last executing test programs:

1m5.973178987s ago: executing program 1 (id=179):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x6, 0x2})

1m5.905062018s ago: executing program 1 (id=180):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0)

1m5.90443227s ago: executing program 1 (id=181):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000500)='syzkaller\x00'}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x30)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r1, 0x4, r0}, 0x10)

1m5.818051592s ago: executing program 1 (id=182):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x3000049, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1m5.715384251s ago: executing program 1 (id=183):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009110b6000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m5.325309151s ago: executing program 1 (id=186):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8, 0x7}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0xd2, &(0x7f0000000840)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "01a604", 0x9c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast2, {[], {0x4e23, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "70aa406e06d33342a89e1bc0968edeaa64cb58eee34eeb4800", "0772f933c5c2d78f91903f58d74edaf1f5bd09edd42b31a9530f79148848b7242ef7c9f01044d3bb3442a35e698d4be4", "6bbff34b6adacc361bbd6a4728607fe4d73b3d26ace9cf1b196bb62b", {"6bed9da9ef24d4ff5a9052a252499bbe", "0ce437e5dc30b6a98f6e30a732bbe164"}}}}}}}}, 0x0)

1m5.127082417s ago: executing program 32 (id=186):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8, 0x7}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0xd2, &(0x7f0000000840)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "01a604", 0x9c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast2, {[], {0x4e23, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "70aa406e06d33342a89e1bc0968edeaa64cb58eee34eeb4800", "0772f933c5c2d78f91903f58d74edaf1f5bd09edd42b31a9530f79148848b7242ef7c9f01044d3bb3442a35e698d4be4", "6bbff34b6adacc361bbd6a4728607fe4d73b3d26ace9cf1b196bb62b", {"6bed9da9ef24d4ff5a9052a252499bbe", "0ce437e5dc30b6a98f6e30a732bbe164"}}}}}}}}, 0x0)

28.802325131s ago: executing program 0 (id=617):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f00000007c0)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
close(0x3)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r2}, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
syz_emit_ethernet(0x11dc0, &(0x7f0000002480)=ANY=[], 0x0)

28.732268749s ago: executing program 0 (id=619):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000300)='./file0\x00', 0x125c00, 0x13e)

27.822072969s ago: executing program 0 (id=633):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c000000210001002ebd7000fddbdf250a101004ff0000000c00010014000100fe88000000000000000000000000210114000200fc00000000000000000000000000000108000e00050000001400110065727370616e3000000000000000000014000100ff020000000000000000000000000001050016002c0000000c001400", @ANYRES32, @ANYRES32], 0x9c}, 0x1, 0x0, 0x0, 0x4000841}, 0x40)

27.802446147s ago: executing program 0 (id=634):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x3205850, 0x0, 0xff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r0, 0x0, 0x0)

27.282429328s ago: executing program 0 (id=639):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x40, 0x4, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

26.538543227s ago: executing program 0 (id=648):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x9, 0x4)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

26.359949194s ago: executing program 33 (id=648):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x9, 0x4)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

849.21137ms ago: executing program 3 (id=936):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1c802, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x5f5b, &(0x7f0000003100)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1)

620.194104ms ago: executing program 2 (id=938):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = inotify_init1(0x80000)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2000775)
write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0x0, 0x40, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xfffffffc, 0x1, 0xd, 0x1c8, 0xe6, 0x1004, 0x3}], "1c1d4fa56cd6dd66cb96ade5777e61707c3b05cec98bfe3e222bbbf1fc29cfef61dd19c9497fd73e517a378e26d9d6a26839d7d809fc451724e231933ae2cc5fbb731840034f78ae7c8c38310bda20430f0993b8388d47852aef6f858219a255ff92bb30f79ff1b4d2951120134679"}, 0xe7)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

490.691043ms ago: executing program 2 (id=940):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000100)="87", 0x1}], 0x2, 0xf, 0x0)

490.436928ms ago: executing program 4 (id=941):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000012006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040012000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5500f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

430.506925ms ago: executing program 3 (id=942):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xa, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x61, 0x5f]}}, 0x0, 0x62}, 0x28)

430.324966ms ago: executing program 2 (id=943):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0)

357.784764ms ago: executing program 2 (id=944):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x138, 0x98, 0x1d0, 0x350, 0x98, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0xffffff00, 'vxcan1\x00', 'team_slave_1\x00', {0xff}, {}, 0x6c, 0x2, 0x42}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'veth1_to_batadv\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1000, 0x2, @rand_addr=0x64010100, 0x4e21}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)

357.53391ms ago: executing program 4 (id=945):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="100100001000040000000000000000040000000a"], 0x110}}, 0x0)

357.369816ms ago: executing program 3 (id=946):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0xfe, 0x0, 0x2a}, 0xe)
shutdown(r0, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0)

277.296512ms ago: executing program 2 (id=947):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@errors_remount}, {}, {@noquota}, {}, {@errors_continue}, {@grpquota}]}, 0x24, 0x628f, &(0x7f00000065c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

229.327746ms ago: executing program 4 (id=948):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000110087d44a372eaf541d000a07000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=0x0, @ANYRES32=r2], 0x44}}, 0x2000800)

228.919601ms ago: executing program 3 (id=949):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0xfff, 0x1, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7feffffb, 0x20cf}}}, 0x90)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

228.613316ms ago: executing program 4 (id=950):
setreuid(0xffffffffffffffff, 0xee01)
keyctl$session_to_parent(0x12)

120.131872ms ago: executing program 4 (id=951):
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40004)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000040)=0x3)

119.883655ms ago: executing program 3 (id=952):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x2}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x2042, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0)

60.44877ms ago: executing program 4 (id=953):
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)

301.502µs ago: executing program 3 (id=954):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x3})
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

0s ago: executing program 2 (id=955):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
epoll_create(0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x3229, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xb, 0x192})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

kernel console output (not intermixed with test programs):

] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.090980][ T4579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.101069][ T4579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.111781][ T4579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.125872][ T4579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.165003][ T4579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.170827][ T4579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.192075][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.194976][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.306640][ T5916] loop2: detected capacity change from 0 to 16
[   66.324380][ T5916] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[   66.329647][ T5916] erofs (device loop2): mounted with root inode @ nid 36.
[   66.341809][ T5916] syz.2.3: attempt to access beyond end of device
[   66.341809][ T5916] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16
[   66.348696][ T5916] syz.2.3: attempt to access beyond end of device
[   66.348696][ T5916] loop2: rw=0, sector=46, nr_sectors = 1 limit=16
[   66.354400][ T5916] erofs (device loop2): read error -5 @ 0 of nid 36
[   67.514571][ T5840] Bluetooth: hci0: command tx timeout
[   67.538627][ T5840] Bluetooth: hci2: command tx timeout
[   67.540350][   T56] Bluetooth: hci1: command tx timeout
[   67.545802][  T848] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   67.743424][  T848] usb 3-1: config 0 interface 0 altsetting 188 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.749118][  T848] usb 3-1: config 0 interface 0 has no altsetting 0
[   67.751809][  T848] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[   67.755306][  T848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.764401][  T848] usb 3-1: config 0 descriptor??
[   67.879251][ T5304] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   68.033391][ T5304] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   68.037169][ T5304] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   68.064235][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.065305][ T5304] usb 2-1: config 2 interface 0 has no altsetting 0
[   68.083096][ T5304] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[   68.086486][ T5304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.099083][ T5304] usb 2-1: Product: syz
[   68.110275][ T5304] usb 2-1: Manufacturer: syz
[   68.112556][ T5304] usb 2-1: SerialNumber: syz
[   68.222634][  T848] elecom 0003:056E:010C.0001: hidraw0: USB HID v0.04 Device [HID 056e:010c] on usb-dummy_hcd.2-1/input0
[   68.371627][ T5304] ims_pcu 2-1:2.0: Missing CDC union descriptor
[   68.373846][ T5304] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22
[   68.391904][ T5304] usb 2-1: USB disconnect, device number 2
[   68.411248][ T5904] usb 3-1: USB disconnect, device number 2
[   68.799815][ T5965] loop0: detected capacity change from 0 to 40427
[   68.805608][ T5965] F2FS-fs (loop0): invalid crc value
[   68.837392][ T5965] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   68.842069][ T5965] F2FS-fs (loop0): Start checkpoint disabled!
[   68.847797][ T5965] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[   68.851466][ T5965] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   68.975228][   T34] audit: type=1800 audit(1769253465.583:2): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="bus" dev="loop0" ino=14 res=0 errno=0
[   69.013642][ T5971] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET)
[   69.561683][   T56] Bluetooth: hci0: command tx timeout
[   69.563816][ T5227] Bluetooth: hci2: command tx timeout
[   69.566033][ T5936] Bluetooth: hci1: command tx timeout
[   69.583641][   T69] kworker/u10:2: attempt to access beyond end of device
[   69.583641][   T69] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   69.601404][   T69] CPU: 1 UID: 0 PID: 69 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) 
[   69.601426][   T69] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.601434][   T69] Workqueue: writeback wb_workfn (flush-7:0)
[   69.601467][   T69] Call Trace:
[   69.601473][   T69]  <TASK>
[   69.601510][   T69]  dump_stack_lvl+0xe8/0x150
[   69.601534][   T69]  f2fs_handle_critical_error+0x37c/0x540
[   69.601561][   T69]  f2fs_write_end_io+0x886/0xb60
[   69.601595][   T69]  __submit_merged_bio+0x256/0x650
[   69.601618][   T69]  __submit_merged_write_cond+0x269/0x530
[   69.601641][   T69]  f2fs_write_data_pages+0x2806/0x3360
[   69.601682][   T69]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.601708][   T69]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   69.601745][   T69]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   69.601763][   T69]  ? __lock_acquire+0x6b5/0x2cf0
[   69.601786][   T69]  ? __lock_acquire+0x6b5/0x2cf0
[   69.601805][   T69]  ? __update_load_avg_se+0x79a/0xbe0
[   69.601821][   T69]  ? __pfx_hlock_conflict+0x10/0x10
[   69.601836][   T69]  ? __bfs+0x153/0x290
[   69.601847][   T69]  ? __pfx_hlock_conflict+0x10/0x10
[   69.601861][   T69]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.601880][   T69]  do_writepages+0x32e/0x550
[   69.601905][   T69]  ? reacquire_held_locks+0x104/0x190
[   69.601921][   T69]  ? writeback_sb_inodes+0x41f/0x1820
[   69.601944][   T69]  __writeback_single_inode+0x133/0x1230
[   69.601963][   T69]  ? do_raw_spin_unlock+0x4d/0x210
[   69.601986][   T69]  writeback_sb_inodes+0x92c/0x1820
[   69.602025][   T69]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   69.602040][   T69]  ? do_raw_spin_lock+0x12b/0x2f0
[   69.602093][   T69]  ? rcu_is_watching+0x15/0xb0
[   69.602119][   T69]  wb_writeback+0x445/0xad0
[   69.602140][   T69]  ? queue_io+0x2b1/0x450
[   69.602163][   T69]  ? __pfx_wb_writeback+0x10/0x10
[   69.602176][   T69]  ? do_raw_spin_lock+0x12b/0x2f0
[   69.602204][   T69]  wb_workfn+0x3f8/0xef0
[   69.602215][   T69]  ? __lock_acquire+0x6b5/0x2cf0
[   69.602228][   T69]  ? look_up_lock_class+0x57/0x110
[   69.602265][   T69]  ? __pfx_wb_workfn+0x10/0x10
[   69.602278][   T69]  ? finish_task_switch+0x161/0x920
[   69.602302][   T69]  ? do_raw_spin_lock+0x12b/0x2f0
[   69.602318][   T69]  ? lock_acquire+0x106/0x330
[   69.602334][   T69]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   69.602355][   T69]  ? process_scheduled_works+0xa0f/0x17a0
[   69.602372][   T69]  ? process_scheduled_works+0xa0f/0x17a0
[   69.602392][   T69]  ? process_scheduled_works+0xa0f/0x17a0
[   69.602406][   T69]  ? process_scheduled_works+0xa0f/0x17a0
[   69.602422][   T69]  process_scheduled_works+0xaec/0x17a0
[   69.602468][   T69]  ? __pfx_process_scheduled_works+0x10/0x10
[   69.602507][   T69]  ? do_raw_spin_lock+0x12b/0x2f0
[   69.602532][   T69]  ? assign_work+0x3d3/0x440
[   69.602551][   T69]  worker_thread+0x89f/0xd90
[   69.602589][   T69]  kthread+0x726/0x8b0
[   69.602611][   T69]  ? __pfx_worker_thread+0x10/0x10
[   69.602625][   T69]  ? __pfx_kthread+0x10/0x10
[   69.602647][   T69]  ? _raw_spin_unlock_irq+0x23/0x50
[   69.602667][   T69]  ? __pfx_kthread+0x10/0x10
[   69.602686][   T69]  ret_from_fork+0x51b/0xa40
[   69.602704][   T69]  ? __pfx_ret_from_fork+0x10/0x10
[   69.602717][   T69]  ? __switch_to+0xc82/0x1410
[   69.602742][   T69]  ? __pfx_kthread+0x10/0x10
[   69.602761][   T69]  ret_from_fork_asm+0x1a/0x30
[   69.602794][   T69]  </TASK>
[   69.602800][   T69] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   69.653694][   T69] CPU: 1 UID: 0 PID: 69 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) 
[   69.653714][   T69] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.653723][   T69] Workqueue: writeback wb_workfn (flush-7:0)
[   69.653745][   T69] Call Trace:
[   69.653751][   T69]  <TASK>
[   69.653756][   T69]  dump_stack_lvl+0xe8/0x150
[   69.653777][   T69]  f2fs_handle_critical_error+0x37c/0x540
[   69.653801][   T69]  f2fs_write_end_io+0x886/0xb60
[   69.653836][   T69]  __submit_merged_bio+0x256/0x650
[   69.653859][   T69]  __submit_merged_write_cond+0x269/0x530
[   69.653883][   T69]  f2fs_write_data_pages+0x2806/0x3360
[   69.653928][   T69]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.653958][   T69]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   69.654001][   T69]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   69.654018][   T69]  ? __lock_acquire+0x6b5/0x2cf0
[   69.654047][   T69]  ? __lock_acquire+0x6b5/0x2cf0
[   69.654073][   T69]  ? __update_load_avg_se+0x79a/0xbe0
[   69.654092][   T69]  ? __pfx_hlock_conflict+0x10/0x10
[   69.654106][   T69]  ? __bfs+0x153/0x290
[   69.654118][   T69]  ? __pfx_hlock_conflict+0x10/0x10
[   69.654135][   T69]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.654156][   T69]  do_writepages+0x32e/0x550
[   69.654180][   T69]  ? reacquire_held_locks+0x104/0x190
[   69.654195][   T69]  ? writeback_sb_inodes+0x41f/0x1820
[   69.654217][   T69]  __writeback_single_inode+0x133/0x1230
[   69.654235][   T69]  ? do_raw_spin_unlock+0x4d/0x210
[   69.654259][   T69]  writeback_sb_inodes+0x92c/0x1820
[   69.654296][   T69]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   69.654309][   T69]  ? do_raw_spin_lock+0x12b/0x2f0
[   69.654357][   T69]  ? rcu_is_watching+0x15/0xb0
[   69.654376][   T69]  wb_writeback+0x445/0xad0
[   69.654395][   T69]  ? queue_io+0x2b1/0x450
[   69.654417][   T69]  ? __pfx_wb_writeback+0x10/0x10
[   69.654431][   T69]  ? do_raw_spin_lock+0x12b/0x2f0
[   69.654470][   T69]  wb_workfn+0x3f8/0xef0
[   69.654509][   T69]  ? __lock_acquire+0x6b5/0x2cf0
[   69.654521][   T69]  ? look_up_lock_class+0x57/0x110
[   69.654557][   T69]  ? __pfx_wb_workfn+0x10/0x10
[   69.654569][   T69]  ? finish_task_switch+0x161/0x920
[   69.654592][   T69]  ? do_raw_spin_lock+0x12b/0x2f0
[   69.654609][   T69]  ? lock_acquire+0x106/0x330
[   69.654623][   T69]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   69.654645][   T69]  ? process_scheduled_works+0xa0f/0x17a0
[   69.654661][   T69]  ? process_scheduled_works+0xa0f/0x17a0
[   69.654681][   T69]  ? process_scheduled_works+0xa0f/0x17a0
[   69.654694][   T69]  ? process_scheduled_works+0xa0f/0x17a0
[   69.654710][   T69]  process_scheduled_works+0xaec/0x17a0
[   69.654749][   T69]  ? __pfx_process_scheduled_works+0x10/0x10
[   69.654762][   T69]  ? do_raw_spin_lock+0x12b/0x2f0
[   69.654785][   T69]  ? assign_work+0x3d3/0x440
[   69.654805][   T69]  worker_thread+0x89f/0xd90
[   69.654842][   T69]  kthread+0x726/0x8b0
[   69.654863][   T69]  ? __pfx_worker_thread+0x10/0x10
[   69.654877][   T69]  ? __pfx_kthread+0x10/0x10
[   69.654898][   T69]  ? _raw_spin_unlock_irq+0x23/0x50
[   69.654916][   T69]  ? __pfx_kthread+0x10/0x10
[   69.654935][   T69]  ret_from_fork+0x51b/0xa40
[   69.654953][   T69]  ? __pfx_ret_from_fork+0x10/0x10
[   69.654966][   T69]  ? __switch_to+0xc82/0x1410
[   69.654989][   T69]  ? __pfx_kthread+0x10/0x10
[   69.655008][   T69]  ret_from_fork_asm+0x1a/0x30
[   69.655042][   T69]  </TASK>
[   69.655049][   T69] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   70.201320][ T6007] netlink: 'syz.0.42': attribute type 3 has an invalid length.
[   70.289924][ T6009] loop0: detected capacity change from 0 to 164
[   70.300372][ T6009] isofs_fill_super: get root inode failed
[   70.403512][ T6003] loop1: detected capacity change from 0 to 40427
[   70.429208][ T6003] F2FS-fs (loop1): Image doesn't support compression
[   70.431268][ T6003] F2FS-fs (loop1): build fault injection rate: 690
[   70.433811][ T6003] F2FS-fs (loop1): invalid crc value
[   70.514331][ T6003] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   70.529012][ T6003] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   70.579202][ T5838] syz-executor: attempt to access beyond end of device
[   70.579202][ T5838] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   70.583960][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   70.583972][ T5838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.583978][ T5838] Call Trace:
[   70.583982][ T5838]  <TASK>
[   70.583986][ T5838]  dump_stack_lvl+0xe8/0x150
[   70.584002][ T5838]  f2fs_handle_critical_error+0x37c/0x540
[   70.584024][ T5838]  f2fs_write_end_io+0x886/0xb60
[   70.584060][ T5838]  __submit_merged_bio+0x256/0x650
[   70.584080][ T5838]  __submit_merged_write_cond+0x269/0x530
[   70.584103][ T5838]  f2fs_write_data_pages+0x2806/0x3360
[   70.584145][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   70.584172][ T5838]  ? is_bpf_text_address+0x26/0x2b0
[   70.584200][ T5838]  ? arch_stack_walk+0xfb/0x150
[   70.584242][ T5838]  ? add_lock_to_list+0xc7/0x100
[   70.584261][ T5838]  ? lockdep_unlock+0x5d/0xd0
[   70.584272][ T5838]  ? __lock_acquire+0x146e/0x2cf0
[   70.584307][ T5838]  ? do_raw_spin_lock+0x12b/0x2f0
[   70.584323][ T5838]  ? do_raw_spin_unlock+0x4d/0x210
[   70.584333][ T5838]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   70.584345][ T5838]  do_writepages+0x32e/0x550
[   70.584361][ T5838]  ? do_raw_spin_unlock+0x4d/0x210
[   70.584373][ T5838]  filemap_fdatawrite+0x1e9/0x2f0
[   70.584387][ T5838]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   70.584461][ T5838]  ? do_raw_spin_unlock+0x4d/0x210
[   70.584484][ T5838]  f2fs_sync_dirty_inodes+0x30e/0x810
[   70.584504][ T5838]  f2fs_write_checkpoint+0x9c6/0x2490
[   70.584526][ T5838]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   70.584559][ T5838]  kill_f2fs_super+0x308/0x710
[   70.584569][ T5838]  ? __pfx_kill_f2fs_super+0x10/0x10
[   70.584587][ T5838]  deactivate_locked_super+0xbc/0x130
[   70.584597][ T5838]  cleanup_mnt+0x437/0x4d0
[   70.584605][ T5838]  ? _raw_spin_unlock_irq+0x23/0x50
[   70.584618][ T5838]  task_work_run+0x1d9/0x270
[   70.584631][ T5838]  ? __pfx_task_work_run+0x10/0x10
[   70.584646][ T5838]  exit_to_user_mode_loop+0xed/0x480
[   70.584656][ T5838]  ? rcu_is_watching+0x15/0xb0
[   70.584667][ T5838]  do_syscall_64+0x2b7/0xf80
[   70.584675][ T5838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.584684][ T5838]  ? trace_irq_disable+0x37/0x100
[   70.584703][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.584714][ T5838] RIP: 0033:0x7f4276b9bf17
[   70.584728][ T5838] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   70.584739][ T5838] RSP: 002b:00007ffe8e730028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   70.584749][ T5838] RAX: 0000000000000000 RBX: 00007f4276c0471f RCX: 00007f4276b9bf17
[   70.584754][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8e7300e0
[   70.584758][ T5838] RBP: 00007ffe8e7300e0 R08: 00007ffe8e7310e0 R09: 00000000ffffffff
[   70.584764][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8e731170
[   70.584768][ T5838] R13: 00007f4276c0471f R14: 0000000000011317 R15: 00007ffe8e7311b0
[   70.584782][ T5838]  </TASK>
[   70.584786][ T5838] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   70.762369][ T6031] Invalid ELF header magic: != ELF
[   70.944232][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'.
[   71.123849][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'.
[   71.236739][ T6058] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   71.283074][ T5982] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   71.330376][ T6064] loop0: detected capacity change from 0 to 512
[   71.337614][ T6064] =======================================================
[   71.337614][ T6064] WARNING: The mand mount option has been deprecated and
[   71.337614][ T6064]          and is ignored by this kernel. Remove the mand
[   71.337614][ T6064]          option from the mount to silence this warning.
[   71.337614][ T6064] =======================================================
[   71.407334][ T6064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.415065][ T6064] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   71.424496][ T6064] EXT4-fs error (device loop0): ext4_do_update_inode:5616: inode #2: comm syz.0.66: corrupted inode contents
[   71.430773][ T6064] EXT4-fs error (device loop0): ext4_dirty_inode:6501: inode #2: comm syz.0.66: mark_inode_dirty error
[   71.435705][ T6064] EXT4-fs error (device loop0): ext4_do_update_inode:5616: inode #2: comm syz.0.66: corrupted inode contents
[   71.436842][ T5982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.442447][ T6064] EXT4-fs error (device loop0): ext4_do_update_inode:5616: inode #2: comm syz.0.66: corrupted inode contents
[   71.446333][ T6073] syz.1.70 (6073) used greatest stack depth: 19456 bytes left
[   71.447911][ T6064] EXT4-fs error (device loop0): ext4_dirty_inode:6501: inode #2: comm syz.0.66: mark_inode_dirty error
[   71.450393][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   71.454468][ T6064] EXT4-fs error (device loop0): ext4_do_update_inode:5616: inode #2: comm syz.0.66: corrupted inode contents
[   71.461366][ T6064] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.66: mark_inode_dirty error
[   71.465018][ T6064] EXT4-fs error (device loop0): ext4_do_update_inode:5616: inode #2: comm syz.0.66: corrupted inode contents
[   71.468682][ T6064] EXT4-fs error (device loop0): ext4_dirty_inode:6501: inode #2: comm syz.0.66: mark_inode_dirty error
[   71.469146][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[   71.481821][ T6064] EXT4-fs error (device loop0): ext4_do_update_inode:5616: inode #2: comm syz.0.66: corrupted inode contents
[   71.484376][ T5982] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   71.495648][ T5982] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   71.501103][ T5982] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   71.505327][ T5982] usb 3-1: Manufacturer: syz
[   71.543579][ T5982] usb 3-1: config 0 descriptor??
[   71.552063][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.639349][ T5227] Bluetooth: hci2: command tx timeout
[   71.641109][   T56] Bluetooth: hci0: command tx timeout
[   71.642735][ T5936] Bluetooth: hci1: command tx timeout
[   71.725438][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'.
[   71.752066][ T6085] loop1: detected capacity change from 0 to 256
[   71.755368][ T6085] exfat: Deprecated parameter 'namecase'
[   71.789692][ T6085] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[   71.818982][ T5982] rc_core: IR keymap rc-hauppauge not found
[   71.820758][ T5982] Registered IR keymap rc-empty
[   71.825115][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   71.855732][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   71.871476][ T5982] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   71.876000][ T5982] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input4
[   71.894503][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   71.910784][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   71.929746][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   71.949475][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   71.968228][ T6096] loop1: detected capacity change from 0 to 64
[   71.975157][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   71.999402][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   72.020122][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   72.045477][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   72.059784][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   72.087648][ T5982] mceusb 3-1:0.0: Error: mce write urb status = -71
[   72.113865][ T5982] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   72.120730][ T5982] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   73.034217][ T6109] loop0: detected capacity change from 0 to 164
[   73.312266][ T6118] loop0: detected capacity change from 0 to 8
[   73.328788][ T6118] Page size > filesystem block size (512).  This is currently not supported!
[   73.647587][ T6124] netlink: 'syz.0.92': attribute type 29 has an invalid length.
[   74.208064][ T2215] usb 3-1: USB disconnect, device number 3
[   75.018825][ T6139] tmpfs: Bad value for 'mpol'
[   75.431988][ T6159] loop1: detected capacity change from 0 to 128
[   75.461452][ T6159] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   75.470363][ T6159] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   75.488832][ T6159] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 20: comm syz.1.100: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[   75.528375][ T6159] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem
[   75.605890][ T5838] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   75.781760][ T6180] capability: warning: `syz.2.116' uses deprecated v2 capabilities in a way that may be insecure
[   75.997222][ T6186] loop0: detected capacity change from 0 to 4096
[   76.012606][ T6186] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   76.039366][ T6186] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   76.045194][ T6186] ntfs3(loop0): ino=19, mi_enum_attr
[   76.070576][ T6174] loop1: detected capacity change from 0 to 32768
[   76.344266][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'.
[   76.347065][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'.
[   76.353731][ T6208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.129'.
[   76.616989][ T6225] xt_CT: You must specify a L4 protocol and not use inversions on it
[   76.720057][ T6231] loop0: detected capacity change from 0 to 128
[   76.733142][ T6231] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.739061][ T6231] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   76.772859][ T5846] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.060389][ T6254] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.085664][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   77.088276][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   77.124237][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'.
[   77.128383][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'.
[   77.129700][ T5982] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   77.167063][ T6260] loop0: detected capacity change from 0 to 128
[   77.267511][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'.
[   77.279464][ T5982] usb 3-1: Using ep0 maxpacket: 16
[   77.282461][ T5982] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   77.289498][ T5982] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   77.292491][ T5982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   77.310017][ T5982] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   77.312877][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.315637][ T5982] usb 3-1: Product: syz
[   77.321232][ T5982] usb 3-1: Manufacturer: syz
[   77.323025][ T5982] usb 3-1: SerialNumber: syz
[   77.489390][ T6281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'.
[   77.589743][ T6288] xfrm0: entered promiscuous mode
[   77.591294][ T6288] xfrm0: entered allmulticast mode
[   77.656634][ T6289] ptrace attach of "/syz-executor exec"[6290] was attempted by "/syz-executor exec"[6289]
[   77.834058][ T6300] cgroup: Invalid name
[   77.881484][ T6302] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.174'.
[   78.410264][ T5982] usb 3-1: 0:2 : does not exist
[   78.421000][ T5982] usb 3-1: USB disconnect, device number 4
[   78.477408][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.695999][ T6321] loop1: detected capacity change from 0 to 512
[   78.698565][ T6321] EXT4-fs: Ignoring removed bh option
[   78.702345][ T6321] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   78.715305][ T6321] EXT4-fs (loop1): 1 truncate cleaned up
[   78.719582][ T6321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.729703][ T6321] overlayfs: upper fs needs to support d_type.
[   78.840851][ T5838] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[   78.847078][ T5838] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[   78.935485][ T6327] loop0: detected capacity change from 0 to 256
[   78.947421][ T6327] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   78.982009][ T6327] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   79.121275][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.138872][ T5867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.308355][ T5867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.434689][ T5867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.556937][ T5867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.575036][   T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.578255][   T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.581843][   T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.584613][   T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.587380][   T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.825472][ T5867] bridge_slave_1: left allmulticast mode
[   79.827409][ T5867] bridge_slave_1: left promiscuous mode
[   79.840084][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.847193][ T5867] bridge_slave_0: left allmulticast mode
[   79.855559][ T5867] bridge_slave_0: left promiscuous mode
[   79.857469][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.242732][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.249878][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.253873][ T5867] bond0 (unregistering): Released all slaves
[   80.264750][ T6354] warning: `syz.2.198' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.424382][ T6365] loop2: detected capacity change from 0 to 2048
[   80.433542][ T6335] chnl_net:caif_netlink_parms(): no params data found
[   80.441850][ T6365] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   80.449535][ T6365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.663379][ T6374] binder: 6373:6374 ioctl c0306201 200000000540 returned -22
[   80.677584][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.689334][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.692187][ T6335] bridge_slave_0: entered allmulticast mode
[   80.697890][ T6335] bridge_slave_0: entered promiscuous mode
[   80.720005][ T5867] hsr_slave_0: left promiscuous mode
[   80.735883][ T6377] loop2: detected capacity change from 0 to 136
[   80.739263][ T5867] hsr_slave_1: left promiscuous mode
[   80.742135][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.744811][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.789165][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.791985][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.847418][ T5867] veth1_macvtap: left promiscuous mode
[   80.851020][   T56] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   80.854761][   T56] Bluetooth: hci2: Injecting HCI hardware error event
[   80.858824][ T5936] Bluetooth: hci2: hardware error 0x00
[   80.879234][ T5867] veth0_macvtap: left promiscuous mode
[   80.881686][ T5867] veth1_vlan: left promiscuous mode
[   80.883879][ T5867] veth0_vlan: left promiscuous mode
[   81.060340][ T6377] loop2: detected capacity change from 0 to 32768
[   81.085430][ T6377] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[   81.096294][ T6377] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   81.121759][ T6377] XFS (loop2): Ending clean mount
[   81.136244][ T6377] XFS (loop2): Quotacheck needed: Please wait.
[   81.186903][ T6377] XFS (loop2): Quotacheck: Done.
[   81.226437][ T5842] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   81.480289][ T5867] team0 (unregistering): Port device team_slave_1 removed
[   81.512813][ T5867] team0 (unregistering): Port device team_slave_0 removed
[   81.640466][   T56] Bluetooth: hci0: command tx timeout
[   81.847481][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.850718][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.853594][ T6335] bridge_slave_1: entered allmulticast mode
[   81.857596][ T6335] bridge_slave_1: entered promiscuous mode
[   81.865130][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'.
[   81.928717][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'.
[   81.943934][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.947012][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.963246][ T6379] Zero length message leads to an empty skb
[   81.965501][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.971606][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.974929][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.991406][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.120589][ T6335] team0: Port device team_slave_0 added
[   82.124900][ T6335] team0: Port device team_slave_1 added
[   82.166968][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.179268][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.209865][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.217754][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.244011][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.254394][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.364341][ T6335] hsr_slave_0: entered promiscuous mode
[   82.367601][ T6335] hsr_slave_1: entered promiscuous mode
[   82.371508][ T6335] debugfs: 'hsr0' already exists in 'hsr'
[   82.373856][ T6335] Cannot create hsr debugfs directory
[   82.665995][ T6416] mmap: syz.2.214 (6416) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   82.694861][ T6335] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.740291][ T6335] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.762267][ T6420] cgroup: noprefix used incorrectly
[   82.765917][ T6335] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.780569][ T6335] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.919182][ T5936] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   82.985383][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.024110][ T6335] 8021q: adding VLAN 0 to HW filter on device team0
[   83.041791][ T3142] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.044582][ T3142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.062443][ T6430] loop0: detected capacity change from 0 to 40427
[   83.064379][ T3142] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.067820][ T3142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.071541][ T6430] F2FS-fs: heap/no_heap options were deprecated
[   83.091385][ T6430] F2FS-fs (loop0): invalid crc value
[   83.188045][ T6430] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   83.194060][ T6430] F2FS-fs (loop0): Start checkpoint disabled!
[   83.205425][ T6430] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[   83.213767][ T6430] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   83.253905][   T36] kworker/u10:1: attempt to access beyond end of device
[   83.253905][   T36] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   83.271064][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[   83.271084][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.271092][   T36] Workqueue: writeback wb_workfn (flush-7:0)
[   83.271117][   T36] Call Trace:
[   83.271123][   T36]  <TASK>
[   83.271129][   T36]  dump_stack_lvl+0xe8/0x150
[   83.271149][   T36]  f2fs_handle_critical_error+0x37c/0x540
[   83.271175][   T36]  f2fs_write_end_io+0x886/0xb60
[   83.271219][   T36]  __submit_merged_bio+0x256/0x650
[   83.271243][   T36]  __submit_merged_write_cond+0x269/0x530
[   83.271266][   T36]  f2fs_write_data_pages+0x2806/0x3360
[   83.271312][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   83.271343][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   83.271384][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   83.271403][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[   83.271433][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[   83.271491][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   83.271514][   T36]  do_writepages+0x32e/0x550
[   83.271539][   T36]  ? reacquire_held_locks+0x104/0x190
[   83.271554][   T36]  ? writeback_sb_inodes+0x41f/0x1820
[   83.271577][   T36]  __writeback_single_inode+0x133/0x1230
[   83.271595][   T36]  ? do_raw_spin_unlock+0x4d/0x210
[   83.271617][   T36]  writeback_sb_inodes+0x92c/0x1820
[   83.271654][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   83.271670][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[   83.271721][   T36]  ? rcu_is_watching+0x15/0xb0
[   83.271746][   T36]  wb_writeback+0x445/0xad0
[   83.271767][   T36]  ? queue_io+0x2b1/0x450
[   83.271790][   T36]  ? __pfx_wb_writeback+0x10/0x10
[   83.271805][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[   83.271838][   T36]  wb_workfn+0x3f8/0xef0
[   83.271850][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[   83.271862][   T36]  ? look_up_lock_class+0x57/0x110
[   83.271898][   T36]  ? __pfx_wb_workfn+0x10/0x10
[   83.271911][   T36]  ? finish_task_switch+0x161/0x920
[   83.271934][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[   83.271948][   T36]  ? lock_acquire+0x106/0x330
[   83.271961][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   83.271981][   T36]  ? process_scheduled_works+0xa0f/0x17a0
[   83.271996][   T36]  ? process_scheduled_works+0xa0f/0x17a0
[   83.272017][   T36]  ? process_scheduled_works+0xa0f/0x17a0
[   83.272029][   T36]  ? process_scheduled_works+0xa0f/0x17a0
[   83.272045][   T36]  process_scheduled_works+0xaec/0x17a0
[   83.272083][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[   83.272096][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[   83.272116][   T36]  ? assign_work+0x3d3/0x440
[   83.272134][   T36]  worker_thread+0x89f/0xd90
[   83.272168][   T36]  kthread+0x726/0x8b0
[   83.272189][   T36]  ? __pfx_worker_thread+0x10/0x10
[   83.272210][   T36]  ? __pfx_kthread+0x10/0x10
[   83.272230][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.272248][   T36]  ? __pfx_kthread+0x10/0x10
[   83.272266][   T36]  ret_from_fork+0x51b/0xa40
[   83.272283][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[   83.272295][   T36]  ? __switch_to+0xc82/0x1410
[   83.272318][   T36]  ? __pfx_kthread+0x10/0x10
[   83.272335][   T36]  ret_from_fork_asm+0x1a/0x30
[   83.272366][   T36]  </TASK>
[   83.272372][   T36] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   83.361043][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.508081][ T6335] veth0_vlan: entered promiscuous mode
[   83.511896][ T6454] loop0: detected capacity change from 0 to 128
[   83.532088][ T6335] veth1_vlan: entered promiscuous mode
[   83.551631][ T6335] veth0_macvtap: entered promiscuous mode
[   83.556363][ T6335] veth1_macvtap: entered promiscuous mode
[   83.570470][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.581876][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.594218][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.603981][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.607278][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.626599][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.729501][ T5936] Bluetooth: hci0: command tx timeout
[   83.771834][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.779631][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.846240][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.859572][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.252997][ T6509] process 'syz.0.240' launched '/dev/fd/3' with NULL argv: empty string added
[   85.447271][ T6517] nfs: Unknown parameter 'ntext'
[   85.665695][ T6514] loop2: detected capacity change from 0 to 40427
[   85.699590][ T6514] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   85.702435][ T6514] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   85.714691][ T6514] F2FS-fs (loop2): invalid crc_offset: 33558524
[   85.774471][ T6514] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   85.785913][ T6514] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   85.788028][ T6514] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   85.798103][ T6531] loop0: detected capacity change from 0 to 16
[   85.799111][ T5936] Bluetooth: hci0: command tx timeout
[   85.821009][ T6531] erofs (device loop0): mounted with root inode @ nid 36.
[   85.821431][ T6514] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[   85.858435][ T6531] erofs (device loop0): inconsistent algorithmtype 2 for nid 36
[   85.866066][ T6531] erofs (device loop0): inconsistent algorithmtype 2 for nid 36
[   85.881786][ T6531] erofs (device loop0): read error -117 @ 43 of nid 36
[   86.351263][ T6544] loop0: detected capacity change from 0 to 40427
[   86.355531][ T6544] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(1)
[   86.358086][ T6544] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   86.362739][ T6544] F2FS-fs (loop0): invalid crc value
[   86.412134][ T6544] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   86.415729][ T6544] F2FS-fs (loop0): Start checkpoint disabled!
[   86.418681][ T6544] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[   86.423881][ T6544] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   86.426299][ T6544] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   86.462685][ T3142] kworker/u10:11: attempt to access beyond end of device
[   86.462685][ T3142] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   86.468330][ T3142] CPU: 1 UID: 0 PID: 3142 Comm: kworker/u10:11 Not tainted syzkaller #0 PREEMPT(full) 
[   86.468349][ T3142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.468358][ T3142] Workqueue: writeback wb_workfn (flush-7:0)
[   86.468382][ T3142] Call Trace:
[   86.468388][ T3142]  <TASK>
[   86.468394][ T3142]  dump_stack_lvl+0xe8/0x150
[   86.468415][ T3142]  f2fs_handle_critical_error+0x37c/0x540
[   86.468441][ T3142]  f2fs_write_end_io+0x886/0xb60
[   86.468477][ T3142]  __submit_merged_bio+0x256/0x650
[   86.468500][ T3142]  __submit_merged_write_cond+0x269/0x530
[   86.468524][ T3142]  f2fs_write_data_pages+0x2806/0x3360
[   86.468571][ T3142]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   86.468602][ T3142]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   86.468644][ T3142]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   86.468662][ T3142]  ? __lock_acquire+0x6b5/0x2cf0
[   86.468688][ T3142]  ? __lock_acquire+0x6b5/0x2cf0
[   86.468718][ T3142]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   86.468738][ T3142]  do_writepages+0x32e/0x550
[   86.468762][ T3142]  ? reacquire_held_locks+0x104/0x190
[   86.468776][ T3142]  ? writeback_sb_inodes+0x41f/0x1820
[   86.468797][ T3142]  __writeback_single_inode+0x133/0x1230
[   86.468815][ T3142]  ? do_raw_spin_unlock+0x4d/0x210
[   86.468837][ T3142]  writeback_sb_inodes+0x92c/0x1820
[   86.468871][ T3142]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   86.468884][ T3142]  ? do_raw_spin_lock+0x12b/0x2f0
[   86.468953][ T3142]  ? rcu_is_watching+0x15/0xb0
[   86.468979][ T3142]  wb_writeback+0x445/0xad0
[   86.469007][ T3142]  ? queue_io+0x2b1/0x450
[   86.469031][ T3142]  ? __pfx_wb_writeback+0x10/0x10
[   86.469045][ T3142]  ? do_raw_spin_lock+0x12b/0x2f0
[   86.469077][ T3142]  wb_workfn+0x3f8/0xef0
[   86.469090][ T3142]  ? __lock_acquire+0x6b5/0x2cf0
[   86.469102][ T3142]  ? look_up_lock_class+0x57/0x110
[   86.469139][ T3142]  ? __pfx_wb_workfn+0x10/0x10
[   86.469152][ T3142]  ? finish_task_switch+0x161/0x920
[   86.469174][ T3142]  ? do_raw_spin_lock+0x12b/0x2f0
[   86.469189][ T3142]  ? lock_acquire+0x106/0x330
[   86.469203][ T3142]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   86.469255][ T3142]  ? process_scheduled_works+0xa0f/0x17a0
[   86.469270][ T3142]  ? process_scheduled_works+0xa0f/0x17a0
[   86.469288][ T3142]  ? process_scheduled_works+0xa0f/0x17a0
[   86.469302][ T3142]  ? process_scheduled_works+0xa0f/0x17a0
[   86.469317][ T3142]  process_scheduled_works+0xaec/0x17a0
[   86.469356][ T3142]  ? __pfx_process_scheduled_works+0x10/0x10
[   86.469369][ T3142]  ? do_raw_spin_lock+0x12b/0x2f0
[   86.469394][ T3142]  ? assign_work+0x3d3/0x440
[   86.469414][ T3142]  worker_thread+0x89f/0xd90
[   86.469440][ T3142]  ? __kthread_parkme+0x7a/0x1f0
[   86.469465][ T3142]  kthread+0x726/0x8b0
[   86.469485][ T3142]  ? __pfx_worker_thread+0x10/0x10
[   86.469500][ T3142]  ? __pfx_kthread+0x10/0x10
[   86.469521][ T3142]  ? _raw_spin_unlock_irq+0x23/0x50
[   86.469540][ T3142]  ? __pfx_kthread+0x10/0x10
[   86.469559][ T3142]  ret_from_fork+0x51b/0xa40
[   86.469578][ T3142]  ? __pfx_ret_from_fork+0x10/0x10
[   86.469591][ T3142]  ? __switch_to+0xc82/0x1410
[   86.469611][ T3142]  ? __pfx_kthread+0x10/0x10
[   86.469628][ T3142]  ret_from_fork_asm+0x1a/0x30
[   86.469658][ T3142]  </TASK>
[   86.596284][ T3142] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   87.069679][ T6554] loop0: detected capacity change from 0 to 40427
[   87.116506][ T6554] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   87.120769][ T6554] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   87.140773][ T5846] syz-executor: attempt to access beyond end of device
[   87.140773][ T5846] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   87.145502][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   87.145514][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.145519][ T5846] Call Trace:
[   87.145524][ T5846]  <TASK>
[   87.145528][ T5846]  dump_stack_lvl+0xe8/0x150
[   87.145543][ T5846]  f2fs_handle_critical_error+0x37c/0x540
[   87.145558][ T5846]  f2fs_write_end_io+0x886/0xb60
[   87.145577][ T5846]  __submit_merged_bio+0x256/0x650
[   87.145589][ T5846]  __submit_merged_write_cond+0x269/0x530
[   87.145602][ T5846]  f2fs_write_data_pages+0x2806/0x3360
[   87.145626][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.145657][ T5846]  ? lock_acquire+0x106/0x330
[   87.145672][ T5846]  ? __lock_acquire+0x6b5/0x2cf0
[   87.145691][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.145702][ T5846]  do_writepages+0x32e/0x550
[   87.145717][ T5846]  ? do_raw_spin_unlock+0x4d/0x210
[   87.145729][ T5846]  filemap_fdatawrite+0x1e9/0x2f0
[   87.145741][ T5846]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   87.145770][ T5846]  ? do_raw_spin_unlock+0x4d/0x210
[   87.145782][ T5846]  f2fs_sync_dirty_inodes+0x30e/0x810
[   87.145800][ T5846]  f2fs_write_checkpoint+0x9c6/0x2490
[   87.145820][ T5846]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   87.145849][ T5846]  kill_f2fs_super+0x308/0x710
[   87.145859][ T5846]  ? __pfx_kill_f2fs_super+0x10/0x10
[   87.145876][ T5846]  deactivate_locked_super+0xbc/0x130
[   87.145885][ T5846]  cleanup_mnt+0x437/0x4d0
[   87.145892][ T5846]  ? _raw_spin_unlock_irq+0x23/0x50
[   87.145923][ T5846]  task_work_run+0x1d9/0x270
[   87.145938][ T5846]  ? __pfx_task_work_run+0x10/0x10
[   87.145958][ T5846]  exit_to_user_mode_loop+0xed/0x480
[   87.145967][ T5846]  ? rcu_is_watching+0x15/0xb0
[   87.145978][ T5846]  do_syscall_64+0x2b7/0xf80
[   87.145985][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.145992][ T5846]  ? trace_irq_disable+0x37/0x100
[   87.146004][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.146012][ T5846] RIP: 0033:0x7f230bb9bf17
[   87.146021][ T5846] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   87.146027][ T5846] RSP: 002b:00007ffc3e11cdf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   87.146036][ T5846] RAX: 0000000000000000 RBX: 00007f230bc0471f RCX: 00007f230bb9bf17
[   87.146042][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3e11ceb0
[   87.146046][ T5846] RBP: 00007ffc3e11ceb0 R08: 00007ffc3e11deb0 R09: 00000000ffffffff
[   87.146052][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3e11df40
[   87.146056][ T5846] R13: 00007f230bc0471f R14: 00000000000153e8 R15: 00007ffc3e11df80
[   87.146069][ T5846]  </TASK>
[   87.146107][ T5846] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   87.325322][   T10] cfg80211: failed to load regulatory.db
[   87.359113][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   87.455785][ T6565] loop0: detected capacity change from 0 to 256
[   87.512052][   T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[   87.515791][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[   87.521005][   T24] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[   87.524388][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.549787][   T24] usb 3-1: config 0 descriptor??
[   87.618715][ T6567] loop0: detected capacity change from 0 to 1024
[   87.654835][ T6567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.740832][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.879890][ T5936] Bluetooth: hci0: command tx timeout
[   87.959516][   T24] creative-sb0540 0003:041E:3100.0002: unbalanced collection at end of report description
[   87.971725][   T24] creative-sb0540 0003:041E:3100.0002: parse failed
[   87.974785][   T24] creative-sb0540 0003:041E:3100.0002: probe with driver creative-sb0540 failed with error -22
[   88.031587][ T6578] loop0: detected capacity change from 0 to 128
[   88.037480][ T6578] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   88.043332][ T6578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   88.127895][ T6582] loop0: detected capacity change from 0 to 2048
[   88.132539][ T6582] EXT4-fs: Ignoring removed i_version option
[   88.154363][ T6582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.159424][ T6582] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.166353][   T24] usb 3-1: USB disconnect, device number 5
[   88.502358][ T6586] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.268: bg 0: block 321: padding at end of block bitmap is not set
[   88.557198][ T6586] fs-verity (loop0, inode 13): Error -117 writing Merkle tree block 1
[   88.560108][ T6586] fs-verity (loop0, inode 13): Error -117 building Merkle tree
[   89.034779][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.205982][ T6599] erspan0: default FDB implementation only supports local addresses
[   89.312579][ T6606] loop0: detected capacity change from 0 to 512
[   89.322232][ T6606] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   89.345371][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'.
[   89.364774][ T6606] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   89.371682][ T6606] EXT4-fs (loop0): orphan cleanup on readonly fs
[   89.406078][ T6606] EXT4-fs error (device loop0): ext4_do_update_inode:5616: inode #16: comm syz.0.276: corrupted inode contents
[   89.419864][ T6606] EXT4-fs (loop0): Remounting filesystem read-only
[   89.422643][ T6606] EXT4-fs (loop0): 1 truncate cleaned up
[   89.431080][ T3142] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   89.438718][ T3142] Quota error (device loop0): write_blk: dquota write failed
[   89.443718][ T3142] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[   89.450409][ T3142] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   89.462268][ T3142] Quota error (device loop0): write_blk: dquota write failed
[   89.465861][ T3142] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[   89.470715][ T3142] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   89.480058][ T3142] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   89.491769][ T3142] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   89.511703][ T6606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   89.543436][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.703356][ T6591] overlayfs: statfs failed on './file0'
[   89.916394][ T6631] netlink: 'syz.2.285': attribute type 11 has an invalid length.
[   89.924887][ T6633] delete_channel: no stack
[   89.927211][ T6633] delete_channel: no stack
[   89.929128][ T6631] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.285'.
[   90.325640][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'.
[   90.329489][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'.
[   90.334478][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'.
[   90.338103][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'.
[   90.343704][ T6638] loop3: detected capacity change from 0 to 512
[   90.344907][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'.
[   90.349527][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'.
[   90.366659][ T6638] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 3: comm syz.3.288: lblock 0 mapped to illegal pblock 3 (length 1)
[   90.375816][ T6638] EXT4-fs (loop3): Remounting filesystem read-only
[   90.384322][ T6638] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.288: error -117 reading directory block
[   90.388259][ T6638] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   90.402694][ T6638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.406162][ T6641] loop2: detected capacity change from 0 to 2048
[   90.424669][ T6335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.476369][ T5844]  loop2: p1 < > p3
[   90.481771][ T5844] loop2: p3 size 134217728 extends beyond EOD, truncated
[   90.494991][ T6641]  loop2: p1 < > p3
[   90.500679][ T6641] loop2: p3 size 134217728 extends beyond EOD, truncated
[   90.628740][ T6651] loop3: detected capacity change from 0 to 2048
[   90.637983][ T6651] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.716731][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   90.724556][ T5839] udevd[5839]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   90.753844][ T5839] udevd[5839]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   90.784848][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   90.830690][ T6664] loop0: detected capacity change from 0 to 136
[   90.872392][ T6664] rock: directory entry would overflow storage
[   90.874323][ T6664] rock: sig=0x4f50, size=4, remaining=3
[   90.885566][ T6664] iso9660: Corrupted directory entry in block 2 of inode 1472
[   91.255000][ T6691] loop0: detected capacity change from 0 to 2048
[   91.269625][ T6691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.517960][ T6701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.909453][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   92.071899][   T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   92.074860][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.079421][   T10] usb 4-1: config 0 descriptor??
[   92.086062][   T10] cp210x 4-1:0.0: cp210x converter detected
[   92.090337][  T798] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   92.120083][ T6726] loop2: detected capacity change from 0 to 2048
[   92.131762][ T6726] NILFS: invalid option "cp=1": read-only option is not specified
[   92.249284][  T798] usb 1-1: Using ep0 maxpacket: 8
[   92.257378][  T798] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   92.263173][  T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.301085][  T798] pvrusb2: Hardware description: Terratec Grabster AV400
[   92.303326][  T798] pvrusb2: **********
[   92.309395][  T798] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   92.313330][  T798] pvrusb2: Important functionality might not be entirely working.
[   92.340973][  T798] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   92.344485][  T798] pvrusb2: **********
[   92.497431][   T10] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[   92.507617][ T2406] pvrusb2: Invalid write control endpoint
[   92.539329][   T10] usb 4-1: cp210x converter now attached to ttyUSB0
[   92.878001][   T10] usb 4-1: USB disconnect, device number 2
[   92.890174][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   92.890630][ T5906] usb 1-1: USB disconnect, device number 2
[   92.895353][   T10] cp210x 4-1:0.0: device disconnected
[   92.907205][ T2406] pvrusb2: Invalid write control endpoint
[   92.910135][ T2406] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   92.913359][ T2406] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   92.915627][ T2406] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   92.918537][ T2406] pvrusb2: Device being rendered inoperable
[   92.922927][ T2406] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[   92.925182][ T2406] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   92.930010][ T2406] pvrusb2: Attached sub-driver cx25840
[   92.931877][ T2406] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   92.934849][ T2406] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   93.795219][ T6741] loop3: detected capacity change from 0 to 65536
[   93.838893][ T6741] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[   93.842989][ T6741] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   93.863971][ T6741] XFS (loop3): Ending clean mount
[   93.880057][ T6741] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x6 
[   93.884316][ T6741] XFS (loop3): Unmount and run xfs_repair
[   93.886478][ T6741] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   93.889337][ T6741] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   93.892585][ T6741] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   93.895853][ T6741] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   93.901109][ T6741] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   93.904366][ T6741] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   93.907576][ T6741] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   93.911039][ T6741] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   93.914304][ T6741] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   93.917825][ T6741] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x6 len 2 error 74
[   93.922560][ T6741] XFS (loop3): page discard on page ffffea0006e0a000, inode 0x26, pos 66560.
[   93.927648][ T6741] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x6 
[   93.931994][ T6741] XFS (loop3): Unmount and run xfs_repair
[   93.934138][ T6741] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   93.936881][ T6741] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   93.940813][ T6741] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   93.944168][ T6741] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   93.947470][ T6741] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   93.950961][ T6741] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   93.954256][ T6741] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   93.957520][ T6741] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   93.962426][ T6741] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   93.965734][ T6741] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x6 len 2 error 74
[   93.970166][ T6741] XFS (loop3): page discard on page ffffea0006e0a200, inode 0x26, pos 98304.
[   93.975067][ T6741] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x6 
[   93.979308][ T6741] XFS (loop3): Unmount and run xfs_repair
[   93.981463][ T6741] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   93.984275][ T6741] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   93.987625][ T6741] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   93.991186][ T6741] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   93.994461][ T6741] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   93.997685][ T6741] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   94.001052][ T6741] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   94.004330][ T6741] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   94.007633][ T6741] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   94.011046][ T6741] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x6 len 2 error 74
[   94.015244][ T6741] XFS (loop3): page discard on page ffffea0006fe3340, inode 0x26, pos 131072.
[   94.051144][ T6335] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   94.061188][ T6335] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[   94.565316][ T6771] capability: warning: `syz.2.340' uses 32-bit capabilities (legacy support in use)
[   95.060868][ T6801] pim6reg: entered allmulticast mode
[   95.067152][ T6801] pim6reg: left allmulticast mode
[   95.119081][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   95.226252][ T6807] loop3: detected capacity change from 0 to 4096
[   95.231064][ T6807] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[   95.258610][ T6807] ntfs3(loop3): Failed to load root (-22).
[   95.272721][   T24] usb 3-1: config 1 has an invalid interface number: 142 but max is 0
[   95.278464][   T24] usb 3-1: config 1 has no interface number 0
[   95.289117][   T24] usb 3-1: config 1 interface 142 has no altsetting 0
[   95.298751][   T24] usb 3-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c6.7f
[   95.306367][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.315464][   T24] usb 3-1: Product: syz
[   95.317935][   T24] usb 3-1: Manufacturer: syz
[   95.320625][   T24] usb 3-1: SerialNumber: syz
[   95.364841][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'.
[   95.609961][   T24] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[   95.613153][   T24] usb 3-1: selecting invalid altsetting 0
[   95.617615][   T24] usb 3-1: USB disconnect, device number 6
[   95.621280][   T24] pvrusb2: Device being rendered inoperable
[   96.196954][ T6828] loop0: detected capacity change from 0 to 47
[   96.236568][ T6828] syz.0.358: attempt to access beyond end of device
[   96.236568][ T6828] loop0: rw=8390657, sector=50, nr_sectors = 2 limit=47
[   96.242346][ T6828] Buffer I/O error on dev loop0, logical block 25, lost async page write
[   96.245383][ T6828] syz.0.358: attempt to access beyond end of device
[   96.245383][ T6828] loop0: rw=8390657, sector=52, nr_sectors = 2 limit=47
[   96.249693][ T6828] Buffer I/O error on dev loop0, logical block 26, lost async page write
[   96.252540][ T6828] syz.0.358: attempt to access beyond end of device
[   96.252540][ T6828] loop0: rw=8390657, sector=54, nr_sectors = 2 limit=47
[   96.257450][ T6828] Buffer I/O error on dev loop0, logical block 27, lost async page write
[   96.423704][ T6834] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   96.557126][ T6839] bond1: option primary: mode dependency failed, not supported in mode 802.3ad(4)
[   96.566022][ T6839] bond1 (unregistering): Released all slaves
[   96.889354][ T5906] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   97.039727][ T5906] usb 1-1: Using ep0 maxpacket: 32
[   97.046863][ T5906] usb 1-1: config 0 interface 0 has no altsetting 0
[   97.052547][ T5906] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   97.055938][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.084298][ T5906] usb 1-1: Product: syz
[   97.085897][ T5906] usb 1-1: Manufacturer: syz
[   97.087647][ T5906] usb 1-1: SerialNumber: syz
[   97.103002][ T5906] usb 1-1: config 0 descriptor??
[   97.155651][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[   97.467054][ T6875] loop2: detected capacity change from 0 to 512
[   97.471087][ T6875] EXT4-fs: Ignoring removed mblk_io_submit option
[   97.473651][ T6875] EXT4-fs: inline encryption not supported
[   97.475710][ T6875] EXT4-fs: Ignoring removed mblk_io_submit option
[   97.478635][ T6875] EXT4-fs (loop2): Test dummy encryption mode enabled
[   97.484946][ T6875] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   97.506228][ T6875] EXT4-fs (loop2): 1 truncate cleaned up
[   97.510285][ T6875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.514299][ T5906] gs_usb 1-1:0.0: Configuring for 3 interfaces
[   97.564741][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.695621][ T6881] loop2: detected capacity change from 0 to 1024
[   97.911329][ T6883] loop2: detected capacity change from 0 to 4096
[   97.959824][ T6886] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   98.017935][ T6883] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[   98.027814][ T6885] loop3: detected capacity change from 0 to 4096
[   98.034848][ T6883] Remounting filesystem read-only
[   98.116811][ T5906] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[   98.121976][ T5842] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[   98.198588][ T5906] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[   98.231148][ T5906] usb 1-1: USB disconnect, device number 3
[   98.484042][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'.
[   98.550781][ T6902] loop3: detected capacity change from 0 to 8
[   98.608068][ T6904] loop2: detected capacity change from 0 to 2048
[   98.623011][ T6904] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.925013][ T6920] netlink: 2 bytes leftover after parsing attributes in process `syz.3.398'.
[   99.125821][   T24] IPVS: starting estimator thread 0...
[   99.219208][ T6935] IPVS: using max 55 ests per chain, 132000 per kthread
[   99.253721][ T6941] netlink: 'syz.3.408': attribute type 10 has an invalid length.
[   99.272091][ T6941] team0: Port device dummy0 added
[   99.282438][ T5901] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   99.395937][ T6946] loop3: detected capacity change from 0 to 2048
[   99.414665][ T6946] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.429327][ T5901] usb 3-1: Using ep0 maxpacket: 8
[   99.440637][ T5901] usb 3-1: config 7 has an invalid interface number: 140 but max is 0
[   99.443648][ T5901] usb 3-1: config 7 has no interface number 0
[   99.446842][ T5901] usb 3-1: config 7 interface 140 has no altsetting 0
[   99.455438][ T5901] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=a1.aa
[   99.469745][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.475624][ T5901] usb 3-1: Product: syz
[   99.483185][ T5901] usb 3-1: Manufacturer: syz
[   99.485726][ T5901] usb 3-1: SerialNumber: syz
[   99.964567][ T5901] ldusb 3-1:7.140: Interrupt in endpoint not found
[   99.974707][ T5901] usb 3-1: USB disconnect, device number 7
[  100.084664][ T6952] loop0: detected capacity change from 0 to 256
[  100.094771][ T6952] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  100.113521][ T6952] exFAT-fs (loop0): valid_size(150994954) is greater than size(10)
[  100.228853][ T6956] loop0: detected capacity change from 0 to 512
[  100.232097][ T6956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.238283][ T6956] EXT4-fs (loop0): orphan cleanup on readonly fs
[  100.240799][ T6956] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.414: inode #15: comm syz.0.414: iget: illegal inode #
[  100.245387][ T6956] EXT4-fs (loop0): Remounting filesystem read-only
[  100.248155][ T6956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  100.271164][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.090152][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.429'.
[  101.093652][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.429'.
[  101.635240][ T7008] binder: 7007:7008 ioctl c06c4124 0 returned -22
[  101.678644][ T7010] loop2: detected capacity change from 0 to 64
[  101.835805][ T7016] binder: 7015:7016 ioctl c0306201 0 returned -14
[  102.057608][ T7026] loop0: detected capacity change from 0 to 256
[  102.121612][ T7026] FAT-fs (loop0): Directory bread(block 64) failed
[  102.123775][ T7026] FAT-fs (loop0): Directory bread(block 65) failed
[  102.126287][ T7026] FAT-fs (loop0): Directory bread(block 66) failed
[  102.128663][ T7026] FAT-fs (loop0): Directory bread(block 67) failed
[  102.169281][ T7026] FAT-fs (loop0): Directory bread(block 68) failed
[  102.172003][ T7026] FAT-fs (loop0): Directory bread(block 69) failed
[  102.174551][ T7026] FAT-fs (loop0): Directory bread(block 70) failed
[  102.176981][ T7026] FAT-fs (loop0): Directory bread(block 71) failed
[  102.189433][ T7026] FAT-fs (loop0): Directory bread(block 72) failed
[  102.191881][ T7026] FAT-fs (loop0): Directory bread(block 73) failed
[  102.631100][ T7042] tmpfs: Bad value for 'mpol'
[  102.643441][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'.
[  102.662929][ T7044] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.735863][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'.
[  102.738396][ T7044] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  102.764521][ T7047] Bluetooth: MGMT ver 1.23
[  103.144615][ T7051] loop3: detected capacity change from 0 to 32768
[  103.193487][ T7051] JBD2: Ignoring recovery information on journal
[  103.196784][ T7051] JBD2: Journal too short (blocks 2-2).
[  103.198464][ T7051] JBD2: journal reset failed
[  103.204263][ T7051] (syz.3.455,7051,0):ocfs2_journal_load:1160 ERROR: Failed to load journal!
[  103.207477][ T7051] (syz.3.455,7051,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -22
[  103.211370][ T7051] (syz.3.455,7051,0):ocfs2_check_volume:2432 ERROR: status = -22
[  103.214132][ T7051] (syz.3.455,7051,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  103.224778][ T7051] (syz.3.455,7051,0):ocfs2_fill_super:1177 ERROR: status = -22
[  103.419853][ T7048] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  103.426756][ T7048] bond1 (unregistering): Released all slaves
[  103.534764][ T7068] netlink: 44 bytes leftover after parsing attributes in process `syz.3.463'.
[  103.799135][ T5904] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  103.950941][ T5904] usb 1-1: config 1 interface 0 altsetting 93 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  103.954949][ T5904] usb 1-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  103.969506][ T5904] usb 1-1: config 1 interface 0 has no altsetting 0
[  103.975375][ T5904] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  103.978308][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  103.981085][ T5904] usb 1-1: SerialNumber: syz
[  103.992621][ T7070] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  104.215233][ T7070] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  104.548335][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'.
[  104.551685][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'.
[  104.554881][ T7082] netlink: 'syz.3.468': attribute type 15 has an invalid length.
[  104.656607][ T5904] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[  104.860164][ T5904] usb 1-1: USB disconnect, device number 4
[  104.863096][ T5904] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  105.173564][ T7111] netlink: 120 bytes leftover after parsing attributes in process `syz.3.476'.
[  105.193198][ T7111] netlink: 88 bytes leftover after parsing attributes in process `syz.3.476'.
[  105.313135][ T7120] loop2: detected capacity change from 0 to 128
[  105.404740][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'.
[  105.471892][ T7128] loop0: detected capacity change from 0 to 128
[  105.634016][ T7134] wg1: entered promiscuous mode
[  105.635699][ T7134] wg1: entered allmulticast mode
[  105.654861][ T3026] kworker/u10:9: attempt to access beyond end of device
[  105.654861][ T3026] loop0: rw=1, sector=145, nr_sectors = 8 limit=128
[  105.663990][ T3026] kworker/u10:9: attempt to access beyond end of device
[  105.663990][ T3026] loop0: rw=1, sector=161, nr_sectors = 8 limit=128
[  105.674059][ T3026] kworker/u10:9: attempt to access beyond end of device
[  105.674059][ T3026] loop0: rw=1, sector=177, nr_sectors = 8 limit=128
[  105.681675][ T3026] kworker/u10:9: attempt to access beyond end of device
[  105.681675][ T3026] loop0: rw=1, sector=193, nr_sectors = 8 limit=128
[  105.689302][ T3026] kworker/u10:9: attempt to access beyond end of device
[  105.689302][ T3026] loop0: rw=1, sector=209, nr_sectors = 8 limit=128
[  105.699189][ T3026] kworker/u10:9: attempt to access beyond end of device
[  105.699189][ T3026] loop0: rw=1, sector=225, nr_sectors = 8 limit=128
[  105.719380][ T3026] kworker/u10:9: attempt to access beyond end of device
[  105.719380][ T3026] loop0: rw=1, sector=241, nr_sectors = 8 limit=128
[  105.742709][ T3026] kworker/u10:9: attempt to access beyond end of device
[  105.742709][ T3026] loop0: rw=1, sector=257, nr_sectors = 8 limit=128
[  105.747906][ T3026] kworker/u10:9: attempt to access beyond end of device
[  105.747906][ T3026] loop0: rw=1, sector=273, nr_sectors = 8 limit=128
[  105.765713][ T3026] kworker/u10:9: attempt to access beyond end of device
[  105.765713][ T3026] loop0: rw=1, sector=289, nr_sectors = 8 limit=128
[  106.021865][ T7146] loop3: detected capacity change from 0 to 128
[  106.035242][ T7146] vxfs: WRONG superblock magic 7b3185b5 at 1
[  106.142532][ T7146] vxfs: unsupported VxFS version (-1232326277)
[  106.459169][ T5905] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  106.576042][ T7153] mkiss: ax0: crc mode is auto.
[  106.648179][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.695174][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.698497][ T5905] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  106.702019][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.730334][ T5905] usb 3-1: config 0 descriptor??
[  107.162088][ T7179] vlan2: entered promiscuous mode
[  107.163730][ T7179] macvtap0: entered promiscuous mode
[  107.525851][ T7202] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  107.542182][ T5905] hid-led 0003:0FC5:B080.0003: probe with driver hid-led failed with error -71
[  107.555838][ T5905] usb 3-1: USB disconnect, device number 8
[  107.620229][ T7204] 9p: Could not find request transport: 0xffffffffffffffff
[  108.082467][ T7219] loop3: detected capacity change from 0 to 512
[  108.090217][ T7219] EXT4-fs: Ignoring removed i_version option
[  108.101471][ T7219] EXT4-fs (loop3): orphan cleanup on readonly fs
[  108.106014][ T7219] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.521: EA inode hash validation failed
[  108.111020][ T7219] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  108.114916][ T7219] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.521: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  108.122494][ T7219] EXT4-fs (loop3): Remounting filesystem read-only
[  108.124430][ T7219] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.521: ea_inode dec ref err=-117
[  108.128744][ T7219] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30)
[  108.138324][ T7219] EXT4-fs (loop3): 1 orphan inode deleted
[  108.142559][ T7219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  108.167564][ T6335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.329379][ T5982] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  108.482780][ T5982] usb 3-1: unable to get BOS descriptor or descriptor too short
[  108.486878][ T5982] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  108.491741][ T5982] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  108.494339][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.496657][ T5982] usb 3-1: Product: syz
[  108.497882][ T5982] usb 3-1: Manufacturer: syz
[  108.499445][ T5982] usb 3-1: SerialNumber: syz
[  108.605946][ T7228] netlink: 'syz.0.524': attribute type 2 has an invalid length.
[  108.611307][ T7228] netlink: 'syz.0.524': attribute type 1 has an invalid length.
[  108.889059][  T798] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  109.039100][  T798] usb 1-1: Using ep0 maxpacket: 32
[  109.049649][  T798] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  109.055955][  T798] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  109.072161][  T798] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  109.077016][  T798] usb 1-1: Product: syz
[  109.078621][  T798] usb 1-1: Manufacturer: syz
[  109.081409][  T798] usb 1-1: SerialNumber: syz
[  109.085976][  T798] usb 1-1: config 0 descriptor??
[  109.093181][ T7230] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  109.273538][ T7239] loop3: detected capacity change from 0 to 512
[  109.294403][ T7239] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  109.340110][ T5982] usb 3-1: reset high-speed USB device number 9 using dummy_hcd
[  109.445888][ T5906] usb 1-1: USB disconnect, device number 5
[  109.492216][ T5982] usb 3-1: unable to get BOS descriptor or descriptor too short
[  109.554947][ T7246] futex_wake_op: syz.3.532 tries to shift op by 32; fix this program
[  109.709823][ T5982] usb 3-1: USB disconnect, device number 9
[  109.869039][ T5904] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  110.123554][ T5904] usb 4-1: Using ep0 maxpacket: 32
[  110.128020][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.132327][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.135989][ T5904] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  110.139500][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.150515][ T5904] usb 4-1: config 0 descriptor??
[  110.663460][ T5904] ft260 0003:0403:6030.0004: item fetching failed at offset 0/2
[  110.665969][ T5904] ft260 0003:0403:6030.0004: failed to parse HID
[  110.667851][ T5904] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -22
[  110.871552][ T5905] usb 4-1: USB disconnect, device number 3
[  111.092703][ T7280] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  111.833969][ T7297] loop3: detected capacity change from 0 to 8192
[  112.204067][ T7301] trusted_key: encrypted_key: insufficient parameters specified
[  112.659027][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  112.739049][ T5905] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  112.809284][ T5906] usb 4-1: Using ep0 maxpacket: 8
[  112.813631][ T5906] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  112.816372][ T5906] usb 4-1: config 179 has no interface number 0
[  112.818296][ T5906] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  112.821825][ T5906] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  112.825137][ T5906] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  112.828389][ T5906] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  112.831831][ T5906] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  112.835638][ T5906] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  112.838329][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.849084][ T7312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  112.889062][ T5905] usb 1-1: Using ep0 maxpacket: 8
[  112.893066][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.896150][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F
[  112.899828][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  112.902764][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.908490][ T5905] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  112.911426][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  112.913902][ T5905] usb 1-1: SerialNumber: syz
[  112.918185][ T5905] usb 1-1: config 0 descriptor??
[  112.923669][ T5905] hso 1-1:0.0: Can't find BULK IN endpoint
[  113.124745][ T5982] usb 1-1: USB disconnect, device number 6
[  113.331516][ T5982] usb 4-1: USB disconnect, device number 4
[  113.331516][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  113.336883][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  113.480245][  T184] wlan1: Trigger new scan to find an IBSS to join
[  113.556111][ T7335] ref_ctr_offset mismatch. inode: 0x38c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2f30656c69662f2e
[  113.759491][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.577'.
[  113.823055][ T7351] loop0: detected capacity change from 0 to 8
[  113.837723][ T7351] SQUASHFS error: Unable to read directory block [2c0:35]
[  114.052884][ T5982] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  114.220559][ T5982] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  114.224359][ T5982] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  114.227437][ T5982] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  114.237420][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.254547][ T7349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  114.263189][ T5982] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  114.275835][ T7356] loop3: detected capacity change from 0 to 32768
[  114.310535][ T7356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.582 (7356)
[  114.364653][ T7356] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  114.391106][ T7356] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  114.478050][  T798] usb 3-1: USB disconnect, device number 10
[  114.573287][ T7356] BTRFS info (device loop3): enabling ssd optimizations
[  114.576004][ T7356] BTRFS info (device loop3): turning on async discard
[  114.578599][ T7356] BTRFS info (device loop3): enabling free space tree
[  114.687693][ T6335] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  114.692053][ T7389] loop0: detected capacity change from 0 to 4096
[  114.855006][ T7395] netlink: 'syz.3.593': attribute type 7 has an invalid length.
[  114.857970][ T7395] netlink: 'syz.3.593': attribute type 5 has an invalid length.
[  114.869343][ T7395] netlink: 17 bytes leftover after parsing attributes in process `syz.3.593'.
[  115.036145][ T7401] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.596'.
[  115.139713][ T7405] sctp: [Deprecated]: syz.0.597 (pid 7405) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.139713][ T7405] Use struct sctp_sack_info instead
[  115.459316][ T7428] loop3: detected capacity change from 0 to 256
[  115.648404][ T7438] loop0: detected capacity change from 0 to 64
[  115.774405][ T7448] loop3: detected capacity change from 0 to 512
[  115.785857][ T7448] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  115.794411][ T7448] EXT4-fs (loop3): Unsupported encryption level 249
[  115.893066][ T7457] netlink: 300 bytes leftover after parsing attributes in process `syz.3.622'.
[  115.918068][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'.
[  115.960338][ T7461] loop3: detected capacity change from 0 to 512
[  115.963421][ T7461] EXT4-fs: Ignoring removed orlov option
[  115.966190][ T7461] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  115.992458][ T7461] EXT4-fs (loop3): 1 orphan inode deleted
[  115.994380][ T7461] EXT4-fs (loop3): 1 truncate cleaned up
[  115.996772][ T7461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.004063][ T7461] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.624: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0
[  116.012941][ T7461] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  116.030043][ T6335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.450354][ T1997] wlan1: Trigger new scan to find an IBSS to join
[  116.585439][ T7481] loop2: detected capacity change from 0 to 1024
[  116.594872][ T7481] EXT4-fs: inline encryption not supported
[  116.597177][ T7481] EXT4-fs: Ignoring removed i_version option
[  116.602308][ T7481] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  116.613297][ T7481] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.632: lblock 2 mapped to illegal pblock 2 (length 1)
[  116.622409][ T7481] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  116.625531][ T7481] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.632: lblock 0 mapped to illegal pblock 48 (length 1)
[  116.639341][ T7481] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  116.643273][ T7481] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.632: Failed to acquire dquot type 0
[  116.646860][ T7481] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6297: Corrupt filesystem
[  116.663036][ T7481] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.632: mark_inode_dirty error
[  116.671243][ T7481] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  116.673196][ T7484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'.
[  116.675110][ T7481] EXT4-fs (loop2): 1 orphan inode deleted
[  116.682858][ T7481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.694891][ T2034] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u10:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  116.710176][ T2034] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  116.719064][ T2034] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u10:7: Failed to release dquot type 0
[  116.732561][ T7481] EXT4-fs error (device loop2): __ext4_get_inode_loc:4829: comm syz.2.632: Invalid inode table block 1 in block_group 0
[  116.756778][ T7486] loop0: detected capacity change from 0 to 512
[  116.761229][ T7481] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6297: Corrupt filesystem
[  116.791782][ T7486] EXT4-fs (loop0): Test dummy encryption mode enabled
[  116.793931][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.794345][ T7486] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  116.797881][ T5842] EXT4-fs error (device loop2): __ext4_get_inode_loc:4829: comm syz-executor: Invalid inode table block 1 in block_group 0
[  116.809887][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  116.811406][ T5842] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6297: Corrupt filesystem
[  116.817365][ T5842] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error
[  116.846855][ T7486] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.634: bad orphan inode 131083
[  116.873427][ T7486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.961309][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.965300][ T5906] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  116.978536][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.985536][ T7486] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  116.992034][ T5906] usb 4-1: config 0 descriptor??
[  117.022223][ T7494] overlayfs: upper fs needs to support d_type.
[  117.146990][ T7494] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  117.196547][ T5846] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /258/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  117.224388][ T5906] usbhid 4-1:0.0: can't add hid device: -71
[  117.226957][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  117.243611][ T5906] usb 4-1: USB disconnect, device number 5
[  117.564946][ T5867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.576651][ T5867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.584519][ T7515] loop2: detected capacity change from 0 to 256
[  117.621403][ T7515] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[  117.669844][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  117.684412][ T5867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.687402][ T5867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.745319][ T7517] loop2: detected capacity change from 0 to 2048
[  117.760038][ T7517] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  117.764359][ T7517] NILFS (loop2): too large filesystem blocksize: 2 ^ 347668480 KiB
[  117.801682][ T5867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.804677][ T5867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.839376][   T24] usb 4-1: Using ep0 maxpacket: 32
[  117.844746][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.851058][   T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  117.860236][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.869377][   T24] usb 4-1: config 0 descriptor??
[  117.873249][   T24] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  117.895722][   T24] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  117.930460][ T5867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.933696][ T5867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.956786][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.003070][ T7523] netlink: 52 bytes leftover after parsing attributes in process `syz.2.647'.
[  118.005622][ T7523] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  118.108200][ T5867] bridge_slave_1: left allmulticast mode
[  118.119485][ T5867] bridge_slave_1: left promiscuous mode
[  118.121247][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.126985][ T5867] bridge_slave_0: left allmulticast mode
[  118.139402][ T5867] bridge_slave_0: left promiscuous mode
[  118.141250][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.307732][   T24] usb 4-1: USB disconnect, device number 6
[  118.315112][   T24] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  118.374718][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.378853][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.382488][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.386051][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.400844][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.554113][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.559860][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.563508][ T5867] bond0 (unregistering): Released all slaves
[  118.646113][ T7542] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size.
[  119.050546][ T5867] hsr_slave_0: left promiscuous mode
[  119.052685][ T5867] hsr_slave_1: left promiscuous mode
[  119.056214][ T7562] Cannot find add_set index 0 as target
[  119.056247][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.060990][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.064021][ T5867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.066274][ T5867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.085906][ T5867] veth1_macvtap: left promiscuous mode
[  119.087807][ T5867] veth0_macvtap: left promiscuous mode
[  119.107080][ T5867] veth1_vlan: left promiscuous mode
[  119.108757][ T5867] veth0_vlan: left promiscuous mode
[  119.132459][ T7564] Illegal XDP return value 4294967274 on prog  (id 50) dev N/A, expect packet loss!
[  119.554047][ T7583] erofs (device loop7): cannot find valid erofs superblock
[  119.743545][ T7577] loop2: detected capacity change from 0 to 32768
[  120.017296][ T5867] team0 (unregistering): Port device team_slave_1 removed
[  120.059249][ T5867] team0 (unregistering): Port device team_slave_0 removed
[  120.170665][ T7587] fuse: root generation should be zero
[  120.444079][   T56] Bluetooth: hci2: command tx timeout
[  120.502890][ T7596] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  120.507059][ T7596] cramfs: block size(16384) > page size(4096) not supported by filesystem
[  120.527309][ T7596] cramfs: wrong magic
[  120.715854][ T7537] chnl_net:caif_netlink_parms(): no params data found
[  120.772379][ T7604] loop3: detected capacity change from 0 to 1024
[  120.792481][ T7604] EXT4-fs: Ignoring removed nobh option
[  120.854978][ T7604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.869133][ T5904] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  120.905447][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.909280][ T7604] EXT4-fs (loop3): pa ffff888107914cb0: logic 1, phys. 129, len 4
[  120.912270][ T7604] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3
[  120.928208][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.928393][ T7604] EXT4-fs (loop3): Remounting filesystem read-only
[  120.933766][ T7537] bridge_slave_0: entered allmulticast mode
[  120.943001][ T7537] bridge_slave_0: entered promiscuous mode
[  120.955998][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.959096][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.962231][ T7537] bridge_slave_1: entered allmulticast mode
[  120.966279][ T7537] bridge_slave_1: entered promiscuous mode
[  120.980227][ T6335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.020297][ T7537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.029074][ T7537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.041721][ T5904] usb 3-1: not running at top speed; connect to a high speed hub
[  121.046079][ T5904] usb 3-1: config 217 has an invalid interface number: 66 but max is 0
[  121.054443][ T5904] usb 3-1: config 217 has no interface number 0
[  121.056885][ T5904] usb 3-1: config 217 interface 66 has no altsetting 0
[  121.065279][ T5904] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01ed, bcdDevice=57.d6
[  121.082916][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.085931][ T5904] usb 3-1: Product: syz
[  121.087415][ T5904] usb 3-1: Manufacturer: syz
[  121.090846][ T7615] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.677'.
[  121.106936][ T7537] team0: Port device team_slave_0 added
[  121.109214][ T5904] usb 3-1: SerialNumber: syz
[  121.132002][ T7537] team0: Port device team_slave_1 added
[  121.176200][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.192410][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.209631][ T7537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.219584][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.222282][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.239046][ T7537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.344642][ T7537] hsr_slave_0: entered promiscuous mode
[  121.347683][ T7537] hsr_slave_1: entered promiscuous mode
[  121.352705][ T5904] ftdi_sio 3-1:217.66: FTDI USB Serial Device converter detected
[  121.356697][ T5904] ftdi_sio ttyUSB0: unknown device type: 0x57d6
[  121.374355][ T7537] debugfs: 'hsr0' already exists in 'hsr'
[  121.376783][ T5904] usb 3-1: USB disconnect, device number 11
[  121.379138][ T7537] Cannot create hsr debugfs directory
[  121.395919][ T5904] ftdi_sio 3-1:217.66: device disconnected
[  121.679403][ T7537] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  121.685440][ T7537] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  121.692224][ T7537] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  121.697298][ T7537] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  121.790360][ T7537] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.803173][ T7537] 8021q: adding VLAN 0 to HW filter on device team0
[  121.811357][ T1997] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.813597][ T1997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.831498][ T1997] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.833655][ T1997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.870854][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  121.994700][ T7537] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.019399][ T5906] usb 4-1: Using ep0 maxpacket: 8
[  122.024288][ T5906] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.031842][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0
[  122.034867][ T5906] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  122.038022][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.043651][ T7655] loop2: detected capacity change from 0 to 128
[  122.052764][ T7655] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  122.062239][ T5906] usb 4-1: config 0 descriptor??
[  122.090227][ T7655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.310963][ T7537] veth0_vlan: entered promiscuous mode
[  122.321616][ T7537] veth1_vlan: entered promiscuous mode
[  122.348330][ T7537] veth0_macvtap: entered promiscuous mode
[  122.356999][ T7537] veth1_macvtap: entered promiscuous mode
[  122.374627][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.387872][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.400640][ T5867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.408844][ T5867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.414811][ T5867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.418122][ T5867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.497830][ T5906] hid-multitouch 0003:0EEF:72D0.0005: unknown main item tag 0x1
[  122.523057][ T5906] hid-multitouch 0003:0EEF:72D0.0005: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0
[  122.530680][   T56] Bluetooth: hci2: command tx timeout
[  122.547851][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.556911][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.593982][ T1997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.596907][ T1997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.707190][ T5906] usb 4-1: USB disconnect, device number 7
[  122.864509][ T7673] loop2: detected capacity change from 0 to 1024
[  122.889141][ T7673] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  122.904245][ T7673] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (31873!=4)
[  122.908004][ T7673] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  122.927410][ T7673] EXT4-fs (loop2): filesystem has both journal inode and journal device!
[  123.595975][ T7704] loop3: detected capacity change from 0 to 8
[  123.621781][ T7704] squashfs image failed sanity check
[  123.752326][ T7709] loop3: detected capacity change from 0 to 128
[  123.776721][ T7709] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  123.800859][ T7709] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  123.865389][ T3980] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  123.912802][ T7713] loop3: detected capacity change from 0 to 128
[  124.005641][ T7698] loop2: detected capacity change from 0 to 40427
[  124.022976][ T7698] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3584) blocks(787456)
[  124.026453][ T7698] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  124.054275][ T7698] F2FS-fs (loop2): Image doesn't support compression
[  124.059353][ T7698] F2FS-fs (loop2): build fault injection rate: 690
[  124.061950][ T7698] F2FS-fs (loop2): build fault injection type: 0x4
[  124.080123][ T7698] F2FS-fs (loop2): invalid crc value
[  124.082182][ T7698] F2FS-fs (loop2): Wrong cp_pack_start_sum: 1
[  124.084566][ T7698] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[  124.370821][ T7721] loop3: detected capacity change from 0 to 32768
[  124.378532][ T7721] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.712 (7721)
[  124.391900][ T7721] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  124.395248][ T7721] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm
[  124.489882][ T7721] BTRFS info (device loop3): enabling ssd optimizations
[  124.492499][ T7721] BTRFS info (device loop3): turning on async discard
[  124.498895][ T7721] BTRFS info (device loop3): enabling free space tree
[  124.501629][ T7721] BTRFS info (device loop3): use zstd compression, level 3
[  124.532021][   T34] audit: type=1800 audit(1769253521.143:3): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.712" name="file1" dev="loop3" ino=260 res=0 errno=0
[  124.601834][   T56] Bluetooth: hci2: command tx timeout
[  124.610582][ T7753] netlink: 'syz.4.720': attribute type 1 has an invalid length.
[  124.670827][ T6335] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  124.989345][ T5887] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  125.045984][ T7763] loop4: detected capacity change from 0 to 32768
[  125.070542][ T7763] ialloc: diAlloc returned -5!
[  125.604500][ T7768] loop4: detected capacity change from 0 to 131072
[  125.610640][ T7768] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name
[  125.613482][ T7768] F2FS-fs (loop4): invalid crc value
[  125.645835][ T7768] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  125.649594][ T7768] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955
[  125.995307][ T5887] usb 3-1: Using ep0 maxpacket: 32
[  126.000082][ T5887] usb 3-1: config 0 has an invalid interface number: 215 but max is 0
[  126.003380][ T5887] usb 3-1: config 0 has no interface number 0
[  126.017847][ T7777] loop3: detected capacity change from 0 to 256
[  126.031211][ T5887] usb 3-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24
[  126.033356][ T7777] exfat: Bad value for 'time_offset'
[  126.034661][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.039938][ T5887] usb 3-1: Product: syz
[  126.041523][ T5887] usb 3-1: Manufacturer: syz
[  126.043146][ T5887] usb 3-1: SerialNumber: syz
[  126.047075][ T5887] usb 3-1: config 0 descriptor??
[  126.053780][ T5887] io_ti 3-1:0.215: required endpoints missing
[  126.153604][ T7783] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  126.331973][ T7790] block device autoloading is deprecated and will be removed.
[  126.679586][   T56] Bluetooth: hci2: command tx timeout
[  126.920995][ T7796] loop2: detected capacity change from 0 to 512
[  126.940723][ T7796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.958494][ T7796] EXT4-fs warning (device loop2): ext4_begin_enable_verity:135: inode #15: comm syz.2.739: verity is only allowed on extent-based files
[  126.972388][ T7666] usb 3-1: USB disconnect, device number 12
[  126.996510][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.191078][ T7804] SQUASHFS error: lzo decompression failed, data probably corrupt
[  127.195643][ T7804] SQUASHFS error: Failed to read block 0x91: -5
[  127.197475][ T7804] SQUASHFS error: Unable to read metadata cache entry [8f]
[  127.203958][ T7804] SQUASHFS error: Unable to read inode 0x11f
[  127.304598][ T3729] hfsplus: b-tree write err: -5, ino 4
[  127.314759][   T34] audit: type=1800 audit(1769253523.933:4): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.746" name="file1" dev="loop4" ino=1048618 res=0 errno=0
[  128.252378][ T7856] netlink: 252 bytes leftover after parsing attributes in process `syz.2.765'.
[  128.800524][ T7666] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  128.949236][ T7666] usb 5-1: Using ep0 maxpacket: 16
[  128.954838][ T7666] usb 5-1: config 0 interface 0 altsetting 54 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.958380][ T7666] usb 5-1: config 0 interface 0 altsetting 54 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  128.963862][ T7666] usb 5-1: config 0 interface 0 has no altsetting 0
[  128.965885][ T7666] usb 5-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00
[  128.968768][ T7666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.987136][ T7666] usb 5-1: config 0 descriptor??
[  129.099264][ T5905] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  129.249162][ T5905] usb 4-1: Using ep0 maxpacket: 32
[  129.265585][ T5905] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  129.269706][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0
[  129.272079][ T5905] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  129.275028][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.305106][ T5905] usb 4-1: config 0 descriptor??
[  129.513871][ T7666] appleir 0003:05AC:1440.0006: item fetching failed at offset 1/5
[  129.557021][ T7666] appleir 0003:05AC:1440.0006: parse failed
[  129.572433][ T7666] appleir 0003:05AC:1440.0006: probe with driver appleir failed with error -22
[  129.703582][ T7666] usb 5-1: USB disconnect, device number 2
[  129.781934][ T5905] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[  130.164729][ T5905] corsair-cpro 0003:1B1C:0C10.0007: probe with driver corsair-cpro failed with error -5
[  130.174446][ T5901] usb 4-1: USB disconnect, device number 8
[  130.367365][ T7874] vlan2: entered promiscuous mode
[  130.369977][ T7874] bond0: entered promiscuous mode
[  130.371867][ T7874] bond_slave_0: entered promiscuous mode
[  130.374286][ T7874] bond_slave_1: entered promiscuous mode
[  130.740949][ T7666] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  130.900124][ T7666] usb 5-1: Using ep0 maxpacket: 16
[  130.904272][ T7666] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.910108][ T7666] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  130.915071][ T7666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.919170][ T7666] usb 5-1: Product: syz
[  130.920741][ T7666] usb 5-1: Manufacturer: syz
[  130.922287][ T7666] usb 5-1: SerialNumber: syz
[  130.928304][ T7666] usb 5-1: config 0 descriptor??
[  130.937814][ T7666] uvcvideo 5-1:0.0: Found UVC 0.00 device syz (046d:0721)
[  130.940631][ T7896] netlink: 'syz.3.783': attribute type 11 has an invalid length.
[  130.941016][ T7666] uvcvideo 5-1:0.0: No valid video chain found.
[  131.009411][ T7898] set_capacity_and_notify: 3 callbacks suppressed
[  131.009421][ T7898] loop2: detected capacity change from 0 to 256
[  131.151899][ T5904] usb 5-1: USB disconnect, device number 3
[  131.202170][ T7906] xt_CT: You must specify a L4 protocol and not use inversions on it
[  131.244396][ T7910] loop3: detected capacity change from 0 to 8
[  131.252290][ T7910] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  131.275600][ T7910] cramfs: Error -3 while decompressing!
[  131.277387][ T7910] cramfs: ffffffff99ee8fe8(26)->ffff8881aa094000(4096)
[  131.280749][ T7910] cramfs: Error -3 while decompressing!
[  131.282776][ T7910] cramfs: ffffffff99ee9002(26)->ffff8881aa095000(4096)
[  131.285472][ T7910] cramfs: Error -3 while decompressing!
[  131.287582][ T7910] cramfs: ffffffff99ee901c(16)->ffff8881aa096000(4096)
[  131.291109][ T7910] cramfs: Error -3 while decompressing!
[  131.293214][ T7910] cramfs: ffffffff99ee8fe8(26)->ffff8881aa094000(4096)
[  131.378318][ T7912] loop3: detected capacity change from 0 to 256
[  131.402818][ T7912] msdos: Unknown parameter 'dotx'
[  131.453688][ T7908] loop2: detected capacity change from 0 to 32768
[  131.491081][ T7908] JBD2: Ignoring recovery information on journal
[  131.560960][ T7908] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  131.602288][   T34] audit: type=1800 audit(1769253528.223:5): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.789" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  131.691525][ T5842] ocfs2: Unmounting device (7,2) on (node local)
[  131.912961][ T7922] loop4: detected capacity change from 0 to 4096
[  132.017395][ T5904] IPVS: starting estimator thread 0...
[  132.112756][ T7936] IPVS: using max 37 ests per chain, 88800 per kthread
[  132.180697][ T7946] loop2: detected capacity change from 0 to 256
[  132.223096][ T7946] FAT-fs (loop2): Directory bread(block 64) failed
[  132.225383][ T7946] FAT-fs (loop2): Directory bread(block 65) failed
[  132.227495][ T7946] FAT-fs (loop2): Directory bread(block 66) failed
[  132.240742][ T7946] FAT-fs (loop2): Directory bread(block 67) failed
[  132.243008][ T7946] FAT-fs (loop2): Directory bread(block 68) failed
[  132.244883][ T7946] FAT-fs (loop2): Directory bread(block 69) failed
[  132.257227][ T7946] FAT-fs (loop2): Directory bread(block 70) failed
[  132.261101][ T7946] FAT-fs (loop2): Directory bread(block 71) failed
[  132.265802][ T7946] FAT-fs (loop2): Directory bread(block 72) failed
[  132.273654][ T7946] FAT-fs (loop2): Directory bread(block 73) failed
[  133.802005][ T7983] loop2: detected capacity change from 0 to 8192
[  133.821392][ T7983] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  134.270092][ T7994] loop4: detected capacity change from 0 to 8
[  134.286051][ T7994] squashfs image failed sanity check
[  134.501680][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.817'.
[  134.563235][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'.
[  134.629868][ T8011] IPVS: sh: TCP 172.20.20.170:0 - no destination available
[  134.657433][ T7998] loop4: detected capacity change from 0 to 32768
[  135.298799][ T8045] loop4: detected capacity change from 0 to 2048
[  135.303836][ T8045] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  135.313227][ T8045] NILFS (loop4): too large checkpoint size: 1741 bytes
[  135.316130][ T8045] NILFS (loop4): error -22 while loading super root
[  135.316789][ T5844] udevd[5844]: incorrect nilfs2 checksum on /dev/loop4
[  135.679075][ T5901] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  135.834025][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short
[  135.839091][ T5901] usb 3-1: config 7 has an invalid interface number: 199 but max is 0
[  135.842314][ T5901] usb 3-1: config 7 has no interface number 0
[  135.844937][ T5901] usb 3-1: config 7 interface 199 has no altsetting 0
[  135.851855][ T5901] usb 3-1: string descriptor 0 read error: -22
[  135.854823][ T5901] usb 3-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15
[  135.858563][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.874119][ T5901] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282
[  136.072391][ T5901] gspca_sn9c20x: Write register 1000 failed -71
[  136.076832][ T5901] gspca_sn9c20x: Device initialization failed
[  136.079388][ T5901] gspca_sn9c20x 3-1:7.199: probe with driver gspca_sn9c20x failed with error -71
[  136.089938][ T5901] usb 3-1: USB disconnect, device number 13
[  136.303378][ T8061] loop4: detected capacity change from 0 to 512
[  136.306633][ T8061] EXT4-fs: Ignoring removed oldalloc option
[  136.332088][ T8061] EXT4-fs (loop4): 1 truncate cleaned up
[  136.340586][ T8061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.394340][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.847'.
[  136.415374][ T7537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.410137][ T8074] loop2: detected capacity change from 0 to 40427
[  137.443764][ T8074] F2FS-fs (loop2): build fault injection rate: 771
[  137.448819][ T8074] F2FS-fs (loop2): invalid crc value
[  137.490173][ T5905] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  137.611696][ T8074] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  137.622220][ T8074] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  137.654031][ T5905] usb 5-1: Using ep0 maxpacket: 32
[  137.657792][ T5905] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  137.661630][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.668000][ T5905] usb 5-1: config 0 descriptor??
[  137.749742][ T5842] bio_check_eod: 55 callbacks suppressed
[  137.749850][ T5842] syz-executor: attempt to access beyond end of device
[  137.749850][ T5842] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  137.757252][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  137.757289][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.757299][ T5842] Call Trace:
[  137.757305][ T5842]  <TASK>
[  137.757312][ T5842]  dump_stack_lvl+0xe8/0x150
[  137.757336][ T5842]  f2fs_handle_critical_error+0x37c/0x540
[  137.757388][ T5842]  f2fs_write_end_io+0x886/0xb60
[  137.757423][ T5842]  __submit_merged_bio+0x256/0x650
[  137.757444][ T5842]  __submit_merged_write_cond+0x269/0x530
[  137.757463][ T5842]  f2fs_write_data_pages+0x2806/0x3360
[  137.757507][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  137.757539][ T5842]  ? css_rstat_updated+0x23a/0x530
[  137.757576][ T5842]  ? rcu_is_watching+0x15/0xb0
[  137.757595][ T5842]  ? __lock_acquire+0x6b5/0x2cf0
[  137.757622][ T5842]  ? __lock_acquire+0x6b5/0x2cf0
[  137.757642][ T5842]  ? do_raw_spin_lock+0x12b/0x2f0
[  137.757664][ T5842]  ? do_raw_spin_unlock+0x4d/0x210
[  137.757681][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  137.757702][ T5842]  do_writepages+0x32e/0x550
[  137.757730][ T5842]  ? do_raw_spin_unlock+0x4d/0x210
[  137.757752][ T5842]  filemap_fdatawrite+0x1e9/0x2f0
[  137.757771][ T5842]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  137.757819][ T5842]  ? do_raw_spin_unlock+0x4d/0x210
[  137.757841][ T5842]  f2fs_sync_dirty_inodes+0x30e/0x810
[  137.757871][ T5842]  f2fs_write_checkpoint+0x9c6/0x2490
[  137.757884][ T5842]  ? stack_depot_save_flags+0x33/0x810
[  137.757927][ T5842]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  137.757972][ T5842]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  137.757986][ T5842]  ? kfree+0x1be/0x650
[  137.758010][ T5842]  kill_f2fs_super+0x308/0x710
[  137.758025][ T5842]  ? __pfx_kill_f2fs_super+0x10/0x10
[  137.758053][ T5842]  deactivate_locked_super+0xbc/0x130
[  137.758069][ T5842]  cleanup_mnt+0x437/0x4d0
[  137.758084][ T5842]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.758105][ T5842]  task_work_run+0x1d9/0x270
[  137.758129][ T5842]  ? __pfx_task_work_run+0x10/0x10
[  137.758158][ T5842]  exit_to_user_mode_loop+0xed/0x480
[  137.758173][ T5842]  ? rcu_is_watching+0x15/0xb0
[  137.758192][ T5842]  do_syscall_64+0x2b7/0xf80
[  137.758203][ T5842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.758215][ T5842]  ? trace_irq_disable+0x37/0x100
[  137.758241][ T5842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.758253][ T5842] RIP: 0033:0x7fcc57b9bf17
[  137.758266][ T5842] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  137.758278][ T5842] RSP: 002b:00007fffb457d568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  137.758293][ T5842] RAX: 0000000000000000 RBX: 00007fcc57c0471f RCX: 00007fcc57b9bf17
[  137.758303][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb457d620
[  137.758312][ T5842] RBP: 00007fffb457d620 R08: 00007fffb457e620 R09: 00000000ffffffff
[  137.758321][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb457e6b0
[  137.758330][ T5842] R13: 00007fcc57c0471f R14: 0000000000021946 R15: 00007fffb457e6f0
[  137.758356][ T5842]  </TASK>
[  137.882200][ T5842] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  137.882750][ T5905] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  137.896688][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  137.901278][ T5905] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  137.904066][ T5905] usb 5-1: media controller created
[  137.917455][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.097318][ T5905] az6027: usb out operation failed. (-71)
[  138.105312][ T5905] az6027: usb out operation failed. (-71)
[  138.107097][ T5905] stb0899_attach: Driver disabled by Kconfig
[  138.115583][ T5905] az6027: no front-end attached
[  138.115583][ T5905] 
[  138.122233][ T5905] az6027: usb out operation failed. (-71)
[  138.124031][ T5905] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  138.127414][ T5905] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[  138.133662][ T5905] dvb-usb: schedule remote query interval to 400 msecs.
[  138.136134][ T5905] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  138.148609][ T8091] loop2: detected capacity change from 0 to 128
[  138.152113][ T5905] usb 5-1: USB disconnect, device number 4
[  138.165568][ T8091] hpfs: hpfs_map_4sectors(): unaligned read
[  138.167557][ T8091] hpfs: filesystem error: can't load hotfix map; already mounted read-only
[  138.178032][ T8091] hpfs: hpfs_map_sector(): read error
[  138.197176][ T5905] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  138.495849][ T8103] loop2: detected capacity change from 0 to 4096
[  138.500519][ T8103] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  138.518256][ T8103] ntfs3(loop2): volume is dirty and "force" flag is not set!
[  138.522971][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  138.525446][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  138.589693][ T8107] loop2: detected capacity change from 0 to 1024
[  138.954214][ T8129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.876'.
[  139.129450][ T8139] loop3: detected capacity change from 0 to 4096
[  139.169878][ T8140] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.372957][ T8133] loop4: detected capacity change from 0 to 32768
[  140.498869][ T5901] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  140.649059][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  140.651506][ T5901] usb 4-1: too many configurations: 65, using maximum allowed: 8
[  140.664090][ T5901] usb 4-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b
[  140.666857][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.669639][ T5901] usb 4-1: Product: syz
[  140.670929][ T5901] usb 4-1: Manufacturer: syz
[  140.672270][ T5901] usb 4-1: SerialNumber: syz
[  140.679786][ T5901] usb 4-1: config 0 descriptor??
[  140.819787][   T10] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  140.895750][ T5905] usb 4-1: USB disconnect, device number 9
[  140.973502][   T10] usb 5-1: config 7 has an invalid interface number: 252 but max is 0
[  140.976008][   T10] usb 5-1: config 7 has no interface number 0
[  140.978031][   T10] usb 5-1: config 7 interface 252 has no altsetting 0
[  140.990049][   T10] usb 5-1: string descriptor 0 read error: -22
[  140.991907][   T10] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  140.994469][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.213727][ T5905] usb 5-1: USB disconnect, device number 5
[  141.732673][ T8205] loop3: detected capacity change from 0 to 32768
[  141.766300][ T8205] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.801571][ T8205] XFS (loop3): Ending clean mount
[  141.865902][ T6335] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  142.178708][ T8224] loop2: detected capacity change from 0 to 4096
[  142.188790][ T8224] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  142.210193][ T8224] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  142.368519][ T8233] loop2: detected capacity change from 0 to 128
[  142.388882][ T8233] ufs: You didn't specify the type of your ufs filesystem
[  142.388882][ T8233] 
[  142.388882][ T8233] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  142.388882][ T8233] 
[  142.388882][ T8233] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  142.409785][ T8233] ufs: ufstype=old is supported read-only
[  142.429555][ T8233] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  142.584936][ T8242] IPv6: NLM_F_REPLACE set, but no existing node found!
[  143.232564][ T8258] loop3: detected capacity change from 0 to 256
[  143.507815][ T8262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.005049][ T8268] loop3: detected capacity change from 0 to 32768
[  144.076708][ T8278] netlink: 'syz.4.941': attribute type 10 has an invalid length.
[  144.079243][ T8278] netlink: 40 bytes leftover after parsing attributes in process `syz.4.941'.
[  144.167168][ T8285] xt_TPROXY: Can be used only with -p tcp or -p udp
[  144.200711][ T8288] netlink: 252 bytes leftover after parsing attributes in process `syz.4.945'.
[  144.455408][ T8290] loop2: detected capacity change from 0 to 32768
[  144.493837][ T8290] read_mapping_page failed!
[  144.495426][ T8290] ERROR: (device loop2): txCommit: 
[  144.495426][ T8290] 
[  144.521895][  T118] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0)
[  144.530363][  T118] ------------[ cut here ]------------
[  144.532410][  T118] kernel BUG at fs/jfs/jfs_txnmgr.c:932!
[  144.534279][  T118] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  144.536674][  T118] CPU: 0 UID: 0 PID: 118 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  144.540690][  T118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.544076][  T118] RIP: 0010:txUnlock+0xdaf/0xdf0
[  144.545562][  T118] Code: d4 fd 90 0f 0b e8 11 ef 6f fe 48 c7 c7 e0 f7 ca 8b 48 c7 c6 d9 f3 ca 8b ba a4 03 00 00 48 c7 c1 e0 04 cb 8b e8 a2 fd d4 fd 90 <0f> 0b e8 ea ee 6f fe 48 c7 c7 e0 f7 ca 8b 48 c7 c6 d9 f3 ca 8b ba
[  144.551147][  T118] RSP: 0018:ffffc900031d7bc8 EFLAGS: 00010246
[  144.552803][  T118] RAX: 0000000000000037 RBX: 0000000000001000 RCX: a746bdfc84449f00
[  144.555000][  T118] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  144.557490][  T118] RBP: ffffc90002d2a0d8 R08: ffffc900031d7947 R09: 1ffff9200063af28
[  144.559684][  T118] R10: dffffc0000000000 R11: fffff5200063af29 R12: dffffc0000000000
[  144.561809][  T118] R13: 1ffff110209735c7 R14: ffff888104b9ae38 R15: 0000000000000000
[  144.564216][  T118] FS:  0000000000000000(0000) GS:ffff88818e323000(0000) knlGS:0000000000000000
[  144.567157][  T118] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.568908][  T118] CR2: 0000001b30c21ff8 CR3: 000000017392c000 CR4: 00000000000006f0
[  144.571107][  T118] Call Trace:
[  144.572038][  T118]  <TASK>
[  144.572823][  T118]  jfs_lazycommit+0x582/0xaa0
[  144.574150][  T118]  ? __pfx_jfs_lazycommit+0x10/0x10
[  144.575542][  T118]  ? __pfx_default_wake_function+0x10/0x10
[  144.577163][  T118]  ? __kthread_parkme+0x7a/0x1f0
[  144.578607][  T118]  ? __kthread_parkme+0x19c/0x1f0
[  144.580009][  T118]  kthread+0x726/0x8b0
[  144.581104][  T118]  ? __pfx_jfs_lazycommit+0x10/0x10
[  144.582621][  T118]  ? __pfx_kthread+0x10/0x10
[  144.583992][  T118]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.585500][  T118]  ? __pfx_kthread+0x10/0x10
[  144.586838][  T118]  ret_from_fork+0x51b/0xa40
[  144.588187][  T118]  ? __pfx_ret_from_fork+0x10/0x10
[  144.589632][  T118]  ? __switch_to+0xc82/0x1410
[  144.590999][  T118]  ? __pfx_kthread+0x10/0x10
[  144.592266][  T118]  ret_from_fork_asm+0x1a/0x30
[  144.593631][  T118]  </TASK>
[  144.594542][  T118] Modules linked in:
[  144.596415][  T118] ---[ end trace 0000000000000000 ]---
[  144.608088][  T118] RIP: 0010:txUnlock+0xdaf/0xdf0
[  144.609330][ T8309] loop3: detected capacity change from 0 to 16
[  144.611475][  T118] Code: d4 fd 90 0f 0b e8 11 ef 6f fe 48 c7 c7 e0 f7 ca 8b 48 c7 c6 d9 f3 ca 8b ba a4 03 00 00 48 c7 c1 e0 04 cb 8b e8 a2 fd d4 fd 90 <0f> 0b e8 ea ee 6f fe 48 c7 c7 e0 f7 ca 8b 48 c7 c6 d9 f3 ca 8b ba
[  144.620589][  T118] RSP: 0018:ffffc900031d7bc8 EFLAGS: 00010246
[  144.622772][  T118] RAX: 0000000000000037 RBX: 0000000000001000 RCX: a746bdfc84449f00
[  144.625429][  T118] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  144.628099][  T118] RBP: ffffc90002d2a0d8 R08: ffffc900031d7947 R09: 1ffff9200063af28
[  144.631831][  T118] R10: dffffc0000000000 R11: fffff5200063af29 R12: dffffc0000000000
[  144.634531][  T118] R13: 1ffff110209735c7 R14: ffff888104b9ae38 R15: 0000000000000000
[  144.637174][  T118] FS:  0000000000000000(0000) GS:ffff88818e323000(0000) knlGS:0000000000000000
[  144.637805][ T8309] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  144.640440][  T118] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.644927][  T118] CR2: 00007f8f95817dac CR3: 000000016c6e2000 CR4: 00000000000006f0
[  144.647893][  T118] Kernel panic - not syncing: Fatal exception
[  144.650763][  T118] Kernel Offset: disabled
[  144.652054][  T118] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:19:01  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff3420b60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff9a106210 RSP=ffffc900031d73b0
R8 =ffff888169cc0237 R9 =1ffff1102d398046 R10=dffffc0000000000 R11=ffffffff85262690
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff9a105f80 R15=0000000000000000
RIP=ffffffff85262707 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818e323000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30c21ff8 CR3=000000017392c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000055afdac93ef0 RBX=00007ffd700737f8 RCX=0000000000000ef0 RDX=000055afdac93ef0
RSI=00000000000003f1 RDI=000055afdac93ef0 RBP=000055afdacafac0 RSP=00007ffd700737b8
R8 =0000000000000000 R9 =35cc1c250c0dfc40 R10=fffffffffffff328 R11=0000000000000007
R12=00000000000003f1 R13=00007ffd70073878 R14=000055afdac93ef0 R15=000055afa22a5160
RIP=00007f7c0ccd962a RFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7c0d167c80 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8f9634da08 CR3=00000001157c9000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f7c0cdf1b20 00007f00323a3762 XMM05=612d306466342d62 3065352d33613964
XMM06=306235346632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=00000000ffffffff ffffffffffffffff XMM09=6666786300000000 323a37622f623333
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
