last executing test programs:

54.976684849s ago: executing program 0 (id=255):
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x1fa, &(0x7f0000000380)="$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")

54.795802889s ago: executing program 0 (id=257):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000020a010400000000000000000a0000053c000000090a010400000000000000000a0000060900010073797a3100000000080005400000001d0900020073797a310000000008000a"], 0x2ccc}, 0x1, 0x0, 0x0, 0x20048881}, 0x40)

54.621644826s ago: executing program 0 (id=258):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfb}}, {{0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19c00}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)

54.568001808s ago: executing program 0 (id=259):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r1 = open_tree(r0, &(0x7f0000000080)='./file0/file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x162)

54.567655863s ago: executing program 0 (id=260):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="190000001a00010000000000fcdbdf251c"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4810)

54.309970244s ago: executing program 0 (id=264):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200)=0x7, 0xfd48)

54.187105345s ago: executing program 32 (id=264):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200)=0x7, 0xfd48)

37.549868504s ago: executing program 1 (id=407):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0)

37.428689898s ago: executing program 1 (id=408):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xffffff1f, 0x1}}, 0x20)

37.301388017s ago: executing program 1 (id=409):
open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x29c)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d)
fcntl$setlease(r0, 0x400, 0x0)

36.405192455s ago: executing program 1 (id=410):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x11, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

36.209411665s ago: executing program 1 (id=411):
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff)

35.949644187s ago: executing program 1 (id=412):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0)

35.73334521s ago: executing program 33 (id=412):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0)

1.637773004s ago: executing program 2 (id=731):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.567818024s ago: executing program 2 (id=732):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xc}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x2c}}, 0x0)

1.567090112s ago: executing program 2 (id=733):
r0 = syz_mount_image$affs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x14880, &(0x7f0000000000)={[{@root={'root', 0x3d, 0xcd}}, {@setgid}, {@mufs}, {@mufs}, {@verbose}, {@mufs}, {@protect}], [{@smackfsroot={'smackfsroot', 0x3d, 'journal_checksum'}}]}, 0x0, 0x9de8, &(0x7f0000013cc0)="$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")
dup3(r0, r0, 0x80000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0)

656.056049ms ago: executing program 2 (id=748):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x3}}}})

586.63419ms ago: executing program 2 (id=749):
r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x100000001, 0x109080)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0)

586.494987ms ago: executing program 2 (id=750):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
r1 = syz_io_uring_setup(0x2f67, &(0x7f0000000240)={0x0, 0x70ef, 0x10100, 0x0, 0x299}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_usb_disconnect(r0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

439.69449ms ago: executing program 4 (id=755):
r0 = io_uring_setup(0x30d5, &(0x7f00000001c0))
socket(0x22, 0x2, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

356.563309ms ago: executing program 4 (id=756):
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)

356.214766ms ago: executing program 3 (id=758):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c)

254.297887ms ago: executing program 4 (id=759):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x1, 0x25dfdbfe, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x38}}, 0x0)

253.988455ms ago: executing program 4 (id=760):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000018c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

252.192523ms ago: executing program 3 (id=761):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)

166.226475ms ago: executing program 4 (id=762):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x31)

165.932597ms ago: executing program 3 (id=763):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)

165.67194ms ago: executing program 4 (id=764):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

77.306884ms ago: executing program 3 (id=765):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000370429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040000000000480012800b0001006970366772650000380002800400120014000600fc01000000000000000000000000000014000700fc"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0)

76.698264ms ago: executing program 3 (id=766):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xb}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94)

0s ago: executing program 3 (id=767):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

kernel console output (not intermixed with test programs):

36] Bluetooth: hci2: command tx timeout
[   72.008986][ T5845] BTRFS info (device loop0 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   72.040399][ T5882] usb 3-1: config 5 has an invalid interface number: 123 but max is 0
[   72.049319][ T5882] usb 3-1: config 5 has no interface number 0
[   72.051663][ T5882] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[   72.055757][ T5882] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86
[   72.059375][ T5882] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0
[   72.063645][ T5882] usb 3-1: config 5 interface 123 has no altsetting 0
[   72.072789][ T5882] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[   72.075991][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.079112][ T5882] usb 3-1: Product: syz
[   72.081034][ T5882] usb 3-1: Manufacturer: syz
[   72.082828][ T5882] usb 3-1: SerialNumber: syz
[   72.298022][ T5965] loop0: detected capacity change from 0 to 32768
[   72.322735][ T5965] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   72.338937][ T5965] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   72.341642][ T5882] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device.
[   72.352120][ T5965] (syz.0.15,5965,0):ocfs2_read_blocks:239 ERROR: status = -12
[   72.357105][ T5965] (syz.0.15,5965,0):ocfs2_xattr_block_find:2831 ERROR: status = -12
[   72.366179][ T5882] usb 3-1: USB disconnect, device number 2
[   72.416003][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[   72.945091][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   72.982530][ T5992] netem: incorrect gi model size
[   72.984380][ T5992] netem: change failed
[   73.012831][ T5990] loop2: detected capacity change from 0 to 4096
[   73.053068][ T5995] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   73.074526][ T5990] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424
[   73.077531][ T5990] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12)
[   73.091824][ T5990] Remounting filesystem read-only
[   73.093414][ T5990] NILFS (loop2): error -5 truncating bmap (ino=12)
[   73.100885][ T5882] usb 1-1: Using ep0 maxpacket: 32
[   73.114691][ T5882] usb 1-1: config 0 has an invalid interface number: 23 but max is 0
[   73.117400][ T5882] usb 1-1: config 0 has no interface number 0
[   73.119531][ T5882] usb 1-1: config 0 interface 23 has no altsetting 0
[   73.124944][ T5854] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[   73.133183][ T5882] usb 1-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad
[   73.136405][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.139136][ T5882] usb 1-1: Product: syz
[   73.140409][ T5882] usb 1-1: Manufacturer: syz
[   73.150892][ T5882] usb 1-1: SerialNumber: syz
[   73.160575][ T5882] usb 1-1: config 0 descriptor??
[   73.233830][ T5994] loop1: detected capacity change from 0 to 32768
[   73.237884][ T5994] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.28 (5994)
[   73.248706][ T5994] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   73.261632][ T5994] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   73.265116][ T5994] BTRFS info (device loop1): using free-space-tree
[   73.274748][ T5999] loop2: detected capacity change from 0 to 1024
[   73.334528][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.338287][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.343304][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.345687][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.348204][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.351900][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.355420][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.358504][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.366039][ T5846] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   73.368036][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.372725][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.378240][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.397794][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.404430][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.410085][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.421219][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.448187][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.448903][ T5882] kaweth 1-1:0.23: Firmware present in device.
[   73.465253][ T5882] kaweth 1-1:0.23: Error reading configuration (-71), no net device created
[   73.465748][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.469907][ T5882] kaweth 1-1:0.23: probe with driver kaweth failed with error -5
[   73.479810][ T5999] hfsplus: request for non-existent node 16777216 in B*Tree
[   73.484995][ T5882] usb 1-1: USB disconnect, device number 2
[   73.520140][   T33] audit: type=1800 audit(1755611357.993:2): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.30" name="file1" dev="loop2" ino=20 res=0 errno=0
[   73.824277][   T33] audit: type=1326 audit(1755611358.303:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.1.39" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c58ebe9 code=0x7ffc0000
[   73.840181][   T33] audit: type=1326 audit(1755611358.303:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.1.39" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c58ebe9 code=0x7ffc0000
[   73.847449][   T33] audit: type=1326 audit(1755611358.303:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.1.39" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9d0c58ebe9 code=0x7ffc0000
[   73.887113][   T33] audit: type=1326 audit(1755611358.303:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.1.39" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c58ebe9 code=0x7ffc0000
[   73.899260][   T33] audit: type=1326 audit(1755611358.303:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.1.39" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c58ebe9 code=0x7ffc0000
[   73.907412][   T33] audit: type=1326 audit(1755611358.303:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.1.39" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9d0c58ebe9 code=0x7ffc0000
[   73.916800][   T33] audit: type=1326 audit(1755611358.303:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.1.39" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c58ebe9 code=0x7ffc0000
[   73.924646][   T33] audit: type=1326 audit(1755611358.303:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.1.39" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c58ebe9 code=0x7ffc0000
[   73.951334][ T5236] Bluetooth: hci1: command tx timeout
[   73.991845][ T6043] loop2: detected capacity change from 0 to 512
[   74.003925][ T6043] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   74.031943][ T5236] Bluetooth: hci0: command tx timeout
[   74.031992][ T5852] Bluetooth: hci2: command tx timeout
[   74.055223][ T6047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.194026][ T6055] netlink: 'syz.1.48': attribute type 1 has an invalid length.
[   74.706701][ T6075] loop2: detected capacity change from 0 to 32768
[   74.820465][ T6093] loop0: detected capacity change from 0 to 1024
[   74.861199][ T6093] hfsplus: cannot replace xattr
[   74.898658][   T36] hfsplus: b-tree write err: -5, ino 4
[   74.949910][ T6085] loop1: detected capacity change from 0 to 32768
[   74.962843][ T6085] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.63 (6085)
[   75.008552][ T6085] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   75.021781][ T6085] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   75.025260][ T6085] BTRFS info (device loop1): using free-space-tree
[   75.215446][ T5875] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   75.219773][ T5846] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   75.252995][ T6096] loop2: detected capacity change from 0 to 32768
[   75.257908][ T6096] btrfs: Deprecated parameter 'usebackuproot'
[   75.262380][ T6096] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   75.266895][ T6096] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.65 (6096)
[   75.278703][ T6096] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   75.283927][ T6096] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   75.294006][ T6096] BTRFS info (device loop2): using free-space-tree
[   75.370034][  T533] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   75.394604][ T6096] BTRFS error (device loop2): failed to load root extent
[   75.397724][ T6096] BTRFS warning (device loop2): try to load backup roots slot 1
[   75.408172][   T40] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   75.422268][ T6096] BTRFS warning (device loop2): couldn't read tree root
[   75.435937][ T6096] BTRFS warning (device loop2): try to load backup roots slot 2
[   75.442386][   T40] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   75.451136][ T6096] BTRFS warning (device loop2): couldn't read tree root
[   75.465386][ T6096] BTRFS warning (device loop2): try to load backup roots slot 3
[   75.503637][ T6096] BTRFS info (device loop2): rebuilding free space tree
[   75.548413][ T6096] BTRFS info (device loop2): checking UUID tree
[   75.627510][ T5854] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   75.814298][   T33] audit: type=1326 audit(1755611360.293:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.0.67" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461b58ebe9 code=0x7fc00000
[   76.030862][ T5852] Bluetooth: hci1: command tx timeout
[   76.037812][ T6148] loop2: detected capacity change from 0 to 512
[   76.076897][ T6148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.083972][ T6148] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.110870][ T5852] Bluetooth: hci0: command tx timeout
[   76.121207][ T5852] Bluetooth: hci2: command tx timeout
[   76.153004][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.321624][ T5855] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   76.471625][ T5855] usb 1-1: Using ep0 maxpacket: 32
[   76.479744][ T5855] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   76.488902][ T5855] usb 1-1: config 0 has no interface number 0
[   76.496013][ T5855] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   76.499712][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.509961][ T5855] usb 1-1: Product: syz
[   76.518649][ T5855] usb 1-1: Manufacturer: syz
[   76.525181][ T5855] usb 1-1: SerialNumber: syz
[   76.533162][ T5855] usb 1-1: config 0 descriptor??
[   76.544495][ T5855] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   76.599177][ T6170] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   76.615556][ T6170] CIFS mount error: No usable UNC path provided in device string!
[   76.615556][ T6170] 
[   76.618935][ T6170] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   76.656830][ T6173] openvswitch: netlink: Unknown key attributes 2
[   76.753316][ T5855] usb 1-1: qt2_attach - failed to power on unit: -71
[   76.756260][ T5855] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71
[   76.782505][ T5855] usb 1-1: USB disconnect, device number 3
[   77.023303][ T6182] mmap: syz.1.85 (6182) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   78.440982][ T5882] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   78.441222][ T6218] process 'syz.2.104' launched './file2' with NULL argv: empty string added
[   78.593025][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[   78.600963][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[   78.611577][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.636567][ T5882] usb 1-1: config 0 descriptor??
[   78.909976][ T6232] netlink: 'syz.1.110': attribute type 1 has an invalid length.
[   78.917986][ T6232] netlink: 'syz.1.110': attribute type 2 has an invalid length.
[   78.923127][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'.
[   78.976683][ T6237] loop1: detected capacity change from 0 to 512
[   78.983649][ T6237] EXT4-fs (loop1): Test dummy encryption mode enabled
[   78.985820][ T6237] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   78.990572][ T6237] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   79.014577][ T6237] EXT4-fs (loop1): 1 truncate cleaned up
[   79.025785][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.054679][ T5882] logitech 0003:046D:CA03.0001: ignoring exceeding usage max
[   79.054710][ T6237] EXT4-fs: Can't set or change test_dummy_encryption on remount
[   79.058454][ T5882] logitech 0003:046D:CA03.0001: unbalanced delimiter at end of report description
[   79.077782][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.091539][ T5882] logitech 0003:046D:CA03.0001: parse failed
[   79.095537][ T5882] logitech 0003:046D:CA03.0001: probe with driver logitech failed with error -22
[   79.276733][  T792] usb 1-1: USB disconnect, device number 4
[   79.372334][ T5882] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   79.407595][ T6257] loop2: detected capacity change from 0 to 128
[   79.425982][ T6257] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.433125][ T6257] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.472385][ T5854] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.521457][ T5882] usb 2-1: Using ep0 maxpacket: 32
[   79.532721][ T5882] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.542027][ T5882] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[   79.554050][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0
[   79.557008][ T5882] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[   79.563111][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.578352][ T5882] usb 2-1: config 0 descriptor??
[   79.890764][ T5855] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   80.009375][ T5882] betop 0003:20BC:5500.0002: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.1-1/input0
[   80.025596][ T5882] betop 0003:20BC:5500.0002: no inputs found
[   80.043352][ T5855] usb 3-1: Using ep0 maxpacket: 8
[   80.053629][ T5855] usb 3-1: config 36 has an invalid interface number: 44 but max is 0
[   80.056891][ T5855] usb 3-1: config 36 has an invalid interface descriptor of length 2, skipping
[   80.060414][ T5855] usb 3-1: config 36 has no interface number 0
[   80.091194][ T5855] usb 3-1: config 36 interface 44 has no altsetting 0
[   80.097226][ T5855] usb 3-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=ad.ea
[   80.110751][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.113967][ T5855] usb 3-1: Product: syz
[   80.115684][ T5855] usb 3-1: Manufacturer: syz
[   80.117560][ T5855] usb 3-1: SerialNumber: syz
[   80.166782][ T6274] loop0: detected capacity change from 0 to 1024
[   80.198235][ T5895] usb 2-1: USB disconnect, device number 2
[   80.343330][ T5855] sisusb 3-1:36.44: Invalid USB2VGA device
[   80.345223][ T5855] sisusb 3-1:36.44: probe with driver sisusb failed with error -22
[   80.353767][ T5855] usb 3-1: USB disconnect, device number 3
[   80.511249][ T5882] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   80.661248][ T5882] usb 1-1: Using ep0 maxpacket: 16
[   80.667443][ T5882] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de
[   80.672530][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.676286][ T5882] usb 1-1: Product: syz
[   80.677995][ T5882] usb 1-1: Manufacturer: syz
[   80.679873][ T5882] usb 1-1: SerialNumber: syz
[   80.684866][ T5882] usb 1-1: config 0 descriptor??
[   80.694144][ T5882] ems_usb 1-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[   80.698884][ T5882] ems_usb 1-1:0.0: probe with driver ems_usb failed with error -22
[   80.906126][ T5855] usb 1-1: USB disconnect, device number 5
[   81.402154][  T973] cfg80211: failed to load regulatory.db
[   81.478314][ T6306] loop0: detected capacity change from 0 to 256
[   81.568083][ T6310] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   81.573348][ T6310] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   82.105458][ T6330] loop0: detected capacity change from 0 to 32768
[   82.136172][ T6330] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   82.173127][ T6330] XFS (loop0): Ending clean mount
[   82.187560][ T6330] XFS (loop0): Quotacheck needed: Please wait.
[   82.214516][ T6330] XFS (loop0): Quotacheck: Done.
[   82.220502][ T6344] loop1: detected capacity change from 0 to 4096
[   82.251619][ T5845] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   82.264306][ T6344] ntfs3(loop1): ino=18, mi_enum_attr
[   82.267037][ T6344] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   82.272433][ T6344] ntfs3(loop1): ino=1a, mi_enum_attr
[   82.557263][ T6354] program syz.0.156 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.611316][ T6358] loop0: detected capacity change from 0 to 8
[   82.616774][ T6358] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   82.754300][ T6362] loop2: detected capacity change from 0 to 8
[   82.848231][ T6362] SQUASHFS error: Failed to read block 0x636: -5
[   82.854493][ T6362] SQUASHFS error: Unable to read metadata cache entry [634]
[   82.857438][ T6362] SQUASHFS error: Unable to read metadata cache entry [634]
[   82.860303][ T6362] SQUASHFS error: Unable to read directory block [634:0]
[   82.943016][ T6364] cramfs: Error -3 while decompressing!
[   82.945532][ T6364] cramfs: ffffffff99beb628(26)->ffff8881152d9000(4096)
[   82.948528][ T6364] cramfs: Error -3 while decompressing!
[   82.950993][ T6364] cramfs: ffffffff99beb642(26)->ffff8881152d6000(4096)
[   82.953870][ T6364] cramfs: Error -3 while decompressing!
[   82.956124][ T6364] cramfs: ffffffff99beb65c(16)->ffff8881152ca000(4096)
[   82.959123][ T6364] cramfs: Error -3 while decompressing!
[   82.961526][ T6364] cramfs: ffffffff99beb628(26)->ffff8881152d9000(4096)
[   83.526212][  T792] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   83.657460][ T6375] IPv4: Oversized IP packet from 127.202.26.0
[   83.697521][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.702379][  T792] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   83.706608][  T792] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[   83.710238][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.739819][  T792] usb 3-1: config 0 descriptor??
[   84.186978][  T792] ortek 0003:1223:3F07.0003: unknown main item tag 0x6
[   84.189942][  T792] ortek 0003:1223:3F07.0003: report_id 29495 is invalid
[   84.194752][  T792] ortek 0003:1223:3F07.0003: item 0 2 1 8 parsing failed
[   84.203305][  T792] ortek 0003:1223:3F07.0003: probe with driver ortek failed with error -22
[   84.382967][ T5895] usb 3-1: USB disconnect, device number 4
[   84.421066][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'.
[   84.463905][ T6387] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   84.468041][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   84.471928][ T6387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.169'.
[   84.473059][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   84.481554][ T6387] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.490701][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   84.493460][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   84.524353][ T6390] netlink: 'syz.0.170': attribute type 9 has an invalid length.
[   84.528253][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'.
[   84.565326][ T6394] netlink: 'syz.0.172': attribute type 11 has an invalid length.
[   85.023176][ T6409] loop2: detected capacity change from 0 to 22
[   85.029928][ T6409] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   85.042832][ T6409] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   85.218333][ T6421] Bluetooth: MGMT ver 1.23
[   85.222554][ T6421] Bluetooth: hci0: invalid length 1, exp 2 for type 14
[   85.302260][ T6428] loop0: detected capacity change from 0 to 1024
[   85.305069][ T6428] EXT4-fs: Ignoring removed bh option
[   85.325683][ T6428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.371927][ T6428] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.187: inode #6: comm syz.0.187: iget: illegal inode #
[   85.379506][ T6428] EXT4-fs (loop0): Remounting filesystem read-only
[   85.390367][ T6433] loop2: detected capacity change from 0 to 4096
[   85.413504][ T6428] EXT4-fs warning (device loop0): ext4_xattr_block_set:2190: inode #19: comm syz.0.187: dec ref error=-30
[   85.559480][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.015783][ T6450] syz_tun: entered allmulticast mode
[   86.038659][ T6447] syz_tun: left allmulticast mode
[   87.005886][ T6460] loop1: detected capacity change from 0 to 256
[   87.043525][ T6460] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   87.063886][ T6460] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   87.090363][ T6460] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   87.138456][   T33] audit: type=1800 audit(1755611371.613:12): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.199" name="file1" dev="loop1" ino=1048594 res=0 errno=0
[   87.164975][ T6458] loop0: detected capacity change from 0 to 40427
[   87.205124][ T6458] F2FS-fs (loop0): Image doesn't support compression
[   87.219879][ T6458] F2FS-fs (loop0): build fault injection rate: 690
[   87.228267][ T6458] F2FS-fs (loop0): invalid crc value
[   87.310385][ T6458] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   87.316563][ T6458] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   87.386765][ T5845] syz-executor: attempt to access beyond end of device
[   87.386765][ T5845] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   87.399558][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   87.399582][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.399591][ T5845] Call Trace:
[   87.399599][ T5845]  <TASK>
[   87.399654][ T5845]  dump_stack_lvl+0x189/0x250
[   87.399685][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.399703][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[   87.399718][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   87.399738][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   87.399766][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[   87.399795][ T5845]  f2fs_write_end_io+0x886/0xb60
[   87.399826][ T5845]  __submit_merged_bio+0x27a/0x6a0
[   87.399853][ T5845]  __submit_merged_write_cond+0x255/0x530
[   87.399879][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[   87.399930][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.399998][ T5845]  ? check_path+0x21/0x40
[   87.400012][ T5845]  ? check_noncircular+0xe0/0x160
[   87.400075][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.400097][ T5845]  do_writepages+0x32e/0x550
[   87.400127][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   87.400149][ T5845]  filemap_fdatawrite+0x199/0x240
[   87.400169][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   87.400250][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   87.400271][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[   87.400300][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[   87.400337][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   87.400394][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[   87.400418][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[   87.400438][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[   87.400450][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[   87.400476][ T5845]  ? shrinker_free+0x2ce/0x3e0
[   87.400495][ T5845]  deactivate_locked_super+0xbc/0x130
[   87.400515][ T5845]  cleanup_mnt+0x425/0x4c0
[   87.400532][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.400553][ T5845]  task_work_run+0x1d4/0x260
[   87.400576][ T5845]  ? __pfx_task_work_run+0x10/0x10
[   87.400592][ T5845]  ? __x64_sys_umount+0x122/0x160
[   87.400657][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[   87.400682][ T5845]  exit_to_user_mode_loop+0xec/0x110
[   87.400702][ T5845]  do_syscall_64+0x2bd/0x3b0
[   87.400720][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.400738][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.400752][ T5845]  ? exc_page_fault+0x9f/0xf0
[   87.400771][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.400785][ T5845] RIP: 0033:0x7f461b58ff17
[   87.400800][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   87.400812][ T5845] RSP: 002b:00007fff6bd0ae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   87.400828][ T5845] RAX: 0000000000000000 RBX: 00007f461b611c05 RCX: 00007f461b58ff17
[   87.400837][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6bd0af10
[   87.400846][ T5845] RBP: 00007fff6bd0af10 R08: 0000000000000000 R09: 0000000000000000
[   87.400854][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff6bd0bfa0
[   87.400863][ T5845] R13: 00007f461b611c05 R14: 00000000000154dc R15: 00007fff6bd0bfe0
[   87.400887][ T5845]  </TASK>
[   87.521459][    C0] vkms_vblank_simulate: vblank timer overrun
[   87.585892][ T6466] loop2: detected capacity change from 0 to 32768
[   87.601359][ T6466] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   87.604854][ T5845] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   87.664527][ T6466] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   87.681744][ T6466] XFS (loop2): Starting recovery (logdev: internal)
[   87.701541][ T6466] XFS (loop2): Ending recovery (logdev: internal)
[   87.800942][ T6485] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   87.803697][ T6485] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   87.933061][ T5854] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   88.223075][   T33] audit: type=1326 audit(1755611372.593:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461b58ebe9 code=0x7ffc0000
[   88.268755][ T6483] loop1: detected capacity change from 0 to 40427
[   88.276136][ T6483] F2FS-fs (loop1): invalid crc value
[   88.278503][   T33] audit: type=1326 audit(1755611372.593:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461b58ebe9 code=0x7ffc0000
[   88.286336][   T33] audit: type=1326 audit(1755611372.603:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.207" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f461b58ebe9 code=0x7ffc0000
[   88.293180][   T33] audit: type=1326 audit(1755611372.603:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461b58ebe9 code=0x7ffc0000
[   88.301984][   T33] audit: type=1326 audit(1755611372.603:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461b58ebe9 code=0x7ffc0000
[   88.323315][   T33] audit: type=1326 audit(1755611372.603:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.207" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f461b58ebe9 code=0x7ffc0000
[   88.349986][   T33] audit: type=1326 audit(1755611372.603:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461b58ebe9 code=0x7ffc0000
[   88.381000][   T33] audit: type=1326 audit(1755611372.613:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.207" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461b58ebe9 code=0x7ffc0000
[   88.417901][   T33] audit: type=1326 audit(1755611372.613:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.207" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f461b58ebe9 code=0x7ffc0000
[   88.430498][ T6483] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   88.437691][ T6483] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   88.461720][ T6483] syz.1.206: attempt to access beyond end of device
[   88.461720][ T6483] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   88.474822][ T6483] syz.1.206: attempt to access beyond end of device
[   88.474822][ T6483] loop1: rw=0, sector=77888, nr_sectors = 8 limit=40427
[   88.485099][ T6483] syz.1.206: attempt to access beyond end of device
[   88.485099][ T6483] loop1: rw=0, sector=77944, nr_sectors = 8 limit=40427
[   88.491946][ T6483] syz.1.206: attempt to access beyond end of device
[   88.491946][ T6483] loop1: rw=0, sector=77952, nr_sectors = 8 limit=40427
[   88.531653][ T5846] syz-executor: attempt to access beyond end of device
[   88.531653][ T5846] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   88.536091][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   88.536105][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.536111][ T5846] Call Trace:
[   88.536115][ T5846]  <TASK>
[   88.536120][ T5846]  dump_stack_lvl+0x189/0x250
[   88.536138][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.536148][ T5846]  ? __pfx_queue_work_on+0x10/0x10
[   88.536158][ T5846]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   88.536171][ T5846]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   88.536186][ T5846]  f2fs_handle_critical_error+0x37c/0x540
[   88.536205][ T5846]  f2fs_write_end_io+0x886/0xb60
[   88.536223][ T5846]  __submit_merged_bio+0x27a/0x6a0
[   88.536238][ T5846]  __submit_merged_write_cond+0x255/0x530
[   88.536252][ T5846]  f2fs_write_data_pages+0x261d/0x3000
[   88.536282][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   88.536319][ T5846]  ? __lock_acquire+0xab9/0xd20
[   88.536344][ T5846]  ? __pfx_css_rstat_updated+0x10/0x10
[   88.536358][ T5846]  ? __lock_acquire+0xab9/0xd20
[   88.536377][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   88.536389][ T5846]  do_writepages+0x32e/0x550
[   88.536406][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[   88.536418][ T5846]  filemap_fdatawrite+0x199/0x240
[   88.536429][ T5846]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   88.536464][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[   88.536476][ T5846]  f2fs_sync_dirty_inodes+0x31f/0x830
[   88.536492][ T5846]  f2fs_write_checkpoint+0x95a/0x1df0
[   88.536513][ T5846]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   88.536565][ T5846]  ? kill_f2fs_super+0x298/0x6c0
[   88.536578][ T5846]  kill_f2fs_super+0x2c3/0x6c0
[   88.536590][ T5846]  ? __pfx_kill_f2fs_super+0x10/0x10
[   88.536597][ T5846]  ? radix_tree_delete_item+0x2b6/0x400
[   88.536613][ T5846]  ? shrinker_free+0x2ce/0x3e0
[   88.536625][ T5846]  deactivate_locked_super+0xbc/0x130
[   88.536636][ T5846]  cleanup_mnt+0x425/0x4c0
[   88.536647][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.536661][ T5846]  task_work_run+0x1d4/0x260
[   88.536674][ T5846]  ? __pfx_task_work_run+0x10/0x10
[   88.536683][ T5846]  ? __x64_sys_umount+0x122/0x160
[   88.536697][ T5846]  ? exit_to_user_mode_loop+0x40/0x110
[   88.536712][ T5846]  exit_to_user_mode_loop+0xec/0x110
[   88.536723][ T5846]  do_syscall_64+0x2bd/0x3b0
[   88.536734][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.536744][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.536752][ T5846]  ? exc_page_fault+0x9f/0xf0
[   88.536763][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.536771][ T5846] RIP: 0033:0x7f9d0c58ff17
[   88.536780][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   88.536787][ T5846] RSP: 002b:00007fff8fce6008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   88.536797][ T5846] RAX: 0000000000000000 RBX: 00007f9d0c611c05 RCX: 00007f9d0c58ff17
[   88.536803][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8fce60c0
[   88.536808][ T5846] RBP: 00007fff8fce60c0 R08: 0000000000000000 R09: 0000000000000000
[   88.536813][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8fce7150
[   88.536818][ T5846] R13: 00007f9d0c611c05 R14: 0000000000015948 R15: 00007fff8fce7190
[   88.536833][ T5846]  </TASK>
[   88.536837][ T5846] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   90.615298][ T6535] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   90.851115][ T5910] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   90.964463][ T6540] loop0: detected capacity change from 0 to 32768
[   90.990514][ T6540] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   91.004675][ T5910] usb 3-1: Using ep0 maxpacket: 32
[   91.015001][ T5910] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   91.024074][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.031976][ T5910] usb 3-1: Product: syz
[   91.033420][ T5910] usb 3-1: Manufacturer: syz
[   91.040530][ T5910] usb 3-1: SerialNumber: syz
[   91.047328][ T6540] XFS (loop0): Ending clean mount
[   91.050314][ T5910] usb 3-1: config 0 descriptor??
[   91.057484][ T5910] gspca_main: stk1135-2.14.0 probing 174f:6a31
[   91.062959][ T6540] XFS (loop0): Quotacheck needed: Please wait.
[   91.095558][ T6540] XFS (loop0): Quotacheck: Done.
[   91.141698][ T5845] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   91.835982][ T6573] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   91.837519][   T47] IPVS: starting estimator thread 0...
[   91.940851][ T6575] IPVS: using max 61 ests per chain, 146400 per kthread
[   91.961876][ T6579] warning: `syz.1.234' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.269237][ T5910] gspca_stk1135: reg_w 0xd err -71
[   92.272170][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[   92.274175][ T5910] gspca_stk1135: Sensor write failed
[   92.276149][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[   92.278624][ T5910] gspca_stk1135: Sensor write failed
[   92.281355][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[   92.283817][ T5910] gspca_stk1135: Sensor read failed
[   92.285872][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[   92.288318][ T5910] gspca_stk1135: Sensor read failed
[   92.290390][ T5910] gspca_stk1135: Detected sensor type unknown (0x0)
[   92.293521][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[   92.296099][ T5910] gspca_stk1135: Sensor read failed
[   92.298013][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[   92.302205][ T5910] gspca_stk1135: Sensor read failed
[   92.305102][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[   92.308656][ T5910] gspca_stk1135: Sensor write failed
[   92.312415][ T5910] gspca_stk1135: serial bus timeout: status=0x00
[   92.314905][ T5910] gspca_stk1135: Sensor write failed
[   92.317106][ T5910] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[   92.324648][ T5910] usb 3-1: USB disconnect, device number 5
[   93.040771][ T5908] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   93.400765][ T5908] usb 1-1: Using ep0 maxpacket: 16
[   93.405877][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[   93.409528][ T5908] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[   93.414528][ T5908] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[   93.418351][ T5908] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[   93.422631][ T5908] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[   93.426295][ T5908] usb 1-1: config 1 interface 0 has no altsetting 0
[   93.429157][ T5908] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[   93.434331][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.441860][ T5908] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[   93.679260][ T6614] capability: warning: `syz.1.246' uses deprecated v2 capabilities in a way that may be insecure
[   93.708987][ T5908] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22
[   93.730924][ T5908] usb 1-1: USB disconnect, device number 6
[   93.924570][ T6620] loop2: detected capacity change from 0 to 2048
[   93.949621][ T6620] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.956150][ T6616] loop1: detected capacity change from 0 to 32768
[   93.962926][ T6616] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.247 (6616)
[   93.976412][ T6616] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   93.987978][ T6616] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   93.998865][ T6616] BTRFS info (device loop1): using free-space-tree
[   94.360759][ T5910] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[   94.470890][ T6648] loop0: detected capacity change from 0 to 4096
[   94.514941][ T5910] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[   94.518235][ T5910] usb 3-1: config 0 has no interface number 0
[   94.525972][ T5910] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   94.531404][ T6649] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.539213][ T5910] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[   94.547467][ T5910] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   94.556082][ T5910] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   94.564298][ T5910] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[   94.568535][ T5910] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   94.585418][ T5910] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   94.588905][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.615245][ T5910] usb 3-1: config 0 descriptor??
[   94.618874][ T6639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   94.621765][ T6639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   94.650414][ T5910] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   94.687972][ T6651] loop0: detected capacity change from 0 to 16
[   94.703654][ T5846] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   94.703779][ T6651] erofs (device loop0): too large lz4 pclusterblks 16832
[   94.860047][ T6639] ldusb 3-1:0.55: Write buffer overflow, 1 bytes dropped
[   94.884879][ T5910] usb 3-1: USB disconnect, device number 6
[   94.902992][ T5910] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[   95.199273][ T6665] syz.1.263 uses obsolete (PF_INET,SOCK_PACKET)
[   95.294099][ T5707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.374785][ T5707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.475400][ T5707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.663424][ T5707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.785917][ T6680] loop2: detected capacity change from 0 to 64
[   96.341616][ T5707] bridge_slave_1: left allmulticast mode
[   96.345822][ T5707] bridge_slave_1: left promiscuous mode
[   96.346112][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.351708][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.367787][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.375076][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.379241][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.384748][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.411783][ T5707] bridge_slave_0: left allmulticast mode
[   96.419026][ T5707] bridge_slave_0: left promiscuous mode
[   96.427305][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.742165][ T6691] loop2: detected capacity change from 0 to 32768
[   96.791868][ T6691] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   96.834583][ T6691] XFS (loop2): Ending clean mount
[   96.839401][ T6691] XFS (loop2): Quotacheck needed: Please wait.
[   96.899655][ T6691] XFS (loop2): Quotacheck: Done.
[   97.003849][ T5707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.011462][ T5707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.016309][ T5707] bond0 (unregistering): Released all slaves
[   97.157563][ T6708] loop1: detected capacity change from 0 to 136
[   97.206836][ T6708] rock: directory entry would overflow storage
[   97.210467][ T6708] rock: sig=0x4f50, size=4, remaining=3
[   97.214261][ T6708] iso9660: Corrupted directory entry in block 2 of inode 1472
[   97.326092][ T6710] loop1: detected capacity change from 0 to 256
[   97.399383][ T5854] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   97.750049][ T6688] chnl_net:caif_netlink_parms(): no params data found
[   97.796478][ T6731] netlink: 180 bytes leftover after parsing attributes in process `syz.1.280'.
[   97.816774][ T6725] netlink: 180 bytes leftover after parsing attributes in process `syz.1.280'.
[   97.833031][ T5707] hsr_slave_0: left promiscuous mode
[   97.835712][ T5707] hsr_slave_1: left promiscuous mode
[   97.838642][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.841795][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.846545][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.849563][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.885140][ T5707] veth1_macvtap: left promiscuous mode
[   97.887636][ T5707] veth0_macvtap: left promiscuous mode
[   97.890332][ T5707] veth1_vlan: left promiscuous mode
[   97.895322][ T5707] veth0_vlan: left promiscuous mode
[   98.415536][ T5707] team0 (unregistering): Port device team_slave_1 removed
[   98.431757][ T5852] Bluetooth: hci1: command tx timeout
[   98.452203][ T5707] team0 (unregistering): Port device team_slave_0 removed
[   98.832397][ T6725] netlink: 180 bytes leftover after parsing attributes in process `syz.1.280'.
[   98.945597][ T6688] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.959322][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.966776][ T6688] bridge_slave_0: entered allmulticast mode
[   98.973411][ T6688] bridge_slave_0: entered promiscuous mode
[   98.995070][ T6688] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.998041][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.014640][ T6688] bridge_slave_1: entered allmulticast mode
[   99.021475][ T6688] bridge_slave_1: entered promiscuous mode
[   99.056046][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'.
[   99.104911][ T6688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.132072][ T6688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.191427][ T6760] binder: 6759:6760 unknown command 24
[   99.193176][ T6760] binder: 6759:6760 ioctl c0306201 200000000280 returned -22
[   99.216163][ T6688] team0: Port device team_slave_0 added
[   99.244737][ T6688] team0: Port device team_slave_1 added
[   99.345570][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.349545][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.360711][ T6767] netlink: 165 bytes leftover after parsing attributes in process `syz.2.289'.
[   99.374143][ T6688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.444244][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.454747][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.466845][ T6688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.496489][ T6756] loop1: detected capacity change from 0 to 32768
[   99.516855][ T6756] XFS: noikeep mount option is deprecated.
[   99.539487][ T6756] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.583184][ T6688] hsr_slave_0: entered promiscuous mode
[   99.586188][ T6688] hsr_slave_1: entered promiscuous mode
[   99.588877][ T6688] debugfs: 'hsr0' already exists in 'hsr'
[   99.609958][ T6756] XFS (loop1): Ending clean mount
[   99.612163][ T6688] Cannot create hsr debugfs directory
[   99.627011][ T6756] XFS (loop1): Quotacheck needed: Please wait.
[   99.680995][ T6756] XFS (loop1): Quotacheck: Done.
[   99.745347][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.912849][ T6780] loop2: detected capacity change from 0 to 32768
[   99.924633][ T6780] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.291 (6780)
[  100.022245][ T6780] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  100.026695][ T6780] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  100.030267][ T6780] BTRFS error (device loop2): ignoredatacsums must be used with ro mount option
[  100.090783][ T6780] BTRFS info (device loop2): using free-space-tree
[  100.093821][ T6780] BTRFS error (device loop2): open_ctree failed: -22
[  100.285182][ T6688] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  100.298439][ T6688] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  100.326448][ T6688] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  100.335311][ T6688] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  100.444322][ T6806] syz.2.296: attempt to access beyond end of device
[  100.444322][ T6806] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0
[  100.462243][ T6806] qnx6: unable to read the first superblock
[  100.471369][ T6806] syz.2.296: attempt to access beyond end of device
[  100.471369][ T6806] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  100.481703][ T6806] qnx6: unable to read the first superblock
[  100.484359][ T6806] qnx6: unable to read the first superblock
[  100.511842][ T5852] Bluetooth: hci1: command tx timeout
[  100.589550][ T6688] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.636419][ T6688] 8021q: adding VLAN 0 to HW filter on device team0
[  100.660493][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.663479][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.692954][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.695924][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.818389][ T6688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  100.833056][ T6688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.093372][ T6688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.177369][ T6688] veth0_vlan: entered promiscuous mode
[  101.193860][ T6688] veth1_vlan: entered promiscuous mode
[  101.229543][ T6688] veth0_macvtap: entered promiscuous mode
[  101.237983][ T6688] veth1_macvtap: entered promiscuous mode
[  101.265715][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.280138][ T6688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.295693][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.299205][ T5875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.319574][ T5707] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.329010][ T5707] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.434233][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.441175][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.489825][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.493826][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.756123][ T6839] loop1: detected capacity change from 0 to 32768
[  101.766287][ T6839] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.304 (6839)
[  101.803033][ T6839] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.807162][ T6839] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  101.821262][ T6839] BTRFS info (device loop1): using free-space-tree
[  102.047416][ T5846] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.050824][   T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  102.145745][ T6847] loop2: detected capacity change from 0 to 32768
[  102.168159][ T6847] *** Log Is Dirty ! ***
[  102.170040][ T6847] lmLogInit: exit(-22)
[  102.177856][ T6847] lmLogOpen: exit(-22)
[  102.179212][ T6847] jfs_mount_rw failed, return code = -22
[  102.216380][   T47] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  102.218987][   T47] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  102.230981][   T47] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  102.234180][   T47] usb 4-1: config 220 has no interface number 2
[  102.236155][   T47] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  102.251016][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  102.251027][   T33] audit: type=1326 audit(1755611386.723:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.307" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c58ebe9 code=0x0
[  102.283875][   T47] usb 4-1: config 220 interface 0 has no altsetting 0
[  102.286382][   T47] usb 4-1: config 220 interface 76 has no altsetting 0
[  102.288815][   T47] usb 4-1: config 220 interface 1 has no altsetting 0
[  102.320327][   T47] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  102.324654][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.327099][   T47] usb 4-1: Product: syz
[  102.328381][   T47] usb 4-1: Manufacturer: syz
[  102.329820][   T47] usb 4-1: SerialNumber: syz
[  102.568011][   T47] usb 4-1: selecting invalid altsetting 0
[  102.583603][   T47] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  102.585648][   T47] usb 4-1: No valid video chain found.
[  102.590927][ T5852] Bluetooth: hci1: command tx timeout
[  102.603488][   T47] usb 4-1: selecting invalid altsetting 0
[  102.605618][   T47] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  102.621864][   T47] usb 4-1: USB disconnect, device number 2
[  102.641264][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'.
[  103.049779][ T6904] netlink: 'syz.1.316': attribute type 11 has an invalid length.
[  103.092168][ T6906] netlink: 280 bytes leftover after parsing attributes in process `syz.1.317'.
[  103.247995][ T6910] IPv6: NLM_F_CREATE should be specified when creating new route
[  103.378848][ T6912] netlink: 'syz.3.320': attribute type 10 has an invalid length.
[  103.404404][ T6912] team0: Port device syz_tun added
[  103.567292][ T6919] loop3: detected capacity change from 0 to 2048
[  103.725118][ T6919] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  103.788837][ T6919] UDF-fs: Scanning with blocksize 512 failed
[  103.964990][ T6919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.360940][ T5895] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  104.542661][  T973] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  104.545212][ T5895] usb 4-1: Using ep0 maxpacket: 8
[  104.551878][ T5895] usb 4-1: unable to get BOS descriptor or descriptor too short
[  104.562287][ T5895] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  104.566018][ T5895] usb 4-1: config 1 has no interface number 1
[  104.575522][ T5895] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  104.586302][ T5895] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  104.596170][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  104.599876][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.599921][ T6949] tap0: tun_chr_ioctl cmd 2147767521
[  104.603341][ T5895] usb 4-1: Product: syz
[  104.603376][ T5895] usb 4-1: Manufacturer: syz
[  104.603387][ T5895] usb 4-1: SerialNumber: syz
[  104.670826][ T5852] Bluetooth: hci1: command tx timeout
[  104.690749][  T973] usb 3-1: Using ep0 maxpacket: 32
[  104.696171][  T973] usb 3-1: config 0 has an invalid interface number: 19 but max is 0
[  104.698788][  T973] usb 3-1: config 0 has no interface number 0
[  104.700810][  T973] usb 3-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  104.704161][  T973] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[  104.707101][  T973] usb 3-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81
[  104.711381][  T973] usb 3-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024
[  104.715322][  T973] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  104.722007][  T973] usb 3-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  104.731437][  T973] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57
[  104.734315][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.736910][  T973] usb 3-1: Product: syz
[  104.738311][  T973] usb 3-1: Manufacturer: syz
[  104.749995][  T973] usb 3-1: SerialNumber: syz
[  104.754714][  T973] usb 3-1: config 0 descriptor??
[  104.758849][ T6941] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  104.766092][ T6941] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  104.772737][  T973] ipaq 3-1:0.19: PocketPC PDA converter detected
[  104.775456][  T973] usb 3-1: active config #0 != 1 ??
[  104.840761][ T5895] usb 4-1: 2:1: cannot set freq 15828157 to ep 0x82
[  104.877540][ T5895] usb 4-1: USB disconnect, device number 3
[  104.918011][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.981339][   T47] usb 3-1: USB disconnect, device number 7
[  105.211211][  T973] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  105.365872][  T973] usb 2-1: Using ep0 maxpacket: 8
[  105.372884][  T973] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  105.376319][  T973] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  105.379358][  T973] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  105.383651][ T5895] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  105.392830][ T5895] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  105.397014][  T973] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  105.405534][  T973] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  105.408525][  T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.623334][  T973] usb 2-1: GET_CAPABILITIES returned 0
[  105.625631][  T973] usbtmc 2-1:16.0: can't read capabilities
[  105.829084][ T5910] usb 2-1: USB disconnect, device number 3
[  105.992306][   T33] audit: type=1326 audit(1755611390.473:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.3.352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a118ebe9 code=0x7ffc0000
[  106.000257][   T33] audit: type=1326 audit(1755611390.473:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.3.352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a118ebe9 code=0x7ffc0000
[  106.012833][   T33] audit: type=1326 audit(1755611390.493:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.3.352" exe="/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f27a118ebe9 code=0x7ffc0000
[  106.021006][   T33] audit: type=1326 audit(1755611390.493:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.3.352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a118ebe9 code=0x7ffc0000
[  106.039461][   T33] audit: type=1326 audit(1755611390.493:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.3.352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a118ebe9 code=0x7ffc0000
[  106.049564][   T33] audit: type=1326 audit(1755611390.493:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.3.352" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f27a118ebe9 code=0x7ffc0000
[  106.059608][   T33] audit: type=1326 audit(1755611390.493:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.3.352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a118ebe9 code=0x7ffc0000
[  106.071268][   T33] audit: type=1326 audit(1755611390.493:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.3.352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a118ebe9 code=0x7ffc0000
[  106.079801][   T33] audit: type=1326 audit(1755611390.493:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.3.352" exe="/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f27a118ebe9 code=0x7ffc0000
[  106.930234][ T7003] loop3: detected capacity change from 0 to 512
[  106.989694][ T7003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.999803][ T7003] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.053805][ T6688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.098989][ T6998] loop1: detected capacity change from 0 to 32768
[  107.137027][ T6998] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  107.169140][ T6998] XFS (loop1): Ending clean mount
[  107.176700][ T6998] XFS (loop1): Quotacheck needed: Please wait.
[  107.209825][ T6998] XFS (loop1): Quotacheck: Done.
[  107.267110][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  108.069477][ T7052] Invalid ELF header len 8
[  108.080284][ T7054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.376'.
[  108.087954][ T7054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.376'.
[  108.116832][ T7056] sctp: [Deprecated]: syz.2.378 (pid 7056) Use of int in maxseg socket option.
[  108.116832][ T7056] Use struct sctp_assoc_value instead
[  108.168660][ T7060] loop2: detected capacity change from 0 to 1024
[  108.247674][  T533] hfsplus: b-tree write err: -5, ino 3
[  108.255836][ T5854] hfsplus: node 4:3 still has 3 user(s)!
[  108.405678][ T7066] loop3: detected capacity change from 0 to 512
[  108.409420][ T7066] EXT4-fs: Ignoring removed nobh option
[  108.416490][ T7066] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  108.421274][  T792] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  108.448416][ T7066] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.383: iget: bad i_size value: 38620345925642
[  108.459101][ T7066] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.383: couldn't read orphan inode 15 (err -117)
[  108.469859][ T7066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.506830][  T533] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u10:3: bg 0: block 5: invalid block bitmap
[  108.514422][  T533] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  108.519097][  T533] EXT4-fs (loop3): This should not happen!! Data will be lost
[  108.519097][  T533] 
[  108.524994][  T533] EXT4-fs (loop3): Total free blocks count 0
[  108.527348][  T533] EXT4-fs (loop3): Free/Dirty block details
[  108.529410][  T533] EXT4-fs (loop3): free_blocks=0
[  108.531803][  T533] EXT4-fs (loop3): dirty_blocks=64
[  108.533629][  T533] EXT4-fs (loop3): Block reservation details
[  108.535816][  T533] EXT4-fs (loop3): i_reserved_data_blocks=64
[  108.544383][ T6688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.571298][  T792] usb 2-1: Using ep0 maxpacket: 8
[  108.582993][  T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.591200][ T5908] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  108.597506][  T792] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  108.609991][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.632332][ T7072] vivid-002: disconnect
[  108.633243][  T792] usb 2-1: config 0 descriptor??
[  108.635712][ T7072] vivid-002: reconnect
[  108.659201][  T792] usb 2-1: bad CDC descriptors
[  108.752494][ T5908] usb 3-1: Using ep0 maxpacket: 32
[  108.757617][ T5908] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[  108.760327][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.763994][ T5908] usb 3-1: config 0 has no interface number 0
[  108.766300][ T5908] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  108.769435][ T5908] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  108.773721][ T5908] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  108.777914][ T5908] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  108.784350][ T5908] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  108.788402][ T5908] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  108.792762][ T5908] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  108.796553][ T5908] usb 3-1: config 0 interface 239 has no altsetting 0
[  108.806742][ T5908] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  108.810064][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.813290][ T5908] usb 3-1: Product: syz
[  108.814991][ T5908] usb 3-1: Manufacturer: syz
[  108.816784][ T5908] usb 3-1: SerialNumber: syz
[  108.827050][ T5908] usb 3-1: config 0 descriptor??
[  108.833580][ T7064] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  108.845428][ T7064] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  108.870352][  T792] usb 2-1: USB disconnect, device number 4
[  109.086601][ T5852] Bluetooth: hci3: BCM: Reset failed (-71)
[  109.091551][ T5908] usb 3-1: USB disconnect, device number 8
[  110.234479][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'.
[  110.520736][   T47] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  110.611798][ T7099] loop3: detected capacity change from 0 to 32768
[  110.615928][ T7099] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.396 (7099)
[  110.622971][ T7099] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.636207][ T7099] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  110.638927][ T7099] BTRFS info (device loop3): using free-space-tree
[  110.670898][   T47] usb 2-1: Using ep0 maxpacket: 32
[  110.674049][   T47] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  110.677962][   T47] usb 2-1: config 0 has no interface number 0
[  110.690170][   T47] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  110.693802][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.696307][   T47] usb 2-1: Product: syz
[  110.697617][   T47] usb 2-1: Manufacturer: syz
[  110.709323][   T47] usb 2-1: SerialNumber: syz
[  110.712879][   T47] usb 2-1: config 0 descriptor??
[  110.724486][   T47] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  110.851877][ T6688] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.854151][ T5707] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  110.998579][   T47] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  111.029015][   T47] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  111.062744][ T7101] loop2: detected capacity change from 0 to 32768
[  111.125584][ T7101] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.188852][ T7101] XFS (loop2): Ending clean mount
[  111.352035][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  111.355310][  T792] usb 2-1: USB disconnect, device number 5
[  111.368182][  T792] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  111.380026][  T792] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  111.395192][  T792] quatech2 2-1:0.51: device disconnected
[  111.534930][ T5854] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.935040][ T7153] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  112.081453][ T7157] loop1: detected capacity change from 0 to 128
[  112.105673][ T7157] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.116973][ T7157] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  112.121067][  T973] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  112.143572][ T5846] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.417023][  T973] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  112.420789][  T973] usb 3-1: config 0 has no interface number 0
[  112.425917][  T973] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  112.429704][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.435266][  T973] usb 3-1: Product: syz
[  112.437127][  T973] usb 3-1: Manufacturer: syz
[  112.439094][  T973] usb 3-1: SerialNumber: syz
[  112.446196][  T973] usb 3-1: config 0 descriptor??
[  112.887907][  T973] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[  112.890572][  T973] usb 3-1: Firmware version (0.0) predates our first public release.
[  112.893599][  T973] usb 3-1: Please update to version 0.2 or newer
[  113.242794][ T7189] loop1: detected capacity change from 0 to 512
[  113.252473][ T7189] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  113.262117][  T973] usb 3-1: USB disconnect, device number 9
[  113.268153][ T7189] EXT4-fs (loop1): invalid journal inode
[  113.271226][ T7189] EXT4-fs (loop1): can't get journal size
[  113.281655][ T7189] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[  113.284383][ T7189] System zones: 1-12, 13-13
[  113.289537][ T7189] EXT4-fs (loop1): orphan cleanup on readonly fs
[  113.293015][ T7189] EXT4-fs (loop1): 1 truncate cleaned up
[  113.296871][ T7189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  113.351644][ T5846] EXT4-fs error (device loop1): __ext4_iget:5464: inode #11: block 1828716567: comm syz-executor: invalid block
[  113.369538][ T5846] EXT4-fs error (device loop1): __ext4_iget:5464: inode #11: block 1828716567: comm syz-executor: invalid block
[  113.573995][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.621980][ T5875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.651303][ T5875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  113.745493][ T5875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.748674][ T5875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  113.840490][ T5875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.846571][ T5875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  113.921757][ T5875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.925953][ T5875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  114.090223][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.095832][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.109529][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.117327][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.128240][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.153505][ T5875] bridge_slave_1: left allmulticast mode
[  114.162475][ T7213] loop2: detected capacity change from 0 to 128
[  114.164888][ T5875] bridge_slave_1: left promiscuous mode
[  114.167036][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.182254][ T5875] bridge_slave_0: left allmulticast mode
[  114.191610][ T5875] bridge_slave_0: left promiscuous mode
[  114.198068][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.408404][ T5875] bond1 (unregistering): (slave geneve2): Releasing backup interface
[  114.612168][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.617794][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.628284][ T5875] bond0 (unregistering): Released all slaves
[  114.759286][ T5875] bond1 (unregistering): Released all slaves
[  114.911081][  T792] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  115.071806][ T5875] hsr_slave_0: left promiscuous mode
[  115.074107][ T5875] hsr_slave_1: left promiscuous mode
[  115.077312][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.081756][  T792] usb 4-1: No LPM exit latency info found, disabling LPM.
[  115.087086][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.095804][  T792] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  115.096670][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.099232][  T792] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  115.102403][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.121133][ T5875] veth1_macvtap: left promiscuous mode
[  115.122260][  T792] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  115.122853][ T5875] veth0_macvtap: left promiscuous mode
[  115.127884][ T5875] veth1_vlan: left promiscuous mode
[  115.129650][ T5875] veth0_vlan: left promiscuous mode
[  115.146777][  T792] usb 4-1: string descriptor 0 read error: -22
[  115.149154][  T792] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  115.163165][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.195825][  T792] usb 4-1: 0:2 : does not exist
[  115.232725][ T7244] netlink: 'syz.2.423': attribute type 15 has an invalid length.
[  115.426915][  T973] usb 4-1: USB disconnect, device number 4
[  115.592320][ T5908] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  115.654464][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  115.688190][ T5875] team0 (unregistering): Port device team_slave_0 removed
[  115.745049][ T5908] usb 3-1: Using ep0 maxpacket: 32
[  115.753600][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.757930][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.773460][ T5908] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  115.776951][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.792391][ T5908] usb 3-1: config 0 descriptor??
[  116.190915][ T5236] Bluetooth: hci0: command tx timeout
[  116.254762][ T5908] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  116.260102][ T7210] chnl_net:caif_netlink_parms(): no params data found
[  116.406870][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.409849][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.432132][ T7210] bridge_slave_0: entered allmulticast mode
[  116.439259][ T7210] bridge_slave_0: entered promiscuous mode
[  116.444452][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.447060][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.449742][ T7210] bridge_slave_1: entered allmulticast mode
[  116.453551][ T7210] bridge_slave_1: entered promiscuous mode
[  116.484178][ T7210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.490088][ T7210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.500519][ T5908] usb 3-1: USB disconnect, device number 10
[  116.536227][ T7210] team0: Port device team_slave_0 added
[  116.540396][ T7210] team0: Port device team_slave_1 added
[  116.561310][  T792] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  116.589803][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.592925][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.602387][ T7210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.607826][ T7210] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.610363][ T7210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.620160][ T7210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.673566][ T5875] IPVS: stop unused estimator thread 0...
[  116.686366][ T7210] hsr_slave_0: entered promiscuous mode
[  116.689216][ T7210] hsr_slave_1: entered promiscuous mode
[  116.720776][  T792] usb 4-1: Using ep0 maxpacket: 32
[  116.727995][  T792] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  116.735616][  T792] usb 4-1: config 0 has no interface number 0
[  116.737888][  T792] usb 4-1: config 0 interface 12 has no altsetting 0
[  116.758521][  T792] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  116.761924][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.764825][  T792] usb 4-1: Product: syz
[  116.766392][  T792] usb 4-1: Manufacturer: syz
[  116.768136][  T792] usb 4-1: SerialNumber: syz
[  116.783433][  T792] usb 4-1: config 0 descriptor??
[  116.974529][ T7210] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  116.984849][ T7210] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  116.996977][ T7210] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  117.006650][ T7210] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  117.100104][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.102955][ T7210] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.106265][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.109306][ T7210] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.200452][ T7210] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.212107][  T991] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.215577][  T991] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.241289][ T7210] 8021q: adding VLAN 0 to HW filter on device team0
[  117.263915][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.266307][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.281999][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.284790][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.400902][ T5908] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  117.476151][ T7210] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.576078][ T5908] usb 3-1: unable to get BOS descriptor or descriptor too short
[  117.579297][ T5908] usb 3-1: not running at top speed; connect to a high speed hub
[  117.593822][ T5908] usb 3-1: config 129 has an invalid interface number: 135 but max is 0
[  117.596586][ T5908] usb 3-1: config 129 has an invalid interface number: 5 but max is 0
[  117.599427][ T5908] usb 3-1: config 129 descriptor has 1 excess byte, ignoring
[  117.609730][ T5908] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  117.616022][ T5908] usb 3-1: config 129 has no interface number 0
[  117.618300][ T5908] usb 3-1: config 129 has no interface number 1
[  117.627290][ T5908] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  117.640873][ T5908] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  117.644206][ T5908] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  117.660289][ T7210] veth0_vlan: entered promiscuous mode
[  117.662658][ T5908] usb 3-1: config 129 interface 135 has no altsetting 0
[  117.664887][ T5908] usb 3-1: config 129 interface 5 has no altsetting 0
[  117.677038][ T7210] veth1_vlan: entered promiscuous mode
[  117.683953][ T5908] usb 3-1: string descriptor 0 read error: -22
[  117.686405][ T5908] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  117.697080][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.722701][ T7210] veth0_macvtap: entered promiscuous mode
[  117.728969][ T5908] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  117.733995][ T7210] veth1_macvtap: entered promiscuous mode
[  117.743548][ T5908] usb 3-1: MIDIStreaming interface descriptor not found
[  117.762347][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.770049][ T7210] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.787174][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.789893][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.807637][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.810454][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.897976][  T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.904905][  T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.929048][  T973] usb 3-1: USB disconnect, device number 11
[  117.948621][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.962532][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.234163][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'.
[  118.271798][ T5236] Bluetooth: hci0: command tx timeout
[  118.315222][ T7328] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  118.413013][  T792] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  118.416149][  T792] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  118.419027][  T792] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  118.424313][  T792] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  118.435873][  T792] usb 4-1: USB disconnect, device number 5
[  118.518257][ T7338] loop2: detected capacity change from 0 to 256
[  119.335427][ T7362] loop4: detected capacity change from 0 to 512
[  119.358601][ T7362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.364533][ T7362] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.838118][ T5908] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  119.930349][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'.
[  119.938212][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'.
[  120.000870][ T5908] usb 4-1: Using ep0 maxpacket: 8
[  120.005086][ T5908] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  120.009688][ T5908] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  120.013954][ T5908] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  120.017093][ T5908] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  120.021945][ T5908] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  120.026732][ T5908] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  120.029799][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.390828][ T5236] Bluetooth: hci0: command tx timeout
[  120.404231][ T7210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.456369][ T5908] usb 4-1: GET_CAPABILITIES returned 0
[  120.458091][ T5908] usbtmc 4-1:16.0: can't read capabilities
[  120.652499][ T5908] usb 4-1: USB disconnect, device number 6
[  121.289340][ T7406] overlayfs: failed to decode file handle (len=0, type=251, flags=0, err=-22)
[  121.723279][ T7426] (syz.3.465,7426,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  121.745365][ T7428] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  121.748629][ T7428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.096904][ T7438] loop2: detected capacity change from 0 to 32768
[  122.173870][ T7438] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  122.181039][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'.
[  122.184804][ T7451] netlink: 'syz.4.477': attribute type 2 has an invalid length.
[  122.187814][ T7451] netlink: 'syz.4.477': attribute type 1 has an invalid length.
[  122.220812][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'.
[  122.228583][ T7438] (syz.2.470,7438,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  122.236601][ T7438] (syz.2.470,7438,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  122.239957][ T7438] (syz.2.470,7438,1):ocfs2_rename:1486 ERROR: status = -2
[  122.242869][ T7438] (syz.2.470,7438,1):ocfs2_rename:1702 ERROR: status = -2
[  122.306619][ T5854] ocfs2: Unmounting device (7,2) on (node local)
[  122.431500][ T5236] Bluetooth: hci0: command tx timeout
[  122.488776][ T7458] loop4: detected capacity change from 0 to 128
[  122.501614][ T7458] ext2: Unknown parameter 'subj_user'
[  122.536038][ T7448] loop3: detected capacity change from 0 to 32768
[  122.596392][ T7448] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.610338][ T7460] Zero length message leads to an empty skb
[  122.637278][ T7448] XFS (loop3): Ending clean mount
[  122.693721][ T6688] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  123.118746][ T7474] loop2: detected capacity change from 0 to 32768
[  123.135383][ T7474] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  123.192597][ T5854] ocfs2: Unmounting device (7,2) on (node local)
[  123.291335][  T973] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  123.403476][ T7491] loop2: detected capacity change from 0 to 1024
[  123.406974][ T7491] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent
[  123.454105][  T973] usb 4-1: unable to get BOS descriptor or descriptor too short
[  123.460016][  T973] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  123.463377][  T973] usb 4-1: config 1 has no interface number 1
[  123.467589][  T973] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  123.474889][  T973] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  123.478032][  T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.485531][  T973] usb 4-1: Product: syz
[  123.486845][  T973] usb 4-1: Manufacturer: syz
[  123.492414][  T973] usb 4-1: SerialNumber: syz
[  123.536920][ T7495] netlink: 48 bytes leftover after parsing attributes in process `syz.4.492'.
[  123.709158][  T973] usb 4-1: found format II with max.bitrate = 26774, frame size=2
[  123.711950][  T973] usb 4-1: found format II with max.bitrate = 26774, frame size=2
[  123.717026][  T973] usb 4-1: failed to enable PITCH for EP 0x82
[  123.721570][ T5882] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  123.729651][  T973] usb 4-1: USB disconnect, device number 7
[  123.739306][ T5921] udevd[5921]: setting mode of /dev/bus/usb/004/007 to 020664 failed: No such file or directory
[  123.744454][ T5921] udevd[5921]: setting owner of /dev/bus/usb/004/007 to uid=0, gid=0 failed: No such file or directory
[  123.763556][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  123.872869][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  123.876651][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  123.880886][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  123.887135][ T5882] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  123.890242][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.892939][ T5882] usb 3-1: Product: syz
[  123.894284][ T5882] usb 3-1: Manufacturer: syz
[  123.895743][ T5882] usb 3-1: SerialNumber: syz
[  123.898870][ T5882] usb 3-1: config 0 descriptor??
[  123.901421][ T7493] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  123.904156][ T7493] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  123.908450][ T5882] usb 3-1: ucan: probing device on interface #0
[  123.943060][ T5910] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  124.093665][ T5910] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  124.096499][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.102729][ T5910] usb 5-1: config 0 descriptor??
[  124.108812][ T5910] cp210x 5-1:0.0: cp210x converter detected
[  124.509295][ T5910] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  124.526848][ T5882] ucan 3-1:0.0 can0: registered device
[  124.529273][  T792] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  124.537236][ T5910] usb 5-1: cp210x converter now attached to ttyUSB0
[  124.710703][  T792] usb 4-1: Using ep0 maxpacket: 16
[  124.715798][  T792] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  124.719163][  T792] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.723326][  T792] usb 4-1: config 0 has no interface number 0
[  124.725556][ T5895] usb 5-1: USB disconnect, device number 2
[  124.725963][ T5882] ucan 3-1:0.0 can0: firmware string: S hM6.`PO˦t<րv1E]d
[  124.739078][  T792] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  124.743597][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.746763][  T792] usb 4-1: Product: syz
[  124.748416][  T792] usb 4-1: Manufacturer: syz
[  124.750277][  T792] usb 4-1: SerialNumber: syz
[  124.751334][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  124.757496][  T792] usb 4-1: config 0 descriptor??
[  124.763787][  T792] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  124.766368][  T792] usb 4-1: No valid video chain found.
[  124.784483][ T5895] cp210x 5-1:0.0: device disconnected
[  124.945770][  T973] usb 3-1: USB disconnect, device number 12
[  124.975530][  T792] usb 4-1: USB disconnect, device number 8
[  125.279930][ T7524] netlink: 'syz.4.497': attribute type 46 has an invalid length.
[  125.283709][ T7524] netlink: 55 bytes leftover after parsing attributes in process `syz.4.497'.
[  125.334811][ T7526] netlink: 'syz.4.498': attribute type 6 has an invalid length.
[  125.895825][ T7539] loop3: detected capacity change from 0 to 32768
[  126.017156][ T7555] netlink: 288 bytes leftover after parsing attributes in process `syz.4.513'.
[  126.045310][ T7537] loop2: detected capacity change from 0 to 40427
[  126.134300][ T7537] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.139586][ T7537] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  126.170132][ T7537] syz.2.502: attempt to access beyond end of device
[  126.170132][ T7537] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  126.207770][ T5854] syz-executor: attempt to access beyond end of device
[  126.207770][ T5854] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  126.223338][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  126.223362][ T5854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.223371][ T5854] Call Trace:
[  126.223377][ T5854]  <TASK>
[  126.223383][ T5854]  dump_stack_lvl+0x189/0x250
[  126.223412][ T5854]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.223428][ T5854]  ? __pfx_queue_work_on+0x10/0x10
[  126.223442][ T5854]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  126.223460][ T5854]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  126.223487][ T5854]  f2fs_handle_critical_error+0x37c/0x540
[  126.223516][ T5854]  f2fs_write_end_io+0x886/0xb60
[  126.223548][ T5854]  __submit_merged_bio+0x27a/0x6a0
[  126.223573][ T5854]  __submit_merged_write_cond+0x255/0x530
[  126.223598][ T5854]  f2fs_write_data_pages+0x261d/0x3000
[  126.223649][ T5854]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.223707][ T5854]  ? __mod_zone_page_state+0xd7/0x140
[  126.223737][ T5854]  ? unwind_next_frame+0xa5/0x2390
[  126.223751][ T5854]  ? rcu_is_watching+0x15/0xb0
[  126.223764][ T5854]  ? __kasan_check_byte+0x12/0x40
[  126.223794][ T5854]  ? __lock_acquire+0xab9/0xd20
[  126.223821][ T5854]  ? do_raw_spin_lock+0x121/0x290
[  126.223849][ T5854]  ? do_raw_spin_unlock+0x4d/0x240
[  126.223867][ T5854]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  126.223889][ T5854]  do_writepages+0x32e/0x550
[  126.223946][ T5854]  ? do_raw_spin_unlock+0x4d/0x240
[  126.223967][ T5854]  filemap_fdatawrite+0x199/0x240
[  126.223987][ T5854]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  126.224003][ T5854]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[  126.224060][ T5854]  ? do_raw_spin_unlock+0x4d/0x240
[  126.224081][ T5854]  f2fs_sync_dirty_inodes+0x31f/0x830
[  126.224109][ T5854]  f2fs_write_checkpoint+0x95a/0x1df0
[  126.224144][ T5854]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  126.224199][ T5854]  ? kill_f2fs_super+0x298/0x6c0
[  126.224221][ T5854]  kill_f2fs_super+0x2c3/0x6c0
[  126.224241][ T5854]  ? __pfx_kill_f2fs_super+0x10/0x10
[  126.224252][ T5854]  ? radix_tree_delete_item+0x2b6/0x400
[  126.224277][ T5854]  ? shrinker_free+0x2ce/0x3e0
[  126.224295][ T5854]  deactivate_locked_super+0xbc/0x130
[  126.224313][ T5854]  cleanup_mnt+0x425/0x4c0
[  126.224335][ T5854]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.224358][ T5854]  task_work_run+0x1d4/0x260
[  126.224383][ T5854]  ? __pfx_task_work_run+0x10/0x10
[  126.224398][ T5854]  ? __x64_sys_umount+0x122/0x160
[  126.224420][ T5854]  ? exit_to_user_mode_loop+0x40/0x110
[  126.224443][ T5854]  exit_to_user_mode_loop+0xec/0x110
[  126.224463][ T5854]  do_syscall_64+0x2bd/0x3b0
[  126.224481][ T5854]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.224498][ T5854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.224514][ T5854]  ? exc_page_fault+0x9f/0xf0
[  126.224534][ T5854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.224549][ T5854] RIP: 0033:0x7f47b338ff17
[  126.224564][ T5854] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  126.224575][ T5854] RSP: 002b:00007ffdca258208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  126.224592][ T5854] RAX: 0000000000000000 RBX: 00007f47b3411c05 RCX: 00007f47b338ff17
[  126.224601][ T5854] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdca2582c0
[  126.224609][ T5854] RBP: 00007ffdca2582c0 R08: 0000000000000000 R09: 0000000000000000
[  126.224616][ T5854] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdca259350
[  126.224624][ T5854] R13: 00007f47b3411c05 R14: 000000000001ec83 R15: 00007ffdca259390
[  126.224649][ T5854]  </TASK>
[  126.224655][ T5854] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  126.296613][ T7567] loop4: detected capacity change from 0 to 2048
[  126.441486][ T7567] EXT4-fs: Ignoring removed bh option
[  126.475120][ T7567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.485194][   T33] kauditd_printk_skb: 20 callbacks suppressed
[  126.485204][   T33] audit: type=1800 audit(1755611410.963:57): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.517" name="file1" dev="loop4" ino=15 res=0 errno=0
[  126.538434][ T7210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.822026][ T7583] loop4: detected capacity change from 0 to 32768
[  126.846493][ T7592] loop3: detected capacity change from 0 to 256
[  126.857027][ T7592] exfat: Deprecated parameter 'utf8'
[  126.862433][ T7583] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  126.905221][ T7592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.913176][   T33] audit: type=1800 audit(1755611411.363:58): pid=7592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.525" name="file2" dev="loop3" ino=1048620 res=0 errno=0
[  126.926121][ T7583] (syz.4.522,7583,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64
[  126.939706][ T7583] (syz.4.522,7583,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  126.947992][ T7583] (syz.4.522,7583,1):ocfs2_mknod:301 ERROR: status = -2
[  126.956232][ T7583] (syz.4.522,7583,1):ocfs2_mknod:505 ERROR: status = -2
[  126.962985][ T7583] (syz.4.522,7583,1):ocfs2_create:678 ERROR: status = -2
[  127.067657][ T7587] loop2: detected capacity change from 0 to 32768
[  127.072304][ T7587] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.516 (7587)
[  127.093124][ T7587] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  127.096405][ T7587] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  127.099481][ T7587] BTRFS info (device loop2): using free-space-tree
[  127.149321][ T7210] ocfs2: Unmounting device (7,4) on (node local)
[  127.309880][ T5854] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  127.650282][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'.
[  127.777583][ T7626] IPv6: addrconf: prefix option has invalid lifetime
[  127.902951][ T7634] 9pnet_fd: Insufficient options for proto=fd
[  128.090856][  T973] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  128.125071][ T7642] loop4: detected capacity change from 0 to 4096
[  128.150904][ T5895] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  128.154839][ T7643] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.319500][  T973] usb 4-1: Using ep0 maxpacket: 32
[  128.323195][  T973] usb 4-1: config 64 has an invalid interface number: 110 but max is 0
[  128.325766][  T973] usb 4-1: config 64 has no interface number 0
[  128.327883][  T973] usb 4-1: config 64 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  128.331479][  T973] usb 4-1: config 64 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  128.335143][  T973] usb 4-1: config 64 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  128.338655][  T973] usb 4-1: config 64 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  128.341943][ T5895] usb 3-1: Using ep0 maxpacket: 8
[  128.343602][  T973] usb 4-1: config 64 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  128.347339][  T973] usb 4-1: config 64 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  128.352806][  T973] usb 4-1: config 64 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  128.357331][ T5895] usb 3-1: config 5 has an invalid interface number: 206 but max is 0
[  128.359848][ T5895] usb 3-1: config 5 has no interface number 0
[  128.362519][ T5895] usb 3-1: config 5 interface 206 has no altsetting 0
[  128.366825][  T973] usb 4-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9
[  128.370075][ T5895] usb 3-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=be.0b
[  128.373255][  T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.375831][  T973] usb 4-1: Product: syz
[  128.377239][  T973] usb 4-1: Manufacturer: syz
[  128.378699][  T973] usb 4-1: SerialNumber: syz
[  128.380666][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.383303][ T5895] usb 3-1: Product: syz
[  128.384548][ T5895] usb 3-1: Manufacturer: syz
[  128.386133][ T5895] usb 3-1: SerialNumber: syz
[  128.603068][ T7628] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  128.614388][  T973] spcp8x5 4-1:64.110: SPCP8x5 converter detected
[  128.620397][  T973] usb 4-1: SPCP8x5 converter now attached to ttyUSB0
[  128.828182][ T5895] usb 3-1: USB disconnect, device number 13
[  128.835875][ T5908] usb 4-1: USB disconnect, device number 9
[  128.844514][ T5908] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  128.850121][ T5967] udevd[5967]: setting owner of /dev/bus/usb/003/013 to uid=0, gid=0 failed: No such file or directory
[  128.856441][ T5908] spcp8x5 4-1:64.110: device disconnected
[  129.185434][   T33] audit: type=1326 audit(1755611413.663:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.4.543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9818ebe9 code=0x7ffc0000
[  129.195614][   T33] audit: type=1326 audit(1755611413.673:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.4.543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9818ebe9 code=0x7ffc0000
[  129.205297][   T33] audit: type=1326 audit(1755611413.673:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.4.543" exe="/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f3f9818ebe9 code=0x7ffc0000
[  129.213971][   T33] audit: type=1326 audit(1755611413.673:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.4.543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9818ebe9 code=0x7ffc0000
[  129.224229][   T33] audit: type=1326 audit(1755611413.673:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.4.543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9818ebe9 code=0x7ffc0000
[  129.552378][ T7684] capability: warning: `syz.2.555' uses 32-bit capabilities (legacy support in use)
[  129.616515][ T7690] loop2: detected capacity change from 0 to 1024
[  129.620266][ T7690] EXT4-fs: Ignoring removed orlov option
[  129.631083][ T7690] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  129.651946][ T7690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.726190][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.472934][ T7740] loop4: detected capacity change from 0 to 4096
[  131.515483][ T7742] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.574610][   T33] audit: type=1800 audit(1755611416.053:64): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.566" name="file1" dev="loop4" ino=15 res=0 errno=0
[  131.598114][   T33] audit: type=1800 audit(1755611416.073:65): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.566" name="file1" dev="loop4" ino=15 res=0 errno=0
[  132.166821][ T7755] loop2: detected capacity change from 0 to 8
[  132.272216][ T7755] squashfs image failed sanity check
[  132.597734][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.599922][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.750898][ T7786] loop2: detected capacity change from 0 to 1024
[  132.755332][ T7786] EXT4-fs (loop2): unsupported inode size: 4096
[  132.757879][ T7786] EXT4-fs (loop2): blocksize: 1024
[  132.941277][ T5908] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  133.095011][ T5908] usb 5-1: config 253 has an invalid interface number: 57 but max is 0
[  133.098610][ T5908] usb 5-1: config 253 has no interface number 0
[  133.101286][ T5908] usb 5-1: config 253 interface 57 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  133.108425][ T5908] usb 5-1: New USB device found, idVendor=1546, idProduct=1313, bcdDevice=1c.86
[  133.113022][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.125813][ T5908] usb 5-1: Product: syz
[  133.127616][ T5908] usb 5-1: Manufacturer: syz
[  133.129570][ T5908] usb 5-1: SerialNumber: syz
[  133.502351][ T5908] cdc_ether 5-1:253.57: invalid descriptor buffer length
[  133.513098][ T5908] usb 5-1: bad CDC descriptors
[  133.522286][ T5908] usb 5-1: USB disconnect, device number 3
[  133.940763][  T792] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  133.956699][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'.
[  133.989218][ T7811] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  133.994222][ T7811] bond1: (slave wireguard0): Error -95 calling set_mac_address
[  134.105293][  T792] usb 4-1: Using ep0 maxpacket: 8
[  134.116835][  T792] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.119497][  T792] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[  134.130139][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.145097][  T792] usb 4-1: config 0 descriptor??
[  134.282908][ T7823] loop2: detected capacity change from 0 to 2048
[  134.318589][ T7825] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.341947][ T7823] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12
[  134.372537][ T7823] Remounting filesystem read-only
[  134.399755][ T7823] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  134.594492][  T792] hid-u2fzero 0003:20A0:4287.0006: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0
[  134.636956][  T792] hid-u2fzero 0003:20A0:4287.0006: NitroKey U2F LED initialised
[  134.640081][  T792] hid-u2fzero 0003:20A0:4287.0006: NitroKey U2F RNG initialised
[  134.787078][ T5895] usb 4-1: USB disconnect, device number 10
[  134.971749][ T7837] loop4: detected capacity change from 0 to 32768
[  134.982033][ T7837] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.599 (7837)
[  135.014790][ T7837] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.025583][ T7837] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  135.028729][ T7837] BTRFS info (device loop4): using free-space-tree
[  135.394799][ T7210] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.746794][ T7865] netlink: 'syz.3.604': attribute type 1 has an invalid length.
[  135.770368][ T7865] netlink: 'syz.3.604': attribute type 1 has an invalid length.
[  136.294363][ T7873] binder: 7872:7873 ioctl 80286722 0 returned -22
[  136.319715][ T7871] loop3: detected capacity change from 0 to 8192
[  136.334835][ T7871] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  136.340790][ T7871] ntfs3(loop3): $Volume is corrupted.
[  136.402042][ T7877] loop3: detected capacity change from 0 to 512
[  136.405118][ T7877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  136.468586][ T7877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.482701][ T7877] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.593298][ T7882] loop4: detected capacity change from 0 to 512
[  136.596018][ T7877] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  136.650181][ T7877] EXT4-fs (loop3): Remounting filesystem read-only
[  136.656661][ T7882] EXT4-fs (loop4): 1 truncate cleaned up
[  136.672369][ T7882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.794279][ T6688] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.831876][ T7885] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.610: invalid indirect mapped block 234881024 (level 0)
[  136.893870][ T7885] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.610: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  137.181852][   T27] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  137.196217][   T27] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  138.160345][ T7890] loop3: detected capacity change from 0 to 32768
[  138.172030][ T7890] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.612 (7890)
[  138.200723][ T7890] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  138.203889][ T7890] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  138.211990][ T7890] BTRFS info (device loop3): disk space caching is enabled
[  138.214761][ T7890] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  138.246392][ T7210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.347689][ T7890] BTRFS info (device loop3): rebuilding free space tree
[  138.374225][ T7890] BTRFS info (device loop3): disabling free space tree
[  138.397529][ T7890] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.421273][ T7890] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.641556][ T6688] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  139.134785][ T7860] Set syz1 is full, maxelem 65536 reached
[  139.718827][ T7919] loop3: detected capacity change from 0 to 40427
[  139.726202][ T7919] F2FS-fs: heap/no_heap options were deprecated
[  139.739542][ T7919] F2FS-fs (loop3): build fault injection rate: 19
[  139.754632][ T7919] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  139.781945][ T7919] F2FS-fs (loop3): invalid crc value
[  139.816601][ T7919] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  139.949825][ T7919] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  139.972671][ T7919] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  139.991012][ T7919] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  140.052881][ T7919] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  140.059809][ T7919] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xab0
[  140.069029][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'.
[  140.069091][ T7919] syz.3.616: attempt to access beyond end of device
[  140.069091][ T7919] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  140.105658][ T6688] syz-executor: attempt to access beyond end of device
[  140.105658][ T6688] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  140.112368][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  140.112381][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.112387][ T6688] Call Trace:
[  140.112391][ T6688]  <TASK>
[  140.112395][ T6688]  dump_stack_lvl+0x189/0x250
[  140.112412][ T6688]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.112422][ T6688]  ? __pfx_queue_work_on+0x10/0x10
[  140.112431][ T6688]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  140.112443][ T6688]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.112459][ T6688]  f2fs_handle_critical_error+0x37c/0x540
[  140.112476][ T6688]  f2fs_write_end_io+0x886/0xb60
[  140.112493][ T6688]  __submit_merged_bio+0x27a/0x6a0
[  140.112508][ T6688]  __submit_merged_write_cond+0x255/0x530
[  140.112522][ T6688]  f2fs_write_data_pages+0x261d/0x3000
[  140.112533][ T6688]  ? __lock_acquire+0xab9/0xd20
[  140.112563][ T6688]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  140.112598][ T6688]  ? __mod_zone_page_state+0xd7/0x140
[  140.112615][ T6688]  ? folios_put_refs+0x560/0x640
[  140.112638][ T6688]  ? __pfx_folios_put_refs+0x10/0x10
[  140.112645][ T6688]  ? rcu_is_watching+0x15/0xb0
[  140.112659][ T6688]  ? __lock_acquire+0xab9/0xd20
[  140.112678][ T6688]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  140.112691][ T6688]  do_writepages+0x32e/0x550
[  140.112707][ T6688]  ? do_raw_spin_unlock+0x4d/0x240
[  140.112720][ T6688]  filemap_fdatawrite+0x199/0x240
[  140.112731][ T6688]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  140.112766][ T6688]  ? do_raw_spin_unlock+0x4d/0x240
[  140.112778][ T6688]  f2fs_sync_dirty_inodes+0x31f/0x830
[  140.112811][ T6688]  f2fs_write_checkpoint+0x95a/0x1df0
[  140.112833][ T6688]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  140.112866][ T6688]  ? kill_f2fs_super+0x298/0x6c0
[  140.112878][ T6688]  kill_f2fs_super+0x2c3/0x6c0
[  140.112889][ T6688]  ? __pfx_kill_f2fs_super+0x10/0x10
[  140.112896][ T6688]  ? radix_tree_delete_item+0x2b6/0x400
[  140.112911][ T6688]  ? shrinker_free+0x2ce/0x3e0
[  140.112922][ T6688]  deactivate_locked_super+0xbc/0x130
[  140.112933][ T6688]  cleanup_mnt+0x425/0x4c0
[  140.112943][ T6688]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.112978][ T6688]  task_work_run+0x1d4/0x260
[  140.112992][ T6688]  ? __pfx_task_work_run+0x10/0x10
[  140.113001][ T6688]  ? __x64_sys_umount+0x122/0x160
[  140.113014][ T6688]  ? exit_to_user_mode_loop+0x40/0x110
[  140.113029][ T6688]  exit_to_user_mode_loop+0xec/0x110
[  140.113040][ T6688]  do_syscall_64+0x2bd/0x3b0
[  140.113050][ T6688]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.113060][ T6688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.113068][ T6688]  ? exc_page_fault+0x9f/0xf0
[  140.113080][ T6688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.113087][ T6688] RIP: 0033:0x7f27a118ff17
[  140.113097][ T6688] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  140.113104][ T6688] RSP: 002b:00007ffcb876b888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  140.113114][ T6688] RAX: 0000000000000000 RBX: 00007f27a1211c05 RCX: 00007f27a118ff17
[  140.113120][ T6688] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb876b940
[  140.113125][ T6688] RBP: 00007ffcb876b940 R08: 0000000000000000 R09: 0000000000000000
[  140.113130][ T6688] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb876c9d0
[  140.113135][ T6688] R13: 00007f27a1211c05 R14: 00000000000222cc R15: 00007ffcb876ca10
[  140.113150][ T6688]  </TASK>
[  140.115065][ T6688] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  140.383839][ T7946] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  140.538894][ T7952] loop3: detected capacity change from 0 to 256
[  140.545507][ T7952] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  140.557297][ T7952] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  140.594188][ T7952] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  140.940560][ T7974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.640'.
[  140.943788][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'.
[  141.049227][ T7980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.229942][ T7992] loop4: detected capacity change from 0 to 64
[  141.241837][ T5895] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  141.394442][ T5895] usb 4-1: Using ep0 maxpacket: 32
[  141.402809][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.408900][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.419277][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  141.435312][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.442198][ T5895] usb 4-1: config 0 descriptor??
[  141.448692][ T5895] hub 4-1:0.0: USB hub found
[  141.485368][ T8002] netlink: 'syz.2.653': attribute type 29 has an invalid length.
[  141.488583][ T8002] netlink: 'syz.2.653': attribute type 29 has an invalid length.
[  141.491900][ T8002] netlink: 500 bytes leftover after parsing attributes in process `syz.2.653'.
[  141.653039][ T5895] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  141.857383][ T5895] usbhid 4-1:0.0: can't add hid device: -71
[  141.859827][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  141.894218][ T5895] usb 4-1: USB disconnect, device number 11
[  141.901024][  T792] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  142.082425][  T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.086639][  T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.090360][  T792] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  142.094779][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.100933][  T792] usb 5-1: config 0 descriptor??
[  142.498325][ T8025] loop3: detected capacity change from 0 to 256
[  142.515861][  T792] logitech 0003:046D:C623.0007: unknown main item tag 0x0
[  142.526093][  T792] logitech 0003:046D:C623.0007: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.4-1/input0
[  142.535514][ T8025] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d)
[  142.646085][ T8031] Invalid source name
[  142.647437][ T8031] UBIFS error (pid: 8031): cannot open "ubifs", error -22
[  142.716998][  T792] usb 5-1: USB disconnect, device number 4
[  142.857460][ T8033] loop3: detected capacity change from 0 to 32768
[  142.877749][ T8033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.668 (8033)
[  142.900304][ T8033] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.915496][ T8033] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  142.918849][ T8033] BTRFS info (device loop3): disk space caching is enabled
[  142.922675][ T8033] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  143.004293][ T8033] BTRFS info (device loop3): rebuilding free space tree
[  143.024906][ T8033] BTRFS info (device loop3): disabling free space tree
[  143.027618][ T8033] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  143.034208][ T8033] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  143.077019][ T6688] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.890366][ T8104] loop3: detected capacity change from 0 to 4096
[  144.912798][ T8104] NILFS (loop3): invalid segment: Checksum error in segment payload
[  144.915552][ T8104] NILFS (loop3): trying rollback from an earlier position
[  144.950354][ T8104] NILFS (loop3): recovery complete
[  144.961720][ T8109] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.238507][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'.
[  145.471925][ T8134] loop4: detected capacity change from 0 to 2048
[  145.489992][ T8134] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  145.493322][ T8134] UDF-fs: Scanning with blocksize 512 failed
[  145.500107][ T8134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.619796][ T5236] Bluetooth: hci0: unexpected subevent 0x01 length: 11 < 18
[  145.771388][ T8140] loop4: detected capacity change from 0 to 40427
[  145.774536][ T8140] f2fs: Unknown parameter ''
[  146.157486][ T8154] evm: overlay not supported
[  146.352486][ T8149] loop3: detected capacity change from 0 to 32768
[  146.360928][ T8160] openvswitch: netlink: IP tunnel dst address not specified
[  146.392176][ T8149] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  146.685823][ T8149] XFS (loop3): Ending clean mount
[  146.732039][ T6688] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  147.100710][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  147.273314][   T10] usb 4-1: Using ep0 maxpacket: 16
[  147.277838][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.282399][   T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  147.285998][   T10] usb 4-1: config 1 has no interface number 1
[  147.288506][   T10] usb 4-1: too many endpoints for config 1 interface 2 altsetting 252: 65, using maximum allowed: 30
[  147.294917][   T10] usb 4-1: config 1 interface 2 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[  147.300005][   T10] usb 4-1: config 1 interface 2 has no altsetting 0
[  147.306327][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  147.310079][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.317671][   T10] usb 4-1: Product: syz
[  147.320715][   T10] usb 4-1: Manufacturer: syz
[  147.323234][   T10] usb 4-1: SerialNumber: syz
[  147.584663][   T10] usb 4-1: USB disconnect, device number 12
[  147.635515][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.696516][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.714945][ T8230] vlan2: entered promiscuous mode
[  148.716724][ T8230] hsr0: entered promiscuous mode
[  148.751714][ T8226] loop4: detected capacity change from 0 to 32768
[  148.755223][ T8226] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.742 (8226)
[  148.766090][ T8226] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.769539][ T8226] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  148.777145][ T8226] BTRFS info (device loop4): using free-space-tree
[  148.928786][   T13] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  148.965621][ T7210] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  149.092213][ T8262] misc userio: Can't change port type on an already running userio instance
[  149.376921][ T8280] binder: 8279:8280 ioctl c0306201 0 returned -14
[  149.489673][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'.
[  149.503505][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'.
[  149.574928][ T8295] loop3: detected capacity change from 0 to 512
[  149.584267][ T8295] EXT4-fs: Ignoring removed i_version option
[  149.588506][ T8295] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  149.598548][ T8295] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  149.617802][ T8295] EXT4-fs (loop3): 1 truncate cleaned up
[  149.629125][ T8295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.837345][ T6688] EXT4-fs warning (device loop3): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting
[  149.843392][ T6688] ------------[ cut here ]------------
[  149.845173][ T6688] WARNING: CPU: 1 PID: 6688 at fs/ext4/xattr.c:1470 ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  149.848352][ T6688] Modules linked in:
[  149.850760][ T6688] CPU: 1 UID: 0 PID: 6688 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  149.854706][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.857873][ T6688] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  149.859970][ T6688] Code: 8b 74 24 10 e9 d4 03 00 00 e8 ec b3 3a ff 48 89 df 48 c7 c6 f9 c2 97 8d ba bd 05 00 00 48 c7 c1 00 e3 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[  149.866216][ T6688] RSP: 0018:ffffc9000675f3e0 EFLAGS: 00010246
[  149.868085][ T6688] RAX: 6c1db1acff891e00 RBX: ffff88803cb08000 RCX: 6c1db1acff891e00
[  149.870501][ T6688] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  149.873930][ T6688] RBP: ffffc9000675f570 R08: ffffc9000675efc7 R09: 1ffff92000cebdf8
[  149.876332][ T6688] R10: dffffc0000000000 R11: fffff52000cebdf9 R12: 1ffff92000cebe90
[  149.878762][ T6688] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888039c1ebf0
[  149.881597][ T6688] FS:  000055556f667500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  149.884221][ T6688] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  149.886228][ T6688] CR2: 000055b88fb56d40 CR3: 0000000027742000 CR4: 00000000000006f0
[  149.888715][ T6688] Call Trace:
[  149.889778][ T6688]  <TASK>
[  149.890867][ T6688]  ? __pfx___might_resched+0x10/0x10
[  149.892619][ T6688]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[  149.894688][ T6688]  ? ext4_xattr_block_set+0xd6/0x2ac0
[  149.896429][ T6688]  ext4_xattr_block_set+0x223/0x2ac0
[  149.898104][ T6688]  ? __pfx___might_resched+0x10/0x10
[  149.899787][ T6688]  ? __pfx_check_xattrs+0x10/0x10
[  149.901513][ T6688]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  149.903314][ T6688]  ? ext4_xattr_block_find+0x2d4/0x350
[  149.905031][ T6688]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[  149.907085][ T6688]  __ext4_expand_extra_isize+0x30d/0x400
[  149.908844][ T6688]  __ext4_mark_inode_dirty+0x46c/0x700
[  149.910571][ T6688]  ext4_dirty_inode+0xd0/0x110
[  149.912371][ T6688]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  149.914063][ T6688]  __mark_inode_dirty+0x2d1/0xdf0
[  149.915672][ T6688]  iput+0x1ee/0x9d0
[  149.916905][ T6688]  __dentry_kill+0x209/0x660
[  149.918354][ T6688]  ? shrink_kill+0x8d/0x2c0
[  149.919845][ T6688]  shrink_kill+0xa9/0x2c0
[  149.921459][ T6688]  shrink_dentry_list+0x2e0/0x5e0
[  149.923050][ T6688]  shrink_dcache_parent+0xa1/0x2c0
[  149.924674][ T6688]  ? __pfx_shrink_dcache_parent+0x10/0x10
[  149.926470][ T6688]  ? call_rcu+0x6ff/0x9c0
[  149.927896][ T6688]  do_one_tree+0x23/0xe0
[  149.929244][ T6688]  shrink_dcache_for_umount+0xa0/0x170
[  149.931127][ T6688]  generic_shutdown_super+0x67/0x2c0
[  149.932799][ T6688]  kill_block_super+0x44/0x90
[  149.934292][ T6688]  ext4_kill_sb+0x68/0xb0
[  149.935652][ T6688]  deactivate_locked_super+0xbc/0x130
[  149.937335][ T6688]  cleanup_mnt+0x425/0x4c0
[  149.938728][ T6688]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.940463][ T6688]  task_work_run+0x1d4/0x260
[  149.942214][ T6688]  ? __pfx_task_work_run+0x10/0x10
[  149.943842][ T6688]  ? __x64_sys_umount+0x122/0x160
[  149.945460][ T6688]  ? exit_to_user_mode_loop+0x40/0x110
[  149.947157][ T6688]  exit_to_user_mode_loop+0xec/0x110
[  149.948801][ T6688]  do_syscall_64+0x2bd/0x3b0
[  149.950342][ T6688]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.952318][ T6688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.954211][ T6688]  ? exc_page_fault+0x9f/0xf0
[  149.955687][ T6688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.957533][ T6688] RIP: 0033:0x7f27a118ff17
[  149.958917][ T6688] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  149.965196][ T6688] RSP: 002b:00007ffcb876b888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  149.967696][ T6688] RAX: 0000000000000000 RBX: 00007f27a1211c05 RCX: 00007f27a118ff17
[  149.970124][ T6688] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb876b940
[  149.972704][ T6688] RBP: 00007ffcb876b940 R08: 0000000000000000 R09: 0000000000000000
[  149.975155][ T6688] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb876c9d0
[  149.977608][ T6688] R13: 00007f27a1211c05 R14: 00000000000248d2 R15: 00007ffcb876ca10
[  149.980083][ T6688]  </TASK>
[  149.981206][ T6688] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  149.983390][ T6688] CPU: 1 UID: 0 PID: 6688 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  149.986197][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.989314][ T6688] Call Trace:
[  149.990367][ T6688]  <TASK>
[  149.991307][ T6688]  dump_stack_lvl+0x99/0x250
[  149.992750][ T6688]  ? __asan_memcpy+0x40/0x70
[  149.994201][ T6688]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.995810][ T6688]  ? __pfx__printk+0x10/0x10
[  149.997263][ T6688]  vpanic+0x281/0x750
[  149.998535][ T6688]  ? __pfx__printk+0x10/0x10
[  149.999960][ T6688]  ? __pfx_vpanic+0x10/0x10
[  150.001384][ T6688]  ? is_bpf_text_address+0x26/0x2b0
[  150.003049][ T6688]  panic+0xb9/0xc0
[  150.004242][ T6688]  ? __pfx_panic+0x10/0x10
[  150.005662][ T6688]  __warn+0x31b/0x4b0
[  150.006924][ T6688]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  150.008904][ T6688]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  150.010853][ T6688]  report_bug+0x2be/0x4f0
[  150.012188][ T6688]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  150.014156][ T6688]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  150.016037][ T6688]  ? ext4_xattr_inode_lookup_create+0xa82/0x1c20
[  150.017915][ T6688]  handle_bug+0x84/0x160
[  150.019497][ T6688]  exc_invalid_op+0x1a/0x50
[  150.020980][ T6688]  asm_exc_invalid_op+0x1a/0x20
[  150.022607][ T6688] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  150.024841][ T6688] Code: 8b 74 24 10 e9 d4 03 00 00 e8 ec b3 3a ff 48 89 df 48 c7 c6 f9 c2 97 8d ba bd 05 00 00 48 c7 c1 00 e3 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[  150.030975][ T6688] RSP: 0018:ffffc9000675f3e0 EFLAGS: 00010246
[  150.032860][ T6688] RAX: 6c1db1acff891e00 RBX: ffff88803cb08000 RCX: 6c1db1acff891e00
[  150.035304][ T6688] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  150.037827][ T6688] RBP: ffffc9000675f570 R08: ffffc9000675efc7 R09: 1ffff92000cebdf8
[  150.040254][ T6688] R10: dffffc0000000000 R11: fffff52000cebdf9 R12: 1ffff92000cebe90
[  150.042721][ T6688] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888039c1ebf0
[  150.045115][ T6688]  ? __pfx___might_resched+0x10/0x10
[  150.046769][ T6688]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[  150.048809][ T6688]  ? ext4_xattr_block_set+0xd6/0x2ac0
[  150.050487][ T6688]  ext4_xattr_block_set+0x223/0x2ac0
[  150.052129][ T6688]  ? __pfx___might_resched+0x10/0x10
[  150.053779][ T6688]  ? __pfx_check_xattrs+0x10/0x10
[  150.055366][ T6688]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  150.057143][ T6688]  ? ext4_xattr_block_find+0x2d4/0x350
[  150.058852][ T6688]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[  150.060707][ T6688]  __ext4_expand_extra_isize+0x30d/0x400
[  150.062466][ T6688]  __ext4_mark_inode_dirty+0x46c/0x700
[  150.064186][ T6688]  ext4_dirty_inode+0xd0/0x110
[  150.065681][ T6688]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  150.067338][ T6688]  __mark_inode_dirty+0x2d1/0xdf0
[  150.068909][ T6688]  iput+0x1ee/0x9d0
[  150.070100][ T6688]  __dentry_kill+0x209/0x660
[  150.071479][ T6688]  ? shrink_kill+0x8d/0x2c0
[  150.072891][ T6688]  shrink_kill+0xa9/0x2c0
[  150.074288][ T6688]  shrink_dentry_list+0x2e0/0x5e0
[  150.075834][ T6688]  shrink_dcache_parent+0xa1/0x2c0
[  150.077433][ T6688]  ? __pfx_shrink_dcache_parent+0x10/0x10
[  150.079180][ T6688]  ? call_rcu+0x6ff/0x9c0
[  150.080539][ T6688]  do_one_tree+0x23/0xe0
[  150.081849][ T6688]  shrink_dcache_for_umount+0xa0/0x170
[  150.083544][ T6688]  generic_shutdown_super+0x67/0x2c0
[  150.085178][ T6688]  kill_block_super+0x44/0x90
[  150.086650][ T6688]  ext4_kill_sb+0x68/0xb0
[  150.088100][ T6688]  deactivate_locked_super+0xbc/0x130
[  150.089814][ T6688]  cleanup_mnt+0x425/0x4c0
[  150.091212][ T6688]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.092859][ T6688]  task_work_run+0x1d4/0x260
[  150.094325][ T6688]  ? __pfx_task_work_run+0x10/0x10
[  150.095911][ T6688]  ? __x64_sys_umount+0x122/0x160
[  150.097494][ T6688]  ? exit_to_user_mode_loop+0x40/0x110
[  150.099140][ T6688]  exit_to_user_mode_loop+0xec/0x110
[  150.100769][ T6688]  do_syscall_64+0x2bd/0x3b0
[  150.102280][ T6688]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.103883][ T6688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.105738][ T6688]  ? exc_page_fault+0x9f/0xf0
[  150.107198][ T6688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.109028][ T6688] RIP: 0033:0x7f27a118ff17
[  150.110427][ T6688] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  150.116334][ T6688] RSP: 002b:00007ffcb876b888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  150.118887][ T6688] RAX: 0000000000000000 RBX: 00007f27a1211c05 RCX: 00007f27a118ff17
[  150.121298][ T6688] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb876b940
[  150.123716][ T6688] RBP: 00007ffcb876b940 R08: 0000000000000000 R09: 0000000000000000
[  150.126122][ T6688] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb876c9d0
[  150.128554][ T6688] R13: 00007f27a1211c05 R14: 00000000000248d2 R15: 00007ffcb876ca10
[  150.130902][ T6688]  </TASK>
[  150.132462][ T6688] Kernel Offset: disabled
[  150.133795][ T6688] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:50:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000003818 RBX=000000000000007b RCX=ffff88801e56d640 RDX=ffff888020173098
RSI=0000000000000000 RDI=ffff8880201730aa RBP=ffffc900031aec90 RSP=ffffc900031aea80
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=00000000ffffffff R13=dffffc0000000000 R14=ffffc90007540000 R15=00000000ffffff84
RIP=ffffffff8698f191 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0b74569800 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b37f2207e8 CR3=000000002773c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000675eb90
R8 =ffff888021760237 R9 =1ffff110042ec046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af9907 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556f667500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b88fb56d40 CR3=0000000027742000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=94eb13e28d1a658f 482931b9f98b9edb
XMM02=e38aa54d1f134a44 18a0659c9de146cd XMM03=4092d0ad29204607 96026cea38dd5665
XMM04=f68d781caa403d8a 3017752676675c00 XMM05=4092d0ad29204607 96026cea38dd5665
XMM06=e38aa54d1f134a44 18a0659c9de146cd XMM07=94eb13e28d1a658f 482931b9f98b9edb
XMM08=0000000000000000 00007f3f98212ee7 XMM09=0000000000000000 00007f3f98212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
