last executing test programs:

4.275745787s ago: executing program 1 (id=471):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
unshare(0x22020400)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000200)=r0)

4.213193511s ago: executing program 1 (id=472):
syz_usb_connect(0x2, 0x24, &(0x7f0000002540)={{0x12, 0x1, 0x300, 0x88, 0xf7, 0x4e, 0x40, 0x458, 0x7005, 0xb97d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3b, 0x0, 0x5, [{{0x9, 0x4, 0xfa, 0x7, 0x0, 0xa4, 0xd3, 0x4e, 0xfc}}]}}]}}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0})

2.969038328s ago: executing program 1 (id=481):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800088, &(0x7f0000000200)={[{@nobarrier}, {@gid={'gid', 0x3d, 0xee00}}, {}, {@gid}, {@creator={'creator', 0x3d, "38df0562"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-9'}}]}, 0x44, 0x6f7, &(0x7f00000010c0)="$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")
llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

2.88664131s ago: executing program 1 (id=483):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
mknod$loop(&(0x7f0000000000)='./bus\x00', 0x0, 0x1)
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100))

2.466713397s ago: executing program 1 (id=488):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)=""/4073, 0xfe9}, {0x0}], 0x2}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES64=r3, @ANYBLOB], 0x20)
getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000001200), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2404c010)

1.792326529s ago: executing program 1 (id=490):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000003040)="f9", 0x1}], 0x1}}], 0x2, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={r2, 0x47, 0x6}, 0xc)

1.671450511s ago: executing program 32 (id=490):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000003040)="f9", 0x1}], 0x1}}], 0x2, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={r2, 0x47, 0x6}, 0xc)

1.585010936s ago: executing program 0 (id=492):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000400)=@ethtool_sfeatures={0x3b, 0x2, [{0x7ad8, 0xfffffffb}, {0xfffffffc, 0x80003}]}})

1.35859706s ago: executing program 0 (id=495):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240))

1.273507758s ago: executing program 0 (id=496):
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000200), 0x4, r1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r3], &(0x7f0000000200), &(0x7f0000000580)=[r2], &(0x7f0000000040)})

1.209091864s ago: executing program 0 (id=497):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2)

847.977216ms ago: executing program 2 (id=502):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @ib={0x1b, 0x3, 0x8, {"f2519f1f55bd64cd70b1f5350da46002"}, 0x9, 0x8, 0x9}, @in={0x2, 0x4e22, @local}}}, 0x118)

846.504845ms ago: executing program 0 (id=503):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
read(r0, &(0x7f0000000280)=""/149, 0x95)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x38305542, 0xeb, 0x0, 0x3136564e, [0xfffffffb], [0x7b5], 0x1}})

789.752328ms ago: executing program 2 (id=504):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)

693.094962ms ago: executing program 2 (id=505):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1, 0x1}, 0xa, 0x0, 0x4, 0x0, "b400000500"}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0)

583.479714ms ago: executing program 0 (id=506):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

449.531132ms ago: executing program 2 (id=507):
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

81.440085ms ago: executing program 2 (id=508):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

0s ago: executing program 2 (id=509):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0xfffffffd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x4, 0xa}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9296' (ED25519) to the list of known hosts.
syzkaller login: [   40.851474][ T5784] cgroup: Unknown subsys name 'net'
[   41.014296][ T5784] cgroup: Unknown subsys name 'cpuset'
[   41.018409][ T5784] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.388666][ T5784] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.722842][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.725459][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.728093][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.732806][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.742051][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.748645][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.750902][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.751342][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.757494][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.758010][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.760381][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.767173][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.767259][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.773050][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.778576][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.905807][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   45.921559][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   45.959939][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.962403][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.964893][ T5850] bridge_slave_0: entered allmulticast mode
[   45.967236][ T5850] bridge_slave_0: entered promiscuous mode
[   45.977944][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   45.983098][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.985918][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.988910][ T5850] bridge_slave_1: entered allmulticast mode
[   45.991641][ T5850] bridge_slave_1: entered promiscuous mode
[   46.054053][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.067754][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.080594][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.083988][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.087209][ T5841] bridge_slave_0: entered allmulticast mode
[   46.090378][ T5841] bridge_slave_0: entered promiscuous mode
[   46.116050][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.119101][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.123190][ T5841] bridge_slave_1: entered allmulticast mode
[   46.126451][ T5841] bridge_slave_1: entered promiscuous mode
[   46.147915][ T5850] team0: Port device team_slave_0 added
[   46.150997][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.154334][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.156926][ T5845] bridge_slave_0: entered allmulticast mode
[   46.160065][ T5845] bridge_slave_0: entered promiscuous mode
[   46.168510][ T5850] team0: Port device team_slave_1 added
[   46.171100][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.174678][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.177119][ T5845] bridge_slave_1: entered allmulticast mode
[   46.179901][ T5845] bridge_slave_1: entered promiscuous mode
[   46.183397][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.204766][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.209406][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.228103][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.231629][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.236636][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.245499][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.250599][ T5841] team0: Port device team_slave_0 added
[   46.261123][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.264062][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.273264][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.278411][ T5841] team0: Port device team_slave_1 added
[   46.283884][ T5845] team0: Port device team_slave_0 added
[   46.293313][ T5845] team0: Port device team_slave_1 added
[   46.296517][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.298835][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.308289][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.319013][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.321700][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.331559][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.351446][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.354111][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.363842][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.372554][ T5850] hsr_slave_0: entered promiscuous mode
[   46.375052][ T5850] hsr_slave_1: entered promiscuous mode
[   46.377902][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.380830][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.390431][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.418640][ T5845] hsr_slave_0: entered promiscuous mode
[   46.420975][ T5845] hsr_slave_1: entered promiscuous mode
[   46.423415][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   46.425277][ T5845] Cannot create hsr debugfs directory
[   46.440328][ T5841] hsr_slave_0: entered promiscuous mode
[   46.442900][ T5841] hsr_slave_1: entered promiscuous mode
[   46.445046][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   46.447133][ T5841] Cannot create hsr debugfs directory
[   46.572464][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.576954][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.584458][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.589455][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.594063][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.598862][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.606256][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.610641][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.635435][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.642999][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.648229][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.654359][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.665069][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.667446][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.670303][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.673344][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.680528][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.683390][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.686390][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.689379][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.717443][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.719833][ T5841] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.722858][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.725340][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.742933][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.757908][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.761354][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.766282][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.769649][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.774505][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.778244][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.788213][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   46.793842][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.804955][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.808079][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.811843][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.815021][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.839924][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.847580][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   46.857861][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.860254][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.873513][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.876197][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.883900][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   46.896696][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.899341][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.903116][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.905513][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.955556][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.979246][ T5845] veth0_vlan: entered promiscuous mode
[   46.994448][ T5845] veth1_vlan: entered promiscuous mode
[   47.014104][ T5845] veth0_macvtap: entered promiscuous mode
[   47.025616][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.031223][ T5845] veth1_macvtap: entered promiscuous mode
[   47.044785][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.054510][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.065594][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.081643][ T5715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.093093][ T5715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.101766][ T5715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.109052][ T5715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.113698][ T5850] veth0_vlan: entered promiscuous mode
[   47.117840][ T5841] veth0_vlan: entered promiscuous mode
[   47.125179][ T5850] veth1_vlan: entered promiscuous mode
[   47.135528][ T5841] veth1_vlan: entered promiscuous mode
[   47.159361][ T5850] veth0_macvtap: entered promiscuous mode
[   47.164448][ T5850] veth1_macvtap: entered promiscuous mode
[   47.167108][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.169643][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.190741][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.197884][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.201103][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.204752][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.209430][ T5841] veth0_macvtap: entered promiscuous mode
[   47.217589][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.221092][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.225214][ T5841] veth1_macvtap: entered promiscuous mode
[   47.228439][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.240843][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.255109][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.277472][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.289234][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.292748][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.300375][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.309779][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.314040][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.317214][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.320341][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.343156][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.346879][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.386667][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.390344][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.413008][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.416191][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.466086][ T5919] loop2: detected capacity change from 0 to 512
[   47.492896][ T5919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.497368][ T5919] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.732236][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   47.772193][ T5843] Bluetooth: hci0: command tx timeout
[   47.852669][ T5847] Bluetooth: hci2: command tx timeout
[   47.852722][ T5843] Bluetooth: hci1: command tx timeout
[   47.873806][ T5933] loop0: detected capacity change from 0 to 32768
[   47.888420][ T5933] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section journal: journal bucket 128 past end of device (nbuckets 128)
[   47.888420][ T5933] journal (size 32):
[   47.888420][ T5933] Buckets:  9 7 128
[   47.888420][ T5933] 
[   47.898139][ T5933] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[   47.904252][   T24] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[   47.910758][   T24] usb 2-1: config 0 has no interface number 0
[   47.917259][   T24] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[   47.930361][   T24] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   47.943623][   T24] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   47.955765][   T24] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   47.966440][   T24] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   47.974274][   T24] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[   47.978078][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.981504][   T24] usb 2-1: Product: syz
[   47.983402][   T24] usb 2-1: Manufacturer: syz
[   47.985416][   T24] usb 2-1: SerialNumber: syz
[   47.989337][   T24] usb 2-1: config 0 descriptor??
[   47.992795][ T5928] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   47.997627][   T24] iguanair 2-1:0.255: probe with driver iguanair failed with error -12
[   48.073824][ T5935] delete_channel: no stack
[   48.245465][   T24] usb 2-1: USB disconnect, device number 2
[   48.501232][ T5948] vlan0: entered promiscuous mode
[   48.609361][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.636519][ T5954] netlink: 156 bytes leftover after parsing attributes in process `syz.2.20'.
[   48.690376][   T33] audit: type=1326 audit(1755785888.992:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.2.25" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a1418ebe9 code=0x0
[   48.691267][ T5964] loop0: detected capacity change from 0 to 256
[   48.705547][ T5964] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d)
[   48.709910][ T5964] exFAT-fs (loop0): failed to load alloc-bitmap
[   48.712784][ T5964] exFAT-fs (loop0): failed to recognize exfat type
[   48.737494][ T5966] loop0: detected capacity change from 0 to 512
[   48.740740][ T5966] =======================================================
[   48.740740][ T5966] WARNING: The mand mount option has been deprecated and
[   48.740740][ T5966]          and is ignored by this kernel. Remove the mand
[   48.740740][ T5966]          option from the mount to silence this warning.
[   48.740740][ T5966] =======================================================
[   48.757643][ T5966] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   48.769328][ T5966] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   48.781861][ T5966] EXT4-fs (loop0): 1 truncate cleaned up
[   48.784495][ T5966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.791750][ T5966] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.0.26: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   48.800860][ T5966] EXT4-fs (loop0): Remounting filesystem read-only
[   48.818857][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.841460][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'.
[   48.845910][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'.
[   48.849607][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'.
[   48.881195][ T5978] IPVS: Error connecting to the multicast addr
[   49.332194][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   49.492121][   T24] usb 2-1: Using ep0 maxpacket: 32
[   49.495354][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[   49.498766][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[   49.504531][   T24] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[   49.507598][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.510448][   T24] usb 2-1: Product: syz
[   49.512262][   T24] usb 2-1: Manufacturer: syz
[   49.514132][   T24] usb 2-1: SerialNumber: syz
[   49.516980][   T24] usb 2-1: config 0 descriptor??
[   49.520814][   T24] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5
[   49.527435][   T24] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90
[   49.538917][   T24] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -90
[   49.724572][ T5873] usb 2-1: USB disconnect, device number 3
[   49.807943][ T6022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.49'.
[   49.852138][ T5843] Bluetooth: hci0: command tx timeout
[   49.932124][ T5843] Bluetooth: hci1: command tx timeout
[   49.932483][ T5847] Bluetooth: hci2: command tx timeout
[   50.032121][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   50.192087][   T24] usb 3-1: Using ep0 maxpacket: 16
[   50.196706][   T24] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[   50.200068][   T24] usb 3-1: config 0 has no interface number 0
[   50.203058][   T24] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[   50.207186][   T24] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   50.213223][   T24] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   50.216880][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.220164][   T24] usb 3-1: Product: syz
[   50.221926][   T24] usb 3-1: Manufacturer: syz
[   50.224047][   T24] usb 3-1: SerialNumber: syz
[   50.227130][   T24] usb 3-1: config 0 descriptor??
[   50.232392][ T6020] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   50.235549][ T6020] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   50.246363][ T6030] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[   50.341598][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   50.442765][ T6020] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   50.445505][ T6020] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   50.850070][   T24] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   50.856417][   T24] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[   50.860538][   T24] asix 3-1:0.251: probe with driver asix failed with error -71
[   50.864131][   T24] usb 3-1: USB disconnect, device number 2
[   50.970144][ T6053] loop1: detected capacity change from 0 to 256
[   50.975126][ T6053] exFAT-fs (loop1): error, The cluster chain has a loop
[   50.978159][ T6053] exFAT-fs (loop1): failed to count the number of clusters in root
[   50.981571][ T6053] exFAT-fs (loop1): failed to recognize exfat type
[   51.772255][ T5908] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   51.922095][ T5908] usb 3-1: Using ep0 maxpacket: 32
[   51.925774][ T5908] usb 3-1: config 0 has an invalid interface number: 73 but max is 0
[   51.928782][ T5908] usb 3-1: config 0 has no interface number 0
[   51.931113][ T5908] usb 3-1: too many endpoints for config 0 interface 73 altsetting 118: 194, using maximum allowed: 30
[   51.932367][ T5847] Bluetooth: hci0: command tx timeout
[   51.935166][ T5908] usb 3-1: config 0 interface 73 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 194
[   51.943328][ T5908] usb 3-1: config 0 interface 73 has no altsetting 0
[   51.948116][ T5908] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   51.951919][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.955890][ T5908] usb 3-1: Product: syz
[   51.957360][ T5908] usb 3-1: Manufacturer: syz
[   51.959236][ T5908] usb 3-1: SerialNumber: syz
[   51.964196][ T5908] usb 3-1: config 0 descriptor??
[   52.012833][ T5847] Bluetooth: hci2: command tx timeout
[   52.022097][ T5847] Bluetooth: hci1: command tx timeout
[   52.177881][ T5908] gspca_main: stk1135-2.14.0 probing 174f:6a31
[   52.180793][ T5908] gspca_stk1135: reg_w 0x2 err -71
[   52.185017][ T5908] gspca_stk1135: serial bus timeout: status=0x00
[   52.187536][ T5908] gspca_stk1135: Sensor write failed
[   52.189672][ T5908] gspca_stk1135: serial bus timeout: status=0x00
[   52.192709][ T5908] gspca_stk1135: Sensor write failed
[   52.194505][ T5908] gspca_stk1135: serial bus timeout: status=0x00
[   52.197007][ T5908] gspca_stk1135: Sensor read failed
[   52.198825][ T5908] gspca_stk1135: serial bus timeout: status=0x00
[   52.200855][ T5908] gspca_stk1135: Sensor read failed
[   52.202731][ T5908] gspca_stk1135: Detected sensor type unknown (0x0)
[   52.209507][ T5908] gspca_stk1135: serial bus timeout: status=0x00
[   52.211615][ T5908] gspca_stk1135: Sensor read failed
[   52.213912][ T5908] gspca_stk1135: serial bus timeout: status=0x00
[   52.216072][ T5908] gspca_stk1135: Sensor read failed
[   52.217697][ T5908] gspca_stk1135: serial bus timeout: status=0x00
[   52.220087][ T5908] gspca_stk1135: Sensor write failed
[   52.221849][ T5908] gspca_stk1135: serial bus timeout: status=0x00
[   52.224902][ T5908] gspca_stk1135: Sensor write failed
[   52.226748][ T5908] stk1135 3-1:0.73: probe with driver stk1135 failed with error -71
[   52.230204][ T5908] usb 3-1: USB disconnect, device number 3
[   52.462096][   T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   52.612225][   T24] usb 2-1: Using ep0 maxpacket: 16
[   52.616103][   T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.620829][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[   52.624230][   T24] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   52.628580][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.633342][   T24] usb 2-1: config 0 descriptor??
[   53.044641][   T24] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[   53.072173][ T5873] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   53.222058][ T5873] usb 3-1: Using ep0 maxpacket: 16
[   53.234953][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   53.239682][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   53.257527][ T5873] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   53.261276][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.265892][ T5873] usb 3-1: Product: syz
[   53.267882][ T5873] usb 3-1: Manufacturer: syz
[   53.269663][ T5873] usb 3-1: SerialNumber: syz
[   53.271902][ T5873] usb 3-1: config 0 descriptor??
[   53.275847][ T5873] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   53.279290][ T5873] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[   53.503748][   T24] usb 2-1: USB disconnect, device number 4
[   53.639167][ T6133] loop0: detected capacity change from 0 to 40427
[   53.642936][ T6133] F2FS-fs: heap/no_heap options were deprecated
[   53.645417][ T6133] F2FS-fs (loop0): Image doesn't support compression
[   53.648719][ T6133] F2FS-fs (loop0): invalid crc value
[   53.665692][ T6133] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   53.669632][ T6133] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   53.695635][ T5845] syz-executor: attempt to access beyond end of device
[   53.695635][ T5845] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   53.700492][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   53.700503][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   53.700507][ T5845] Call Trace:
[   53.700510][ T5845]  <TASK>
[   53.700513][ T5845]  dump_stack_lvl+0x189/0x250
[   53.700526][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[   53.700534][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[   53.700542][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   53.700562][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   53.700573][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[   53.700584][ T5845]  f2fs_write_end_io+0x886/0xb60
[   53.700594][ T5845]  __submit_merged_bio+0x27a/0x6a0
[   53.700604][ T5845]  __submit_merged_write_cond+0x255/0x530
[   53.700613][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[   53.700623][ T5845]  ? arch_stack_walk+0xfc/0x150
[   53.700636][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   53.700670][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   53.700680][ T5845]  ? rcu_is_watching+0x15/0xb0
[   53.700693][ T5845]  ? folios_put_refs+0x559/0x640
[   53.700702][ T5845]  ? __pfx_folios_put_refs+0x10/0x10
[   53.700709][ T5845]  ? rcu_is_watching+0x15/0xb0
[   53.700715][ T5845]  ? lru_add+0xa2f/0xd80
[   53.700722][ T5845]  ? lru_add+0x198/0xd80
[   53.700729][ T5845]  ? do_raw_spin_lock+0x121/0x290
[   53.700739][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   53.700752][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   53.700762][ T5845]  do_writepages+0x32e/0x550
[   53.700771][ T5845]  ? rcu_is_watching+0x15/0xb0
[   53.700778][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   53.700787][ T5845]  filemap_fdatawrite+0x199/0x240
[   53.700797][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   53.700811][ T5845]  ? rcu_is_watching+0x15/0xb0
[   53.700818][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   53.700826][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[   53.700835][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[   53.700845][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   53.700858][ T5845]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   53.700864][ T5845]  ? kfree+0x18e/0x440
[   53.700873][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[   53.700880][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[   53.700887][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[   53.700893][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[   53.700904][ T5845]  ? shrinker_free+0x2ce/0x3e0
[   53.700912][ T5845]  deactivate_locked_super+0xbc/0x130
[   53.700920][ T5845]  cleanup_mnt+0x425/0x4c0
[   53.700929][ T5845]  task_work_run+0x1d4/0x260
[   53.700938][ T5845]  ? __pfx_task_work_run+0x10/0x10
[   53.700947][ T5845]  ? __x64_sys_umount+0x122/0x160
[   53.700955][ T5845]  ? __pfx___x64_sys_umount+0x10/0x10
[   53.700964][ T5845]  ? rcu_is_watching+0x15/0xb0
[   53.700971][ T5845]  exit_to_user_mode_loop+0xec/0x110
[   53.700981][ T5845]  do_syscall_64+0x2bd/0x3b0
[   53.700990][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.700997][ T5845]  ? exc_page_fault+0x9f/0xf0
[   53.701006][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.701012][ T5845] RIP: 0033:0x7f1904d8ff17
[   53.701019][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   53.701025][ T5845] RSP: 002b:00007ffe21930588 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   53.701033][ T5845] RAX: 0000000000000000 RBX: 00007f1904e11c05 RCX: 00007f1904d8ff17
[   53.701038][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe21930640
[   53.701043][ T5845] RBP: 00007ffe21930640 R08: 0000000000000000 R09: 0000000000000000
[   53.701047][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe219316d0
[   53.701051][ T5845] R13: 00007f1904e11c05 R14: 000000000000d13e R15: 00007ffe21931710
[   53.701059][ T5845]  </TASK>
[   53.701062][ T5845] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   53.878240][ T5873] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[   53.883738][ T5873] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[   53.930515][ T6137] loop0: detected capacity change from 0 to 128
[   53.933430][ T6137] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   53.937473][ T6137] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   53.975317][ T6141] netlink: 348 bytes leftover after parsing attributes in process `syz.0.104'.
[   54.012554][ T5847] Bluetooth: hci0: command tx timeout
[   54.092086][ T5847] Bluetooth: hci1: command tx timeout
[   54.092128][ T5843] Bluetooth: hci2: command tx timeout
[   54.892575][ T5873] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe
[   55.093543][ T5873] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[   55.097292][ T5873] em28xx 3-1:0.0: couldn't setup AC97 register 2
[   55.100730][ T5873] em28xx 3-1:0.0: couldn't setup AC97 register 4
[   55.104343][ T5873] em28xx 3-1:0.0: couldn't setup AC97 register 6
[   55.107305][ T5873] em28xx 3-1:0.0: couldn't setup AC97 register 54
[   55.110414][ T5873] em28xx 3-1:0.0: couldn't setup AC97 register 56
[   55.117647][ T5873] usb 3-1: USB disconnect, device number 4
[   55.201077][ T6167] loop0: detected capacity change from 0 to 128
[   55.470568][ T6181] warning: `syz.1.120' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.639277][ T6187] loop2: detected capacity change from 0 to 128
[   55.647930][ T6187] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   55.653555][ T6187] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   55.719193][ T5850] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   55.754323][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   55.778991][ T6197] loop2: detected capacity change from 0 to 8
[   55.785206][ T6197] SQUASHFS error: lzo decompression failed, data probably corrupt
[   55.789130][ T6197] SQUASHFS error: Failed to read block 0x91: -5
[   55.793275][ T6197] SQUASHFS error: Unable to read metadata cache entry [8f]
[   55.796357][ T6197] SQUASHFS error: Unable to read inode 0x11f
[   55.856191][ T6202] netlink: 'syz.2.129': attribute type 9 has an invalid length.
[   55.934932][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.938723][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.942355][   T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   55.945597][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.953876][   T24] usb 2-1: config 0 descriptor??
[   56.036848][ T6212] loop0: detected capacity change from 0 to 1024
[   56.055849][ T6212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   56.060827][ T6212] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.081304][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   56.172078][ T5843] Bluetooth: hci2: command tx timeout
[   56.458279][   T24] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[   56.658390][   T24] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00
[   56.779881][ T6220] loop2: detected capacity change from 0 to 512
[   56.805762][ T6220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.810685][ T6220] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   56.832759][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.894276][ T6226] loop2: detected capacity change from 0 to 512
[   57.467397][ T5913] usb 2-1: USB disconnect, device number 5
[   57.964507][ T6239] netlink: 'syz.0.143': attribute type 1 has an invalid length.
[   57.990207][ T6239] gretap1: entered promiscuous mode
[   57.998202][ T6239] bond2: (slave gretap1): making interface the new active one
[   58.002669][ T6239] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   58.014490][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.143'.
[   58.018985][ T6239] 8021q: adding VLAN 0 to HW filter on device bond2
[   58.060430][ T6246] netlink: 52 bytes leftover after parsing attributes in process `syz.0.146'.
[   58.064389][ T6246] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   58.272074][ T5913] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   58.432070][ T5913] usb 2-1: Using ep0 maxpacket: 32
[   58.436327][ T5913] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[   58.440149][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.444517][ T5913] usb 2-1: config 0 descriptor??
[   58.451507][ T5913] gspca_main: nw80x-2.14.0 probing 055f:d001
[   58.655407][ T5913] gspca_nw80x: reg_w err -71
[   58.657567][ T5913] nw80x 2-1:0.0: probe with driver nw80x failed with error -71
[   58.662298][ T5913] usb 2-1: USB disconnect, device number 6
[   58.915879][ T6260] xt_socket: unknown flags 0xd0
[   59.179988][ T6282] netlink: 'syz.1.164': attribute type 153 has an invalid length.
[   59.598748][ T6288] loop1: detected capacity change from 0 to 1024
[   59.628226][ T6290] ALSA: mixer_oss: invalid OSS volume 'LI'
[   61.000041][ T6310] process 'syz.2.175' launched './file0' with NULL argv: empty string added
[   61.694462][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.181'.
[   61.729292][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.181'.
[   61.762069][ T5913] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   61.942441][ T5913] usb 2-1: Using ep0 maxpacket: 32
[   61.946754][ T5913] usb 2-1: config 186 has an invalid interface number: 85 but max is 0
[   61.950271][ T5913] usb 2-1: config 186 has no interface number 0
[   61.953254][ T5913] usb 2-1: config 186 interface 85 has no altsetting 0
[   61.958075][ T5913] usb 2-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice=bb.43
[   61.961828][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.965452][ T5913] usb 2-1: Product: syz
[   61.967323][ T5913] usb 2-1: Manufacturer: syz
[   61.969305][ T5913] usb 2-1: SerialNumber: syz
[   62.188818][ T5913] usb 2-1: can't set first interface for hiFace device.
[   62.191788][ T5913] snd-usb-hiface 2-1:186.85: probe with driver snd-usb-hiface failed with error -5
[   62.199989][ T5913] usb 2-1: USB disconnect, device number 7
[   62.205386][ T6330] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.371145][ T6338] loop0: detected capacity change from 0 to 512
[   62.373948][ T6338] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   62.388847][ T6338] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   62.397513][ T6338] EXT4-fs (loop0): 1 truncate cleaned up
[   62.400130][ T6338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.421435][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.459922][ T6342] loop0: detected capacity change from 0 to 1024
[   62.465495][ T6342] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (61418!=35945)
[   62.468930][ T6342] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   62.476514][ T6342] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   62.479574][ T6342] EXT4-fs (loop0): orphan cleanup on readonly fs
[   62.481776][ T6342] EXT4-fs error (device loop0): ext4_quota_enable:7128: inode #3: comm syz.0.188: iget: bad i_size value: 1407374883559424
[   62.488023][ T6342] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.188: Bad quota inode: 3, type: 0
[   62.493639][ T6342] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   62.499543][ T6342] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   62.503402][ T6342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   62.515460][ T6342] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (61418!=35945)
[   62.531391][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.758239][ T6347] loop0: detected capacity change from 0 to 32768
[   62.770603][ T6347] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.190 (6347)
[   62.791732][ T6357] ipip0: entered promiscuous mode
[   62.794793][ T6347] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   62.799130][ T6347] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   62.804029][ T6347] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   62.838636][ T6370] bridge0: entered allmulticast mode
[   62.843019][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'.
[   62.844421][ T6347] BTRFS info (device loop0): rebuilding free space tree
[   62.849220][ T6370] bridge_slave_1: left allmulticast mode
[   62.850719][ T6347] BTRFS info (device loop0): disabling free space tree
[   62.854474][ T6347] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   62.854994][ T6370] bridge_slave_1: left promiscuous mode
[   62.857595][ T6347] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   62.858996][ T6347] BTRFS info (device loop0): setting nodatasum
[   62.864438][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.865907][ T6347] BTRFS info (device loop0): setting nodatacow
[   62.870669][ T6347] BTRFS info (device loop0): enabling ssd optimizations
[   62.875296][ T6347] BTRFS info (device loop0): turning off barriers
[   62.877964][ T6347] BTRFS info (device loop0): turning on flush-on-commit
[   62.878323][ T6370] bridge_slave_0: left allmulticast mode
[   62.880796][ T6347] BTRFS info (device loop0): enabling disk space caching
[   62.880810][ T6347] BTRFS info (device loop0): force clearing of disk cache
[   62.880820][ T6347] BTRFS info (device loop0): doing ref verification
[   62.880830][ T6347] BTRFS info (device loop0): max_inline set to 4096
[   62.908485][ T6370] bridge_slave_0: left promiscuous mode
[   62.910762][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.916975][ T6370] bridge0 (unregistering): left allmulticast mode
[   62.926006][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   63.071425][ T6386] loop1: detected capacity change from 0 to 1024
[   63.077806][ T6386] hfsplus: extend alloc file! (8192,8,110)
[   64.274703][ T6415] mmap: syz.1.215 (6415) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   64.318935][ T6417] Illegal XDP return value 3975937411 on prog  (id 16) dev N/A, expect packet loss!
[   64.416849][ T6425] netlink: 'syz.1.220': attribute type 1 has an invalid length.
[   64.481293][ T6431] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   64.507352][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[   64.511197][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.224'.
[   64.578820][ T6437] loop1: detected capacity change from 0 to 4096
[   64.581895][ T6437] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.603903][ T6437] EXT4-fs (loop1): Test dummy encryption mode enabled
[   64.631713][ T6437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.681873][ T6437] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   64.691040][ T6437] futex_wake_op: syz.1.226 tries to shift op by -1; fix this program
[   64.718931][ T6429] loop0: detected capacity change from 0 to 32768
[   64.732731][ T6429] XFS: attr2 mount option is deprecated.
[   64.735062][ T6429] XFS: attr2 mount option is deprecated.
[   64.751178][ T6429] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[   64.780380][ T5845] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   64.939028][ T6471] loop2: detected capacity change from 0 to 4096
[   64.953903][ T6471] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   64.971178][ T6471] ntfs3(loop2): $Secure::$SII is corrupted.
[   64.974663][ T6471] ntfs3(loop2): Failed to initialize $Secure (-22).
[   65.069458][ T6479] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[   65.194791][ T6481] loop2: detected capacity change from 0 to 32768
[   65.200685][ T6481] btrfs: Deprecated parameter 'usebackuproot'
[   65.203289][ T6481] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   65.207106][ T6481] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.241 (6481)
[   65.215874][ T6481] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   65.220071][ T6481] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   65.250008][   T26] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   65.254806][ T6481] BTRFS error (device loop2): failed to load root extent
[   65.257441][ T6481] BTRFS warning (device loop2): try to load backup roots slot 1
[   65.260477][ T4027] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   65.266452][ T6481] BTRFS warning (device loop2): couldn't read tree root
[   65.269488][ T6481] BTRFS warning (device loop2): try to load backup roots slot 2
[   65.272972][ T4027] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   65.277355][ T6481] BTRFS warning (device loop2): couldn't read tree root
[   65.280220][ T6481] BTRFS warning (device loop2): try to load backup roots slot 3
[   65.288428][ T6481] BTRFS info (device loop2): rebuilding free space tree
[   65.295018][ T6481] BTRFS info (device loop2): checking UUID tree
[   65.298156][ T6481] BTRFS info (device loop2): setting nodatasum
[   65.300763][ T6481] BTRFS info (device loop2): setting nodatacow
[   65.304080][ T6481] BTRFS info (device loop2): enabling ssd optimizations
[   65.307009][ T6481] BTRFS info (device loop2): turning off barriers
[   65.309766][ T6481] BTRFS info (device loop2): turning on sync discard
[   65.312740][ T6481] BTRFS info (device loop2): enabling free space tree
[   65.315559][ T6481] BTRFS info (device loop2): force clearing of disk cache
[   65.318472][ T6481] BTRFS info (device loop2): trying to use backup root at mount time
[   65.321889][ T6481] BTRFS info (device loop2): max_inline set to 0
[   65.338038][   T33] audit: type=1800 audit(1755785905.642:3): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.241" name="file1" dev="loop2" ino=257 res=0 errno=0
[   65.346182][ T6481] BTRFS info (device loop2 state M): max_inline set to 0
[   65.414076][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.512520][ T6503] netlink: 'syz.1.243': attribute type 5 has an invalid length.
[   65.557341][ T5850] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   65.693923][ T6515] loop2: detected capacity change from 0 to 512
[   65.697368][ T6515] EXT4-fs: Ignoring removed oldalloc option
[   65.705222][ T6515] EXT4-fs (loop2): 1 truncate cleaned up
[   65.707856][ T6515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.825338][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.872716][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   66.032139][   T10] usb 2-1: Using ep0 maxpacket: 16
[   66.035197][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   66.038079][   T10] usb 2-1: config 0 has no interface number 0
[   66.042187][   T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   66.045111][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.047613][   T10] usb 2-1: Product: syz
[   66.048974][   T10] usb 2-1: Manufacturer: syz
[   66.050561][   T10] usb 2-1: SerialNumber: syz
[   66.053642][   T10] usb 2-1: config 0 descriptor??
[   66.056755][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   66.092162][ T5913] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   66.242184][ T5913] usb 3-1: Using ep0 maxpacket: 8
[   66.245644][ T5913] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[   66.248539][ T5913] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[   66.251631][ T5913] usb 3-1: config 0 has no interface number 0
[   66.253958][ T5913] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   66.260535][ T5913] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   66.264644][ T5913] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   66.269306][ T5913] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[   66.273831][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[   66.276737][ T5913] usb 3-1: Product: syz
[   66.279653][ T5913] usb 3-1: config 0 descriptor??
[   66.281883][ T6518] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   66.892958][ T5913] usb 3-1: USB disconnect, device number 5
[   67.267448][   T10] gspca_spca1528: reg_w err -71
[   67.269135][   T10] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[   67.273399][   T10] usb 2-1: USB disconnect, device number 8
[   67.427000][ T6522] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   67.429412][ T6522] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   67.448070][ T6524] loop2: detected capacity change from 0 to 1024
[   67.450832][ T6524] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   67.456698][ T6524] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869)
[   67.460542][ T6524] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   67.465480][ T6524] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #5: comm syz.2.252: unexpected bad inode w/o EXT4_IGET_BAD
[   67.470266][ T6524] EXT4-fs (loop2): no journal found
[   67.472403][ T6524] EXT4-fs (loop2): can't get journal size
[   67.475654][ T6524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   67.489598][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.621868][ T6529] loop2: detected capacity change from 0 to 32768
[   67.630380][ T6529] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   67.641124][ T6529] XFS (loop2): Ending clean mount
[   67.644098][ T6529] XFS (loop2): Quotacheck needed: Please wait.
[   67.649236][ T6529] XFS (loop2): Quotacheck: Done.
[   67.663606][ T5850] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   67.722482][ T6539] veth0: entered promiscuous mode
[   67.725100][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'.
[   67.843178][ T6547] loop1: detected capacity change from 0 to 4096
[   67.964182][ T6558] loop1: detected capacity change from 0 to 4096
[   67.967342][ T6558] EXT4-fs: Ignoring removed mblk_io_submit option
[   67.990693][ T6558] EXT4-fs (loop1): Test dummy encryption mode enabled
[   68.007389][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'.
[   68.022729][ T6558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.042826][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.104293][ T6573] loop2: detected capacity change from 0 to 2048
[   68.113323][ T6573] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   68.121740][ T6573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   68.249246][ T6582] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   68.252223][ T6582] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   68.332148][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   68.353124][ T6588] loop2: detected capacity change from 0 to 1024
[   68.369392][   T33] audit: type=1800 audit(1755785908.672:4): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.278" name="file1" dev="loop2" ino=20 res=0 errno=0
[   68.436794][ T6592] loop2: detected capacity change from 0 to 2048
[   68.466013][ T6592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   68.504711][ T6590] loop0: detected capacity change from 0 to 32768
[   68.511773][ T6590] JBD2: Ignoring recovery information on journal
[   68.530922][ T6590] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   68.547491][   T24] usb 2-1: Using ep0 maxpacket: 32
[   68.565410][   T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.569848][   T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.589693][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[   68.594609][   T24] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[   68.598710][   T24] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[   68.605062][   T24] usb 2-1: Product: syz
[   68.612642][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[   68.618193][   T24] usb 2-1: config 0 descriptor??
[   69.031931][   T24] hid (null): unknown global tag 0xe
[   69.036320][   T24] waterforce 0003:1044:7A4D.0003: unknown global tag 0xe
[   69.040566][   T24] waterforce 0003:1044:7A4D.0003: item 0 2 1 14 parsing failed
[   69.047603][   T24] waterforce 0003:1044:7A4D.0003: hid parse failed with -22
[   69.050900][   T24] waterforce 0003:1044:7A4D.0003: probe with driver waterforce failed with error -22
[   69.230360][ T6638] loop2: detected capacity change from 0 to 128
[   69.247041][   T10] usb 2-1: USB disconnect, device number 9
[   69.833754][ T6649] syz.0.301 uses obsolete (PF_INET,SOCK_PACKET)
[   70.088785][ T6658] loop0: detected capacity change from 0 to 32768
[   70.094792][ T6658] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.304 (6658)
[   70.107055][ T6658] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   70.114592][ T6658] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   70.217696][ T6658] BTRFS info (device loop0): enabling ssd optimizations
[   70.220795][ T6658] BTRFS info (device loop0): enabling free space tree
[   70.225927][ T6686] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.227517][  T792] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   70.235001][ T6658] BTRFS info (device loop0): use lzo compression, level 0
[   70.267008][ T5845] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   70.275656][ T6692] _Z`Ԁ@: entered promiscuous mode
[   70.384725][  T792] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[   70.388746][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.405448][  T792] usb 3-1: config 0 descriptor??
[   70.615259][ T6703] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.315'.
[   70.762802][ T6705] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   70.766505][ T6705] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   70.871329][  T792] hackrf 3-1:0.0: Board ID: 00
[   70.873748][  T792] hackrf 3-1:0.0: Firmware version: 
[   70.878406][  T792] hackrf 3-1:0.0: Registered as swradio24
[   70.887013][  T792] videodev: could not get a free minor
[   70.889055][  T792] hackrf 3-1:0.0: Failed to register as video device (-23)
[   70.897968][  T792] hackrf 3-1:0.0: probe with driver hackrf failed with error -23
[   70.966386][ T6719] netlink: 36 bytes leftover after parsing attributes in process `syz.1.322'.
[   70.970689][ T6719] block nbd0: shutting down sockets
[   71.054609][ T6725] loop1: detected capacity change from 0 to 2048
[   71.074250][ T6725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   71.083465][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.087254][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.090695][  T792] usb 3-1: USB disconnect, device number 6
[   71.094344][ T6725] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   71.100781][ T6725] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   71.106111][ T6725] EXT4-fs (loop1): This should not happen!! Data will be lost
[   71.106111][ T6725] 
[   71.110076][ T6725] EXT4-fs (loop1): Total free blocks count 0
[   71.112636][ T6725] EXT4-fs (loop1): Free/Dirty block details
[   71.115552][ T6725] EXT4-fs (loop1): free_blocks=2415919104
[   71.118467][ T6725] EXT4-fs (loop1): dirty_blocks=32
[   71.120764][ T6725] EXT4-fs (loop1): Block reservation details
[   71.123375][ T6725] EXT4-fs (loop1): i_reserved_data_blocks=2
[   71.137244][   T40] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   71.159730][ T6729] loop1: detected capacity change from 0 to 64
[   71.165713][ T6729] Trying to free block not in datazone
[   71.169462][ T6729] Trying to free block not in datazone
[   71.173249][ T6729] Trying to free block not in datazone
[   71.175918][ T6729] Trying to free block not in datazone
[   71.177724][ T6729] minix_free_inode: bit 5 already cleared
[   71.482954][ T6734] loop0: detected capacity change from 0 to 32768
[   71.503245][ T6738] Bluetooth: MGMT ver 1.23
[   71.524168][ T6734] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   71.543744][ T6734] XFS (loop0): Ending clean mount
[   71.618414][ T5845] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   71.623943][ T6752] netlink: 'syz.1.333': attribute type 1 has an invalid length.
[   71.627142][ T6752] netlink: 56 bytes leftover after parsing attributes in process `syz.1.333'.
[   71.721606][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'.
[   71.732206][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'.
[   71.736373][ T6767] loop1: detected capacity change from 0 to 256
[   71.745174][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'.
[   71.754218][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'.
[   71.762345][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'.
[   71.890884][ T6785] loop0: detected capacity change from 0 to 4096
[   71.901127][ T6785] bond0: Removing last ns target with arp_interval on
[   71.909867][ T6789] loop1: detected capacity change from 0 to 256
[   71.924613][ T6789] FAT-fs (loop1): Directory bread(block 64) failed
[   71.936328][ T6789] FAT-fs (loop1): Directory bread(block 65) failed
[   71.948608][ T6789] FAT-fs (loop1): Directory bread(block 66) failed
[   71.950867][ T6789] FAT-fs (loop1): Directory bread(block 67) failed
[   71.953200][ T6789] FAT-fs (loop1): Directory bread(block 68) failed
[   71.956698][ T6789] FAT-fs (loop1): Directory bread(block 69) failed
[   71.959737][ T6789] FAT-fs (loop1): Directory bread(block 70) failed
[   71.962052][ T6789] FAT-fs (loop1): Directory bread(block 71) failed
[   71.964618][ T6789] FAT-fs (loop1): Directory bread(block 72) failed
[   71.967550][ T6789] FAT-fs (loop1): Directory bread(block 73) failed
[   72.095767][ T6802] loop1: detected capacity change from 0 to 256
[   72.105697][ T6802] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[   72.162382][ T6805] loop1: detected capacity change from 0 to 512
[   72.176862][ T6805] EXT4-fs (loop1): Test dummy encryption mode enabled
[   72.179774][ T6805] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   72.238497][ T6805] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.358: bad orphan inode 131083
[   72.447353][ T6805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.459395][ T6805] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   72.497679][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.714363][ T6810] loop1: detected capacity change from 0 to 40427
[   72.719662][ T6810] F2FS-fs (loop1): build fault injection rate: 14
[   72.722425][ T6810] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[   72.730783][ T6810] F2FS-fs (loop1): invalid crc value
[   72.738953][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   72.746681][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   72.774834][ T6810] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   72.779938][ T6810] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   72.789108][ T6810] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   72.817353][ T6810] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   72.825234][ T6810] F2FS-fs (loop1): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[   72.875408][ T5841] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[   72.880670][ T5841] F2FS-fs (loop1): inconsistent node block, node_type:0, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0]
[   72.887725][    C0] F2FS-fs (loop1): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[   72.892167][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[   72.892182][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.892188][    C0] Call Trace:
[   72.892192][    C0]  <TASK>
[   72.892197][    C0]  dump_stack_lvl+0x189/0x250
[   72.892215][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.892227][    C0]  ? __pfx_queue_work_on+0x10/0x10
[   72.892238][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   72.892252][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   72.892267][    C0]  f2fs_handle_critical_error+0x37c/0x540
[   72.892285][    C0]  f2fs_write_end_io+0x886/0xb60
[   72.892299][    C0]  blk_update_request+0x57e/0xe60
[   72.892316][    C0]  blk_mq_end_request+0x3e/0x70
[   72.892329][    C0]  blk_done_softirq+0x10a/0x160
[   72.892341][    C0]  handle_softirqs+0x286/0x870
[   72.892352][    C0]  ? run_ksoftirqd+0x9b/0x100
[   72.892366][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   72.892375][    C0]  ? schedule+0x91/0x360
[   72.892388][    C0]  ? rcu_is_watching+0x15/0xb0
[   72.892419][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   72.892429][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   72.892440][    C0]  run_ksoftirqd+0x9b/0x100
[   72.892451][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[   72.892495][    C0]  smpboot_thread_fn+0x542/0xa60
[   72.892507][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   72.892520][    C0]  kthread+0x711/0x8a0
[   72.892533][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   72.892544][    C0]  ? __pfx_kthread+0x10/0x10
[   72.892555][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[   72.892569][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.892582][    C0]  ? __pfx_kthread+0x10/0x10
[   72.892595][    C0]  ret_from_fork+0x3fc/0x770
[   72.892606][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   72.892619][    C0]  ? __switch_to_asm+0x39/0x70
[   72.892631][    C0]  ? __switch_to_asm+0x33/0x70
[   72.892644][    C0]  ? __pfx_kthread+0x10/0x10
[   72.892656][    C0]  ret_from_fork_asm+0x1a/0x30
[   72.892673][    C0]  </TASK>
[   72.892701][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   72.971543][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[   72.971553][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.971558][    C0] Call Trace:
[   72.971563][    C0]  <TASK>
[   72.971566][    C0]  dump_stack_lvl+0x189/0x250
[   72.971578][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.971586][    C0]  ? __pfx_queue_work_on+0x10/0x10
[   72.971593][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   72.971602][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   72.971611][    C0]  f2fs_handle_critical_error+0x37c/0x540
[   72.971621][    C0]  f2fs_write_end_io+0x886/0xb60
[   72.971630][    C0]  blk_update_request+0x57e/0xe60
[   72.971640][    C0]  blk_mq_end_request+0x3e/0x70
[   72.971647][    C0]  blk_done_softirq+0x10a/0x160
[   72.971654][    C0]  handle_softirqs+0x286/0x870
[   72.971662][    C0]  ? run_ksoftirqd+0x9b/0x100
[   72.971669][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   72.971674][    C0]  ? schedule+0x91/0x360
[   72.971682][    C0]  ? rcu_is_watching+0x15/0xb0
[   72.971689][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   72.971695][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   72.971700][    C0]  run_ksoftirqd+0x9b/0x100
[   72.971707][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[   72.971715][    C0]  smpboot_thread_fn+0x542/0xa60
[   72.971721][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   72.971727][    C0]  kthread+0x711/0x8a0
[   72.971736][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   72.971747][    C0]  ? __pfx_kthread+0x10/0x10
[   72.971754][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[   72.971761][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.971770][    C0]  ? __pfx_kthread+0x10/0x10
[   72.971777][    C0]  ret_from_fork+0x3fc/0x770
[   72.971784][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   72.971791][    C0]  ? __switch_to_asm+0x39/0x70
[   72.971798][    C0]  ? __switch_to_asm+0x33/0x70
[   72.971806][    C0]  ? __pfx_kthread+0x10/0x10
[   72.971813][    C0]  ret_from_fork_asm+0x1a/0x30
[   72.971823][    C0]  </TASK>
[   72.971826][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   73.048544][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[   73.048559][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.048563][    C0] Call Trace:
[   73.048568][    C0]  <TASK>
[   73.048572][    C0]  dump_stack_lvl+0x189/0x250
[   73.048584][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.048592][    C0]  ? __pfx_queue_work_on+0x10/0x10
[   73.048599][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   73.048608][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.048617][    C0]  f2fs_handle_critical_error+0x37c/0x540
[   73.048627][    C0]  f2fs_write_end_io+0x886/0xb60
[   73.048636][    C0]  blk_update_request+0x57e/0xe60
[   73.048646][    C0]  blk_mq_end_request+0x3e/0x70
[   73.048653][    C0]  blk_done_softirq+0x10a/0x160
[   73.048660][    C0]  handle_softirqs+0x286/0x870
[   73.048667][    C0]  ? run_ksoftirqd+0x9b/0x100
[   73.048675][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   73.048680][    C0]  ? schedule+0x91/0x360
[   73.048687][    C0]  ? rcu_is_watching+0x15/0xb0
[   73.048694][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   73.048701][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   73.048706][    C0]  run_ksoftirqd+0x9b/0x100
[   73.048713][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[   73.048721][    C0]  smpboot_thread_fn+0x542/0xa60
[   73.048727][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   73.048733][    C0]  kthread+0x711/0x8a0
[   73.048742][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   73.048748][    C0]  ? __pfx_kthread+0x10/0x10
[   73.048760][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.048767][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.048776][    C0]  ? __pfx_kthread+0x10/0x10
[   73.048783][    C0]  ret_from_fork+0x3fc/0x770
[   73.048791][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   73.048797][    C0]  ? __switch_to_asm+0x39/0x70
[   73.048805][    C0]  ? __switch_to_asm+0x33/0x70
[   73.048812][    C0]  ? __pfx_kthread+0x10/0x10
[   73.048819][    C0]  ret_from_fork_asm+0x1a/0x30
[   73.048830][    C0]  </TASK>
[   73.048833][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   73.125544][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[   73.125560][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.125567][    C0] Call Trace:
[   73.125572][    C0]  <TASK>
[   73.125577][    C0]  dump_stack_lvl+0x189/0x250
[   73.125594][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.125606][    C0]  ? __pfx_queue_work_on+0x10/0x10
[   73.125618][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   73.125633][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.125648][    C0]  f2fs_handle_critical_error+0x37c/0x540
[   73.125665][    C0]  f2fs_write_end_io+0x886/0xb60
[   73.125679][    C0]  blk_update_request+0x57e/0xe60
[   73.125695][    C0]  blk_mq_end_request+0x3e/0x70
[   73.125707][    C0]  blk_done_softirq+0x10a/0x160
[   73.125719][    C0]  handle_softirqs+0x286/0x870
[   73.125730][    C0]  ? run_ksoftirqd+0x9b/0x100
[   73.125742][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   73.125752][    C0]  ? schedule+0x91/0x360
[   73.125764][    C0]  ? rcu_is_watching+0x15/0xb0
[   73.125775][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   73.125786][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   73.125795][    C0]  run_ksoftirqd+0x9b/0x100
[   73.125806][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[   73.125819][    C0]  smpboot_thread_fn+0x542/0xa60
[   73.125829][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   73.125841][    C0]  kthread+0x711/0x8a0
[   73.125854][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   73.125864][    C0]  ? __pfx_kthread+0x10/0x10
[   73.125876][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.125888][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.125902][    C0]  ? __pfx_kthread+0x10/0x10
[   73.125912][    C0]  ret_from_fork+0x3fc/0x770
[   73.125921][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   73.125932][    C0]  ? __switch_to_asm+0x39/0x70
[   73.125945][    C0]  ? __switch_to_asm+0x33/0x70
[   73.125957][    C0]  ? __pfx_kthread+0x10/0x10
[   73.125969][    C0]  ret_from_fork_asm+0x1a/0x30
[   73.125987][    C0]  </TASK>
[   73.125991][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   73.201300][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[   73.201315][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.201321][    C0] Call Trace:
[   73.201326][    C0]  <TASK>
[   73.201331][    C0]  dump_stack_lvl+0x189/0x250
[   73.201348][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.201360][    C0]  ? __pfx_queue_work_on+0x10/0x10
[   73.201371][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   73.201385][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.201400][    C0]  f2fs_handle_critical_error+0x37c/0x540
[   73.201416][    C0]  f2fs_write_end_io+0x886/0xb60
[   73.201431][    C0]  blk_update_request+0x57e/0xe60
[   73.201448][    C0]  blk_mq_end_request+0x3e/0x70
[   73.201486][    C0]  blk_done_softirq+0x10a/0x160
[   73.201498][    C0]  handle_softirqs+0x286/0x870
[   73.201510][    C0]  ? run_ksoftirqd+0x9b/0x100
[   73.201523][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   73.201531][    C0]  ? schedule+0x91/0x360
[   73.201539][    C0]  ? rcu_is_watching+0x15/0xb0
[   73.201550][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   73.201560][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   73.201569][    C0]  run_ksoftirqd+0x9b/0x100
[   73.201580][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[   73.201594][    C0]  smpboot_thread_fn+0x542/0xa60
[   73.201604][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   73.201616][    C0]  kthread+0x711/0x8a0
[   73.201629][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   73.201639][    C0]  ? __pfx_kthread+0x10/0x10
[   73.201651][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.201663][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.201676][    C0]  ? __pfx_kthread+0x10/0x10
[   73.201689][    C0]  ret_from_fork+0x3fc/0x770
[   73.201700][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   73.201712][    C0]  ? __switch_to_asm+0x39/0x70
[   73.201724][    C0]  ? __switch_to_asm+0x33/0x70
[   73.201735][    C0]  ? __pfx_kthread+0x10/0x10
[   73.201746][    C0]  ret_from_fork_asm+0x1a/0x30
[   73.201769][    C0]  </TASK>
[   73.201774][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   73.275724][ T5841] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint
[   73.657233][ T6850] tipc: Failed to remove unknown binding: 66,3,3/0:2289826106/2289826107
[   73.727783][ T6860] loop0: detected capacity change from 0 to 64
[   73.739778][ T6860] minix_free_block (loop0:1): bit already cleared
[   73.742173][ T6860] minix_free_block (loop0:4): bit already cleared
[   73.745802][ T6860] minix_free_block (loop0:3): bit already cleared
[   73.748080][ T6860] minix_free_block (loop0:2): bit already cleared
[   73.750124][ T6860] minix_free_block (loop0:1): bit already cleared
[   73.947634][ T5913] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   74.024907][ T6879] loop0: detected capacity change from 0 to 40427
[   74.027642][ T6870] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   74.030037][ T6870] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   74.044257][ T6870] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   74.049187][ T6870] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   74.051963][ T6879] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   74.052005][ T6870] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   74.056243][ T6879] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   74.062780][ T6870] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   74.071290][ T6870] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   74.074267][ T6870] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   74.078216][ T6879] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[   74.082185][ T6870] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   74.113755][ T5913] usb 2-1: Using ep0 maxpacket: 32
[   74.128008][ T5913] usb 2-1: config 0 has too many interfaces: 66, using maximum allowed: 32
[   74.133163][ T5913] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[   74.137110][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   74.142433][ T5913] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 66
[   74.148013][ T5913] usb 2-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce
[   74.152417][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.155774][ T5913] usb 2-1: Product: syz
[   74.157553][ T5913] usb 2-1: Manufacturer: syz
[   74.159492][ T5913] usb 2-1: SerialNumber: syz
[   74.166950][ T5913] usb 2-1: config 0 descriptor??
[   74.237158][ T6889] __nla_validate_parse: 1 callbacks suppressed
[   74.237168][ T6889] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.393'.
[   74.389894][ T5913] usb 2-1: USB disconnect, device number 10
[   74.535562][  T792] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   74.695811][  T792] usb 3-1: Using ep0 maxpacket: 16
[   74.699639][  T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   74.704010][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   74.708719][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   74.712923][  T792] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   74.716894][  T792] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   74.722926][  T792] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   74.726693][  T792] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   74.730907][  T792] usb 3-1: Manufacturer: syz
[   74.733677][  T792] usb 3-1: config 0 descriptor??
[   74.995146][  T792] rc_core: IR keymap rc-hauppauge not found
[   74.997718][  T792] Registered IR keymap rc-empty
[   75.000085][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.018516][ T6915] loop1: detected capacity change from 0 to 256
[   75.021652][ T6915] exfat: Deprecated parameter 'namecase'
[   75.023914][ T6915] exfat: Deprecated parameter 'namecase'
[   75.028739][ T6915] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   75.029719][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.052545][  T792] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   75.066601][  T792] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7
[   75.080549][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.103028][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.105972][ T6922] loop1: detected capacity change from 0 to 1024
[   75.116257][ T6922] hfsplus: bad catalog entry type
[   75.124780][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.131078][ T4027] hfsplus: b-tree write err: -5, ino 4
[   75.147172][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.177026][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.198515][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.223810][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.241521][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.262473][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.284469][  T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   75.312088][  T792] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   75.316099][  T792] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   75.505874][  T792] usb 3-1: USB disconnect, device number 7
[   76.139253][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout
[   76.213955][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout
[   76.216743][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout
[   76.324141][ T6956] netlink: 284 bytes leftover after parsing attributes in process `syz.1.421'.
[   76.405984][ T6964] XFS (nullb0): Invalid superblock magic number
[   76.490115][ T6977] loop0: detected capacity change from 0 to 2048
[   76.494348][ T6978] binder: 6976:6978 ioctl c0306201 200000000640 returned -22
[   76.511211][ T6980] vivid-007: disconnect
[   76.512857][ T6979] vivid-007: reconnect
[   76.520623][ T6977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   76.535202][ T6982] loop1: detected capacity change from 0 to 256
[   76.541675][ T6982] FAT-fs (loop1): Directory bread(block 64) failed
[   76.550500][ T6982] FAT-fs (loop1): Directory bread(block 65) failed
[   76.555079][ T6982] FAT-fs (loop1): Directory bread(block 66) failed
[   76.570593][ T6982] FAT-fs (loop1): Directory bread(block 67) failed
[   76.573045][ T6982] FAT-fs (loop1): Directory bread(block 68) failed
[   76.575991][ T6982] FAT-fs (loop1): Directory bread(block 69) failed
[   76.580219][ T6982] FAT-fs (loop1): Directory bread(block 70) failed
[   76.583038][ T6982] FAT-fs (loop1): Directory bread(block 71) failed
[   76.585916][ T6982] FAT-fs (loop1): Directory bread(block 72) failed
[   76.588931][ T6982] FAT-fs (loop1): Directory bread(block 73) failed
[   76.598905][   T10] kernel write not supported for file /input/event2 (pid: 10 comm: kworker/0:1)
[   76.764631][ T6994] loop0: detected capacity change from 0 to 1024
[   76.767911][ T6994] EXT4-fs: Ignoring removed oldalloc option
[   76.776727][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'.
[   76.781675][ T6996] netlink: 100 bytes leftover after parsing attributes in process `syz.1.438'.
[   76.785661][ T6994] EXT4-fs: Ignoring removed orlov option
[   76.791377][ T6994] EXT4-fs (loop0): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[   76.832544][ T6994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.874871][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.410606][ T7012] overlayfs: unescaped trailing colons in lowerdir mount option.
[   77.594918][ T7018] netlink: 76 bytes leftover after parsing attributes in process `syz.2.443'.
[   77.798896][ T7017] loop1: detected capacity change from 0 to 32768
[   77.801825][ T7017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.445 (7017)
[   77.807370][ T7017] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.811332][ T7017] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   77.814600][ T7017] BTRFS error (device loop1): nologreplay must be used with ro mount option
[   77.818082][ T7017] BTRFS error (device loop1): cannot disable free-space-tree
[   77.820699][ T7017] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   77.825558][ T7017] BTRFS error (device loop1): open_ctree failed: -22
[   78.362661][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout
[   78.450659][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout
[   78.453174][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout
[   78.518376][ T7037] loop2: detected capacity change from 0 to 32768
[   78.561461][ T7037] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[   78.561481][ T7037]   allowing incompatible features above 0.0: (unknown version)
[   78.561488][ T7037]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   78.581806][ T7037] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   78.585294][ T7037] bcachefs (loop2): initializing new filesystem
[   78.594345][ T7037] bcachefs (loop2): going read-write
[   78.599346][ T7037] bcachefs (loop2): marking superblocks
[   78.606395][ T7037] bcachefs (loop2): initializing freespace
[   78.611705][ T7037] bcachefs (loop2): done initializing freespace
[   78.616575][ T7037] bcachefs (loop2): reading snapshots table
[   78.619099][ T7037] bcachefs (loop2): reading snapshots done
[   78.634538][ T7037] bcachefs (loop2): done starting filesystem
[   78.685776][   T33] audit: type=1800 audit(1755785918.471:5): pid=7037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.453" name="file1" dev="loop2" ino=4099 res=0 errno=0
[   78.695082][ T7037] bcachefs (loop2): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[   78.695082][ T7037]   set version_upgrade=incompat to enable
[   78.725274][ T7037] syz.2.453 (7037) used greatest stack depth: 16336 bytes left
[   78.747230][ T5850] bcachefs (loop2): shutting down
[   78.749470][ T5850] bcachefs (loop2): going read-only
[   78.751795][ T5850] bcachefs (loop2): finished waiting for writes to stop
[   78.754618][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 5
[   78.768313][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 6
[   78.772378][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 7
[   78.776958][ T5850] bcachefs (loop2): marking filesystem clean
[   78.792516][ T5850] bcachefs (loop2): shutdown complete
[   79.193911][ T7066] loop1: detected capacity change from 0 to 256
[   79.202198][ T7066] exfat: Deprecated parameter 'utf8'
[   79.213568][ T7066] exfat: Deprecated parameter 'utf8'
[   79.225038][ T7066] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[   79.335550][ T7056] loop0: detected capacity change from 0 to 131072
[   79.336563][ T7072] loop1: detected capacity change from 0 to 8
[   79.340814][ T7056] F2FS-fs (loop0): invalid crc value
[   79.344015][ T7072] SQUASHFS error: Failed to read block 0x1ec: -5
[   79.354643][ T7072] SQUASHFS error: Unable to read metadata cache entry [1ea]
[   79.373942][ T7056] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   79.380255][ T7056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   79.398322][   T33] audit: type=1326 audit(1755785919.135:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.1.466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5b8ebe9 code=0x7ffc0000
[   79.429312][   T33] audit: type=1326 audit(1755785919.135:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.1.466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5b8ebe9 code=0x7ffc0000
[   79.455479][   T33] audit: type=1326 audit(1755785919.144:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.1.466" exe="/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f4db5b8ebe9 code=0x7ffc0000
[   79.474056][   T33] audit: type=1326 audit(1755785919.144:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.1.466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5b8ebe9 code=0x7ffc0000
[   79.503568][   T33] audit: type=1326 audit(1755785919.144:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.1.466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db5b8ebe9 code=0x7ffc0000
[   79.532756][ T7085] loop1: detected capacity change from 0 to 512
[   79.536136][ T7085] EXT4-fs: Ignoring removed i_version option
[   79.543550][ T7085] EXT4-fs: Ignoring removed nobh option
[   79.546300][ T7085] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   79.552785][ T7085] EXT4-fs (loop1): 1 truncate cleaned up
[   79.555640][ T7085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.593531][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.848840][ T7098] capability: warning: `syz.0.475' uses deprecated v2 capabilities in a way that may be insecure
[   79.934167][ T5913] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[   80.097029][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short
[   80.100705][ T5913] usb 2-1: not running at top speed; connect to a high speed hub
[   80.104956][ T5913] usb 2-1: config 8 has an invalid interface number: 250 but max is 0
[   80.108706][ T5913] usb 2-1: config 8 has no interface number 0
[   80.111309][ T5913] usb 2-1: config 8 interface 250 has no altsetting 0
[   80.116521][ T5913] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b9.7d
[   80.120608][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.124040][ T5913] usb 2-1: Product: syz
[   80.125915][ T5913] usb 2-1: Manufacturer: syz
[   80.128436][ T5913] usb 2-1: SerialNumber: syz
[   80.353618][ T5913] gspca_main: sn9c2028-2.14.0 probing 0458:7005
[   80.359810][ T5913] gspca_sn9c2028: read1 error -71
[   80.363490][ T5913] gspca_sn9c2028: read1 error -71
[   80.365517][ T5913] gspca_sn9c2028: read1 error -71
[   80.367538][ T5913] sn9c2028 2-1:8.250: probe with driver sn9c2028 failed with error -71
[   80.372164][ T5913] usb 2-1: USB disconnect, device number 11
[   80.503530][ T7107] loop2: detected capacity change from 0 to 32768
[   80.531919][ T7107] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[   80.531936][ T7107]   allowing incompatible features above 0.0: (unknown version)
[   80.531943][ T7107]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   80.549346][ T7107] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   80.552720][ T7107] bcachefs (loop2): initializing new filesystem
[   80.560318][ T7107] bcachefs (loop2): going read-write
[   80.564148][ T7107] bcachefs (loop2): marking superblocks
[   80.569499][ T7107] bcachefs (loop2): initializing freespace
[   80.574480][ T7107] bcachefs (loop2): done initializing freespace
[   80.580565][ T7107] bcachefs (loop2): reading snapshots table
[   80.583165][ T7107] bcachefs (loop2): reading snapshots done
[   80.586447][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout
[   80.592072][ T7107] bcachefs (loop2): done starting filesystem
[   80.662310][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout
[   80.664826][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout
[   80.777736][ T5850] bcachefs (loop2): shutting down
[   80.787999][ T5850] bcachefs (loop2): going read-only
[   80.790129][ T5850] bcachefs (loop2): finished waiting for writes to stop
[   80.793759][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[   80.805784][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[   80.810271][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 4
[   80.815194][ T5850] bcachefs (loop2): marking filesystem clean
[   80.830621][ T5850] bcachefs (loop2): shutdown complete
[   80.869371][ T7121] loop0: detected capacity change from 0 to 512
[   80.876296][ T7121] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   80.881047][ T7121] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[   80.884498][ T7121] System zones: 1-12
[   80.888180][ T7121] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.480: corrupted in-inode xattr: e_value size too large
[   80.893895][ T7121] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.480: couldn't read orphan inode 15 (err -117)
[   80.907855][ T7121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.943805][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.951296][ T7124] loop1: detected capacity change from 0 to 1024
[   80.982081][   T26] hfsplus: b-tree write err: -5, ino 4
[   81.013704][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'.
[   81.118795][ T7130] loop1: detected capacity change from 0 to 32768
[   81.123591][ T7130] (syz.1.483,7130,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   81.128336][ T7130] (syz.1.483,7130,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   81.148441][ T7130] JBD2: Ignoring recovery information on journal
[   81.164505][ T7130] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   81.168423][ T7132] loop0: detected capacity change from 0 to 32768
[   81.196300][ T7132] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   81.202588][ T7132] OCFS2: ERROR (device loop0): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[   81.209750][ T7132] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   81.213775][ T7132] OCFS2: Returning error to the calling process.
[   81.216438][ T7132] (syz.0.485,7132,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5
[   81.219927][ T7132] (syz.0.485,7132,0):ocfs2_reserve_new_inode:1097 ERROR: status = -5
[   81.223240][ T7132] (syz.0.485,7132,0):ocfs2_reserve_new_inode:1120 ERROR: status = -5
[   81.226681][ T7132] (syz.0.485,7132,0):ocfs2_mknod:309 ERROR: status = -5
[   81.229790][ T7132] (syz.0.485,7132,0):ocfs2_mknod:505 ERROR: status = -5
[   81.232727][ T7132] (syz.0.485,7132,0):ocfs2_mkdir:661 ERROR: status = -5
[   81.254560][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[   81.271057][ T7130] loop1: detected capacity change from 32768 to 64
[   81.273960][ T7134] jbd2/loop1-29: attempt to access beyond end of device
[   81.273960][ T7134] loop1: rw=38913, sector=554, nr_sectors = 1 limit=64
[   81.285909][ T7134] jbd2/loop1-29: attempt to access beyond end of device
[   81.285909][ T7134] loop1: rw=38913, sector=555, nr_sectors = 1 limit=64
[   81.291610][ T7134] jbd2/loop1-29: attempt to access beyond end of device
[   81.291610][ T7134] loop1: rw=38913, sector=556, nr_sectors = 1 limit=64
[   81.299728][ T7134] jbd2/loop1-29: attempt to access beyond end of device
[   81.299728][ T7134] loop1: rw=38913, sector=557, nr_sectors = 1 limit=64
[   81.306652][ T7134] jbd2/loop1-29: attempt to access beyond end of device
[   81.306652][ T7134] loop1: rw=38913, sector=558, nr_sectors = 1 limit=64
[   81.312166][ T7134] jbd2/loop1-29: attempt to access beyond end of device
[   81.312166][ T7134] loop1: rw=38913, sector=559, nr_sectors = 1 limit=64
[   81.318355][ T7134] jbd2/loop1-29: attempt to access beyond end of device
[   81.318355][ T7134] loop1: rw=38913, sector=560, nr_sectors = 1 limit=64
[   81.323675][ T7134] jbd2/loop1-29: attempt to access beyond end of device
[   81.323675][ T7134] loop1: rw=38913, sector=561, nr_sectors = 1 limit=64
[   81.329152][ T7134] jbd2/loop1-29: attempt to access beyond end of device
[   81.329152][ T7134] loop1: rw=38913, sector=562, nr_sectors = 1 limit=64
[   81.334825][ T7134] jbd2/loop1-29: attempt to access beyond end of device
[   81.334825][ T7134] loop1: rw=38913, sector=563, nr_sectors = 1 limit=64
[   81.340757][ T7134] Aborting journal on device loop1-29.
[   81.342697][ T7134] Buffer I/O error on dev loop1, logical block 552, lost sync page write
[   81.346632][ T7137] (syz.1.483,7137,0):__ocfs2_journal_access:727 ERROR: Error -30 getting 1 access to buffer!
[   81.350848][ T7137] (syz.1.483,7137,0):ocfs2_journal_access_path:751 ERROR: status = -30
[   81.351649][ T7134] JBD2: I/O error when updating journal superblock for loop1-29.
[   81.354240][ T7137] (syz.1.483,7137,0):ocfs2_truncate_rec:5451 ERROR: status = -30
[   81.377393][ T7137] (syz.1.483,7137,0):ocfs2_remove_extent:5592 ERROR: status = -30
[   81.380157][ T7137] (syz.1.483,7137,0):ocfs2_remove_btree_range:5780 ERROR: status = -30
[   81.382941][ T7137] (syz.1.483,7137,0):ocfs2_commit_trans:404 ERROR: status = -5
[   81.385814][ T7137] (syz.1.483,7137,0):ocfs2_commit_truncate:7377 ERROR: status = -30
[   81.385849][ T7130] (syz.1.483,7130,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[   81.408032][ T7137] (syz.1.483,7137,0):ocfs2_truncate_file:511 ERROR: status = -30
[   81.411178][ T7137] (syz.1.483,7137,0):ocfs2_setattr:1217 ERROR: status = -30
[   81.440567][ T5841] (syz-executor,5841,1):ocfs2_start_trans:379 ERROR: status = -30
[   81.448122][ T5841] OCFS2: abort (device loop1): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal
[   81.453836][ T5841] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   81.458004][ T5841] OCFS2: Returning error to the calling process.
[   81.460648][ T5841] (syz-executor,5841,1):ocfs2_update_inode_atime:264 ERROR: status = -30
[   81.466276][ T5841] (syz-executor,5841,1):ocfs2_read_locked_inode:597 ERROR: status = -5
[   81.470020][ T5841] (syz-executor,5841,1):ocfs2_read_locked_inode:597 ERROR: status = -5
[   81.494813][ T7141] loop0: detected capacity change from 0 to 40427
[   81.502362][ T7141] F2FS-fs (loop0): build fault injection rate: 14
[   81.504966][ T7141] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   81.508684][ T7141] F2FS-fs (loop0): invalid crc value
[   81.513196][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   81.517935][   T27] (kworker/u10:0,27,0):ocfs2_start_trans:379 ERROR: status = -30
[   81.520883][   T27] OCFS2: abort (device loop1): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal
[   81.525202][   T27] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   81.532254][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   81.537981][   T27] OCFS2: Returning error to the calling process.
[   81.540765][   T27] (kworker/u10:0,27,1):ocfs2_release_dquot:770 ERROR: status = -30
[   81.544114][   T27] (kworker/u10:0,27,1):ocfs2_release_dquot:800 ERROR: status = -30
[   81.547510][   T27] (kworker/u10:0,27,1):ocfs2_start_trans:379 ERROR: status = -30
[   81.549917][ T7141] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   81.553566][   T27] OCFS2: abort (device loop1): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal
[   81.554017][ T7141] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   81.559026][   T27] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   81.567602][   T27] OCFS2: Returning error to the calling process.
[   81.567663][ T7141] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   81.570475][   T27] (kworker/u10:0,27,1):ocfs2_release_dquot:770 ERROR: status = -30
[   81.570494][   T27] (kworker/u10:0,27,1):ocfs2_release_dquot:800 ERROR: status = -30
[   81.570547][ T5972] (syz.1.27,5972,1):ocfs2_local_free_info:835 ERROR: releasing quota file with used entries (type=0)
[   81.570598][ T5972] (syz.1.27,5972,1):ocfs2_local_free_info:835 ERROR: releasing quota file with used entries (type=1)
[   81.577525][ T7141] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   81.581115][ T5972] (syz.1.27,5972,1):ocfs2_start_trans:379 ERROR: status = -30
[   81.585656][ T7141] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[   81.588909][ T5972] OCFS2: abort (device loop1): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal
[   81.594889][ T7141] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   81.596120][ T5972] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   81.601204][ T7141] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of f2fs_mpage_readpages+0x18df/0x1ac0
[   81.605906][ T5972] OCFS2: Returning error to the calling process.
[   81.611500][ T7141] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of __f2fs_tmpfile+0x77/0x360
[   81.625330][ T7141] overlayfs: upper fs does not support tmpfile.
[   81.627793][ T5972] (syz.1.27,5972,1):ocfs2_shutdown_local_alloc:419 ERROR: status = -30
[   81.628022][ T7141] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[   81.635070][ T5972] Buffer I/O error on dev loop1, logical block 16936, lost sync page write
[   81.638912][ T5972] (syz.1.27,5972,1):ocfs2_write_block:78 ERROR: status = -5
[   81.641897][ T5972] (syz.1.27,5972,1):ocfs2_update_disk_slot:199 ERROR: status = -5
[   81.645899][ T5972] (syz.1.27,5972,1):ocfs2_put_slot:517 ERROR: status = -5
[   81.649889][ T5972] (syz.1.27,5972,0):ocfs2_journal_shutdown:1107 ERROR: status = -5
[   81.653619][ T5972] ocfs2: Unmounting device (7,1) on (node local)
[   81.653740][ T5845] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[   81.661575][ T5845] F2FS-fs (loop0): inconsistent node block, node_type:0, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[   81.667731][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   81.667748][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.667755][ T5845] Call Trace:
[   81.667760][ T5845]  <TASK>
[   81.667764][ T5845]  dump_stack_lvl+0x189/0x250
[   81.667783][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.667797][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[   81.667809][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   81.667824][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   81.667843][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[   81.667862][ T5845]  f2fs_write_end_io+0x886/0xb60
[   81.667879][ T5845]  __submit_merged_bio+0x27a/0x6a0
[   81.667897][ T5845]  __submit_merged_write_cond+0x255/0x530
[   81.667914][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[   81.667940][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   81.667969][ T5845]  ? __mod_zone_page_state+0xd7/0x140
[   81.667989][ T5845]  ? folios_put_refs+0x560/0x640
[   81.668005][ T5845]  ? __pfx_folios_put_refs+0x10/0x10
[   81.668017][ T5845]  ? rcu_is_watching+0x15/0xb0
[   81.668029][ T5845]  ? lru_add+0xa2f/0xd80
[   81.668041][ T5845]  ? lru_add+0x198/0xd80
[   81.668053][ T5845]  ? folio_batch_move_lru+0x319/0x3a0
[   81.668067][ T5845]  ? filemap_get_folios_tag+0xed/0x630
[   81.668078][ T5845]  ? rcu_is_watching+0x15/0xb0
[   81.668091][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   81.668107][ T5845]  do_writepages+0x32e/0x550
[   81.668123][ T5845]  ? rcu_is_watching+0x15/0xb0
[   81.668135][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   81.668151][ T5845]  filemap_fdatawrite+0x199/0x240
[   81.668166][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   81.668194][ T5845]  ? rcu_is_watching+0x15/0xb0
[   81.668208][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   81.668222][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[   81.668239][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[   81.668258][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   81.668284][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[   81.668297][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[   81.668309][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[   81.668318][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[   81.668333][ T5845]  ? shrinker_free+0x2ce/0x3e0
[   81.668346][ T5845]  deactivate_locked_super+0xbc/0x130
[   81.668359][ T5845]  cleanup_mnt+0x425/0x4c0
[   81.668398][ T5845]  task_work_run+0x1d4/0x260
[   81.668415][ T5845]  ? __pfx_task_work_run+0x10/0x10
[   81.668428][ T5845]  ? __x64_sys_umount+0x122/0x160
[   81.668443][ T5845]  ? __pfx___x64_sys_umount+0x10/0x10
[   81.668463][ T5845]  ? rcu_is_watching+0x15/0xb0
[   81.668475][ T5845]  exit_to_user_mode_loop+0xec/0x110
[   81.668490][ T5845]  do_syscall_64+0x2bd/0x3b0
[   81.668506][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.668517][ T5845]  ? exc_page_fault+0x9f/0xf0
[   81.668533][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.668543][ T5845] RIP: 0033:0x7f1904d8ff17
[   81.668556][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   81.668565][ T5845] RSP: 002b:00007ffe21930588 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   81.668580][ T5845] RAX: 0000000000000000 RBX: 00007f1904e11c05 RCX: 00007f1904d8ff17
[   81.668588][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe21930640
[   81.668595][ T5845] RBP: 00007ffe21930640 R08: 0000000000000000 R09: 0000000000000000
[   81.668602][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe219316d0
[   81.668609][ T5845] R13: 00007f1904e11c05 R14: 0000000000013b8d R15: 00007ffe21931710
[   81.668624][ T5845]  </TASK>
[   81.668629][ T5845] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   82.030247][   T47] cfg80211: failed to load regulatory.db
[   82.063935][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.140475][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.165285][ T7146] loop0: detected capacity change from 0 to 32768
[   82.168246][ T7146] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.489 (7146)
[   82.176983][ T7146] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   82.181265][ T7146] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   82.236711][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.262480][ T7146] BTRFS info (device loop0): enabling ssd optimizations
[   82.267961][ T7146] BTRFS info (device loop0): enabling free space tree
[   82.331674][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.337221][ T5845] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   82.409532][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.412720][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.418948][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.422548][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.426358][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.610692][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.614979][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.624633][   T13] bond0 (unregistering): Released all slaves
[   82.643106][ T7173] batadv0: entered promiscuous mode
[   82.645530][ T7173] macsec1: entered promiscuous mode
[   82.648896][ T7173] macsec1: entered allmulticast mode
[   82.651550][ T7173] batadv0: entered allmulticast mode
[   82.659613][ T7173] batadv0: left allmulticast mode
[   82.662437][ T7173] batadv0: left promiscuous mode
[   82.701059][   T13] _Z`Ԁ@: left promiscuous mode
[   82.729025][ T7166] chnl_net:caif_netlink_parms(): no params data found
[   82.840065][ T7186] loop0: detected capacity change from 0 to 32768
[   82.847813][ T7186] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.497 (7186)
[   82.853841][ T7186] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   82.857435][ T7186] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   82.860961][ T7186] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   82.880583][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.883664][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.899829][ T7166] bridge_slave_0: entered allmulticast mode
[   82.907779][ T7166] bridge_slave_0: entered promiscuous mode
[   82.912702][ T7186] BTRFS info (device loop0): rebuilding free space tree
[   82.927016][ T7186] BTRFS info (device loop0): disabling free space tree
[   82.931235][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.934138][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.937402][ T7186] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   82.942732][ T7166] bridge_slave_1: entered allmulticast mode
[   82.948170][ T7186] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   82.959296][ T7166] bridge_slave_1: entered promiscuous mode
[   82.973297][ T7186] BTRFS info (device loop0): setting nodatasum
[   82.975873][ T7186] BTRFS info (device loop0): setting nodatacow
[   82.983020][ T7186] BTRFS info (device loop0): enabling ssd optimizations
[   82.990643][ T7186] BTRFS info (device loop0): turning off barriers
[   82.996295][ T7186] BTRFS info (device loop0): turning on flush-on-commit
[   83.007067][ T7186] BTRFS info (device loop0): enabling disk space caching
[   83.010102][ T7186] BTRFS info (device loop0): force clearing of disk cache
[   83.017873][ T7186] BTRFS info (device loop0): doing ref verification
[   83.020847][ T7186] BTRFS info (device loop0): max_inline set to 4096
[   83.043996][   T13] hsr_slave_0: left promiscuous mode
[   83.048700][   T13] hsr_slave_1: left promiscuous mode
[   83.056223][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.067265][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.074505][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.079891][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.084233][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.105337][   T13] veth1_macvtap: left promiscuous mode
[   83.108988][   T13] veth0_macvtap: left promiscuous mode
[   83.120396][   T13] veth1_vlan: left promiscuous mode
[   83.127191][   T13] veth0_vlan: left promiscuous mode
[   83.247647][   T13] team0 (unregistering): Port device team_slave_1 removed
[   83.254694][   T13] team0 (unregistering): Port device team_slave_0 removed
[   83.309957][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.317229][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.399330][ T7166] team0: Port device team_slave_0 added
[   83.403098][ T7166] team0: Port device team_slave_1 added
[   83.695636][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.698594][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.709821][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.715681][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.718943][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.730263][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.764557][ T7166] hsr_slave_0: entered promiscuous mode
[   83.767342][ T7166] hsr_slave_1: entered promiscuous mode
[   83.770067][ T7166] debugfs: 'hsr0' already exists in 'hsr'
[   83.773973][ T7166] Cannot create hsr debugfs directory
[   83.895099][ T7166] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.899468][ T7166] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.920217][ T7166] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.931712][ T7166] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.947046][ T7258] loop2: detected capacity change from 0 to 512
[   83.953539][   T13] ------------[ cut here ]------------
[   83.955508][   T13] WARNING: CPU: 1 PID: 13 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[   83.958674][   T13] Modules linked in:
[   83.960718][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   83.965325][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.969804][   T13] Workqueue: netns cleanup_net
[   83.971829][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[   83.974125][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b ff 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 bf e1 f7 e8 b4 95 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a6 95 9d f7 90 0f 0b 90 e9 60 fe ff ff
[   83.982624][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[   83.985090][   T13] RAX: ffffffff8a22157c RBX: ffff8881085b8000 RCX: ffff88801c688000
[   83.989184][   T13] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88801c688000
[   83.992776][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[   83.996303][   T13] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f630fe0
[   83.999755][   T13] R13: 1ffff92000020f40 R14: ffff8881085b9480 R15: dffffc0000000000
[   84.003220][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[   84.006972][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   84.009832][   T13] CR2: 0000556c0f675950 CR3: 000000000df36000 CR4: 00000000000006f0
[   84.013149][   T13] Call Trace:
[   84.014611][   T13]  <TASK>
[   84.015856][   T13]  xfrm_net_exit+0x2d/0x70
[   84.017780][   T13]  ops_undo_list+0x49a/0x990
[   84.019840][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[   84.021987][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[   84.024226][   T13]  cleanup_net+0x4c5/0x800
[   84.026098][   T13]  ? __pfx_cleanup_net+0x10/0x10
[   84.028234][   T13]  ? rcu_is_watching+0x15/0xb0
[   84.030330][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[   84.032752][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[   84.035462][   T13]  process_scheduled_works+0xae1/0x17b0
[   84.037763][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[   84.040649][   T13]  worker_thread+0x8a0/0xda0
[   84.042621][   T13]  kthread+0x711/0x8a0
[   84.044324][   T13]  ? __pfx_worker_thread+0x10/0x10
[   84.046487][   T13]  ? __pfx_kthread+0x10/0x10
[   84.048322][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[   84.050089][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.051865][   T13]  ? __pfx_kthread+0x10/0x10
[   84.053389][   T13]  ret_from_fork+0x3fc/0x770
[   84.055008][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[   84.056996][   T13]  ? __switch_to_asm+0x39/0x70
[   84.058989][   T13]  ? __switch_to_asm+0x33/0x70
[   84.061501][   T13]  ? __pfx_kthread+0x10/0x10
[   84.063990][   T13]  ret_from_fork_asm+0x1a/0x30
[   84.066023][   T13]  </TASK>
[   84.067337][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   84.070077][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[   84.073502][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.077233][   T13] Workqueue: netns cleanup_net
[   84.078797][   T13] Call Trace:
[   84.079880][   T13]  <TASK>
[   84.080916][   T13]  dump_stack_lvl+0x99/0x250
[   84.082754][   T13]  ? __asan_memcpy+0x40/0x70
[   84.084754][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.087013][   T13]  ? __pfx__printk+0x10/0x10
[   84.089070][   T13]  vpanic+0x281/0x750
[   84.090792][   T13]  ? __pfx__printk+0x10/0x10
[   84.092722][   T13]  ? __pfx_vpanic+0x10/0x10
[   84.094374][   T13]  ? is_bpf_text_address+0x292/0x2b0
[   84.096333][   T13]  panic+0xb9/0xc0
[   84.097875][   T13]  ? __pfx_panic+0x10/0x10
[   84.099661][   T13]  __warn+0x31b/0x4b0
[   84.101267][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[   84.103371][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[   84.105448][   T13]  report_bug+0x2be/0x4f0
[   84.107252][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[   84.109342][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[   84.111431][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[   84.113519][   T13]  handle_bug+0x84/0x160
[   84.115325][   T13]  exc_invalid_op+0x1a/0x50
[   84.117013][   T13]  asm_exc_invalid_op+0x1a/0x20
[   84.118702][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[   84.120847][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b ff 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 bf e1 f7 e8 b4 95 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a6 95 9d f7 90 0f 0b 90 e9 60 fe ff ff
[   84.127374][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[   84.129686][   T13] RAX: ffffffff8a22157c RBX: ffff8881085b8000 RCX: ffff88801c688000
[   84.132325][   T13] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88801c688000
[   84.135140][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[   84.137846][   T13] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f630fe0
[   84.140667][   T13] R13: 1ffff92000020f40 R14: ffff8881085b9480 R15: dffffc0000000000
[   84.143372][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[   84.145066][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[   84.146809][   T13]  xfrm_net_exit+0x2d/0x70
[   84.148319][   T13]  ops_undo_list+0x49a/0x990
[   84.150039][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[   84.151760][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[   84.153596][   T13]  cleanup_net+0x4c5/0x800
[   84.155148][   T13]  ? __pfx_cleanup_net+0x10/0x10
[   84.156879][   T13]  ? rcu_is_watching+0x15/0xb0
[   84.158543][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[   84.160539][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[   84.162519][   T13]  process_scheduled_works+0xae1/0x17b0
[   84.164387][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[   84.166397][   T13]  worker_thread+0x8a0/0xda0
[   84.167998][   T13]  kthread+0x711/0x8a0
[   84.169334][   T13]  ? __pfx_worker_thread+0x10/0x10
[   84.171197][   T13]  ? __pfx_kthread+0x10/0x10
[   84.172984][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[   84.174764][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.177051][   T13]  ? __pfx_kthread+0x10/0x10
[   84.179066][   T13]  ret_from_fork+0x3fc/0x770
[   84.181140][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[   84.183378][   T13]  ? __switch_to_asm+0x39/0x70
[   84.185455][   T13]  ? __switch_to_asm+0x33/0x70
[   84.187494][   T13]  ? __pfx_kthread+0x10/0x10
[   84.189523][   T13]  ret_from_fork_asm+0x1a/0x30
[   84.191648][   T13]  </TASK>
[   84.193700][   T13] Kernel Offset: disabled
[   84.195603][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:18:44  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44ceb RBX=1ffff11026cc7f61 RCX=ffff888023323980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002f0f700 RSP=ffffc90002f0f580
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=fffffbfff1f47067
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44cd3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f238b4e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f238a9876c3 00007f238a9876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0120100027800401 0800060104904202
XMM06=00278e0328020027 8c03280200278a03 XMM07=02d8020027880302 b8c8048400278403
XMM08=0404002780030fff ffffffffff040fff XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107030
R8 =ffff888107038237 R9 =1ffff11020e07046 R10=dffffc0000000000 R11=ffffffff854f1cc0
R12=dffffc0000000000 R13=ffffffff99afa8de R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1d3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556c0f675950 CR3=000000010902a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ffffffffffff ffffffffffff0000 XMM01=0000010101010101 010101010100ffff
XMM02=0000556c0f686dc8 665f65676e006d72 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
