last executing test programs:

5.897257833s ago: executing program 1 (id=1550):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000400)={r0, r1, 0xc, 0x0, 0x0, 0xd, 0x1, 0x15c2, 0x3010, 0xb, 0x1, 0x4, 'syz1\x00'})

5.784922274s ago: executing program 1 (id=1554):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.307153757s ago: executing program 1 (id=1555):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="001d5933b55bd31ac3830ebbee275adf1db2744fe57fb1082c"], 0x1, 0x234, &(0x7f0000000340)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvMGKZxyVejt0v0g9V6hlZsYGNVT+BfN2TDBaSYv2FjGyChkc5gPyMziABnEwMAw+U/EvQcskgwiYLPWXArKnHJVlOOf2KmW5as4GO4zzOiYlsbAaDCLg4GBQe+I7kw7A95uJqiZxZVV2Yk5OalFxWcYUM2fzLifSZERpO7M36vBDxjtGLpjGRgZ5Db4qy3+9keqcuOm+sjpVRE1U7ubbi5dH8ewTf/vFROp9xMzwv4/OCSoZZGX/2GejNL3zQ1zPtTUPTFx7GxUnsvfevnvu/cxtcUJakyPxbsK2fgT3LRqPjk7uVk+npte3b6lWHFBVprLxGNTL/5NOL6WgWHyhSe2+jVnDsUrxnBKuVXOjbnrFi/ItUz9fN0bhuUMUZ8nMjAuZ2RgYmCYGbZzD9hfnBB/lTdAI4OBmYGBQYWBgYGJgYUhLTMn1cCDgZGBGcoxZIGqgqlmYuAAS+gl5+ektDMwgpMAWNtyBha4GYaPGVjhHCNkjrFFA9QkhnYorQKlPaD0cgaGXyBXPmZgYGNASl6wZMMCNqEfytNoACmrSCwpKTIEKYew4GJGcDEjAbjNTFBb5zKheu44E8MoGAWjYBSMglEwCkbBKBgFo2AUjGQACAAA//8qibdG")

5.163916302s ago: executing program 1 (id=1557):
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x152a, &(0x7f0000003000)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL/T+Z1+x/mceb6fz/5Yz6z9rP287/Ne9t6YbzoOqtageuV6RAT/ErzwRxIAxAJAPwC4BgACACgdVzru/Hx2iUn/2kHYX+vh1CtdAbuSuP9ZG/c/a+P+Z23c/6yN+5+1cf+zNu5/1sb9Zywr2zg1/7W8Zd2N7///96vzhzP8/f9fJLPE6C9Wl7i+E0DMn03h/mdt3P//WsGf2Yn7n7Vx/7Oq2CtdAPsPwO//rCDbH85w/7M27j9jWdmVvv98pTeIZO3n4Eq//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ2n/GUKAC6Nr3RdjDHGGGOMMcYY++v4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/ZP7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFY1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiSjOl/If5b/9O/oCfj75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/TL4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufOnfYEIRKACFcQEMUFsEBvkCHIEOYOcQa4gVxAJIkFcEBfkDq4P8gR5g3xB/iA+KBAUDHRgAhuIi02PBjcERYIbg6LBTUGxoHjgghJBQnBzUDK4JSgV3BqUDm4LygS3B2WDckH5oEJwR1AxuDOoFNwVVA7uDqoEVYNqQfXgnqBGcG9QM7gvqBXcH9QOHgjqBA8GdYOHgnrBw0H94JGgQfBo0DB4LGgUNA6aBE2DZn/p+t6fyPuE66a76yTdQ/fUL+teurfuo/vqfvoV3V+/qgfo13SyHqgH6df1YP2GHqLf1EP1MD1cv6VH6JF6lB6tx+ixOkWP0+P123qCfkdP1JP0ZD1Fp+qpepp+V0/XM/RM/Z6epd/Xs/UcPVfP02n6Az1fL9Dp+kO9UH+kM/QivVgv0Uv1Mr1cr9Ar9Sq9Wq/Ra/U6vV5v0Bv1Jr1Zb9Fb9Ta9XX+sd+hP9E69S+/Wn+o9+jO9V3+u9+kv9H79pc7UX+kD+mt9UH+jD+lv9WH9nT6ij+pj+nt9XP+gT+iT+pQ+rc/oH/VZ/ZM+p/35k/vzX+9GGWViTIyJNbEmh8lhcpqcJpfJZSImYuJMnMltcps8Jo/JZ/KZeBNvCpqC5jwyZAqZQiZqoqaIKWKKmqKmmClmnHEmwSSYkqakKWVKmdKmtCljypiypqwpb8qbO8wd5k5zp7nL3GXuNnebqqaqqW6qmxqmhqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWKamGammWlumpsWpoVpZVqZ1qa1aWPamESTaNqatqadaWfam/amg+lgOpqOppPpZLqYLqar6Wq6mW4mySSZnqan6WV6mT6mj+ln+pn+pr8ZYAaYZJNsBplBZrAZbIaYIWaoGWaGnz9RNSPNKDPajDFjTYpJMePNeDPBTDATzUQz2Uw2qSbVTDPTzHQz3cw0M80sM8vMNrPNXDPXpJk0M9/MN+km3Sw0C02GyTCLzWKz1Cw1y81ys9KsNKvNarMW1pr1Zr3ZaDaazWaz2Wq2mu1mu9lhdpidZqfZbXabPWaP2Wv2mn1mn9lv9ptMk2kOmAPmoDloDplD5rA5bI6YI+aYOWaOm+PmhDlhTplT5ozJe/H70ptYm93msFfZnPZqm8teY/8+zmfz23hbwBa02uaxeX8VG2ttUXuTLWaLW2dL2AR782/isracLW8r2DtsRXunrfSbuIa919a099la9n5b3d7zq7i2fcDWsY/auogAtrGtb5vaBvZR29A+ZhvZxraJbWpb26dsG/u0TbTP2Lb22d/E8+0Cu9KusqvtGrvT7rKn7Gl70H5jz9gfbTfb3fazr9j+9lU7wL5mk+3A38TD7Vt2hB1pR9nRdowd+5t4sp1iU+1UO82+a6fbGb+J0+wHdpZNt7PtHDvXzvs5Pl9Tuv3QLrQf2QwbwGK7xC61y+xyu+L/17rErrPr7Qa7w35iN9stdqvdZrdfOhG2u+xu+6ndYz+zB+zXdp/9wu63h2ym/ern+PzjO2S/tYftd/aIPWqP2e/tcfuD+jl3ZC8A+6P93v5kz1lvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCXyitGxclRCUqgm6kk3UKl6FYqTbdRGbqdylI5Kk8V6A6qSHdSJbqLKtPdVIWqUjWqTvdQDbqXatJ9VIvup9r0ANWhB6kuPUT16GGqT49QA3qUGtJj1IgaUxNqSs3ocWpOT1ALakmt6ElqTU9RG3qaEukZakvPUjv6G7Wn56gDPU8d6QXqRJ2pC71IXekl6kbdKYl6UE96mXpRb+pDfakfvUL96VUaQK9RMg2kQfQ6DaY3aAi9SUNpGA2nt2gEjaRRNJrG0FhKoXE0nt6mCfQOTaRJNJmmUCpNpWn0Lk2nGTST3qNZ9D7Npjk0l+ZRGn1A82kBpdOHtJA+ogxaRItpCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ0+ph30Ce2kXbSbPqU99Bntpc9pH31B++lLyqSv6AB9TQfpGzpE3/ru9B0doaN0jL6n4/QDnaCTdIpO0xn6kc7ST3SOPEGIoQhlqMIgjAmzhbFh9jBHeFWYM7w6zBVeE0bCa8O48Lowd3h9mCfMG+YL84fxYYGwYKhDE9qQwjAsFBYOo+ENYZHwxrBoiGGxsHjowhJhQnhzWDK8JSwV3hqWDm8Ly4S3h2XDcuGj91cI7wgrhneGlcK7wsrh3WGVsGpYLawe3hPWCO8Na4b3hbXC+8NS4QNhnfDBsG74UFgvfDisHz4SNggfDRuGj4WNwsZhk7Bp2Cx8PGwePhG2CFuGrcInw9bhU2Gb8OkwMXwmbBs++/P8Awv+eD4p7BH2DF8OXw69v0/Ojc6LpkU/iM6PLoimRz+MLox+FM2ILoouji6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Iel89Gzh0wkmnXOBiXDYX67K7HO4ql9Nd7XK5a1zEXevi3HUut7ve5XF5XT6X38W7Aq6g084468iFrpAr7KLuBlfE3eiKuptcMVfcOVfCJbimrplr5pq7J1wL19K1ck+6J91T7in3tHvaPePaumddO/c319495zq4593z7gXXyXV2XdyLrqsbl+vCezLJ9XQ9XS/Xy/VxfVw/18/1d/3dADfAJbtkN8gNcoPdYDfEDXFD3VA33A13I9wIN8qNcmPcGJfiUtx4N95NcBPcRDfRTXaTXapLddPcNDfdTXcVZ1w4ymw32811c12aS3Pz3flzxnS30C10GS7DLXaL3VK31C13y91Kt9KtdqvdWrfWrXfr3Ua30W12m91Wt9Vtd9vdDrfD7fTXXFjU7XF73V63z+1z+92XLtN95Q64r91B94075L51h9137og76o65791x94M74U66U+60O+N+dGfdT+6c8y4lMi4yPvJ2ZELkncjEyKTI5MiUSGpkamRa5N3I9MiMyMzIe5FZkfcjsyNzInMj8yJpkQ8i8yMLIumRDyMLIx9FMiKLIosjSyJLI8si3hfYHPpCvrCP+ht8EX+jL+pv8sV8ce98CZ/gb/Yl/S2+lL/Vl/a3+TL+dl/Wl/Pl/WO+kW/sm/imvpl/3Df3T/gWvqVv5Z/0rf1Tvo1/2if6Z3xb/6xv5//m2/vnfAf/vO/oX/CdfGffxb/ou/qXfDff3Sf5Hr6nf9n38r19H9/X9/Ov+P7+VT/Av+aT/UA/yL/uB/s3/BD/ph/qh/nhMW/5EZcukWGsT/Hj/Hj/tp/g3/ET/SQ/2U/xqX6qn+bf9dP9DD/Tv+dn+ff9bD/Hz/XzfJr/wM/3C3y6/9Av9B/5DL/o0k1lv9yv8Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9Nr/df+x3+E/8Tr/L7/af+j3+M7/Xf+73+S/8fv+lz/Rf+QP+a3/Qf+MP+W/9Yf+dP+KP+mP+e3/c/+BP+JP+lD/tz/gf/Vn/kz/H/2eNMcYYY+xPGXd5KH49c+F2fo/fyRG/2LknAFy9JX/mL+fPn1GuzXNh3FvEt44AwDPdOz58aatSJSkp6eK+GRKCwnMALv1N0HkxcDleBK3gKUiEllDyd+vvLTqfoX+wfvQ2gBy/yImFy/Hl9T8HwKTfWf/xJ4fPLxOeivsf1p8DULTw5ZzscDleBK1+vr/SEkr9Qf15m/+y/tjfrp/9ixSAFr/IyQmX48v1J8AT8Cwk/mpPxhhjjDHGGGPsgt6ifPtL15+X/sXn712fx6vLOdngcvyPrs8ZY4wxxhhjjDF25T3XucvTjycmtmz/zw8q/a+y/vSgIfxfrcyD3x14D3DpJwoA/sUFAc4P5L/zUWz6txwr+eJb5++nlp72AfxntPKvGFzhDybGGGOMMcbYX+7ySf+vf66uVEGMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlgW9O/4dWJX+jEyxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9r/CwAA///UxgMC")
mount(0x0, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)

4.993698314s ago: executing program 1 (id=1560):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
timer_create(0x2, 0x0, &(0x7f0000003b00)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000003bc0))

4.742276481s ago: executing program 1 (id=1565):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x149c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

4.611993418s ago: executing program 32 (id=1565):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000020800034000000010301400000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001800038014000080040001800c00054000000000000004000800044000000000dc130380d8130080740101803500010086bc8cbb7b2d9a585d336bf2e5a268a14e306b68739b28b75c5aef0e989f75698fe458704acb8d58c42aff72fdb73c8979000000c00001005d744e3aefb58d59bdd6c6237acb05091f74fff31a41cd99f3d3362af78be549dd74c26bf21c37bc435a41fcf177b7a186b73584e1d2362bdbe2d0265a908d2ca8a30a3423468ce7f5873c98e4894043fd10b9decc46a0e60c823d447965d1fd86c976fd1c87db0e02572e08f24a16dda732022f6e17aaa86be7f91b839e2f4b2b5d70241b9eeb88cb465d3d2d6b0bf1c848629f91e1719f8789baae2301b65d18680bed6f021c5e6f9d9783b8b2c97cc06f937c21bc33b17acb11ae31000100c92c8934085d611409679c5952059d4a0bc4035bb5a2fb8bc41fe58289234b0b1460fafdc9c8fd15bd7fe1d4e50000000c00028008000340000000031800028008000340000000040900020073797a3100000000200002800900020073797a3200000000080003400000000408000180fffffffb0c00054000000000000000660c000440000000000000000d8b0006400af55d2469cc7fd995baf0fc6ab06d8c66603b8e29ed757a23c15fb84f5bf0083dd1c80c9225f93019691650a554996f52f7668bf69486f1a3afdd84954e812084d0268d1a41667bb6f9657b7e3e0f43bfaa1946c78eae977df23b5b9680a4b137fd0b4ee4f21b73f2a6393fb8eded4803c92dd25ee8b478f5aeb751e2a8a587199d835bbaca01000c0004"], 0x149c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

4.26692629s ago: executing program 0 (id=1571):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd})

4.266625245s ago: executing program 0 (id=1572):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902120001000200000904"], 0x0)
syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003160000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.197764456s ago: executing program 0 (id=1583):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00')
pread64(r0, &(0x7f0000033240)=""/102385, 0x18ff1, 0x41e)

2.139395022s ago: executing program 0 (id=1584):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="6fad4d1230495d770a913668b1282b85b123462d2f889074255083372d94096e94b7267af2db14fa3d1901e107b4cfbaba23545f317923df44a0adf4b575", 0x3e}], 0x1)

833.585806ms ago: executing program 2 (id=1586):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x2c0300, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b800800030020"], 0x50}, 0x1, 0x0, 0x0, 0x2400c0a1}, 0x0)

466.531398ms ago: executing program 0 (id=1587):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="9d926de75b5cf4e973f8e1ad4d0b", 0x0, 0x5047, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

406.260982ms ago: executing program 2 (id=1588):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0x1b, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, 0xffffffffffffffff, 0xb}}, 0x48)

338.245202ms ago: executing program 0 (id=1589):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)=ANY=[], 0x21, 0x61f7, &(0x7f000000d780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)=0x8)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0)
sendfile(r0, r2, 0x0, 0x20fffe82)

336.888693ms ago: executing program 2 (id=1590):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200c8804, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4)

245.622231ms ago: executing program 2 (id=1591):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8)
sendmmsg$sock(r0, &(0x7f00000008c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e21, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}], 0x18}}], 0x1, 0x0)

179.690772ms ago: executing program 2 (id=1592):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x9, &(0x7f0000006680))
r0 = mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_getsetattr(r0, 0x0, 0x0)

0s ago: executing program 2 (id=1593):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x300, 0x0, 0x3, 0x9, 0x0, 0x6}, 0x20)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x2, 0x1, 0x6, 0x6, 0xbf}, 0x20)

kernel console output (not intermixed with test programs):

sum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  100.703881][ T6787]   allowing incompatible features above 0.0: (unknown version)
[  100.703888][ T6787]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  100.719429][ T6787] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  100.723176][ T6787] bcachefs (loop2): initializing new filesystem
[  100.746172][ T6787] bcachefs (loop2): going read-write
[  100.758962][ T6787] bcachefs (loop2): marking superblocks
[  100.853520][ T6787] bcachefs (loop2): initializing freespace
[  100.879064][ T6787] bcachefs (loop2): done initializing freespace
[  100.911600][ T6787] bcachefs (loop2): reading snapshots table
[  100.915895][ T6787] bcachefs (loop2): reading snapshots done
[  100.987958][ T6787] bcachefs (loop2): done starting filesystem
[  101.207632][   T33] audit: type=1400 audit(1756522643.281:11): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200DFFFFFFFFFFFFFF7FA6 pid=6821 comm="syz.1.435"
[  101.384348][ T6787] bcachefs (loop2): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[  101.384348][ T6787]   set version_upgrade=incompat to enable
[  101.469264][ T6787] syz.2.427 (6787) used greatest stack depth: 16552 bytes left
[  101.633110][ T6092] bcachefs (loop2): shutting down
[  101.635210][ T6092] bcachefs (loop2): going read-only
[  101.637264][ T6092] bcachefs (loop2): finished waiting for writes to stop
[  101.655720][ T6092] bcachefs (loop2): flushing journal and stopping allocators, journal seq 14
[  101.700101][ T6092] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15
[  101.708707][ T6830] loop0: detected capacity change from 0 to 2048
[  101.710031][ T6092] bcachefs (loop2): clean shutdown complete, journal seq 16
[  101.731653][ T6092] bcachefs (loop2): marking filesystem clean
[  101.740795][ T6830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.798745][ T6092] bcachefs (loop2): shutdown complete
[  101.842980][ T6090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.899462][ T6837] loop0: detected capacity change from 0 to 256
[  101.944022][ T6837] FAT-fs (loop0): Directory bread(block 64) failed
[  101.948052][ T6837] FAT-fs (loop0): Directory bread(block 65) failed
[  101.950968][ T6837] FAT-fs (loop0): Directory bread(block 66) failed
[  101.955750][ T6837] FAT-fs (loop0): Directory bread(block 67) failed
[  101.958392][ T6837] FAT-fs (loop0): Directory bread(block 68) failed
[  101.960914][ T6837] FAT-fs (loop0): Directory bread(block 69) failed
[  101.964175][ T6837] FAT-fs (loop0): Directory bread(block 70) failed
[  101.967046][ T6837] FAT-fs (loop0): Directory bread(block 71) failed
[  101.969909][ T6837] FAT-fs (loop0): Directory bread(block 72) failed
[  101.974696][ T6837] FAT-fs (loop0): Directory bread(block 73) failed
[  102.178185][ T6849] loop0: detected capacity change from 0 to 512
[  102.194300][ T6849] EXT4-fs: Ignoring removed bh option
[  102.215842][ T6849] EXT4-fs error (device loop0): __ext4_iget:5464: inode #15: block 1803188595: comm syz.0.447: invalid block
[  102.229883][ T6849] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.447: couldn't read orphan inode 15 (err -117)
[  102.239502][ T6849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.291888][ T6090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.063870][ T6874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.458'.
[  103.097357][ T6876] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  103.100329][ T6876] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  103.112689][ T6876] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  103.116686][ T6876] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  103.122621][ T6876] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  103.132639][ T6876] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  103.135620][ T6876] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  103.138693][ T6876] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  103.141747][ T6876] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  103.171410][ T6876] netlink: 'syz.1.459': attribute type 3 has an invalid length.
[  103.390540][ T6885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.394208][ T6885] IPv6: NLM_F_CREATE should be set when creating new route
[  103.440286][ T6885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.451498][ T6885] Zero length message leads to an empty skb
[  103.734397][ T6890] block nbd1: Attempted send on invalid socket
[  103.737396][ T6890] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  103.742458][ T6890] EXT4-fs (nbd1): unable to read superblock
[  104.011883][ T6897] loop0: detected capacity change from 0 to 256
[  104.051094][ T6897] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  104.060165][ T6897] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  104.077656][ T6897] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  104.382531][ T6163] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  104.532462][ T6163] usb 3-1: Using ep0 maxpacket: 32
[  104.549757][ T6163] usb 3-1: unable to get BOS descriptor or descriptor too short
[  104.556495][ T6163] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[  104.571033][ T6163] usb 3-1: config 0 has no interface number 0
[  104.579401][ T6163] usb 3-1: config 0 interface 223 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  104.598148][ T6163] usb 3-1: config 0 interface 223 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  104.603828][ T6909] loop1: detected capacity change from 0 to 32768
[  104.615587][ T6163] usb 3-1: config 0 interface 223 has no altsetting 0
[  104.644949][ T6163] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=86.21
[  104.648499][ T6163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.654763][ T6163] usb 3-1: Product: syz
[  104.657292][ T6163] usb 3-1: Manufacturer: syz
[  104.659601][ T6163] usb 3-1: SerialNumber: syz
[  104.669251][ T6163] usb 3-1: config 0 descriptor??
[  104.684076][ T6163] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  104.706440][ T6909] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  104.706464][ T6909]   allowing incompatible features above 0.0: (unknown version)
[  104.706474][ T6909]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  104.723646][ T6909] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  104.726995][ T6909] bcachefs (loop1): initializing new filesystem
[  104.738075][ T6909] bcachefs (loop1): going read-write
[  104.748775][ T6909] bcachefs (loop1): marking superblocks
[  104.758491][ T6909] bcachefs (loop1): initializing freespace
[  104.763982][ T6909] bcachefs (loop1): done initializing freespace
[  104.768928][ T6909] bcachefs (loop1): reading snapshots table
[  104.771245][ T6909] bcachefs (loop1): reading snapshots done
[  104.795804][ T6909] bcachefs (loop1):  loop1: Superblock write was silently dropped! (seq 0 expected 42)
[  104.800300][ T6909] bcachefs (loop1): done starting filesystem
[  104.822599][ T5238] Bluetooth: hci2: command 0x0405 tx timeout
[  104.876642][ T6038] udevd[6038]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.223/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.928554][ T6163] usb 3-1: USB disconnect, device number 5
[  104.974259][ T6095] bcachefs (loop1): shutting down
[  104.979841][ T6095] bcachefs (loop1): going read-only
[  104.989921][ T6095] bcachefs (loop1): finished waiting for writes to stop
[  105.021398][ T6095] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  105.058686][ T6095] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  105.067055][ T6095] bcachefs (loop1): clean shutdown complete, journal seq 4
[  105.070591][ T6095] bcachefs (loop1): marking filesystem clean
[  105.094817][ T6095] bcachefs (loop1): shutdown complete
[  105.481605][ T6951] loop0: detected capacity change from 0 to 128
[  105.500987][ T6951] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  105.516607][ T6951] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  105.568507][ T6090] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  106.114807][ T6972] loop2: detected capacity change from 0 to 32768
[  106.151105][ T6972] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  106.182051][   T33] audit: type=1800 audit(1756522648.251:12): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.498" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  106.199574][ T6080] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  106.203350][   T33] audit: type=1800 audit(1756522648.271:13): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.498" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  106.255639][ T6092] ocfs2: Unmounting device (7,2) on (node local)
[  106.363007][ T6080] usb 1-1: Using ep0 maxpacket: 32
[  106.372090][ T6080] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.388482][ T6080] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.398839][ T6080] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  106.411615][ T6080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.423303][ T6080] usb 1-1: config 0 descriptor??
[  106.429822][ T6080] hub 1-1:0.0: USB hub found
[  106.550188][ T6983] loop2: detected capacity change from 0 to 4096
[  106.654943][ T6080] hub 1-1:0.0: 10 ports detected
[  106.659750][ T6080] hub 1-1:0.0: insufficient power available to use all downstream ports
[  106.864311][ T6080] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  106.872602][ T6080] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  106.895947][ T6080] usbhid 1-1:0.0: can't add hid device: -71
[  106.898992][ T6080] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  106.929861][ T6080] usb 1-1: USB disconnect, device number 5
[  107.127021][ T6997] loop2: detected capacity change from 0 to 32768
[  107.147533][ T6997] (syz.2.506,6997,0):ocfs2_verify_volume:2303 ERROR: found superblock with bad version: found 0.0, should be 0.90
[  107.160459][ T6997] (syz.2.506,6997,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  107.170611][ T6997] (syz.2.506,6997,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  107.176631][ T6997] (syz.2.506,6997,0):ocfs2_fill_super:1177 ERROR: status = -22
[  107.488991][ T7021] loop0: detected capacity change from 0 to 2048
[  107.514638][ T6929] udevd[6929]: incorrect nilfs2 checksum on /dev/loop0
[  107.516193][ T7021] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  107.522510][ T7021] NILFS (loop0): mounting unchecked fs
[  107.528960][ T7023] loop2: detected capacity change from 0 to 256
[  107.532779][ T7023] exfat: Deprecated parameter 'namecase'
[  107.535337][ T7023] exfat: Deprecated parameter 'utf8'
[  107.556290][ T6039] udevd[6039]: incorrect nilfs2 checksum on /dev/loop0
[  107.562158][ T7023] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  107.574679][ T7021] NILFS (loop0): recovery complete
[  107.585449][ T7024] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.234113][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'.
[  108.475055][ T7047] loop0: detected capacity change from 0 to 256
[  108.481287][ T7047] FAT-fs (loop0): Directory bread(block 1285) failed
[  108.491746][ T7047] FAT-fs (loop0): Directory bread(block 1285) failed
[  108.792380][ T7063] loop1: detected capacity change from 0 to 8
[  108.817857][ T7063] unable to read inode lookup table
[  109.509089][ T7069] loop0: detected capacity change from 0 to 40427
[  109.516229][ T7069] F2FS-fs (loop0): build fault injection rate: 7
[  109.518535][ T7069] F2FS-fs (loop0): build fault injection type: 0xeffa
[  109.523187][ T7069] F2FS-fs (loop0): invalid crc value
[  109.526795][ T7069] F2FS-fs (loop0): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4429/0x6ff0
[  109.529854][ T7069] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12)
[  109.907133][ T7083] loop2: detected capacity change from 0 to 512
[  109.963653][ T7083] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  109.995959][ T7079] loop0: detected capacity change from 0 to 32768
[  109.999736][ T7079] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.533 (7079)
[  110.041578][ T7079] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.050345][ T7079] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  110.239289][ T7079] BTRFS info (device loop0): enabling ssd optimizations
[  110.241411][ T7079] BTRFS info (device loop0): enabling free space tree
[  110.330821][ T6090] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.671235][   T33] audit: type=1326 audit(1756522652.741:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.541" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f026ab8ebe9 code=0x0
[  110.835025][ T7111] loop2: detected capacity change from 0 to 32768
[  110.896509][ T7118] loop1: detected capacity change from 0 to 64
[  110.948397][ T7111] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  110.948397][ T7111] 
[  110.966331][ T7111] ERROR: (device loop2): remounting filesystem as read-only
[  110.971916][  T118] blkno = 5002c, nblocks = 1
[  110.976643][  T118] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  110.976643][  T118] 
[  110.980620][  T118] blkno = 5002c, nblocks = 1
[  110.992668][  T118] ERROR: (device loop2): dbFree: block to be freed is outside the map
[  110.992668][  T118] 
[  110.995940][  T118] blkno = 5002d, nblocks = 1
[  110.997451][  T118] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  110.997451][  T118] 
[  111.600756][ T7143] loop0: detected capacity change from 0 to 256
[  111.626228][ T7143] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  111.934950][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'.
[  112.064007][ T7141] loop1: detected capacity change from 0 to 40427
[  112.077733][ T7141] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288)
[  112.085906][ T7141] F2FS-fs (loop1): build fault injection rate: 771
[  112.091238][ T7141] F2FS-fs (loop1): invalid crc value
[  112.205774][ T7141] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.219946][ T7141] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  112.542131][ T7162] loop0: detected capacity change from 0 to 32768
[  112.630937][ T7162] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  112.630961][ T7162]   allowing incompatible features above 0.0: (unknown version)
[  112.630992][ T7162]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  112.647143][ T7162] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  112.652708][ T7162] bcachefs (loop0): initializing new filesystem
[  112.670456][ T7162] bcachefs (loop0): going read-write
[  112.680401][ T7162] bcachefs (loop0): marking superblocks
[  112.687853][ T7174] loop1: detected capacity change from 0 to 2048
[  112.696838][ T7162] bcachefs (loop0): initializing freespace
[  112.707444][ T7162] bcachefs (loop0): done initializing freespace
[  112.715411][ T7162] bcachefs (loop0): reading snapshots table
[  112.717960][ T7162] bcachefs (loop0): reading snapshots done
[  112.739336][ T7174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.748463][ T7162] bcachefs (loop0): done starting filesystem
[  112.767182][ T7174] EXT4-fs (loop1): shut down requested (1)
[  112.777073][ T7174] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks
[  112.787800][ T7174] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  112.824167][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.869032][ T6090] bcachefs (loop0): shutting down
[  112.871008][ T6090] bcachefs (loop0): going read-only
[  112.876535][ T6090] bcachefs (loop0): finished waiting for writes to stop
[  112.893699][ T6090] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  112.928029][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'.
[  112.930815][ T6090] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  112.931730][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.565'.
[  112.936298][ T6090] bcachefs (loop0): clean shutdown complete, journal seq 4
[  112.939762][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'.
[  112.943203][ T6090] bcachefs (loop0): marking filesystem clean
[  112.949605][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.565'.
[  112.954431][ T7182] validate_nla: 45 callbacks suppressed
[  112.954456][ T7182] netlink: 'syz.1.565': attribute type 6 has an invalid length.
[  112.967287][ T6090] bcachefs (loop0): shutdown complete
[  113.646149][ T7214] xt_socket: unknown flags 0xd0
[  113.663809][ T6163] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  113.835925][ T6163] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  113.838329][ T6163] usb 3-1: config 0 has no interface number 0
[  113.840096][ T6163] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.852407][ T6163] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.855330][ T6163] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  113.859351][ T6163] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  113.861951][ T6163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.875798][ T6163] usb 3-1: config 0 descriptor??
[  114.101987][ T7220] loop1: detected capacity change from 0 to 32768
[  114.215654][ T7220] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  114.216519][ T7220]   allowing incompatible features above 0.0: (unknown version)
[  114.216533][ T7220]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  114.234212][ T7220] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  114.237344][ T7220] bcachefs (loop1): initializing new filesystem
[  114.249112][ T7220] bcachefs (loop1): going read-write
[  114.274772][ T7220] bcachefs (loop1): marking superblocks
[  114.289728][ T7220] bcachefs (loop1): initializing freespace
[  114.295006][ T7220] bcachefs (loop1): done initializing freespace
[  114.300905][ T7220] bcachefs (loop1): reading snapshots table
[  114.305047][ T7220] bcachefs (loop1): reading snapshots done
[  114.314720][ T7220] bcachefs (loop1): done starting filesystem
[  114.478359][ T7220] bcachefs (loop1): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[  114.478359][ T7220]   set version_upgrade=incompat to enable
[  114.788443][ T7204] binder: 7203:7204 ioctl 4018620d 0 returned -22
[  114.807863][ T7204] binder: 7203:7204 ioctl c0306201 0 returned -14
[  114.814357][ T6163] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0003/input/input6
[  114.866481][ T6095] bcachefs (loop1): shutting down
[  114.874221][ T6095] bcachefs (loop1): going read-only
[  114.879925][ T6095] bcachefs (loop1): finished waiting for writes to stop
[  114.896136][ T6095] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8
[  114.916647][ T6163] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1
[  114.930039][ T6163] usb 3-1: USB disconnect, device number 6
[  114.948513][ T6095] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  114.954317][ T6095] bcachefs (loop1): clean shutdown complete, journal seq 11
[  114.957835][ T6095] bcachefs (loop1): marking filesystem clean
[  114.999817][ T6095] bcachefs (loop1): shutdown complete
[  115.293282][ T7241] loop0: detected capacity change from 0 to 8
[  115.299383][ T7241] SQUASHFS error: lzo decompression failed, data probably corrupt
[  115.309756][ T7241] SQUASHFS error: Failed to read block 0x91: -5
[  115.313108][ T7241] SQUASHFS error: Unable to read metadata cache entry [8f]
[  115.316267][ T7241] SQUASHFS error: Unable to read inode 0x11f
[  115.501111][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  116.370131][ T7263] vlan2: entered promiscuous mode
[  116.372183][ T7263] syz_tun: entered promiscuous mode
[  116.903410][ T7279] loop1: detected capacity change from 0 to 128
[  116.903492][ T6163] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  116.928309][ T7279] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  116.937105][ T7279] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  116.984763][ T6095] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.041263][ T7283] capability: warning: `syz.1.604' uses deprecated v2 capabilities in a way that may be insecure
[  117.050236][ T7283] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  117.054118][ T7283] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  117.058632][ T7283] overlayfs: failed to get uuid (185/file1, err=-13); falling back to uuid=null.
[  117.086707][ T6163] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  117.091359][ T6163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  117.101993][ T6163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  117.110675][ T6163] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  117.129684][ T6163] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  117.137783][ T6163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.154216][ T6163] usb 3-1: config 0 descriptor??
[  117.161567][ T7271] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  117.636571][ T6163] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[  118.103855][ T6163] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  118.126736][ T6163] usb 3-1: USB disconnect, device number 7
[  118.737937][ T7304] netlink: 'syz.2.611': attribute type 30 has an invalid length.
[  119.009128][ T7310] loop2: detected capacity change from 0 to 8
[  119.023633][ T7310] SQUASHFS error: lzo decompression failed, data probably corrupt
[  119.042855][ T7310] SQUASHFS error: Failed to read block 0x91: -5
[  119.046701][ T7310] SQUASHFS error: Unable to read metadata cache entry [8f]
[  119.049535][ T7310] SQUASHFS error: Unable to read inode 0x11f
[  119.536527][ T7315] netlink: 5 bytes leftover after parsing attributes in process `syz.2.616'.
[  119.540346][ T7315] 0{X: renamed from macvtap0 (while UP)
[  119.557045][ T7315] 0{X: entered allmulticast mode
[  119.559257][ T7315] veth0_macvtap: entered allmulticast mode
[  119.563268][ T7315] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  121.299471][ T7335] loop0: detected capacity change from 0 to 256
[  121.321320][ T7337] loop1: detected capacity change from 0 to 128
[  121.517295][ T7346] loop0: detected capacity change from 0 to 4096
[  121.727858][ T7357] syzkaller1: entered promiscuous mode
[  121.732427][ T7357] syzkaller1: entered allmulticast mode
[  121.883908][ T6163] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  121.920045][ T7364] loop1: detected capacity change from 0 to 512
[  121.924531][ T7364] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  121.937183][ T7364] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.638: Invalid block bitmap block 0 in block_group 0
[  121.943686][ T7364] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  121.947854][ T7364] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.638: attempt to clear invalid blocks 983261 len 1
[  121.957364][ T7364] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.638: Invalid inode table block 0 in block_group 0
[  121.966837][ T7364] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  121.973134][ T7364] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  121.976443][ T7364] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.638: Invalid inode table block 0 in block_group 0
[  121.981304][ T7364] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  121.985588][ T7364] EXT4-fs error (device loop1): ext4_truncate:4666: inode #11: comm syz.1.638: mark_inode_dirty error
[  121.989845][ T7364] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  121.993919][ T7364] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.638: Invalid inode table block 0 in block_group 0
[  121.998530][ T7364] EXT4-fs (loop1): 1 truncate cleaned up
[  122.001926][ T7364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.012916][ T7364] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  122.017052][ T7364] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  122.033392][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.037073][ T6163] usb 1-1: Using ep0 maxpacket: 32
[  122.045958][ T6163] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  122.058034][ T6163] usb 1-1: config 0 has no interface number 0
[  122.063175][ T6163] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  122.065845][ T6163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.068791][ T6163] usb 1-1: Product: syz
[  122.070430][ T6163] usb 1-1: Manufacturer: syz
[  122.072093][ T6163] usb 1-1: SerialNumber: syz
[  122.076540][ T6163] usb 1-1: config 0 descriptor??
[  122.143781][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.640'.
[  122.148488][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.640'.
[  122.421794][ T7382] loop1: detected capacity change from 0 to 512
[  122.445443][ T7382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.565974][ T6163] radio-si470x 1-1:0.35: si470x_get_report: usb_control_msg returned -71
[  122.569550][ T6163] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5
[  122.607065][ T6163] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  122.619697][ T6163] usb 1-1: USB disconnect, device number 6
[  122.984200][ T7393] binder: 7392:7393 ioctl c018620c 200000000000 returned -22
[  123.134261][ T7399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.652'.
[  123.176418][ T7401] veth0: entered promiscuous mode
[  123.184843][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'.
[  123.216848][ T7401] veth0 (unregistering): left promiscuous mode
[  123.400783][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.498531][ T7410] loop0: detected capacity change from 0 to 128
[  123.644134][ T7410] EXT4-fs (loop0): Test dummy encryption mode enabled
[  123.651308][ T7410] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  123.657679][ T7410] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  123.852116][ T7419] lo speed is unknown, defaulting to 1000
[  123.854661][ T7419] lo speed is unknown, defaulting to 1000
[  123.867697][ T7419] lo speed is unknown, defaulting to 1000
[  123.886776][ T7419] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  123.926073][ T7419] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  124.319582][ T7419] lo speed is unknown, defaulting to 1000
[  124.323833][ T7419] lo speed is unknown, defaulting to 1000
[  124.327446][ T7419] lo speed is unknown, defaulting to 1000
[  124.597277][ T6090] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.724277][ T7429] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  124.728236][ T7429] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  124.802757][ T7431] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  125.063812][ T7427] loop0: detected capacity change from 0 to 32768
[  125.081841][   T33] audit: type=1800 audit(1756522667.151:15): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.659" name="file1" dev="loop0" ino=4 res=0 errno=0
[  125.090395][ T7427] ERROR: (device loop0): xtSearch: xt_getpage: xtree page corrupt
[  125.090395][ T7427] 
[  125.117625][ T7427] ERROR: (device loop0): remounting filesystem as read-only
[  125.120533][ T7427] xtLookup: xtSearch returned -5
[  125.128763][ T7427] ERROR: (device loop0): xtTruncate: xt_getpage: xtree page corrupt
[  125.128763][ T7427] 
[  125.180770][ T7448] netlink: 48 bytes leftover after parsing attributes in process `syz.1.671'.
[  125.246613][ T7450] befs: Bad value for 'gid'
[  125.248087][ T7450] befs: Bad value for 'gid'
[  125.342475][ T7456] loop0: detected capacity change from 0 to 1024
[  125.466481][ T7459] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  125.961779][ T7464] loop0: detected capacity change from 0 to 32768
[  125.984286][ T7464] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.677 (7464)
[  125.993782][ T7464] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  125.998105][ T7464] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  126.045243][ T7464] BTRFS info (device loop0): rebuilding free space tree
[  126.074271][ T7464] BTRFS info (device loop0): enabling ssd optimizations
[  126.077102][ T7464] BTRFS info (device loop0): turning on sync discard
[  126.079757][ T7464] BTRFS info (device loop0): enabling free space tree
[  126.081774][ T7464] BTRFS info (device loop0): force clearing of disk cache
[  126.084268][ T7464] BTRFS info (device loop0): enabling auto defrag
[  126.086286][ T7464] BTRFS info (device loop0): max_inline set to 0
[  126.120591][ T6090] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  126.351330][   T33] audit: type=1326 audit(1756522668.421:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.1.683" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6fd0d8ebe9 code=0x0
[  126.502663][   T52] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  126.654662][   T52] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  126.658344][   T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.664166][   T52] usb 1-1: config 0 descriptor??
[  127.218698][ T7501] loop1: detected capacity change from 0 to 256
[  127.245016][ T7501] FAT-fs (loop1): Directory bread(block 64) failed
[  127.248559][ T7501] FAT-fs (loop1): Directory bread(block 65) failed
[  127.251337][ T7501] FAT-fs (loop1): Directory bread(block 66) failed
[  127.257554][ T7501] FAT-fs (loop1): Directory bread(block 67) failed
[  127.260349][ T7501] FAT-fs (loop1): Directory bread(block 68) failed
[  127.265568][ T7501] FAT-fs (loop1): Directory bread(block 69) failed
[  127.268429][ T7501] FAT-fs (loop1): Directory bread(block 70) failed
[  127.271146][ T7501] FAT-fs (loop1): Directory bread(block 71) failed
[  127.276955][ T7501] FAT-fs (loop1): Directory bread(block 72) failed
[  127.279612][ T7501] FAT-fs (loop1): Directory bread(block 73) failed
[  127.285392][   T52] usb 1-1: Cannot set autoneg
[  127.291019][   T52] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  127.318888][   T52] usb 1-1: USB disconnect, device number 7
[  127.684471][ T7504] loop1: detected capacity change from 0 to 512
[  127.687806][ T7504] EXT4-fs: Ignoring removed mblk_io_submit option
[  127.690403][ T7504] EXT4-fs: Ignoring removed mblk_io_submit option
[  127.699188][ T7504] EXT4-fs (loop1): Test dummy encryption mode enabled
[  127.714233][ T7504] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  127.737724][ T7504] EXT4-fs (loop1): 1 truncate cleaned up
[  127.746353][ T7504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.866899][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.932404][ T7512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.690'.
[  127.939828][ T7512] netlink: 51 bytes leftover after parsing attributes in process `syz.2.690'.
[  127.964760][ T7512] netlink: 51 bytes leftover after parsing attributes in process `syz.2.690'.
[  127.966115][ T7516] loop1: detected capacity change from 0 to 128
[  129.462851][ T6163] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  129.622045][ T6163] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  129.629774][ T6163] usb 2-1: config 0 has no interface number 0
[  129.641453][ T6163] usb 2-1: config 0 interface 41 has no altsetting 0
[  129.656104][ T6163] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  129.659729][ T6163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.675553][ T6163] usb 2-1: Product: syz
[  129.677511][ T6163] usb 2-1: Manufacturer: syz
[  129.679326][ T6163] usb 2-1: SerialNumber: syz
[  129.694664][ T6163] usb 2-1: config 0 descriptor??
[  129.699467][ T7524] loop0: detected capacity change from 0 to 32768
[  129.732245][ T7524] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.756806][ T7524] XFS (loop0): Ending clean mount
[  129.765358][ T7524] XFS (loop0): Quotacheck needed: Please wait.
[  129.800790][ T7524] XFS (loop0): Quotacheck: Done.
[  129.815987][ T7539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.698'.
[  129.824797][ T7538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.698'.
[  129.975905][ T6090] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.220160][ T7547] loop2: detected capacity change from 0 to 512
[  130.223506][ T7547] EXT4-fs: Ignoring removed oldalloc option
[  130.234943][ T7547] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  130.263751][ T7547] EXT4-fs (loop2): 1 truncate cleaned up
[  130.266347][ T7547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.359133][ T6092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.673610][ T7563] loop0: detected capacity change from 0 to 32768
[  130.677851][ T6163] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[  130.685256][ T7563] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.708 (7563)
[  130.695735][ T7563] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.699812][ T7563] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  130.704254][ T6163] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  130.710734][ T6163] usb 2-1: USB disconnect, device number 3
[  130.823687][ T7563] BTRFS info (device loop0): enabling ssd optimizations
[  130.826521][ T7563] BTRFS info (device loop0): enabling free space tree
[  130.892601][ T6053] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  130.925047][ T6090] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.214037][ T7617] loop1: detected capacity change from 0 to 4096
[  132.261820][ T7617] ntfs3(loop1): ino=b, mi_enum_attr
[  132.264156][ T7617] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  132.270070][ T7617] ntfs3(loop1): Failed to load $Extend (-22).
[  132.272490][ T7617] ntfs3(loop1): Failed to initialize $Extend.
[  132.587791][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.593287][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.648471][ T7633] netlink: 452 bytes leftover after parsing attributes in process `syz.0.733'.
[  132.857951][ T5238] Bluetooth: hci2: unexpected event for opcode 0x2024
[  133.372608][ T6163] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  133.492594][ T7656] loop0: detected capacity change from 0 to 4096
[  133.497297][ T7656] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  133.544593][ T6163] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.549203][ T6163] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.559938][ T6163] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  133.565567][ T6163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.568948][ T6163] usb 2-1: Product: syz
[  133.571234][ T6163] usb 2-1: Manufacturer: syz
[  133.573648][ T6163] usb 2-1: SerialNumber: syz
[  133.697347][ T7658] loop0: detected capacity change from 0 to 8192
[  133.748864][ T6929]  loop0: p4 < >
[  133.760034][ T7658]  loop0: p4 < >
[  133.796881][ T6163] usb 2-1: 0:2 : does not exist
[  133.813961][ T6163] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  133.862664][ T6163] usb 2-1: USB disconnect, device number 4
[  133.879322][ T6929] udevd[6929]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  133.909767][ T6929] udevd[6929]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  133.930011][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.533737][ T7703] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  135.814259][ T7713] program syz.1.770 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.887920][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.771'.
[  135.894121][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'.
[  135.897139][ T7717] netlink: 156 bytes leftover after parsing attributes in process `syz.2.771'.
[  135.904544][ T7715] loop1: detected capacity change from 0 to 2048
[  135.937303][ T7715] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  135.962813][ T7715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.142434][ T6080] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  136.150011][ T7725] netlink: 'syz.1.776': attribute type 10 has an invalid length.
[  136.171333][ T7727] loop2: detected capacity change from 0 to 2048
[  136.203679][ T7727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.245460][ T7727] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  136.255185][ T7727] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[  136.262175][ T7727] EXT4-fs (loop2): This should not happen!! Data will be lost
[  136.262175][ T7727] 
[  136.267502][ T7727] EXT4-fs (loop2): Total free blocks count 0
[  136.273768][ T7727] EXT4-fs (loop2): Free/Dirty block details
[  136.276190][ T7727] EXT4-fs (loop2): free_blocks=2415919504
[  136.284341][ T7727] EXT4-fs (loop2): dirty_blocks=32
[  136.286443][ T7727] EXT4-fs (loop2): Block reservation details
[  136.292668][ T7727] EXT4-fs (loop2): i_reserved_data_blocks=2
[  136.299510][ T6080] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  136.307485][ T6080] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.320860][ T6080] usb 1-1: Product: syz
[  136.324391][ T6080] usb 1-1: Manufacturer: syz
[  136.336288][ T6080] usb 1-1: SerialNumber: syz
[  136.370257][ T6080] usb 1-1: config 0 descriptor??
[  136.406437][ T1091] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  136.606263][ T6080] hso 1-1:0.0: Can't find BULK IN endpoint
[  136.609029][ T6080] usb-storage 1-1:0.0: USB Mass Storage device detected
[  136.653052][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'.
[  136.857234][ T6163] usb 1-1: USB disconnect, device number 8
[  138.542234][ T7772] loop0: detected capacity change from 0 to 512
[  138.554708][ T7772] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  138.569125][ T7772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  138.574751][ T7772] System zones: 1-12
[  138.577942][ T7772] EXT4-fs (loop0): 1 truncate cleaned up
[  138.589978][ T7772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.642814][ T6090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.726725][ T7795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.878310][ T7799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.802'.
[  140.588620][  T793] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  140.604455][ T7809] loop1: detected capacity change from 0 to 512
[  140.610356][ T7809] EXT4-fs (loop1): Test dummy encryption mode enabled
[  140.614349][ T7809] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  140.623175][ T7809] EXT4-fs (loop1): 1 truncate cleaned up
[  140.632066][ T7809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.708849][ T7809] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  140.744330][  T793] usb 3-1: Using ep0 maxpacket: 32
[  140.744905][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.755228][  T793] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  140.762034][  T793] usb 3-1: config 0 has no interface number 0
[  140.770830][  T793] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  140.775663][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.778230][  T793] usb 3-1: Product: syz
[  140.779549][  T793] usb 3-1: Manufacturer: syz
[  140.781038][  T793] usb 3-1: SerialNumber: syz
[  140.793342][  T793] usb 3-1: config 0 descriptor??
[  140.800263][  T793] smsc95xx v2.0.0
[  141.269106][ T7832] loop1: detected capacity change from 0 to 256
[  141.318432][ T7830] loop0: detected capacity change from 0 to 32768
[  141.387468][ T7830] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.448026][ T7830] XFS (loop0): Ending clean mount
[  141.467214][ T7830] XFS (loop0): Quotacheck needed: Please wait.
[  141.514813][ T7830] XFS (loop0): Quotacheck: Done.
[  141.920326][ T7847] evm: overlay not supported
[  141.971432][   T33] audit: type=1800 audit(1756522683.991:17): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.813" name="file1" dev="overlay" ino=9286 res=0 errno=0
[  142.131552][  T793] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  142.135572][  T793] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  142.143116][  T793] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  142.146778][  T793] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  142.155330][  T793] usb 3-1: USB disconnect, device number 8
[  142.236489][ T6090] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.541836][ T7853] [U] V3Fپ"S/4:XTZWTLW=
[  142.548242][ T7853] [U] J"E:"
[  142.549841][ T7853] [U] 
[  142.631223][ T7857] loop1: detected capacity change from 0 to 128
[  142.646659][ T7855] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  142.647788][ T7857] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  142.649448][ T7855] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  142.657513][ T7857] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  142.675101][ T7855] vhci_hcd vhci_hcd.0: Device attached
[  142.683971][ T7858] vhci_hcd: connection closed
[  142.687493][ T6053] vhci_hcd: stop threads
[  142.689706][ T7861] loop2: detected capacity change from 0 to 128
[  142.692122][ T6053] vhci_hcd: release socket
[  142.702113][ T6053] vhci_hcd: disconnect device
[  142.708656][ T7861] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  142.731304][ T7861] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  142.749568][ T7861] syz.2.822 (pid 7861) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  142.809818][ T7865] loop1: detected capacity change from 0 to 8192
[  142.819694][ T7861] fscrypt: Adiantum using implementation "adiantum(xchacha12-generic,aes-fixed-time,nhpoly1305-sse2)"
[  142.888011][ T6092] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.063601][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'.
[  143.067035][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'.
[  143.070183][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'.
[  143.078039][ T6096] Bluetooth: hci2: link tx timeout
[  143.080590][ T6096] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.086236][ T5238] Bluetooth: hci2: link tx timeout
[  143.089150][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.102639][ T5238] Bluetooth: hci2: link tx timeout
[  143.107230][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.108114][ T7877] overlayfs: empty lowerdir
[  143.110419][ T5238] Bluetooth: hci2: link tx timeout
[  143.114745][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.176794][ T7880] loop2: detected capacity change from 0 to 128
[  143.206170][ T7880] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  143.233602][ T7880] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  143.285100][ T6092] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.370750][ T7892] trusted_key: syz.1.835 sent an empty control message without MSG_MORE.
[  143.621401][ T7888] loop2: detected capacity change from 0 to 32768
[  143.722955][ T7896] loop0: detected capacity change from 0 to 40427
[  143.728867][ T7896] F2FS-fs (loop0): Image doesn't support compression
[  143.731676][ T7896] F2FS-fs (loop0): build fault injection type: 0x35f7
[  143.759363][ T7896] F2FS-fs (loop0): invalid crc value
[  143.847066][ T7896] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  143.853119][ T7896] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  143.876344][ T7896] syz.0.837: attempt to access beyond end of device
[  143.876344][ T7896] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  143.892626][ T7896] CPU: 1 UID: 0 PID: 7896 Comm: syz.0.837 Not tainted syzkaller #0 PREEMPT(full) 
[  143.892675][ T7896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.892684][ T7896] Call Trace:
[  143.892708][ T7896]  <TASK>
[  143.892715][ T7896]  dump_stack_lvl+0x189/0x250
[  143.892740][ T7896]  ? preempt_schedule_thunk+0x16/0x30
[  143.892764][ T7896]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.892782][ T7896]  ? __pfx_queue_work_on+0x10/0x10
[  143.892796][ T7896]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  143.892817][ T7896]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  143.892843][ T7896]  f2fs_handle_critical_error+0x37c/0x540
[  143.892870][ T7896]  f2fs_write_end_io+0x886/0xb60
[  143.892900][ T7896]  __submit_merged_bio+0x27a/0x6a0
[  143.892925][ T7896]  __submit_merged_write_cond+0x255/0x530
[  143.892949][ T7896]  f2fs_write_data_pages+0x261d/0x3000
[  143.892994][ T7896]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  143.893049][ T7896]  ? check_path+0x21/0x40
[  143.893065][ T7896]  ? check_noncircular+0xe0/0x160
[  143.893119][ T7896]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  143.893143][ T7896]  do_writepages+0x32e/0x550
[  143.893170][ T7896]  ? do_raw_spin_unlock+0x4d/0x240
[  143.893193][ T7896]  filemap_fdatawrite+0x199/0x240
[  143.893214][ T7896]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  143.893269][ T7896]  ? do_raw_spin_unlock+0x4d/0x240
[  143.893290][ T7896]  f2fs_sync_dirty_inodes+0x31f/0x830
[  143.893317][ T7896]  f2fs_write_checkpoint+0x95a/0x1df0
[  143.893351][ T7896]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  143.893398][ T7896]  ? down_write+0x162/0x1f0
[  143.893420][ T7896]  ? __pfx_down_write+0x10/0x10
[  143.893432][ T7896]  ? filemap_write_and_wait_range+0x27a/0x320
[  143.893463][ T7896]  f2fs_issue_checkpoint+0x3ac/0x570
[  143.893482][ T7896]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  143.893522][ T7896]  ? f2fs_sync_fs+0x200/0x3d0
[  143.893544][ T7896]  f2fs_symlink+0x6b4/0x880
[  143.893575][ T7896]  ? __pfx_f2fs_symlink+0x10/0x10
[  143.893598][ T7896]  ? inode_permission+0x149/0x470
[  143.893612][ T7896]  ? may_create+0x227/0x320
[  143.893657][ T7896]  ? bpf_lsm_inode_symlink+0x9/0x20
[  143.893679][ T7896]  vfs_symlink+0x143/0x2f0
[  143.893720][ T7896]  do_symlinkat+0x1b1/0x3f0
[  143.893742][ T7896]  ? __pfx_do_symlinkat+0x10/0x10
[  143.893759][ T7896]  ? strncpy_from_user+0x150/0x290
[  143.893779][ T7896]  ? getname_flags+0x1e5/0x540
[  143.893795][ T7896]  __x64_sys_symlink+0x7a/0x90
[  143.893816][ T7896]  do_syscall_64+0xfa/0x3b0
[  143.893836][ T7896]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.893857][ T7896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.893871][ T7896]  ? exc_page_fault+0x9f/0xf0
[  143.893892][ T7896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.893906][ T7896] RIP: 0033:0x7f026ab8ebe9
[  143.893921][ T7896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.893932][ T7896] RSP: 002b:00007f026ba59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  143.893948][ T7896] RAX: ffffffffffffffda RBX: 00007f026adc5fa0 RCX: 00007f026ab8ebe9
[  143.893959][ T7896] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000000
[  143.893967][ T7896] RBP: 00007f026ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  143.893976][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.893984][ T7896] R13: 00007f026adc6038 R14: 00007f026adc5fa0 R15: 00007fffe227df98
[  143.894007][ T7896]  </TASK>
[  144.038124][ T7896] F2FS-fs (loop0): Remounting filesystem read-only
[  144.507100][ T7927] loop1: detected capacity change from 0 to 4096
[  144.513833][ T7927] NILFS (loop1): mounting unchecked fs
[  144.516754][ T7927] NILFS (loop1): recovery required for readonly filesystem
[  144.519149][ T7927] NILFS (loop1): write access will be enabled during recovery
[  144.527864][ T7927] NILFS (loop1): invalid segment: Checksum error in super root
[  144.530248][ T7927] NILFS (loop1): error -22 while loading super root
[  144.532555][  T793] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  144.617511][ T7931] loop1: detected capacity change from 0 to 128
[  144.621420][ T7931] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  144.630472][ T7931] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  144.703876][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10
[  144.707429][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  144.710745][  T793] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  144.725103][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  144.735385][  T793] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  144.741730][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.746265][  T793] usb 3-1: Product: syz
[  144.747742][  T793] usb 3-1: Manufacturer: syz
[  144.749589][  T793] usb 3-1: SerialNumber: syz
[  144.762777][  T793] usb 3-1: config 0 descriptor??
[  144.768520][ T7917] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  144.779735][  T793] usb 3-1: ucan: probing device on interface #0
[  144.781736][  T793] usb 3-1: ucan: invalid endpoint configuration
[  144.788234][  T793] usb 3-1: ucan: probe failed; try to update the device firmware
[  144.892990][ T7945] loop1: detected capacity change from 0 to 2048
[  144.905726][ T7945] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  144.921874][ T6039] udevd[6039]: incorrect nilfs2 checksum on /dev/loop1
[  144.941884][ T6039] udevd[6039]: incorrect nilfs2 checksum on /dev/loop1
[  144.945083][ T7946] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.978516][ T6163] usb 3-1: USB disconnect, device number 9
[  145.072544][  T793] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  145.128803][ T7952] loop1: detected capacity change from 0 to 164
[  145.142905][ T5238] Bluetooth: hci2: command 0x0405 tx timeout
[  145.146698][ T7952] rock: directory entry would overflow storage
[  145.150989][ T7952] rock: sig=0x4543, size=28, remaining=18
[  145.242560][  T793] usb 1-1: Using ep0 maxpacket: 32
[  145.369381][  T793] usb 1-1: config 2 has an invalid interface number: 194 but max is 0
[  145.371893][  T793] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  145.388207][  T793] usb 1-1: config 2 has no interface number 0
[  145.390811][  T793] usb 1-1: config 2 interface 194 altsetting 0 bulk endpoint 0xA has invalid maxpacket 7
[  145.394211][  T793] usb 1-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  145.398851][  T793] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  145.401699][  T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.408355][ T7941] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  145.623106][  T793] usb 1-1: string descriptor 0 read error: -71
[  145.631382][  T793] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  145.665744][  T793] usb 1-1: USB disconnect, device number 9
[  145.808772][ T7969] loop2: detected capacity change from 0 to 512
[  145.828983][ T7969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.838326][ T7969] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  145.850076][ T7969] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.199819][ T7983] loop0: detected capacity change from 0 to 512
[  146.232021][ T7983] EXT4-fs error (device loop0): ext4_quota_enable:7128: inode #3: comm syz.0.873: iget: special inode unallocated
[  146.238216][ T7983] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.873: Bad quota inode: 3, type: 0
[  146.242761][ T7983] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  146.248015][ T7983] EXT4-fs (loop0): mount failed
[  146.582164][ T7999] loop1: detected capacity change from 0 to 1024
[  146.591698][ T7993] loop0: detected capacity change from 0 to 2048
[  146.625405][ T7993] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.656649][ T7999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  146.699077][ T7999] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.852051][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  147.291437][ T8010] loop1: detected capacity change from 0 to 16
[  147.355399][ T8010] erofs (device loop1): mounted with root inode @ nid 36.
[  147.785441][   T33] audit: type=1800 audit(1756522689.801:18): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.883" name="file1" dev="loop1" ino=86 res=0 errno=0
[  148.115831][   T33] audit: type=1326 audit(1756522690.191:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.890" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f026ab8ebe9 code=0x0
[  148.477034][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  148.486882][ T8050] netem: incorrect gi model size
[  148.489025][ T8050] netem: change failed
[  148.657073][   T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  148.660845][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.664807][   T10] usb 1-1: Product: syz
[  148.666665][   T10] usb 1-1: Manufacturer: syz
[  148.672425][   T10] usb 1-1: SerialNumber: syz
[  148.680795][   T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  148.749932][   T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  148.862594][    T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  149.035397][    T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  149.039048][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.047248][    T9] usb 2-1: config 0 descriptor??
[  149.162074][ T6114] usb 1-1: USB disconnect, device number 10
[  149.262078][    T9] usb 2-1: USB disconnect, device number 5
[  149.569988][ T8073] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  149.785724][   T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  149.789201][   T10] ath9k_htc: Failed to initialize the device
[  149.813592][ T6114] usb 1-1: ath9k_htc: USB layer deinitialized
[  150.064617][ T8103] loop1: detected capacity change from 0 to 512
[  150.079932][ T8103] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  150.108622][ T8103] EXT4-fs (loop1): 1 truncate cleaned up
[  150.135208][ T8103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.157963][ T8103] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.928: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  150.196448][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.277073][ T8115] program syz.1.933 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.096663][ T8148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.948'.
[  151.100032][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'.
[  151.142682][ T8150] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  151.172517][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  151.230613][ T8154] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[  151.234553][ T8154] PKCS7: Only support pkcs7_signedData type
[  151.332619][    T9] usb 2-1: Using ep0 maxpacket: 32
[  151.344675][    T9] usb 2-1: config 4 has an invalid interface number: 228 but max is 0
[  151.354117][    T9] usb 2-1: config 4 has no interface number 0
[  151.360115][    T9] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  151.365122][    T9] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0
[  151.369295][    T9] usb 2-1: config 4 interface 228 has no altsetting 0
[  151.377586][    T9] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  151.385101][    T9] usb 2-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  151.416417][    T9] usb 2-1: Product: syz
[  151.418140][    T9] usb 2-1: Manufacturer: syz
[  151.420046][    T9] usb 2-1: SerialNumber: syz
[  151.527345][ T8163] loop0: detected capacity change from 0 to 512
[  151.539204][ T8163] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.956: Unrecognised inode hash code 255
[  151.547470][ T8163] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.956: Corrupt directory, running e2fsck is recommended
[  151.560254][ T8163] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  151.564241][ T8163] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.956: corrupted in-inode xattr: invalid ea_ino
[  151.570442][ T8163] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.956: couldn't read orphan inode 15 (err -117)
[  151.577864][ T8163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.602641][ T8163] EXT4-fs (loop0): shut down requested (1)
[  151.673963][    T9] usb 2-1: USB disconnect, device number 6
[  151.708429][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  151.813176][ T6090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.221177][ T8175] loop0: detected capacity change from 0 to 256
[  152.229605][ T8175] exfat: Unknown parameter '0x0000000000000000'
[  152.448872][ T8175] loop0: detected capacity change from 0 to 4096
[  152.484153][ T8175] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  152.497114][ T8175] ntfs3(loop0): ino=1a, mi_enum_attr
[  152.499337][ T8175] ntfs3(loop0): ino=1a, mi_enum_attr
[  152.501463][ T8175] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  152.730469][ T8183] overlayfs: failed to clone upperpath
[  153.070247][ T8203] loop1: detected capacity change from 0 to 1024
[  153.074258][ T8203] EXT4-fs: Ignoring removed nobh option
[  153.088030][ T8203] EXT4-fs: Ignoring removed bh option
[  153.118528][ T8203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.132709][ T6114] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  153.161536][ T8203] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.973: Allocating blocks 497-513 which overlap fs metadata
[  153.174245][ T8202] EXT4-fs (loop1): pa ffff88802bf24e80: logic 80, phys. 209, len 19
[  153.177625][ T8202] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  153.229122][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.299226][ T6114] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.310070][ T6114] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72
[  153.314792][ T6114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.317942][ T6114] usb 1-1: Product: syz
[  153.332697][ T6114] usb 1-1: Manufacturer: syz
[  153.334719][ T6114] usb 1-1: SerialNumber: syz
[  153.339410][ T6114] usb 1-1: config 0 descriptor??
[  153.353353][ T6114] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  153.360710][ T6114] dvb-usb: bulk message failed: -22 (3/0)
[  153.390391][ T6114] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  153.402061][ T6114] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[  153.411361][ T6114] dvb_usb_umt_010 1-1:0.0: probe with driver dvb_usb_umt_010 failed with error -22
[  153.446179][ T8223] Bluetooth: MGMT ver 1.23
[  153.533330][ T8229] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.986'.
[  153.569268][ T6114] usb 1-1: USB disconnect, device number 11
[  153.884561][ T8237] loop1: detected capacity change from 0 to 32768
[  153.887322][ T8237] XFS: noikeep mount option is deprecated.
[  153.898841][ T8237] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  153.926299][ T8237] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  153.939162][ T8237] XFS (loop1): Starting recovery (logdev: internal)
[  153.951116][ T8237] XFS (loop1): Ending recovery (logdev: internal)
[  153.967249][ T8237] XFS (loop1): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  153.971198][ T8237] XFS (loop1): Unmount and run xfs_repair
[  153.973169][ T8237] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  153.975812][ T8237] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  153.978948][ T8237] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  153.981730][ T8237] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  153.985045][ T8237] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  153.990512][ T8237] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  153.994261][ T8237] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  153.997290][ T8237] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  154.000245][ T8237] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  154.003669][ T8237] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117
[  154.019738][ T8237] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8
[  154.025770][ T8237] XFS (loop1): Unmount and run xfs_repair
[  154.054386][ T6095] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  154.059225][ T6095] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  154.562691][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  154.630082][ T8266] syz_tun: entered allmulticast mode
[  154.638648][ T8265] syz_tun: left allmulticast mode
[  154.713392][    T9] usb 1-1: Using ep0 maxpacket: 8
[  154.719489][    T9] usb 1-1: config 162 has an invalid interface number: 97 but max is 0
[  154.736010][    T9] usb 1-1: config 162 has no interface number 0
[  154.738656][    T9] usb 1-1: config 162 interface 97 has no altsetting 0
[  154.756744][    T9] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  154.762102][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.770424][    T9] usb 1-1: Product: syz
[  154.772478][    T9] usb 1-1: Manufacturer: syz
[  154.774655][    T9] usb 1-1: SerialNumber: syz
[  154.990720][    T9] metro_usb 1-1:162.97: Metrologic USB to Serial converter detected
[  155.007775][    T9] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  155.031464][    T9] usb 1-1: USB disconnect, device number 12
[  155.051427][    T9] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  155.067033][    T9] metro_usb 1-1:162.97: device disconnected
[  155.201536][ T8295] program syz.1.1011 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.172469][ T6114] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  157.359336][ T6114] usb 1-1: Using ep0 maxpacket: 16
[  157.387120][ T8362] loop1: detected capacity change from 0 to 164
[  157.405298][ T6114] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  157.408884][ T6114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  157.430705][ T6114] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  157.436505][ T6114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.439730][ T6114] usb 1-1: Product: syz
[  157.441271][ T6114] usb 1-1: Manufacturer: syz
[  157.443591][ T6114] usb 1-1: SerialNumber: syz
[  157.447938][ T6114] usb 1-1: config 0 descriptor??
[  157.453444][ T6114] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  157.457206][ T6114] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  157.508716][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'.
[  157.511650][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'.
[  158.202502][ T6114] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  158.214614][ T6114] em28xx 1-1:0.0: Config register raw data: 0x67
[  158.217082][ T6114] em28xx 1-1:0.0: I2S Audio (1 sample rate(s))
[  158.219380][ T6114] em28xx 1-1:0.0: No AC97 audio processor
[  158.314183][ T8379] loop1: detected capacity change from 0 to 4096
[  158.456855][ T8381] loop1: detected capacity change from 0 to 1024
[  158.477571][   T33] audit: type=1800 audit(1756522700.551:20): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1050" name="file1" dev="loop1" ino=20 res=0 errno=0
[  158.998353][ T8393] loop1: detected capacity change from 0 to 32768
[  159.011457][ T8393] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  159.026419][ T6114] usb 1-1: USB disconnect, device number 13
[  159.045369][ T8393] XFS (loop1): Ending clean mount
[  159.056984][ T8393] XFS (loop1): Quotacheck needed: Please wait.
[  159.084816][ T8393] XFS (loop1): Quotacheck: Done.
[  159.096269][ T8393] XFS (loop1): User initiated shutdown received.
[  159.098537][ T8393] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  159.103129][ T8393] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  159.118917][ T6095] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  159.379885][ T8409] loop1: detected capacity change from 0 to 2048
[  159.385372][ T8409] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  159.400423][ T8410] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  159.785472][ T8423] loop0: detected capacity change from 0 to 256
[  159.804198][ T8423] FAT-fs (loop0): Directory bread(block 64) failed
[  159.806451][ T8423] FAT-fs (loop0): Directory bread(block 65) failed
[  159.808934][ T8423] FAT-fs (loop0): Directory bread(block 66) failed
[  159.811114][ T8423] FAT-fs (loop0): Directory bread(block 67) failed
[  159.814917][ T8423] FAT-fs (loop0): Directory bread(block 68) failed
[  159.817684][ T8423] FAT-fs (loop0): Directory bread(block 69) failed
[  159.820450][ T8423] FAT-fs (loop0): Directory bread(block 70) failed
[  159.823740][ T8423] FAT-fs (loop0): Directory bread(block 71) failed
[  159.826433][ T8423] FAT-fs (loop0): Directory bread(block 72) failed
[  159.829063][ T8423] FAT-fs (loop0): Directory bread(block 73) failed
[  160.083871][ T8425] loop0: detected capacity change from 0 to 32768
[  160.093672][ T8425] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1067 (8425)
[  160.102673][ T8425] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  160.106302][ T8425] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  160.109547][ T8425] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  160.213884][ T8425] BTRFS info (device loop0): rebuilding free space tree
[  160.234318][ T8425] BTRFS info (device loop0): disabling free space tree
[  160.237176][ T8425] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  160.241156][ T8425] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  160.251668][ T8425] BTRFS info (device loop0): setting nodatasum
[  160.254304][ T8425] BTRFS info (device loop0): setting nodatacow
[  160.257122][ T8425] BTRFS info (device loop0): enabling ssd optimizations
[  160.259888][ T8425] BTRFS info (device loop0): using spread ssd allocation scheme
[  160.262953][ T8425] BTRFS info (device loop0): turning off barriers
[  160.265560][ T8425] BTRFS info (device loop0): enabling disk space caching
[  160.268245][ T8425] BTRFS info (device loop0): force clearing of disk cache
[  160.335326][   T33] audit: type=1800 audit(1756522702.401:21): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1067" name="file1" dev="loop0" ino=260 res=0 errno=0
[  160.378023][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'.
[  160.470428][ T6090] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  161.027266][ T8466] loop1: detected capacity change from 0 to 16
[  161.041613][ T8468] netlink: 'syz.0.1079': attribute type 7 has an invalid length.
[  161.047699][ T8466] erofs (device loop1): mounted with root inode @ nid 36.
[  161.055978][ T8468] netlink: 'syz.0.1079': attribute type 8 has an invalid length.
[  161.061310][ T8466] erofs (device loop1): read error -117 @ 72 of nid 36
[  161.147239][ T8477] kAFS: unparsable volume name
[  161.287474][ T8479] loop0: detected capacity change from 0 to 4096
[  161.548092][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1087'.
[  161.577022][ T8487] futex_wake_op: syz.0.1086 tries to shift op by 32; fix this program
[  161.708918][ T8491] loop0: detected capacity change from 0 to 4096
[  161.734118][ T8491] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  161.904447][ T8491] ntfs3(loop0): Failed to load $Extend (-22).
[  161.910062][ T8491] ntfs3(loop0): Failed to initialize $Extend.
[  162.415356][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'.
[  162.429572][ T8525] : entered promiscuous mode
[  162.654495][ T6114] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  162.746124][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'.
[  162.758721][ T8536] bridge1: entered promiscuous mode
[  162.760928][ T8536] bridge1: entered allmulticast mode
[  162.826034][ T6114] usb 2-1: config 2 interface 0 has no altsetting 0
[  162.834364][ T6114] usb 2-1: New USB device found, idVendor=07aa, idProduct=9601, bcdDevice= b.80
[  162.837406][ T6114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.840231][ T6114] usb 2-1: Product: syz
[  162.842579][ T6114] usb 2-1: Manufacturer: syz
[  162.844449][ T6114] usb 2-1: SerialNumber: syz
[  163.271032][ T6114] Error reading MAC address
[  163.287831][ T6114] usb 2-1: USB disconnect, device number 7
[  163.625808][ T8558] loop0: detected capacity change from 0 to 32768
[  163.630209][ T8558] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1120 (8558)
[  163.646751][ T8558] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  163.652913][ T8558] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  163.656947][ T8558] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  163.683362][ T8558] BTRFS info (device loop0): rebuilding free space tree
[  163.693598][ T8558] BTRFS info (device loop0): disabling free space tree
[  163.696498][ T8558] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  163.700349][ T8558] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  163.708906][ T8558] BTRFS info (device loop0): allowing degraded mounts
[  163.711639][ T8558] BTRFS info (device loop0): enabling ssd optimizations
[  163.715352][ T8558] BTRFS info (device loop0): enabling disk space caching
[  163.718075][ T8558] BTRFS info (device loop0): force clearing of disk cache
[  163.720853][ T8558] BTRFS info (device loop0): use zlib compression, level 3
[  163.854620][ T6090] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  164.371691][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1132'.
[  164.447543][ T8603] syzkaller1: entered promiscuous mode
[  164.449687][ T8603] syzkaller1: entered allmulticast mode
[  164.531379][ T8610] IPVS: length: 139 != 8
[  165.031594][ T8624] loop1: detected capacity change from 0 to 1024
[  165.071166][ T8624] EXT4-fs (loop1): orphan cleanup on readonly fs
[  165.139588][ T8624] EXT4-fs (loop1): 1 truncate cleaned up
[  165.148733][ T8624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  165.453079][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.247514][ T8656] loop0: detected capacity change from 0 to 128
[  166.265921][ T8656] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  166.271210][ T8656] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  166.271484][ T8657] overlayfs: workdir and upperdir must be separate subtrees
[  166.401440][ T8662] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400)
[  166.413340][ T8662] FAT-fs (loop0): Filesystem has been set read-only
[  167.411218][ T8674] cgroup: none used incorrectly
[  168.278745][ T8691] loop1: detected capacity change from 0 to 40427
[  168.290507][ T8691] F2FS-fs (loop1): invalid crc value
[  168.400141][ T8691] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  168.404794][ T8691] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  168.484775][ T6095] syz-executor: attempt to access beyond end of device
[  168.484775][ T6095] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  168.494754][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  168.494773][ T6095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.494783][ T6095] Call Trace:
[  168.494789][ T6095]  <TASK>
[  168.494795][ T6095]  dump_stack_lvl+0x189/0x250
[  168.494819][ T6095]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.494834][ T6095]  ? __pfx_queue_work_on+0x10/0x10
[  168.494855][ T6095]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  168.494874][ T6095]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  168.494899][ T6095]  f2fs_handle_critical_error+0x37c/0x540
[  168.494924][ T6095]  f2fs_write_end_io+0x886/0xb60
[  168.494950][ T6095]  __submit_merged_bio+0x27a/0x6a0
[  168.494974][ T6095]  __submit_merged_write_cond+0x255/0x530
[  168.494998][ T6095]  f2fs_write_data_pages+0x261d/0x3000
[  168.495044][ T6095]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  168.495116][ T6095]  ? __lock_acquire+0xab9/0xd20
[  168.495144][ T6095]  ? do_raw_spin_lock+0x121/0x290
[  168.495168][ T6095]  ? do_raw_spin_unlock+0x4d/0x240
[  168.495185][ T6095]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  168.495205][ T6095]  do_writepages+0x32e/0x550
[  168.495231][ T6095]  ? do_raw_spin_unlock+0x4d/0x240
[  168.495251][ T6095]  filemap_fdatawrite+0x199/0x240
[  168.495269][ T6095]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  168.495350][ T6095]  ? do_raw_spin_unlock+0x4d/0x240
[  168.495371][ T6095]  f2fs_sync_dirty_inodes+0x31f/0x830
[  168.495395][ T6095]  f2fs_write_checkpoint+0x95a/0x1df0
[  168.495427][ T6095]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  168.495476][ T6095]  ? kill_f2fs_super+0x298/0x6c0
[  168.495494][ T6095]  kill_f2fs_super+0x2c3/0x6c0
[  168.495513][ T6095]  ? __pfx_kill_f2fs_super+0x10/0x10
[  168.495524][ T6095]  ? radix_tree_delete_item+0x2b6/0x400
[  168.495550][ T6095]  ? shrinker_free+0x2ce/0x3e0
[  168.495568][ T6095]  deactivate_locked_super+0xbc/0x130
[  168.495587][ T6095]  cleanup_mnt+0x425/0x4c0
[  168.495604][ T6095]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.495625][ T6095]  task_work_run+0x1d4/0x260
[  168.495646][ T6095]  ? __pfx_task_work_run+0x10/0x10
[  168.495662][ T6095]  ? __x64_sys_umount+0x122/0x160
[  168.495684][ T6095]  ? exit_to_user_mode_loop+0x40/0x110
[  168.495706][ T6095]  exit_to_user_mode_loop+0xec/0x110
[  168.495725][ T6095]  do_syscall_64+0x2bd/0x3b0
[  168.495743][ T6095]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.495760][ T6095]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.495773][ T6095]  ? exc_page_fault+0x9f/0xf0
[  168.495792][ T6095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.495805][ T6095] RIP: 0033:0x7f6fd0d8ff17
[  168.495818][ T6095] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  168.495829][ T6095] RSP: 002b:00007fff5eb556b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  168.495848][ T6095] RAX: 0000000000000000 RBX: 00007f6fd0e11c05 RCX: 00007f6fd0d8ff17
[  168.495857][ T6095] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5eb55770
[  168.495865][ T6095] RBP: 00007fff5eb55770 R08: 0000000000000000 R09: 0000000000000000
[  168.495873][ T6095] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5eb56800
[  168.495882][ T6095] R13: 00007f6fd0e11c05 R14: 0000000000029190 R15: 00007fff5eb56840
[  168.495904][ T6095]  </TASK>
[  168.495910][ T6095] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  168.644939][ T8698] loop0: detected capacity change from 0 to 32768
[  168.675472][ T8698] JBD2: Ignoring recovery information on journal
[  168.739508][ T8698] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  168.793076][ T8698] (syz.0.1175,8698,1):ocfs2_get_suballoc_slot_bit:2819 ERROR: invalid inode 8192 requested
[  168.812633][ T8698] (syz.0.1175,8698,1):ocfs2_get_suballoc_slot_bit:2844 ERROR: status = -22
[  168.816074][ T8698] (syz.0.1175,8698,1):ocfs2_test_inode_bit:2926 ERROR: get alloc slot and bit failed -22
[  168.819838][ T8698] (syz.0.1175,8698,1):ocfs2_test_inode_bit:2967 ERROR: status = -22
[  168.861980][ T6090] ocfs2: Unmounting device (7,0) on (node local)
[  169.282450][ T6163] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  169.291938][ T8721] netlink: 'syz.2.1183': attribute type 4 has an invalid length.
[  169.331906][ T8723] fuse: Bad value for 'fd'
[  169.435114][ T6163] usb 2-1: Using ep0 maxpacket: 16
[  169.439726][ T6163] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.444602][ T6163] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.448568][ T6163] usb 2-1: config 0 interface 0 has no altsetting 0
[  169.451427][ T6163] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  169.454930][ T6163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.461867][ T6163] usb 2-1: config 0 descriptor??
[  169.871490][ T6163] hid (null): invalid report_size 42190
[  169.874274][ T6163] hid (null): report_id 4263223746 is invalid
[  169.878964][ T6163] hid (null): unknown global tag 0xe
[  169.884519][ T6163] hid (null): global environment stack underflow
[  169.887050][ T6163] hid (null): global environment stack underflow
[  169.889603][ T6163] hid (null): global environment stack underflow
[  169.891987][ T6163] hid (null): report_id 0 is invalid
[  169.895013][ T6163] hid (null): unknown global tag 0xc
[  169.897153][ T6163] hid (null): unknown global tag 0xd
[  169.900611][ T6163] hid (null): unknown global tag 0xc
[  169.904300][ T6163] hid (null): global environment stack underflow
[  169.906879][ T6163] hid (null): bogus close delimiter
[  170.074364][ T6163] usb 2-1: USB disconnect, device number 8
[  170.848499][ T8776] loop1: detected capacity change from 0 to 40427
[  170.855670][ T8776] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  170.858655][ T8776] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  170.864472][ T8776] F2FS-fs (loop1): invalid crc value
[  170.917345][ T8776] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  170.925801][ T8776] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  170.928473][ T8776] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  171.270811][ T8776] F2FS-fs (loop1): Image doesn't support compression
[  171.274449][ T8776] F2FS-fs (loop1): Start checkpoint disabled!
[  171.750717][ T8793] loop1: detected capacity change from 0 to 16
[  171.759507][ T8793] erofs (device loop1): mounted with root inode @ nid 36.
[  171.819521][ T8795] loop1: detected capacity change from 0 to 512
[  171.851479][ T8795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.856661][ T8795] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  171.896263][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.955567][   T33] audit: type=1326 audit(1756522714.031:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.2.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ebe9 code=0x7ffc0000
[  171.981223][   T33] audit: type=1326 audit(1756522714.031:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.2.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ebe9 code=0x7ffc0000
[  171.997036][   T33] audit: type=1326 audit(1756522714.031:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.2.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fc50998ebe9 code=0x7ffc0000
[  172.009354][   T33] audit: type=1326 audit(1756522714.031:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.2.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ebe9 code=0x7ffc0000
[  172.027932][   T33] audit: type=1326 audit(1756522714.031:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.2.1218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ebe9 code=0x7ffc0000
[  172.047332][ T8806] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.050876][ T8806] batadv_slave_1: entered promiscuous mode
[  172.056395][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'.
[  172.224618][ T8818] loop0: detected capacity change from 0 to 512
[  172.243262][ T8818] EXT4-fs: Ignoring removed bh option
[  172.257955][ T8818] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  172.265783][ T8818] EXT4-fs (loop0): invalid journal inode
[  172.269570][ T8818] EXT4-fs (loop0): can't get journal size
[  172.287866][ T8818] EXT4-fs (loop0): 1 truncate cleaned up
[  172.291895][ T8818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.306690][ T8818] Device name not specified.
[  172.306690][ T8818] 
[  172.373455][ T6090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.474482][ T8823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.518360][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'.
[  172.530021][ T8815] loop1: detected capacity change from 0 to 32768
[  172.549073][ T8827] loop0: detected capacity change from 0 to 4096
[  172.553192][ T8827] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  172.568166][ T8827] ntfs3(loop0): Inode r=19 is not in use!
[  172.569865][ T8827] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  172.573763][ T8827] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  172.578967][ T8815] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.597066][ T8827] ntfs3(loop0): ino=1b, mi_enum_attr
[  172.600528][ T8827] ntfs3(loop0): ino=1b, mi_enum_attr
[  172.619051][ T8815] XFS (loop1): Ending clean mount
[  172.631222][ T8815] XFS (loop1): Quotacheck needed: Please wait.
[  172.678761][ T8815] XFS (loop1): Quotacheck: Done.
[  172.728276][ T8815] XFS (loop1): User initiated shutdown received.
[  172.730412][ T8815] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  172.735383][ T8815] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  172.766205][ T6095] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.094325][ T8855] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1237'.
[  173.298069][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'.
[  173.493135][ T8876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1247'.
[  173.496360][ T8876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1247'.
[  173.503344][ T6163] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  173.655002][ T6163] usb 2-1: Using ep0 maxpacket: 32
[  173.659357][ T6163] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  173.663283][ T6163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.673238][ T6163] usb 2-1: config 0 descriptor??
[  173.689952][ T6163] as10x_usb: device has been detected
[  173.695072][ T6163] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  173.715117][ T6163] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  173.746674][ T6163] as10x_usb: error during firmware upload part1
[  173.749594][ T6163] Registered device nBox DVB-T Dongle
[  173.836770][ T8892] overlayfs: failed to clone upperpath
[  173.925019][ T6163] usb 2-1: USB disconnect, device number 9
[  173.967041][ T6163] Unregistered device nBox DVB-T Dongle
[  173.977446][ T6163] as10x_usb: device has been disconnected
[  174.182558][    T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  174.335237][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  174.339694][    T9] usb 1-1: config 250 has an invalid interface number: 222 but max is 1
[  174.343559][    T9] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  174.347518][    T9] usb 1-1: config 250 has no interface number 1
[  174.350069][    T9] usb 1-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  174.354957][    T9] usb 1-1: config 250 interface 222 altsetting 22 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  174.370318][    T9] usb 1-1: config 250 interface 222 altsetting 22 endpoint 0x8 has invalid maxpacket 983, setting to 64
[  174.374803][    T9] usb 1-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  174.378938][    T9] usb 1-1: config 250 interface 222 altsetting 22 has a duplicate endpoint with address 0x6, skipping
[  174.385488][    T9] usb 1-1: config 250 interface 222 has no altsetting 0
[  174.391165][    T9] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[  174.394920][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.398020][    T9] usb 1-1: Product: syz
[  174.399622][    T9] usb 1-1: Manufacturer: syz
[  174.401354][    T9] usb 1-1: SerialNumber: syz
[  174.408233][ T8895] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  174.646850][    T9] usb 1-1: USB disconnect, device number 14
[  174.823442][ T8910] loop1: detected capacity change from 0 to 32768
[  174.860928][ T8910] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  174.880959][ T8910] XFS (loop1): Ending clean mount
[  174.913520][ T6095] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  175.146877][ T8934] loop1: detected capacity change from 0 to 512
[  175.150808][ T8934] EXT4-fs: Conflicting test_dummy_encryption options
[  175.220000][ T8936] loop0: detected capacity change from 0 to 256
[  175.241567][ T8936] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f50, chksum : 0xa6aae999, utbl_chksum : 0xe619d30d)
[  175.331614][ T8941] loop1: detected capacity change from 0 to 128
[  175.373504][ T8941] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  175.378530][ T8941] ext4 filesystem being mounted at /418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  175.451211][ T6095] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.807753][ T8966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1287'.
[  175.847113][ T8958] loop0: detected capacity change from 0 to 40427
[  175.862426][ T8958] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  175.864900][ T8958] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  175.868510][  T793] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  175.873529][ T8958] F2FS-fs (loop0): invalid crc value
[  175.920828][ T8958] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  175.927024][ T8958] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  175.929521][ T8958] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  176.023272][ T6090] syz-executor: attempt to access beyond end of device
[  176.023272][ T6090] loop0: rw=2051, sector=77824, nr_sectors = 2560 limit=40427
[  176.035045][ T6090] F2FS-fs (loop0): Issue discard(9728, 9728, 320) failed, ret: -5
[  176.045987][  T793] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.049488][  T793] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  176.057748][  T793] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  176.060738][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.072335][  T793] usb 2-1: Product: syz
[  176.073990][  T793] usb 2-1: Manufacturer: syz
[  176.075739][  T793] usb 2-1: SerialNumber: syz
[  176.208409][ T8985] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  176.296617][  T793] usb 2-1: 0:2 : does not exist
[  176.303159][  T793] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  176.358379][  T793] usb 2-1: USB disconnect, device number 10
[  176.405648][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.482116][   T33] audit: type=1326 audit(1756522718.551:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.0.1301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026ab8ebe9 code=0x7ffc0000
[  176.501100][   T33] audit: type=1326 audit(1756522718.571:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.0.1301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026ab8ebe9 code=0x7ffc0000
[  176.513372][   T33] audit: type=1326 audit(1756522718.571:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.0.1301" exe="/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f026ab8ebe9 code=0x7ffc0000
[  176.521410][   T33] audit: type=1326 audit(1756522718.571:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.0.1301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026ab8ebe9 code=0x7ffc0000
[  176.792453][    T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  176.885215][ T9018] loop1: detected capacity change from 0 to 512
[  176.894471][ T9018] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1310: casefold flag without casefold feature
[  176.912159][ T9018] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1310: couldn't read orphan inode 15 (err -117)
[  176.919422][ T9018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.936125][   T33] audit: type=1800 audit(1756522719.011:31): pid=9018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1310" name="file0" dev="loop1" ino=19 res=0 errno=0
[  176.948503][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  176.958806][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  176.972443][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  176.975921][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.998299][ T6095] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.135988][ T9023] geneve2: entered promiscuous mode
[  177.138253][ T9023] geneve2: entered allmulticast mode
[  177.199228][    T9] usb 1-1: GET_CAPABILITIES returned 0
[  177.201613][    T9] usbtmc 1-1:16.0: can't read capabilities
[  177.302125][   T33] audit: type=1326 audit(1756522719.371:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9028 comm="syz.2.1315" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc50998ebe9 code=0x0
[  177.405840][ T6114] usb 1-1: USB disconnect, device number 15
[  177.502376][    T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  177.665012][    T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  177.668165][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.672592][    T9] usb 2-1: config 0 descriptor??
[  177.677597][    T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  177.880983][    T9] gp8psk: usb in 128 operation failed.
[  177.964776][ T9031] netlink: 'syz.0.1316': attribute type 64 has an invalid length.
[  177.967843][ T9031] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1316'.
[  178.085687][    T9] gp8psk: usb in 146 operation failed.
[  178.088185][    T9] gp8psk: failed to get FW version
[  178.091181][    T9] gp8psk: FPGA Version = 0
[  178.095328][ T9035] netlink: 'syz.0.1318': attribute type 6 has an invalid length.
[  178.273528][ T9044] program syz.0.1322 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  178.292162][    T9] gp8psk: usb in 138 operation failed.
[  178.299762][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  178.312681][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  178.320761][    T9] usb 2-1: USB disconnect, device number 11
[  178.352612][ T6096] Bluetooth: hci1: command tx timeout
[  179.350374][ T9065] loop1: detected capacity change from 0 to 32768
[  179.722329][   T33] audit: type=1326 audit(1756522977.794:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.1.1344" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fd0d8ebe9 code=0x0
[  179.923180][ T9091] loop0: detected capacity change from 0 to 32768
[  179.934577][ T9091] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1341 (9091)
[  179.974324][ T9091] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  179.979446][ T9091] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  180.036192][ T9091] BTRFS info (device loop0): enabling ssd optimizations
[  180.039197][ T9091] BTRFS info (device loop0): enabling free space tree
[  180.684578][ T9116] sctp: [Deprecated]: syz.1.1346 (pid 9116) Use of int in max_burst socket option.
[  180.684578][ T9116] Use struct sctp_assoc_value instead
[  180.696984][ T6090] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  180.860450][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1350'.
[  181.026334][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'.
[  181.058326][ T9135] bridge2: port 1(veth3) entered blocking state
[  181.060906][ T9135] bridge2: port 1(veth3) entered disabled state
[  181.064178][ T9135] veth3: entered allmulticast mode
[  181.067259][ T9135] veth3: entered promiscuous mode
[  181.086378][ T9135] bridge2: port 2(veth0_to_bond) entered blocking state
[  181.088847][ T9135] bridge2: port 2(veth0_to_bond) entered disabled state
[  181.091738][ T9135] veth0_to_bond: entered allmulticast mode
[  181.094700][ T9135] veth0_to_bond: entered promiscuous mode
[  181.787160][ T9150] Driver unsupported XDP return value 0 on prog  (id 102) dev N/A, expect packet loss!
[  182.697495][ T9161] loop1: detected capacity change from 0 to 128
[  182.710307][ T9161] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  182.716335][ T9161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.929082][ T9173] loop0: detected capacity change from 0 to 512
[  182.940206][ T9173] EXT4-fs: inline encryption not supported
[  182.957860][ T9173] EXT4-fs: Ignoring removed oldalloc option
[  182.960411][ T9173] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  182.982461][ T9173] EXT4-fs error (device loop0): __ext4_fill_super:5504: inode #2: comm syz.0.1371: iget: special inode unallocated
[  182.998111][ T9173] EXT4-fs (loop0): get root inode failed
[  182.999925][ T9173] EXT4-fs (loop0): mount failed
[  183.089368][ T9181] loop0: detected capacity change from 0 to 512
[  183.100358][ T9181] EXT4-fs: Ignoring removed orlov option
[  183.125299][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1376'.
[  183.137171][ T9181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c119, mo2=0002]
[  183.147353][ T9181] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1374: corrupted in-inode xattr: e_value size too large
[  183.163176][ T9181] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1374: couldn't read orphan inode 15 (err -117)
[  183.169638][ T9181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.235386][ T9193] sctp: [Deprecated]: syz.1.1378 (pid 9193) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.235386][ T9193] Use struct sctp_sack_info instead
[  183.283969][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'.
[  183.373897][ T9202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1383'.
[  183.908893][ T6154] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  183.999650][ T6090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.070159][ T6154] usb 2-1: Using ep0 maxpacket: 8
[  184.081368][ T6154] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  184.086825][ T6154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.089710][ T9211] loop0: detected capacity change from 0 to 4096
[  184.095184][ T6154] usb 2-1: config 0 descriptor??
[  184.113268][ T6154] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  184.127243][ T6154] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[  184.138201][ T9211] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  184.157802][ T9213] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1387'.
[  184.181600][ T9211] ntfs3(loop0): Failed to load $Extend (-22).
[  184.184091][ T9211] ntfs3(loop0): Failed to initialize $Extend.
[  184.322327][   T10] usb 2-1: USB disconnect, device number 12
[  184.393870][ T9220] program syz.0.1389 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  184.443087][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1393'.
[  184.446711][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1393'.
[  184.859753][   T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  184.883232][ T9254] 9pnet_fd: Insufficient options for proto=fd
[  185.011858][   T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  185.015526][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.020899][   T10] usb 1-1: config 0 descriptor??
[  185.026863][   T10] cp210x 1-1:0.0: cp210x converter detected
[  185.199585][    T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  185.351380][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  185.355029][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  185.358837][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  185.365100][    T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  185.368333][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.371032][    T9] usb 2-1: Product: syz
[  185.372474][    T9] usb 2-1: Manufacturer: syz
[  185.374298][    T9] usb 2-1: SerialNumber: syz
[  185.378832][    T9] usb 2-1: config 0 descriptor??
[  185.383673][ T9258] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  185.386996][ T9258] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  185.397411][    T9] usb 2-1: ucan: probing device on interface #0
[  185.437240][   T10] usb 1-1: cp210x converter now attached to ttyUSB0
[  185.634435][ T6154] usb 1-1: USB disconnect, device number 16
[  185.642407][ T6154] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  185.654838][ T6154] cp210x 1-1:0.0: device disconnected
[  186.174145][    T9] ucan 2-1:0.0: probe with driver ucan failed with error -22
[  186.266011][  T793] usb 2-1: USB disconnect, device number 13
[  186.316074][ T9264] loop0: detected capacity change from 0 to 4096
[  186.373012][ T9264] ntfs3(loop0): try to read out of volume at offset 0x3fffffc7000
[  186.376777][ T9264] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB
[  186.711214][ T9282] fuse: Bad value for 'fd'
[  186.917252][ T9300] loop0: detected capacity change from 0 to 4096
[  186.921135][ T9300] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  186.940647][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.995016][ T9302] bridge_slave_0 (unregistering): left allmulticast mode
[  186.997857][ T9302] bridge_slave_0 (unregistering): left promiscuous mode
[  187.001597][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.109996][ T9306] netlink: 'syz.0.1431': attribute type 3 has an invalid length.
[  187.215810][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1436'.
[  187.340838][ T9322] loop0: detected capacity change from 0 to 4096
[  187.388218][ T9322] ntfs3(loop0): ino=1a, mi_enum_attr
[  187.394311][ T9322] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  187.500867][ T6154] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  187.514661][ T9332] bond_slave_0: entered promiscuous mode
[  187.517033][ T9332] bond_slave_1: entered promiscuous mode
[  187.520638][ T9332] macvlan2: entered allmulticast mode
[  187.522771][ T9332] bond0: entered allmulticast mode
[  187.524423][ T9332] bond_slave_0: entered allmulticast mode
[  187.526840][ T9332] bond_slave_1: entered allmulticast mode
[  187.531970][ T9332] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  187.536589][ T9332] bridge0: port 3(macvlan2) entered blocking state
[  187.545831][ T9332] bridge0: port 3(macvlan2) entered disabled state
[  187.552867][ T9332] macvlan2: entered promiscuous mode
[  187.555061][ T9332] bond0: entered promiscuous mode
[  187.562376][ T9332] bridge0: port 3(macvlan2) entered blocking state
[  187.565318][ T9332] bridge0: port 3(macvlan2) entered forwarding state
[  187.631014][ T9339] loop0: detected capacity change from 0 to 1024
[  187.634571][ T9339] EXT4-fs: Ignoring removed oldalloc option
[  187.650435][ T9339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.679474][ T9345] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  187.682536][ T9345] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  187.696037][ T6154] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  187.701801][ T6154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.708235][ T6154] usb 2-1: Product: syz
[  187.709958][ T6154] usb 2-1: Manufacturer: syz
[  187.718404][ T6154] usb 2-1: SerialNumber: syz
[  187.723412][ T6154] usb 2-1: config 0 descriptor??
[  187.731454][ T6090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.750545][ T6154] gspca_main: sq905c-2.14.0 probing 2770:9052
[  188.153831][ T9363] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1458'.
[  188.365510][ T6154] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  188.372514][ T6154] sq905c 2-1:0.0: probe with driver sq905c failed with error -71
[  188.382551][ T6154] usb 2-1: USB disconnect, device number 14
[  188.482488][ T9373] loop0: detected capacity change from 0 to 40427
[  188.498534][ T9373] F2FS-fs (loop0): invalid crc value
[  188.540344][ T9373] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  188.543676][ T9373] F2FS-fs (loop0): Start checkpoint disabled!
[  188.552626][ T9373] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  188.855790][ T9384] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1467'.
[  189.044597][ T9395] loop0: detected capacity change from 0 to 1024
[  189.058774][ T9395] EXT4-fs: Ignoring removed nobh option
[  189.061049][ T9395] EXT4-fs: Ignoring removed bh option
[  189.076503][ T9395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.102735][ T9399] loop1: detected capacity change from 0 to 2048
[  189.115697][ T9395] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  189.135461][ T6039] Alternate GPT is invalid, using primary GPT.
[  189.140203][ T6039]  loop1: p2 p3 p7
[  189.208931][ T6090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.212476][ T9399] Alternate GPT is invalid, using primary GPT.
[  189.214974][ T9399]  loop1: p2 p3 p7
[  189.413277][ T6929] udevd[6929]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  189.430106][ T6039] udevd[6039]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  189.431640][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  189.485892][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  189.485969][ T6039] udevd[6039]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  189.492942][ T6929] udevd[6929]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  189.601667][ T9409] loop1: detected capacity change from 0 to 32768
[  189.617366][ T9409] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1478 (9409)
[  189.626556][ T9407] loop0: detected capacity change from 0 to 32768
[  189.640013][ T9407] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1475 (9407)
[  189.650412][ T9407] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  189.653976][ T9407] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  189.659086][ T9409] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  189.665841][ T9409] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  189.846196][ T9409] BTRFS info (device loop1): rebuilding free space tree
[  189.858292][ T9407] BTRFS info (device loop0): rebuilding free space tree
[  189.864295][ T9407] BTRFS info (device loop0): setting nodatasum
[  189.866829][ T9407] BTRFS info (device loop0): allowing degraded mounts
[  189.870132][ T9407] BTRFS info (device loop0): setting nodatacow
[  189.872467][ T9407] BTRFS info (device loop0): enabling ssd optimizations
[  189.875908][ T9407] BTRFS info (device loop0): using spread ssd allocation scheme
[  189.879544][ T9407] BTRFS info (device loop0): turning off barriers
[  189.882034][ T9407] BTRFS info (device loop0): enabling free space tree
[  189.884607][ T9407] BTRFS info (device loop0): force clearing of disk cache
[  189.892575][ T9409] BTRFS info (device loop1): allowing degraded mounts
[  189.895210][ T9409] BTRFS info (device loop1): enabling ssd optimizations
[  189.902777][ T9409] BTRFS info (device loop1): enabling free space tree
[  189.905797][ T9409] BTRFS info (device loop1): force clearing of disk cache
[  189.908736][ T9409] BTRFS info (device loop1): use zstd compression, level 3
[  189.911586][ T9409] BTRFS info (device loop1): max_inline set to 0
[  189.914418][   T33] audit: type=1800 audit(1756522987.989:34): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1475" name="bus" dev="loop0" ino=263 res=0 errno=0
[  190.031892][ T6090] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  190.235544][ T6095] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.350648][ T9482] overlayfs: failed to clone upperpath
[  191.744363][ T9489] loop1: detected capacity change from 0 to 1024
[  191.752683][ T9489] EXT4-fs: Ignoring removed oldalloc option
[  191.755164][ T9489] EXT4-fs: Ignoring removed bh option
[  191.762511][ T9489] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  191.789531][ T9489] capability: warning: `syz.1.1498' uses 32-bit capabilities (legacy support in use)
[  192.062846][ T9497] loop0: detected capacity change from 0 to 4096
[  192.077528][ T9497] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  192.351733][ T9511] loop0: detected capacity change from 0 to 1764
[  194.019704][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.023001][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  195.476510][ T9566] loop0: detected capacity change from 0 to 32768
[  195.492764][ T9566] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  195.520412][ T9566] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 57088 but max bitmap bits of 2048
[  195.531095][ T9566] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  195.535040][ T9566] OCFS2: File system is now read-only.
[  195.537220][ T9566] (syz.0.1532,9566,1):ocfs2_search_chain:1817 ERROR: status = -30
[  195.541641][ T9566] (syz.0.1532,9566,1):ocfs2_search_chain:1940 ERROR: status = -30
[  195.546169][ T9566] (syz.0.1532,9566,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  195.549436][ T9566] (syz.0.1532,9566,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  195.552915][ T9566] (syz.0.1532,9566,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  195.556310][ T9566] (syz.0.1532,9566,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  195.559411][ T9566] (syz.0.1532,9566,1):ocfs2_mknod_locked:641 ERROR: status = -30
[  195.562571][ T9566] (syz.0.1532,9566,1):ocfs2_mknod:388 ERROR: status = -30
[  195.567143][ T9566] (syz.0.1532,9566,1):ocfs2_mknod:505 ERROR: status = -30
[  195.569665][ T9566] (syz.0.1532,9566,1):ocfs2_create:678 ERROR: status = -30
[  195.673598][ T6090] ocfs2: Unmounting device (7,0) on (node local)
[  195.922658][ T9586] 9p: Unknown access argument c: -22
[  196.094121][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  197.644201][ T9624] loop1: detected capacity change from 0 to 8
[  197.717122][ T9624] SQUASHFS error: xz decompression failed, data probably corrupt
[  197.720204][ T9624] SQUASHFS error: Failed to read block 0x108: -5
[  197.722651][ T9624] SQUASHFS error: Unable to read metadata cache entry [106]
[  197.726096][ T9624] SQUASHFS error: Unable to read inode 0x11f
[  197.825171][ T9630] loop1: detected capacity change from 0 to 256
[  197.851581][ T9630] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  198.007903][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'.
[  198.284739][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.386401][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.470177][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.544310][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.563685][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  198.567016][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  198.570248][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  198.576567][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  198.579577][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  198.645851][ T9651] lo speed is unknown, defaulting to 1000
[  198.821373][   T13] bridge_slave_1: left allmulticast mode
[  198.824187][   T13] bridge_slave_1: left promiscuous mode
[  198.828235][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.914283][   T52] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  198.932323][ T9663] vcan0: tx drop: invalid da for name 0x0000000000000002
[  199.062606][   T52] usb 1-1: Using ep0 maxpacket: 8
[  199.070340][   T52] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  199.077855][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.080670][   T52] usb 1-1: Product: syz
[  199.082115][   T52] usb 1-1: Manufacturer: syz
[  199.098202][   T52] usb 1-1: SerialNumber: syz
[  199.113789][   T52] usb 1-1: config 0 descriptor??
[  199.349590][   T52] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  199.382039][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.393438][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.399278][   T13] bond0 (unregistering): Released all slaves
[  199.434256][ T9651] chnl_net:caif_netlink_parms(): no params data found
[  199.862964][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.866151][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.869070][ T9651] bridge_slave_0: entered allmulticast mode
[  199.880111][ T9651] bridge_slave_0: entered promiscuous mode
[  199.937867][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.940221][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.944253][ T9651] bridge_slave_1: entered allmulticast mode
[  199.947297][ T9651] bridge_slave_1: entered promiscuous mode
[  200.029291][   T13] hsr_slave_0: left promiscuous mode
[  200.032482][   T13] hsr_slave_1: left promiscuous mode
[  200.035172][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.038052][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.045819][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.076894][   T13] veth1_macvtap: left promiscuous mode
[  200.079611][   T13] veth0_macvtap: left promiscuous mode
[  200.170983][   T52] gspca_sunplus: reg_w_riv err -71
[  200.177878][   T52] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  200.197456][   T52] usb 1-1: USB disconnect, device number 17
[  200.652012][ T6096] Bluetooth: hci2: command tx timeout
[  201.021724][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  201.177319][    T9] usb 1-1: Using ep0 maxpacket: 8
[  201.329774][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  201.334851][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.355863][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  201.358582][    T9] pvrusb2: **********
[  201.360285][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  201.365189][    T9] pvrusb2: Important functionality might not be entirely working.
[  201.368334][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  201.373602][    T9] pvrusb2: **********
[  201.659224][ T2398] pvrusb2: Invalid write control endpoint
[  201.708440][   T13] team0 (unregistering): Port device team_slave_1 removed
[  201.716968][ T2398] pvrusb2: Invalid write control endpoint
[  201.728286][ T2398] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  201.741286][ T2398] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  201.744299][ T2398] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  201.757943][ T2398] pvrusb2: Device being rendered inoperable
[  201.776518][   T13] team0 (unregistering): Port device team_slave_0 removed
[  201.776587][ T2398] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  201.785343][ T2398] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  201.822614][ T2398] pvrusb2: Attached sub-driver cx25840
[  201.825452][ T2398] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  201.830939][ T2398] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  201.863895][    T9] usb 1-1: USB disconnect, device number 18
[  202.363560][ T9651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.369205][   T10] lo speed is unknown, defaulting to 1000
[  202.379835][   T10] syz0: Port: 1 Link DOWN
[  202.383339][ T9651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.396064][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'.
[  202.411881][ T9702] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  202.514765][ T9651] team0: Port device team_slave_0 added
[  202.529350][ T9651] team0: Port device team_slave_1 added
[  202.625553][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.651218][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.673220][ T9651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.692249][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.702004][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.712038][ T9651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.740819][ T6096] Bluetooth: hci2: command tx timeout
[  202.869496][ T9711] loop0: detected capacity change from 0 to 32768
[  202.926508][ T9651] hsr_slave_0: entered promiscuous mode
[  202.928159][   T33] audit: type=1800 audit(1756523001.005:35): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1589" name="file1" dev="loop0" ino=4 res=0 errno=0
[  202.934346][ T9651] hsr_slave_1: entered promiscuous mode
[  203.032520][   T13] ------------[ cut here ]------------
[  203.035127][   T13] WARNING: CPU: 0 PID: 13 at net/xfrm/xfrm_state.c:3308 xfrm_state_fini+0x289/0x2f0
[  203.038737][   T13] Modules linked in:
[  203.041094][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  203.045679][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  203.050306][   T13] Workqueue: netns cleanup_net
[  203.052992][   T13] RIP: 0010:xfrm_state_fini+0x289/0x2f0
[  203.055388][   T13] Code: 41 5f 5d e9 a9 a3 e1 f7 e8 74 77 9d f7 90 0f 0b 90 e9 fd fd ff ff e8 66 77 9d f7 90 0f 0b 90 e9 60 fe ff ff e8 58 77 9d f7 90 <0f> 0b 90 43 80 3c 2c 00 0f 85 c7 fe ff ff e9 ca fe ff ff e8 3f 77
[  203.064577][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  203.067445][   T13] RAX: ffffffff8a223438 RBX: ffff88811d30a440 RCX: ffff88801c2e8000
SYZFAIL: failed to recv rpc
[  203.070690][   T13] RDX: 0000000000000000 RSI: ffffffff8d9b77e3 RDI: ffffffff8be33680
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  203.074102][   T13] RBP: 0000000000000040 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  203.077297][   T13] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: 1ffff11023a6171c
[  203.080434][   T13] R13: dffffc0000000000 R14: ffff88811d30b8e0 R15: ffff888107519380
[  203.083608][   T13] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  203.086996][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  203.089513][   T13] CR2: 00005590a331b000 CR3: 000000010bdb4000 CR4: 00000000000006f0
[  203.092907][   T13] Call Trace:
[  203.094252][   T13]  <TASK>
[  203.095444][   T13]  xfrm_net_exit+0x2d/0x70
[  203.097211][   T13]  ops_undo_list+0x49a/0x990
[  203.099105][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  203.101234][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  203.103286][   T13]  cleanup_net+0x4c5/0x800
[  203.105089][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  203.107093][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.109163][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  203.111615][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  203.113908][   T13]  process_scheduled_works+0xae1/0x17b0
[  203.116148][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  203.118562][   T13]  worker_thread+0x8a0/0xda0
[  203.120596][   T13]  kthread+0x711/0x8a0
[  203.122258][   T13]  ? __pfx_worker_thread+0x10/0x10
[  203.124285][   T13]  ? __pfx_kthread+0x10/0x10
[  203.126104][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.128086][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.130107][   T13]  ? __pfx_kthread+0x10/0x10
[  203.132208][   T13]  ret_from_fork+0x3fc/0x770
[  203.134015][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  203.136016][   T13]  ? __switch_to_asm+0x39/0x70
[  203.137853][   T13]  ? __switch_to_asm+0x33/0x70
[  203.139761][   T13]  ? __pfx_kthread+0x10/0x10
[  203.141764][   T13]  ret_from_fork_asm+0x1a/0x30
[  203.143716][   T13]  </TASK>
[  203.144914][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  203.147750][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  203.151413][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  203.155307][   T13] Workqueue: netns cleanup_net
[  203.157133][   T13] Call Trace:
[  203.158413][   T13]  <TASK>
[  203.159604][   T13]  dump_stack_lvl+0x99/0x250
[  203.161438][   T13]  ? __asan_memcpy+0x40/0x70
[  203.163232][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.165232][   T13]  ? __pfx__printk+0x10/0x10
[  203.167074][   T13]  vpanic+0x281/0x750
[  203.168627][   T13]  ? __pfx__printk+0x10/0x10
[  203.170465][   T13]  ? __pfx_vpanic+0x10/0x10
[  203.172243][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  203.174387][   T13]  panic+0xb9/0xc0
[  203.175961][   T13]  ? __pfx_panic+0x10/0x10
[  203.177747][   T13]  __warn+0x31b/0x4b0
[  203.179337][   T13]  ? xfrm_state_fini+0x289/0x2f0
[  203.181316][   T13]  ? xfrm_state_fini+0x289/0x2f0
[  203.183359][   T13]  report_bug+0x2be/0x4f0
[  203.185086][   T13]  ? xfrm_state_fini+0x289/0x2f0
[  203.187034][   T13]  ? xfrm_state_fini+0x289/0x2f0
[  203.188984][   T13]  ? xfrm_state_fini+0x28b/0x2f0
[  203.190990][   T13]  handle_bug+0x84/0x160
[  203.192700][   T13]  exc_invalid_op+0x1a/0x50
[  203.194520][   T13]  asm_exc_invalid_op+0x1a/0x20
[  203.196459][   T13] RIP: 0010:xfrm_state_fini+0x289/0x2f0
[  203.198676][   T13] Code: 41 5f 5d e9 a9 a3 e1 f7 e8 74 77 9d f7 90 0f 0b 90 e9 fd fd ff ff e8 66 77 9d f7 90 0f 0b 90 e9 60 fe ff ff e8 58 77 9d f7 90 <0f> 0b 90 43 80 3c 2c 00 0f 85 c7 fe ff ff e9 ca fe ff ff e8 3f 77
[  203.205713][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  203.208077][   T13] RAX: ffffffff8a223438 RBX: ffff88811d30a440 RCX: ffff88801c2e8000
[  203.211145][   T13] RDX: 0000000000000000 RSI: ffffffff8d9b77e3 RDI: ffffffff8be33680
[  203.214182][   T13] RBP: 0000000000000040 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  203.216989][   T13] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: 1ffff11023a6171c
[  203.219336][   T13] R13: dffffc0000000000 R14: ffff88811d30b8e0 R15: ffff888107519380
[  203.222167][   T13]  ? xfrm_state_fini+0x288/0x2f0
[  203.224119][   T13]  ? xfrm_state_fini+0x288/0x2f0
[  203.226076][   T13]  xfrm_net_exit+0x2d/0x70
[  203.227837][   T13]  ops_undo_list+0x49a/0x990
[  203.229640][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  203.231691][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  203.233678][   T13]  cleanup_net+0x4c5/0x800
[  203.235389][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  203.237289][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.239305][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  203.241481][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  203.243571][   T13]  process_scheduled_works+0xae1/0x17b0
[  203.245762][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  203.248158][   T13]  worker_thread+0x8a0/0xda0
[  203.250002][   T13]  kthread+0x711/0x8a0
[  203.251672][   T13]  ? __pfx_worker_thread+0x10/0x10
[  203.253696][   T13]  ? __pfx_kthread+0x10/0x10
[  203.255444][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.257445][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.259397][   T13]  ? __pfx_kthread+0x10/0x10
[  203.261176][   T13]  ret_from_fork+0x3fc/0x770
[  203.262894][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  203.264922][   T13]  ? __switch_to_asm+0x39/0x70
[  203.266814][   T13]  ? __switch_to_asm+0x33/0x70
[  203.268622][   T13]  ? __pfx_kthread+0x10/0x10
[  203.270404][   T13]  ret_from_fork_asm+0x1a/0x30
[  203.272278][   T13]  </TASK>
[  203.274194][   T13] Kernel Offset: disabled
[  203.275913][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:59:05  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107030
R8 =ffff888107c48237 R9 =1ffff11020f89046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8f4 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005590a331b000 CR3=000000010bdb4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f026ac12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000202 RCX=19f1873f55697500 RDX=0000000000000003
RSI=ffffffff8dba6cac RDI=ffffffff8be33680 RBP=ffff888028770b68 RSP=ffffc90002ebf5b0
R8 =0000000000000022 R9 =ffffffff8172c195 R10=ffffc90002ebf738 R11=ffffffff81ac3820
R12=0000000000000003 R13=0000000000000003 R14=ffffffff8e139ee0 R15=ffff888028770000
RIP=ffffffff819d6e42 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555680f6500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc509918590 CR3=000000003c31e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffffffff00000000 XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc509a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
