last executing test programs:

15.133649095s ago: executing program 2 (id=914):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000050c0), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005140)={0x24, r1, 0xde439ec6940bc971, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xffff}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x8)

15.133390025s ago: executing program 2 (id=915):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0)

15.073893524s ago: executing program 2 (id=916):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)

14.891064267s ago: executing program 2 (id=917):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

14.792171156s ago: executing program 2 (id=918):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000280))

14.65145216s ago: executing program 2 (id=923):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="5311010000440000240012800b0001006d616373656300001400028005000600000000000500090004"], 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

14.432709673s ago: executing program 32 (id=923):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="5311010000440000240012800b0001006d616373656300001400028005000600000000000500090004"], 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

4.433197637s ago: executing program 0 (id=1027):
munmap(&(0x7f0000000000/0x4000)=nil, 0x4000)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f0000000000)=0x3, 0x4)

4.303824146s ago: executing program 0 (id=1028):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)

4.25348351s ago: executing program 0 (id=1030):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

3.182524412s ago: executing program 0 (id=1043):
r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.12397188s ago: executing program 0 (id=1044):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r1, &(0x7f0000000480)=[{&(0x7f0000000700)=""/65, 0x41}], 0x1)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")

1.423243652s ago: executing program 3 (id=1072):
shmget$private(0x0, 0x2000, 0x78000b00, &(0x7f0000009000/0x2000)=nil)

1.422784672s ago: executing program 3 (id=1074):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r3, 0xda90)
setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0)
r7 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000906010800000000000000e4040000040900020073797a310000000005000100070000002c000780060004400200000005000700ff0000000c000180080001400a0101010c00028008000140e0000002"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x80200c, &(0x7f0000000900)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00227f99986ac7cee1ba5a070d1e573e47bddca3f1d3012a6bb1d45c3fd2944a83d294b633bd55d157db8df2578159a9773e25ad72734ff0c4850639e8ddc0c7"], 0xfe, 0x22c, &(0x7f0000001c80)="$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")
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {}, {0x0, @usage, <r9=>0x0}, {0x0, @struct}})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a40)={{r2}, 0x0, 0x8, @inherit={0x50, &(0x7f00000003c0)={0x1, 0x1, 0x4, 0x4, {0x0, 0x3, 0xd, 0x741, 0x80000001}, [0x80000000]}}, @devid=r9})

836.148284ms ago: executing program 1 (id=1078):
syz_usb_connect(0x5, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0)

444.439374ms ago: executing program 3 (id=1079):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000002380)="c9", 0x1)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000240)=0x52, 0x4)

363.545954ms ago: executing program 3 (id=1080):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f000001f4c0)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@utf8}, {@fat=@errors_continue}, {@shortname_mixed}, {@numtail}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@shortname_lower}]}, 0x26, 0x336, &(0x7f00000001c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

293.861283ms ago: executing program 3 (id=1081):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x619d, &(0x7f0000000780)="$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")
rename(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

293.63762ms ago: executing program 1 (id=1082):
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc10}]}]}]}}]}, 0xbc}}, 0x8000)

214.148036ms ago: executing program 1 (id=1083):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x20, 0x2b, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}}, 0x0)

213.986028ms ago: executing program 1 (id=1084):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x80d8, 0x4)

118.704915ms ago: executing program 1 (id=1085):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50)
read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10)
open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008100"], 0x0)

118.281031ms ago: executing program 0 (id=1086):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x7, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@local, 0x2, 0x6c}, 0x2, @in=@empty, 0x2, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

597.27µs ago: executing program 1 (id=1087):
r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = gettid()
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000100)='\x00\x00\x00\xa6\a=', 0x0, r0)
tkill(r1, 0xb)

0s ago: executing program 3 (id=1088):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10)
r1 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.107769][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.110209][ T5849] bridge_slave_1: entered allmulticast mode
[   56.113320][ T5849] bridge_slave_1: entered promiscuous mode
[   56.134288][ T5840] hsr_slave_0: entered promiscuous mode
[   56.136998][ T5840] hsr_slave_1: entered promiscuous mode
[   56.139206][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   56.141163][ T5840] Cannot create hsr debugfs directory
[   56.173195][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.186429][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.226135][ T5849] team0: Port device team_slave_0 added
[   56.236318][ T5849] team0: Port device team_slave_1 added
[   56.301261][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.304812][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.317140][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.323516][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.326458][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.337594][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.433913][ T5849] hsr_slave_0: entered promiscuous mode
[   56.437298][ T5849] hsr_slave_1: entered promiscuous mode
[   56.440477][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   56.443664][ T5849] Cannot create hsr debugfs directory
[   56.473420][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.499991][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.518767][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.536636][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.581542][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.607210][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.625676][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.643186][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.695675][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.702500][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.711132][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.718658][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.774120][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.806302][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.828938][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.831976][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.848592][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.851134][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.862963][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.880227][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   56.887524][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.889893][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.899542][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.919723][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.922355][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.937975][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   56.953182][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.956367][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.975215][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.978386][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.184527][ T5847] Bluetooth: hci0: command tx timeout
[   57.185823][ T5844] Bluetooth: hci1: command tx timeout
[   57.197242][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.244182][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.264014][ T5844] Bluetooth: hci2: command tx timeout
[   57.276096][ T5841] veth0_vlan: entered promiscuous mode
[   57.287408][ T5841] veth1_vlan: entered promiscuous mode
[   57.291471][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.344818][ T5849] veth0_vlan: entered promiscuous mode
[   57.351886][ T5841] veth0_macvtap: entered promiscuous mode
[   57.363927][ T5849] veth1_vlan: entered promiscuous mode
[   57.369053][ T5841] veth1_macvtap: entered promiscuous mode
[   57.411078][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.415441][ T5840] veth0_vlan: entered promiscuous mode
[   57.431535][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.437195][ T5849] veth0_macvtap: entered promiscuous mode
[   57.444213][ T5840] veth1_vlan: entered promiscuous mode
[   57.450855][ T5849] veth1_macvtap: entered promiscuous mode
[   57.461516][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.467400][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.475623][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.483771][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.497430][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.524918][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.563948][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.573808][ T5840] veth0_macvtap: entered promiscuous mode
[   57.586038][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.590487][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.594870][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.604499][ T5840] veth1_macvtap: entered promiscuous mode
[   57.607627][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.615351][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.652754][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.655921][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.668707][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.690308][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.700305][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.705299][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.716454][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.740922][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.746818][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.748281][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.750467][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.791666][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.813302][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.883828][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.887207][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.962510][ T3126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.965893][ T3126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.100408][ T5917] loop0: detected capacity change from 0 to 512
[   58.120988][ T5917] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   58.128294][ T5917] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   58.163349][ T5917] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   58.178854][ T5917] EXT4-fs (loop0): 1 truncate cleaned up
[   58.181590][ T5917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.252977][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.301158][ T5930] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11'.
[   58.333560][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   58.395906][ T5940] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[   58.788067][ T5906] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   58.972213][ T5906] usb 1-1: Using ep0 maxpacket: 32
[   58.976847][ T5906] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   58.979699][ T5906] usb 1-1: config 0 has no interface number 0
[   58.981855][ T5906] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[   58.986240][ T5906] usb 1-1: config 0 interface 1 has no altsetting 0
[   58.991363][ T5906] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[   58.995143][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.997945][ T5906] usb 1-1: Product: syz
[   58.999416][ T5906] usb 1-1: Manufacturer: syz
[   59.001034][ T5906] usb 1-1: SerialNumber: syz
[   59.007539][ T5906] usb 1-1: config 0 descriptor??
[   59.222345][ T5906] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[   59.225639][ T5906] cx231xx 1-1:0.1: Not found matching IAD interface
[   59.249891][ T5906] usb 1-1: USB disconnect, device number 2
[   59.263226][ T5844] Bluetooth: hci1: command tx timeout
[   59.272494][ T5844] Bluetooth: hci0: command tx timeout
[   59.342461][ T5844] Bluetooth: hci2: command tx timeout
[   59.672435][ T5907] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   59.825431][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   59.831267][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[   59.845562][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[   59.859785][ T5907] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[   59.868040][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.875097][ T5907] usb 2-1: Product: syz
[   59.877148][ T5907] usb 2-1: Manufacturer: syz
[   59.879225][ T5907] usb 2-1: SerialNumber: syz
[   60.027005][ T5907] usb 2-1: config 0 descriptor??
[   60.030400][ T5969] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   60.035753][ T5907] usb 2-1: ucan: probing device on interface #0
[   60.038931][ T5907] usb 2-1: ucan: invalid in_ep MaxPacketSize
[   60.041538][ T5907] usb 2-1: ucan: probe failed; try to update the device firmware
[   60.454881][ T5907] usb 2-1: USB disconnect, device number 2
[   60.698448][ T5986] team_slave_0: entered promiscuous mode
[   60.701095][ T5986] team_slave_1: entered promiscuous mode
[   61.078631][ T5988] loop2: detected capacity change from 0 to 40427
[   61.094138][ T5988] F2FS-fs (loop2): build fault injection rate: 771
[   61.107926][ T5988] F2FS-fs (loop2): invalid crc value
[   61.175150][ T5988] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   61.180148][ T5988] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   61.303160][ T5841] syz-executor: attempt to access beyond end of device
[   61.303160][ T5841] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   61.309718][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   61.309737][ T5841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.309745][ T5841] Call Trace:
[   61.309751][ T5841]  <TASK>
[   61.309757][ T5841]  dump_stack_lvl+0x189/0x250
[   61.309778][ T5841]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.309793][ T5841]  ? __pfx_queue_work_on+0x10/0x10
[   61.309805][ T5841]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   61.309817][ T5841]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   61.309839][ T5841]  f2fs_handle_critical_error+0x37c/0x540
[   61.309860][ T5841]  f2fs_write_end_io+0x886/0xb60
[   61.309890][ T5841]  __submit_merged_bio+0x27a/0x6a0
[   61.309903][ T5841]  ? up_write+0x1c4/0x420
[   61.309920][ T5841]  __submit_merged_write_cond+0x44c/0x530
[   61.309939][ T5841]  f2fs_sync_node_pages+0x1479/0x15e0
[   61.309970][ T5841]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   61.310006][ T5841]  ? f2fs_write_checkpoint+0xe43/0x1df0
[   61.310026][ T5841]  ? up_write+0x1c4/0x420
[   61.310035][ T5841]  ? do_raw_spin_unlock+0x4d/0x240
[   61.310054][ T5841]  f2fs_write_checkpoint+0xe6f/0x1df0
[   61.310089][ T5841]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   61.310137][ T5841]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   61.310154][ T5841]  ? kfree+0x18e/0x440
[   61.310168][ T5841]  ? kill_f2fs_super+0x298/0x6c0
[   61.310189][ T5841]  kill_f2fs_super+0x2c3/0x6c0
[   61.310210][ T5841]  ? __pfx_kill_f2fs_super+0x10/0x10
[   61.310224][ T5841]  ? radix_tree_delete_item+0x2b6/0x400
[   61.310241][ T5841]  ? shrinker_free+0x2ce/0x3e0
[   61.310257][ T5841]  deactivate_locked_super+0xbc/0x130
[   61.310272][ T5841]  cleanup_mnt+0x425/0x4c0
[   61.310286][ T5841]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.310300][ T5841]  task_work_run+0x1d4/0x260
[   61.310318][ T5841]  ? __pfx_task_work_run+0x10/0x10
[   61.310331][ T5841]  ? __x64_sys_umount+0x122/0x160
[   61.310350][ T5841]  ? exit_to_user_mode_loop+0x40/0x110
[   61.310370][ T5841]  exit_to_user_mode_loop+0xec/0x110
[   61.310386][ T5841]  do_syscall_64+0x2bd/0x3b0
[   61.310398][ T5841]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.310411][ T5841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.310421][ T5841]  ? exc_page_fault+0x9f/0xf0
[   61.310434][ T5841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.310444][ T5841] RIP: 0033:0x7f191bb8ff17
[   61.310457][ T5841] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   61.310465][ T5841] RSP: 002b:00007ffec5ad25b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   61.310479][ T5841] RAX: 0000000000000000 RBX: 00007f191bc11c05 RCX: 00007f191bb8ff17
[   61.310485][ T5841] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec5ad2670
[   61.310493][ T5841] RBP: 00007ffec5ad2670 R08: 0000000000000000 R09: 0000000000000000
[   61.310499][ T5841] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec5ad3700
[   61.310505][ T5841] R13: 00007f191bc11c05 R14: 000000000000ee95 R15: 00007ffec5ad3740
[   61.310528][ T5841]  </TASK>
[   61.310533][ T5841] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   61.343431][ T5844] Bluetooth: hci0: command tx timeout
[   61.347067][ T5847] Bluetooth: hci1: command tx timeout
[   61.466827][ T5844] Bluetooth: hci2: command tx timeout
[   61.541570][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   61.541589][ T5841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.541596][ T5841] Call Trace:
[   61.541603][ T5841]  <TASK>
[   61.541610][ T5841]  dump_stack_lvl+0x189/0x250
[   61.541631][ T5841]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.541644][ T5841]  ? __pfx_queue_work_on+0x10/0x10
[   61.541680][ T5841]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   61.541694][ T5841]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   61.541715][ T5841]  f2fs_handle_critical_error+0x37c/0x540
[   61.541734][ T5841]  f2fs_write_end_io+0x886/0xb60
[   61.541763][ T5841]  __submit_merged_bio+0x27a/0x6a0
[   61.541775][ T5841]  ? up_write+0x1c4/0x420
[   61.541791][ T5841]  __submit_merged_write_cond+0x44c/0x530
[   61.541809][ T5841]  f2fs_sync_node_pages+0x1479/0x15e0
[   61.541836][ T5841]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   61.541869][ T5841]  ? f2fs_write_checkpoint+0xe43/0x1df0
[   61.541888][ T5841]  ? up_write+0x1c4/0x420
[   61.541899][ T5841]  ? do_raw_spin_unlock+0x4d/0x240
[   61.541916][ T5841]  f2fs_write_checkpoint+0xe6f/0x1df0
[   61.541949][ T5841]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   61.542063][ T5841]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   61.542093][ T5841]  ? kfree+0x18e/0x440
[   61.542107][ T5841]  ? kill_f2fs_super+0x298/0x6c0
[   61.542124][ T5841]  kill_f2fs_super+0x2c3/0x6c0
[   61.542143][ T5841]  ? __pfx_kill_f2fs_super+0x10/0x10
[   61.542155][ T5841]  ? radix_tree_delete_item+0x2b6/0x400
[   61.542172][ T5841]  ? shrinker_free+0x2ce/0x3e0
[   61.542184][ T5841]  deactivate_locked_super+0xbc/0x130
[   61.542199][ T5841]  cleanup_mnt+0x425/0x4c0
[   61.542211][ T5841]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.542226][ T5841]  task_work_run+0x1d4/0x260
[   61.542244][ T5841]  ? __pfx_task_work_run+0x10/0x10
[   61.542257][ T5841]  ? __x64_sys_umount+0x122/0x160
[   61.542276][ T5841]  ? exit_to_user_mode_loop+0x40/0x110
[   61.542294][ T5841]  exit_to_user_mode_loop+0xec/0x110
[   61.542309][ T5841]  do_syscall_64+0x2bd/0x3b0
[   61.542323][ T5841]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.542336][ T5841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.542347][ T5841]  ? exc_page_fault+0x9f/0xf0
[   61.542360][ T5841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.542370][ T5841] RIP: 0033:0x7f191bb8ff17
[   61.542390][ T5841] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   61.542399][ T5841] RSP: 002b:00007ffec5ad25b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   61.542415][ T5841] RAX: 0000000000000000 RBX: 00007f191bc11c05 RCX: 00007f191bb8ff17
[   61.542422][ T5841] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec5ad2670
[   61.542435][ T5841] RBP: 00007ffec5ad2670 R08: 0000000000000000 R09: 0000000000000000
[   61.542441][ T5841] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec5ad3700
[   61.542450][ T5841] R13: 00007f191bc11c05 R14: 000000000000ee95 R15: 00007ffec5ad3740
[   61.542469][ T5841]  </TASK>
[   61.685823][ T5841] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   63.359314][ T6040] loop2: detected capacity change from 0 to 256
[   63.373079][ T6040] exfat: Deprecated parameter 'utf8'
[   63.381934][ T6040] exfat: Deprecated parameter 'utf8'
[   63.400111][ T6040] exfat: Deprecated parameter 'utf8'
[   63.446830][ T6040] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[   63.478742][ T6044] loop0: detected capacity change from 0 to 2048
[   63.514076][ T5236] Bluetooth: hci1: command tx timeout
[   63.516680][ T5847] Bluetooth: hci2: command tx timeout
[   63.518683][ T5847] Bluetooth: hci0: command tx timeout
[   63.536338][ T6044] Alternate GPT is invalid, using primary GPT.
[   63.540152][ T6044]  loop0: p2 p3 p7
[   63.705195][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   63.705378][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   63.715714][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   63.825579][ T6067] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun!
[   63.927864][ T6077] loop2: detected capacity change from 0 to 256
[   63.933548][ T6077] exfat: Deprecated parameter 'namecase'
[   63.939864][ T6077] exfat: Deprecated parameter 'namecase'
[   63.956726][ T6077] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   64.123583][ T6092] loop2: detected capacity change from 0 to 1024
[   64.129855][ T6092] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled
[   64.150727][ T6092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.189924][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.255964][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.688866][ T6142] loop0: detected capacity change from 0 to 512
[   64.721227][ T6142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.726077][ T6142] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.748919][ T6142] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   64.767845][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.903860][ T6163] netlink: 9 bytes leftover after parsing attributes in process `syz.0.65'.
[   64.907680][ T6163] 0: renamed from hsr_slave_1 (while UP)
[   64.911754][ T6163] 0: entered allmulticast mode
[   64.914429][ T6163] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[   64.940551][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'.
[   65.902291][ T6187] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[   65.906150][ T6187] PKCS7: Only support pkcs7_signedData type
[   66.094317][ T6198] loop0: detected capacity change from 0 to 256
[   66.204763][ T6202] loop0: detected capacity change from 0 to 512
[   66.208270][ T6202] EXT4-fs (loop0): Invalid log cluster size: 956301314
[   66.365914][ T6210] loop1: detected capacity change from 0 to 128
[   66.371321][ T6210] =======================================================
[   66.371321][ T6210] WARNING: The mand mount option has been deprecated and
[   66.371321][ T6210]          and is ignored by this kernel. Remove the mand
[   66.371321][ T6210]          option from the mount to silence this warning.
[   66.371321][ T6210] =======================================================
[   66.386887][ T6212] loop0: detected capacity change from 0 to 128
[   66.410255][ T6212] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   66.421091][ T6210] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   66.421928][ T6212] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   66.426096][ T6210] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.451344][ T5840] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.515571][ T5849] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.690722][ T6228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.86'.
[   66.767270][ T6232] loop0: detected capacity change from 0 to 2048
[   67.012295][ T5906] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   67.171190][ T5906] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.176515][ T5906] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.180824][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0
[   67.184056][ T5906] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   67.189036][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.200951][ T5906] usb 2-1: config 0 descriptor??
[   67.813149][ T5906] usb 2-1: string descriptor 0 read error: -22
[   68.034820][ T5906] uclogic 0003:256C:006D.0001: interface is invalid, ignoring
[   68.285156][ T6249] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   68.324754][ T5906] usb 2-1: USB disconnect, device number 3
[   69.216666][ T6256] loop1: detected capacity change from 0 to 1024
[   69.259346][ T6256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.266823][ T6256] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.275948][   T33] audit: type=1800 audit(1755132079.465:2): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.97" name="file1" dev="loop1" ino=15 res=0 errno=0
[   69.329033][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.424291][ T6273] tipc: Started in network mode
[   69.426781][ T6273] tipc: Node identity eebea4913bb2, cluster identity 4711
[   69.437031][ T6273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.444896][ T6273] syzkaller0: entered promiscuous mode
[   69.451184][ T6273] syzkaller0: entered allmulticast mode
[   69.481876][ T6273] tipc: Resetting bearer <eth:syzkaller0>
[   69.487995][ T6272] tipc: Resetting bearer <eth:syzkaller0>
[   69.512433][ T6279] loop1: detected capacity change from 0 to 4096
[   69.523941][ T6272] tipc: Disabling bearer <eth:syzkaller0>
[   69.660414][ T6288] loop2: detected capacity change from 0 to 256
[   69.669200][ T6288] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[   69.680788][   T33] audit: type=1800 audit(1755132079.865:3): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.111" name="bus" dev="loop2" ino=1048601 res=0 errno=0
[   69.770198][ T6292] loop2: detected capacity change from 0 to 256
[   69.779578][ T6292] exfat: Deprecated parameter 'utf8'
[   69.788178][ T6292] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   69.852681][ T5906] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   70.012151][ T5906] usb 2-1: Using ep0 maxpacket: 16
[   70.084753][ T6301] loop2: detected capacity change from 0 to 32768
[   70.108877][ T6301] read_mapping_page failed!
[   70.113866][ T5906] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[   70.117560][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.120880][ T5906] usb 2-1: Product: syz
[   70.139724][ T5906] usb 2-1: Manufacturer: syz
[   70.141761][ T5906] usb 2-1: SerialNumber: syz
[   70.154055][ T5906] usb 2-1: config 0 descriptor??
[   70.163649][ T5906] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[   70.364142][ T5906] usb 2-1: USB disconnect, device number 4
[   70.419645][ T6321] loop0: detected capacity change from 0 to 1024
[   70.447488][ T6321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.469347][ T6321] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.126: bit already cleared for inode 15
[   70.511991][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.900330][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'.
[   70.943646][ T5906] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   71.080075][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'.
[   71.094163][ T5906] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   71.098227][ T5906] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   71.104536][ T5906] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[   71.108214][ T5906] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   71.111178][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'.
[   71.112684][ T5906] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   71.114810][ T5906] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   71.126161][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   71.130875][ T5906] usb 1-1: Product: syz
[   71.132848][ T5906] usb 1-1: Manufacturer: syz
[   71.145288][ T5906] cdc_wdm 1-1:1.0: skipping garbage
[   71.147877][ T5906] cdc_wdm 1-1:1.0: skipping garbage
[   71.164290][ T5906] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[   71.166305][ T5906] cdc_wdm 1-1:1.0: Unknown control protocol
[   71.167821][ T6356] loop1: detected capacity change from 0 to 128
[   71.179259][ T6356] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck.
[   71.190202][ T6356] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[   71.268811][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.271427][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.718807][   T33] audit: type=1326 audit(1755132081.625:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.1.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   71.727959][   T33] audit: type=1326 audit(1755132081.625:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.1.140" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   71.737261][   T33] audit: type=1326 audit(1755132081.625:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.1.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   71.746645][   T33] audit: type=1326 audit(1755132081.625:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.1.140" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   71.755781][   T33] audit: type=1326 audit(1755132081.625:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.1.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   71.764962][   T33] audit: type=1326 audit(1755132081.625:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.1.140" exe="/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   71.775835][   T33] audit: type=1326 audit(1755132081.625:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.1.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   71.784530][   T33] audit: type=1326 audit(1755132081.625:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.1.140" exe="/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   71.858775][ T6359] loop1: detected capacity change from 0 to 40427
[   71.864249][ T6359] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   71.866951][ T6359] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   71.876334][ T6359] F2FS-fs (loop1): invalid crc value
[   71.966379][ T6359] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   71.979908][ T6359] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   71.983794][ T6359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   72.017123][ T6357] syz.1.140: attempt to access beyond end of device
[   72.017123][ T6357] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   72.244262][ T5840] syz-executor: attempt to access beyond end of device
[   72.244262][ T5840] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   72.250454][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   72.250483][ T5840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.250487][ T5840] Call Trace:
[   72.250491][ T5840]  <TASK>
[   72.250494][ T5840]  dump_stack_lvl+0x189/0x250
[   72.250508][ T5840]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.250516][ T5840]  ? __pfx_queue_work_on+0x10/0x10
[   72.250524][ T5840]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   72.250532][ T5840]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   72.250545][ T5840]  f2fs_handle_critical_error+0x37c/0x540
[   72.250558][ T5840]  f2fs_write_end_io+0x886/0xb60
[   72.250575][ T5840]  __submit_merged_bio+0x27a/0x6a0
[   72.250583][ T5840]  ? up_write+0x1c4/0x420
[   72.250593][ T5840]  __submit_merged_write_cond+0x44c/0x530
[   72.250628][ T5840]  f2fs_sync_node_pages+0x1479/0x15e0
[   72.250645][ T5840]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   72.250666][ T5840]  ? f2fs_write_checkpoint+0xe43/0x1df0
[   72.250679][ T5840]  ? up_write+0x1c4/0x420
[   72.250685][ T5840]  ? do_raw_spin_unlock+0x4d/0x240
[   72.250695][ T5840]  f2fs_write_checkpoint+0xe6f/0x1df0
[   72.250715][ T5840]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   72.250747][ T5840]  ? kill_f2fs_super+0x298/0x6c0
[   72.250759][ T5840]  kill_f2fs_super+0x2c3/0x6c0
[   72.250771][ T5840]  ? __pfx_kill_f2fs_super+0x10/0x10
[   72.250779][ T5840]  ? radix_tree_delete_item+0x2b6/0x400
[   72.250790][ T5840]  ? shrinker_free+0x2ce/0x3e0
[   72.250799][ T5840]  deactivate_locked_super+0xbc/0x130
[   72.250808][ T5840]  cleanup_mnt+0x425/0x4c0
[   72.250816][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.250825][ T5840]  task_work_run+0x1d4/0x260
[   72.250835][ T5840]  ? __pfx_task_work_run+0x10/0x10
[   72.250843][ T5840]  ? __x64_sys_umount+0x122/0x160
[   72.250854][ T5840]  ? exit_to_user_mode_loop+0x40/0x110
[   72.250865][ T5840]  exit_to_user_mode_loop+0xec/0x110
[   72.250874][ T5840]  do_syscall_64+0x2bd/0x3b0
[   72.250882][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.250889][ T5840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.250896][ T5840]  ? exc_page_fault+0x9f/0xf0
[   72.250904][ T5840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.250910][ T5840] RIP: 0033:0x7f53a878ff17
[   72.250918][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   72.250923][ T5840] RSP: 002b:00007fff61c4be78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   72.250932][ T5840] RAX: 0000000000000000 RBX: 00007f53a8811c05 RCX: 00007f53a878ff17
[   72.250936][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff61c4bf30
[   72.250940][ T5840] RBP: 00007fff61c4bf30 R08: 0000000000000000 R09: 0000000000000000
[   72.250944][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff61c4cfc0
[   72.250948][ T5840] R13: 00007f53a8811c05 R14: 0000000000011943 R15: 00007fff61c4d000
[   72.250961][ T5840]  </TASK>
[   72.263502][ T5840] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   72.937229][ T6368] loop1: detected capacity change from 0 to 2048
[   72.954930][ T6368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.497864][ T5893] usb 1-1: USB disconnect, device number 3
[   74.727370][ T6400] netlink: 44 bytes leftover after parsing attributes in process `syz.2.157'.
[   74.730463][ T6400] netlink: 'syz.2.157': attribute type 6 has an invalid length.
[   74.735182][ T6400] netlink: 'syz.2.157': attribute type 5 has an invalid length.
[   74.737812][ T6400] netlink: 'syz.2.157': attribute type 4 has an invalid length.
[   74.739796][ T6401] syz_tun: entered allmulticast mode
[   74.756250][ T6401] dvmrp1: entered allmulticast mode
[   74.761833][ T6398] syz_tun: left allmulticast mode
[   74.922689][ T6406] loop0: detected capacity change from 0 to 32768
[   74.949431][ T6406] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   75.185752][ T6406] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature 
[   75.191975][ T6406] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   75.196284][ T6406] OCFS2: File system is now read-only.
[   75.198472][ T6406] (syz.0.158,6406,1):ocfs2_search_chain:1852 ERROR: status = -30
[   75.201625][ T6406] (syz.0.158,6406,1):ocfs2_search_chain:1940 ERROR: status = -30
[   75.204784][ T6406] (syz.0.158,6406,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[   75.208113][ T6406] (syz.0.158,6406,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[   75.211434][ T6406] (syz.0.158,6406,1):__ocfs2_claim_clusters:2438 ERROR: status = -30
[   75.214527][ T6406] (syz.0.158,6406,1):__ocfs2_claim_clusters:2446 ERROR: status = -30
[   75.217606][ T6406] (syz.0.158,6406,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -30
[   75.221066][ T6406] (syz.0.158,6406,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -30
[   75.224559][ T6406] (syz.0.158,6406,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30
[   75.228210][ T6406] (syz.0.158,6406,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[   75.231404][ T6406] (syz.0.158,6406,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[   75.234297][ T6406] (syz.0.158,6406,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[   75.238075][ T6406] (syz.0.158,6406,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[   75.241600][ T6406] (syz.0.158,6406,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[   75.245532][ T6406] (syz.0.158,6406,1):ocfs2_expand_inline_dir:2864 ERROR: status = -30
[   75.249113][ T6406] (syz.0.158,6406,1):ocfs2_extend_dir:3211 ERROR: status = -30
[   75.252540][ T6406] (syz.0.158,6406,1):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30
[   75.257178][ T6406] (syz.0.158,6406,1):ocfs2_symlink:1879 ERROR: status = -30
[   75.259645][ T6406] (syz.0.158,6406,1):ocfs2_symlink:2080 ERROR: status = -30
[   75.265554][ T6406] syz.0.158 (6406) used greatest stack depth: 19272 bytes left
[   75.292670][ T5849] (syz-executor,5849,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[   75.306734][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[   75.404842][ T6419] loop2: detected capacity change from 0 to 256
[   75.437445][ T6421] netlink: 'syz.0.164': attribute type 1 has an invalid length.
[   75.487742][ T6425] loop0: detected capacity change from 0 to 1764
[   75.840648][ T5236] Bluetooth: hci0: connection err: -111
[   75.899805][ T6443] team0 (unregistering): Port device team_slave_0 removed
[   75.900070][ T6449] loop2: detected capacity change from 0 to 2048
[   75.914256][ T6443] team0 (unregistering): Port device team_slave_1 removed
[   75.915191][ T6449] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   76.165527][ T6461] netlink: 204 bytes leftover after parsing attributes in process `syz.2.183'.
[   76.284287][ T6467] JFS: discard option not supported on device
[   76.288061][ T6467] Mount JFS Failure: -22
[   76.289762][ T6467] jfs_mount failed w/return code = -22
[   76.338407][ T6470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.340935][ T6470] IPv6: NLM_F_CREATE should be set when creating new route
[   76.346018][ T6470] lo: entered allmulticast mode
[   76.353489][ T6470] tunl0: entered allmulticast mode
[   76.357877][ T6470] gre0: entered allmulticast mode
[   76.372342][ T6470] gretap0: entered allmulticast mode
[   76.397730][ T6470] erspan0: entered allmulticast mode
[   76.497026][ T6470] ip_vti0: entered allmulticast mode
[   76.606335][ T6470] ip6_vti0: entered allmulticast mode
[   76.615141][ T6470] sit0: entered allmulticast mode
[   76.618006][   T33] kauditd_printk_skb: 32 callbacks suppressed
[   76.618015][   T33] audit: type=1326 audit(1755132086.805:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6475 comm="syz.1.189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   76.628223][ T6470] ip6tnl0: entered allmulticast mode
[   76.630525][   T33] audit: type=1326 audit(1755132086.815:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6475 comm="syz.1.189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   76.633056][ T6470] ip6gre0: entered allmulticast mode
[   76.638593][   T33] audit: type=1326 audit(1755132086.815:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6475 comm="syz.1.189" exe="/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   76.648272][   T33] audit: type=1326 audit(1755132086.815:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6475 comm="syz.1.189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   76.659976][ T6470] syz_tun: entered allmulticast mode
[   76.665999][ T6470] ip6gretap0: entered allmulticast mode
[   76.674492][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.678004][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.681848][ T6470] bridge0: entered allmulticast mode
[   76.688275][ T6470] vcan0: entered allmulticast mode
[   76.693181][ T6470] bond0: entered allmulticast mode
[   76.695018][ T6470] bond_slave_0: entered allmulticast mode
[   76.697054][ T6470] bond_slave_1: entered allmulticast mode
[   76.703081][ T6470] dummy0: entered allmulticast mode
[   76.710628][ T6470] nlmon0: entered allmulticast mode
[   76.715263][ T6470] caif0: entered allmulticast mode
[   76.717513][ T6470] batadv0: entered allmulticast mode
[   76.726829][ T6470] vxcan0: entered allmulticast mode
[   76.730471][ T6470] vxcan1: entered allmulticast mode
[   76.735660][ T6470] veth0: entered allmulticast mode
[   76.740528][ T6470] veth1: entered allmulticast mode
[   76.748666][ T6470] wg0: entered allmulticast mode
[   76.754279][ T6470] wg1: entered allmulticast mode
[   76.758685][ T6470] wg2: entered allmulticast mode
[   76.763548][ T6470] veth0_to_bridge: entered allmulticast mode
[   76.775540][ T6470] veth1_to_bridge: entered allmulticast mode
[   76.790662][ T6470] veth0_to_bond: entered allmulticast mode
[   76.799175][ T6470] veth1_to_bond: entered allmulticast mode
[   76.805873][ T6470] veth0_to_team: entered allmulticast mode
[   76.809396][ T6470] team_slave_0: entered allmulticast mode
[   76.813329][ T6470] veth1_to_team: entered allmulticast mode
[   76.818157][ T6470] team_slave_1: entered allmulticast mode
[   76.820456][ T6470] veth0_to_batadv: entered allmulticast mode
[   76.825920][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.828706][ T6470] batadv_slave_0: entered allmulticast mode
[   76.834475][ T6470] veth1_to_batadv: entered allmulticast mode
[   76.885392][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.889081][ T6470] batadv_slave_1: entered allmulticast mode
[   76.900102][ T6470] xfrm0: entered allmulticast mode
[   76.910719][ T6470] veth0_to_hsr: entered allmulticast mode
[   76.951852][ T6470] hsr_slave_0: entered allmulticast mode
[   76.960086][ T6470] veth1_to_hsr: entered allmulticast mode
[   76.970208][ T6470] hsr0: entered allmulticast mode
[   76.982628][ T6470] veth1_virt_wifi: entered allmulticast mode
[   76.988458][ T6470] veth0_virt_wifi: entered allmulticast mode
[   77.018412][ T6470] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   77.031471][ T6470] veth1_vlan: entered allmulticast mode
[   77.055692][ T6490] process 'syz.1.195' launched './file0' with NULL argv: empty string added
[   77.305845][ T6470] veth0_vlan: entered allmulticast mode
[   77.313889][ T6470] vlan0: entered allmulticast mode
[   77.316286][ T6470] vlan1: entered allmulticast mode
[   77.328412][ T6470] macvlan0: entered allmulticast mode
[   77.358083][ T6470] macvlan1: entered allmulticast mode
[   77.367158][ T6470] ipvlan0: entered allmulticast mode
[   77.370466][ T6470] ipvlan1: entered allmulticast mode
[   77.374353][ T6470] veth1_macvtap: entered allmulticast mode
[   77.383113][ T6470] veth0_macvtap: entered allmulticast mode
[   77.391973][ T6470] macvtap0: entered allmulticast mode
[   77.397355][ T6470] macsec0: entered allmulticast mode
[   77.410898][ T6470] geneve0: entered allmulticast mode
[   77.418777][ T6470] geneve1: entered allmulticast mode
[   77.426516][ T6470] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   77.435787][ T6470] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[   77.441457][ T6470] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[   77.448643][ T6470] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[   77.461247][ T6470] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   77.470375][ T6470] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   77.475340][ T6470] bond1: entered allmulticast mode
[   77.480223][ T5853] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.486684][ T5853] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.501757][ T5853] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.509922][ T5853] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.588931][ T6507] smc: net device bond0 applied user defined pnetid SYZ2
[   77.758228][   T33] audit: type=1804 audit(1755132087.915:48): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.205" name="/newroot/66/bus/file1" dev="overlay" ino=2 res=1 errno=0
[   77.769451][   T33] audit: type=1800 audit(1755132087.915:49): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.205" name="file1" dev="overlay" ino=2 res=0 errno=0
[   77.828999][ T6522] netlink: 'syz.2.207': attribute type 21 has an invalid length.
[   77.842223][ T6522] IPv6: NLM_F_CREATE should be specified when creating new route
[   77.852514][ T6522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   77.855844][ T6522] IPv6: NLM_F_CREATE should be set when creating new route
[   77.858947][ T6522] IPv6: NLM_F_CREATE should be set when creating new route
[   77.861933][ T6522] IPv6: NLM_F_CREATE should be set when creating new route
[   77.924834][ T6530] netlink: 'syz.0.211': attribute type 29 has an invalid length.
[   77.939081][ T6530] netlink: 'syz.0.211': attribute type 29 has an invalid length.
[   77.954523][ T6532] warning: `syz.2.212' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.630478][ T6578] netlink: 'syz.0.229': attribute type 13 has an invalid length.
[   78.655823][ T6581] loop2: detected capacity change from 0 to 128
[   78.690840][ T6581] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[   78.698613][ T6581] FAT-fs (loop2): Filesystem has been set read-only
[   78.726151][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.733867][ T6578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.879435][ T6593] loop0: detected capacity change from 0 to 2048
[   78.898205][ T6596] mmap: syz.1.231 (6596) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   78.900980][ T6593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.937834][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.025984][ T5879] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   79.066039][ T6604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.237'.
[   79.196087][ T5879] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   79.200008][ T5879] usb 3-1: config 0 has no interface number 0
[   79.203169][ T5879] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   79.207086][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.234351][ T5879] usb 3-1: config 0 descriptor??
[   79.238796][ T5879] cp210x 3-1:0.1: cp210x converter detected
[   79.297932][ T6604] loop0: detected capacity change from 0 to 32768
[   79.332107][ T6601] jfs_mkdir: dtInsert returned -EIO
[   79.334714][ T6601] ERROR: (device loop0): jfs_mkdir: 
[   79.334714][ T6601] 
[   79.339632][ T6601] ERROR: (device loop0): remounting filesystem as read-only
[   79.587079][ T6611] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[   79.654713][ T5879] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -32
[   79.887233][ T5879] usb 3-1: cp210x converter now attached to ttyUSB0
[   80.071486][ T5893] usb 3-1: USB disconnect, device number 2
[   80.090142][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   80.105863][ T5893] cp210x 3-1:0.1: device disconnected
[   80.443607][ T6632] loop0: detected capacity change from 0 to 4096
[   80.479211][ T6632] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   80.518187][ T6632] ntfs3(loop0): ino=19, mi_enum_attr
[   80.530355][ T6632] ntfs3(loop0): failed to convert "c46c" to cp850
[   80.535230][ T6632] ntfs3(loop0): ino=20, mi_enum_attr
[   80.855440][ T6642] loop0: detected capacity change from 0 to 32768
[   80.971970][ T6651] loop2: detected capacity change from 0 to 4096
[   80.978372][ T6651] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   81.021317][ T6651] ntfs3(loop2): ino=1a, mi_enum_attr
[   81.038650][ T6651] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   81.044590][ T6651] ntfs3(loop2): ino=1a, mi_enum_attr
[   81.046785][ T6651] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[   81.078350][ T6651] ntfs3(loop2): ino=5, "/" ntfs_readdir
[   81.099693][ T6656] netlink: 'syz.1.262': attribute type 64 has an invalid length.
[   81.104146][ T6656] netlink: 'syz.1.262': attribute type 4 has an invalid length.
[   81.122007][ T6656] netlink: 152 bytes leftover after parsing attributes in process `syz.1.262'.
[   81.369941][ T6673] evm: overlay not supported
[   81.741328][ T6700] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[   81.749539][ T6701] fuse: Unknown parameter 'fd0xffffffffffffffff'
[   81.903691][ T6712] sctp: [Deprecated]: syz.2.288 (pid 6712) Use of int in maxseg socket option.
[   81.903691][ T6712] Use struct sctp_assoc_value instead
[   81.960326][ T6719] capability: warning: `syz.1.291' uses 32-bit capabilities (legacy support in use)
[   83.363775][ T6751] input: syz0 as /devices/virtual/input/input5
[   83.639928][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   83.862162][   T10] usb 3-1: Using ep0 maxpacket: 16
[   83.866701][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.871054][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   83.878616][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   83.899165][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.903249][   T10] usb 3-1: Product: syz
[   83.932395][   T10] usb 3-1: Manufacturer: syz
[   83.977172][   T10] usb 3-1: SerialNumber: syz
[   83.985344][   T10] usb 3-1: config 0 descriptor??
[   84.211978][ T5893] usb 3-1: USB disconnect, device number 3
[   84.649134][   T33] audit: type=1326 audit(1755132094.835:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.1.315" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x0
[   84.826667][ T6787] loop2: detected capacity change from 0 to 2048
[   84.936825][ T6787]  loop2: p3 p4 < >
[   84.940587][ T6787] loop2: p3 start 301989888 is beyond EOD, truncated
[   85.430672][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   86.110075][ T6815] loop0: detected capacity change from 0 to 32768
[   86.270591][ T6815] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   86.270607][ T6815]   allowing incompatible features above 0.0: (unknown version)
[   86.270612][ T6815]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   86.298591][ T6815] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   86.301378][ T6815] bcachefs (loop0): initializing new filesystem
[   86.308153][ T6834] overlayfs: failed to clone upperpath
[   86.334072][ T6815] bcachefs (loop0): going read-write
[   86.380096][ T6815] bcachefs (loop0): marking superblocks
[   86.410560][ T6815] bcachefs (loop0): initializing freespace
[   86.419314][ T6815] bcachefs (loop0): done initializing freespace
[   86.426145][ T6815] bcachefs (loop0): reading snapshots table
[   86.428151][ T6815] bcachefs (loop0): reading snapshots done
[   86.459678][ T6815] bcachefs (loop0): done starting filesystem
[   86.478240][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'.
[   86.555029][ T6853] vxcan0: tx drop: invalid sa for name 0x0000001000000000
[   86.572770][ T6815] syz.0.331 (6815) used greatest stack depth: 16056 bytes left
[   86.576872][ T5849] bcachefs (loop0): shutting down
[   86.578929][ T5849] bcachefs (loop0): going read-only
[   86.581156][ T5849] bcachefs (loop0): finished waiting for writes to stop
[   86.590965][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[   86.615966][ T6860] loop2: detected capacity change from 0 to 256
[   86.621735][ T6860] exFAT-fs (loop2): bogus sectors bits per cluster : 143
[   86.629046][ T6860] exFAT-fs (loop2): failed to read boot sector
[   86.631765][ T6860] exFAT-fs (loop2): failed to recognize exfat type
[   86.643739][  T976] cfg80211: failed to load regulatory.db
[   86.688924][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[   86.703676][ T6864] loop2: detected capacity change from 0 to 1024
[   86.705830][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 4
[   86.711038][ T5849] bcachefs (loop0): marking filesystem clean
[   86.767424][ T5849] bcachefs (loop0): shutdown complete
[   87.982906][ T6894] loop2: detected capacity change from 0 to 4096
[   87.986547][ T6894] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   88.011671][   T33] audit: type=1800 audit(1755132098.195:51): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.360" name="file1" dev="loop2" ino=33 res=0 errno=0
[   88.120097][ T6900] loop2: detected capacity change from 0 to 512
[   88.152622][ T6900] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[   88.158221][ T6900] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   88.163571][ T6900] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.363: Failed to acquire dquot type 1
[   88.171501][ T6900] EXT4-fs (loop2): 1 truncate cleaned up
[   88.175271][ T6900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.180048][ T6900] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.211190][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.300486][ T6907] (syz.2.365,6907,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[   88.803746][ T5879] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[   88.832198][ T5893] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   88.838938][ T6938] syz.1.379 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   88.954176][ T5879] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2
[   88.958772][ T5879] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[   88.965566][ T5879] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8
[   88.969309][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'.
[   88.970696][ T5879] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[   88.980243][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.988110][ T6920] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   88.997260][ T5893] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64
[   89.001416][ T5893] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 32
[   89.014692][ T5893] usb 3-1: config 1 interface 0 has no altsetting 0
[   89.019856][ T5893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   89.024334][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.027356][ T5893] usb 3-1: Product: syz
[   89.029188][ T5893] usb 3-1: Manufacturer: syz
[   89.030874][ T5893] usb 3-1: SerialNumber: syz
[   89.036426][ T6921] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   89.039156][ T6921] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   89.223066][ T5879] usb 1-1: string descriptor 0 read error: -71
[   89.262086][ T5893] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[   89.430944][ T5879] usb 1-1: USB disconnect, device number 4
[   89.574999][ T5893] usb 3-1: USB disconnect, device number 4
[   89.904113][ T6954] loop2: detected capacity change from 0 to 512
[   89.907535][ T6954] EXT4-fs: Ignoring removed i_version option
[   89.922689][ T6954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.947131][ T6958] capability: warning: `syz.1.387' uses deprecated v2 capabilities in a way that may be insecure
[   90.050201][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.389'.
[   90.055611][ T6960] loop0: detected capacity change from 0 to 1024
[   90.094031][ T6960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.104312][ T6960] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.135668][   T33] audit: type=1800 audit(1755132100.325:52): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.388" name="file1" dev="loop0" ino=15 res=0 errno=0
[   90.175274][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.186103][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.407265][ T6982] loop0: detected capacity change from 0 to 2048
[   90.465480][ T6982]  loop0: p2 p3 p7
[   90.526916][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   90.538432][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   90.549200][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   90.617043][ T6993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.710461][ T6999] loop2: detected capacity change from 0 to 2048
[   90.860724][ T7011] netlink: 'syz.0.411': attribute type 64 has an invalid length.
[   90.959698][ T7017] loop0: detected capacity change from 0 to 2048
[   90.971109][ T7017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.977686][ T7007] loop2: detected capacity change from 0 to 32768
[   91.028685][ T5851]  loop2: p9 p11 p16
[   91.099567][ T7007]  loop2: p9 p11 p16
[   91.222982][ T6984] orangefs_mount: mount request failed with -4
[   91.230066][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory
[   91.238683][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory
[   91.244090][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory
[   91.308117][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory
[   91.320133][ T5961] udevd[5961]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory
[   91.326937][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory
[   91.455787][ T7020] tipc: Started in network mode
[   91.457883][ T7020] tipc: Node identity 2, cluster identity 4711
[   91.460051][ T7020] tipc: Node number set to 2
[   91.783190][ T7026] netlink: zone id is out of range
[   91.785315][ T7026] netlink: zone id is out of range
[   91.787324][ T7026] netlink: zone id is out of range
[   91.789221][ T7026] netlink: zone id is out of range
[   91.791663][ T7026] netlink: zone id is out of range
[   91.796274][ T7026] netlink: zone id is out of range
[   91.798257][ T7026] netlink: zone id is out of range
[   91.800315][ T7026] netlink: zone id is out of range
[   91.804633][ T7026] netlink: zone id is out of range
[   91.807042][ T7026] netlink: zone id is out of range
[   91.808967][   T33] audit: type=1326 audit(1755132101.995:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   91.832212][   T33] audit: type=1326 audit(1755132101.995:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   91.848768][   T33] audit: type=1326 audit(1755132101.995:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.419" exe="/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   91.883776][   T33] audit: type=1326 audit(1755132101.995:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   91.898267][   T33] audit: type=1326 audit(1755132101.995:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   92.107647][ T7039] loop2: detected capacity change from 0 to 256
[   92.371811][ T7045] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.427'.
[   92.743210][ T7057] loop2: detected capacity change from 0 to 1024
[   92.787186][ T7057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.792919][ T7057] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.805775][ T7057] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   92.816355][ T7057] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28
[   92.823906][ T7057] EXT4-fs (loop2): This should not happen!! Data will be lost
[   92.823906][ T7057] 
[   92.828051][ T7057] EXT4-fs (loop2): Total free blocks count 0
[   92.830647][ T7057] EXT4-fs (loop2): Free/Dirty block details
[   92.835786][ T7057] EXT4-fs (loop2): free_blocks=4293918720
[   92.838846][ T7057] EXT4-fs (loop2): dirty_blocks=48
[   92.841355][ T7057] EXT4-fs (loop2): Block reservation details
[   92.846142][ T7057] EXT4-fs (loop2): i_reserved_data_blocks=3
[   92.877424][   T27] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 17 with error 28
[   93.007021][ T7065] loop2: detected capacity change from 0 to 4096
[   93.047710][ T7069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.436'.
[   93.059751][ T7070] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   93.083302][   T33] audit: type=1800 audit(1755132103.275:58): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.433" name="file1" dev="loop2" ino=15 res=0 errno=0
[   93.484061][ T7092] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[   93.572399][ T7089] loop0: detected capacity change from 0 to 4096
[   93.575548][ T7089] ntfs3: Unknown parameter 'fma00000002007'
[   93.611521][ T7094] netlink: 'syz.2.447': attribute type 30 has an invalid length.
[   93.795413][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'.
[   93.842465][ T7104] gretap0: entered promiscuous mode
[   93.845617][ T7104] vlan2: entered promiscuous mode
[   94.363979][ T7133] loop2: detected capacity change from 0 to 4096
[   94.395565][ T7133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.414874][ T7133] EXT4-fs (loop2): shut down requested (2)
[   94.438047][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.710950][ T7148] loop2: detected capacity change from 0 to 32768
[   94.732005][ T7148] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.472 (7148)
[   94.762496][ T7148] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   94.769037][ T7148] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   94.775025][ T7148] BTRFS info (device loop2): using free-space-tree
[   94.789631][ T7167] sctp: [Deprecated]: syz.1.480 (pid 7167) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.789631][ T7167] Use struct sctp_sack_info instead
[   94.885496][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'.
[   94.949896][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'.
[   94.957638][ T7148] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4)
[   94.961381][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'.
[   95.003335][ T5841] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.053773][   T33] audit: type=1326 audit(1755132105.245:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.1.489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   95.082107][   T33] audit: type=1326 audit(1755132105.255:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.1.489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   95.106707][   T33] audit: type=1326 audit(1755132105.255:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.1.489" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f53a878ebe9 code=0x7ffc0000
[   95.202268][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   95.207129][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'.
[   95.297492][ T7213] loop4: detected capacity change from 0 to 1
[   95.305655][ T7213] Dev loop4: unable to read RDB block 1
[   95.307995][ T7213]  loop4: unable to read partition table
[   95.310812][ T7213] loop4: partition table beyond EOD, truncated
[   95.314236][ T7213] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5)
[   95.372124][    T9] usb 1-1: Using ep0 maxpacket: 8
[   95.377811][    T9] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[   95.381636][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.385278][    T9] usb 1-1: Product: syz
[   95.386869][    T9] usb 1-1: Manufacturer: syz
[   95.388658][    T9] usb 1-1: SerialNumber: syz
[   95.391435][    T9] usb 1-1: config 0 descriptor??
[   95.395416][    T9] usbtest 1-1:0.0: FX2 device
[   95.397066][    T9] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt)
[   95.501806][ T7218] loop2: detected capacity change from 0 to 64
[   95.600613][ T5893] usb 1-1: USB disconnect, device number 5
[   95.617501][ T7222] loop2: detected capacity change from 0 to 1024
[   95.645115][ T7222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.698088][ T7222] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.499: Allocating blocks 497-513 which overlap fs metadata
[   95.740927][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.871118][ T7230] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   95.968377][ T7232] 9pnet_fd: Insufficient options for proto=fd
[   96.028269][ T7233] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   96.038403][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.041908][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.063710][ T7233] bridge0: entered allmulticast mode
[   96.295978][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.505'.
[   96.329288][ T7239] syz.0.505 uses obsolete (PF_INET,SOCK_PACKET)
[   96.441993][ T7243] loop0: detected capacity change from 0 to 2048
[   96.467593][ T7243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.490790][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.588996][ T7251] loop0: detected capacity change from 0 to 512
[   96.609812][  T976] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[   96.621674][ T7251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.630236][ T7251] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.653726][ T7251] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.509: corrupted inode contents
[   96.668979][ T7251] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.509: mark_inode_dirty error
[   96.674140][ T7251] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.509: corrupted inode contents
[   96.679552][ T7251] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.509: mark_inode_dirty error
[   96.725111][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.764321][  T976] usb 3-1: unable to get BOS descriptor or descriptor too short
[   96.769678][  T976] usb 3-1: config 9 has an invalid interface number: 166 but max is 1
[   96.778276][  T976] usb 3-1: config 9 has an invalid interface number: 224 but max is 1
[   96.786634][  T976] usb 3-1: config 9 has no interface number 0
[   96.793741][  T976] usb 3-1: config 9 has no interface number 1
[   96.798671][  T976] usb 3-1: config 9 interface 166 has no altsetting 0
[   96.804347][  T976] usb 3-1: config 9 interface 224 has no altsetting 0
[   96.813578][  T976] usb 3-1: string descriptor 0 read error: -22
[   96.815894][  T976] usb 3-1: New USB device found, idVendor=06f8, idProduct=3002, bcdDevice=d8.0a
[   96.826710][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.059691][ T5893] usb 3-1: USB disconnect, device number 5
[   97.168660][ T7285] tmpfs: Bad value for 'mpol'
[   97.418159][ T7289] loop0: detected capacity change from 0 to 32768
[   97.428487][ T7289] bcachefs (/dev/loop0): error validating superblock: Invalid superblock layout: too many superblocks
[   97.432958][ T7289] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout_nr_superblocks
[   97.751944][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.761835][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.772939][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.783545][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.578345][   T47] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[   98.776120][ T7331] loop0: detected capacity change from 0 to 1024
[   98.778662][ T7333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.535'.
[   98.879564][ T7331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.922566][ T7331] EXT4-fs: Ignoring sb option on remount
[   98.925113][ T7331] EXT4-fs: Ignoring removed orlov option
[   98.927577][ T7331] EXT4-fs: Ignoring removed nomblk_io_submit option
[   98.937060][ T7331] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[   98.941208][ T7331] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[   98.947163][ T7331] EXT4-fs: can't change dax mount option while remounting
[   98.985849][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.112826][ T7337] loop2: detected capacity change from 0 to 32768
[   99.150303][ T7337] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[   99.150303][ T7337] 
[   99.160546][ T7337] ERROR: (device loop2): remounting filesystem as read-only
[   99.249128][ T7351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.544'.
[   99.276245][ T7343] loop0: detected capacity change from 0 to 32768
[   99.279079][ T7343] XFS: attr2 mount option is deprecated.
[   99.298959][ T7343] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[   99.304425][ T7343] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   99.333972][ T7343] XFS (loop0): Ending clean mount
[   99.339088][ T7361] netlink: 72 bytes leftover after parsing attributes in process `syz.1.545'.
[   99.341423][ T7343] XFS (loop0): Quotacheck needed: Please wait.
[   99.369604][ T7343] XFS (loop0): Quotacheck: Done.
[   99.400208][ T5849] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   99.650844][ T7367] Zero length message leads to an empty skb
[   99.757295][ T7377] loop2: detected capacity change from 0 to 4096
[   99.764752][ T7377] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  100.066342][ T7398] netlink: 1092 bytes leftover after parsing attributes in process `syz.2.561'.
[  100.081591][ T5893] kernel write not supported for file /video36 (pid: 5893 comm: kworker/1:3)
[  100.352173][ T5893] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  100.382343][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  100.504001][ T5893] usb 1-1: config 201 has an invalid interface number: 249 but max is 0
[  100.507703][ T5893] usb 1-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[  100.513187][ T5893] usb 1-1: config 201 has no interface number 0
[  100.516009][ T5893] usb 1-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  100.520959][ T5893] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  100.525893][ T5893] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64
[  100.530617][ T5893] usb 1-1: config 201 interface 249 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  100.536308][   T24] usb 3-1: Using ep0 maxpacket: 32
[  100.538699][ T5893] usb 1-1: config 201 interface 249 has no altsetting 0
[  100.548304][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.555367][ T5893] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  100.559197][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.562854][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.567258][   T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  100.571536][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.575062][ T5893] usb 1-1: Product: syz
[  100.576903][ T5893] usb 1-1: Manufacturer: syz
[  100.578896][ T5893] usb 1-1: SerialNumber: syz
[  100.585748][ T7403] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  100.586347][   T24] usb 3-1: config 0 descriptor??
[  100.808584][ T5893] ath6kl: Failed to submit usb control message: -71
[  100.811576][ T5893] ath6kl: unable to send the bmi data to the device: -71
[  100.814664][ T5893] ath6kl: Unable to send get target info: -71
[  100.818266][ T5893] ath6kl: Failed to init ath6kl core: -71
[  100.825798][ T5893] ath6kl_usb 1-1:201.249: probe with driver ath6kl_usb failed with error -71
[  100.833954][ T5893] usb 1-1: USB disconnect, device number 6
[  101.210045][   T24] ft260 0003:0403:6030.0003: failed to retrieve chip version
[  101.213245][   T24] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -71
[  101.217951][   T24] usb 3-1: USB disconnect, device number 6
[  101.286992][ T7425] netlink: 36 bytes leftover after parsing attributes in process `syz.1.572'.
[  101.290728][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'.
[  102.256092][ T7451] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  104.785859][ T7479] loop2: detected capacity change from 0 to 8192
[  104.825398][ T5961] Dev loop2: unable to read partition block 838860800
[  104.831159][ T5961]  loop2: RDSK (419430400) unable to read partition table
[  104.840854][ T5961] loop2: partition table beyond EOD, truncated
[  104.851436][ T7479] Dev loop2: unable to read partition block 838860800
[  104.868082][ T7479]  loop2: RDSK (419430400) unable to read partition table
[  104.871708][ T7479] loop2: partition table beyond EOD, truncated
[  104.877508][ T7479] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  104.890669][ T5296] Dev loop2: unable to read partition block 838860800
[  104.894104][ T5296]  loop2: RDSK (419430400) unable to read partition table
[  104.897313][ T5296] loop2: partition table beyond EOD, truncated
[  105.590772][ T7524] overlayfs: failed to clone upperpath
[  105.688136][ T7532] loop6: detected capacity change from 0 to 524287999
[  105.700088][ T5961] Buffer I/O error on dev loop6, logical block 65535999, async page read
[  105.822580][ T5879] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  105.967603][ T7547] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0)
[  105.972131][ T5879] usb 3-1: Using ep0 maxpacket: 16
[  105.978696][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.997460][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.001502][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  106.032209][ T5879] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  106.041680][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.049968][ T5879] usb 3-1: config 0 descriptor??
[  106.128057][ T7557] loop0: detected capacity change from 0 to 4096
[  106.474345][ T5879] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  106.477023][ T5879] shield 0003:0955:7214.0004: item fetching failed at offset 2/5
[  106.480169][ T5879] shield 0003:0955:7214.0004: Parse failed
[  106.482351][ T5879] shield 0003:0955:7214.0004: probe with driver shield failed with error -22
[  106.565701][ T7566] loop0: detected capacity change from 0 to 32768
[  106.571314][ T7566] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry journal: 1/3 [0 1 4]
[  106.571314][ T7566] replicas_v0 (size 24):
[  106.571314][ T7566] btree: 1 [0] journal: 3 [0 4 1]
[  106.571314][ T7566] 
[  106.583703][ T7566] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  106.678366][ T5879] usb 3-1: USB disconnect, device number 7
[  107.017694][ T7576] loop0: detected capacity change from 0 to 32768
[  107.024118][ T7576] (syz.0.637,7576,1):ocfs2_initialize_super:2093 ERROR: couldn't mount RDWR because of unsupported optional features (ffffff00).
[  107.035542][ T7576] (syz.0.637,7576,1):ocfs2_fill_super:1177 ERROR: status = -22
[  107.522131][ T5879] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  107.678995][ T7633] trusted_key: syz.0.664 sent an empty control message without MSG_MORE.
[  107.693818][ T5879] usb 3-1: Using ep0 maxpacket: 16
[  107.696718][ T5879] usb 3-1: too many configurations: 123, using maximum allowed: 8
[  107.712712][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.723466][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.731860][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.738842][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.746234][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.753382][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.759508][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.766480][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.772189][ T5879] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  107.776472][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  107.779875][ T5879] usb 3-1: SerialNumber: syz
[  107.784612][ T5879] usb 3-1: config 0 descriptor??
[  107.791787][ T5879] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7
[  107.993948][ T5281] bcm5974 3-1:0.0: could not read from device
[  107.998462][ T5281] bcm5974 3-1:0.0: could not read from device
[  108.006959][ T5281] bcm5974 3-1:0.0: could not read from device
[  108.012718][ T5879] usb 3-1: USB disconnect, device number 8
[  108.015765][ T5281] bcm5974 3-1:0.0: could not read from device
[  109.252801][ T5879] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  109.424514][ T5879] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  109.427986][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.436826][ T5879] usb 3-1: config 0 descriptor??
[  110.717474][ T5879] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  110.721893][ T5879] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  110.734144][ T5879] asix 3-1:0.0: probe with driver asix failed with error -71
[  110.751113][ T5879] usb 3-1: USB disconnect, device number 9
[  111.522645][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  111.522659][   T33] audit: type=1400 audit(1755132121.705:64): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=7696 comm="syz.0.692"
[  111.598830][ T7701] loop2: detected capacity change from 0 to 256
[  111.763031][ T7707] netlink: 44 bytes leftover after parsing attributes in process `syz.0.697'.
[  111.766788][ T7707] netlink: 35 bytes leftover after parsing attributes in process `syz.0.697'.
[  111.770630][ T7707] netlink: 'syz.0.697': attribute type 6 has an invalid length.
[  111.789618][ T7707] netlink: 'syz.0.697': attribute type 5 has an invalid length.
[  111.799787][ T7707] netlink: 35 bytes leftover after parsing attributes in process `syz.0.697'.
[  112.034865][ T7718] IPv6: NLM_F_CREATE should be specified when creating new route
[  112.047513][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.703'.
[  112.370269][ T7725] loop0: detected capacity change from 0 to 40427
[  112.374700][ T7725] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  112.378106][ T7725] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  112.385553][ T7725] F2FS-fs (loop0): invalid crc value
[  112.439000][ T7725] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.450553][ T7725] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  112.454023][ T7725] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  112.466839][ T5893] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  112.629821][ T5893] usb 3-1: Using ep0 maxpacket: 16
[  112.637513][ T5893] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  112.640277][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.658016][ T5893] usb 3-1: config 0 has no interface number 0
[  112.670293][ T5893] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  112.674694][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.870751][ T7744] f2fs: Unknown parameter '01777777777777777777777	Z* m.Dc8'@C9G9?9S{1Jլ5æԌqqY糔'
[  112.895604][   T33] audit: type=1800 audit(1755132123.085:65): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.706" name="file1" dev="loop0" ino=10 res=0 errno=0
[  112.897492][ T5893] usb 3-1: Product: syz
[  112.905811][ T5893] usb 3-1: Manufacturer: syz
[  112.907327][ T5893] usb 3-1: SerialNumber: syz
[  112.918130][ T5893] usb 3-1: config 0 descriptor??
[  112.929230][ T5893] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  112.931840][ T5893] usb 3-1: No valid video chain found.
[  113.133883][   T47] usb 3-1: USB disconnect, device number 10
[  113.828964][ T7770] loop2: detected capacity change from 0 to 512
[  113.834403][ T7770] EXT4-fs: inline encryption not supported
[  113.837843][ T7770] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  113.849575][ T7770] EXT4-fs (loop2): 1 truncate cleaned up
[  113.858606][ T7770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.920545][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.094250][ T7785] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.727'.
[  114.099099][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.727'.
[  114.137058][ T7787] loop2: detected capacity change from 0 to 512
[  114.143567][ T7787] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  114.158511][ T7787] EXT4-fs (loop2): 1 truncate cleaned up
[  114.169014][ T7787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.204165][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.250242][ T7792] loop0: detected capacity change from 0 to 1024
[  114.256294][ T7792] EXT4-fs: Ignoring removed oldalloc option
[  114.259074][ T7792] EXT4-fs: Ignoring removed orlov option
[  114.263540][ T7792] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  114.284838][ T7792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.286985][ T7794] netlink: 'syz.2.732': attribute type 10 has an invalid length.
[  114.297534][ T7794] bridge0: left allmulticast mode
[  114.301754][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.304853][ T7794] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.308090][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.311103][ T7794] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.318577][ T7792] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt.
[  114.319065][ T7794] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  114.368884][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.052245][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  115.202228][    T9] usb 3-1: Using ep0 maxpacket: 16
[  115.206739][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.211181][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  115.216455][    T9] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0
[  115.248539][    T9] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  115.254827][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[  115.259439][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0201, bcdDevice= 0.40
[  115.263214][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.266604][    T9] usb 3-1: Product: syz
[  115.268395][    T9] usb 3-1: Manufacturer: syz
[  115.270392][    T9] usb 3-1: SerialNumber: syz
[  115.695200][    T9] usb 3-1: 0:2 : does not exist
[  115.697099][    T9] usb 3-1: unit 3 not found!
[  115.732525][    T9] usb 3-1: USB disconnect, device number 11
[  115.759780][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.796783][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'.
[  115.807603][ T7848] vlan2: entered allmulticast mode
[  115.848497][ T7850] loop0: detected capacity change from 0 to 256
[  115.868774][ T7850] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  115.967284][ T7852] loop0: detected capacity change from 0 to 512
[  115.979935][ T7852] EXT4-fs: Ignoring removed oldalloc option
[  116.000546][ T7852] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.759: Parent and EA inode have the same ino 15
[  116.011186][ T7852] EXT4-fs (loop0): 1 orphan inode deleted
[  116.015816][ T7852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.025066][ T7852] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.759: invalid indirect mapped block 234881024 (level 0)
[  116.050954][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.308909][ T7871] comedi comedi0: Minor 3 could not be opened
[  116.422671][ T7878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.771'.
[  116.896746][ T7886] loop2: detected capacity change from 0 to 22
[  116.907708][ T7886] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  116.936469][ T7886] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  117.064762][ T7889] loop2: detected capacity change from 0 to 512
[  117.084290][ T7889] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  117.091981][ T7889] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  117.106293][ T7889] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  117.112164][ T7889] System zones: 0-2, 18-18, 34-35
[  117.116024][ T7889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  117.135250][ T7889] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  117.146681][ T7889] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  117.149792][ T7889] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  117.188188][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.721760][ T7908] overlayfs: empty lowerdir
[  117.740421][ T7910] netlink: 'syz.2.785': attribute type 13 has an invalid length.
[  117.818740][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.822182][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.859935][ T7910] team_slave_0: left promiscuous mode
[  117.863713][ T7910] team_slave_1: left promiscuous mode
[  117.872465][ T7906] loop0: detected capacity change from 0 to 32768
[  117.889019][ T7906] JBD2: Ignoring recovery information on journal
[  117.917097][ T7906] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  117.958968][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.965631][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.968896][   T33] audit: type=1800 audit(1755132128.155:66): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.783" name="bus" dev="loop0" ino=17058 res=0 errno=0
[  117.987651][ T7906] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  117.996785][ T7906] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  118.000364][ T7906] OCFS2: File system is now read-only.
[  118.005168][ T7906] (syz.0.783,7906,0):ocfs2_search_chain:1817 ERROR: status = -30
[  118.007985][ T7906] (syz.0.783,7906,0):ocfs2_search_chain:1940 ERROR: status = -30
[  118.011127][ T7906] (syz.0.783,7906,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  118.019444][ T7906] (syz.0.783,7906,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  118.024960][ T7906] (syz.0.783,7906,0):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  118.027884][ T7906] (syz.0.783,7906,0):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  118.030555][ T7906] (syz.0.783,7906,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -30
[  118.038510][ T7906] (syz.0.783,7906,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -30
[  118.041443][ T7906] (syz.0.783,7906,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30
[  118.044825][ T7906] (syz.0.783,7906,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[  118.048421][ T7906] (syz.0.783,7906,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  118.051486][ T7906] (syz.0.783,7906,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  118.055889][ T7906] (syz.0.783,7906,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  118.059547][ T7906] (syz.0.783,7906,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  118.063397][ T7906] (syz.0.783,7906,0):ocfs2_lock_allocators:2775 ERROR: status = -30
[  118.066042][ T7906] (syz.0.783,7906,0):ocfs2_write_begin_nolock:1723 ERROR: status = -30
[  118.068891][ T7906] (syz.0.783,7906,0):ocfs2_dio_wr_get_block:2218 ERROR: status = -30
[  118.074139][ T7906] (syz.0.783,7906,0):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = -30
[  118.109609][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  118.154294][ T5872] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.158124][ T5872] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.172859][ T5853] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.176881][ T5853] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.426558][ T7933] delete_channel: no stack
[  118.457160][ T7935] cgroup: subsys name conflicts with all
[  118.569537][ T7939] tmpfs: Cannot change global quota limit on remount
[  118.708586][ T7929] loop2: detected capacity change from 0 to 131072
[  118.713912][ T7929] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0)
[  118.717277][ T7929] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  118.721077][ T7929] F2FS-fs (loop2): invalid crc value
[  118.750414][ T7929] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  118.755568][ T7929] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  118.757887][ T7929] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  118.798393][ T7929] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix.
[  118.808022][ T7929] F2FS-fs (loop2): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891
[  119.062149][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  119.155112][ T7960] loop2: detected capacity change from 0 to 128
[  119.224878][    T9] usb 1-1: config 0 has an invalid interface number: 161 but max is 0
[  119.228262][    T9] usb 1-1: config 0 has no interface number 0
[  119.230375][    T9] usb 1-1: config 0 interface 161 altsetting 8 has an endpoint descriptor with address 0xA1, changing to 0x81
[  119.234439][    T9] usb 1-1: config 0 interface 161 has no altsetting 0
[  119.236735][    T9] usb 1-1: New USB device found, idVendor=0572, idProduct=cb07, bcdDevice=33.62
[  119.239870][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.244139][    T9] usb 1-1: config 0 descriptor??
[  119.249355][    T9] cxacru 1-1:0.161: cxacru_bind: interface has incorrect endpoints
[  119.252665][    T9] cxacru 1-1:0.161: usbatm_usb_probe: bind failed: -19!
[  119.454917][    T9] usb 1-1: USB disconnect, device number 7
[  120.024836][ T7970] loop2: detected capacity change from 0 to 32768
[  120.043715][ T7970] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.063070][ T7970] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  120.079980][ T7970] XFS (loop2): Starting recovery (logdev: internal)
[  120.099151][ T7970] XFS (loop2): Ending recovery (logdev: internal)
[  120.132802][ T5841] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.263120][ T7984] loop0: detected capacity change from 0 to 32768
[  120.285961][ T7984] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  120.305365][ T7984] (syz.0.814,7984,0):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume.
[  120.310748][ T7984] (syz.0.814,7984,0):ocfs2_group_add:511 ERROR: status = -22
[  120.344192][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  120.451723][ T8000] loop0: detected capacity change from 0 to 4096
[  120.475534][ T8001] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.482495][   T33] audit: type=1800 audit(1755132130.665:67): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.820" name="file1" dev="loop0" ino=15 res=0 errno=0
[  120.748549][ T8010] gre1: entered promiscuous mode
[  120.865009][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'.
[  120.974599][   T33] audit: type=1326 audit(1755132131.165:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.0.829" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6daf8ebe9 code=0x0
[  121.124958][ T8027] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  121.127597][ T8027] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  121.178590][ T8032] loop2: detected capacity change from 0 to 1024
[  121.256867][ T8037] loop0: detected capacity change from 0 to 512
[  121.285793][ T8037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.322611][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.934073][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  122.112269][    T9] usb 1-1: Using ep0 maxpacket: 8
[  122.117249][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  122.120662][    T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  122.124590][    T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  122.128433][    T9] usb 1-1: config 1 has no interface number 1
[  122.131167][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  122.138724][    T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  122.146654][    T9] usb 1-1: string descriptor 0 read error: -22
[  122.149538][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  122.154254][ T8062] loop2: detected capacity change from 0 to 40427
[  122.155671][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.161040][ T8062] F2FS-fs (loop2): invalid crc value
[  122.191292][    T9] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  122.200707][    T9] usb 1-1: 2:1 : sample bitwidth 141 in over sample bytes 2
[  122.211416][    T9] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  122.223529][ T8062] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  122.228389][ T8062] F2FS-fs (loop2): Start checkpoint disabled!
[  122.240344][ T8062] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  122.273873][ T1092] kworker/u9:5: attempt to access beyond end of device
[  122.273873][ T1092] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  122.281786][ T1092] CPU: 0 UID: 0 PID: 1092 Comm: kworker/u9:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  122.281806][ T1092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.281814][ T1092] Workqueue: writeback wb_workfn (flush-7:2)
[  122.281834][ T1092] Call Trace:
[  122.281838][ T1092]  <TASK>
[  122.281844][ T1092]  dump_stack_lvl+0x189/0x250
[  122.281860][ T1092]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.281873][ T1092]  ? __pfx_queue_work_on+0x10/0x10
[  122.281884][ T1092]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  122.281897][ T1092]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  122.281938][ T1092]  f2fs_handle_critical_error+0x37c/0x540
[  122.281958][ T1092]  f2fs_write_end_io+0x886/0xb60
[  122.281985][ T1092]  __submit_merged_bio+0x27a/0x6a0
[  122.282002][ T1092]  __submit_merged_write_cond+0x255/0x530
[  122.282020][ T1092]  f2fs_write_data_pages+0x261d/0x3000
[  122.282057][ T1092]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.282081][ T1092]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  122.282121][ T1092]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  122.282143][ T1092]  ? trace_f2fs_writepages+0x7f/0x200
[  122.282157][ T1092]  ? f2fs_write_node_pages+0x478/0x6e0
[  122.282190][ T1092]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.282204][ T1092]  do_writepages+0x32e/0x550
[  122.282222][ T1092]  ? reacquire_held_locks+0x127/0x1d0
[  122.282234][ T1092]  ? writeback_sb_inodes+0x384/0x1010
[  122.282253][ T1092]  __writeback_single_inode+0x145/0xff0
[  122.282266][ T1092]  ? do_raw_spin_unlock+0x4d/0x240
[  122.282282][ T1092]  writeback_sb_inodes+0x6c7/0x1010
[  122.282294][ T1092]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.282353][ T1092]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  122.282398][ T1092]  ? rcu_is_watching+0x15/0xb0
[  122.282416][ T1092]  wb_writeback+0x43b/0xaf0
[  122.282435][ T1092]  ? queue_io+0x301/0x590
[  122.282451][ T1092]  ? __pfx_wb_writeback+0x10/0x10
[  122.282470][ T1092]  ? _raw_spin_unlock_irq+0x23/0x50
[  122.282486][ T1092]  wb_workfn+0x409/0xef0
[  122.282509][ T1092]  ? __pfx_wb_workfn+0x10/0x10
[  122.282524][ T1092]  ? __lock_acquire+0xab9/0xd20
[  122.282546][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[  122.282561][ T1092]  ? _raw_spin_unlock_irq+0x23/0x50
[  122.282572][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[  122.282581][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[  122.282594][ T1092]  process_scheduled_works+0xae1/0x17b0
[  122.282627][ T1092]  ? __pfx_process_scheduled_works+0x10/0x10
[  122.282651][ T1092]  worker_thread+0x8a0/0xda0
[  122.282683][ T1092]  kthread+0x711/0x8a0
[  122.282700][ T1092]  ? __pfx_worker_thread+0x10/0x10
[  122.282711][ T1092]  ? __pfx_kthread+0x10/0x10
[  122.282726][ T1092]  ? _raw_spin_unlock_irq+0x23/0x50
[  122.282737][ T1092]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.282748][ T1092]  ? __pfx_kthread+0x10/0x10
[  122.282763][ T1092]  ret_from_fork+0x3fc/0x770
[  122.282777][ T1092]  ? __pfx_ret_from_fork+0x10/0x10
[  122.282794][ T1092]  ? __switch_to_asm+0x39/0x70
[  122.282807][ T1092]  ? __switch_to_asm+0x33/0x70
[  122.282820][ T1092]  ? __pfx_kthread+0x10/0x10
[  122.282834][ T1092]  ret_from_fork_asm+0x1a/0x30
[  122.282860][ T1092]  </TASK>
[  122.432945][ T1092] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  122.461504][    T9] usb 1-1: USB disconnect, device number 8
[  122.783628][ T8072] loop2: detected capacity change from 0 to 32768
[  122.788086][ T8072] 
[  122.788086][ T8072]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  122.788086][ T8072] 
[  122.812623][ T8072] read_mapping_page failed!
[  122.814632][ T8072] ERROR: (device loop2): txCommit: 
[  122.814632][ T8072] 
[  122.820454][ T8072] read_mapping_page failed!
[  122.822715][ T8072] ERROR: (device loop2): txCommit: 
[  122.822715][ T8072] 
[  122.842790][ T5841] 
[  122.842790][ T5841]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  122.842790][ T5841] 
[  122.847370][ T5841] 
[  122.847370][ T5841]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  122.847370][ T5841] 
[  123.255443][ T8089] loop0: detected capacity change from 0 to 32768
[  123.258938][ T8089] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.857 (8089)
[  123.267080][ T8089] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.271134][ T8089] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  123.274928][ T8089] BTRFS info (device loop0): using free-space-tree
[  123.346135][ T5849] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.618986][ T8112] loop0: detected capacity change from 0 to 256
[  123.631921][ T8112] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  123.760570][ T8117] overlayfs: missing 'lowerdir'
[  123.781297][ T8117] Mount JFS Failure: -22
[  124.085903][ T8123] net_ratelimit: 5 callbacks suppressed
[  124.085912][ T8123] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  124.140560][ T8127] netlink: 'syz.1.869': attribute type 4 has an invalid length.
[  124.151255][ T8127] netlink: 'syz.1.869': attribute type 4 has an invalid length.
[  125.310016][ T8167] netlink: 288 bytes leftover after parsing attributes in process `syz.1.886'.
[  125.319423][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'.
[  125.323775][ T8167] netlink: 288 bytes leftover after parsing attributes in process `syz.1.886'.
[  125.327911][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'.
[  125.554447][ T8165] loop2: detected capacity change from 0 to 32768
[  125.590634][ T8165] JBD2: Ignoring recovery information on journal
[  125.629902][ T8165] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  125.726611][ T5841] ocfs2: Unmounting device (7,2) on (node local)
[  126.242255][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  126.392358][    T9] usb 3-1: Using ep0 maxpacket: 16
[  126.399456][    T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  126.404441][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.407976][    T9] usb 3-1: Product: syz
[  126.409941][    T9] usb 3-1: Manufacturer: syz
[  126.412463][    T9] usb 3-1: SerialNumber: syz
[  126.416894][    T9] usb 3-1: config 0 descriptor??
[  127.059585][    T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  127.067909][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  127.072746][    T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  127.075658][    T9] usb 3-1: media controller created
[  127.135463][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  127.174182][    T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  127.182136][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  127.386525][ T5893] usb 3-1: USB disconnect, device number 12
[  127.410923][ T5893] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  127.512387][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  127.662514][    T9] usb 1-1: Using ep0 maxpacket: 32
[  127.668905][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  127.673444][    T9] usb 1-1: config 3 has an invalid interface number: 192 but max is 0
[  127.676995][    T9] usb 1-1: config 3 has no interface number 0
[  127.679539][    T9] usb 1-1: config 3 interface 192 has no altsetting 0
[  127.686229][    T9] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=2b.5b
[  127.690180][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.693917][    T9] usb 1-1: Product: syz
[  127.695772][    T9] usb 1-1: Manufacturer: syz
[  127.697807][    T9] usb 1-1: SerialNumber: syz
[  127.921095][    T9] usbhid 1-1:3.192: couldn't find an input interrupt endpoint
[  127.926924][    T9] usb 1-1: USB disconnect, device number 9
[  128.270027][ T8238] loop2: detected capacity change from 0 to 16
[  128.284028][ T8238] erofs (device loop2): mounted with root inode @ nid 36.
[  128.490706][ T8248] loop0: detected capacity change from 0 to 512
[  128.540662][ T8248] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11d, mo2=0002]
[  128.545353][ T8248] System zones: 1-12
[  128.549609][ T8248] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.922: corrupted in-inode xattr: e_value size too large
[  128.556237][ T8248] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.922: couldn't read orphan inode 15 (err -117)
[  128.561943][ T8248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.621791][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.903524][ T5872] bridge_slave_1: left allmulticast mode
[  128.911674][ T5872] bridge_slave_1: left promiscuous mode
[  128.921487][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.965121][ T5872] bridge_slave_0: left allmulticast mode
[  128.967649][ T5872] bridge_slave_0: left promiscuous mode
[  128.970255][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.015967][ T8268] loop0: detected capacity change from 0 to 128
[  129.039781][ T8268] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  129.064988][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  129.069840][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  129.074848][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  129.079724][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  129.087111][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  129.317649][ T5872] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  129.406226][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  129.476683][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.481830][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.487517][ T5872] bond0 (unregistering): Released all slaves
[  129.593618][    T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.598043][    T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.612114][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  129.622410][    T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  129.626501][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.635684][ T5872] tipc: Left network mode
[  129.656578][    T9] usb 1-1: config 0 descriptor??
[  129.667960][ T5872] IPVS: stopping master sync thread 6700 ...
[  129.694970][ T8270] chnl_net:caif_netlink_parms(): no params data found
[  129.889855][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.892753][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.895156][ T8270] bridge_slave_0: entered allmulticast mode
[  129.904319][ T8270] bridge_slave_0: entered promiscuous mode
[  129.932484][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.935428][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.937912][ T8270] bridge_slave_1: entered allmulticast mode
[  129.951136][ T8270] bridge_slave_1: entered promiscuous mode
[  129.995681][ T8270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.000191][ T8270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.050190][ T8270] team0: Port device team_slave_0 added
[  130.055353][ T8270] team0: Port device team_slave_1 added
[  130.066693][ T5872] hsr_slave_0: left promiscuous mode
[  130.070729][ T5872] hsr_slave_1: left promiscuous mode
[  130.073340][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.078333][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.417476][ T5872] team0 (unregistering): Port device team_slave_1 removed
[  130.451261][ T5872] team0 (unregistering): Port device team_slave_0 removed
[  130.483201][    T9] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71
[  130.489424][    T9] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[  130.493068][    T9] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71
[  130.499533][    T9] usb 1-1: USB disconnect, device number 10
[  130.904844][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.907775][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.920066][ T8270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.929323][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.934522][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.939964][ T8307] netlink: 'syz.1.942': attribute type 2 has an invalid length.
[  130.950920][ T8307] netlink: 'syz.1.942': attribute type 11 has an invalid length.
[  130.955591][ T8307] netlink: 132 bytes leftover after parsing attributes in process `syz.1.942'.
[  130.960160][ T8270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.107186][ T8270] hsr_slave_0: entered promiscuous mode
[  131.126082][ T8270] hsr_slave_1: entered promiscuous mode
[  131.182518][ T5844] Bluetooth: hci1: command tx timeout
[  131.759944][ T8270] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  131.769398][ T8270] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  131.788929][ T8270] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  131.800424][ T8270] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  132.089600][ T8270] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.129556][ T8270] 8021q: adding VLAN 0 to HW filter on device team0
[  132.137481][ T3126] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.139910][ T3126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.152800][ T3126] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.155169][ T3126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.170286][ T8270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.251640][ T8270] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.304595][ T8270] veth0_vlan: entered promiscuous mode
[  132.311828][ T8270] veth1_vlan: entered promiscuous mode
[  132.334021][ T8270] veth0_macvtap: entered promiscuous mode
[  132.339423][ T8270] veth1_macvtap: entered promiscuous mode
[  132.350094][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.358815][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.368842][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.379617][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.388309][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.406143][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.479415][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.488857][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.527072][  T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.530965][  T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.575711][ T8357] netlink: 'syz.1.951': attribute type 1 has an invalid length.
[  132.578894][ T8357] netlink: 'syz.1.951': attribute type 1 has an invalid length.
[  132.710297][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.712876][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.264202][ T5844] Bluetooth: hci1: command tx timeout
[  133.489792][ T8411] loop0: detected capacity change from 0 to 1024
[  134.335674][ T8424] loop3: detected capacity change from 0 to 4096
[  134.520072][ T8424] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  134.563330][ T8424] ntfs3(loop3): Failed to load $Extend (-22).
[  134.565449][ T8424] ntfs3(loop3): Failed to initialize $Extend.
[  134.796555][ T8429] loop3: detected capacity change from 0 to 1024
[  134.888046][ T8429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.897182][ T8429] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.919478][ T8429] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  134.927503][ T8429] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  134.932152][ T8429] EXT4-fs (loop3): This should not happen!! Data will be lost
[  134.932152][ T8429] 
[  134.935728][ T8429] EXT4-fs (loop3): Total free blocks count 0
[  134.940142][ T8429] EXT4-fs (loop3): Free/Dirty block details
[  134.945954][ T8429] EXT4-fs (loop3): free_blocks=4293918720
[  134.948029][ T8429] EXT4-fs (loop3): dirty_blocks=16
[  134.949809][ T8429] EXT4-fs (loop3): Block reservation details
[  134.963397][ T8429] EXT4-fs (loop3): i_reserved_data_blocks=1
[  135.009339][ T8429] EXT4-fs (loop3): stripe (248) is not aligned with cluster size (16), stripe is disabled
[  135.342632][ T5844] Bluetooth: hci1: command tx timeout
[  135.376269][ T8446] netlink: 32 bytes leftover after parsing attributes in process `syz.1.977'.
[  135.398460][ T1206] hfsplus: b-tree write err: -5, ino 4
[  135.645340][ T8465] loop0: detected capacity change from 0 to 1024
[  135.648910][ T8465] EXT4-fs: Ignoring removed oldalloc option
[  135.651291][ T8465] EXT4-fs: Ignoring removed bh option
[  135.684786][ T8465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.805013][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.098976][ T8481] loop0: detected capacity change from 0 to 1024
[  136.388086][ T8486] afs: Unknown parameter 'A~|vN'
[  136.770503][ T8496] netlink: 'syz.1.995': attribute type 63 has an invalid length.
[  137.164225][   T32] hfsplus: b-tree write err: -5, ino 4
[  137.423103][ T5844] Bluetooth: hci1: command tx timeout
[  137.498409][ T8510] loop0: detected capacity change from 0 to 4096
[  137.501518][ T8510] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  137.529546][ T8510] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  137.627500][ T5893] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  137.646771][ T5893] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  137.674011][ T8520] loop3: detected capacity change from 0 to 4096
[  137.694974][ T8520] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  137.705824][ T8520] ntfs3(loop3): Failed to load $Extend (-22).
[  137.708068][ T8520] ntfs3(loop3): Failed to initialize $Extend.
[  137.985090][ T5844] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  137.988600][ T5844] Bluetooth: hci0: Injecting HCI hardware error event
[  137.993359][ T5844] Bluetooth: hci0: hardware error 0x00
[  138.043802][ T8533] loop0: detected capacity change from 0 to 256
[  138.074063][   T33] audit: type=1800 audit(1755132148.265:69): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1011" name="file0" dev="loop0" ino=1048626 res=0 errno=0
[  138.090552][ T8533] syz.0.1011: attempt to access beyond end of device
[  138.090552][ T8533] loop0: rw=2049, sector=256, nr_sectors = 4 limit=256
[  138.123618][  T976] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  138.274058][  T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.277793][  T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.291611][  T976] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  138.297779][  T976] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  138.300747][  T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.309098][ T8545] loop0: detected capacity change from 0 to 32768
[  138.311871][ T8545] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  138.322914][  T976] usb 4-1: config 0 descriptor??
[  138.779925][  T976] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  139.205633][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'.
[  140.062354][ T5844] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  140.222410][   T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  140.372248][ T8611] libceph: resolve '400' (ret=-3): failed
[  140.383908][   T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  140.392416][   T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  140.395969][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  140.398923][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  140.406770][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  140.413955][   T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  140.416979][   T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  140.419658][   T24] usb 1-1: Product: syz
[  140.421146][   T24] usb 1-1: Manufacturer: syz
[  140.434640][   T24] cdc_wdm 1-1:1.0: skipping garbage
[  140.436842][   T24] cdc_wdm 1-1:1.0: skipping garbage
[  140.443205][   T24] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device
[  140.448806][   T24] cdc_wdm 1-1:1.0: Unknown control protocol
[  140.750381][ T8617] loop3: detected capacity change from 0 to 40427
[  140.758501][ T8617] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  140.764319][ T8617] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  140.773068][ T8617] F2FS-fs (loop3): invalid crc value
[  140.811302][ T8617] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  140.816963][ T8617] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  140.819452][ T8617] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  140.832679][ T6493] usb 4-1: USB disconnect, device number 2
[  140.942362][ T5844] Bluetooth: hci1: command tx timeout
[  141.399077][ T8650] loop3: detected capacity change from 0 to 256
[  141.409299][ T8650] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d)
[  141.434048][ T8652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.481668][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'.
[  141.493024][ T8655] raw_sendmsg: syz.1.1063 forgot to set AF_INET. Fix it!
[  142.116840][ T8690] loop3: detected capacity change from 0 to 8
[  142.231596][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'.
[  142.754523][ T8699] loop3: detected capacity change from 0 to 256
[  142.765241][ T8699] FAT-fs (loop3): Directory bread(block 64) failed
[  142.768284][ T8699] FAT-fs (loop3): Directory bread(block 65) failed
[  142.771570][ T8699] FAT-fs (loop3): Directory bread(block 66) failed
[  142.777301][ T8699] FAT-fs (loop3): Directory bread(block 67) failed
[  142.779836][ T8699] FAT-fs (loop3): Directory bread(block 68) failed
[  142.783785][ T8699] FAT-fs (loop3): Directory bread(block 69) failed
[  142.786089][ T8699] FAT-fs (loop3): Directory bread(block 70) failed
[  142.788316][ T8699] FAT-fs (loop3): Directory bread(block 71) failed
[  142.791781][ T8699] FAT-fs (loop3): Directory bread(block 72) failed
[  142.794775][ T8699] FAT-fs (loop3): Directory bread(block 73) failed
[  142.906373][ T8705] netlink: 'syz.1.1083': attribute type 1 has an invalid length.
[  142.960749][ T8707] sock: sock_timestamping_bind_phc: sock not bind to device
[  143.005667][  T976] usb 1-1: USB disconnect, device number 11
[  143.036722][ T8701] loop3: detected capacity change from 0 to 32768
[  143.041541][ T8701] 
[  143.041541][ T8701]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.041541][ T8701] 
[  143.061051][ T8701] read_mapping_page failed!
[  143.065072][ T8701] ERROR: (device loop3): txCommit: 
[  143.065072][ T8701] 
[  143.127404][ T1206] 
[  143.127404][ T1206]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.127404][ T1206] 
[  143.131462][ T1206] 
[  143.131462][ T1206]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.131462][ T1206] 
[  143.136774][ T8270] 
[  143.136774][ T8270]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.136774][ T8270] 
[  143.140502][ T8270] 
[  143.140502][ T8270]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.140502][ T8270] 
[  143.151412][  T117] ==================================================================
[  143.154741][  T117] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0xa7/0xf0
[  143.158104][  T117] Read of size 1 at addr ffff888037e360d8 by task jfsCommit/117
[  143.162035][  T117] 
[  143.163103][  T117] CPU: 1 UID: 0 PID: 117 Comm: jfsCommit Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  143.163119][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.163126][  T117] Call Trace:
[  143.163131][  T117]  <TASK>
[  143.163136][  T117]  dump_stack_lvl+0x189/0x250
[  143.163153][  T117]  ? rcu_is_watching+0x15/0xb0
[  143.163163][  T117]  ? __kasan_check_byte+0x12/0x40
[  143.163177][  T117]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.163189][  T117]  ? rcu_is_watching+0x15/0xb0
[  143.163223][  T117]  ? lock_release+0x4b/0x3e0
[  143.163240][  T117]  ? __virt_addr_valid+0x1c8/0x5c0
[  143.163252][  T117]  ? __virt_addr_valid+0x4a5/0x5c0
[  143.163272][  T117]  print_report+0xca/0x240
[  143.163283][  T117]  ? _raw_spin_lock_irqsave+0xa7/0xf0
[  143.163294][  T117]  kasan_report+0x118/0x150
[  143.163309][  T117]  ? _raw_spin_lock_irqsave+0xa7/0xf0
[  143.163321][  T117]  ? __mutex_lock+0x3d1/0x1360
[  143.163333][  T117]  __kasan_check_byte+0x2a/0x40
[  143.163346][  T117]  lock_acquire+0x8d/0x360
[  143.163363][  T117]  _raw_spin_lock_irqsave+0xa7/0xf0
[  143.163374][  T117]  ? __mutex_lock+0x3d1/0x1360
[  143.163386][  T117]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  143.163397][  T117]  ? schedule+0x16f/0x360
[  143.163408][  T117]  ? __mutex_lock+0x37a/0x1360
[  143.163420][  T117]  __mutex_lock+0x3d1/0x1360
[  143.163432][  T117]  ? do_raw_spin_lock+0x121/0x290
[  143.163446][  T117]  ? jfs_syncpt+0x25/0x90
[  143.163460][  T117]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  143.163472][  T117]  ? __pfx___mutex_lock+0x10/0x10
[  143.163483][  T117]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  143.163493][  T117]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  143.163508][  T117]  jfs_syncpt+0x25/0x90
[  143.163523][  T117]  txEnd+0x2e5/0x530
[  143.163537][  T117]  jfs_lazycommit+0x5ba/0xa90
[  143.163550][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  143.163561][  T117]  ? __pfx_default_wake_function+0x10/0x10
[  143.163575][  T117]  ? __kthread_parkme+0x7b/0x200
[  143.163587][  T117]  ? __kthread_parkme+0x1a1/0x200
[  143.163598][  T117]  kthread+0x711/0x8a0
[  143.163611][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  143.163621][  T117]  ? __pfx_kthread+0x10/0x10
[  143.163633][  T117]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.163644][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.163655][  T117]  ? __pfx_kthread+0x10/0x10
[  143.163668][  T117]  ret_from_fork+0x3fc/0x770
[  143.163679][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[  143.163690][  T117]  ? __switch_to_asm+0x39/0x70
[  143.163704][  T117]  ? __switch_to_asm+0x33/0x70
[  143.163715][  T117]  ? __pfx_kthread+0x10/0x10
[  143.163727][  T117]  ret_from_fork_asm+0x1a/0x30
[  143.163744][  T117]  </TASK>
[  143.163748][  T117] 
[  143.273507][  T117] Allocated by task 8701:
[  143.275339][  T117]  kasan_save_track+0x3e/0x80
[  143.277337][  T117]  __kasan_kmalloc+0x93/0xb0
[  143.279229][  T117]  __kmalloc_cache_noprof+0x230/0x3d0
[  143.281463][  T117]  lmLogOpen+0x2d1/0xfb0
[  143.283219][  T117]  jfs_mount_rw+0xe9/0x670
[  143.285075][  T117]  jfs_fill_super+0x754/0xd80
[  143.287124][  T117]  get_tree_bdev_flags+0x40e/0x4d0
[  143.289307][  T117]  vfs_get_tree+0x92/0x2b0
[  143.291189][  T117]  do_new_mount+0x2a2/0x9e0
[  143.293136][  T117]  __se_sys_mount+0x317/0x410
[  143.295190][  T117]  do_syscall_64+0xfa/0x3b0
[  143.297225][  T117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.299779][  T117] 
[  143.300836][  T117] Freed by task 8270:
[  143.302567][  T117]  kasan_save_track+0x3e/0x80
[  143.304582][  T117]  kasan_save_free_info+0x46/0x50
[  143.306775][  T117]  __kasan_slab_free+0x5b/0x80
[  143.308765][  T117]  kfree+0x18e/0x440
[  143.310443][  T117]  lmLogClose+0x297/0x520
[  143.312254][  T117]  jfs_umount+0x2ef/0x3c0
[  143.314086][  T117]  jfs_put_super+0x8c/0x190
[  143.315968][  T117]  generic_shutdown_super+0x135/0x2c0
[  143.318232][  T117]  kill_block_super+0x44/0x90
[  143.320187][  T117]  deactivate_locked_super+0xbc/0x130
[  143.322438][  T117]  cleanup_mnt+0x425/0x4c0
[  143.324359][  T117]  task_work_run+0x1d4/0x260
[  143.326305][  T117]  exit_to_user_mode_loop+0xec/0x110
[  143.328547][  T117]  do_syscall_64+0x2bd/0x3b0
[  143.330490][  T117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.332952][  T117] 
[  143.333970][  T117] The buggy address belongs to the object at ffff888037e36000
[  143.333970][  T117]  which belongs to the cache kmalloc-1k of size 1024
[  143.339566][  T117] The buggy address is located 216 bytes inside of
[  143.339566][  T117]  freed 1024-byte region [ffff888037e36000, ffff888037e36400)
[  143.345316][  T117] 
[  143.346368][  T117] The buggy address belongs to the physical page:
[  143.348996][  T117] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37e30
[  143.352783][  T117] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  143.356407][  T117] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  143.359805][  T117] page_type: f5(slab)
[  143.361559][  T117] raw: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001
[  143.365225][  T117] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  143.368768][  T117] head: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001
[  143.372466][  T117] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  143.376063][  T117] head: 00fff00000000003 ffffea0000df8c01 00000000ffffffff 00000000ffffffff
[  143.379756][  T117] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  143.383243][  T117] page dumped because: kasan: bad access detected
[  143.385885][  T117] page_owner tracks the page as allocated
[  143.388282][  T117] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5849, tgid 5849 (syz-executor), ts 56104733245, free_ts 0
[  143.396677][  T117]  post_alloc_hook+0x240/0x2a0
[  143.398765][  T117]  get_page_from_freelist+0x21e4/0x22c0
[  143.401312][  T117]  __alloc_frozen_pages_noprof+0x181/0x370
[  143.404032][  T117]  alloc_pages_mpol+0x232/0x4a0
[  143.406134][  T117]  allocate_slab+0x8a/0x370
[  143.408127][  T117]  ___slab_alloc+0xbeb/0x1410
[  143.410119][  T117]  __kmalloc_cache_noprof+0x296/0x3d0
[  143.412433][  T117]  new_nbp+0x188/0x440
[  143.414157][  T117]  br_add_if+0x28e/0xec0
[  143.416027][  T117]  do_set_master+0x533/0x6d0
[  143.418040][  T117]  do_setlink+0xcf0/0x41c0
[  143.419993][  T117]  rtnl_newlink+0x160b/0x1c70
[  143.422065][  T117]  rtnetlink_rcv_msg+0x7cf/0xb70
[  143.424241][  T117]  netlink_rcv_skb+0x208/0x470
[  143.426277][  T117]  netlink_unicast+0x82f/0x9e0
[  143.428296][  T117]  netlink_sendmsg+0x805/0xb30
[  143.430354][  T117] page_owner free stack trace missing
[  143.432670][  T117] 
[  143.433739][  T117] Memory state around the buggy address:
[  143.436134][  T117]  ffff888037e35f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  143.439434][  T117]  ffff888037e36000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.442969][  T117] >ffff888037e36080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.446705][  T117]                                                     ^
[  143.449753][  T117]  ffff888037e36100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.453165][  T117]  ffff888037e36180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.456567][  T117] ==================================================================
[  143.459866][  T117] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  143.462858][  T117] CPU: 1 UID: 0 PID: 117 Comm: jfsCommit Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  143.467711][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.471651][  T117] Call Trace:
[  143.473061][  T117]  <TASK>
[  143.474332][  T117]  dump_stack_lvl+0x99/0x250
[  143.476371][  T117]  ? __asan_memcpy+0x40/0x70
[  143.478330][  T117]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.480504][  T117]  ? __pfx__printk+0x10/0x10
[  143.482436][  T117]  vpanic+0x281/0x750
[  143.484112][  T117]  ? __pfx_print_hex_dump+0x10/0x10
[  143.486285][  T117]  ? __pfx_vpanic+0x10/0x10
[  143.488227][  T117]  panic+0xb9/0xc0
[  143.489805][  T117]  ? __pfx_panic+0x10/0x10
[  143.491679][  T117]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  143.494058][  T117]  ? _raw_spin_lock_irqsave+0xa7/0xf0
[  143.496281][  T117]  check_panic_on_warn+0x89/0xb0
[  143.498294][  T117]  ? _raw_spin_lock_irqsave+0xa7/0xf0
[  143.500454][  T117]  end_report+0x78/0x160
[  143.502220][  T117]  kasan_report+0x129/0x150
[  143.504079][  T117]  ? _raw_spin_lock_irqsave+0xa7/0xf0
[  143.506275][  T117]  ? __mutex_lock+0x3d1/0x1360
[  143.508245][  T117]  __kasan_check_byte+0x2a/0x40
[  143.510279][  T117]  lock_acquire+0x8d/0x360
[  143.512237][  T117]  _raw_spin_lock_irqsave+0xa7/0xf0
[  143.514567][  T117]  ? __mutex_lock+0x3d1/0x1360
[  143.516708][  T117]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  143.519146][  T117]  ? schedule+0x16f/0x360
[  143.520965][  T117]  ? __mutex_lock+0x37a/0x1360
[  143.523037][  T117]  __mutex_lock+0x3d1/0x1360
[  143.525098][  T117]  ? do_raw_spin_lock+0x121/0x290
[  143.527607][  T117]  ? jfs_syncpt+0x25/0x90
[  143.529874][  T117]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  143.532645][  T117]  ? __pfx___mutex_lock+0x10/0x10
[  143.534781][  T117]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  143.537253][  T117]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  143.539925][  T117]  jfs_syncpt+0x25/0x90
[  143.541750][  T117]  txEnd+0x2e5/0x530
[  143.543509][  T117]  jfs_lazycommit+0x5ba/0xa90
[  143.545569][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  143.547778][  T117]  ? __pfx_default_wake_function+0x10/0x10
[  143.550237][  T117]  ? __kthread_parkme+0x7b/0x200
[  143.552657][  T117]  ? __kthread_parkme+0x1a1/0x200
[  143.555322][  T117]  kthread+0x711/0x8a0
[  143.557294][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  143.559606][  T117]  ? __pfx_kthread+0x10/0x10
[  143.561630][  T117]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.563883][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.566088][  T117]  ? __pfx_kthread+0x10/0x10
[  143.568316][  T117]  ret_from_fork+0x3fc/0x770
[  143.570680][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[  143.573078][  T117]  ? __switch_to_asm+0x39/0x70
[  143.575172][  T117]  ? __switch_to_asm+0x33/0x70
[  143.577301][  T117]  ? __pfx_kthread+0x10/0x10
[  143.579259][  T117]  ret_from_fork_asm+0x1a/0x30
[  143.581327][  T117]  </TASK>
[  143.583551][  T117] Kernel Offset: disabled
[  143.585491][  T117] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:42:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000008 RBX=0000000000000780 RCX=0000000000000008 RDX=0000000000000003
RSI=0000000000000001 RDI=ffff888026f47d80 RBP=dffffc0000000000 RSP=ffffc90008a9f6b8
R8 =0000000000000006 R9 =ffffffff822b215b R10=000000000000000b R11=ffffffff81ac38c0
R12=ffff888026f47d80 R13=ffffc90008a9f790 R14=ffffea0000ddd580 R15=000000000000000f
RIP=ffffffff822bcb70 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555583f07500 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd800ae56c0 CR3=0000000027212000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fd7ffe12e53
XMM06=0000000000000000 00007fd7ffe12e4d XMM07=0000000000000000 00007fd7ffe12e61
XMM08=0000000000000000 00007fd7ffe12ee7 XMM09=0000000000000000 00007fd7ffe12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006d RBX=000000000000006d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000242f210
R8 =ffff888020c28237 R9 =1ffff11004185046 R10=dffffc0000000000 R11=ffffffff854e7660
R12=dffffc0000000000 R13=ffffffff99af290e R14=ffffffff99de74e0 R15=0000000000000000
RIP=ffffffff854e76dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555d738808 CR3=0000000027f18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f53a8812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
