293.370014][T10215] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  293.373391][T10215] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  293.400099][T10215] usb 3-1: USB disconnect, device number 47
[  293.490508][   T51] usb 4-1: USB disconnect, device number 2
[  293.514561][T12903] loop1: detected capacity change from 0 to 256
[  293.526553][T12903] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x0aeab83c, utbl_chksum : 0xe619d30d)
[  293.534673][T12903] exFAT-fs (loop1): valid_size(10) is greater than size(0)
[  293.708397][T12913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2758'.
[  294.008707][T12939] loop2: detected capacity change from 0 to 512
[  294.012175][T12939] EXT4-fs: Ignoring removed nobh option
[  294.033201][T12939] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2771: corrupted inode contents
[  294.040054][T12939] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.2771: mark_inode_dirty error
[  294.048059][T12939] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2771: corrupted inode contents
[  294.052917][T12939] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2771: mark_inode_dirty error
[  294.060940][T12939] Quota error (device loop2): write_blk: dquota write failed
[  294.063745][T12939] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  294.068127][T12939] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2771: Failed to acquire dquot type 0
[  294.077630][T12939] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2771: corrupted inode contents
[  294.081665][T12939] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.2771: mark_inode_dirty error
[  294.086137][T12939] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2771: corrupted inode contents
[  294.090728][T12947] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2770'.
[  294.093790][T12947] netlink: 'syz.1.2770': attribute type 3 has an invalid length.
[  294.097040][T12939] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2771: mark_inode_dirty error
[  294.101424][T12939] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2771: corrupted inode contents
[  294.106530][T12939] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  294.111290][T12939] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2771: corrupted inode contents
[  294.115961][T12939] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.2771: mark_inode_dirty error
[  294.120556][T12939] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  294.127528][T12939] EXT4-fs (loop2): 1 truncate cleaned up
[  294.131297][T12939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.140500][T12939] ext4 filesystem being mounted at /951/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.168704][T12939] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.283904][T12959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2778'.
[  294.663854][T12992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2794'.
[  295.300017][T13011] netlink: 'syz.3.2802': attribute type 4 has an invalid length.
[  295.303517][T13011] netlink: 'syz.3.2802': attribute type 3 has an invalid length.
[  295.311962][T13011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2802'.
[  295.447540][T13009] loop1: detected capacity change from 0 to 32768
[  295.450386][T13009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2801 (13009)
[  295.456354][T13009] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  295.461160][T13009] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  295.515564][T13009] BTRFS info (device loop1): rebuilding free space tree
[  295.523740][T13009] BTRFS info (device loop1): allowing degraded mounts
[  295.526673][T13009] BTRFS info (device loop1): enabling ssd optimizations
[  295.529485][T13009] BTRFS info (device loop1): enabling free space tree
[  295.532441][T13009] BTRFS info (device loop1): force clearing of disk cache
[  295.535333][T13009] BTRFS info (device loop1): use zstd compression, level 3
[  295.538741][T13009] BTRFS info (device loop1): max_inline set to 0
[  295.579230][ T5842] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  295.715564][ T5911] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  295.865540][ T5911] usb 4-1: Using ep0 maxpacket: 32
[  295.869968][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short
[  295.878712][ T5911] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  295.882039][ T5911] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  295.892452][ T5911] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  295.906093][ T5911] usb 4-1: config 128 has no interface number 0
[  295.908839][ T5911] usb 4-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  295.914043][ T5911] usb 4-1: config 128 interface 127 has no altsetting 0
[  295.927619][ T5911] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  295.931305][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.934570][ T5911] usb 4-1: Product: syz
[  295.936505][ T5911] usb 4-1: Manufacturer: syz
[  295.938553][ T5911] usb 4-1: SerialNumber: syz
[  296.164600][ T5911] usb 4-1: USB disconnect, device number 3
[  296.736647][T13071] loop1: detected capacity change from 0 to 4096
[  296.740398][T13071] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  296.753386][T13071] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  296.773281][T13071] ntfs3(loop1): ino=1f, "file2" failed to open parent directory r=5 to update
[  296.802464][   T36] ntfs3(loop1): ino=1f, failed to open parent directory r=5 to update
[  296.821190][T13069] loop3: detected capacity change from 0 to 32768
[  296.824939][T13069] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  296.824939][T13069] clean (size 2912):
[  296.824939][T13069] flags:          0
[  296.824939][T13069] journal_seq:    10
[  296.824939][T13069] usage: type=inodes v=8
[  296.824939][T13069] usage: type=key_version v=0
[  296.824939][T13069] usage: type=reserved v=0
[  296.824939][T13069] usage: type=reserved v=0
[  296.824939][T13069] usage: type=reserved v=0
[  296.824939][T13069] usage: type=reserved v=0
[  296.824939][T13069] data_usage: btree: 1/1 [0]=2816
[  296.824939][T13069] data_usage: need_discard: 1/0 []=0
[  296.824939][T13069] data_usage: user: 1/1 [0]=16
[  296.824939][T13069] dev_usage: dev=0  
[  296.824939][T13069]   free: buckets=83 sectors=0 fragmented=0
[  296.824939][T13069]   sb: buckets=25 sectors=6152 fragmented=248
[  296.824939][T13069]   journal: buckets=8 sectors=2048 fragmented=0
[  296.824939][T13069]   btree: buckets=11 sectors=2816 fragmented=0
[  296.824939][T13069]   user: buckets=1 sectors=16 fragmented=240
[  296.824939][T13069]   cached: buckets=0 sectors=0 fragmented=0
[  296.824939][T13069]   parity: buckets=0 sectors=0 fragmented=0
[  296.824939][T13069]   stripe: buckets=0 sectors=0 fragmented=0
[  296.824939][T13069]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  296.824939][T13069]   need_discard: buckets=0 sectors=0 fragmented=0
[  296.824939][T13069] clock: read=0
[  296.824939][T13069] clock: write=1280
[  296.824939][T13069] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: se
[  296.825032][T13069] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  297.104973][T13081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.960123][T13105] loop1: detected capacity change from 0 to 128
[  297.962592][T13105] EXT4-fs: Ignoring removed nobh option
[  297.967464][T13105] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  297.972201][T13105] ext4 filesystem being mounted at /955/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  297.987391][T13105] fscrypt (loop1, inode 12): Sub-block data units not yet supported with IV_INO_LBLK_32
[  298.014225][ T5842] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  298.250716][T13109] loop1: detected capacity change from 0 to 32768
[  298.253717][T13109] XFS: noikeep mount option is deprecated.
[  298.284075][T13109] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  298.308383][T13109] XFS (loop1): Ending clean mount
[  298.313379][T13109] XFS (loop1): Quotacheck needed: Please wait.
[  298.343535][T13109] XFS (loop1): Quotacheck: Done.
[  298.365762][ T5842] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  298.542133][T13133] syz_tun (unregistering): left allmulticast mode
[  298.801632][ T5874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.940998][ T5874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.048721][ T5874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.121889][ T5874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.229406][ T5874] bridge_slave_0: left allmulticast mode
[  299.231905][ T5874] bridge_slave_0: left promiscuous mode
[  299.234266][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.530960][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.538995][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.544346][ T5874] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  299.549733][ T5874] bond0 (unregistering): Released all slaves
[  299.622317][ T5874] tipc: Left network mode
[  299.852007][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.865396][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.869634][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.873706][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.877486][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.918015][ T5874] hsr_slave_0: left promiscuous mode
[  299.920789][ T5874] hsr_slave_1: left promiscuous mode
[  299.923580][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.926928][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.930544][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.933639][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.950460][ T5874] veth1_macvtap: left promiscuous mode
[  299.952943][ T5874] veth0_macvtap: left promiscuous mode
[  299.956498][ T5874] veth1_vlan: left promiscuous mode
[  299.958724][ T5874] veth0_vlan: left promiscuous mode
[  300.388060][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  300.398521][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  300.405732][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  300.431360][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  300.439159][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  300.528785][T13165] loop3: detected capacity change from 0 to 2048
[  300.545934][T13165] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  300.553971][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  300.559100][T13166] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.626789][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  301.202520][T13151] lo speed is unknown, defaulting to 1000
[  301.218478][T13156] lo speed is unknown, defaulting to 1000
[  301.451237][T13151] chnl_net:caif_netlink_parms(): no params data found
[  301.509915][ T5874] IPVS: stop unused estimator thread 0...
[  301.550151][T13156] chnl_net:caif_netlink_parms(): no params data found
[  301.550925][ T5874] ------------[ cut here ]------------
[  301.554307][ T5874] WARNING: CPU: 0 PID: 5874 at net/xfrm/xfrm_state.c:3308 xfrm_state_fini+0x289/0x2f0
[  301.555570][T13151] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.557588][ T5874] Modules linked in:
[  301.562478][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  301.566027][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.569892][ T5874] Workqueue: netns cleanup_net
[  301.571576][ T5874] RIP: 0010:xfrm_state_fini+0x289/0x2f0
[  301.573368][ T5874] Code: 41 5f 5d e9 69 9c e1 f7 e8 34 70 9d f7 90 0f 0b 90 e9 fd fd ff ff e8 26 70 9d f7 90 0f 0b 90 e9 60 fe ff ff e8 18 70 9d f7 90 <0f> 0b 90 43 80 3c 2c 00 0f 85 c7 fe ff ff e9 ca fe ff ff e8 ff 6f
[  301.573883][T13151] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.580335][ T5874] RSP: 0018:ffffc9000431f898 EFLAGS: 00010293
[  301.580348][ T5874] RAX: ffffffff8a223b78 RBX: ffff888104d0a440 RCX: ffff888020800000
[  301.580355][ T5874] RDX: 0000000000000000 RSI: ffffffff8d9b7819 RDI: ffffffff8be33680
[  301.580360][ T5874] RBP: 0000000000000040 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  301.580366][ T5874] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: 1ffff110209a171c
[  301.580372][ T5874] R13: dffffc0000000000 R14: ffff888104d0b8e0 R15: ffff8880226ede80
[  301.580377][ T5874] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  301.602470][ T5874] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  301.605105][ T5874] CR2: 00007fe00f16e440 CR3: 000000000df36000 CR4: 00000000000006f0
[  301.606309][T13151] bridge_slave_0: entered allmulticast mode
[  301.608243][ T5874] Call Trace:
[  301.611199][ T5874]  <TASK>
[  301.612145][ T5874]  xfrm_net_exit+0x2d/0x70
[  301.613753][ T5874]  ops_undo_list+0x49a/0x990
[  301.615615][ T5874]  ? __pfx_ops_undo_list+0x10/0x10
[  301.617342][ T5874]  ? do_raw_spin_unlock+0x4d/0x240
[  301.619149][ T5874]  cleanup_net+0x4c5/0x800
[  301.620762][ T5874]  ? __pfx_cleanup_net+0x10/0x10
[  301.622398][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  301.624422][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  301.627048][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  301.629088][ T5874]  process_scheduled_works+0xae1/0x17b0
[  301.630974][ T5874]  ? __pfx_process_scheduled_works+0x10/0x10
[  301.632994][ T5874]  worker_thread+0x8a0/0xda0
[  301.634547][ T5874]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  301.637015][ T5874]  ? __kthread_parkme+0x7b/0x200
[  301.638786][ T5874]  kthread+0x711/0x8a0
[  301.640216][ T5874]  ? __pfx_worker_thread+0x10/0x10
[  301.641953][ T5874]  ? __pfx_kthread+0x10/0x10
[  301.643575][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  301.644520][T13151] bridge_slave_0: entered promiscuous mode
[  301.645389][ T5874]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.649499][ T5874]  ? __pfx_kthread+0x10/0x10
[  301.651085][ T5874]  ret_from_fork+0x3fc/0x770
[  301.652644][ T5874]  ? __pfx_ret_from_fork+0x10/0x10
[  301.654378][ T5874]  ? __switch_to_asm+0x39/0x70
[  301.656150][ T5874]  ? __switch_to_asm+0x33/0x70
[  301.657712][ T5874]  ? __pfx_kthread+0x10/0x10
[  301.659255][ T5874]  ret_from_fork_asm+0x1a/0x30
[  301.660884][ T5874]  </TASK>
[  301.662030][ T5874] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  301.664690][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  301.667768][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.671174][ T5874] Workqueue: netns cleanup_net
[  301.672847][ T5874] Call Trace:
[  301.673951][ T5874]  <TASK>
[  301.674931][ T5874]  dump_stack_lvl+0x99/0x250
[  301.676488][ T5874]  ? __asan_memcpy+0x40/0x70
[  301.678228][ T5874]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.680022][ T5874]  ? __pfx__printk+0x10/0x10
[  301.681663][ T5874]  vpanic+0x281/0x750
[  301.683068][ T5874]  ? __pfx__printk+0x10/0x10
[  301.684553][ T5874]  ? __pfx_vpanic+0x10/0x10
[  301.686023][ T5874]  ? is_bpf_text_address+0x292/0x2b0
[  301.687767][ T5874]  panic+0xb9/0xc0
[  301.689197][ T5874]  ? __pfx_panic+0x10/0x10
[  301.690746][ T5874]  __warn+0x31b/0x4b0
[  301.692189][ T5874]  ? xfrm_state_fini+0x289/0x2f0
[  301.693939][ T5874]  ? xfrm_state_fini+0x289/0x2f0
[  301.695807][ T5874]  report_bug+0x2be/0x4f0
[  301.697473][ T5874]  ? xfrm_state_fini+0x289/0x2f0
[  301.699311][ T5874]  ? xfrm_state_fini+0x289/0x2f0
[  301.701348][ T5874]  ? xfrm_state_fini+0x28b/0x2f0
[  301.703352][ T5874]  handle_bug+0x84/0x160
[  301.705134][ T5874]  exc_invalid_op+0x1a/0x50
[  301.707025][ T5874]  asm_exc_invalid_op+0x1a/0x20
[  301.709067][ T5874] RIP: 0010:xfrm_state_fini+0x289/0x2f0
[  301.711301][ T5874] Code: 41 5f 5d e9 69 9c e1 f7 e8 34 70 9d f7 90 0f 0b 90 e9 fd fd ff ff e8 26 70 9d f7 90 0f 0b 90 e9 60 fe ff ff e8 18 70 9d f7 90 <0f> 0b 90 43 80 3c 2c 00 0f 85 c7 fe ff ff e9 ca fe ff ff e8 ff 6f
[  301.718632][ T5874] RSP: 0018:ffffc9000431f898 EFLAGS: 00010293
[  301.720807][ T5874] RAX: ffffffff8a223b78 RBX: ffff888104d0a440 RCX: ffff888020800000
[  301.723903][ T5874] RDX: 0000000000000000 RSI: ffffffff8d9b7819 RDI: ffffffff8be33680
[  301.726477][ T5874] RBP: 0000000000000040 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  301.729208][ T5874] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: 1ffff110209a171c
[  301.731886][ T5874] R13: dffffc0000000000 R14: ffff888104d0b8e0 R15: ffff8880226ede80
[  301.734725][ T5874]  ? xfrm_state_fini+0x288/0x2f0
[  301.736341][ T5874]  ? xfrm_state_fini+0x288/0x2f0
[  301.738266][ T5874]  xfrm_net_exit+0x2d/0x70
[  301.740154][ T5874]  ops_undo_list+0x49a/0x990
[  301.742068][ T5874]  ? __pfx_ops_undo_list+0x10/0x10
[  301.744204][ T5874]  ? do_raw_spin_unlock+0x4d/0x240
[  301.746314][ T5874]  cleanup_net+0x4c5/0x800
[  301.748205][ T5874]  ? __pfx_cleanup_net+0x10/0x10
[  301.750273][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  301.752388][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  301.754757][ T5874]  ? process_scheduled_works+0x9ef/0x17b0
[  301.757106][ T5874]  process_scheduled_works+0xae1/0x17b0
[  301.759431][ T5874]  ? __pfx_process_scheduled_works+0x10/0x10
[  301.761908][ T5874]  worker_thread+0x8a0/0xda0
[  301.763791][ T5874]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  301.766394][ T5874]  ? __kthread_parkme+0x7b/0x200
[  301.768459][ T5874]  kthread+0x711/0x8a0
[  301.770146][ T5874]  ? __pfx_worker_thread+0x10/0x10
[  301.772232][ T5874]  ? __pfx_kthread+0x10/0x10
[  301.774165][ T5874]  ? _raw_spin_unlock_irq+0x23/0x50
[  301.776326][ T5874]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.778479][ T5874]  ? __pfx_kthread+0x10/0x10
[  301.780430][ T5874]  ret_from_fork+0x3fc/0x770
[  301.782355][ T5874]  ? __pfx_ret_from_fork+0x10/0x10
[  301.784461][ T5874]  ? __switch_to_asm+0x39/0x70
[  301.786487][ T5874]  ? __switch_to_asm+0x33/0x70
[  301.788485][ T5874]  ? __pfx_kthread+0x10/0x10
[  301.790432][ T5874]  ret_from_fork_asm+0x1a/0x30
[  301.792492][ T5874]  </TASK>
[  301.794461][ T5874] Kernel Offset: disabled
[  301.796247][ T5874] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:49:31  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff93491e30 RBX=ffffffff9351cfc8 RCX=0000000000000002 RDX=0000000000030000
RSI=0000000000000000 RDI=ffff888020800000 RBP=0000000000000003 RSP=ffffc9000431ef98
R8 =ffffc9000431ef60 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819dcc10
R12=ffff888020800b68 R13=ffff888020800af0 R14=ffff888020800be0 R15=ffffffff96485418
RIP=ffffffff819dba35 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe00f16e440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 00007f4d89a12e53
XMM06=0000000000000000 00007f4d89a12e4d XMM07=0000000000000000 00007f4d89a12e61
XMM08=0000000000000000 00007f4d89a12ee7 XMM09=0000000000000000 00007f4d89a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff84873462 RBX=ffff888106cc1200 RCX=0000000000000000 RDX=ffff88802a385640
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900042ff748
R8 =ffffffff8fa38a37 R9 =1ffffffff1f47146 R10=dffffc0000000000 R11=fffffbfff1f47147
R12=000000000000000a R13=0000000000000010 R14=000000000000000c R15=000000000000000a
RIP=ffffffff848734c4 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555665bd500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efcd06e7d60 CR3=0000000120034000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00ff000000000000 XMM05=0000000000000000 00007efccfa12e53
XMM06=0000000000000000 00007efccfa12e4d XMM07=0000000000000000 00007efccfa12e61
XMM08=0000000000000000 00007efccfa12ee7 XMM09=0000000000000000 00007efccfa12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
