last executing test programs:

1m7.240111479s ago: executing program 1 (id=99):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="170100000000b2000500000000000000850000004700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

1m7.156477394s ago: executing program 1 (id=100):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2)

1m7.081297861s ago: executing program 1 (id=101):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='ip6tnl0\x00'})

1m7.020303353s ago: executing program 1 (id=102):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x1a06496, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

1m6.777185161s ago: executing program 1 (id=104):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setresgid(0xee01, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)={0x10, 0x21, 0x100, 0x70bd28, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20, 0x20000000}, 0x40)

1m6.540635423s ago: executing program 1 (id=109):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r1=>0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x44aa, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0x5ee, 0x0, 0x0, 0x0)

1m6.34433428s ago: executing program 32 (id=109):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r1=>0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x44aa, 0x4)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0x5ee, 0x0, 0x0, 0x0)

8.582250608s ago: executing program 0 (id=634):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwrite64(r0, &(0x7f0000000240)="e62eb166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce42365029d64c565a5fc2251eda45a465e64d", 0x86, 0x2)

8.32662362s ago: executing program 0 (id=636):
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffd})

8.157828048s ago: executing program 0 (id=638):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002"], 0x310)

7.99691581s ago: executing program 0 (id=640):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ce, &(0x7f0000000640)="$eJzsmbvuEkEUxr+Z3f9yiTGxsbDRRBIxgWV3UUNjgU9gAt46iawEXcDAFkBigTY2PoavYEFlYWdnq4WamFhIab1mhmF35CZESUj+55cw+83MmTMzB/gKAEEQp5ZvX399eX2rUi8AOIMcUmr8h5HEcC3+c1qJT2/ed88+ny7nYwCiaPf9TQDvqgZC1Y+iP1fn1LMOHus74Liq9D0w2Eo/BMddpX0wPFD6iaZ7GSUC337UC5qP24HviMYVjSea8vL5ZhOGJoC0Oh/T5gej8dNGEPj9ZXESLfZZmdpX/KV+5qzKcVOrn3i/7r96ORH9RW0crX4uOFxYUpfBUFPjFaRg23ZSEu3+F8wkv7HL/Y9BnCtuiykcwQlJ7Cle/Ic8TBvJCCG+0PHI+dn0w+qq74e816XDlg7Ks1emPmb/LbOlTGBtTOKfwnKvaP5kwoz9oxR2npUGo3Gx3Wm0/Jbf9bzyDeea41z3StKI5u0W/0tLf8pq+U82xFrMwrARhn13CIR9N+5781Zz3Nrb3k+5hkv/48hfnucQHxV57dT6PZh6cfkUKm9sPDxBEARBEARBEARBEARBEMReXASTv4KqP6qiDXi3ZfTvAAAA//+rpWTk")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

7.912558493s ago: executing program 0 (id=643):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})

7.467131618s ago: executing program 0 (id=645):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r1}, 0x38)

7.352207364s ago: executing program 33 (id=645):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r1}, 0x38)

1.856920583s ago: executing program 2 (id=674):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0)

1.763729459s ago: executing program 2 (id=675):
r0 = socket$packet(0x11, 0x2, 0x300)
quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0x0, 0x0)

1.762457849s ago: executing program 2 (id=676):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
getdents64(r0, &(0x7f00000063c0)=""/1024, 0x400)
getdents64(r0, 0xffffffffffffffff, 0x43)

1.666854334s ago: executing program 2 (id=677):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xe7ff, 0x4, 0x32344d59, 0x0, 0x0, [{}, {}, {}, {0x8001}, {}, {}, {0x0, 0x2}], 0x0, 0x0, 0x7}})

1.666743529s ago: executing program 2 (id=678):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a31d34b5cb9f53e1"], 0x0)

1.355464514s ago: executing program 4 (id=646):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f000000ac40), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

1.097002941s ago: executing program 3 (id=683):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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")
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

917.258369ms ago: executing program 3 (id=684):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff, 0x5}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "a8841ff973ad4a7ffa45a84ae2540cfadba6d51b9b26bae4ce7c99365983d06d1ccd6bb6054247be71e404b434ebca103d267b7b4d5886028daf42a66adf39ff27"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

759.293872ms ago: executing program 4 (id=685):
syz_mount_image$ocfs2(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f0000000500)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cc85bf8e749e04e", @ANYRES16, @ANYRESOCT, @ANYRES16], 0x11, 0x445c, &(0x7f0000004a80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x4002, 0x0, 0x21, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x143041, 0x10)
rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000400)='./file0\x00')

543.359886ms ago: executing program 3 (id=686):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0x1, 0x4a1, &(0x7f00000007c0)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

472.081855ms ago: executing program 2 (id=687):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000500)='XS', 0x2, 0x80, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

409.115958ms ago: executing program 3 (id=688):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000020a01030000e6ff1b000000020000000900010073797a30"], 0x7c}}, 0x0)

279.346385ms ago: executing program 3 (id=689):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBLED(r0, 0x4b65, 0x4bec)

262.159565ms ago: executing program 4 (id=690):
unshare(0x2c020400)
r0 = msgget$private(0x0, 0x101)
msgsnd(r0, &(0x7f0000000000)={0x2}, 0x4, 0x0)
msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x2000, 0x0)
msgrcv(r0, 0x0, 0x0, 0x1, 0x5800)

210.210888ms ago: executing program 3 (id=691):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000080)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@user_xattr}, {@dir_resv_level}, {@coherency_full}, {@resv_level={'resv_level', 0x3d, 0x2}}, {@nouser_xattr}, {@localflocks}, {@heartbeat_none}, {@commit={'commit', 0x3d, 0x7ff}}]}, 0xc, 0x442b, &(0x7f0000004480)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000500)=""/49, 0x31)

0s ago: executing program 4 (id=692):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)

kernel console output (not intermixed with test programs):

missing in alloc btree
[   62.861684][ T6029]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   62.873206][ T6029] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[   62.873220][ T6029]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   62.887372][ T6029] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[   62.887386][ T6029]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   62.900925][ T6029] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing
[   62.905379][ T6029] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   62.910509][ T6029] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing
[   62.914761][ T6029] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   62.919805][ T6029] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing
[   62.922139][  T793] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   62.924219][ T6029] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   62.932470][ T6029] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing
[   62.937610][ T6029] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   62.942566][ T6029] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing
[   62.946754][ T6029] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   62.951605][ T6029] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[   62.956304][ T6029] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   62.960918][ T6029] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing
[   62.965102][ T6029] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   62.969753][ T6029] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing
[   62.973866][ T6029] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing
[   62.978549][ T6029] bcachefs (loop0): bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing
[   62.982693][ T6029] bcachefs (loop0): bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   62.987473][ T6029] bcachefs (loop0): bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing
[   62.991689][ T6029] bcachefs (loop0): bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   62.996774][ T6029] bcachefs (loop0): bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing
[   62.996786][ T6029]   Ratelimiting new instances of previous error
[   63.004074][ T6029] bcachefs (loop0): bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   63.004086][ T6029]   Ratelimiting new instances of previous error
[   63.020624][ T6029]  done
[   63.025644][ T6029] bcachefs (loop0): going read-write
[   63.092141][  T793] usb 3-1: Using ep0 maxpacket: 16
[   63.095820][  T793] usb 3-1: config 0 has no interfaces?
[   63.103319][  T793] usb 3-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55
[   63.106928][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.110214][  T793] usb 3-1: Product: syz
[   63.112314][  T793] usb 3-1: Manufacturer: syz
[   63.114209][  T793] usb 3-1: SerialNumber: syz
[   63.116232][ T6029] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[   63.122375][ T6029] bcachefs (loop0): going read-only
[   63.123717][  T793] usb 3-1: config 0 descriptor??
[   63.126799][ T6029] bcachefs (loop0): finished waiting for writes to stop
[   63.137023][ T6029] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12
[   63.143800][ T6029] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12
[   63.148365][ T6029] bcachefs (loop0): unclean shutdown complete, journal seq 13
[   63.151856][ T6029] bcachefs (loop0): done going read-only, filesystem not clean
[   63.155390][ T6029] bcachefs (loop0): done starting filesystem
[   63.216961][ T5847] bcachefs (loop0): shutting down
[   63.237250][ T5847] bcachefs (loop0): shutdown complete
[   63.353545][ T6050] loop1: detected capacity change from 0 to 128
[   63.557764][ T5909] usb 3-1: USB disconnect, device number 3
[   63.923194][ T5235] Bluetooth: hci0: command tx timeout
[   64.003654][ T5235] Bluetooth: hci1: command tx timeout
[   64.082510][ T5235] Bluetooth: hci2: command tx timeout
[   64.272328][ T5909] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   64.427142][ T5909] usb 2-1: config 0 has no interfaces?
[   64.430831][ T5909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   64.438616][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   64.443908][ T5909] usb 2-1: SerialNumber: syz
[   64.448412][ T5909] usb 2-1: config 0 descriptor??
[   64.546738][ T6081] loop2: detected capacity change from 0 to 4096
[   64.555518][ T6081] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   64.574932][ T6081] ntfs3(loop2): ino=1a, mi_enum_attr
[   64.577222][ T6081] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   64.675248][ T6071] IPVS: length: 24 != 3277873272
[   64.679181][ T5909] usb 2-1: USB disconnect, device number 2
[   64.734495][ T6089] IPVS: length: 139 != 8
[   65.032277][ T5910] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   65.185926][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.190061][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0
[   65.195468][ T5910] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[   65.199046][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.204354][ T5910] usb 1-1: Product: syz
[   65.205905][ T5910] usb 1-1: Manufacturer: syz
[   65.207731][ T5910] usb 1-1: SerialNumber: syz
[   65.211490][ T5910] usb 1-1: config 0 descriptor??
[   65.228817][ T5910] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[   65.236322][ T6103] loop1: detected capacity change from 0 to 512
[   65.237995][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   65.244671][ T5910] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[   65.247738][ T5910] usb 1-1: media controller created
[   65.258642][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   65.272737][ T5909] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   65.283414][ T6103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.289472][ T6103] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   65.291355][ T5910] DVB: Unable to find symbol tda10046_attach()
[   65.296165][ T5910] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[   65.299111][ T5910] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[   65.323048][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.374732][ T6109] bridge2: entered allmulticast mode
[   65.433194][ T5909] usb 3-1: Using ep0 maxpacket: 32
[   65.438076][ T5909] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   65.446435][ T5909] usb 3-1: config 0 has no interface number 0
[   65.449111][ T5909] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.461713][ T5909] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.466642][ T5909] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[   65.470517][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.479628][ T5909] usb 3-1: config 0 descriptor??
[   65.619254][ T6117] loop1: detected capacity change from 0 to 2048
[   65.640450][ T6118] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   65.656621][ T6117] NILFS (loop1): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[   65.660653][ T6117] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16)
[   65.665715][ T6117] Remounting filesystem read-only
[   65.667424][ T6117] NILFS (loop1): error -5 truncating bmap (ino=16)
[   65.684864][ T5849] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[   66.018227][ T6120] loop1: detected capacity change from 0 to 40427
[   66.033348][ T6120] F2FS-fs (loop1): build fault injection rate: 14
[   66.036212][ T6120] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[   66.052429][ T5910] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[   66.057821][ T6120] F2FS-fs (loop1): invalid crc value
[   66.061577][ T5910] usb 1-1: USB disconnect, device number 2
[   66.074738][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   66.099948][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   66.110682][ T5909] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0001/input/input4
[   66.146240][ T6120] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   66.149929][ T6120] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   66.164783][ T6120] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   66.190154][ T5909] uclogic 0003:28BD:0094.0001: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1
[   66.305480][ T5909] usb 3-1: USB disconnect, device number 4
[   66.388305][ T6126] input: syz0 as /devices/virtual/input/input5
[   66.565215][ T6132] netlink: 'syz.1.87': attribute type 11 has an invalid length.
[   66.567879][ T6132] netlink: 140 bytes leftover after parsing attributes in process `syz.1.87'.
[   66.853782][ T6144] netlink: 'syz.2.93': attribute type 2 has an invalid length.
[   66.868248][ T6138] loop1: detected capacity change from 0 to 32768
[   66.911253][ T6138] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   66.933330][ T6138] XFS (loop1): Ending clean mount
[   66.966291][ T5849] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   66.973463][ T6156] loop2: detected capacity change from 0 to 7
[   66.977806][ T6156] Dev loop2: unable to read RDB block 7
[   66.980279][ T6156]  loop2: AHDI p1 p2 p3
[   66.983239][ T6156] loop2: partition table partially beyond EOD, truncated
[   66.987659][  T793] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   66.992137][ T6156] loop2: p1 start 1601398130 is beyond EOD, truncated
[   66.995089][ T6156] loop2: p2 start 1702059890 is beyond EOD, truncated
[   67.141975][ T6160] loop1: detected capacity change from 0 to 512
[   67.146036][ T6160] EXT4-fs: Ignoring removed nobh option
[   67.161003][ T6160] fscrypt (loop1, inode 2): Error -61 getting encryption context
[   67.167150][ T6160] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[   67.170616][ T6160] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.96: casefold flag without casefold feature
[   67.172133][  T793] usb 1-1: Using ep0 maxpacket: 16
[   67.176051][ T6160] EXT4-fs (loop1): Remounting filesystem read-only
[   67.180974][  T793] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   67.181029][ T6160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.190204][  T793] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   67.212189][  T793] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   67.221889][  T793] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   67.228585][ T6160] fscrypt (loop1, inode 2): Error -61 getting encryption context
[   67.232261][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.237160][  T793] usb 1-1: Product: syz
[   67.239010][  T793] usb 1-1: Manufacturer: syz
[   67.241042][  T793] usb 1-1: SerialNumber: syz
[   67.253644][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.329609][ T6158] loop2: detected capacity change from 0 to 40427
[   67.340139][ T6158] F2FS-fs (loop2): build fault injection rate: 14
[   67.344422][ T6158] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[   67.366914][ T6158] F2FS-fs (loop2): invalid crc value
[   67.378438][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   67.394348][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   67.462462][ T6158] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   67.466404][ T6158] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   67.471617][ T6158] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   67.525593][  T793] usb 1-1: USB disconnect, device number 3
[   67.536692][ T6158] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   67.557427][ T6158] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[   67.577085][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   67.585378][ T6158] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[   67.627273][ T5842] syz-executor: attempt to access beyond end of device
[   67.627273][ T5842] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   67.635119][ T6175] loop1: detected capacity change from 0 to 2048
[   67.648430][ T6175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   67.651496][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   67.651513][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.651521][ T5842] Call Trace:
[   67.651527][ T5842]  <TASK>
[   67.651532][ T5842]  dump_stack_lvl+0x189/0x250
[   67.651554][ T5842]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.651568][ T5842]  ? __pfx_queue_work_on+0x10/0x10
[   67.651580][ T5842]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   67.651595][ T5842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   67.651618][ T5842]  f2fs_handle_critical_error+0x37c/0x540
[   67.651641][ T5842]  f2fs_write_end_io+0x886/0xb60
[   67.651665][ T5842]  __submit_merged_bio+0x27a/0x6a0
[   67.651686][ T5842]  __submit_merged_write_cond+0x255/0x530
[   67.651707][ T5842]  f2fs_write_data_pages+0x261d/0x3000
[   67.651749][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   67.651817][ T5842]  ? __lock_acquire+0xab9/0xd20
[   67.651839][ T5842]  ? do_raw_spin_lock+0x121/0x290
[   67.651862][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[   67.651876][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   67.651892][ T5842]  do_writepages+0x32e/0x550
[   67.651917][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[   67.651934][ T5842]  filemap_fdatawrite+0x199/0x240
[   67.651950][ T5842]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   67.651997][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[   67.652014][ T5842]  f2fs_sync_dirty_inodes+0x31f/0x830
[   67.652060][ T5842]  f2fs_write_checkpoint+0x95a/0x1df0
[   67.652091][ T5842]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   67.652143][ T5842]  ? kill_f2fs_super+0x298/0x6c0
[   67.652159][ T5842]  kill_f2fs_super+0x2c3/0x6c0
[   67.652175][ T5842]  ? __pfx_kill_f2fs_super+0x10/0x10
[   67.652185][ T5842]  ? radix_tree_delete_item+0x2b6/0x400
[   67.652205][ T5842]  ? shrinker_free+0x2ce/0x3e0
[   67.652218][ T5842]  deactivate_locked_super+0xbc/0x130
[   67.652233][ T5842]  cleanup_mnt+0x425/0x4c0
[   67.652247][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[   67.652265][ T5842]  task_work_run+0x1d4/0x260
[   67.652283][ T5842]  ? __pfx_task_work_run+0x10/0x10
[   67.652297][ T5842]  ? __x64_sys_umount+0x122/0x160
[   67.652315][ T5842]  ? exit_to_user_mode_loop+0x40/0x110
[   67.652335][ T5842]  exit_to_user_mode_loop+0xec/0x110
[   67.652377][ T5842]  do_syscall_64+0x2bd/0x3b0
[   67.652395][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[   67.652410][ T5842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.652422][ T5842]  ? exc_page_fault+0x9f/0xf0
[   67.652439][ T5842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.652450][ T5842] RIP: 0033:0x7f368fb8ff17
[   67.652462][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   67.652471][ T5842] RSP: 002b:00007ffe39aa37d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   67.652484][ T5842] RAX: 0000000000000000 RBX: 00007f368fc11c05 RCX: 00007f368fb8ff17
[   67.652492][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe39aa3890
[   67.652499][ T5842] RBP: 00007ffe39aa3890 R08: 0000000000000000 R09: 0000000000000000
[   67.652506][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe39aa4920
[   67.652514][ T5842] R13: 00007f368fc11c05 R14: 0000000000010787 R15: 00007ffe39aa4960
[   67.652535][ T5842]  </TASK>
[   67.656695][ T5842] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   67.700555][ T6175] overlayfs: upper fs needs to support d_type.
[   67.793457][ T6175] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   67.796277][ T6175] overlayfs: failed to set xattr on upper
[   67.798622][ T6175] overlayfs: ...falling back to redirect_dir=nofollow.
[   67.801385][ T6175] overlayfs: ...falling back to metacopy=off.
[   67.805002][ T6175] overlayfs: ...falling back to index=off.
[   67.807520][ T6175] overlayfs: ...falling back to uuid=null.
[   67.862523][ T5849] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[   67.875054][ T5849] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[   68.131797][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.217843][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.274941][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.326217][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.463618][   T12] bridge_slave_1: left allmulticast mode
[   68.466211][   T12] bridge_slave_1: left promiscuous mode
[   68.469455][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.478984][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.484131][   T12] bridge_slave_0: left allmulticast mode
[   68.486390][   T12] bridge_slave_0: left promiscuous mode
[   68.486801][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.488830][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.494657][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.500306][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.503984][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.839678][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.845955][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.850707][   T12] bond0 (unregistering): Released all slaves
[   69.117764][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'.
[   69.442499][   T12] hsr_slave_0: left promiscuous mode
[   69.445567][   T12] hsr_slave_1: left promiscuous mode
[   69.449864][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.458573][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.476199][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.487437][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.497265][ T6209] loop2: detected capacity change from 0 to 32768
[   69.516925][   T12] veth1_macvtap: left promiscuous mode
[   69.519607][   T12] veth0_macvtap: left promiscuous mode
[   69.534079][ T6209] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.536058][   T12] veth1_vlan: left promiscuous mode
[   69.555517][   T12] veth0_vlan: left promiscuous mode
[   69.568512][ T6230] capability: warning: `syz.0.118' uses 32-bit capabilities (legacy support in use)
[   69.644830][ T6209] XFS (loop2): Ending clean mount
[   69.659255][ T6209] XFS (loop2): Quotacheck needed: Please wait.
[   69.731379][ T6209] XFS (loop2): Quotacheck: Done.
[   69.790472][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   70.007667][   T12] team0 (unregistering): Port device team_slave_1 removed
[   70.036635][   T12] team0 (unregistering): Port device team_slave_0 removed
[   70.308548][ T6190] chnl_net:caif_netlink_parms(): no params data found
[   70.400433][ T6252] loop2: detected capacity change from 0 to 16
[   70.418011][ T6252] erofs (device loop2): mounted with root inode @ nid 36.
[   70.515830][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.522352][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.533544][ T6190] bridge_slave_0: entered allmulticast mode
[   70.537452][ T6190] bridge_slave_0: entered promiscuous mode
[   70.563812][ T5850] Bluetooth: hci2: command tx timeout
[   70.638857][ T6265] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   70.650609][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.656061][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.659459][ T6190] bridge_slave_1: entered allmulticast mode
[   70.665210][ T6190] bridge_slave_1: entered promiscuous mode
[   70.723991][ T6190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.730678][ T6190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.761450][ T6190] team0: Port device team_slave_0 added
[   70.765292][ T6190] team0: Port device team_slave_1 added
[   70.801561][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.810416][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.830440][ T6190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.838314][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.840861][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.853289][ T6190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.936555][ T6190] hsr_slave_0: entered promiscuous mode
[   70.939115][ T6190] hsr_slave_1: entered promiscuous mode
[   70.941564][ T6190] debugfs: 'hsr0' already exists in 'hsr'
[   70.944174][ T6190] Cannot create hsr debugfs directory
[   71.218959][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.221418][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.659278][ T6293] sctp: [Deprecated]: syz.0.132 (pid 6293) Use of int in max_burst socket option deprecated.
[   71.659278][ T6293] Use struct sctp_assoc_value instead
[   71.958544][ T6190] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.967030][ T6190] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.971930][ T6190] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.986772][ T6190] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.268256][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.308233][ T6190] 8021q: adding VLAN 0 to HW filter on device team0
[   72.326587][  T713] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.329847][  T713] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.363399][  T713] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.366351][  T713] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.600543][ T6319] loop0: detected capacity change from 0 to 512
[   72.611675][ T6190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.616939][ T6319] EXT4-fs: Ignoring removed bh option
[   72.626410][ T6319] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   72.643135][ T5850] Bluetooth: hci2: command tx timeout
[   72.654094][ T6319] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   72.657690][ T6319] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   72.684265][ T6319] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   72.691079][ T6319] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[   72.707896][ T6190] veth0_vlan: entered promiscuous mode
[   72.719759][ T6190] veth1_vlan: entered promiscuous mode
[   72.758638][ T6190] veth0_macvtap: entered promiscuous mode
[   72.766806][ T6190] veth1_macvtap: entered promiscuous mode
[   72.781162][ T6319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.798758][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.820412][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.828207][ T6319] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.136: bg 0: block 353: padding at end of block bitmap is not set
[   72.842344][ T5908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.846563][ T5908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.872661][ T5908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.876941][ T5908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.936857][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.971598][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'.
[   72.976950][ T6324] netlink: 'syz.0.137': attribute type 2 has an invalid length.
[   73.102224][  T303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.105539][  T303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.163484][  T303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.174823][  T303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.215319][   T33] audit: type=1326 audit(1756316083.635:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.0.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266e58ebe9 code=0x7ffc0000
[   73.234398][   T33] audit: type=1326 audit(1756316083.665:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.0.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266e58ebe9 code=0x7ffc0000
[   73.252176][   T33] audit: type=1326 audit(1756316083.665:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.0.140" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f266e58ebe9 code=0x7ffc0000
[   73.260906][   T33] audit: type=1326 audit(1756316083.665:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.0.140" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f266e58ebe9 code=0x0
[   73.358450][ T6342] loop2: detected capacity change from 0 to 1024
[   73.438190][ T6345] loop3: detected capacity change from 0 to 4096
[   73.452873][ T6345] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   73.461389][ T6345] ntfs3(loop3): Failed to load $Extend (-22).
[   73.463668][ T6345] ntfs3(loop3): Failed to initialize $Extend.
[   73.476970][ T1089] hfsplus: b-tree write err: -5, ino 4
[   73.645528][ T5850] Bluetooth: hci0: Malformed LE Event: 0x1b
[   73.729463][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'.
[   73.733735][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'.
[   73.856162][ T6357] loop3: detected capacity change from 0 to 4096
[   73.867120][ T6357] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   73.907285][ T6357] ntfs3(loop3): ino=19, mi_enum_attr
[   73.909728][ T6357] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   73.940981][ T6357] ntfs3(loop3): failed to convert "c46c" to iso8859-14
[   73.947645][ T6357] ntfs3(loop3): ino=20, mi_enum_attr
[   74.351494][ T6368] loop3: detected capacity change from 0 to 256
[   74.364780][ T6368] vfat: Deprecated parameter 'posix'
[   74.392407][ T6368] FAT-fs: "posix" option is obsolete, not supported now
[   74.722779][ T5850] Bluetooth: hci2: command tx timeout
[   74.992439][   T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   75.152193][   T47] usb 4-1: Using ep0 maxpacket: 16
[   75.161016][   T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   75.167134][   T47] usb 4-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00
[   75.171503][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.184898][   T47] usb 4-1: config 0 descriptor??
[   75.619966][   T47] apple 0003:05AC:029F.0002: unknown main item tag 0x0
[   75.623053][   T47] apple 0003:05AC:029F.0002: unknown main item tag 0x0
[   75.626026][   T47] apple 0003:05AC:029F.0002: unknown main item tag 0x0
[   75.628959][   T47] apple 0003:05AC:029F.0002: unknown main item tag 0x0
[   75.634532][   T47] apple 0003:05AC:029F.0002: unknown main item tag 0x0
[   75.652675][   T47] apple 0003:05AC:029F.0002: hidraw0: USB HID v0.fe Device [HID 05ac:029f] on usb-dummy_hcd.3-1/input0
[   75.850302][ T5909] usb 4-1: USB disconnect, device number 2
[   76.549693][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.166'.
[   76.561167][ T6406] netlink: 108 bytes leftover after parsing attributes in process `syz.3.166'.
[   76.568712][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.166'.
[   76.575394][ T6405] loop2: detected capacity change from 0 to 4096
[   76.579138][ T6406] netlink: 108 bytes leftover after parsing attributes in process `syz.3.166'.
[   76.588671][ T6406] netlink: 84 bytes leftover after parsing attributes in process `syz.3.166'.
[   76.601659][ T6407] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   76.657018][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'.
[   76.802287][ T5850] Bluetooth: hci2: command tx timeout
[   76.917528][ T6415] loop3: detected capacity change from 0 to 32768
[   76.931136][ T6415] jfs_mount: Mount Failure: superblock is corrupt!
[   76.936145][ T6415] Mount JFS Failure: -22
[   76.938408][ T6415] jfs_mount failed w/return code = -22
[   77.072412][  T793] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   77.118417][ T6421] loop3: detected capacity change from 0 to 32768
[   77.135055][ T6421] JBD2: Ignoring recovery information on journal
[   77.174408][ T6421] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   77.217126][ T6190] ocfs2: Unmounting device (7,3) on (node local)
[   77.252534][  T793] usb 3-1: Using ep0 maxpacket: 32
[   77.259363][  T793] usb 3-1: config 0 has an invalid interface number: 108 but max is 0
[   77.268591][  T793] usb 3-1: config 0 has no interface number 0
[   77.271090][  T793] usb 3-1: config 0 interface 108 altsetting 180 endpoint 0x2 has invalid wMaxPacketSize 0
[   77.277978][  T793] usb 3-1: config 0 interface 108 has no altsetting 0
[   77.289113][  T793] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=97.c3
[   77.293328][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.296600][  T793] usb 3-1: Product: syz
[   77.298326][  T793] usb 3-1: Manufacturer: syz
[   77.300171][  T793] usb 3-1: SerialNumber: syz
[   77.308164][  T793] usb 3-1: config 0 descriptor??
[   77.313497][  T793] ttusbir 3-1:0.108: cannot find expected altsetting
[   77.525562][  T793] usb 3-1: USB disconnect, device number 5
[   78.209132][ T6435] netlink: 27 bytes leftover after parsing attributes in process `syz.3.180'.
[   78.283654][ T6438] input: syz0 as /devices/virtual/input/input7
[   78.608218][ T6458] loop3: detected capacity change from 0 to 1024
[   79.362413][ T5850] Bluetooth: hci2: command tx timeout
[   79.574603][ T6483] loop3: detected capacity change from 0 to 32768
[   79.608110][ T6483] JBD2: Ignoring recovery information on journal
[   79.648879][ T6483] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   79.714527][ T6499] loop0: detected capacity change from 0 to 64
[   79.739774][ T6483] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74)
[   79.752162][ T6483] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   79.756872][ T6483] OCFS2: File system is now read-only.
[   79.759202][ T6483] (syz.3.199,6483,1):ocfs2_search_one_group:1738 ERROR: status = -30
[   79.765669][ T6483] (syz.3.199,6483,1):ocfs2_claim_suballoc_bits:1989 ERROR: status = -30
[   79.777926][ T6483] (syz.3.199,6483,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[   79.791358][ T6483] (syz.3.199,6483,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[   79.811473][ T6483] (syz.3.199,6483,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[   79.836296][ T6483] (syz.3.199,6483,1):ocfs2_mknod_locked:641 ERROR: status = -30
[   79.841536][ T6483] (syz.3.199,6483,1):ocfs2_mknod:388 ERROR: status = -30
[   79.852440][ T6483] (syz.3.199,6483,1):ocfs2_mknod:505 ERROR: status = -30
[   79.860015][ T6483] (syz.3.199,6483,1):ocfs2_create:678 ERROR: status = -30
[   79.868906][ T6503] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   79.975869][ T6190] ocfs2: Unmounting device (7,3) on (node local)
[   80.387080][ T6522] Bluetooth: MGMT ver 1.23
[   80.601365][ T6531] loop3: detected capacity change from 0 to 2048
[   80.616595][ T6531] syz.3.216: attempt to access beyond end of device
[   80.616595][ T6531] loop3: rw=0, sector=562949953421394, nr_sectors = 2 limit=2048
[   80.621805][ T6531] NILFS (loop3): I/O error reading meta-data file (ino=5, block-offset=0)
[   80.627639][ T6531] NILFS (loop3): error -5 while loading super root
[   80.774806][ T6533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'.
[   80.948271][ T6540] openvswitch: netlink: IP tunnel TTL not specified.
[   81.010275][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'.
[   81.022616][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'.
[   81.273552][ T5910] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   81.312177][    T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   81.442379][ T5910] usb 3-1: Using ep0 maxpacket: 32
[   81.443558][ T1272] cfg80211: failed to load regulatory.db
[   81.451145][ T5910] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   81.454659][ T5910] usb 3-1: config 0 has no interface number 0
[   81.457201][ T5910] usb 3-1: config 0 interface 184 has no altsetting 0
[   81.463208][ T5910] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   81.471249][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.476805][ T5910] usb 3-1: Product: syz
[   81.478593][ T5910] usb 3-1: Manufacturer: syz
[   81.480644][ T5910] usb 3-1: SerialNumber: syz
[   81.485139][    T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[   81.487775][ T5910] usb 3-1: config 0 descriptor??
[   81.488945][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.488960][    T9] usb 4-1: Product: syz
[   81.488969][    T9] usb 4-1: Manufacturer: syz
[   81.488978][    T9] usb 4-1: SerialNumber: syz
[   81.504810][    T9] usb 4-1: config 0 descriptor??
[   81.505994][ T5910] smsc75xx v1.0.0
[   81.508560][ T5910] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   81.513013][    T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[   81.513735][ T5910] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[   81.516429][    T9] pctv452e: pctv452e_power_ctrl: 1
[   81.516429][    T9] 
[   81.532204][    T9] usb 4-1: selecting invalid altsetting 3
[   81.535851][    T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[   81.535851][    T9] 
[   81.544849][    T9] dvb-usb: bulk message failed: -22 (5/0)
[   81.557426][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   81.570781][    T9] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[   81.714636][    T9] usb 4-1: USB disconnect, device number 3
[   81.920328][ T5910] usb 3-1: USB disconnect, device number 6
[   82.552255][    T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   82.629461][ T6568] loop2: detected capacity change from 0 to 128
[   82.707683][    T9] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[   82.710828][    T9] usb 4-1: config 0 has no interface number 0
[   82.715398][    T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   82.718935][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.725705][    T9] usb 4-1: Product: syz
[   82.727647][    T9] usb 4-1: Manufacturer: syz
[   82.729808][    T9] usb 4-1: SerialNumber: syz
[   82.735250][    T9] usb 4-1: config 0 descriptor??
[   83.250328][ T6570] loop2: detected capacity change from 0 to 131072
[   83.253863][ T6570] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[   83.256118][ T6570] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   83.259776][ T6570] F2FS-fs (loop2): invalid crc value
[   83.293752][ T6570] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   83.300910][ T6570] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   83.303898][ T6570] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   83.348979][    T9] usb 4-1: Firmware version (0.0) predates our first public release.
[   83.354922][    T9] usb 4-1: Please update to version 0.2 or newer
[   83.411358][    T9] usb 4-1: USB disconnect, device number 4
[   83.505766][ T6594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'.
[   83.810017][ T6609] vcan0: tx address claim with dest, not broadcast
[   84.003888][  T793] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   84.024396][ T6627] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.182355][  T793] usb 1-1: Using ep0 maxpacket: 8
[   84.204445][  T793] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   84.207452][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.209947][  T793] usb 1-1: Product: syz
[   84.211339][  T793] usb 1-1: Manufacturer: syz
[   84.235850][  T793] usb 1-1: SerialNumber: syz
[   84.268463][  T793] usb 1-1: config 0 descriptor??
[   84.353071][  T793] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   84.357108][  T793] usb 1-1: setting power ON
[   84.361800][  T793] dvb-usb: bulk message failed: -22 (2/0)
[   84.363050][ T6645] Zero length message leads to an empty skb
[   84.380085][  T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   84.385943][  T793] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   84.396810][  T793] usb 1-1: media controller created
[   84.536671][  T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   84.694723][  T793] usb 1-1: selecting invalid altsetting 6
[   84.705437][  T793] usb 1-1: digital interface selection failed (-22)
[   84.708521][  T793] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   84.728805][  T793] usb 1-1: setting power OFF
[   84.732807][  T793] dvb-usb: bulk message failed: -22 (2/0)
[   84.735503][  T793] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   84.739252][  T793] (NULL device *): no alternate interface
[   85.033043][  T793] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   85.146910][  T793] usb 1-1: USB disconnect, device number 4
[   85.864813][   T33] audit: type=1326 audit(1756316096.295:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[   85.903475][   T33] audit: type=1326 audit(1756316096.295:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[   85.943800][   T33] audit: type=1326 audit(1756316096.305:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.267" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[   85.989243][   T33] audit: type=1326 audit(1756316096.305:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[   86.026793][   T33] audit: type=1326 audit(1756316096.305:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[   86.072937][   T33] audit: type=1326 audit(1756316096.305:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.267" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[   86.094213][   T33] audit: type=1326 audit(1756316096.305:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[   86.117547][   T33] audit: type=1326 audit(1756316096.305:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.267" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[   86.147322][   T33] audit: type=1326 audit(1756316096.305:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.267" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[   86.192697][   T33] audit: type=1326 audit(1756316096.305:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.267" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc721b2ade9 code=0x7ffc0000
[   86.215437][ T6684] loop0: detected capacity change from 0 to 512
[   86.254863][ T6684] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   86.270122][ T6684] EXT4-fs (loop0): 1 truncate cleaned up
[   86.285210][ T6684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.397153][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.565011][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   86.859511][ T6696] loop0: detected capacity change from 0 to 32768
[   86.862540][ T6696] XFS: attr2 mount option is deprecated.
[   86.885987][ T6696] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[   86.889195][ T6696] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   86.916782][ T6696] XFS (loop0): Ending clean mount
[   86.924427][ T6696] XFS (loop0): Quotacheck needed: Please wait.
[   86.944247][ T6696] XFS (loop0): Quotacheck: Done.
[   86.976601][ T5847] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   87.006771][ T6717] loop3: detected capacity change from 0 to 512
[   87.009830][ T6717] EXT4-fs (loop3): Test dummy encryption mode enabled
[   87.012625][ T6717] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   87.017792][ T6717] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.279: bad orphan inode 131083
[   87.037207][ T6717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.201464][ T6717] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   87.602555][ T6717] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   87.643657][ T6190] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.697417][ T6731] loop0: detected capacity change from 0 to 32768
[   87.706608][ T6731] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas: no devices in entry sb: 33/0 []
[   87.706608][ T6731] replicas (size 24):
[   87.706608][ T6731] btree: 0/1 [2] sb: 33/0 [] (unknown data_type 144): 56/184 [0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 0 0 0 0 0 0 0 0 2 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 16 0]
[   87.706608][ T6731] 
[   87.730344][ T6731] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[   88.854991][ T6791] netlink: 'syz.0.306': attribute type 1 has an invalid length.
[   89.087946][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'.
[   89.245674][ T6807] loop2: detected capacity change from 0 to 32768
[   89.248912][ T6807] XFS: ikeep mount option is deprecated.
[   89.269659][ T6807] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   89.291987][ T6807] XFS (loop2): Ending clean mount
[   89.297466][ T6807] XFS (loop2): Quotacheck needed: Please wait.
[   89.314000][ T6807] XFS (loop2): Quotacheck: Done.
[   89.348937][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   89.365743][    T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[   89.544864][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.548218][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[   89.552887][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[   89.557713][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[   89.561733][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   89.571887][    T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[   89.575988][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[   89.579351][    T9] usb 4-1: Product: syz
[   89.581184][    T9] usb 4-1: Manufacturer: syz
[   89.584915][    T9] usb 4-1: SerialNumber: syz
[   89.590998][    T9] usb 4-1: config 0 descriptor??
[   89.803835][    T9] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000
[   89.807023][    T9] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[   90.004637][    T9] radio-si470x 4-1:0.0: software version 0, hardware version 0
[   90.007461][    T9] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[   90.012322][    T9] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[   90.132093][ T5909] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   90.208116][    T9] radio-si470x 4-1:0.0: submitting int urb failed (-90)
[   90.302215][ T5909] usb 1-1: Using ep0 maxpacket: 8
[   90.306302][ T5909] usb 1-1: config 0 has an invalid interface number: 136 but max is 0
[   90.309246][ T5909] usb 1-1: config 0 has no interface number 0
[   90.311584][ T5909] usb 1-1: config 0 interface 136 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[   90.315456][ T5909] usb 1-1: config 0 interface 136 has no altsetting 0
[   90.324814][ T5909] usb 1-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice=4f.82
[   90.328532][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.338639][ T5909] usb 1-1: Product: syz
[   90.340224][ T5909] usb 1-1: Manufacturer: syz
[   90.348229][ T5909] usb 1-1: SerialNumber: syz
[   90.352521][ T5909] usb 1-1: config 0 descriptor??
[   90.356571][ T5909] appletouch 1-1:0.136: Could not find int-in endpoint
[   90.360885][ T6827] loop2: detected capacity change from 0 to 128
[   90.363679][ T5909] appletouch 1-1:0.136: probe with driver appletouch failed with error -5
[   90.367648][ T5909] usbhid 1-1:0.136: couldn't find an input interrupt endpoint
[   90.384844][ T6827] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.391551][ T6827] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   90.417507][ T5842] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   90.450904][ T6830] loop9: detected capacity change from 0 to 7
[   90.463738][ T6830] Dev loop9: unable to read RDB block 7
[   90.466091][ T6830]  loop9: unable to read partition table
[   90.468726][ T6830] loop9: partition table beyond EOD, truncated
[   90.475862][ T6830] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5)
[   90.563969][  T793] usb 1-1: USB disconnect, device number 5
[   90.843526][ T5910] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   90.992252][ T5910] usb 3-1: Using ep0 maxpacket: 32
[   90.996228][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   91.001246][ T5910] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   91.005098][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.011094][    T9] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71
[   91.012364][ T5910] usb 3-1: config 0 descriptor??
[   91.015440][    T9] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22
[   91.021702][    T9] usb 4-1: USB disconnect, device number 5
[   91.029976][ T5910] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   91.186979][ T6845] netlink: 'syz.0.326': attribute type 10 has an invalid length.
[   91.190699][ T6845] lo: entered promiscuous mode
[   91.199213][ T6845] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   91.745624][ T6862] loop3: detected capacity change from 0 to 8
[   91.756957][ T6862] SQUASHFS error: xz decompression failed, data probably corrupt
[   91.760020][ T6862] SQUASHFS error: Failed to read block 0x108: -5
[   91.763043][ T6862] SQUASHFS error: Unable to read metadata cache entry [106]
[   91.765451][ T6862] SQUASHFS error: Unable to read inode 0x0
[   91.797373][ T6864] loop3: detected capacity change from 0 to 128
[   91.892247][ T6866] mkiss: ax0: crc mode is auto.
[   92.216668][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.339'.
[   92.260314][ T6877] netlink: 'syz.0.339': attribute type 10 has an invalid length.
[   92.275297][ T6877] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   92.436588][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.341'.
[   92.524212][ T6883] loop3: detected capacity change from 0 to 8192
[   92.547364][ T6883] syz.3.342: attempt to access beyond end of device
[   92.547364][ T6883] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   92.560052][ T6883] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[   92.569318][ T6883] FAT-fs (loop3): Filesystem has been set read-only
[   92.578142][ T6883] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[   92.583242][ T6883] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[   92.618061][ T6888] loop0: detected capacity change from 0 to 512
[   92.630184][ T6888] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   92.655808][ T6888] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   92.671367][ T6888] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   92.676291][ T6888] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   92.679943][ T6888] System zones: 0-2, 18-18, 34-35
[   92.687035][ T6888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.918248][ T6897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.343: bg 0: block 353: padding at end of block bitmap is not set
[   93.052280][ T5910] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   93.214040][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.217646][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.220935][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   93.225473][ T5910] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   93.228793][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.235347][ T5910] usb 4-1: config 0 descriptor??
[   93.519659][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.563217][ T5313] usb 3-1: USB disconnect, device number 7
[   93.646265][ T5910] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xe
[   93.650163][ T5910] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   93.657982][ T5910] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   93.842522][  T793] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   94.022866][  T793] usb 1-1: Using ep0 maxpacket: 16
[   94.129383][  T793] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   94.144701][  T793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.153776][  T793] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   94.160143][  T793] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   94.165581][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.168951][  T793] usb 1-1: Product: syz
[   94.170845][  T793] usb 1-1: Manufacturer: syz
[   94.173193][  T793] usb 1-1: SerialNumber: syz
[   94.208714][   T47] usb 4-1: USB disconnect, device number 6
[   94.625618][  T793] usb 1-1: 0:2 : does not exist
[   95.237141][  T793] usb 1-1: USB disconnect, device number 6
[   95.303385][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   96.132280][ T5909] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   96.292193][ T5909] usb 3-1: Using ep0 maxpacket: 32
[   96.296098][ T5909] usb 3-1: config 0 has an invalid interface number: 63 but max is 0
[   96.299019][ T5909] usb 3-1: config 0 has no interface number 0
[   96.314338][ T5909] usb 3-1: config 0 interface 63 has no altsetting 0
[   96.317705][ T5909] usb 3-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=3b.9a
[   96.321202][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.333572][ T5909] usb 3-1: config 0 descriptor??
[   96.496225][ T6948] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[   96.499183][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   96.507254][ T6948] vhci_hcd vhci_hcd.0: Device attached
[   96.548049][ T5909] usb 3-1: string descriptor 0 read error: -71
[   96.553463][ T5909] gspca_main: t613-2.14.0 probing 17a1:0128
[   96.559475][ T5909] gspca_t613: unknown sensor 0000
[   96.569134][ T5909] t613 3-1:0.63: probe with driver t613 failed with error -22
[   96.575934][ T6949] vhci_hcd: connection closed
[   96.586951][ T5908] vhci_hcd: stop threads
[   96.593211][ T5909] usb 3-1: USB disconnect, device number 8
[   96.603798][ T5908] vhci_hcd: release socket
[   96.605864][ T5908] vhci_hcd: disconnect device
[   96.998333][  T793] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   97.117159][ T6953] netlink: 'syz.2.367': attribute type 1 has an invalid length.
[   97.120416][ T6953] netlink: 244 bytes leftover after parsing attributes in process `syz.2.367'.
[   97.812189][  T793] usb 1-1: Using ep0 maxpacket: 32
[   97.816144][  T793] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   97.819153][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'.
[   97.820798][  T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   97.830518][  T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   97.835441][  T793] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   97.839080][  T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.858269][  T793] usb 1-1: config 0 descriptor??
[   97.862529][ T6946] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   97.867589][  T793] hub 1-1:0.0: USB hub found
[   97.992157][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   98.070375][  T793] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[   98.076127][  T793] usbhid 1-1:0.0: can't add hid device: -71
[   98.078074][  T793] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   98.113880][  T793] usb 1-1: USB disconnect, device number 7
[   98.142303][    T9] usb 4-1: Using ep0 maxpacket: 8
[   98.146344][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   98.150965][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   98.159519][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[   98.164027][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.172664][    T9] usb 4-1: config 0 descriptor??
[   98.233601][   T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   98.382198][   T47] usb 3-1: Using ep0 maxpacket: 32
[   98.386914][   T47] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[   98.390290][   T47] usb 3-1: config 0 has no interface number 0
[   98.396498][   T47] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   98.400338][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.403757][   T47] usb 3-1: Product: syz
[   98.405524][   T47] usb 3-1: Manufacturer: syz
[   98.407430][   T47] usb 3-1: SerialNumber: syz
[   98.412756][   T47] usb 3-1: config 0 descriptor??
[   98.419494][   T47] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   98.584770][    T9] logitech 0003:046D:C298.0004: item fetching failed at offset 4/5
[   98.587770][    T9] logitech 0003:046D:C298.0004: parse failed
[   98.592379][    T9] logitech 0003:046D:C298.0004: probe with driver logitech failed with error -22
[   98.639481][   T47] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   98.658914][   T47] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   98.661168][ T6989] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   98.674077][ T6989] CIFS mount error: No usable UNC path provided in device string!
[   98.674077][ T6989] 
[   98.686498][ T6989] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   98.797150][   T47] usb 4-1: USB disconnect, device number 7
[   98.871500][ T7000] netlink: 'syz.0.389': attribute type 1 has an invalid length.
[   99.033112][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[   99.037584][   T47] usb 3-1: USB disconnect, device number 9
[   99.049080][   T47] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   99.068315][   T47] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   99.073701][   T47] quatech2 3-1:0.51: device disconnected
[   99.547217][ T7026] loop0: detected capacity change from 0 to 128
[   99.617113][ T7026] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   99.632402][ T7026] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   99.648190][ T5909] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   99.814191][ T5909] usb 4-1: config 0 has no interfaces?
[   99.822206][ T5909] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[   99.826443][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.836433][ T5909] usb 4-1: config 0 descriptor??
[  100.053017][ T5909] usb 4-1: USB disconnect, device number 8
[  100.630550][ T7039] libceph: resolve '400' (ret=-3): failed
[  102.415450][ T5847] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  102.480883][ T7049] loop2: detected capacity change from 0 to 131072
[  102.500313][ T7049] F2FS-fs (loop2): invalid crc value
[  102.536557][ T7049] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.540355][ T7049] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  102.591338][ T7049] F2FS-fs (loop2): invalid namelen(0), ino:8, run fsck to fix.
[  102.605831][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'.
[  102.608996][ T7070] netlink: 'syz.0.414': attribute type 7 has an invalid length.
[  102.611625][ T7070] netlink: 'syz.0.414': attribute type 8 has an invalid length.
[  102.614804][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'.
[  102.621036][ T7070] gretap0: entered promiscuous mode
[  102.624653][ T7070] batadv_slave_1: entered promiscuous mode
[  102.682210][   T47] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  102.833651][   T47] usb 4-1: config 0 interface 0 has no altsetting 0
[  102.842332][   T47] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  102.845707][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.857450][   T47] usb 4-1: config 0 descriptor??
[  103.012156][ T5910] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  103.046751][ T7078] loop2: detected capacity change from 0 to 64
[  103.103539][ T7080] loop2: detected capacity change from 0 to 256
[  103.135215][ T7080] FAT-fs (loop2): Directory bread(block 64) failed
[  103.137712][ T7080] FAT-fs (loop2): Directory bread(block 65) failed
[  103.140214][ T7080] FAT-fs (loop2): Directory bread(block 66) failed
[  103.143150][ T7080] FAT-fs (loop2): Directory bread(block 67) failed
[  103.145742][ T7080] FAT-fs (loop2): Directory bread(block 68) failed
[  103.148237][ T7080] FAT-fs (loop2): Directory bread(block 69) failed
[  103.150719][ T7080] FAT-fs (loop2): Directory bread(block 70) failed
[  103.153828][ T7080] FAT-fs (loop2): Directory bread(block 71) failed
[  103.156534][ T7080] FAT-fs (loop2): Directory bread(block 72) failed
[  103.159314][ T7080] FAT-fs (loop2): Directory bread(block 73) failed
[  103.162786][ T5910] usb 1-1: Using ep0 maxpacket: 32
[  103.166704][ T5910] usb 1-1: config index 0 descriptor too short (expected 1051, got 27)
[  103.169463][ T5910] usb 1-1: config 0 has an invalid interface number: 101 but max is 1
[  103.174553][ T5910] usb 1-1: config 0 has an invalid interface number: 33 but max is 1
[  103.179421][ T5910] usb 1-1: config 0 has no interface number 0
[  103.181453][ T5910] usb 1-1: config 0 has no interface number 1
[  103.183854][ T5910] usb 1-1: config 0 interface 101 has no altsetting 0
[  103.186294][ T5910] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84
[  103.189243][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.196825][ T5910] usb 1-1: config 0 descriptor??
[  103.276769][   T47] elecom 0003:056E:00FC.0005: unknown main item tag 0x0
[  103.280451][   T47] elecom 0003:056E:00FC.0005: unknown main item tag 0x0
[  103.288960][   T47] elecom 0003:056E:00FC.0005: unknown main item tag 0x0
[  103.292175][   T47] elecom 0003:056E:00FC.0005: unknown main item tag 0x0
[  103.296164][   T47] elecom 0003:056E:00FC.0005: unknown main item tag 0x0
[  103.298472][   T47] elecom 0003:056E:00FC.0005: unknown main item tag 0x0
[  103.299115][ T7084] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  103.300715][   T47] elecom 0003:056E:00FC.0005: unknown main item tag 0x0
[  103.307354][ T7084] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  103.310344][   T47] elecom 0003:056E:00FC.0005: hidraw0: USB HID v0.06 Device [HID 056e:00fc] on usb-dummy_hcd.3-1/input0
[  103.311246][ T7084] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  103.320430][ T7084] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[  103.325756][ T7084] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  103.329596][ T7084] comedi comedi3: 8255: I/O port conflict (0xffffffff80000005,4)
[  103.333484][ T7084] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  103.337304][ T7084] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  103.340281][ T7084] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  103.343129][ T7084] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  103.414966][ T5910] usb 1-1: string descriptor 0 read error: -71
[  103.437435][ T7090] loop2: detected capacity change from 0 to 256
[  103.441248][ T7090] exfat: Deprecated parameter 'utf8'
[  103.452831][ T5910] usb 1-1: USB disconnect, device number 8
[  103.455396][ T7090] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  103.489905][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.101/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  103.501116][ T5909] usb 4-1: USB disconnect, device number 9
[  103.607293][ T7094] loop2: detected capacity change from 0 to 256
[  103.843540][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  104.532393][ T5910] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  104.689971][ T7117] loop0: detected capacity change from 0 to 32768
[  104.735942][ T5910] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  104.740590][ T5910] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  104.745753][ T5910] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  104.748598][ T5910] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  104.753235][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 4
[  104.754498][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'.
[  104.757025][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  104.768774][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'.
[  104.775901][ T5910] usb 4-1: string descriptor 0 read error: -22
[  104.782732][ T5910] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  104.789269][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.794451][ T7117] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  104.794463][ T7117]   allowing incompatible features above 0.0: (unknown version)
[  104.794467][ T7117]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  104.808191][ T5910] usb 4-1: config 0 descriptor??
[  104.810603][ T7117] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  104.810627][ T7117] bcachefs (loop0): initializing new filesystem
[  104.816379][ T7117] bcachefs (loop0): going read-write
[  104.842247][ T7117] bcachefs (loop0): marking superblocks
[  104.850233][ T7117] bcachefs (loop0): initializing freespace
[  104.853851][ T7117] bcachefs (loop0): done initializing freespace
[  104.853885][ T5910] hub 4-1:0.0: bad descriptor, ignoring hub
[  104.857447][ T7117] bcachefs (loop0): reading snapshots table
[  104.858613][ T5910] hub 4-1:0.0: probe with driver hub failed with error -5
[  104.860826][ T7117] bcachefs (loop0): reading snapshots done
[  104.876486][ T7117] bcachefs (loop0): done starting filesystem
[  105.096200][ T7131] loop2: detected capacity change from 0 to 40427
[  105.099844][ T7131] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  105.103019][ T7131] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  105.108327][ T7131] F2FS-fs (loop2): invalid crc value
[  105.163912][ T7131] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  105.174113][ T5910] usb 4-1: USB disconnect, device number 10
[  105.334031][ T7131] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  105.336553][ T7131] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  105.438055][ T5847] bcachefs (loop0): shutting down
[  105.439921][ T5847] bcachefs (loop0): going read-only
[  105.446728][ T5847] bcachefs (loop0): finished waiting for writes to stop
[  105.462684][ T5847] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  105.527200][ T5847] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  105.532495][ T5847] bcachefs (loop0): clean shutdown complete, journal seq 5
[  105.536145][ T5847] bcachefs (loop0): marking filesystem clean
[  105.561104][ T5847] bcachefs (loop0): shutdown complete
[  105.576570][   T33] kauditd_printk_skb: 720 callbacks suppressed
[  105.576582][   T33] audit: type=1800 audit(1756316116.005:736): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.437" name="file1" dev="loop2" ino=10 res=0 errno=0
[  106.822660][   T33] audit: type=1800 audit(1756316117.255:737): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.446" name="/" dev="fuse" ino=1 res=0 errno=0
[  106.947728][ T7163] loop3: detected capacity change from 0 to 1024
[  106.955812][ T7163] hfsplus: request for non-existent node 3 in B*Tree
[  106.958355][ T7163] hfsplus: request for non-existent node 3 in B*Tree
[  107.716326][ T1272] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  107.899612][ T1272] usb 1-1: Using ep0 maxpacket: 8
[  107.908003][ T5842] syz-executor: attempt to access beyond end of device
[  107.908003][ T5842] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  107.914934][ T1272] usb 1-1: unable to get BOS descriptor or descriptor too short
[  107.916300][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  107.916311][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.916315][ T5842] Call Trace:
[  107.916318][ T5842]  <TASK>
[  107.916321][ T5842]  dump_stack_lvl+0x189/0x250
[  107.916335][ T5842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.916343][ T5842]  ? __pfx_queue_work_on+0x10/0x10
[  107.916351][ T5842]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  107.916360][ T5842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  107.916373][ T5842]  f2fs_handle_critical_error+0x37c/0x540
[  107.916386][ T5842]  f2fs_write_end_io+0x886/0xb60
[  107.916407][ T5842]  __submit_merged_bio+0x27a/0x6a0
[  107.916419][ T5842]  ? up_write+0x1c4/0x420
[  107.916433][ T5842]  __submit_merged_write_cond+0x44c/0x530
[  107.916451][ T5842]  f2fs_sync_node_pages+0x1479/0x15e0
[  107.916476][ T5842]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  107.916500][ T5842]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  107.916510][ T5842]  ? up_write+0x1c4/0x420
[  107.916517][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  107.916526][ T5842]  f2fs_write_checkpoint+0xe6f/0x1df0
[  107.916542][ T5842]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  107.916600][ T5842]  ? kill_f2fs_super+0x298/0x6c0
[  107.916613][ T5842]  kill_f2fs_super+0x2c3/0x6c0
[  107.916623][ T5842]  ? __pfx_kill_f2fs_super+0x10/0x10
[  107.916628][ T5842]  ? radix_tree_delete_item+0x2b6/0x400
[  107.916640][ T5842]  ? shrinker_free+0x2ce/0x3e0
[  107.916650][ T5842]  deactivate_locked_super+0xbc/0x130
[  107.916659][ T5842]  cleanup_mnt+0x425/0x4c0
[  107.916667][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.916677][ T5842]  task_work_run+0x1d4/0x260
[  107.916688][ T5842]  ? __pfx_task_work_run+0x10/0x10
[  107.916695][ T5842]  ? __x64_sys_umount+0x122/0x160
[  107.916706][ T5842]  ? exit_to_user_mode_loop+0x40/0x110
[  107.916717][ T5842]  exit_to_user_mode_loop+0xec/0x110
[  107.916727][ T5842]  do_syscall_64+0x2bd/0x3b0
[  107.916736][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.916744][ T5842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.916751][ T5842]  ? exc_page_fault+0x9f/0xf0
[  107.916766][ T5842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.916772][ T5842] RIP: 0033:0x7f368fb8ff17
[  107.916779][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  107.916785][ T5842] RSP: 002b:00007ffe39aa37d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  107.916793][ T5842] RAX: 0000000000000000 RBX: 00007f368fc11c05 RCX: 00007f368fb8ff17
[  107.916798][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe39aa3890
[  107.916802][ T5842] RBP: 00007ffe39aa3890 R08: 0000000000000000 R09: 0000000000000000
[  107.916806][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe39aa4920
[  107.916810][ T5842] R13: 00007f368fc11c05 R14: 0000000000019e8c R15: 00007ffe39aa4960
[  107.916822][ T5842]  </TASK>
[  107.916915][ T5842] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  107.919543][ T1272] usb 1-1: config 103 has an invalid interface number: 189 but max is 0
[  108.028874][ T1272] usb 1-1: config 103 has no interface number 0
[  108.031398][ T1272] usb 1-1: config 103 interface 189 has no altsetting 0
[  108.037923][ T1272] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=56.b8
[  108.041074][ T1272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.044410][ T1272] usb 1-1: Product: syz
[  108.045874][ T1272] usb 1-1: Manufacturer: syz
[  108.047578][ T1272] usb 1-1: SerialNumber: syz
[  108.131266][ T1272] r8152-cfgselector 1-1: Unknown version 0x0000
[  108.158601][ T7177] loop3: detected capacity change from 0 to 128
[  108.171384][ T7177] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  108.179882][ T7177] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  108.224756][ T6190] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  108.347386][ T1272] r8152 1-1:103.189: Expected endpoints are not found
[  108.357102][ T7183] netlink: 'syz.3.457': attribute type 9 has an invalid length.
[  108.360267][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'.
[  108.365558][ T1272] r8152-cfgselector 1-1: USB disconnect, device number 9
[  108.382916][ T5908] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.383059][ T7183] netlink: 'syz.3.457': attribute type 9 has an invalid length.
[  108.385892][ T5908] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.388850][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'.
[  108.395325][ T5908] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.399361][ T5908] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.510199][ T7189] loop3: detected capacity change from 0 to 256
[  108.575780][ T7189] FAT-fs (loop3): Directory bread(block 64) failed
[  108.578187][ T7189] FAT-fs (loop3): Directory bread(block 65) failed
[  108.580604][ T7189] FAT-fs (loop3): Directory bread(block 66) failed
[  108.583418][ T7189] FAT-fs (loop3): Directory bread(block 67) failed
[  108.585973][ T7189] FAT-fs (loop3): Directory bread(block 68) failed
[  108.588084][ T7189] FAT-fs (loop3): Directory bread(block 69) failed
[  108.590401][ T7189] FAT-fs (loop3): Directory bread(block 70) failed
[  108.593412][ T7189] FAT-fs (loop3): Directory bread(block 71) failed
[  108.595724][ T7189] FAT-fs (loop3): Directory bread(block 72) failed
[  108.598173][ T7189] FAT-fs (loop3): Directory bread(block 73) failed
[  108.921443][ T7194] netlink: 'syz.3.461': attribute type 23 has an invalid length.
[  108.953757][ T7196] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  108.967974][ T7196] qnx4: unable to read the superblock
[  110.037886][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'.
[  110.148654][ T7211] loop0: detected capacity change from 0 to 2048
[  110.156855][ T7211] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  110.171635][ T5846] udevd[5846]: incorrect nilfs2 checksum on /dev/loop0
[  110.215468][ T5846] udevd[5846]: incorrect nilfs2 checksum on /dev/loop0
[  110.603301][ T7253] loop0: detected capacity change from 0 to 1024
[  110.626268][ T7253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.685592][ T7253] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  110.705907][ T7253] EXT4-fs (loop0): Remounting filesystem read-only
[  110.732910][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.824807][ T7249] loop3: detected capacity change from 0 to 32768
[  110.915340][ T7249]  loop3: p9 p11 p16
[  111.270603][ T6122] udevd[6122]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory
[  111.273202][ T5853] udevd[5853]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[  111.275386][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[  111.297766][ T7257] loop2: detected capacity change from 0 to 32768
[  111.300390][ T7257] XFS: noikeep mount option is deprecated.
[  111.351608][ T7257] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.381819][ T7257] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  111.394014][ T7257] XFS (loop2): Starting recovery (logdev: internal)
[  111.408522][ T7257] XFS (loop2): Ending recovery (logdev: internal)
[  111.449537][ T7257] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8
[  111.454363][ T7257] XFS (loop2): Unmount and run xfs_repair
[  111.458516][ T7257] XFS (loop2): Internal error i != 1 at line 628 of file fs/xfs/libxfs/xfs_alloc.c.  Caller xfs_alloc_fixup_trees+0x929/0xd20
[  111.465558][ T7257] CPU: 0 UID: 0 PID: 7257 Comm: syz.2.489 Not tainted syzkaller #0 PREEMPT(full) 
[  111.465568][ T7257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.465573][ T7257] Call Trace:
[  111.465576][ T7257]  <TASK>
[  111.465579][ T7257]  dump_stack_lvl+0x189/0x250
[  111.465592][ T7257]  ? __pfx__xfs_alert_tag+0x10/0x10
[  111.465600][ T7257]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.465610][ T7257]  ? __pfx_xfs_btree_lookup+0x10/0x10
[  111.465621][ T7257]  xfs_corruption_error+0x122/0x170
[  111.465629][ T7257]  ? xfs_alloc_fixup_trees+0x929/0xd20
[  111.465640][ T7257]  xfs_alloc_fixup_trees+0x95e/0xd20
[  111.465650][ T7257]  ? xfs_alloc_fixup_trees+0x929/0xd20
[  111.465663][ T7257]  ? __pfx_xfs_alloc_fixup_trees+0x10/0x10
[  111.465674][ T7257]  ? rcu_is_watching+0x15/0xb0
[  111.465682][ T7257]  ? xfs_alloc_ag_vextent_lastblock+0x3e2/0x6e0
[  111.465691][ T7257]  ? rcu_is_watching+0x15/0xb0
[  111.465701][ T7257]  xfs_alloc_cur_finish+0xd3/0x4b0
[  111.465715][ T7257]  xfs_alloc_ag_vextent_near+0xd1a/0x1230
[  111.465733][ T7257]  ? __pfx_xfs_alloc_ag_vextent_near+0x10/0x10
[  111.465743][ T7257]  ? xfs_group_grab+0x28/0x480
[  111.465751][ T7257]  ? xfs_alloc_vextent_prepare_ag+0x1b2/0x610
[  111.465761][ T7257]  xfs_alloc_vextent_iterate_ags+0x640/0x940
[  111.465776][ T7257]  xfs_alloc_vextent_start_ag+0x388/0x850
[  111.465788][ T7257]  xfs_bmapi_allocate+0x188e/0x2e00
[  111.465804][ T7257]  ? __pfx_xfs_bmapi_allocate+0x10/0x10
[  111.465818][ T7257]  ? xfs_iext_lookup_extent+0x41e/0x7e0
[  111.465826][ T7257]  ? xfs_iext_prev+0x35a/0x370
[  111.465833][ T7257]  ? xfs_iext_get_extent+0x1bb/0x370
[  111.465843][ T7257]  xfs_bmapi_write+0x7df/0x1260
[  111.465858][ T7257]  ? __pfx_xfs_bmapi_write+0x10/0x10
[  111.465875][ T7257]  ? rcu_is_watching+0x15/0xb0
[  111.465884][ T7257]  xfs_da_grow_inode_int+0x298/0x860
[  111.465897][ T7257]  ? __pfx_xfs_da_grow_inode_int+0x10/0x10
[  111.465906][ T7257]  ? xfs_attr3_leaf_lookup_int+0xaaa/0xe90
[  111.465946][ T7257]  xfs_da_grow_inode+0x16d/0x390
[  111.465960][ T7257]  ? __pfx_xfs_da_grow_inode+0x10/0x10
[  111.465971][ T7257]  ? xfs_da3_node_lookup_int+0x111e/0x1330
[  111.465988][ T7257]  xfs_attr3_leaf_split+0x15e/0xa60
[  111.466003][ T7257]  ? __pfx_xfs_attr3_leaf_split+0x10/0x10
[  111.466022][ T7257]  xfs_da3_split+0x2f8/0x10d0
[  111.466041][ T7257]  xfs_attr_set_iter+0x1d5b/0x4b70
[  111.466052][ T7257]  ? filename_setxattr+0x274/0x600
[  111.466066][ T7257]  ? path_setxattrat+0x364/0x3a0
[  111.466075][ T7257]  ? __x64_sys_setxattr+0xbc/0xe0
[  111.466090][ T7257]  ? __pfx_xfs_attr_set_iter+0x10/0x10
[  111.466113][ T7257]  ? kasan_quarantine_put+0xdd/0x220
[  111.466126][ T7257]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.466144][ T7257]  ? __xfs_trans_commit+0x3e0/0xbd0
[  111.466153][ T7257]  ? kmem_cache_free+0x18f/0x400
[  111.466160][ T7257]  ? __xfs_trans_commit+0x3e0/0xbd0
[  111.466171][ T7257]  ? __xfs_trans_commit+0x4c7/0xbd0
[  111.466185][ T7257]  xfs_attr_finish_item+0xed/0x320
[  111.466193][ T7257]  ? __pfx_xfs_attr_finish_item+0x10/0x10
[  111.466200][ T7257]  xfs_defer_finish_one+0x5c8/0xcf0
[  111.466224][ T7257]  ? __pfx_xfs_defer_finish_one+0x10/0x10
[  111.466243][ T7257]  xfs_defer_finish_noroll+0x910/0x12d0
[  111.466257][ T7257]  ? xfs_trans_commit+0x10b/0x1c0
[  111.466273][ T7257]  ? __pfx_xfs_defer_finish_noroll+0x10/0x10
[  111.466283][ T7257]  ? inode_set_ctime_current+0x740/0xb40
[  111.466300][ T7257]  ? inode_maybe_inc_iversion+0x17c/0x1e0
[  111.466319][ T7257]  xfs_trans_commit+0x10b/0x1c0
[  111.466334][ T7257]  ? __pfx_xfs_trans_commit+0x10/0x10
[  111.466348][ T7257]  ? xfs_trans_log_inode+0x12c/0x1a0
[  111.466356][ T7257]  xfs_attr_set+0xdc6/0x1210
[  111.466367][ T7257]  ? __pfx_xfs_attr_set+0x10/0x10
[  111.466398][ T7257]  ? xfs_da_hashname+0x59d/0x740
[  111.466404][ T7257]  ? do_raw_spin_lock+0x121/0x290
[  111.466415][ T7257]  ? xfs_attr_change+0x2ac/0x390
[  111.466426][ T7257]  xfs_xattr_set+0x14d/0x250
[  111.466437][ T7257]  ? __pfx_xfs_xattr_set+0x10/0x10
[  111.466463][ T7257]  ? evm_protect_xattr+0x4d4/0xa90
[  111.466481][ T7257]  ? __pfx_evm_protect_xattr+0x10/0x10
[  111.466495][ T7257]  ? __pfx_xfs_xattr_set+0x10/0x10
[  111.466510][ T7257]  __vfs_setxattr+0x43c/0x480
[  111.466534][ T7257]  __vfs_setxattr_noperm+0x12d/0x660
[  111.466556][ T7257]  vfs_setxattr+0x16b/0x2f0
[  111.466577][ T7257]  ? __pfx_vfs_setxattr+0x10/0x10
[  111.466590][ T7257]  ? mnt_get_write_access+0x223/0x2a0
[  111.466609][ T7257]  filename_setxattr+0x274/0x600
[  111.466631][ T7257]  ? __pfx_filename_setxattr+0x10/0x10
[  111.466649][ T7257]  ? getname_flags+0x1e5/0x540
[  111.466662][ T7257]  path_setxattrat+0x364/0x3a0
[  111.466681][ T7257]  ? __pfx_path_setxattrat+0x10/0x10
[  111.466692][ T7257]  ? do_futex+0x395/0x420
[  111.466723][ T7257]  ? __bad_area_nosemaphore+0x3fb/0x780
[  111.466737][ T7257]  ? rcu_is_watching+0x15/0xb0
[  111.466751][ T7257]  __x64_sys_setxattr+0xbc/0xe0
[  111.466763][ T7257]  do_syscall_64+0xfa/0x3b0
[  111.466778][ T7257]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.466792][ T7257]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.466803][ T7257]  ? exc_page_fault+0x9f/0xf0
[  111.466819][ T7257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.466826][ T7257] RIP: 0033:0x7f368fb8ebe9
[  111.466833][ T7257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.466839][ T7257] RSP: 002b:00007f36909fc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  111.466847][ T7257] RAX: ffffffffffffffda RBX: 00007f368fdb5fa0 RCX: 00007f368fb8ebe9
[  111.466852][ T7257] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000
[  111.466856][ T7257] RBP: 00007f368fc11e19 R08: 0000000000000000 R09: 0000000000000000
[  111.466860][ T7257] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000
[  111.466864][ T7257] R13: 00007f368fdb6038 R14: 00007f368fdb5fa0 R15: 00007ffe39aa4548
[  111.466875][ T7257]  </TASK>
[  111.466984][ T7257] XFS (loop2): Corruption detected. Unmount and run xfs_repair
[  111.704631][ T7257] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xcc0/0x12d0 (fs/xfs/libxfs/xfs_defer.c:721).  Shutting down filesystem.
[  111.710031][ T7257] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  111.759514][ T5842] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.889307][ T7284] loop0: detected capacity change from 0 to 2048
[  111.931898][ T7285] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.994102][ T7287] loop3: detected capacity change from 0 to 64
[  112.042534][ T7287] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  112.130607][ T7290] binder: 7289:7290 ioctl c0306201 200000000640 returned -22
[  112.323359][   T33] audit: type=1326 audit(1756316122.755:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[  112.330542][   T33] audit: type=1326 audit(1756316122.755:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[  112.372140][   T33] audit: type=1326 audit(1756316122.775:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.501" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[  112.380778][   T33] audit: type=1326 audit(1756316122.775:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[  112.389465][   T33] audit: type=1326 audit(1756316122.775:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[  112.399098][   T33] audit: type=1326 audit(1756316122.775:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.501" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[  112.407775][   T33] audit: type=1326 audit(1756316122.775:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[  112.416970][   T33] audit: type=1326 audit(1756316122.775:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[  112.426046][   T33] audit: type=1326 audit(1756316122.775:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.501" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[  112.435045][   T33] audit: type=1326 audit(1756316122.775:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc721b8ebe9 code=0x7ffc0000
[  112.452174][ T5910] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  112.602143][ T5910] usb 3-1: Using ep0 maxpacket: 32
[  112.607197][ T5910] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  112.610264][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.613571][ T5910] usb 3-1: Product: syz
[  112.615177][ T5910] usb 3-1: Manufacturer: syz
[  112.616764][ T5910] usb 3-1: SerialNumber: syz
[  112.620043][ T5910] usb 3-1: config 0 descriptor??
[  112.624891][ T5910] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  113.440877][ T5910] gspca_ov534_9: reg_w failed -71
[  113.591249][ T7332] loop3: detected capacity change from 0 to 4096
[  113.603167][ T7332] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  113.625744][ T7332] ntfs3(loop3): Failed to initialize $Secure::$SDH (-22).
[  113.633049][ T7332] ntfs3(loop3): Failed to initialize $Secure (-22).
[  113.716543][ T7336] loop3: detected capacity change from 0 to 256
[  113.719605][ T7336] exFAT-fs (loop3): failed to read boot sector
[  113.721815][ T7336] exFAT-fs (loop3): failed to recognize exfat type
[  113.752248][ T5910] gspca_ov534_9: Unknown sensor 0000
[  113.752321][ T5910] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[  113.780053][ T5910] usb 3-1: USB disconnect, device number 10
[  114.016093][ T7338] loop3: detected capacity change from 0 to 32768
[  114.020118][ T7338] XFS: ikeep mount option is deprecated.
[  114.041579][ T7338] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  114.101858][ T7338] XFS (loop3): Ending clean mount
[  114.108705][ T7338] XFS (loop3): Quotacheck needed: Please wait.
[  114.190302][ T7338] XFS (loop3): Quotacheck: Done.
[  114.217934][ T6190] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  114.392469][ T7366] netlink: 104 bytes leftover after parsing attributes in process `syz.3.529'.
[  114.432637][   T47] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  114.594953][   T47] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  114.597800][   T47] usb 3-1: config 0 has no interface number 0
[  114.600190][   T47] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  114.606933][   T47] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  114.610684][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.614177][   T47] usb 3-1: Product: syz
[  114.615929][   T47] usb 3-1: Manufacturer: syz
[  114.617917][   T47] usb 3-1: SerialNumber: syz
[  114.621182][   T47] usb 3-1: config 0 descriptor??
[  114.628158][   T47] yurex 3-1:0.50: Could not find endpoints
[  114.812233][ T1272] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  114.832943][   T47] usb 3-1: USB disconnect, device number 11
[  114.974091][ T1272] usb 1-1: Using ep0 maxpacket: 32
[  114.977958][ T1272] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  114.984344][ T1272] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  114.988056][ T1272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.991282][ T1272] usb 1-1: Product: syz
[  114.993382][ T1272] usb 1-1: Manufacturer: syz
[  114.996301][ T1272] usb 1-1: SerialNumber: syz
[  115.000409][ T1272] usb 1-1: config 0 descriptor??
[  115.004634][ T7380] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  115.011736][ T1272] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  115.228581][ T1272] usb 1-1: USB disconnect, device number 10
[  115.562534][ T5910] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  115.734088][ T5910] usb 4-1: config 4 has an invalid interface number: 231 but max is 0
[  115.742413][ T5910] usb 4-1: config 4 has no interface number 0
[  115.751356][ T5910] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  115.774775][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.787053][ T5910] usb 4-1: Product: syz
[  115.788796][ T5910] usb 4-1: Manufacturer: syz
[  115.790744][ T5910] usb 4-1: SerialNumber: syz
[  115.819312][ T5910] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  115.899187][ T7409] loop2: detected capacity change from 0 to 1024
[  115.906205][ T7409] EXT4-fs: Ignoring removed oldalloc option
[  115.911744][ T7409] EXT4-fs: Ignoring removed orlov option
[  115.916114][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'.
[  115.919188][ T7409] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  115.935709][ T7409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.038385][ T5910] vp7045: USB control message 'out' went wrong.
[  116.040964][ T5910] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  116.059249][ T5910] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  116.071472][ T5910] usb 4-1: USB disconnect, device number 11
[  116.119929][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.269470][ T7436] loop3: detected capacity change from 0 to 128
[  117.308936][ T7436] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.323223][ T7436] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.411394][ T6190] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.532405][ T1272] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  117.717039][ T1272] usb 3-1: config 32 has an invalid interface number: 251 but max is 0
[  117.720527][ T1272] usb 3-1: config 32 has no interface number 0
[  117.735442][ T1272] usb 3-1: config 32 interface 251 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024
[  117.763768][ T1272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=6f.ea
[  117.769128][ T7442] loop3: detected capacity change from 0 to 512
[  117.776140][ T1272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.785084][ T7442] EXT4-fs: Ignoring removed mblk_io_submit option
[  117.790978][ T1272] usb 3-1: Product: syz
[  117.799667][ T1272] usb 3-1: Manufacturer: syz
[  117.807202][ T7442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  117.810833][ T1272] usb 3-1: SerialNumber: syz
[  117.830960][ T7435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  117.845565][ T1272] iowarrior 3-1:32.251: no interrupt-in endpoint found
[  117.855921][ T7442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.861137][ T7442] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.909580][ T6190] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.001164][ T7450] loop0: detected capacity change from 0 to 256
[  118.001964][ T7448] input: syz1 as /devices/virtual/input/input10
[  118.009526][ T7450] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.015455][ T7450] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  118.030584][ T7450] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  118.054085][   T33] kauditd_printk_skb: 7 callbacks suppressed
[  118.054097][   T33] audit: type=1800 audit(1756316128.475:755): pid=7450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.564" name="file1" dev="loop0" ino=1048609 res=0 errno=0
[  118.058538][ T1272] usb 3-1: USB disconnect, device number 12
[  118.279643][ T7460] warning: `syz.0.569' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  118.424333][ T7464] capability: warning: `syz.3.571' uses deprecated v2 capabilities in a way that may be insecure
[  118.515733][ T7466] loop3: detected capacity change from 0 to 4096
[  118.527414][ T7466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.538620][ T7462] loop0: detected capacity change from 0 to 32768
[  118.556175][   T33] audit: type=1800 audit(1756316128.975:756): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.572" name="file1" dev="loop3" ino=15 res=0 errno=0
[  118.580594][ T7462] Mount JFS Failure: -22
[  118.584984][ T7462] jfs_mount failed w/return code = -22
[  118.651101][ T6190] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.988090][ T7490] loop0: detected capacity change from 0 to 8
[  119.012789][ T7490] SQUASHFS error: lzo decompression failed, data probably corrupt
[  119.015943][ T7490] SQUASHFS error: Failed to read block 0x62b: -5
[  119.018507][ T7490] SQUASHFS error: Unable to read metadata cache entry [629]
[  119.021473][ T7490] SQUASHFS error: Unable to read inode 0x11f
[  119.467284][ T7506] binder: 7505:7506 ioctl c0306201 200000000080 returned -14
[  119.519909][ T7508] loop3: detected capacity change from 0 to 256
[  119.523494][ T7508] exfat: Deprecated parameter 'utf8'
[  119.525928][ T7508] exfat: Deprecated parameter 'namecase'
[  119.528554][ T7508] exfat: Deprecated parameter 'namecase'
[  119.531001][ T7508] exfat: Deprecated parameter 'utf8'
[  119.544597][ T7508] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d)
[  119.869355][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'.
[  119.944285][ T5879] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  120.112506][ T5879] usb 3-1: config 0 has an invalid interface number: 95 but max is 0
[  120.118163][ T5879] usb 3-1: config 0 has no interface number 0
[  120.120504][ T5879] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64
[  120.134869][ T5879] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0xD has invalid maxpacket 16
[  120.155899][ T5879] usb 3-1: New USB device found, idVendor=10b5, idProduct=ac70, bcdDevice=27.ee
[  120.165985][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.169657][ T5879] usb 3-1: Product: syz
[  120.171552][ T5879] usb 3-1: Manufacturer: syz
[  120.175975][ T5879] usb 3-1: SerialNumber: syz
[  120.191416][ T5879] usb 3-1: config 0 descriptor??
[  120.196235][ T7514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  120.204534][ T7514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  120.220316][ T5879] cp210x 3-1:0.95: cp210x converter detected
[  120.558953][ T5879] cp210x 3-1:0.95: failed to get vendor val 0x370b size 1: -71
[  120.586657][ T5879] cp210x 3-1:0.95: querying part number failed
[  120.825590][ T5879] usb 3-1: cp210x converter now attached to ttyUSB0
[  120.846429][ T5879] usb 3-1: USB disconnect, device number 13
[  120.867563][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  120.874338][ T5879] cp210x 3-1:0.95: device disconnected
[  121.374667][ T7533] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.481569][ T7535] loop2: detected capacity change from 0 to 1024
[  121.493447][ T7535] EXT4-fs: inline encryption not supported
[  121.502231][ T7535] EXT4-fs: Ignoring removed bh option
[  121.529688][ T7535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.533508][ T7537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.604'.
[  121.716041][ T7542] loop0: detected capacity change from 0 to 1024
[  121.746348][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.772281][ T7542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.891632][ T5909] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  121.998618][ T5909] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  122.613861][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.222418][ T1272] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  123.372121][ T1272] usb 3-1: Using ep0 maxpacket: 32
[  123.378946][ T1272] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  123.386739][ T1272] usb 3-1: config 0 has no interface number 0
[  123.392530][ T1272] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  123.396331][ T1272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.399846][ T1272] usb 3-1: Product: syz
[  123.401755][ T1272] usb 3-1: Manufacturer: syz
[  123.404224][ T1272] usb 3-1: SerialNumber: syz
[  123.408932][ T1272] usb 3-1: config 0 descriptor??
[  123.416416][ T1272] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  123.750023][ T7572] loop3: detected capacity change from 0 to 128
[  123.767512][ T7572] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  123.784541][   T33] audit: type=1800 audit(1756316134.215:757): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.617" name="bus" dev="loop3" ino=1048610 res=0 errno=0
[  123.856315][   T26] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  123.915484][ T7575] loop0: detected capacity change from 0 to 4096
[  124.080212][ T1272] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  124.088171][ T1272] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  124.139689][ T7575] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  124.318073][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  124.320650][ T5879] usb 3-1: USB disconnect, device number 14
[  124.522917][ T5879] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  124.550659][ T5847] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22.
[  124.564885][ T5879] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  124.581868][ T5879] quatech2 3-1:0.51: device disconnected
[  124.621310][ T7583] loop0: detected capacity change from 0 to 512
[  124.659156][ T7583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.665869][ T7583] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.694532][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.828634][ T7591] loop3: detected capacity change from 0 to 512
[  124.851261][ T7591] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  124.968279][ T7591] EXT4-fs (loop3): failed to open journal device unknown-block(11,127) -6
[  125.094913][ T7607] netlink: 72 bytes leftover after parsing attributes in process `syz.2.628'.
[  125.246184][ T7612] loop0: detected capacity change from 0 to 256
[  125.291689][ T7612] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  125.773725][ T7621] loop0: detected capacity change from 0 to 2048
[  125.827107][ T7621] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.225691][ T7631] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  126.275924][ T7631] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  126.276459][ T7633] loop0: detected capacity change from 0 to 512
[  126.311033][ T7633] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  126.318697][ T7633] System zones: 1-12
[  126.326416][ T7633] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.636: invalid indirect mapped block 1819239214 (level 1)
[  126.343356][ T7633] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.636: bg 0: block 361: padding at end of block bitmap is not set
[  126.350092][ T7633] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  126.355544][ T7633] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.636: attempt to clear invalid blocks 33619980 len 1
[  126.361366][ T7633] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.636: invalid indirect mapped block 1819239214 (level 0)
[  126.370991][ T7633] EXT4-fs (loop0): 1 truncate cleaned up
[  126.381452][ T7633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.423570][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.647107][ T7643] loop0: detected capacity change from 0 to 16
[  126.660155][ T7643] erofs (device loop0): mounted with root inode @ nid 36.
[  126.711307][ T5847] erofs (device loop0): bogus dirent @ nid 36
[  126.836132][ T7639] loop3: detected capacity change from 0 to 40427
[  126.841111][ T7639] F2FS-fs (loop3): build fault injection rate: 771
[  126.845546][ T7639] F2FS-fs (loop3): invalid crc value
[  126.903586][ T7639] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.909222][ T7639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  126.934061][ T7647] loop2: detected capacity change from 0 to 32768
[  126.961159][ T7647] 
[  126.961159][ T7647]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  126.961159][ T7647] 
[  126.966101][ T6190] syz-executor: attempt to access beyond end of device
[  126.966101][ T6190] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  126.973751][ T6190] CPU: 1 UID: 0 PID: 6190 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  126.973793][ T6190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.973801][ T6190] Call Trace:
[  126.973806][ T6190]  <TASK>
[  126.973812][ T6190]  dump_stack_lvl+0x189/0x250
[  126.973834][ T6190]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.973848][ T6190]  ? __pfx_queue_work_on+0x10/0x10
[  126.973860][ T6190]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  126.973876][ T6190]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  126.973902][ T6190]  f2fs_handle_critical_error+0x37c/0x540
[  126.973925][ T6190]  f2fs_write_end_io+0x886/0xb60
[  126.973954][ T6190]  __submit_merged_bio+0x27a/0x6a0
[  126.973977][ T6190]  __submit_merged_write_cond+0x255/0x530
[  126.974000][ T6190]  f2fs_write_data_pages+0x261d/0x3000
[  126.974045][ T6190]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.974073][ T6190]  ? arch_stack_walk+0xfc/0x150
[  126.974112][ T6190]  ? __mod_zone_page_state+0xd7/0x140
[  126.974137][ T6190]  ? folios_put_refs+0x58b/0x670
[  126.974162][ T6190]  ? __lock_acquire+0xab9/0xd20
[  126.974186][ T6190]  ? do_raw_spin_lock+0x121/0x290
[  126.974211][ T6190]  ? do_raw_spin_unlock+0x4d/0x240
[  126.974225][ T6190]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.974243][ T6190]  do_writepages+0x32e/0x550
[  126.974269][ T6190]  ? do_raw_spin_unlock+0x4d/0x240
[  126.974287][ T6190]  filemap_fdatawrite+0x199/0x240
[  126.974303][ T6190]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  126.974360][ T6190]  ? do_raw_spin_unlock+0x4d/0x240
[  126.974378][ T6190]  f2fs_sync_dirty_inodes+0x31f/0x830
[  126.974409][ T6190]  f2fs_write_checkpoint+0x95a/0x1df0
[  126.974443][ T6190]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  126.974493][ T6190]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  126.974505][ T6190]  ? kfree+0x18e/0x440
[  126.974520][ T6190]  ? kill_f2fs_super+0x298/0x6c0
[  126.974537][ T6190]  kill_f2fs_super+0x2c3/0x6c0
[  126.974555][ T6190]  ? __pfx_kill_f2fs_super+0x10/0x10
[  126.974565][ T6190]  ? radix_tree_delete_item+0x2b6/0x400
[  126.974587][ T6190]  ? shrinker_free+0x2ce/0x3e0
[  126.974603][ T6190]  deactivate_locked_super+0xbc/0x130
[  126.974619][ T6190]  cleanup_mnt+0x425/0x4c0
[  126.974633][ T6190]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.974650][ T6190]  task_work_run+0x1d4/0x260
[  126.974670][ T6190]  ? __pfx_task_work_run+0x10/0x10
[  126.974683][ T6190]  ? __x64_sys_umount+0x122/0x160
[  126.974703][ T6190]  ? exit_to_user_mode_loop+0x40/0x110
[  126.974723][ T6190]  exit_to_user_mode_loop+0xec/0x110
[  126.974740][ T6190]  do_syscall_64+0x2bd/0x3b0
[  126.974756][ T6190]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.974797][ T6190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.974809][ T6190]  ? exc_page_fault+0x9f/0xf0
[  126.974827][ T6190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.974838][ T6190] RIP: 0033:0x7fc721b8ff17
[  126.974849][ T6190] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  126.974859][ T6190] RSP: 002b:00007ffd89c7e2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  126.974873][ T6190] RAX: 0000000000000000 RBX: 00007fc721c11c05 RCX: 00007fc721b8ff17
[  126.974881][ T6190] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd89c7e390
[  126.974888][ T6190] RBP: 00007ffd89c7e390 R08: 0000000000000000 R09: 0000000000000000
[  126.974895][ T6190] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd89c7f420
[  126.974903][ T6190] R13: 00007fc721c11c05 R14: 000000000001ef4b R15: 00007ffd89c7f460
[  126.974927][ T6190]  </TASK>
[  126.974932][ T6190] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  127.017867][ T7647] ERROR: (device loop2): diWrite: ixpxd invalid
[  127.017867][ T7647] 
[  127.135612][ T7647] ERROR: (device loop2): txCommit: 
[  127.135612][ T7647] 
[  127.215486][ T5842] 
[  127.215486][ T5842]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  127.215486][ T5842] 
[  127.234944][ T5842] 
[  127.234944][ T5842]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  127.234944][ T5842] 
[  127.237204][ T5908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.379683][ T5908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.466943][ T5908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.550643][ T5908] bond0: (slave netdevsim0): Releasing backup interface
[  127.558812][ T5908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.692250][ T5879] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  127.839279][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.842790][ T5879] usb 3-1: Using ep0 maxpacket: 32
[  127.847720][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.851175][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.859725][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.860722][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.873471][ T5908] bridge_slave_1: left allmulticast mode
[  127.876719][ T5908] bridge_slave_1: left promiscuous mode
[  127.881152][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.881974][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.885970][ T5879] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  127.889066][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.891747][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.944472][ T5908] bridge_slave_0: left allmulticast mode
[  127.944637][ T5879] usb 3-1: config 0 descriptor??
[  127.946500][ T5908] bridge_slave_0: left promiscuous mode
[  127.946632][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.169389][ T5908] gretap0 (unregistering): left promiscuous mode
[  128.386651][ T5879] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x7
[  128.408268][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.418201][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.426595][ T5908] bond0 (unregistering): Released all slaves
[  128.577357][ T5879] hid-led 0003:27B8:01ED.0007: probe with driver hid-led failed with error -71
[  128.599056][ T5879] usb 3-1: USB disconnect, device number 15
[  129.140767][ T5908] batadv_slave_1: left promiscuous mode
[  129.150395][ T5908] hsr_slave_0: left promiscuous mode
[  129.155602][ T5908] hsr_slave_1: left promiscuous mode
[  129.159294][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.162412][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.168289][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.170857][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.244359][ T5908] veth1_macvtap: left promiscuous mode
[  129.246655][ T5908] veth0_macvtap: left promiscuous mode
[  129.249010][ T5908] veth1_vlan: left promiscuous mode
[  129.251013][ T5908] veth0_vlan: left promiscuous mode
[  129.348961][ T7682] loop3: detected capacity change from 0 to 256
[  129.397441][ T7684] loop2: detected capacity change from 0 to 1024
[  129.407501][ T7684] EXT4-fs: Ignoring removed nobh option
[  129.417486][ T7684] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data
[  129.924687][ T5235] Bluetooth: hci1: command tx timeout
[  130.351746][ T7700] loop3: detected capacity change from 0 to 1024
[  130.456528][ T5908] team0 (unregistering): Port device team_slave_1 removed
[  130.500851][ T5908] team0 (unregistering): Port device team_slave_0 removed
[  130.700774][ T7702] loop3: detected capacity change from 0 to 40427
[  130.727132][ T7702] F2FS-fs: heap/no_heap options were deprecated
[  130.729801][ T7702] F2FS-fs: heap/no_heap options were deprecated
[  130.745524][ T7702] F2FS-fs (loop3): FLUSH_MERGE not compatible with readonly mode
[  131.308102][ T7709] loop2: detected capacity change from 0 to 2048
[  131.313366][ T7709] EXT4-fs: Ignoring removed orlov option
[  131.326248][ T7668] chnl_net:caif_netlink_parms(): no params data found
[  131.360971][ T7709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.368132][ T7709] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.442343][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.446419][ T7668] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.449211][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.451803][ T7668] bridge_slave_0: entered allmulticast mode
[  131.457607][ T7668] bridge_slave_0: entered promiscuous mode
[  131.471870][ T7668] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.482940][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.488805][ T7668] bridge_slave_1: entered allmulticast mode
[  131.496598][ T7668] bridge_slave_1: entered promiscuous mode
[  131.535571][ T7723] bond1: entered promiscuous mode
[  131.537417][ T7723] bond1: entered allmulticast mode
[  131.546401][ T7723] 8021q: adding VLAN 0 to HW filter on device bond1
[  131.606537][ T7668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.626561][ T7668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.672187][ T7705] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  131.674954][ T7705] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  131.713570][ T7668] team0: Port device team_slave_0 added
[  131.724446][ T7668] team0: Port device team_slave_1 added
[  131.776694][ T7705] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  131.779289][ T7705] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  131.825811][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.828688][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.859840][ T7668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.889108][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.891949][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.912133][ T7668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.925958][ T7728] loop2: detected capacity change from 0 to 32768
[  131.936351][ T7705] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  131.938838][ T7705] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  131.954618][ T7728] XFS: ikeep mount option is deprecated.
[  131.956858][ T7728] XFS: ikeep mount option is deprecated.
[  131.973262][ T7728] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.015753][ T7728] XFS (loop2): Ending clean mount
[  132.018185][ T7668] hsr_slave_0: entered promiscuous mode
[  132.020970][ T7668] hsr_slave_1: entered promiscuous mode
[  132.028679][ T7668] debugfs: 'hsr0' already exists in 'hsr'
[  132.031055][ T7668] Cannot create hsr debugfs directory
[  132.053506][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.057574][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'.
[  132.195857][ T7745] loop3: detected capacity change from 0 to 512
[  132.245878][ T7745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.249971][ T7745] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.373300][ T7668] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  132.421645][ T7668] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  132.485808][ T7668] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  132.514969][ T7668] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  132.644022][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.690926][ T7668] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.701106][ T7668] 8021q: adding VLAN 0 to HW filter on device team0
[  132.705886][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.708217][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.725553][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.727855][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.755289][ T7668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  132.764932][ T7668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.787763][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'.
[  132.889881][ T7668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.040567][ T7668] veth0_vlan: entered promiscuous mode
[  133.047089][ T7668] veth1_vlan: entered promiscuous mode
[  133.062740][ T7668] veth0_macvtap: entered promiscuous mode
[  133.069656][ T7668] veth1_macvtap: entered promiscuous mode
[  133.079265][ T7668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.086114][ T7668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.095322][ T5872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.098685][ T5872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.110275][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.115080][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.187352][  T713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.190315][  T713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.212741][    T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  133.215658][ T6190] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.217613][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.221923][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.367467][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  133.371267][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 203, changing to 4
[  133.386407][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 46388, setting to 1023
[  133.397409][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  133.402736][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.411658][ T7813] Invalid ELF header magic: != ELF
[  133.414562][    T9] usb 3-1: config 0 descriptor??
[  133.505569][ T7822] loop3: detected capacity change from 0 to 512
[  133.530926][ T7822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.538887][ T7805] loop4: detected capacity change from 0 to 32768
[  133.556618][ T7805] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.646 (7805)
[  133.562018][ T7822] ext4 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  133.593380][ T7805] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  133.597045][ T7805] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  133.626964][    T9] ath6kl: Failed to submit usb control message: -71
[  133.634023][    T9] ath6kl: unable to send the bmi data to the device: -71
[  133.636332][    T9] ath6kl: Unable to send get target info: -71
[  133.658350][    T9] ath6kl: Failed to init ath6kl core: -71
[  133.661609][    T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  133.670383][ T6190] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.689168][ T7805] BTRFS info (device loop4): enabling ssd optimizations
[  133.694407][ T7805] BTRFS info (device loop4): enabling free space tree
[  133.707766][    T9] usb 3-1: USB disconnect, device number 16
[  133.819599][ T7668] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  134.068093][ T7863] loop3: detected capacity change from 0 to 512
[  134.096760][ T7863] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.686: corrupted in-inode xattr: invalid ea_ino
[  134.108419][ T7863] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.686: couldn't read orphan inode 15 (err -117)
[  134.126902][ T7863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.201177][ T6190] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.263592][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'.
[  134.273146][ T7858] loop4: detected capacity change from 0 to 32768
[  134.280898][ T7858] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  134.289160][ T7858] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  134.295540][   T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  134.348062][ T7858] (syz.4.685,7858,0):ocfs2_rename:1702 ERROR: status = -39
[  134.405345][ T7668] ocfs2: Unmounting device (7,4) on (node local)
[  134.617593][ T7877] loop3: detected capacity change from 0 to 32768
[  134.631487][ T7877] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  134.639404][ T7877] 
[  134.640221][ T7877] ======================================================
[  134.642749][ T7877] WARNING: possible circular locking dependency detected
[  134.645244][ T7877] syzkaller #0 Not tainted
[  134.647150][ T7877] ------------------------------------------------------
[  134.650374][ T7877] syz.3.691/7877 is trying to acquire lock:
[  134.652464][ T7877] ffff88811a8ec3c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  134.656911][ T7877] 
[  134.656911][ T7877] but task is already holding lock:
[  134.659283][ T7877] ffff88811a894060 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_extend_dir+0x650/0x4870
[  134.662530][ T7877] 
[  134.662530][ T7877] which lock already depends on the new lock.
[  134.662530][ T7877] 
[  134.666458][ T7877] 
[  134.666458][ T7877] the existing dependency chain (in reverse order) is:
[  134.669989][ T7877] 
[  134.669989][ T7877] -> #6 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  134.672871][ T7877]        lock_acquire+0x120/0x360
[  134.674572][ T7877]        down_write+0x96/0x1f0
[  134.676455][ T7877]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  134.678837][ T7877]        ocfs2_xattr_set+0x595/0x11f0
[  134.680732][ T7877]        ocfs2_set_acl+0x701/0x7b0
[  134.682551][ T7877]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  134.684410][ T7877]        vfs_set_acl+0x887/0xb00
[  134.686332][ T7877]        filename_setxattr+0x2e0/0x600
[  134.688527][ T7877]        path_setxattrat+0x364/0x3a0
[  134.690711][ T7877]        __x64_sys_setxattr+0xbc/0xe0
[  134.692669][ T7877]        do_syscall_64+0xfa/0x3b0
[  134.694535][ T7877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.697027][ T7877] 
[  134.697027][ T7877] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  134.700261][ T7877]        lock_acquire+0x120/0x360
[  134.702329][ T7877]        down_read+0x46/0x2e0
[  134.704316][ T7877]        ocfs2_init_acl+0x2f9/0x720
[  134.706276][ T7877]        ocfs2_mknod+0x1321/0x2050
[  134.708272][ T7877]        ocfs2_mkdir+0x191/0x440
[  134.710222][ T7877]        vfs_mkdir+0x306/0x510
[  134.711849][ T7877]        do_mkdirat+0x247/0x590
[  134.713444][ T7877]        __x64_sys_mkdirat+0x87/0xa0
[  134.715360][ T7877]        do_syscall_64+0xfa/0x3b0
[  134.716952][ T7877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.719000][ T7877] 
[  134.719000][ T7877] -> #4 (jbd2_handle){++++}-{0:0}:
[  134.721354][ T7877]        lock_acquire+0x120/0x360
[  134.723026][ T7877]        start_this_handle+0x1fa7/0x21c0
[  134.724872][ T7877]        jbd2__journal_start+0x2c1/0x5b0
[  134.726710][ T7877]        jbd2_journal_start+0x2a/0x40
[  134.728454][ T7877]        ocfs2_start_trans+0x376/0x6d0
[  134.730268][ T7877]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  134.732299][ T7877]        ocfs2_dismount_volume+0x201/0x8d0
[  134.734205][ T7877]        generic_shutdown_super+0x135/0x2c0
[  134.736624][ T7877]        kill_block_super+0x44/0x90
[  134.738796][ T7877]        deactivate_locked_super+0xbc/0x130
[  134.741204][ T7877]        cleanup_mnt+0x425/0x4c0
[  134.743122][ T7877]        task_work_run+0x1d4/0x260
[  134.744983][ T7877]        exit_to_user_mode_loop+0xec/0x110
[  134.746905][ T7877]        do_syscall_64+0x2bd/0x3b0
[  134.748606][ T7877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.750769][ T7877] 
[  134.750769][ T7877] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  134.753517][ T7877]        lock_acquire+0x120/0x360
[  134.755520][ T7877]        down_read+0x46/0x2e0
[  134.757560][ T7877]        ocfs2_start_trans+0x36a/0x6d0
[  134.759890][ T7877]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  134.762548][ T7877]        ocfs2_dismount_volume+0x201/0x8d0
[  134.764986][ T7877]        generic_shutdown_super+0x135/0x2c0
[  134.767217][ T7877]        kill_block_super+0x44/0x90
[  134.768867][ T7877]        deactivate_locked_super+0xbc/0x130
[  134.770897][ T7877]        cleanup_mnt+0x425/0x4c0
[  134.772526][ T7877]        task_work_run+0x1d4/0x260
[  134.774430][ T7877]        exit_to_user_mode_loop+0xec/0x110
[  134.776775][ T7877]        do_syscall_64+0x2bd/0x3b0
[  134.778888][ T7877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.781627][ T7877] 
[  134.781627][ T7877] -> #2 (sb_internal#6){.+.+}-{0:0}:
[  134.784804][ T7877]        lock_acquire+0x120/0x360
[  134.786928][ T7877]        ocfs2_start_trans+0x26b/0x6d0
[  134.789266][ T7877]        ocfs2_mknod+0xe93/0x2050
[  134.791384][ T7877]        ocfs2_create+0x1a5/0x440
[  134.793046][ T7877]        path_openat+0x14f4/0x3830
[  134.795129][ T7877]        do_filp_open+0x1fa/0x410
[  134.797075][ T7877]        do_sys_openat2+0x121/0x1c0
[  134.798910][ T7877]        __x64_sys_openat+0x138/0x170
[  134.800601][ T7877]        do_syscall_64+0xfa/0x3b0
[  134.802199][ T7877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.804557][ T7877] 
[  134.804557][ T7877] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  134.808031][ T7877]        lock_acquire+0x120/0x360
[  134.809712][ T7877]        down_write+0x96/0x1f0
[  134.811300][ T7877]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  134.813801][ T7877]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  134.816482][ T7877]        ocfs2_mknod+0xe32/0x2050
[  134.818109][ T7877]        ocfs2_create+0x1a5/0x440
[  134.819663][ T7877]        path_openat+0x14f4/0x3830
[  134.821320][ T7877]        do_filp_open+0x1fa/0x410
[  134.823157][ T7877]        do_sys_openat2+0x121/0x1c0
[  134.824902][ T7877]        __x64_sys_openat+0x138/0x170
[  134.826637][ T7877]        do_syscall_64+0xfa/0x3b0
[  134.828276][ T7877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.830371][ T7877] 
[  134.830371][ T7877] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  134.834012][ T7877]        validate_chain+0xb9b/0x2140
[  134.835748][ T7877]        __lock_acquire+0xab9/0xd20
[  134.837453][ T7877]        lock_acquire+0x120/0x360
[  134.839058][ T7877]        down_write+0x96/0x1f0
[  134.840859][ T7877]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  134.843024][ T7877]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  134.845435][ T7877]        ocfs2_extend_dir+0xc76/0x4870
[  134.847277][ T7877]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  134.849741][ T7877]        ocfs2_mknod+0x819/0x2050
[  134.851447][ T7877]        ocfs2_create+0x1a5/0x440
[  134.853180][ T7877]        vfs_create+0x24e/0x400
[  134.854940][ T7877]        do_mknodat+0x3c6/0x4d0
[  134.856714][ T7877]        __x64_sys_mknod+0x8c/0xa0
[  134.858450][ T7877]        do_syscall_64+0xfa/0x3b0
[  134.860022][ T7877]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.862203][ T7877] 
[  134.862203][ T7877] other info that might help us debug this:
[  134.862203][ T7877] 
[  134.865981][ T7877] Chain exists of:
[  134.865981][ T7877]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key
[  134.865981][ T7877] 
[  134.872437][ T7877]  Possible unsafe locking scenario:
[  134.872437][ T7877] 
[  134.874874][ T7877]        CPU0                    CPU1
[  134.876594][ T7877]        ----                    ----
[  134.878323][ T7877]   lock(&ocfs2_file_ip_alloc_sem_key);
[  134.880100][ T7877]                                lock(&oi->ip_xattr_sem);
[  134.882344][ T7877]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  134.884785][ T7877]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  134.887079][ T7877] 
[  134.887079][ T7877]  *** DEADLOCK ***
[  134.887079][ T7877] 
[  134.889556][ T7877] 3 locks held by syz.3.691/7877:
[  134.891108][ T7877]  #0: ffff888020b24428 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  134.893919][ T7877]  #1: ffff88811a8943c0 (&type->i_mutex_dir_key#18/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0
[  134.897764][ T7877]  #2: ffff88811a894060 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_extend_dir+0x650/0x4870
[  134.901703][ T7877] 
[  134.901703][ T7877] stack backtrace:
[  134.903799][ T7877] CPU: 1 UID: 0 PID: 7877 Comm: syz.3.691 Not tainted syzkaller #0 PREEMPT(full) 
[  134.903814][ T7877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.903822][ T7877] Call Trace:
[  134.903828][ T7877]  <TASK>
[  134.903834][ T7877]  dump_stack_lvl+0x189/0x250
[  134.903850][ T7877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.903863][ T7877]  ? __pfx__printk+0x10/0x10
[  134.903878][ T7877]  ? print_lock_name+0xde/0x100
[  134.903892][ T7877]  print_circular_bug+0x2ee/0x310
[  134.903905][ T7877]  check_noncircular+0x134/0x160
[  134.903918][ T7877]  validate_chain+0xb9b/0x2140
[  134.903930][ T7877]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  134.903948][ T7877]  ? look_up_lock_class+0x74/0x170
[  134.903962][ T7877]  ? register_lock_class+0x51/0x320
[  134.903978][ T7877]  __lock_acquire+0xab9/0xd20
[  134.903994][ T7877]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  134.904005][ T7877]  lock_acquire+0x120/0x360
[  134.904019][ T7877]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  134.904030][ T7877]  down_write+0x96/0x1f0
[  134.904037][ T7877]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  134.904044][ T7877]  ? __pfx_down_write+0x10/0x10
[  134.904051][ T7877]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  134.904061][ T7877]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  134.904073][ T7877]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.904088][ T7877]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  134.904101][ T7877]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  134.904115][ T7877]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  134.904127][ T7877]  ? stack_depot_save_flags+0x41b/0x860
[  134.904142][ T7877]  ? kasan_save_track+0x4f/0x80
[  134.904155][ T7877]  ? kasan_save_track+0x3e/0x80
[  134.904166][ T7877]  ? __kasan_kmalloc+0x93/0xb0
[  134.904179][ T7877]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  134.904191][ T7877]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  134.904202][ T7877]  ? ocfs2_extend_dir+0xc76/0x4870
[  134.904214][ T7877]  ? ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  134.904228][ T7877]  ? ocfs2_mknod+0x819/0x2050
[  134.904236][ T7877]  ? ocfs2_create+0x1a5/0x440
[  134.904245][ T7877]  ? vfs_create+0x24e/0x400
[  134.904262][ T7877]  ? do_mknodat+0x3c6/0x4d0
[  134.904273][ T7877]  ? __x64_sys_mknod+0x8c/0xa0
[  134.904286][ T7877]  ? do_syscall_64+0xfa/0x3b0
[  134.904301][ T7877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.904320][ T7877]  ? __kasan_kmalloc+0x93/0xb0
[  134.904333][ T7877]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  134.904346][ T7877]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  134.904359][ T7877]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  134.904372][ T7877]  ? down_write+0x162/0x1f0
[  134.904381][ T7877]  ? __pfx_down_write+0x10/0x10
[  134.904388][ T7877]  ocfs2_extend_dir+0xc76/0x4870
[  134.904399][ T7877]  ? rcu_is_watching+0x15/0xb0
[  134.904408][ T7877]  ? __pfx_ocfs2_extend_dir+0x10/0x10
[  134.904418][ T7877]  ? __pfx_ocfs2_journal_access_di+0x10/0x10
[  134.904427][ T7877]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  134.904436][ T7877]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.904444][ T7877]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  134.904452][ T7877]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  134.904460][ T7877]  ? __lock_acquire+0xab9/0xd20
[  134.904473][ T7877]  ? rcu_is_watching+0x15/0xb0
[  134.904479][ T7877]  ? ocfs2_buffer_cached+0x42a/0x8d0
[  134.904486][ T7877]  ? ocfs2_dx_dir_name_hash+0x229/0xaf0
[  134.904495][ T7877]  ? __asan_memcpy+0x40/0x70
[  134.904503][ T7877]  ? ocfs2_dx_dir_name_hash+0x9ba/0xaf0
[  134.904513][ T7877]  ? __pfx_ocfs2_dx_dir_name_hash+0x10/0x10
[  134.904525][ T7877]  ? ocfs2_buffer_cached+0x42a/0x8d0
[  134.904536][ T7877]  ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  134.904555][ T7877]  ? rcu_is_watching+0x15/0xb0
[  134.904563][ T7877]  ? __pfx_ocfs2_prepare_dir_for_insert+0x10/0x10
[  134.904571][ T7877]  ? ocfs2_search_dirblock+0x381/0x850
[  134.904581][ T7877]  ? __pfx_ocfs2_search_dirblock+0x10/0x10
[  134.904589][ T7877]  ? rcu_is_watching+0x15/0xb0
[  134.904595][ T7877]  ? ocfs2_buffer_cached+0x42a/0x8d0
[  134.904601][ T7877]  ? __brelse+0x59/0xa0
[  134.904608][ T7877]  ? ocfs2_find_entry+0xddb/0x2000
[  134.904615][ T7877]  ? __lock_acquire+0xab9/0xd20
[  134.904626][ T7877]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  134.904635][ T7877]  ? __pfx_ocfs2_read_blocks+0x10/0x10
[  134.904647][ T7877]  ? __lock_acquire+0xab9/0xd20
[  134.904662][ T7877]  ? ocfs2_read_inode_block+0x11d/0x190
[  134.904672][ T7877]  ? __pfx_ocfs2_read_inode_block+0x10/0x10
[  134.904718][ T7877]  ? do_raw_spin_unlock+0x4d/0x240
[  134.904729][ T7877]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[  134.904736][ T7877]  ? is_bpf_text_address+0x26/0x2b0
[  134.904748][ T7877]  ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10
[  134.904756][ T7877]  ? __kernel_text_address+0xd/0x40
[  134.904767][ T7877]  ? unwind_get_return_address+0x4d/0x90
[  134.904776][ T7877]  ? ocfs2_check_dir_for_entry+0x239/0x3f0
[  134.904786][ T7877]  ? __pfx_ocfs2_check_dir_for_entry+0x10/0x10
[  134.904797][ T7877]  ocfs2_mknod+0x819/0x2050
[  134.904806][ T7877]  ? __pfx_ocfs2_mknod+0x10/0x10
[  134.904812][ T7877]  ? do_raw_spin_unlock+0x4d/0x240
[  134.904820][ T7877]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[  134.904830][ T7877]  ? __lock_acquire+0xab9/0xd20
[  134.904842][ T7877]  ? __lock_acquire+0xab9/0xd20
[  134.904851][ T7877]  ? do_raw_spin_lock+0x121/0x290
[  134.904860][ T7877]  ? do_raw_spin_unlock+0x4d/0x240
[  134.904868][ T7877]  ? put_pid+0xe9/0x130
[  134.904876][ T7877]  ocfs2_create+0x1a5/0x440
[  134.904882][ T7877]  ? __pfx_from_kgid+0x10/0x10
[  134.904890][ T7877]  ? apparmor_path_mknod+0x1b1/0x230
[  134.904898][ T7877]  ? __pfx_ocfs2_create+0x10/0x10
[  134.904904][ T7877]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  134.904910][ T7877]  ? inode_permission+0x149/0x470
[  134.904916][ T7877]  ? __pfx_ocfs2_permission+0x10/0x10
[  134.904925][ T7877]  ? bpf_lsm_inode_create+0x9/0x20
[  134.904933][ T7877]  vfs_create+0x24e/0x400
[  134.904941][ T7877]  do_mknodat+0x3c6/0x4d0
[  134.904948][ T7877]  ? __pfx_do_mknodat+0x10/0x10
[  134.904954][ T7877]  ? getname_flags+0x1e5/0x540
[  134.904961][ T7877]  __x64_sys_mknod+0x8c/0xa0
[  134.904969][ T7877]  do_syscall_64+0xfa/0x3b0
[  134.904978][ T7877]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.904986][ T7877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.904993][ T7877]  ? exc_page_fault+0x9f/0xf0
[  134.905001][ T7877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.905008][ T7877] RIP: 0033:0x7fc721b8ebe9
[  134.905016][ T7877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.905022][ T7877] RSP: 002b:00007fc7229b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  134.905030][ T7877] RAX: ffffffffffffffda RBX: 00007fc721db5fa0 RCX: 00007fc721b8ebe9
[  134.905034][ T7877] RDX: 0000000000000707 RSI: 0000000000000000 RDI: 0000200000000000
[  134.905039][ T7877] RBP: 00007fc721c11e19 R08: 0000000000000000 R09: 0000000000000000
[  134.905043][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.905046][ T7877] R13: 00007fc721db6038 R14: 00007fc721db5fa0 R15: 00007ffd89c7f048
[  134.905053][ T7877]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  135.294069][ T7890] ocfs2: Unmounting device (7,3) on (node local)
[  135.546599][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.634755][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.675246][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.726151][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.801094][   T12] bridge_slave_1: left allmulticast mode
[  135.803855][   T12] bridge_slave_1: left promiscuous mode
[  135.806202][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.810279][   T12] bridge_slave_0: left allmulticast mode
[  135.814353][   T12] bridge_slave_0: left promiscuous mode
[  135.816735][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.965804][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.970258][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.974609][   T12] bond0 (unregistering): Released all slaves
[  136.051320][   T12] bond1 (unregistering): Released all slaves
[  136.260963][   T12] hsr_slave_0: left promiscuous mode
[  136.264358][   T12] hsr_slave_1: left promiscuous mode
[  136.266659][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.272285][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.275708][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.278700][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.284991][   T12] veth1_macvtap: left promiscuous mode
[  136.286805][   T12] veth0_macvtap: left promiscuous mode
[  136.289443][   T12] veth1_vlan: left promiscuous mode
[  136.389845][   T12] team0 (unregistering): Port device team_slave_1 removed
[  136.403035][   T12] team0 (unregistering): Port device team_slave_0 removed
[  136.900645][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.937776][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.003205][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.026014][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.109445][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.113973][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.122581][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  137.154688][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.158928][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.215314][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.219514][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.294776][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.298892][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.387116][   T12] bridge_slave_1: left allmulticast mode
[  137.389241][   T12] bridge_slave_1: left promiscuous mode
[  137.391310][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.403734][   T12] bridge_slave_0: left allmulticast mode
[  137.405914][   T12] bridge_slave_0: left promiscuous mode
[  137.408260][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.412555][   T12] bridge_slave_1: left allmulticast mode
[  137.414532][   T12] bridge_slave_1: left promiscuous mode
[  137.416400][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.419342][   T12] bridge_slave_0: left allmulticast mode
[  137.421244][   T12] bridge_slave_0: left promiscuous mode
[  137.424701][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.507943][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.511830][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.515423][   T12] bond0 (unregistering): Released all slaves
[  137.564782][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.569314][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.573651][   T12] bond0 (unregistering): Released all slaves
[  137.918533][   T12] hsr_slave_0: left promiscuous mode
[  137.921181][   T12] hsr_slave_1: left promiscuous mode
[  137.924155][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.927218][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.934457][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.937418][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.943464][   T12] hsr_slave_0: left promiscuous mode
[  137.946056][   T12] hsr_slave_1: left promiscuous mode
[  137.948553][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.951631][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.955163][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.958220][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.966447][   T12] veth1_macvtap: left promiscuous mode
[  137.968788][   T12] veth0_macvtap: left promiscuous mode
[  137.971127][   T12] veth1_vlan: left promiscuous mode
[  137.973637][   T12] veth0_vlan: left promiscuous mode
[  137.976501][   T12] veth1_macvtap: left promiscuous mode
[  137.978778][   T12] veth0_macvtap: left promiscuous mode
[  137.981084][   T12] veth1_vlan: left promiscuous mode
[  137.983681][   T12] veth0_vlan: left promiscuous mode
[  138.104940][   T12] team0 (unregistering): Port device team_slave_1 removed
[  138.117858][   T12] team0 (unregistering): Port device team_slave_0 removed
[  138.279140][   T12] team0 (unregistering): Port device team_slave_1 removed
[  138.291943][   T12] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
17:35:45  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff8880277b3000 RCX=00000000000001c5 RDX=0000000000000000
RSI=ffff8880277b31d8 RDI=0000559d87d19080 RBP=ffffc9000360f948 RSP=ffffc9000360f7d8
R8 =ffff8880277b3fff R9 =1ffff11004ef67ff R10=dffffc0000000000 R11=ffffed1004ef6800
R12=1ffff920006c1faf R13=0000559d87d18ea8 R14=ffffc9000360fd88 R15=0000000000001000
RIP=ffffffff8b7881e5 RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faabff57c80 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3361dff8 CR3=00000001185f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff823c7834 ffffffff823c780d
XMM02=00007f368fd87498 ffffffff823c780d XMM03=00007f368fd874a8 00007f368fd874a0
XMM04=00007f36908ed100 00007f368fd87460 XMM05=00007f368fd87478 00007f368fd874c0
XMM06=00007f368fd874b8 00007f368fd874b0 XMM07=00007f368fd874a8 00007f368fd874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f368fc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001f47 RDI=0000000000001f48 RBP=00000000000003f8 RSP=ffffc9000292d9b0
R8 =ffff8880213d0237 R9 =1ffff1100427a046 R10=dffffc0000000000 R11=ffffffff854f3440
R12=dffffc0000000000 R13=ffffffff99afa8d7 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f34bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc7229b56c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ff1dff8 CR3=000000002c044000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=3030303d74696d6d 6f632c656e6f6e3d XMM05=3430323030303030 3030303030303030
XMM06=0000000000000000 0000000000002c37 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 000001b7d1475bf9 XMM09=0000000000000000 00007fc721c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
