last executing test programs:

1m16.100739389s ago: executing program 2 (id=506):
syz_emit_vhci(&(0x7f0000004600)=ANY=[@ANYBLOB="040f0400000b08"], 0x7)

1m16.041355329s ago: executing program 2 (id=508):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb6}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

1m16.040821753s ago: executing program 2 (id=510):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@errors_remount}, {@noinit_itable}]}, 0xfe, 0x585, &(0x7f0000001500)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4)

1m15.982645993s ago: executing program 2 (id=512):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee01, 0xffffffffffffffff, 0x1000)

1m15.795445487s ago: executing program 2 (id=515):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x5, @loopback}, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x5, @private2, 0xc}, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x349b}], 0x1)

1m15.454060501s ago: executing program 2 (id=521):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000440)=0x2402a, 0x4)

1m15.328647651s ago: executing program 32 (id=521):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000440)=0x2402a, 0x4)

5.835846581s ago: executing program 0 (id=1336):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

5.835445097s ago: executing program 0 (id=1337):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x42, 0x1, 0x2, 0x0, 0x0, 0x1)

4.944222991s ago: executing program 0 (id=1341):
unshare(0x28000600)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
readahead(r0, 0x61b8, 0x7ff)

4.943874697s ago: executing program 0 (id=1342):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a3200"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xfffffffffffffffd)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB="726f6469722c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c6e6f636173652c73686f72746e616d653d6c6f7765722c747a3d5554432c756e695f786c6174653d312c73686f77657865632c6e6f6e756d7461696c00002c007d88658bba9f86c7bbf19329c9a2a1c1511e3af2126ad5803a0f4e3d8521dd3f1b515a0673be6fb14db7c6534edf0e5e1d29e4f05d5c82fd3e0372c644e7ba7ccec22efc923b0beac1490e"], 0x0, 0x29f, &(0x7f0000000580)="$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")
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)

4.90864081s ago: executing program 0 (id=1343):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000240)="f1f6d9e59001c26a", 0x8}, {&(0x7f0000000280)="5d8a48ee296c6e23", 0x8}, {0x0}], 0x3, 0xf0c, 0x1000)

4.346937801s ago: executing program 0 (id=1348):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_ax25_SIOCADDRT(r0, 0x8915, 0x0)

4.254648869s ago: executing program 33 (id=1348):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_ax25_SIOCADDRT(r0, 0x8915, 0x0)

3.984758196s ago: executing program 3 (id=1357):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x3, 0x1}, 0x10)

3.984084816s ago: executing program 3 (id=1359):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./bus\x00', 0x200800, &(0x7f0000000080)={[{@nogrpid}, {@usrquota}, {@nodiscard}, {@dax}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
close_range(r0, 0xffffffffffffffff, 0x0)

3.922031137s ago: executing program 1 (id=1360):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0x9, 0x2, 0x2}]})
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}})

3.783632776s ago: executing program 1 (id=1361):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = getpid()
io_uring_setup(0x30a7, 0x0)
syz_pidfd_open(r3, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0x11}], 0x1, 0x0, 0x0, 0x40010}, 0x0)

3.209671012s ago: executing program 3 (id=1362):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="20319a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.422378611s ago: executing program 1 (id=1363):
r0 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x400c840, &(0x7f0000000280)={0xa, 0x4e23, 0x4000001, @dev={0xfe, 0x80, '\x00', 0x2c}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0)

1.422193276s ago: executing program 1 (id=1364):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)

1.12287392s ago: executing program 3 (id=1365):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x20, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})

210.963033ms ago: executing program 1 (id=1366):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030342c756e695f786c6174653d312c636f6465706167653d3933362c757466383d302c696f636861727365743d757466382c636865636b3d72656c617865642c6e6f6e756d7461696c3d302c757466383d302c757466383d302c696f636861727365743d63703835302c726f6469722c00f7589df4827903b797bd0d41cd1096622f6861b99e643ac4a56749057e9086753fe532edff5327468e2d93feca7e33d47dd56aa048d0856d41769b48b721da9b"], 0x2a, 0x354, &(0x7f00000002c0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
rt_sigtimedwait(&(0x7f0000000240)={[0xae64]}, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8)

210.649829ms ago: executing program 3 (id=1367):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@noinit_itable}, {@usrquota}, {@jqfmt_vfsv0}, {@abort}, {@nodelalloc}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x189000, 0x82)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e)

818.659µs ago: executing program 1 (id=1368):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020094000000080006400000000208000440000000140900010073797a30000000000900020073797a32"], 0x94}}, 0x0)

0s ago: executing program 3 (id=1369):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"])

kernel console output (not intermixed with test programs):

88 but max is 1
[  111.698711][  T793] usb 3-1: config 4 has an invalid interface number: 29 but max is 1
[  111.702466][  T793] usb 3-1: config 4 has no interface number 0
[  111.704998][  T793] usb 3-1: config 4 has no interface number 1
[  111.707599][  T793] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  111.712513][  T793] usb 3-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[  111.717274][  T793] usb 3-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64
[  111.722736][  T793] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  111.728766][  T793] usb 3-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86
[  111.733787][  T793] usb 3-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64
[  111.738354][  T793] usb 3-1: config 4 interface 88 has no altsetting 0
[  111.741103][  T793] usb 3-1: config 4 interface 29 has no altsetting 0
[  111.747199][  T793] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  111.750919][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.754585][  T793] usb 3-1: Product: syz
[  111.756541][  T793] usb 3-1: Manufacturer: syz
[  111.758527][  T793] usb 3-1: SerialNumber: syz
[  111.763847][ T7148] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  111.772491][ T5919] usb 1-1: Using ep0 maxpacket: 16
[  111.785183][ T5919] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.789854][ T5919] usb 1-1: config 0 interface 0 has no altsetting 0
[  111.793079][ T5919] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  111.797815][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.805237][ T5919] usb 1-1: config 0 descriptor??
[  111.976962][  T793] chaoskey 3-1:4.29: Unable to register with hwrng
[  111.985055][  T793] usb 3-1: USB disconnect, device number 8
[  112.217832][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  112.220650][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  112.224488][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  112.227348][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  112.230091][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  112.235077][ T5919] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0
[  112.329830][ T7159] loop1: detected capacity change from 0 to 128
[  112.406754][ T7163] loop1: detected capacity change from 0 to 512
[  112.415302][ T7163] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  112.421111][ T7163] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  112.425511][   T24] usb 1-1: USB disconnect, device number 9
[  112.432291][ T7163] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  112.437676][ T7163] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  112.441171][ T7163] System zones: 0-2, 18-18, 34-35
[  112.450122][ T7163] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.480392][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000.
[  112.551092][ T7173] syz.2.504 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  112.641416][ T7185] loop2: detected capacity change from 0 to 1024
[  112.663760][ T7185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.683382][ T7185] EXT4-fs error (device loop2): ext4_empty_dir:3109: inode #11: block 623: comm syz.2.510: Attempting to read directory block (623) that is past i_size (638464)
[  112.690894][ T7185] EXT4-fs (loop2): Remounting filesystem read-only
[  112.707601][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.720834][   T33] audit: type=1326 audit(2000000020.060:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.1.511" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2436d8ec29 code=0x0
[  112.750629][ T7191] loop2: detected capacity change from 0 to 512
[  112.765489][ T7191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.770603][ T7191] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.833529][ T7191] loop2: detected capacity change from 512 to 0
[  112.850167][ T5853] EXT4-fs error (device loop2): ext4_get_inode_loc:4999: inode #2: block 34: comm syz-executor: unable to read itable block
[  112.858120][ T5853] Buffer I/O error on dev loop2, logical block 0, lost sync page write
[  112.861013][ T5853] EXT4-fs (loop2): I/O error while writing superblock
[  112.863832][ T5853] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: IO failure
[  112.867154][ T5853] Buffer I/O error on dev loop2, logical block 0, lost sync page write
[  112.870361][ T5853] EXT4-fs (loop2): I/O error while writing superblock
[  112.873658][ T5853] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error
[  112.878413][ T5853] Buffer I/O error on dev loop2, logical block 0, lost sync page write
[  112.882724][ T5853] EXT4-fs (loop2): I/O error while writing superblock
[  112.904826][ T1092] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4984: inode #4: block 34: comm kworker/u10:5: unable to read itable block
[  112.909768][ T1092] Buffer I/O error on dev loop2, logical block 0, lost sync page write
[  112.913376][ T1092] EXT4-fs (loop2): I/O error while writing superblock
[  112.917986][ T1092] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4984: inode #2: block 34: comm kworker/u10:5: unable to read itable block
[  112.926585][ T1092] Buffer I/O error on dev loop2, logical block 0, lost sync page write
[  112.930118][ T1092] EXT4-fs (loop2): I/O error while writing superblock
[  112.935086][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.954172][ T5853] Buffer I/O error on dev loop2, logical block 0, lost sync page write
[  112.957112][ T5853] EXT4-fs (loop2): I/O error while writing superblock
[  112.975664][ T7200] netlink: 'syz.0.516': attribute type 4 has an invalid length.
[  112.979661][ T7192] Buffer I/O error on dev loop2, logical block 12, lost sync page write
[  112.985976][ T7197] loop1: detected capacity change from 0 to 32768
[  112.991639][ T7197] (syz.1.514,7197,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xbb563ab. Applying ECC.
[  112.997884][ T7197] (syz.1.514,7197,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc2d589a7, computed 0xd7e9d76a
[  113.009295][ T7197] (syz.1.514,7197,0):ocfs2_validate_inode_block:1458 ERROR: Checksum failed for dinode 17
[  113.013457][ T7197] (syz.1.514,7197,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[  113.016649][ T7197] (syz.1.514,7197,0):ocfs2_init_global_system_inodes:444 ERROR: status = -5
[  113.022731][ T7197] (syz.1.514,7197,1):ocfs2_init_global_system_inodes:476 ERROR: status = -5
[  113.027718][ T7197] (syz.1.514,7197,0):ocfs2_initialize_super:2198 ERROR: status = -5
[  113.030992][ T7197] (syz.1.514,7197,0):ocfs2_fill_super:1177 ERROR: status = -5
[  113.070242][ T7202] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.074989][ T7202] team0: Failed to send options change via netlink (err -105)
[  113.078047][ T7202] team0: Port device bond1 added
[  113.215668][ T5718] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.227196][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[  113.294473][ T5718] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.348982][ T5718] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.421966][ T5718] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.621474][ T5718] bridge_slave_1: left allmulticast mode
[  113.625885][ T5718] bridge_slave_1: left promiscuous mode
[  113.629715][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.670099][ T5718] bridge_slave_0: left allmulticast mode
[  113.676253][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.678976][ T7225] loop1: detected capacity change from 0 to 512
[  113.681403][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.684164][ T7225] EXT4-fs: Ignoring removed nomblk_io_submit option
[  113.687106][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.693701][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.694552][ T5718] bridge_slave_0: left promiscuous mode
[  113.698283][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.699412][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.722337][ T7225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.727727][ T7225] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.773438][ T7225] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.528: corrupted inode contents
[  113.781384][ T7225] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.528: mark_inode_dirty error
[  113.787413][ T7225] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.528: corrupted inode contents
[  113.794291][ T7225] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.528: mark_inode_dirty error
[  113.978444][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.157969][ T7234] cifs: Unknown parameter 'mode'
[  114.293792][ T5718] bond1 (unregistering): (slave gretap1): Releasing active interface
[  114.499784][ T5718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.507888][ T5718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.513866][ T5718] bond0 (unregistering): Released all slaves
[  114.524708][ T5718] bond1 (unregistering): Released all slaves
[  114.750072][ T7242] loop1: detected capacity change from 0 to 256
[  114.911415][ T7222] chnl_net:caif_netlink_parms(): no params data found
[  115.264519][   T33] audit: type=1326 audit(2000000022.580:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  115.279582][ T7271] loop0: detected capacity change from 0 to 512
[  115.282075][ T5718] hsr_slave_0: left promiscuous mode
[  115.285432][   T33] audit: type=1326 audit(2000000022.580:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  115.297109][ T5718] hsr_slave_1: left promiscuous mode
[  115.300957][ T5718] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.314279][ T5718] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.317919][   T33] audit: type=1326 audit(2000000022.580:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.543" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  115.328840][ T5718] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.331431][ T5718] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.341866][   T33] audit: type=1326 audit(2000000022.580:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  115.371690][   T33] audit: type=1326 audit(2000000022.580:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  115.387034][ T5718] veth0_macvtap: left promiscuous mode
[  115.389275][ T5718] veth1_vlan: left promiscuous mode
[  115.395417][   T33] audit: type=1326 audit(2000000022.580:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.543" exe="/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  115.414730][ T5718] veth0_vlan: left promiscuous mode
[  115.417189][   T33] audit: type=1326 audit(2000000022.590:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  115.428254][   T33] audit: type=1326 audit(2000000022.590:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.0.543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  115.733835][ T5857] Bluetooth: hci0: command tx timeout
[  115.820461][ T7289] loop0: detected capacity change from 0 to 8
[  116.021378][ T5718] team0 (unregistering): Port device team_slave_1 removed
[  116.058325][ T5718] team0 (unregistering): Port device team_slave_0 removed
[  116.194451][ T5919] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  116.246677][ T7300] loop1: detected capacity change from 0 to 32768
[  116.260835][ T7300] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  116.278288][ T7300] XFS (loop1): Ending clean mount
[  116.304615][ T7300] XFS (loop1): Quotacheck needed: Please wait.
[  116.373325][ T7300] XFS (loop1): Quotacheck: Done.
[  116.375837][ T5919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.379454][ T5919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.386593][ T5919] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  116.390241][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.393317][ T5919] usb 1-1: Product: syz
[  116.394771][ T5919] usb 1-1: Manufacturer: syz
[  116.396512][ T5919] usb 1-1: SerialNumber: syz
[  116.551110][ T5854] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  116.588656][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.591647][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.595123][ T7222] bridge_slave_0: entered allmulticast mode
[  116.598639][ T7222] bridge_slave_0: entered promiscuous mode
[  116.605667][ T5919] usb 1-1: 0:2 : does not exist
[  116.606028][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.610658][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.614326][ T5919] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  116.614500][ T7222] bridge_slave_1: entered allmulticast mode
[  116.620093][ T7222] bridge_slave_1: entered promiscuous mode
[  116.640948][ T5919] usb 1-1: USB disconnect, device number 10
[  116.713476][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.726888][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.783478][ T7222] team0: Port device team_slave_0 added
[  116.787086][ T7222] team0: Port device team_slave_1 added
[  116.823291][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.828848][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  116.840668][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.846579][ T7311] Invalid ELF header magic: != ELF
[  116.851339][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.854648][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  116.864605][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.917669][ T7222] hsr_slave_0: entered promiscuous mode
[  116.923038][ T7222] hsr_slave_1: entered promiscuous mode
[  116.925757][ T7222] debugfs: 'hsr0' already exists in 'hsr'
[  116.931922][ T7222] Cannot create hsr debugfs directory
[  117.083393][ T7222] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  117.090509][ T7222] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  117.098598][ T7222] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  117.106003][ T7222] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  117.143642][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.146722][ T7222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.147919][ T7315] loop1: detected capacity change from 0 to 32768
[  117.161266][   T33] audit: type=1800 audit(2000000024.500:21): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.560" name="file1" dev="loop1" ino=7 res=0 errno=0
[  117.232263][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.263650][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.284458][ T7222] 8021q: adding VLAN 0 to HW filter on device team0
[  117.298859][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.302036][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.313974][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.317082][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.376516][ T7315] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root
[  117.376516][ T7315] 
[  117.393652][ T7315] ERROR: (device loop1): remounting filesystem as read-only
[  117.489681][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.525915][ T7222] veth0_vlan: entered promiscuous mode
[  117.537293][ T7222] veth1_vlan: entered promiscuous mode
[  117.558422][ T7222] veth0_macvtap: entered promiscuous mode
[  117.564098][ T7222] veth1_macvtap: entered promiscuous mode
[  117.584569][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.594528][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.604045][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.614901][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.624008][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.627618][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.688914][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.693876][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.721347][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.726146][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.760529][   T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  117.813142][ T5857] Bluetooth: hci0: command tx timeout
[  117.834652][   T33] audit: type=1326 audit(2000000025.180:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e78ec29 code=0x7ffc0000
[  117.844825][   T33] audit: type=1326 audit(2000000025.180:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e78ec29 code=0x7ffc0000
[  117.854226][   T33] audit: type=1326 audit(2000000025.200:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.569" exe="/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f3f3e78ec29 code=0x7ffc0000
[  117.863945][   T33] audit: type=1326 audit(2000000025.200:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e78ec29 code=0x7ffc0000
[  117.873679][   T33] audit: type=1326 audit(2000000025.200:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.3.569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e78ec29 code=0x7ffc0000
[  117.915352][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  117.924635][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[  117.931614][ T7350] loop3: detected capacity change from 0 to 16
[  117.936726][   T24] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40
[  117.944851][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.946874][ T7350] erofs (device loop3): mounted with root inode @ nid 36.
[  117.948338][   T24] usb 1-1: Product: syz
[  117.957590][   T24] usb 1-1: Manufacturer: syz
[  117.959510][   T24] usb 1-1: SerialNumber: syz
[  118.208485][ T7352] erofs (device loop3): read error -117 @ 72 of nid 36
[  118.392936][ T7348] loop1: detected capacity change from 0 to 32768
[  118.397741][ T7348] (syz.1.570,7348,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  118.404457][   T24] usbhid 1-1:1.0: can't add hid device: -71
[  118.406768][ T7348] (syz.1.570,7348,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  118.407249][   T24] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  118.419409][   T24] usb 1-1: USB disconnect, device number 11
[  118.420223][ T7348] JBD2: Ignoring recovery information on journal
[  118.470962][ T7348] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  118.543384][ T5854] ocfs2: Unmounting device (7,1) on (node local)
[  118.953381][ T7371] vlan2: entered promiscuous mode
[  118.955176][ T7371] bridge0: entered promiscuous mode
[  119.080607][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'.
[  119.083967][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'.
[  119.411877][ T5919] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  119.574627][ T5919] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  119.577778][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.592706][ T5919] usb 1-1: config 0 descriptor??
[  119.596554][ T5919] cp210x 1-1:0.0: cp210x converter detected
[  119.607954][ T7390] loop3: detected capacity change from 0 to 2048
[  119.630136][ T7390] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.708147][ T7394] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408)
[  119.899623][ T5857] Bluetooth: hci0: command tx timeout
[  120.039808][ T5919] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  120.074807][ T5919] usb 1-1: cp210x converter now attached to ttyUSB0
[  120.299645][   T24] usb 1-1: USB disconnect, device number 12
[  120.307103][ T7403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.592'.
[  120.319787][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  120.346140][   T24] cp210x 1-1:0.0: device disconnected
[  121.115082][ T7395] syz.1.588 (7395): drop_caches: 2
[  121.453671][ T7413] netlink: 'syz.3.596': attribute type 1 has an invalid length.
[  121.459117][ T7413] netlink: 'syz.3.596': attribute type 2 has an invalid length.
[  121.650161][ T7433] dns_resolver: Unsupported content type (218)
[  122.055561][ T5857] Bluetooth: hci0: command tx timeout
[  122.363185][ T7467] loop1: detected capacity change from 0 to 1024
[  122.366179][ T7467] EXT4-fs: Ignoring removed bh option
[  122.377132][ T7467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.390977][ T7467] EXT4-fs error (device loop1): ext4_get_first_dir_block:3540: inode #11: comm syz.1.621: directory missing '.'
[  122.398712][ T7467] EXT4-fs (loop1): Remounting filesystem read-only
[  122.418984][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.557778][ T7476] loop1: detected capacity change from 0 to 164
[  122.693529][ T7486] loop3: detected capacity change from 0 to 8
[  122.697664][ T7486] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  122.706831][ T7488] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  122.717765][ T7488] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  123.183786][   T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  123.361068][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.364907][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  123.369691][   T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  123.374014][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  123.377340][   T24] usb 1-1: SerialNumber: syz
[  123.439081][ T7504] bond0: entered promiscuous mode
[  123.441037][ T7504] bond_slave_0: entered promiscuous mode
[  123.443070][ T7504] bond_slave_1: entered promiscuous mode
[  123.573865][   T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  123.591078][   T24] usb 1-1: 0:2 : does not exist
[  123.598873][   T24] usb 1-1: USB disconnect, device number 13
[  123.738119][ T5920] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  123.758460][   T47] usb 4-1: Using ep0 maxpacket: 32
[  123.762571][   T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.766955][   T47] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  123.771372][   T47] usb 4-1: config 0 interface 0 has no altsetting 0
[  123.776509][   T47] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e
[  123.781092][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.784495][   T47] usb 4-1: Product: syz
[  123.786332][   T47] usb 4-1: Manufacturer: syz
[  123.788354][   T47] usb 4-1: SerialNumber: syz
[  123.793510][   T47] usb 4-1: config 0 descriptor??
[  123.906638][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  123.910723][ T5920] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  123.916004][ T5920] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  123.924331][ T5920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  123.928309][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  123.931755][ T5920] usb 2-1: SerialNumber: syz
[  124.153908][ T5920] usbtest 2-1:1.0: Linux user mode ISO test driver
[  124.156849][ T5920] usbtest 2-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  124.164785][ T5920] usb 2-1: USB disconnect, device number 8
[  124.215956][   T47] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  124.366253][ T7512] loop0: detected capacity change from 0 to 32768
[  124.369192][ T7512] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.641 (7512)
[  124.376585][ T7512] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  124.379980][ T7512] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  124.396273][ T7512] BTRFS info (device loop0): enabling ssd optimizations
[  124.398711][ T7512] BTRFS info (device loop0): enabling free space tree
[  124.424662][   T47] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  124.432546][   T47] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22
[  124.482164][ T5862] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  124.634453][   T47] usb 4-1: USB disconnect, device number 2
[  124.853900][ T7538] loop1: detected capacity change from 0 to 4096
[  124.878021][ T7542] tmpfs: Cannot enable quota on remount
[  125.238928][ T7558] 9pnet_fd: Insufficient options for proto=fd
[  125.465043][ T7562] program syz.3.657 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.728764][ T7589] loop1: detected capacity change from 0 to 512
[  126.313451][ T7603] loop1: detected capacity change from 0 to 512
[  126.320485][ T7603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  126.352328][ T7603] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.676: invalid block
[  126.369427][ T7603] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.676: invalid indirect mapped block 4294967295 (level 1)
[  126.379076][ T7603] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.676: invalid indirect mapped block 4294967295 (level 1)
[  126.385305][ T7603] EXT4-fs (loop1): 2 truncates cleaned up
[  126.389729][ T7603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.406564][ T7603] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.676: bg 0: block 5: invalid block bitmap
[  126.415474][ T7603] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  126.510016][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.510250][ T7612] loop0: detected capacity change from 0 to 512
[  126.539767][ T7612] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  126.558394][ T7612] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.681: corrupted xattr entries
[  126.566691][ T7612] EXT4-fs (loop0): Remounting filesystem read-only
[  126.569890][ T7612] EXT4-fs (loop0): 1 truncate cleaned up
[  126.594446][ T7612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.684143][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.751830][ T7619] netlink: 'syz.0.683': attribute type 11 has an invalid length.
[  127.125065][ T5492] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  127.160854][ T7630] loop3: detected capacity change from 0 to 2048
[  127.172299][ T7630] NILFS (loop3): invalid segment: Checksum error in segment payload
[  127.176068][ T7630] NILFS (loop3): trying rollback from an earlier position
[  127.178444][ T7630] NILFS (loop3): too large filesystem blocksize: 2 ^ 347668480 KiB
[  127.181285][ T7630] NILFS (loop3): error -22 while searching super root
[  127.267406][ T7641] tmpfs: Bad value for 'mpol'
[  127.280483][ T5492] usb 2-1: config 2 has an invalid interface number: 111 but max is 0
[  127.284125][ T5492] usb 2-1: config 2 has no interface number 0
[  127.295463][ T5492] usb 2-1: config 2 interface 111 altsetting 122 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  127.305477][ T5492] usb 2-1: config 2 interface 111 altsetting 122 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  127.310521][ T5492] usb 2-1: config 2 interface 111 has no altsetting 0
[  127.329642][ T5492] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice=a0.46
[  127.333190][ T5492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.336447][ T5492] usb 2-1: Product: syz
[  127.339772][ T5492] usb 2-1: Manufacturer: syz
[  127.341773][ T5492] usb 2-1: SerialNumber: syz
[  127.412887][ T7652] loop0: detected capacity change from 0 to 512
[  127.416614][ T7652] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  127.419552][ T7652] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  127.425625][ T7652] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  127.429044][ T7652] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  127.431927][ T7652] System zones: 0-2, 18-18, 34-35
[  127.436144][ T7652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.566572][ T7650] loop3: detected capacity change from 0 to 32768
[  127.628036][ T5492] usb 2-1: USB disconnect, device number 9
[  127.672143][ T7650] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  127.672167][ T7650]   allowing incompatible features above 0.0: (unknown version)
[  127.672175][ T7650]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  127.692693][ T7650] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  127.696263][ T7650] bcachefs (loop3): initializing new filesystem
[  127.729859][ T7650] bcachefs (loop3): going read-write
[  127.772908][ T7662] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.699: bg 0: block 353: padding at end of block bitmap is not set
[  127.815372][ T7650] bcachefs (loop3): marking superblocks
[  128.029674][ T7650] bcachefs (loop3): initializing freespace
[  128.040823][ T7650] bcachefs (loop3): done initializing freespace
[  128.051774][ T7650] bcachefs (loop3): reading snapshots table
[  128.054008][ T7650] bcachefs (loop3): reading snapshots done
[  128.067266][ T7650] bcachefs (loop3): done starting filesystem
[  128.099236][ T7650] syz.3.698 (7650) used greatest stack depth: 15176 bytes left
[  128.110249][ T7222] bcachefs (loop3): shutting down
[  128.112531][ T7222] bcachefs (loop3): going read-only
[  128.115295][ T7222] bcachefs (loop3): finished waiting for writes to stop
[  128.122021][ T7222] bcachefs (loop3): flushing journal and stopping allocators, journal seq 7
[  128.149728][ T7222] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8
[  128.155917][ T7222] bcachefs (loop3): clean shutdown complete, journal seq 9
[  128.160582][ T7222] bcachefs (loop3): marking filesystem clean
[  128.186614][ T7222] bcachefs (loop3): shutdown complete
[  128.440559][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.478111][ T7678] random: crng reseeded on system resumption
[  128.750226][ T7680] loop1: detected capacity change from 0 to 32768
[  128.756681][ T7680] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  128.773397][ T7680] XFS (loop1): Ending clean mount
[  128.813436][ T5854] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  128.836839][ T5920] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  128.999872][ T5920] usb 1-1: Using ep0 maxpacket: 32
[  129.011930][ T5920] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  129.015297][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.018336][ T5920] usb 1-1: Product: syz
[  129.019788][ T5920] usb 1-1: Manufacturer: syz
[  129.024542][ T5920] usb 1-1: SerialNumber: syz
[  129.028589][ T5920] usb 1-1: config 0 descriptor??
[  129.203383][ T5492] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  129.241404][ T5920] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration
[  129.246529][ T5920] usb 1-1: USB disconnect, device number 14
[  129.356094][ T5492] usb 2-1: Using ep0 maxpacket: 16
[  129.359399][ T5492] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.363071][ T5492] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  129.368654][ T5492] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  129.371847][ T5492] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  129.374750][ T5492] usb 2-1: SerialNumber: syz
[  129.380236][ T5492] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  129.383009][ T5492] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[  129.385469][ T5492] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[  129.590354][ T7700] netlink: 'syz.3.710': attribute type 3 has an invalid length.
[  129.593832][ T7700] netlink: 'syz.3.710': attribute type 3 has an invalid length.
[  129.597147][ T7700] netlink: 'syz.3.710': attribute type 3 has an invalid length.
[  129.597923][ T6552] usb 2-1: USB disconnect, device number 10
[  129.601020][ T7700] netlink: 'syz.3.710': attribute type 3 has an invalid length.
[  129.606534][ T7700] netlink: 'syz.3.710': attribute type 3 has an invalid length.
[  129.609754][ T7700] netlink: 'syz.3.710': attribute type 3 has an invalid length.
[  129.614974][ T7700] netlink: 'syz.3.710': attribute type 3 has an invalid length.
[  129.618051][ T7700] netlink: 'syz.3.710': attribute type 3 has an invalid length.
[  129.620816][ T7700] netlink: 'syz.3.710': attribute type 3 has an invalid length.
[  129.623952][ T7700] netlink: 'syz.3.710': attribute type 3 has an invalid length.
[  129.777873][ T7713] loop3: detected capacity change from 0 to 512
[  129.780822][ T7713] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  129.782159][ T7714] program syz.0.716 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  129.799812][ T7713] EXT4-fs (loop3): 1 truncate cleaned up
[  129.802396][ T7713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.833431][ T7222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.903444][ T7714] netlink: 72 bytes leftover after parsing attributes in process `syz.0.716'.
[  130.124343][ T7726] loop0: detected capacity change from 0 to 8192
[  130.154988][ T7718] loop3: detected capacity change from 0 to 40427
[  130.160510][ T7718] F2FS-fs (loop3): build fault injection rate: 14
[  130.163336][ T7718] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  130.163922][ T7726]  loop0: p1 < > p2 p3 < p5 >
[  130.168190][ T7718] F2FS-fs (loop3): invalid crc value
[  130.168283][ T7726] loop0: partition table partially beyond EOD, truncated
[  130.175297][ T7726] loop0: p1 start 1275068416 is beyond EOD, truncated
[  130.176434][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  130.194995][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  130.255347][ T7718] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.259322][ T7718] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  130.266323][ T7718] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  130.293058][ T7718] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  130.302785][ T7718] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0xfa/0x570
[  130.321980][ T7718] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x1067/0x1760
[  130.327381][ T7718] syz.3.718: attempt to access beyond end of device
[  130.327381][ T7718] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  130.338901][ T7718] CPU: 0 UID: 0 PID: 7718 Comm: syz.3.718 Not tainted syzkaller #0 PREEMPT(full) 
[  130.338925][ T7718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.338935][ T7718] Call Trace:
[  130.338941][ T7718]  <TASK>
[  130.338948][ T7718]  dump_stack_lvl+0x189/0x250
[  130.338972][ T7718]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.338986][ T7718]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  130.339005][ T7718]  ? __pfx_queue_work_on+0x10/0x10
[  130.339018][ T7718]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  130.339034][ T7718]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.339053][ T7718]  ? f2fs_hw_is_readonly+0x39b/0x470
[  130.339084][ T7718]  f2fs_handle_critical_error+0x37c/0x540
[  130.339107][ T7718]  f2fs_balance_fs+0x32d/0x7f0
[  130.339127][ T7718]  ? f2fs_write_single_data_page+0x1067/0x1760
[  130.339146][ T7718]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  130.339177][ T7718]  ? folio_unlock+0x101/0x160
[  130.339194][ T7718]  f2fs_write_single_data_page+0x1067/0x1760
[  130.339229][ T7718]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  130.339256][ T7718]  ? __pfx_folios_put_refs+0x10/0x10
[  130.339273][ T7718]  ? mlock_drain_local+0x79/0x490
[  130.339288][ T7718]  ? mlock_drain_local+0x28e/0x490
[  130.339307][ T7718]  f2fs_write_data_pages+0x195b/0x3000
[  130.339352][ T7718]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.339406][ T7718]  ? check_path+0x21/0x40
[  130.339417][ T7718]  ? check_noncircular+0xe0/0x160
[  130.339469][ T7718]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.339487][ T7718]  do_writepages+0x32e/0x550
[  130.339515][ T7718]  ? do_raw_spin_unlock+0x4d/0x240
[  130.339533][ T7718]  file_write_and_wait_range+0x23e/0x340
[  130.339549][ T7718]  ? __pfx_file_write_and_wait_range+0x10/0x10
[  130.339592][ T7718]  ? do_raw_spin_lock+0x121/0x290
[  130.339650][ T7718]  f2fs_do_sync_file+0x5e0/0x1860
[  130.339679][ T7718]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  130.339732][ T7718]  ? f2fs_file_write_iter+0x4ac/0x2410
[  130.339750][ T7718]  ? vfs_fsync_range+0x12c/0x1c0
[  130.339768][ T7718]  ? f2fs_sync_file+0xe9/0x160
[  130.339790][ T7718]  f2fs_file_write_iter+0x753/0x2410
[  130.339821][ T7718]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  130.339848][ T7718]  do_iter_readv_writev+0x623/0x8c0
[  130.339868][ T7718]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  130.339879][ T7718]  ? rcu_read_lock_any_held+0xb3/0x120
[  130.339906][ T7718]  vfs_writev+0x31a/0x960
[  130.339925][ T7718]  ? __lock_acquire+0xab9/0xd20
[  130.339944][ T7718]  ? __pfx_vfs_writev+0x10/0x10
[  130.339973][ T7718]  ? __fget_files+0x2a/0x420
[  130.339991][ T7718]  ? __fget_files+0x3a0/0x420
[  130.340004][ T7718]  ? __fget_files+0x2a/0x420
[  130.340025][ T7718]  __se_sys_pwritev2+0x179/0x290
[  130.340041][ T7718]  ? __pfx___se_sys_pwritev2+0x10/0x10
[  130.340065][ T7718]  ? do_syscall_64+0xbe/0xfa0
[  130.340081][ T7718]  ? __x64_sys_pwritev2+0x20/0xc0
[  130.340097][ T7718]  do_syscall_64+0xfa/0xfa0
[  130.340114][ T7718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.340127][ T7718]  ? asm_sysvec_call_function_single+0x1a/0x20
[  130.340146][ T7718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.340158][ T7718] RIP: 0033:0x7f3f3e78ec29
[  130.340172][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.340183][ T7718] RSP: 002b:00007f3f3f6e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  130.340198][ T7718] RAX: ffffffffffffffda RBX: 00007f3f3e9d5fa0 RCX: 00007f3f3e78ec29
[  130.340206][ T7718] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004
[  130.340214][ T7718] RBP: 00007f3f3e811e41 R08: 0000000000000000 R09: 0000000000000000
[  130.340221][ T7718] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000
[  130.340229][ T7718] R13: 00007f3f3e9d6038 R14: 00007f3f3e9d5fa0 R15: 00007ffd21bf7a58
[  130.340253][ T7718]  </TASK>
[  130.340259][ T7718] F2FS-fs (loop3): Stopped filesystem due to reason: 1
[  130.647970][ T5920] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  130.810475][ T5920] usb 1-1: Using ep0 maxpacket: 8
[  130.814662][ T5920] usb 1-1: config 6 has an invalid interface number: 2 but max is 0
[  130.818280][ T5920] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  130.825570][ T5920] usb 1-1: config 6 has no interface number 0
[  130.828302][ T5920] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  130.834376][ T5920] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  130.839134][ T5920] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  130.843824][ T5920] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  130.852746][ T5920] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  130.857758][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.862179][ T5920] usb 1-1: Product: syz
[  130.864005][ T5920] usb 1-1: Manufacturer: syz
[  130.866013][ T5920] usb 1-1: SerialNumber: syz
[  130.874218][ T5920] hso 1-1:6.2: Failed to find BULK IN ep
[  131.014002][ T5492] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  131.090257][ T5920] usb 1-1: USB disconnect, device number 15
[  131.147191][   T33] audit: type=1326 audit(2000000551.220:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.734" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e78ec29 code=0x7ffc0000
[  131.158463][   T33] audit: type=1326 audit(2000000551.220:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.734" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e78ec29 code=0x7ffc0000
[  131.167673][   T33] audit: type=1326 audit(2000000551.240:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.734" exe="/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f3f3e78ec29 code=0x7ffc0000
[  131.169065][ T5492] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  131.178657][   T33] audit: type=1326 audit(2000000551.240:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.734" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e78ec29 code=0x7ffc0000
[  131.189422][ T5492] usb 2-1: config 0 has no interface number 0
[  131.192784][   T33] audit: type=1326 audit(2000000551.240:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.3.734" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e78ec29 code=0x7ffc0000
[  131.198387][ T5492] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  131.207437][ T5492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.210781][ T5492] usb 2-1: Product: syz
[  131.212471][ T5492] usb 2-1: Manufacturer: syz
[  131.214483][ T7763] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.735'.
[  131.219113][ T5492] usb 2-1: SerialNumber: syz
[  131.222488][ T5492] usb 2-1: config 0 descriptor??
[  131.604079][ T5920] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  131.642817][ T5492] usb 2-1: Firmware: major: 0, minor: 84, hardware type: UNKNOWN (103)
[  131.767273][ T5920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  131.771439][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  131.776521][ T5920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  131.782996][ T5920] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  131.787129][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.790544][ T5920] usb 4-1: Product: syz
[  131.792460][ T5920] usb 4-1: Manufacturer: syz
[  131.794422][ T5920] usb 4-1: SerialNumber: syz
[  131.798843][ T5920] usb 4-1: config 0 descriptor??
[  131.801709][ T7771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.804213][ T7771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.810219][ T5920] usb 4-1: ucan: probing device on interface #0
[  131.848627][ T5492] usb 2-1: failed to fetch extended address, random address set
[  131.851367][ T5492] usb 2-1: atusb_probe: initialization failed, error = -524
[  131.854017][ T5492] atusb 2-1:0.128: probe with driver atusb failed with error -524
[  131.861784][ T5492] usb 2-1: USB disconnect, device number 11
[  131.887428][ T6552] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  132.049482][ T6552] usb 1-1: Using ep0 maxpacket: 8
[  132.055049][ T6552] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  132.057878][ T6552] usb 1-1: config 179 has no interface number 0
[  132.060311][ T6552] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  132.063939][ T6552] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  132.067631][ T6552] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  132.071476][ T6552] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  132.075309][ T6552] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  132.080377][ T6552] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  132.084198][ T6552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.090527][ T7773] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  132.315322][ T6552] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6
[  132.428562][ T5920] ucan 4-1:0.0: probe with driver ucan failed with error -71
[  132.435339][ T5920] usb 4-1: USB disconnect, device number 3
[  132.517987][ T7781] vxcan1: entered allmulticast mode
[  132.520017][ T7781] vxcan1: left allmulticast mode
[  132.589057][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'.
[  132.722516][ T5492] usb 1-1: USB disconnect, device number 16
[  132.722565][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  132.728763][    C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  132.744082][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'.
[  132.989821][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.992686][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.997291][ T7814] loop3: detected capacity change from 0 to 512
[  133.031192][ T7814] EXT4-fs: Ignoring removed bh option
[  133.036433][ T7814] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  133.038850][ T7817] loop1: detected capacity change from 0 to 128
[  133.046246][ T7814] EXT4-fs (loop3): 1 truncate cleaned up
[  133.049168][   T33] audit: type=1800 audit(2000000553.092:32): pid=7817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.762" name="bus" dev="loop1" ino=1048611 res=0 errno=0
[  133.056460][ T7814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.067718][ T7814] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 49 (only 1 groups)
[  133.099413][ T7222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.285036][ T7817] syz.1.762: attempt to access beyond end of device
[  133.285036][ T7817] loop1: rw=0, sector=121, nr_sectors = 920 limit=128
[  133.387148][ T7830] loop0: detected capacity change from 0 to 8
[  133.414857][ T7830] SQUASHFS error: zlib decompression failed, data probably corrupt
[  133.439180][ T7830] SQUASHFS error: Failed to read block 0x9b: -5
[  133.441900][ T7830] SQUASHFS error: Unable to read metadata cache entry [99]
[  133.445044][ T7830] SQUASHFS error: Unable to read inode 0x127
[  133.470219][ T7825] loop3: detected capacity change from 0 to 32768
[  133.483164][ T7825] (syz.3.765,7825,1):ocfs2_verify_userspace_stack:858 ERROR: cluster stack passed to mount, but this filesystem does not support it
[  133.490067][ T7825] (syz.3.765,7825,1):ocfs2_fill_super:1177 ERROR: status = -22
[  133.618901][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.770'.
[  134.262865][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'.
[  134.266792][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.782'.
[  136.141223][ T7908] program syz.3.797 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.192470][ T7912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.799'.
[  136.267201][ T7918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.802'.
[  136.276124][   T33] audit: type=1326 audit(2000000556.242:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.3.801" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f3e78ec29 code=0x0
[  136.339520][ T7924] loop0: detected capacity change from 0 to 164
[  136.344641][ T7924] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82
[  136.471286][ T7930] loop0: detected capacity change from 0 to 4096
[  136.503571][ T7930] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  136.549850][ T5492] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  136.709036][ T5492] usb 4-1: Using ep0 maxpacket: 8
[  136.712557][ T5492] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  136.716489][ T5492] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  136.721287][ T5492] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  136.725885][ T5492] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  136.731619][ T5492] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  136.735598][ T5492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.742518][ T5492] usbtmc 4-1:16.0: bulk endpoints not found
[  136.820268][  T793] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  136.948456][ T5492] usb 4-1: USB disconnect, device number 4
[  137.198749][  T793] usb 1-1: Using ep0 maxpacket: 16
[  137.206543][  T793] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  137.209361][  T793] usb 1-1: config 0 has no interface number 0
[  137.211410][  T793] usb 1-1: config 0 interface 51 has no altsetting 0
[  137.216032][  T793] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.d5
[  137.219434][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.222140][  T793] usb 1-1: Product: syz
[  137.223582][  T793] usb 1-1: Manufacturer: syz
[  137.225310][  T793] usb 1-1: SerialNumber: syz
[  137.229550][  T793] usb 1-1: config 0 descriptor??
[  137.233648][  T793] usb 1-1: bad CDC descriptors
[  137.423555][    C1] vcan0: j1939_tp_rxtimer: 0xffff888107a9c800: rx timeout, send abort
[  137.429602][    C1] vcan0: j1939_tp_rxtimer: 0xffff888107a9f000: rx timeout, send abort
[  137.433429][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888107a9c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  137.440005][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888107a9f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  137.452975][ T5492] usb 1-1: USB disconnect, device number 17
[  137.479194][ T7935] loop1: detected capacity change from 0 to 512
[  137.483508][ T7935] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  137.512915][ T7935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.567636][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.043326][ T7959] netlink: 240 bytes leftover after parsing attributes in process `syz.1.820'.
[  138.315335][ T7978] tmpfs: Bad value for 'mpol'
[  138.400218][ T7988] loop0: detected capacity change from 0 to 128
[  138.414002][ T7985] loop3: detected capacity change from 0 to 4096
[  138.418802][ T7985] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  138.550042][ T7985] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  138.554444][ T7985] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  138.557209][ T7985] ntfs3(loop3): Failed to load $Bitmap (-22).
[  138.560114][ T7985] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  139.032760][ T6552] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  139.209356][ T6552] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  139.213959][ T6552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.218013][ T6552] usb 1-1: Product: syz
[  139.220047][ T6552] usb 1-1: Manufacturer: syz
[  139.222368][ T6552] usb 1-1: SerialNumber: syz
[  139.226984][ T6552] usb 1-1: config 0 descriptor??
[  139.231989][ T6552] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  139.240524][ T6552] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  139.245639][ T6552] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  139.250048][ T6552] usb 1-1: media controller created
[  139.269734][ T6552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  139.448803][ T6552] DVB: Unable to find symbol mt352_attach()
[  139.550066][ T6552] DVB: Unable to find symbol nxt6000_attach()
[  139.552799][ T6552] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  139.566860][ T6552] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[  139.582163][ T6552] dvb-usb: schedule remote query interval to 1000 msecs.
[  139.586318][ T6552] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  139.592321][ T6552] dvb-usb: bulk message failed: -22 (7/0)
[  139.595002][ T6552] dvb-usb: bulk message failed: -22 (7/0)
[  139.603068][ T6552] usb 1-1: USB disconnect, device number 18
[  139.728885][ T6552] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  139.869565][ T8009] loop3: detected capacity change from 0 to 8
[  139.897871][ T8009] SQUASHFS error: Failed to read block 0x33c: -5
[  139.903818][ T8009] SQUASHFS error: Unable to read metadata cache entry [33a]
[  139.907559][ T8009] SQUASHFS error: Unable to read inode 0xa7
[  140.270674][ T8015] validate_nla: 50 callbacks suppressed
[  140.271026][ T8015] netlink: 'syz.0.844': attribute type 21 has an invalid length.
[  140.278669][ T8015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.844'.
[  140.426029][ T8011] loop3: detected capacity change from 0 to 32768
[  140.533597][ T8011] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  140.533656][ T8011]   allowing incompatible features above 0.0: (unknown version)
[  140.533662][ T8011]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  140.555497][ T8011] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  140.559254][ T8011] bcachefs (loop3): initializing new filesystem
[  140.574021][ T8011] bcachefs (loop3): going read-write
[  140.578499][ T8011] bcachefs (loop3): marking superblocks
[  140.594151][ T8011] bcachefs (loop3): initializing freespace
[  140.602875][ T8011] bcachefs (loop3): done initializing freespace
[  140.639777][ T8011] bcachefs (loop3): reading snapshots table
[  140.642357][ T8011] bcachefs (loop3): reading snapshots done
[  140.716359][ T8011] bcachefs (loop3): done starting filesystem
[  141.099532][ T7222] bcachefs (loop3): shutting down
[  141.105875][ T7222] bcachefs (loop3): going read-only
[  141.111293][ T7222] bcachefs (loop3): finished waiting for writes to stop
[  141.117404][ T7222] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  141.185385][ T7222] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  141.188868][ T8034] netlink: 196 bytes leftover after parsing attributes in process `syz.1.848'.
[  141.192747][ T7222] bcachefs (loop3): clean shutdown complete, journal seq 4
[  141.195963][ T8034] netlink: 196 bytes leftover after parsing attributes in process `syz.1.848'.
[  141.199673][ T7222] bcachefs (loop3): marking filesystem clean
[  141.201234][ T8034] netlink: 19 bytes leftover after parsing attributes in process `syz.1.848'.
[  141.222380][ T7222] bcachefs (loop3): shutdown complete
[  141.707110][ T8041] loop0: detected capacity change from 0 to 256
[  142.304989][ T8057] loop0: detected capacity change from 0 to 32768
[  142.344905][ T8057] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  142.366042][ T8057] XFS (loop0): Ending clean mount
[  142.397151][ T5862] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  142.480849][ T8076] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  142.521661][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'.
[  142.573766][ T8078] netlink: 'syz.1.866': attribute type 1 has an invalid length.
[  142.577041][ T8078] netlink: 'syz.1.866': attribute type 2 has an invalid length.
[  142.808102][ T8107] loop1: detected capacity change from 0 to 128
[  142.860213][ T8112] loop1: detected capacity change from 0 to 1024
[  142.862879][ T8112] EXT4-fs: Ignoring removed bh option
[  142.867012][ T8112] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  142.895839][ T8112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.913384][   T33] audit: type=1804 audit(2000000562.851:34): pid=8112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.878" name="/newroot/298/file1/bus" dev="loop1" ino=18 res=1 errno=0
[  143.001216][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'.
[  143.004231][ T8131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.883'.
[  143.914857][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.961831][ T8147] loop3: detected capacity change from 0 to 16
[  143.967149][ T8147] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  145.331851][ T5492] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  145.895526][ T5492] usb 1-1: Using ep0 maxpacket: 16
[  145.908736][ T5492] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.912693][ T5492] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.916194][ T5492] usb 1-1: config 0 interface 0 has no altsetting 0
[  145.921447][ T5492] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  145.925134][ T5492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.176534][ T5492] usb 1-1: config 0 descriptor??
[  146.417525][ T8193] loop3: detected capacity change from 0 to 16
[  146.423153][ T8193] erofs (device loop3): mounted with root inode @ nid 36.
[  146.434626][ T8193] erofs (device loop3): readahead error at folio 6 @ nid 36
[  146.438132][ T8193] erofs (device loop3): readahead error at folio 4 @ nid 36
[  146.443818][ T8193] syz.3.905: attempt to access beyond end of device
[  146.443818][ T8193] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  146.452989][ T8193] syz.3.905: attempt to access beyond end of device
[  146.452989][ T8193] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16
[  146.458940][ T8193] syz.3.905: attempt to access beyond end of device
[  146.458940][ T8193] loop3: rw=524288, sector=376, nr_sectors = 16 limit=16
[  146.468020][ T8193] erofs (device loop3): invalid de[0].nameoff 0 @ nid 36
[  146.473323][ T8193] erofs (device loop3): invalid de[0].nameoff 0 @ nid 36
[  146.596116][ T5492] hid (null): nested delimiters
[  146.597830][ T5492] hid (null): nested delimiters
[  146.599806][ T5492] hid (null): nested delimiters
[  146.601445][ T5492] hid (null): report_id 24797 is invalid
[  146.603686][ T5492] hid (null): bogus close delimiter
[  146.809651][   T24] usb 1-1: USB disconnect, device number 19
[  147.282946][ T8215] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  147.613029][ T8217] sctp: [Deprecated]: syz.0.916 (pid 8217) Use of int in max_burst socket option deprecated.
[  147.613029][ T8217] Use struct sctp_assoc_value instead
[  147.633844][ T8219] gre1: entered promiscuous mode
[  148.152150][ T8240] loop1: detected capacity change from 0 to 1024
[  148.155679][ T8240] EXT4-fs: Ignoring removed bh option
[  148.166755][ T8240] EXT4-fs: inline encryption not supported
[  148.170424][ T8240] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  148.269584][ T8240] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.926: lblock 2 mapped to illegal pblock 2 (length 1)
[  148.309258][ T8240] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  148.312086][ T8240] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.926: lblock 0 mapped to illegal pblock 48 (length 1)
[  148.327166][ T8240] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  148.333019][ T8236] loop0: detected capacity change from 0 to 32768
[  148.336065][ T8240] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.926: Failed to acquire dquot type 0
[  148.342730][ T8240] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  148.348835][ T8240] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.926: mark_inode_dirty error
[  148.353565][ T8236] ea_get: invalid extended attribute
[  148.355905][ T8236] ffff888032d18330: 04 00 00 00                                      ....
[  148.365539][ T8244] syz_tun: entered allmulticast mode
[  148.369728][ T8240] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  148.375637][ T8244] lo: entered allmulticast mode
[  148.380444][ T8240] EXT4-fs (loop1): 1 orphan inode deleted
[  148.384221][ T8240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.384621][ T8243] syz_tun: left allmulticast mode
[  148.402334][   T26] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  148.413157][   T26] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  148.419097][ T8240] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.926: Invalid inode table block 1 in block_group 0
[  148.428074][   T26] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u9:0: Failed to release dquot type 0
[  148.440054][ T8240] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  148.487499][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.510458][ T1091] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  148.530580][ T1091] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  148.534593][ T1091] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u10:4: Failed to release dquot type 0
[  148.543040][ T5854] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  148.559937][ T5854] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  148.565139][ T5854] EXT4-fs error (device loop1): ext4_quota_off:7227: inode #3: comm syz-executor: mark_inode_dirty error
[  148.771302][ T5919] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  148.894442][   T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  149.057685][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  149.063663][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  149.068540][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  149.075810][   T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  149.080108][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.084480][   T24] usb 2-1: Product: syz
[  149.084999][ T5919] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  149.086388][   T24] usb 2-1: Manufacturer: syz
[  149.089945][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.097297][   T24] usb 2-1: SerialNumber: syz
[  149.104859][   T24] usb 2-1: config 0 descriptor??
[  149.109896][   T24] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  149.113715][ T5919] usb 4-1: config 0 descriptor??
[  149.323076][ T6552] usb 2-1: USB disconnect, device number 12
[  149.325296][ T5919] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  149.329454][ T5919] [drm:udl_init] *ERROR* Selecting channel failed
[  149.342003][ T5919] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 3
[  149.345058][ T5919] [drm] Initialized udl on minor 3
[  149.350975][ T5919] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  149.359064][ T5919] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  149.365528][ T5492] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  149.369488][ T5492] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  149.376000][ T5919] usb 4-1: USB disconnect, device number 5
[  149.631950][ T8266] loop0: detected capacity change from 0 to 64
[  150.539125][ T8301] loop0: detected capacity change from 0 to 256
[  150.552681][ T8301] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  150.564943][ T8301] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  150.583875][ T8301] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  150.596189][ T8301] exFAT-fs (loop0): failed to load alloc-bitmap
[  150.602719][ T8301] exFAT-fs (loop0): failed to recognize exfat type
[  151.101825][ T8324] netlink: 'syz.0.965': attribute type 4 has an invalid length.
[  151.141568][ T8324] netlink: 'syz.0.965': attribute type 4 has an invalid length.
[  151.146157][ T8326] loop1: detected capacity change from 0 to 1024
[  151.177901][ T8326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.200294][ T8326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.964: bg 0: block 88: padding at end of block bitmap is not set
[  151.225209][ T8320] loop3: detected capacity change from 0 to 32768
[  151.228555][ T8320] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.962 (8320)
[  151.243652][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.259764][ T8320] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  151.268414][ T8320] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  151.365800][ T8320] BTRFS info (device loop3): enabling ssd optimizations
[  151.368182][ T8320] BTRFS info (device loop3): enabling free space tree
[  151.461555][ T7222] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  152.648172][ T8368] loop3: detected capacity change from 0 to 32768
[  152.654200][ T8368] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.975 (8368)
[  152.674755][ T8368] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  152.685393][ T8368] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  152.777806][ T8368] BTRFS info (device loop3): enabling ssd optimizations
[  152.782118][ T8368] BTRFS info (device loop3): enabling free space tree
[  152.833948][ T7222] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.105038][ T8396] loop3: detected capacity change from 0 to 1024
[  153.129348][ T8396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  153.135427][ T8396] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.157633][   T33] audit: type=1800 audit(2000000573.045:35): pid=8396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.980" name="file1" dev="loop3" ino=15 res=0 errno=0
[  153.170572][ T7222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  153.402341][ T8410] loop3: detected capacity change from 0 to 16
[  153.406149][ T8410] erofs (device loop3): mounted with root inode @ nid 36.
[  153.421078][ T8412] loop0: detected capacity change from 0 to 8
[  153.432908][ T8412] cramfs: empty filesystem
[  153.485868][ T8416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.989'.
[  153.489528][ T8416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.989'.
[  153.752987][ T5492] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  153.936255][ T5492] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  153.940753][ T5492] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.956418][ T5492] usb 4-1: config 0 has no interface number 0
[  154.000662][ T5492] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  154.013337][ T5492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.020134][ T5492] usb 4-1: Product: syz
[  154.022616][ T5492] usb 4-1: Manufacturer: syz
[  154.027581][ T5492] usb 4-1: SerialNumber: syz
[  154.079857][ T5492] usb 4-1: config 0 descriptor??
[  154.085973][ T5492] ims_pcu 4-1:0.41: Missing CDC union descriptor
[  154.090640][ T5492] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22
[  154.418894][ T8443] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1001'.
[  154.772001][ T8461] erspan0: entered promiscuous mode
[  154.904741][ T8467] loop1: detected capacity change from 0 to 256
[  154.915968][ T8467] FAT-fs (loop1): Directory bread(block 64) failed
[  154.919473][ T8467] FAT-fs (loop1): Directory bread(block 65) failed
[  154.922573][ T8467] FAT-fs (loop1): Directory bread(block 66) failed
[  154.925113][ T8467] FAT-fs (loop1): Directory bread(block 67) failed
[  154.935357][ T8467] FAT-fs (loop1): Directory bread(block 68) failed
[  154.941685][ T8467] FAT-fs (loop1): Directory bread(block 69) failed
[  154.951142][ T8467] FAT-fs (loop1): Directory bread(block 70) failed
[  154.959198][ T8467] FAT-fs (loop1): Directory bread(block 71) failed
[  154.964687][ T8467] FAT-fs (loop1): Directory bread(block 72) failed
[  154.974452][ T8467] FAT-fs (loop1): Directory bread(block 73) failed
[  155.101311][ T8473] loop0: detected capacity change from 0 to 4096
[  157.424376][ T5492] usb 4-1: USB disconnect, device number 6
[  157.639822][ T8508] loop1: detected capacity change from 0 to 2048
[  157.670352][ T8513] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.700294][ T8513] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  157.704977][ T8513] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  157.718758][ T8513] Remounting filesystem read-only
[  157.747133][ T5854] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  157.875077][ T8512] loop0: detected capacity change from 0 to 32768
[  157.877945][ T8521] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  157.878786][ T8512] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1026 (8512)
[  157.894649][ T8512] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  157.902209][ T8512] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  157.938326][ T8512] BTRFS info (device loop0): enabling ssd optimizations
[  157.940872][ T8512] BTRFS info (device loop0): enabling free space tree
[  158.034921][ T5862] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  158.256816][ T8554] loop1: detected capacity change from 0 to 512
[  158.287881][ T8554] EXT4-fs (loop1): orphan cleanup on readonly fs
[  158.296906][ T8554] EXT4-fs warning (device loop1): ext4_xattr_inode_get:556: inode #11: comm syz.1.1041: EA inode hash validation failed
[  158.315917][ T8554] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  158.355070][ T8554] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.1041: corrupted inode contents
[  158.385544][ T8554] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #15: comm syz.1.1041: mark_inode_dirty error
[  158.397059][ T8554] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.1041: corrupted inode contents
[  158.402685][ T8554] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #15: comm syz.1.1041: mark_inode_dirty error
[  158.408423][ T8554] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #15: comm syz.1.1041: mark inode dirty (error -117)
[  158.420558][ T8558] binder: 8557:8558 ioctl c0306201 200000000240 returned -14
[  158.424502][ T8554] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[  158.429169][ T8554] EXT4-fs (loop1): 1 orphan inode deleted
[  158.439269][ T8554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  158.453998][ T8554] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.776555][ T8569] loop3: detected capacity change from 0 to 32768
[  158.797917][ T8569] syz.3.1046: attempt to access beyond end of device
[  158.797917][ T8569] loop3: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[  158.821262][  T117] blkno = 8ed2c, nblocks = 1
[  158.852063][  T117] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  158.852063][  T117] 
[  158.977947][  T117] ERROR: (device loop3): remounting filesystem as read-only
[  159.219492][ T8587] loop3: detected capacity change from 0 to 256
[  159.224388][ T8587] exfat: Deprecated parameter 'namecase'
[  159.226478][ T8587] exfat: Deprecated parameter 'utf8'
[  159.234141][ T8587] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  159.590151][ T8607] netlink: 'syz.0.1059': attribute type 4 has an invalid length.
[  159.592958][ T8607] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1059'.
[  160.838656][  T793] IPVS: starting estimator thread 0...
[  160.924425][ T8625] IPVS: using max 78 ests per chain, 187200 per kthread
[  161.557638][ T8633] loop1: detected capacity change from 0 to 512
[  161.566448][ T8633] EXT4-fs: Ignoring removed bh option
[  161.569247][ T8633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  161.580848][ T8633] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  161.589609][ T8633] EXT4-fs (loop1): 1 truncate cleaned up
[  161.592899][ T8633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.628841][ T8643] Bluetooth: MGMT ver 1.23
[  161.633973][ T8643] Bluetooth: hci0: invalid len left 7, exp >= 40
[  161.644523][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.116803][ T5920] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  162.267144][ T5920] usb 2-1: Using ep0 maxpacket: 32
[  162.271292][ T5920] usb 2-1: config 0 has an invalid interface number: 212 but max is 0
[  162.274838][ T5920] usb 2-1: config 0 has no interface number 0
[  162.278273][ T5920] usb 2-1: config 0 interface 212 has no altsetting 0
[  162.285606][ T5920] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=c5.d3
[  162.289904][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.293666][ T5920] usb 2-1: Product: syz
[  162.295435][ T5920] usb 2-1: Manufacturer: syz
[  162.297615][ T5920] usb 2-1: SerialNumber: syz
[  162.302210][ T5920] usb 2-1: config 0 descriptor??
[  162.306460][ T5920] kvaser_usb 2-1:0.212: error -ENODEV: Cannot get usb endpoint(s)
[  162.510224][ T5919] usb 2-1: USB disconnect, device number 13
[  162.590393][ T8669] loop0: detected capacity change from 0 to 128
[  162.594171][ T8669] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  162.600424][ T8669] hpfs: filesystem error: improperly stopped
[  162.602766][ T8669] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  162.605599][ T8669] hpfs: You really don't want any checks? You are crazy...
[  162.610605][ T8669] hpfs: hpfs_map_sector(): read error
[  162.612934][ T8669] hpfs: code page support is disabled
[  162.616984][ T8669] hpfs: hpfs_map_4sectors(): unaligned read
[  162.620095][ T8669] hpfs: hpfs_map_4sectors(): unaligned read
[  162.622700][ T8669] hpfs: filesystem error: unable to find root dir
[  162.637690][ T8669] hpfs: hpfs_map_4sectors(): unaligned read
[  162.642747][ T8669] hpfs: hpfs_map_sector(): read error
[  162.762728][ T8677] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  162.766153][ T8677] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  162.769276][ T8677] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  162.772738][ T8677] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  162.775585][ T8677] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff7,4)
[  162.779705][ T8677] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  162.782520][ T8677] comedi comedi3: 8255: I/O port conflict (0x21,4)
[  162.785508][ T8677] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  162.788740][ T8677] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  162.791592][ T8677] comedi comedi3: 8255: I/O port conflict (0x400,4)
[  162.794474][ T8677] comedi comedi3: 8255: I/O port conflict (0x800006,4)
[  162.797433][ T8677] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  162.800501][ T8677] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  162.803280][ T8677] comedi comedi3: 8255: I/O port conflict (0x80402,4)
[  162.805998][ T8677] comedi comedi3: 8255: I/O port conflict (0xd,4)
[  162.808959][ T8677] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  162.811750][ T8677] comedi comedi3: 8255: I/O port conflict (0x41,4)
[  162.814523][ T8677] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  162.817239][ T8677] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  162.820371][ T8677] comedi comedi3: 8255: I/O port conflict (0x8000003,4)
[  162.823407][ T8677] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4)
[  163.090368][   T57] Bluetooth: hci2: command 0x0405 tx timeout
[  163.116085][ T8684] loop1: detected capacity change from 0 to 2048
[  163.166352][ T8684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.227285][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.477821][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.481913][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.493224][ T8690] bond0: left promiscuous mode
[  163.495360][ T8690] bond_slave_0: left promiscuous mode
[  163.497913][ T8690] bond_slave_1: left promiscuous mode
[  163.552307][ T8690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.559472][ T8690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.622503][ T8690] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  163.667530][ T5718] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.670827][ T5718] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.683826][ T5718] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.688465][ T5718] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.790249][ T8703] netlink: 'syz.1.1100': attribute type 10 has an invalid length.
[  163.798573][ T8703] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  163.810481][ T8705] loop0: detected capacity change from 0 to 256
[  163.814155][ T8705] exfat: Deprecated parameter 'namecase'
[  163.817091][ T8705] exfat: Deprecated parameter 'utf8'
[  163.823962][ T8705] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  163.898617][ T8713] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32
[  163.994564][ T8719] loop1: detected capacity change from 0 to 4096
[  164.221338][ T5919] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  164.301333][  T793] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  164.393975][ T5919] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  164.398832][ T5919] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  164.403883][ T5492] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  164.406661][ T5919] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  164.410317][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.416669][ T8723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  164.421213][ T5919] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  164.451725][  T793] usb 2-1: Using ep0 maxpacket: 8
[  164.458209][  T793] usb 2-1: unable to get BOS descriptor or descriptor too short
[  164.462678][  T793] usb 2-1: config 1 has an invalid interface number: 4 but max is 2
[  164.465545][  T793] usb 2-1: config 1 has no interface number 1
[  164.467649][  T793] usb 2-1: too many endpoints for config 1 interface 4 altsetting 16: 195, using maximum allowed: 30
[  164.471266][  T793] usb 2-1: config 1 interface 4 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 195
[  164.476443][  T793] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  164.481650][  T793] usb 2-1: config 1 interface 4 has no altsetting 0
[  164.486752][  T793] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.490566][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.494883][  T793] usb 2-1: Product: syz
[  164.496689][  T793] usb 2-1: Manufacturer: syz
[  164.498690][  T793] usb 2-1: SerialNumber: syz
[  164.583502][ T5492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  164.587381][ T5492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  164.590906][ T5492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  164.594694][ T5492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  164.601222][ T5492] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  164.605176][ T5492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.608785][ T5492] usb 1-1: Product: syz
[  164.610294][ T5492] usb 1-1: Manufacturer: syz
[  164.612403][ T5492] usb 1-1: SerialNumber: syz
[  164.616978][ T5492] usb 1-1: config 0 descriptor??
[  164.637046][ T5920] usb 4-1: USB disconnect, device number 7
[  164.720781][  T793] usb 2-1: 2:1: cannot set freq 15828157 to ep 0x82
[  164.739708][  T793] hub 2-1:1.4: Invalid hub with more than one config or interface
[  164.743557][  T793] hub 2-1:1.4: probe with driver hub failed with error -22
[  164.750515][  T793] usb 2-1: USB disconnect, device number 14
[  164.823925][ T5492] adutux 1-1:0.0: Could not retrieve serial number
[  164.826868][ T5492] adutux 1-1:0.0: probe with driver adutux failed with error -5
[  165.026278][   T24] usb 1-1: USB disconnect, device number 20
[  166.209519][ T8751] loop1: detected capacity change from 0 to 128
[  166.212852][ T8751] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  166.223576][ T8751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.241423][ T8751] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only
[  166.248979][ T8751] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null.
[  166.445043][  T793] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  166.573946][ T8762] loop1: detected capacity change from 0 to 32768
[  166.578675][ T8762] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1127 (8762)
[  166.588875][ T8762] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.593216][ T8762] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  166.607174][  T793] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024
[  166.611747][  T793] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0
[  166.616262][  T793] usb 4-1: config 16 interface 0 has no altsetting 0
[  166.620010][  T793] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a
[  166.623843][  T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.624078][ T8762] BTRFS info (device loop1): enabling ssd optimizations
[  166.630008][ T8762] BTRFS info (device loop1): enabling free space tree
[  166.634663][ T8749] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  166.659644][ T5854] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.773039][ T8779] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  166.782649][ T8779] CIFS mount error: No usable UNC path provided in device string!
[  166.782649][ T8779] 
[  166.797722][ T8779] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  166.844101][  T793] usb 4-1: string descriptor 0 read error: -71
[  166.851531][  T793] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  166.855157][  T793] imon 4-1:16.0: unable to initialize intf0, err -19
[  166.858565][ T8783] loop1: detected capacity change from 0 to 1024
[  166.866712][  T793] imon:imon_probe: failed to initialize context!
[  166.871195][  T793] imon 4-1:16.0: unable to register, err -19
[  166.877213][  T793] usb 4-1: USB disconnect, device number 8
[  166.890290][ T1092] hfsplus: b-tree write err: -5, ino 4
[  166.977146][ T8787] loop1: detected capacity change from 0 to 2048
[  166.984386][ T8787] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.051362][ T8789] loop1: detected capacity change from 0 to 1024
[  167.055050][ T8789] EXT4-fs: Ignoring removed nobh option
[  167.058762][ T8789] EXT4-fs: Ignoring removed bh option
[  167.081235][ T8789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.129642][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.475743][ T8799] loop1: detected capacity change from 0 to 128
[  167.505956][   T33] audit: type=1804 audit(2000000587.359:36): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1135" name="/newroot/376/file0/bus" dev="loop1" ino=1048618 res=1 errno=0
[  167.520855][   T33] audit: type=1804 audit(2000000587.379:37): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1135" name="/newroot/376/file0/bus" dev="loop1" ino=1048618 res=1 errno=0
[  167.530821][ T8799] syz.1.1135: attempt to access beyond end of device
[  167.530821][ T8799] loop1: rw=34817, sector=121, nr_sectors = 120 limit=128
[  167.559578][ T1092] kworker/u10:5: attempt to access beyond end of device
[  167.559578][ T1092] loop1: rw=1, sector=241, nr_sectors = 800 limit=128
[  167.883415][ T8808] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[  167.886868][ T8808] ref_ctr increment failed for inode: 0x7c3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802a224b40
[  167.899049][   T33] audit: type=1804 audit(2000000587.729:38): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1136" name="/newroot/377/file0" dev="tmpfs" ino=1987 res=1 errno=0
[  168.104278][ T8807] loop3: detected capacity change from 0 to 1024
[  168.125001][ T8807] hfsplus: invalid btree flag
[  168.127222][ T8807] hfsplus: failed to load attributes file
[  168.147861][ T8811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1139'.
[  168.179958][ T8813] CUSE: unknown device info ""
[  168.181735][ T8813] CUSE: unknown device info ""
[  168.183445][ T8813] CUSE: unknown device info ""
[  168.185493][ T8813] CUSE: unknown device info ""
[  168.187383][ T8813] CUSE: zero length info key specified
[  168.696993][   T33] audit: type=1326 audit(2000000588.548:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.1146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  168.727306][   T33] audit: type=1326 audit(2000000588.568:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.1146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  168.750360][   T33] audit: type=1326 audit(2000000588.568:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.1146" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  168.765826][   T33] audit: type=1326 audit(2000000588.568:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.1146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  168.785711][   T33] audit: type=1326 audit(2000000588.568:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.1146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  168.806380][   T33] audit: type=1326 audit(2000000588.568:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.1146" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  168.816884][   T33] audit: type=1326 audit(2000000588.568:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.1146" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  169.148992][ T5920] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  169.208520][ T8853] loop1: detected capacity change from 0 to 32768
[  169.218032][ T8853] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  169.247742][ T8853] (syz.1.1159,8853,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  169.284393][ T5854] ocfs2: Unmounting device (7,1) on (node local)
[  169.309376][ T5920] usb 1-1: Using ep0 maxpacket: 8
[  169.313287][ T5920] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  169.317676][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  169.322494][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  169.326366][ T5920] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  169.333814][ T5920] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  169.337046][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.545605][ T5920] usb 1-1: GET_CAPABILITIES returned 0
[  169.547685][ T5920] usbtmc 1-1:16.0: can't read capabilities
[  169.756900][ T5492] usb 1-1: USB disconnect, device number 21
[  170.306618][ T8867] loop0: detected capacity change from 0 to 512
[  170.311967][ T8867] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  170.323302][ T8867] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended
[  170.328408][ T8867] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.1164: inode #15: comm syz.0.1164: iget: illegal inode #
[  170.337782][ T8867] EXT4-fs (loop0): Remounting filesystem read-only
[  170.342757][ T8867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.353552][ T8867] EXT4-fs (loop0): shut down requested (1)
[  170.374312][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.488714][ T8876] tc_dump_action: action bad kind
[  170.735882][ T8882] loop0: detected capacity change from 0 to 32768
[  170.745812][ T8882] 
[  170.745812][ T8882]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  170.745812][ T8882] 
[  170.755815][ T8882] 
[  170.755815][ T8882]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  170.755815][ T8882] 
[  170.761252][ T8882] 
[  170.761252][ T8882]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  170.761252][ T8882] 
[  170.800486][  T117] 
[  170.800486][  T117]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  170.800486][  T117] 
[  170.819637][ T1092] 
[  170.819637][ T1092]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  170.819637][ T1092] 
[  170.829037][ T1092] 
[  170.829037][ T1092]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  170.829037][ T1092] 
[  170.835129][  T116] 
[  170.835129][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  170.835129][  T116] 
[  170.840172][ T5862] 
[  170.840172][ T5862]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  170.840172][ T5862] 
[  170.845101][ T5862] 
[  170.845101][ T5862]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  170.845101][ T5862] 
[  171.112439][ T8894] loop3: detected capacity change from 0 to 40427
[  171.122306][ T8894] F2FS-fs (loop3): invalid crc value
[  171.182050][ T8894] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  171.186661][ T8894] F2FS-fs (loop3): Start checkpoint disabled!
[  171.205925][ T8894] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  171.209311][ T8894] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  171.239260][ T3642] kworker/u9:5: attempt to access beyond end of device
[  171.239260][ T3642] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  171.246903][ T3642] CPU: 0 UID: 0 PID: 3642 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  171.246917][ T3642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.246925][ T3642] Workqueue: writeback wb_workfn (flush-7:3)
[  171.246942][ T3642] Call Trace:
[  171.246946][ T3642]  <TASK>
[  171.246951][ T3642]  dump_stack_lvl+0x189/0x250
[  171.246964][ T3642]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.246972][ T3642]  ? __pfx_queue_work_on+0x10/0x10
[  171.246979][ T3642]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.246989][ T3642]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.247002][ T3642]  f2fs_handle_critical_error+0x37c/0x540
[  171.247014][ T3642]  f2fs_write_end_io+0x886/0xb60
[  171.247032][ T3642]  __submit_merged_bio+0x27a/0x6a0
[  171.247043][ T3642]  __submit_merged_write_cond+0x255/0x530
[  171.247054][ T3642]  f2fs_write_data_pages+0x261d/0x3000
[  171.247101][ T3642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  171.247117][ T3642]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  171.247140][ T3642]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  171.247154][ T3642]  ? trace_f2fs_writepages+0x7f/0x200
[  171.247163][ T3642]  ? f2fs_write_node_pages+0x478/0x6e0
[  171.247174][ T3642]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  171.247183][ T3642]  ? rcu_is_watching+0x15/0xb0
[  171.247196][ T3642]  ? __lock_acquire+0xab9/0xd20
[  171.247215][ T3642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  171.247230][ T3642]  do_writepages+0x32e/0x550
[  171.247249][ T3642]  ? reacquire_held_locks+0x127/0x1d0
[  171.247259][ T3642]  ? writeback_sb_inodes+0x384/0x1010
[  171.247287][ T3642]  __writeback_single_inode+0x145/0xff0
[  171.247297][ T3642]  ? do_raw_spin_unlock+0x4d/0x240
[  171.247313][ T3642]  writeback_sb_inodes+0x6c7/0x1010
[  171.247343][ T3642]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  171.247381][ T3642]  ? rcu_is_watching+0x15/0xb0
[  171.247398][ T3642]  wb_writeback+0x43b/0xaf0
[  171.247417][ T3642]  ? queue_io+0x391/0x590
[  171.247430][ T3642]  ? __pfx_wb_writeback+0x10/0x10
[  171.247443][ T3642]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.247455][ T3642]  wb_workfn+0x409/0xef0
[  171.247471][ T3642]  ? __pfx_wb_workfn+0x10/0x10
[  171.247483][ T3642]  ? __lock_acquire+0xab9/0xd20
[  171.247497][ T3642]  ? process_scheduled_works+0x9ef/0x17b0
[  171.247510][ T3642]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.247520][ T3642]  ? process_scheduled_works+0x9ef/0x17b0
[  171.247529][ T3642]  ? process_scheduled_works+0x9ef/0x17b0
[  171.247540][ T3642]  process_scheduled_works+0xae1/0x17b0
[  171.247562][ T3642]  ? __pfx_process_scheduled_works+0x10/0x10
[  171.247579][ T3642]  worker_thread+0x8a0/0xda0
[  171.247590][ T3642]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  171.247602][ T3642]  ? __kthread_parkme+0x7b/0x200
[  171.247613][ T3642]  kthread+0x711/0x8a0
[  171.247623][ T3642]  ? __pfx_worker_thread+0x10/0x10
[  171.247633][ T3642]  ? __pfx_kthread+0x10/0x10
[  171.247641][ T3642]  ? _raw_spin_unlock_irq+0x23/0x50
[  171.247649][ T3642]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.247658][ T3642]  ? __pfx_kthread+0x10/0x10
[  171.247666][ T3642]  ret_from_fork+0x4bc/0x870
[  171.247679][ T3642]  ? __pfx_ret_from_fork+0x10/0x10
[  171.247692][ T3642]  ? __switch_to_asm+0x39/0x70
[  171.247700][ T3642]  ? __switch_to_asm+0x33/0x70
[  171.247708][ T3642]  ? __pfx_kthread+0x10/0x10
[  171.247716][ T3642]  ret_from_fork_asm+0x1a/0x30
[  171.247732][ T3642]  </TASK>
[  171.247735][ T3642] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  171.367252][ T8916] loop1: detected capacity change from 0 to 512
[  171.395557][ T8916] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  171.407090][ T8916] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.1186: iget: bad i_size value: -6917529027641081756
[  171.416578][ T8916] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1186: couldn't read orphan inode 17 (err -117)
[  171.425303][ T8916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.452909][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.480913][ T8921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1187'.
[  171.485810][ T8921] netlink: 'syz.1.1187': attribute type 2 has an invalid length.
[  171.488979][ T8921] netlink: 'syz.1.1187': attribute type 2 has an invalid length.
[  171.494207][ T8921] netlink: 'syz.1.1187': attribute type 1 has an invalid length.
[  171.497630][ T8921] netlink: 'syz.1.1187': attribute type 2 has an invalid length.
[  171.501168][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'.
[  171.629200][ T8925] loop1: detected capacity change from 0 to 4096
[  171.633478][ T8925] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  171.878785][ T8927] loop3: detected capacity change from 0 to 32768
[  171.883502][ T8927] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 5, max 64)
[  171.883502][ T8927] members_v2 (size 152):
[  171.883502][ T8927] Device:                        0
[  171.883502][ T8927]   Label:                       (none)
[  171.883502][ T8927]   UUID:                        9b24efed-6a70-49cb-9057-2c46291a785d
[  171.883502][ T8927]   Size:                        655360
[  171.883502][ T8927]   read errors:                 0
[  171.883502][ T8927]   write errors:                0
[  171.883502][ T8927]   checksum errors:             0
[  171.883502][ T8927]   seqread iops:                0
[  171.883502][ T8927]   seqwrite iops:               0
[  171.883502][ T8927]   randread iops:               0
[  171.883502][ T8927]   randwrite iops:              0
[  171.883502][ T8927]   Bucket size:                 131072
[  171.883502][ T8927]   First bucket:                0
[  171.883502][ T8927]   Buckets:                     5
[  171.883502][ T8927]   Last mount:                  1714681272
[  171.883502][ T8927]   Last superblock write:       41
[  171.883502][ T8927]   State:                       rw
[  171.883502][ T8927]   Data allowed:                journal,btree,user
[  171.883502][ T8927]   Has data:                    (none)
[  171.883502][ T8927]   Btree allocated bitmap blocksize:256
[  171.883502][ T8927]   Btree allocated bitmap:      0000000000000000000000010001000010011000000000000000000000000000
[  171.883502][ T8927]   Durability:    
[  171.883644][ T8927] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  172.016230][ T8939] loop1: detected capacity change from 0 to 64
[  172.288556][ T8942] loop1: detected capacity change from 0 to 32768
[  172.292390][ T8942] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  172.593473][ T8960] loop3: detected capacity change from 0 to 512
[  172.597034][ T8960] EXT4-fs: Ignoring removed orlov option
[  172.654227][ T8960] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1204: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 3, max 1(4), depth 0(0)
[  172.695995][ T8960] EXT4-fs (loop3): Remounting filesystem read-only
[  172.706625][ T8960] EXT4-fs warning (device loop3): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  172.737332][ T8960] EXT4-fs (loop3): mount failed
[  172.922888][ T8967] loop1: detected capacity change from 0 to 8
[  172.931910][ T8967] SQUASHFS error: Unable to read inode 0x11f
[  173.088161][ T8976] loop1: detected capacity change from 0 to 4096
[  173.093369][ T8976] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  173.097767][ T8976] ntfs3(loop1): ino=3, mi_enum_attr
[  173.100165][ T8976] ntfs3(loop1): Failed to load $Volume (-22).
[  173.192796][ T8985] loop3: detected capacity change from 0 to 512
[  173.256263][ T8985] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0041]
[  173.259911][ T8985] System zones: 0-2, 18-18, 34-34
[  173.268344][ T8985] __quota_error: 13 callbacks suppressed
[  173.268360][ T8985] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  173.282291][ T8985] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  173.288389][ T8985] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.1213: Failed to acquire dquot type 0
[  173.294130][ T8985] EXT4-fs (loop3): Remounting filesystem read-only
[  173.297627][ T8985] EXT4-fs (loop3): 1 orphan inode deleted
[  173.306972][ T8985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.312516][ T8985] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.386375][ T7222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.756519][ T9012] loop3: detected capacity change from 0 to 256
[  174.113655][ T9023] loop0: detected capacity change from 0 to 4096
[  174.131808][ T9026] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.265352][   T33] audit: type=1800 audit(2000000594.051:59): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1229" name="file1" dev="loop0" ino=15 res=0 errno=0
[  174.586291][ T5919] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  174.740498][ T5919] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  174.744328][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.748259][ T5919] usb 1-1: Product: syz
[  174.750105][ T5919] usb 1-1: Manufacturer: syz
[  174.752182][ T5919] usb 1-1: SerialNumber: syz
[  174.759465][ T5919] usb 1-1: config 0 descriptor??
[  174.764275][ T5919] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 022
[  174.968288][ T5919]  (null): failure setting delay to 10us
[  174.970495][ T5919] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  174.977382][ T5919] usb 1-1: USB disconnect, device number 22
[  175.276183][ T5492] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  175.377917][ T9071] loop3: detected capacity change from 0 to 512
[  175.381727][ T9071] EXT4-fs: Ignoring removed orlov option
[  175.390092][ T9071] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  175.397492][ T9071] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  175.401678][ T9071] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1252: corrupted in-inode xattr: e_value size too large
[  175.411677][ T9071] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1252: couldn't read orphan inode 15 (err -117)
[  175.422245][ T9071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.433161][ T5492] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.438507][ T5492] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  175.442486][ T5492] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.455120][ T5492] usb 2-1: config 0 descriptor??
[  175.458804][   T33] audit: type=1804 audit(2000000595.300:60): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1252" name="/newroot/192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=18 res=1 errno=0
[  175.480791][   T33] audit: type=1800 audit(2000000595.300:61): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1252" name="bus" dev="loop3" ino=18 res=0 errno=0
[  175.515803][ T7222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.925094][ T9076] loop0: detected capacity change from 0 to 32768
[  176.090300][ T9076] lmLogOpen: exit(-6)
[  176.092600][ T9076] jfs_mount_rw failed, return code = -6
[  176.217208][ T5492] lenovo 0003:17EF:60A3.0007: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0
[  176.242648][   T24] usb 2-1: USB disconnect, device number 15
[  176.730234][ T9102] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1264'.
[  176.747707][ T9102] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1264'.
[  176.984757][   T33] audit: type=1326 audit(2000000596.819:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.1270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  176.994108][   T33] audit: type=1326 audit(2000000596.819:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.1270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  177.003707][   T33] audit: type=1326 audit(2000000596.829:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.1270" exe="/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  177.013793][   T33] audit: type=1326 audit(2000000596.839:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.1270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  177.022263][   T33] audit: type=1326 audit(2000000596.839:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.0.1270" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3778ec29 code=0x7ffc0000
[  177.236404][ T9127] loop1: detected capacity change from 0 to 2048
[  177.250974][ T9127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.404308][ T9126] loop0: detected capacity change from 0 to 32768
[  177.412452][ T9126] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.426497][ T9126] XFS (loop0): Ending clean mount
[  177.437205][ T9126] XFS (loop0): Quotacheck needed: Please wait.
[  177.475414][ T9126] XFS (loop0): Quotacheck: Done.
[  177.502206][ T5862] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.698913][ T9139] bond0: entered promiscuous mode
[  177.701162][ T9139] bond_slave_0: entered promiscuous mode
[  177.703696][ T9139] bond_slave_1: entered promiscuous mode
[  177.728762][ T9139] batadv_slave_0: entered promiscuous mode
[  177.736265][ T9139] batadv_slave_0: left promiscuous mode
[  177.742036][ T9139] bond0: left promiscuous mode
[  177.746580][ T9139] bond_slave_0: left promiscuous mode
[  177.756055][ T9139] bond_slave_1: left promiscuous mode
[  177.918862][ T9146] loop3: detected capacity change from 0 to 2048
[  177.925688][ T9146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.025041][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.054213][ T9151] netlink: 'syz.0.1283': attribute type 2 has an invalid length.
[  178.057504][ T9151] netlink: 'syz.0.1283': attribute type 1 has an invalid length.
[  178.278457][   T24] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  178.430817][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.440748][   T24] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  178.444419][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.447641][   T24] usb 4-1: Product: syz
[  178.449528][   T24] usb 4-1: Manufacturer: syz
[  178.451410][   T24] usb 4-1: SerialNumber: syz
[  178.454388][   T24] usb 4-1: config 0 descriptor??
[  178.458064][   T24] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  178.547493][ T9174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1293'.
[  178.662147][ T5492] usb 4-1: USB disconnect, device number 9
[  178.744434][ T9176] loop1: detected capacity change from 0 to 32768
[  178.752416][ T9176] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  178.756205][ T9176] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  178.778457][ T9176] XFS (loop1): Ending clean mount
[  178.785037][ T9176] XFS (loop1): Quotacheck needed: Please wait.
[  178.820869][ T9176] XFS (loop1): Quotacheck: Done.
[  178.868297][ T5854] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  179.276603][ T9202] loop0: detected capacity change from 0 to 1024
[  179.579290][ T5492] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  179.713582][ T9216] loop1: detected capacity change from 0 to 32768
[  179.724163][ T9216] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  179.740450][ T9216] XFS (loop1): Ending clean mount
[  179.741674][ T5492] usb 1-1: config 0 has an invalid interface number: 76 but max is 0
[  179.750631][ T5492] usb 1-1: config 0 has no interface number 0
[  179.753552][ T5492] usb 1-1: too many endpoints for config 0 interface 76 altsetting 1: 52, using maximum allowed: 30
[  179.758365][ T5492] usb 1-1: config 0 interface 76 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 52
[  179.764994][ T5492] usb 1-1: config 0 interface 76 has no altsetting 0
[  179.768910][ T5492] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  179.773736][ T5492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.780847][ T5492] usb 1-1: config 0 descriptor??
[  179.784762][ T5492] cp210x 1-1:0.76: cp210x converter detected
[  179.807288][ T5854] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  180.215263][ T5492] cp210x 1-1:0.76: failed to get vendor val 0x000e size 3: -71
[  180.224269][ T5492] usb 1-1: cp210x converter now attached to ttyUSB0
[  180.233859][ T5492] usb 1-1: USB disconnect, device number 23
[  180.238975][ T5492] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  180.243043][ T5492] cp210x 1-1:0.76: device disconnected
[  181.186617][ T9248] loop1: detected capacity change from 0 to 512
[  181.209223][ T9248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.217602][ T9248] ext4 filesystem being mounted at /461/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.306569][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.725910][ T9264] loop1: detected capacity change from 0 to 4096
[  181.736807][ T9264] ntfs3(loop1): ino=0, mi_enum_attr
[  181.813532][ T9264] ntfs3(loop1): ino=0, mi_enum_attr
[  181.815884][ T9264] ntfs3(loop1): Failed to load $MFT (-22).
[  182.610877][ T9281] loop0: detected capacity change from 0 to 64
[  182.618699][ T9281] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  183.221731][ T5920] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  183.373163][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  183.376888][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  183.380752][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  183.385802][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  183.390234][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  183.394220][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  183.398670][ T5920] usb 2-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb
[  183.402153][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.407270][ T5920] usb 2-1: config 0 descriptor??
[  183.411100][ T5920] appledisplay 2-1:0.0: Submitting URB failed
[  183.413785][ T5920] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5
[  183.512100][   T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  183.617662][ T5920] usb 2-1: USB disconnect, device number 16
[  183.675376][   T24] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[  183.678695][   T24] usb 4-1: config 0 has no interface number 0
[  183.681127][   T24] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  183.685239][   T24] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  183.689077][   T24] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  183.700679][   T24] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  183.704110][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.710153][   T24] usb 4-1: config 0 descriptor??
[  183.719565][   T24] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input9
[  183.745815][ T9306] loop0: detected capacity change from 0 to 128
[  183.923683][ T5920] usb 4-1: USB disconnect, device number 10
[  184.158533][ T9308] binder: 9307:9308 ioctl 541b 0 returned -22
[  184.271867][ T9314] team0: Device xfrm1 is of different type
[  184.350790][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.461764][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.504551][ T9320] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  184.564848][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.649349][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.774551][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  184.780074][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  184.784971][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  184.785142][ T9337] loop3: detected capacity change from 0 to 7
[  184.788119][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  184.792686][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  184.803243][ T9337] Dev loop3: unable to read RDB block 7
[  184.809804][ T9337]  loop3: unable to read partition table
[  184.811990][ T9337] loop3: partition table beyond EOD, truncated
[  184.818908][ T9337] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5)
[  184.844657][   T13] bridge_slave_1: left allmulticast mode
[  184.846623][   T13] bridge_slave_1: left promiscuous mode
[  184.848597][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.866733][   T13] bridge_slave_0: left allmulticast mode
[  184.868683][   T13] bridge_slave_0: left promiscuous mode
[  184.871117][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.033162][ T9335] loop3: detected capacity change from 0 to 32768
[  185.080762][ T9335] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  185.087606][ T9335] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  185.161794][ T9335] XFS (loop3): Ending clean mount
[  185.180611][ T9335] XFS (loop3): Quotacheck needed: Please wait.
[  185.272919][ T9335] XFS (loop3): Quotacheck: Done.
[  185.441359][ T7222] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  185.819388][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.833155][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.844136][   T13] bond0 (unregistering): Released all slaves
[  185.883037][ T5492] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  186.015941][   T13] team0: Port device bond1 removed
[  186.020791][   T13] bond1 (unregistering): Released all slaves
[  186.043111][ T5492] usb 4-1: Using ep0 maxpacket: 32
[  186.070125][ T5492] usb 4-1: config 0 interface 0 has no altsetting 0
[  186.075517][ T5492] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  186.079576][ T5492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.082671][ T5492] usb 4-1: Product: syz
[  186.092972][ T5492] usb 4-1: Manufacturer: syz
[  186.109772][ T5492] usb 4-1: SerialNumber: syz
[  186.135419][ T5492] usb 4-1: config 0 descriptor??
[  186.602914][ T5492] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  186.798354][   T13] hsr_slave_0: left promiscuous mode
[  186.805054][   T13] hsr_slave_1: left promiscuous mode
[  186.809925][ T5492] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  186.810507][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.817306][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.824256][ T5492] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22
[  186.838577][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.841945][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.874832][   T57] Bluetooth: hci2: command tx timeout
[  186.888302][   T13] veth1_macvtap: left promiscuous mode
[  186.894035][   T13] veth0_macvtap: left promiscuous mode
[  186.897002][   T13] veth1_vlan: left promiscuous mode
[  186.899322][   T13] veth0_vlan: left promiscuous mode
[  187.023168][ T6552] usb 4-1: USB disconnect, device number 11
[  187.681238][   T13] team0 (unregistering): Port device team_slave_1 removed
[  187.727456][   T13] team0 (unregistering): Port device team_slave_0 removed
[  188.442129][ T9366] loop1: detected capacity change from 0 to 256
[  188.466166][ T9366] FAT-fs (loop1): Directory bread(block 64) failed
[  188.472350][ T9366] FAT-fs (loop1): Directory bread(block 65) failed
[  188.488293][ T9338] chnl_net:caif_netlink_parms(): no params data found
[  188.488861][ T9366] FAT-fs (loop1): Directory bread(block 66) failed
[  188.493786][ T9366] FAT-fs (loop1): Directory bread(block 67) failed
[  188.500676][ T9368] loop3: detected capacity change from 0 to 1024
[  188.504855][ T9366] FAT-fs (loop1): Directory bread(block 68) failed
[  188.511291][ T9366] FAT-fs (loop1): Directory bread(block 69) failed
[  188.526055][ T9366] FAT-fs (loop1): Directory bread(block 70) failed
[  188.529872][ T9366] FAT-fs (loop1): Directory bread(block 71) failed
[  188.532798][ T9366] FAT-fs (loop1): Directory bread(block 72) failed
[  188.536640][ T9366] FAT-fs (loop1): Directory bread(block 73) failed
[  188.585398][ T9368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.603001][ T9368] EXT4-fs (loop3): shut down requested (2)
[  188.693421][ T7222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.702634][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.706206][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.709299][ T9338] bridge_slave_0: entered allmulticast mode
[  188.713283][ T9338] bridge_slave_0: entered promiscuous mode
[  188.732686][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.742646][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.745743][ T9338] bridge_slave_1: entered allmulticast mode
[  188.749677][ T9338] bridge_slave_1: entered promiscuous mode
[  188.771301][   T13] ------------[ cut here ]------------
[  188.774552][   T13] WARNING: net/ipv6/xfrm6_tunnel.c:341 at xfrm6_tunnel_net_exit+0x7e/0x100, CPU#0: kworker/u8:1/13
[  188.778881][   T13] Modules linked in:
[  188.781165][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  188.786153][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.790402][   T13] Workqueue: netns cleanup_net
[  188.792279][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  188.794751][   T13] Code: c8 04 d6 f7 4b 83 3c 2c 00 75 19 e8 ac d2 70 f7 49 81 fd f8 07 00 00 74 1d e8 9e d2 70 f7 49 83 c5 08 eb c9 e8 93 d2 70 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  188.803154][   T13] RSP: 0018:ffffc90000107890 EFLAGS: 00010293
[  188.806287][   T13] RAX: ffffffff8a4f7f1d RBX: ffff888024334000 RCX: ffff88801ce98000
[  188.809665][   T13] RDX: 0000000000000000 RSI: ffffffff8db9af17 RDI: ffff888024334000
[  188.812940][   T13] RBP: ffffc90000107990 R08: ffffffff8fc30877 R09: 1ffffffff1f8610e
[  188.816459][   T13] R10: dffffc0000000000 R11: fffffbfff1f8610f R12: ffff888024334000
[  188.819806][   T13] R13: 0000000000000000 R14: ffff888022828000 R15: dffffc0000000000
[  188.823217][   T13] FS:  0000000000000000(0000) GS:ffff8880b840a000(0000) knlGS:0000000000000000
[  188.827280][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.830058][   T13] CR2: 00007f2437b056c0 CR3: 000000000e138000 CR4: 00000000000006f0
[  188.833419][   T13] Call Trace:
[  188.835201][   T13]  <TASK>
[  188.836531][   T13]  ops_undo_list+0x49a/0x990
[  188.838602][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  188.840789][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  188.843011][   T13]  cleanup_net+0x4d8/0x820
[  188.845096][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  188.847266][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.849513][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  188.852003][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  188.854602][   T13]  process_scheduled_works+0xae1/0x17b0
[  188.857067][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  188.859629][   T13]  worker_thread+0x8a0/0xda0
[  188.861651][   T13]  kthread+0x711/0x8a0
[  188.863399][   T13]  ? __pfx_worker_thread+0x10/0x10
[  188.865788][   T13]  ? __pfx_kthread+0x10/0x10
[  188.867726][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.869937][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.872157][   T13]  ? __pfx_kthread+0x10/0x10
[  188.874247][   T13]  ret_from_fork+0x4bc/0x870
[  188.876277][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  188.878017][   T13]  ? __switch_to_asm+0x39/0x70
[  188.879613][   T13]  ? __switch_to_asm+0x33/0x70
[  188.881215][   T13]  ? __pfx_kthread+0x10/0x10
[  188.882783][   T13]  ret_from_fork_asm+0x1a/0x30
[  188.884532][   T13]  </TASK>
[  188.885561][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  188.887980][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  188.891269][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.895232][   T13] Workqueue: netns cleanup_net
[  188.897098][   T13] Call Trace:
[  188.898305][   T13]  <TASK>
[  188.899581][   T13]  dump_stack_lvl+0x99/0x250
[  188.901538][   T13]  ? __asan_memcpy+0x40/0x70
[  188.903316][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.905338][   T13]  ? __pfx__printk+0x10/0x10
[  188.906941][   T13]  vpanic+0x237/0x6d0
[  188.908430][   T13]  ? __pfx_vpanic+0x10/0x10
[  188.910345][   T13]  ? is_bpf_text_address+0x26/0x2b0
[  188.912268][   T13]  panic+0xb9/0xc0
[  188.913568][   T13]  ? __pfx_panic+0x10/0x10
[  188.915112][   T13]  __warn+0x334/0x4c0
[  188.916544][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  188.918600][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  188.920519][   T13]  report_bug+0x2be/0x4f0
[  188.922260][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  188.924274][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  188.926048][   T13]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  188.927767][   T13]  handle_bug+0x84/0x160
[  188.929136][   T13]  exc_invalid_op+0x1a/0x50
[  188.930675][   T13]  asm_exc_invalid_op+0x1a/0x20
[  188.932473][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  188.934752][   T13] Code: c8 04 d6 f7 4b 83 3c 2c 00 75 19 e8 ac d2 70 f7 49 81 fd f8 07 00 00 74 1d e8 9e d2 70 f7 49 83 c5 08 eb c9 e8 93 d2 70 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  188.942280][   T13] RSP: 0018:ffffc90000107890 EFLAGS: 00010293
[  188.944337][   T13] RAX: ffffffff8a4f7f1d RBX: ffff888024334000 RCX: ffff88801ce98000
[  188.946850][   T13] RDX: 0000000000000000 RSI: ffffffff8db9af17 RDI: ffff888024334000
[  188.949423][   T13] RBP: ffffc90000107990 R08: ffffffff8fc30877 R09: 1ffffffff1f8610e
[  188.952620][   T13] R10: dffffc0000000000 R11: fffffbfff1f8610f R12: ffff888024334000
[  188.956013][   T13] R13: 0000000000000000 R14: ffff888022828000 R15: dffffc0000000000
[  188.959244][   T13]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  188.961483][   T13]  ops_undo_list+0x49a/0x990
[  188.963387][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  188.965373][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  188.967269][   T13]  cleanup_net+0x4d8/0x820
[  188.968846][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  188.970590][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.972717][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  188.975138][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  188.977543][   T13]  process_scheduled_works+0xae1/0x17b0
[  188.979931][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  188.982531][   T13]  worker_thread+0x8a0/0xda0
[  188.984538][   T13]  kthread+0x711/0x8a0
[  188.986093][   T13]  ? __pfx_worker_thread+0x10/0x10
[  188.988263][   T13]  ? __pfx_kthread+0x10/0x10
[  188.990263][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.992569][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.994716][   T13]  ? __pfx_kthread+0x10/0x10
[  188.996699][   T13]  ret_from_fork+0x4bc/0x870
[  188.998655][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  189.000815][   T13]  ? __switch_to_asm+0x39/0x70
[  189.002890][   T13]  ? __switch_to_asm+0x33/0x70
[  189.004633][   T13]  ? __pfx_kthread+0x10/0x10
[  189.006153][   T13]  ret_from_fork_asm+0x1a/0x30
[  189.007732][   T13]  </TASK>
[  189.009526][   T13] Kernel Offset: disabled
[  189.011438][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:43:37  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107030
R8 =ffff8881069a8237 R9 =1ffff11020d35046 R10=dffffc0000000000 R11=ffffffff855579a0
R12=dffffc0000000000 R13=ffffffff99d0b8f6 R14=ffffffff9a001520 R15=0000000000000000
RIP=ffffffff85557a1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b840a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2437b056c0 CR3=000000010ef22000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f3f3e812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=7a917de70c9c3b00 RBX=ffffffff819721d7 RCX=7a917de70c9c3b00 RDX=0000000000000001
RSI=ffffffff8db9af17 RDI=ffffffff8c03bf60 RBP=ffffc90000177f10 RSP=ffffc90000177de0
R8 =ffff888136632fdb R9 =1ffff11026cc65fb R10=dffffc0000000000 R11=ffffed1026cc65fc
R12=ffffffff8fc30870 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7dcdd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3a0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3f3f5056c0 CR3=000000010f332000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00ff0000000000 0000000000000000 XMM05=0000000000000000 00007f1a32812e7b
XMM06=0000000000000000 00007f1a32812e75 XMM07=0000000000000000 00007f1a32812e89
XMM08=0000000000000000 00007f1a32812f0f XMM09=0000000000000000 00007f1a32812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
