last executing test programs:

1m53.360742413s ago: executing program 2 (id=82):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x80081)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000300)={0xa, {0x80800, 0x9, 0x40}})

1m53.2908907s ago: executing program 2 (id=84):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29d})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1})
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000002c0)='/\x00')

1m53.19185451s ago: executing program 2 (id=85):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)

1m53.089732341s ago: executing program 2 (id=86):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@init_itable_val}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_nolock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
unlink(&(0x7f0000000180)='./file1\x00')

1m52.691472885s ago: executing program 2 (id=90):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400030400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x44)

1m52.270793895s ago: executing program 2 (id=94):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000040)=r0}, 0x20)

1m52.144985206s ago: executing program 32 (id=94):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000040)=r0}, 0x20)

1m37.771804861s ago: executing program 0 (id=234):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
getsockopt(r0, 0x28, 0x6, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b)

1m37.679812123s ago: executing program 0 (id=235):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

1m36.682175213s ago: executing program 0 (id=243):
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18)

1m36.574007986s ago: executing program 0 (id=245):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62cd, &(0x7f00000042c0)="$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")
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000480)={{}, 0x0, 0x2, @unused=[0x3, 0x3, 0x577, 0x2], @name="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"})
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0xb4, 0x0, 0xa, 0x9, 0x7f, 0xd798cc7d6ed4fd84, 0x6, 0x5, 0x209, 0x40, 0xb7, 0x400, 0x1000, 0x38, 0x1, 0xed0, 0x8, 0x2}, [{0x1, 0x6, 0x9, 0x3, 0x4, 0x7f, 0xfffffffffffffeec, 0x6}]}, 0x78)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m36.034732524s ago: executing program 0 (id=258):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='errors=continue,nocheckpoint_merge,alloc_mode=default,active_logs=6,acl,fault_injection=00000000000000001262,acl,noacl,compress_cache\x00\x00lloc_mode=default,noextent_cache,compress_cache,mode=lfs,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000340)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe)
fadvise64(r0, 0xfffffffffffffffc, 0x0, 0x4)

1m35.401833012s ago: executing program 0 (id=269):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x834}, 0x1, 0x0, 0x0, 0x4000080}, 0xc004)
accept4$ax25(r1, 0x0, 0x0, 0x80800)

1m35.320845435s ago: executing program 33 (id=269):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x834}, 0x1, 0x0, 0x0, 0x4000080}, 0xc004)
accept4$ax25(r1, 0x0, 0x0, 0x80800)

2.626703131s ago: executing program 3 (id=1327):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002400), &(0x7f0000002440)='./file0\x00', 0x2000000, &(0x7f0000002540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x100000001}}]}}, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100)

1.151344863s ago: executing program 3 (id=1331):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0)
lseek(r0, 0xfffffffffffffff9, 0x2)
read(r0, &(0x7f00000000c0)=""/27, 0x1b)

1.151189104s ago: executing program 3 (id=1332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fremovexattr(r0, &(0x7f0000000540)=@known='security.apparmor\x00')

1.050964576s ago: executing program 3 (id=1333):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)

1.050638255s ago: executing program 3 (id=1334):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94)

859.678158ms ago: executing program 3 (id=1336):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x19}, @val={0x0, 0x3, 0x1, 0x10, 0x2, 0x3}, @eth={@multicast, @multicast, @void, {@canfd={0xd, {{0x2}, 0x18, 0x2, 0x0, 0x0, "c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7"}}}}}, 0x64)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

621.687334ms ago: executing program 1 (id=1343):
setresuid(0xee00, 0xee01, 0xee01)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

561.144471ms ago: executing program 1 (id=1345):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x5, 0x0, 0x3}, [@RTA_SRC={0x8, 0x2, @private=0xa010101}, @RTA_IIF={0x8, 0x3, r1}]}, 0x2c}}, 0x0)

560.589543ms ago: executing program 1 (id=1347):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)

504.454335ms ago: executing program 1 (id=1348):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x12, r0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/32, 0x20}, {0x0}], 0x2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]})
write(r2, &(0x7f0000000140)='3', 0x1)

437.339746ms ago: executing program 4 (id=1349):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x8c}}, 0x20008000)

436.985115ms ago: executing program 4 (id=1350):
r0 = syz_io_uring_setup(0x6e23, &(0x7f0000000400)={0x0, 0x20079af, 0x10000, 0x7ffd, 0x400246}, &(0x7f0000000340)=<r1=>0x0, &(0x7f00000006c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)

331.072221ms ago: executing program 4 (id=1351):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeec}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))

330.768829ms ago: executing program 1 (id=1352):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYRESOCT], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

330.578955ms ago: executing program 4 (id=1353):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

271.099475ms ago: executing program 4 (id=1354):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000002100)="b9fe030711a5f32e019e14f088a8", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

173.803µs ago: executing program 4 (id=1355):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001000)=@newsa={0x138, 0x10, 0x832152701231f605, 0x70bd27, 0x0, {{@in=@loopback, @in=@remote, 0x4e22, 0x0, 0x2}, {@in6=@remote, 0xfffffffc, 0x6c}, @in=@remote, {0x0, 0x8001000000000001}, {}, {0x0, 0x0, 0x20}, 0x3, 0x0, 0x2, 0x4, 0x0, 0x64}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x40080)

0s ago: executing program 1 (id=1356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0)

kernel console output (not intermixed with test programs):

T4-fs error (device loop3): ext4_dirty_inode:6538: inode #4: comm syz.3.229: mark_inode_dirty error
[   79.173408][ T6589] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #4: comm syz.3.229: corrupted inode contents
[   79.182306][ T6589] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.229: mark_inode_dirty error
[   79.382950][ T6589] Quota error (device loop3): write_blk: dquota write failed
[   79.408393][ T6589] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[   79.412085][ T6589] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   79.417881][ T6589] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.229: Failed to acquire dquot type 1
[   79.578241][ T6595] loop0: detected capacity change from 0 to 1024
[   80.839900][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.283156][ T6628] loop1: detected capacity change from 0 to 2048
[   81.305291][ T6628] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[   81.327763][ T6628] UDF-fs: error (device loop1): udf_read_inode: (ino 1312) failed !bh
[   81.331676][ T6628] UDF-fs: Scanning with blocksize 512 failed
[   81.365382][ T6628] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   81.368618][ T6628] UDF-fs: Scanning with blocksize 1024 failed
[   81.399319][ T6628] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   81.415012][ T6628] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   81.418227][ T6628] UDF-fs: Scanning with blocksize 2048 failed
[   81.442098][ T6628] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   81.452443][ T6628] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   81.461851][ T6628] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   81.478214][ T6628] UDF-fs: Scanning with blocksize 4096 failed
[   81.480920][ T6628] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[   81.489389][ T6635] loop3: detected capacity change from 0 to 1024
[   81.597080][   T27] hfsplus: b-tree write err: -5, ino 4
[   81.715760][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'.
[   81.794501][ T6655] fuse: Bad value for 'fd'
[   81.972504][ T6643] loop0: detected capacity change from 0 to 32768
[   82.010245][ T6643] overlayfs: upper fs needs to support d_type.
[   82.012515][ T6643] overlayfs: upper fs does not support tmpfile.
[   82.036921][ T6643] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   82.457866][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.460407][ T6710] loop3: detected capacity change from 0 to 512
[   82.492162][ T6691] loop1: detected capacity change from 0 to 40427
[   82.525195][ T6691] F2FS-fs (loop1): invalid crc value
[   82.536927][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.539354][ T6710] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[   82.548643][ T6710] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[   82.551830][ T6710] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.267: Failed to acquire dquot type 1
[   82.560405][ T6710] EXT4-fs (loop3): 1 truncate cleaned up
[   82.565466][ T6710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.569560][ T6710] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.570936][ T6691] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   82.590053][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.596700][ T6691] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   82.600905][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.648229][ T6721] loop3: detected capacity change from 0 to 4096
[   82.675946][ T6721] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   82.690633][ T6724] syz.1.261: attempt to access beyond end of device
[   82.690633][ T6724] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   82.697573][ T6721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.709834][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.1.261 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   82.709849][ T6724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.709855][ T6724] Call Trace:
[   82.709860][ T6724]  <TASK>
[   82.709863][ T6724]  dump_stack_lvl+0x189/0x250
[   82.709879][ T6724]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.709891][ T6724]  ? __pfx_queue_work_on+0x10/0x10
[   82.709899][ T6724]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   82.709907][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.709910][ T6724]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   82.709925][ T6724]  f2fs_handle_critical_error+0x37c/0x540
[   82.709939][ T6724]  f2fs_write_end_io+0x886/0xb60
[   82.709960][ T6724]  __submit_merged_bio+0x27a/0x6a0
[   82.709973][ T6724]  __submit_merged_write_cond+0x255/0x530
[   82.709987][ T6724]  f2fs_write_data_pages+0x261d/0x3000
[   82.710015][ T6724]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   82.710065][ T6724]  ? __lock_acquire+0xab9/0xd20
[   82.710087][ T6724]  ? do_raw_spin_lock+0x121/0x290
[   82.710109][ T6724]  ? do_raw_spin_unlock+0x4d/0x240
[   82.710123][ T6724]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   82.710139][ T6724]  do_writepages+0x32e/0x550
[   82.710163][ T6724]  ? do_raw_spin_unlock+0x4d/0x240
[   82.710181][ T6724]  filemap_fdatawrite+0x199/0x240
[   82.710197][ T6724]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   82.710261][ T6724]  ? do_raw_spin_unlock+0x4d/0x240
[   82.710281][ T6724]  f2fs_sync_dirty_inodes+0x31f/0x830
[   82.710312][ T6724]  f2fs_write_checkpoint+0x95a/0x1df0
[   82.710381][ T6724]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   82.710447][ T6724]  f2fs_gc+0x941/0x2590
[   82.710488][ T6724]  ? __pfx_f2fs_gc+0x10/0x10
[   82.710497][ T6724]  ? set_normalized_timespec64+0xf0/0x1a0
[   82.710537][ T6724]  f2fs_balance_fs+0x5f7/0x7f0
[   82.710554][ T6724]  ? f2fs_setattr+0x1169/0x15f0
[   82.710571][ T6724]  ? __pfx_f2fs_balance_fs+0x10/0x10
[   82.710588][ T6724]  ? _raw_spin_unlock+0x28/0x50
[   82.710599][ T6724]  ? f2fs_inode_dirtied+0x328/0x3c0
[   82.710619][ T6724]  ? f2fs_mark_inode_dirty_sync+0x120/0x1f0
[   82.710636][ T6724]  f2fs_setattr+0x1169/0x15f0
[   82.710659][ T6724]  ? __pfx_f2fs_setattr+0x10/0x10
[   82.710677][ T6724]  notify_change+0xb36/0xe40
[   82.710701][ T6724]  do_truncate+0x1a4/0x220
[   82.710719][ T6724]  ? __pfx_do_truncate+0x10/0x10
[   82.710731][ T6724]  ? apparmor_path_truncate+0x238/0x2d0
[   82.710751][ T6724]  ? mnt_get_write_access+0x223/0x2a0
[   82.710772][ T6724]  vfs_truncate+0x493/0x520
[   82.710786][ T6724]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.710804][ T6724]  ? __pfx_vfs_truncate+0x10/0x10
[   82.710816][ T6724]  ? user_path_at+0x44/0x60
[   82.710837][ T6724]  do_sys_truncate+0xdb/0x190
[   82.710853][ T6724]  ? __pfx_do_sys_truncate+0x10/0x10
[   82.710879][ T6724]  __x64_sys_truncate+0x5b/0x70
[   82.710896][ T6724]  do_syscall_64+0xfa/0x3b0
[   82.710912][ T6724]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.710927][ T6724]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.710937][ T6724]  ? exc_page_fault+0x9f/0xf0
[   82.710951][ T6724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.710961][ T6724] RIP: 0033:0x7f91b978ebe9
[   82.710973][ T6724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.710982][ T6724] RSP: 002b:00007f91ba5d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[   82.710995][ T6724] RAX: ffffffffffffffda RBX: 00007f91b99b6090 RCX: 00007f91b978ebe9
[   82.711003][ T6724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[   82.711010][ T6724] RBP: 00007f91b9811e19 R08: 0000000000000000 R09: 0000000000000000
[   82.711017][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.711023][ T6724] R13: 00007f91b99b6128 R14: 00007f91b99b6090 R15: 00007ffcdbbe8378
[   82.711045][ T6724]  </TASK>
[   82.711051][ T6724] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   82.887205][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.067727][   T12] bridge_slave_1: left allmulticast mode
[   83.069616][   T12] bridge_slave_1: left promiscuous mode
[   83.072311][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.085513][   T12] bridge_slave_0: left allmulticast mode
[   83.087381][   T12] bridge_slave_0: left promiscuous mode
[   83.089287][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.106613][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.110195][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.115438][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.115458][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'.
[   83.123513][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.126990][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.500891][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.508011][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.514442][   T12] bond0 (unregistering): Released all slaves
[   83.934005][   T12] hsr_slave_0: left promiscuous mode
[   83.937062][   T12] hsr_slave_1: left promiscuous mode
[   83.944539][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.947617][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.956385][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.959583][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.975277][   T12] veth1_macvtap: left promiscuous mode
[   83.977825][   T12] veth0_macvtap: left promiscuous mode
[   83.980241][   T12] veth1_vlan: left promiscuous mode
[   83.984354][   T12] veth0_vlan: left promiscuous mode
[   84.097569][ T6762] loop3: detected capacity change from 0 to 40427
[   84.110227][ T6762] F2FS-fs (loop3): invalid crc value
[   84.198903][ T6762] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   84.204184][ T6762] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   84.238351][ T6149] syz-executor: attempt to access beyond end of device
[   84.238351][ T6149] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   84.245031][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   84.245043][ T6149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.245048][ T6149] Call Trace:
[   84.245052][ T6149]  <TASK>
[   84.245055][ T6149]  dump_stack_lvl+0x189/0x250
[   84.245070][ T6149]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.245079][ T6149]  ? __pfx_queue_work_on+0x10/0x10
[   84.245086][ T6149]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   84.245096][ T6149]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   84.245107][ T6149]  f2fs_handle_critical_error+0x37c/0x540
[   84.245120][ T6149]  f2fs_write_end_io+0x886/0xb60
[   84.245136][ T6149]  __submit_merged_bio+0x27a/0x6a0
[   84.245148][ T6149]  __submit_merged_write_cond+0x255/0x530
[   84.245159][ T6149]  f2fs_write_data_pages+0x261d/0x3000
[   84.245181][ T6149]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   84.245225][ T6149]  ? __lock_acquire+0xab9/0xd20
[   84.245239][ T6149]  ? do_raw_spin_lock+0x121/0x290
[   84.245252][ T6149]  ? do_raw_spin_unlock+0x4d/0x240
[   84.245260][ T6149]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   84.245270][ T6149]  do_writepages+0x32e/0x550
[   84.245284][ T6149]  ? do_raw_spin_unlock+0x4d/0x240
[   84.245294][ T6149]  filemap_fdatawrite+0x199/0x240
[   84.245351][ T6149]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   84.245379][ T6149]  ? do_raw_spin_unlock+0x4d/0x240
[   84.245390][ T6149]  f2fs_sync_dirty_inodes+0x31f/0x830
[   84.245406][ T6149]  f2fs_write_checkpoint+0x95a/0x1df0
[   84.245425][ T6149]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   84.245453][ T6149]  ? kill_f2fs_super+0x298/0x6c0
[   84.245465][ T6149]  kill_f2fs_super+0x2c3/0x6c0
[   84.245477][ T6149]  ? __pfx_kill_f2fs_super+0x10/0x10
[   84.245486][ T6149]  ? radix_tree_delete_item+0x2b6/0x400
[   84.245497][ T6149]  ? shrinker_free+0x2ce/0x3e0
[   84.245506][ T6149]  deactivate_locked_super+0xbc/0x130
[   84.245516][ T6149]  cleanup_mnt+0x425/0x4c0
[   84.245524][ T6149]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.245534][ T6149]  task_work_run+0x1d4/0x260
[   84.245545][ T6149]  ? __pfx_task_work_run+0x10/0x10
[   84.245553][ T6149]  ? __x64_sys_umount+0x122/0x160
[   84.245564][ T6149]  ? exit_to_user_mode_loop+0x40/0x110
[   84.245577][ T6149]  exit_to_user_mode_loop+0xec/0x110
[   84.245586][ T6149]  do_syscall_64+0x2bd/0x3b0
[   84.245594][ T6149]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.245602][ T6149]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.245609][ T6149]  ? exc_page_fault+0x9f/0xf0
[   84.245618][ T6149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.245625][ T6149] RIP: 0033:0x7f85a6d8ff17
[   84.245633][ T6149] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   84.245639][ T6149] RSP: 002b:00007ffc5b581f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   84.245648][ T6149] RAX: 0000000000000000 RBX: 00007f85a6e11c05 RCX: 00007f85a6d8ff17
[   84.245653][ T6149] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5b582010
[   84.245657][ T6149] RBP: 00007ffc5b582010 R08: 0000000000000000 R09: 0000000000000000
[   84.245662][ T6149] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5b5830a0
[   84.245666][ T6149] R13: 00007f85a6e11c05 R14: 0000000000014892 R15: 00007ffc5b5830e0
[   84.245677][ T6149]  </TASK>
[   84.246396][ T6149] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   84.660277][ T6783] loop3: detected capacity change from 0 to 4096
[   84.745126][   T12] team0 (unregistering): Port device team_slave_1 removed
[   84.794392][   T12] team0 (unregistering): Port device team_slave_0 removed
[   85.172824][ T5848] Bluetooth: hci1: command tx timeout
[   85.180494][ T6736] chnl_net:caif_netlink_parms(): no params data found
[   85.326819][ T5883] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   85.331995][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.339111][ T6736] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.342496][ T5883] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   85.348431][ T6736] bridge_slave_0: entered allmulticast mode
[   85.354049][ T6736] bridge_slave_0: entered promiscuous mode
[   85.358865][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.361559][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.370355][ T6736] bridge_slave_1: entered allmulticast mode
[   85.373823][ T6736] bridge_slave_1: entered promiscuous mode
[   85.414608][ T6736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.425799][ T6736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.468551][ T6736] team0: Port device team_slave_0 added
[   85.473723][ T6736] team0: Port device team_slave_1 added
[   85.514495][ T6736] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.517474][ T6736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.533864][ T6736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.539998][ T6736] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.544901][ T6736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.554877][ T6736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.625658][ T6736] hsr_slave_0: entered promiscuous mode
[   85.629055][ T6736] hsr_slave_1: entered promiscuous mode
[   85.634858][ T6736] debugfs: 'hsr0' already exists in 'hsr'
[   85.637358][ T6736] Cannot create hsr debugfs directory
[   85.731931][ T6819] loop1: detected capacity change from 0 to 512
[   85.772050][ T6819] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.298: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   85.781509][ T6819] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.298: Bad quota inode: 3, type: 0
[   85.787374][ T6819] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   85.793079][ T6819] EXT4-fs (loop1): mount failed
[   85.973446][ T6832] loop3: detected capacity change from 0 to 4096
[   85.982061][ T6832] ntfs3(loop3): ino=0, mi_enum_attr
[   85.990859][ T6832] ntfs3(loop3): ino=0, mi_enum_attr
[   86.022919][ T6736] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.043822][ T6736] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.073843][ T6736] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.108582][ T6736] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.217440][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.220561][ T6736] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.224585][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.227683][ T6736] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.280615][  T109] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.285603][  T109] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.298172][ T6855] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.385101][   T10] cfg80211: failed to load regulatory.db
[   86.416451][ T6736] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.448118][ T6736] 8021q: adding VLAN 0 to HW filter on device team0
[   86.478298][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.481494][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.522129][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.525161][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.592132][ T6736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.811701][ T6736] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.022687][   T47] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   87.078826][ T6736] veth0_vlan: entered promiscuous mode
[   87.085827][ T6736] veth1_vlan: entered promiscuous mode
[   87.106510][ T6736] veth0_macvtap: entered promiscuous mode
[   87.110604][ T6736] veth1_macvtap: entered promiscuous mode
[   87.120387][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.130741][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.140338][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.145219][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.150689][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.155141][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.229158][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.235540][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.253178][ T5848] Bluetooth: hci1: command tx timeout
[   87.270612][  T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.276967][  T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.375534][ T6913] netlink: 'syz.3.320': attribute type 1 has an invalid length.
[   87.450913][ T6913] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.461183][ T6913] bond1: (slave bond2): making interface the new active one
[   87.465048][ T6913] bond1: (slave bond2): Enslaving as an active interface with an up link
[   87.695164][ T6934] tipc: Can't bind to reserved service type 2
[   87.876790][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'.
[   88.279806][ T6972] loop4: detected capacity change from 0 to 1024
[   88.427562][ T6972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   88.452909][ T6972] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.570466][ T6736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   88.869574][ T6987] openvswitch: netlink: Key type 40 is out of range max 32
[   88.964032][ T6993] loop4: detected capacity change from 0 to 1024
[   88.990654][ T6990] loop3: detected capacity change from 0 to 4096
[   89.013038][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.344'.
[   89.332727][ T5848] Bluetooth: hci1: command tx timeout
[   89.417476][ T7001] loop4: detected capacity change from 0 to 32768
[   89.433943][ T7001] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.449899][ T7001] XFS (loop4): Ending clean mount
[   89.499359][ T6736] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.585057][ T7029] netlink: 'syz.3.356': attribute type 10 has an invalid length.
[   89.608591][ T7029] veth0_vlan: left promiscuous mode
[   89.611542][ T7029] veth0_vlan: entered promiscuous mode
[   89.622284][ T7029] team0: Device veth0_vlan failed to register rx_handler
[   89.912425][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'.
[   89.922742][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'.
[   90.295386][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'.
[   90.526926][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'.
[   90.537078][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'.
[   90.919811][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'.
[   90.982287][ T7092] ip6erspan0: entered allmulticast mode
[   91.073814][ T7098] loop1: detected capacity change from 0 to 2048
[   91.124457][ T7099] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   91.378282][ T7109] loop4: detected capacity change from 0 to 2048
[   91.398566][ T7109] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[   91.401893][ T7109] UDF-fs: Scanning with blocksize 512 failed
[   91.412786][ T5848] Bluetooth: hci1: command tx timeout
[   91.420258][ T7109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.571528][  T792] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   92.032749][  T792] usb 2-1: Using ep0 maxpacket: 32
[   92.036525][  T792] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[   92.039812][  T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.044087][  T792] usb 2-1: config 0 has no interface number 0
[   92.048124][  T792] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[   92.051672][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.056536][  T792] usb 2-1: Product: syz
[   92.058327][  T792] usb 2-1: Manufacturer: syz
[   92.060352][  T792] usb 2-1: SerialNumber: syz
[   92.064617][  T792] usb 2-1: config 0 descriptor??
[   92.069456][  T792] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[   92.074428][  T792] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[   92.114210][   T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   92.282706][   T47] usb 5-1: Using ep0 maxpacket: 32
[   92.293020][   T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.296667][   T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.299800][   T47] usb 5-1: config 0 interface 0 has no altsetting 0
[   92.301985][   T47] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00
[   92.308843][ T5913] usb 2-1: USB disconnect, device number 5
[   92.314436][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.321520][   T47] usb 5-1: config 0 descriptor??
[   92.420642][ T7128] ALSA: mixer_oss: invalid OSS volume ''
[   92.702726][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   92.865415][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.870755][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   92.876120][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   92.880601][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   92.892336][   T10] usb 4-1: SerialNumber: syz
[   92.948407][ T5910] usb 5-1: USB disconnect, device number 2
[   93.117486][ T7141] Driver unsupported XDP return value 0 on prog  (id 33) dev N/A, expect packet loss!
[   93.118404][   T10] usb 4-1: 0:2 : does not exist
[   93.154730][   T10] usb 4-1: USB disconnect, device number 5
[   93.174281][ T7143] loop1: detected capacity change from 0 to 64
[   93.198256][ T7143] Trying to free block not in datazone
[   93.206530][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   93.213576][ T7143] Trying to free block not in datazone
[   93.218947][ T7143] Trying to free block not in datazone
[   93.229466][ T7143] Trying to free block not in datazone
[   93.232053][ T7143] minix_free_inode: bit 5 already cleared
[   93.490010][ T7149] loop1: detected capacity change from 0 to 32768
[   93.501238][ T7149] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   93.501238][ T7149] clean (size 2912):
[   93.501238][ T7149] flags:          0
[   93.501238][ T7149] journal_seq:    8
[   93.501238][ T7149] usage: type=inodes v=8
[   93.501238][ T7149] usage: type=key_version v=0
[   93.501238][ T7149] usage: type=reserved v=0
[   93.501238][ T7149] usage: type=reserved v=0
[   93.501238][ T7149] usage: type=reserved v=0
[   93.501238][ T7149] usage: type=(unknown fs_usage_type 3) v=0
[   93.501238][ T7149] data_usage: btree: 1/1 [0]=2816
[   93.501238][ T7149] data_usage: journal: 1/1 [0]=0
[   93.501238][ T7149] data_usage: user: 1/1 [0]=32
[   93.501238][ T7149] dev_usage: dev=0  
[   93.501238][ T7149]   free: buckets=83 sectors=0 fragmented=0
[   93.501238][ T7149]   sb: buckets=25 sectors=6152 fragmented=248
[   93.501238][ T7149]   journal: buckets=8 sectors=2048 fragmented=0
[   93.501238][ T7149]   btree: buckets=11 sectors=2816 fragmented=0
[   93.501238][ T7149]   user: buckets=1 sectors=32 fragmented=224
[   93.501238][ T7149]   cached: buckets=0 sectors=0 fragmented=0
[   93.501238][ T7149]   parity: buckets=0 sectors=0 fragmented=0
[   93.501238][ T7149]   stripe: buckets=0 sectors=0 fragmented=0
[   93.501238][ T7149]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   93.501238][ T7149]   need_discard: buckets=0 sectors=0 fragmented=0
[   93.501238][ T7149] clock: read=0
[   93.501238][ T7149] clock: write=1288
[   93.501238][ T7149] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 720575940379
[   93.501396][ T7149] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   93.942683][ T5913] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   94.003097][ T7171] loop3: detected capacity change from 0 to 1764
[   94.070655][ T7174] iso9660: Corrupted directory entry in block 2 of inode 1920
[   94.113927][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -71
[   94.126313][ T5913] usb 5-1: can't read configurations, error -71
[   94.767506][ T7193] loop4: detected capacity change from 0 to 512
[   94.770361][ T7193] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.775559][ T7193] EXT4-fs (loop4): Test dummy encryption mode enabled
[   94.793416][ T7193] EXT4-fs (loop4): 1 truncate cleaned up
[   94.797000][ T7193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.820622][ T7199] netlink: 'syz.1.429': attribute type 32 has an invalid length.
[   95.393806][ T7197] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[   95.457411][   T33] audit: type=1326 audit(1755047772.903:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.1.436" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x0
[   95.472457][ T7216] loop3: detected capacity change from 0 to 2048
[   95.483535][ T7216] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.648962][ T6736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.781320][ T7230] netlink: 'syz.4.442': attribute type 10 has an invalid length.
[   95.798242][ T7230] team0: Port device netdevsim0 added
[   95.923008][ T7222] loop3: detected capacity change from 0 to 32768
[   96.357480][ T7259] syz.3.454 uses obsolete (PF_INET,SOCK_PACKET)
[   96.564657][ T7274] netlink: 6 bytes leftover after parsing attributes in process `syz.3.460'.
[   96.578631][ T7274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.563114][ T5913] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   98.573641][ T7316] loop4: detected capacity change from 0 to 512
[   98.602797][ T7316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   98.655650][ T7316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.660655][ T7316] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.694953][   T33] audit: type=1800 audit(1755047776.143:17): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.478" name="file1" dev="loop4" ino=15 res=0 errno=0
[   98.723102][ T5913] usb 2-1: Using ep0 maxpacket: 32
[   98.728903][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.741565][ T5913] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[   98.745932][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.754567][ T5913] usb 2-1: config 0 descriptor??
[   98.786109][ T6736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.959596][ T7330] Zero length message leads to an empty skb
[   99.121741][ T7334] loop4: detected capacity change from 0 to 2048
[   99.158369][ T7334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.172110][ T5913] belkin 0003:1020:0006.0003: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0
[   99.382307][ T5910] usb 2-1: USB disconnect, device number 6
[   99.651712][ T7374] loop4: detected capacity change from 0 to 64
[   99.756480][ T7383] loop3: detected capacity change from 0 to 512
[   99.838939][ T7383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   99.845703][ T7383] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.867754][ T7383] Quota error (device loop3): write_blk: dquota write failed
[   99.871088][ T7383] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[   99.875363][ T7383] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.496: Failed to acquire dquot type 1
[   99.912141][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  100.225469][ T7410] loop4: detected capacity change from 0 to 1024
[  100.249705][ T7410] hfsplus: bad catalog entry type
[  100.272038][  T109] hfsplus: b-tree write err: -5, ino 4
[  100.421473][ T7406] loop3: detected capacity change from 0 to 32768
[  100.442134][ T7406] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  100.456446][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  100.496410][ T7406] XFS (loop3): Ending clean mount
[  100.548891][ T6149] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  101.032763][   T33] audit: type=1326 audit(1755047778.473:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.3.505" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85a6d8ebe9 code=0x0
[  101.124449][ T7437] loop3: detected capacity change from 0 to 8
[  101.144960][ T7437] SQUASHFS error: lzo decompression failed, data probably corrupt
[  101.148199][ T7437] SQUASHFS error: Failed to read block 0x91: -5
[  101.150817][ T7437] SQUASHFS error: Unable to read metadata cache entry [8f]
[  101.155352][ T7437] SQUASHFS error: Unable to read inode 0x11f
[  101.373118][ T7448] netlink: 'syz.1.510': attribute type 2 has an invalid length.
[  101.598958][ T7458] loop3: detected capacity change from 0 to 2048
[  101.635372][ T7458] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.512: bad orphan inode 8192
[  101.644793][ T7458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.174216][   T33] audit: type=1326 audit(1755047779.573:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.1.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  102.207918][   T33] audit: type=1326 audit(1755047779.573:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.1.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  102.240643][   T33] audit: type=1326 audit(1755047779.573:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.1.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  102.248089][   T33] audit: type=1326 audit(1755047779.573:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.1.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  102.263991][   T33] audit: type=1326 audit(1755047779.573:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.1.517" exe="/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  102.287835][   T33] audit: type=1326 audit(1755047779.573:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.1.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  102.295527][   T33] audit: type=1326 audit(1755047779.573:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.1.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  102.306565][   T33] audit: type=1326 audit(1755047779.573:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.1.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  102.307109][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.313634][   T33] audit: type=1326 audit(1755047779.573:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7471 comm="syz.1.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  102.470920][ T7488] loop4: detected capacity change from 0 to 4096
[  102.482703][ T7488] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  102.647236][ T7500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.529'.
[  102.648778][ T5910] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  102.650315][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'.
[  102.761074][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'.
[  102.824929][ T5910] usb 2-1: unable to get BOS descriptor or descriptor too short
[  102.830991][ T5910] usb 2-1: config 176 has an invalid interface number: 122 but max is 0
[  102.836836][ T5910] usb 2-1: config 176 has no interface number 0
[  102.838979][ T5910] usb 2-1: config 176 interface 122 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  102.846970][ T5910] usb 2-1: config 176 interface 122 has no altsetting 0
[  102.866845][ T5910] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  102.878972][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.882375][ T5910] usb 2-1: Product: syz
[  102.898508][ T5910] usb 2-1: Manufacturer: syz
[  102.900566][ T5910] usb 2-1: SerialNumber: syz
[  102.975372][ T7524] netlink: 168 bytes leftover after parsing attributes in process `syz.3.542'.
[  103.057207][ T7527] tmpfs: Bad value for 'mpol'
[  103.123678][ T5910] radioshark2 2-1:176.122: Invalid radioSHARK2 device
[  103.126521][ T5910] radioshark2 2-1:176.122: probe with driver radioshark2 failed with error -22
[  103.134274][ T7529] netlink: 'syz.3.544': attribute type 39 has an invalid length.
[  103.138211][ T5910] usbhid 2-1:176.122: couldn't find an input interrupt endpoint
[  103.156720][ T5910] usb 2-1: USB disconnect, device number 7
[  103.642387][ T7538] team_slave_0: entered promiscuous mode
[  103.645084][ T7538] team_slave_1: entered promiscuous mode
[  103.657651][ T7538] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  103.666894][ T7538] team0: Device macvtap1 is already an upper device of the team interface
[  103.687396][ T7538] team_slave_0: left promiscuous mode
[  103.689783][ T7538] team_slave_1: left promiscuous mode
[  103.799719][ T7520] syz.4.540 (7520): drop_caches: 2
[  103.966901][ T7553] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  103.970020][ T7553] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  104.167567][ T7562] loop3: detected capacity change from 0 to 128
[  104.178772][ T7562] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  104.187827][ T7562] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  104.375814][ T7563] loop4: detected capacity change from 0 to 1024
[  104.399525][ T7563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.412219][ T7563] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.557: missing EA_INODE flag
[  104.423952][ T7563] EXT4-fs (loop4): Remounting filesystem read-only
[  104.459932][ T6736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.658103][ T7574] loop4: detected capacity change from 0 to 32768
[  104.869519][ T7590] loop4: detected capacity change from 0 to 512
[  104.884742][ T7590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  104.911557][ T7590] EXT4-fs (loop4): 1 truncate cleaned up
[  104.925057][ T7590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.955374][ T6736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.045620][ T7601] netlink: 32 bytes leftover after parsing attributes in process `syz.4.567'.
[  105.155528][ T7605] loop4: detected capacity change from 0 to 512
[  105.168763][ T7605] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.569: corrupted in-inode xattr: invalid ea_ino
[  105.178872][ T7605] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.569: couldn't read orphan inode 15 (err -117)
[  105.187133][ T7605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.248354][ T6736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.865278][ T7622] erspan1: entered allmulticast mode
[  105.922423][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'.
[  106.086310][ T7626] loop3: detected capacity change from 0 to 32768
[  106.088825][ T7626] XFS: noikeep mount option is deprecated.
[  106.090717][ T7626] XFS: ikeep mount option is deprecated.
[  106.109762][ T7640] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  106.126595][ T7626] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.164882][ T7626] XFS (loop3): Ending clean mount
[  106.238914][ T7654] No control pipe specified
[  107.728764][ T6149] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  107.795464][ T7678] netlink: 'syz.1.594': attribute type 4 has an invalid length.
[  107.812335][ T7678] netlink: 'syz.1.594': attribute type 4 has an invalid length.
[  108.084385][ T7682] netlink: 'syz.3.592': attribute type 12 has an invalid length.
[  108.203627][ T7686] mmap: syz.1.597 (7686) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  108.332367][ T7701] tmpfs: Bad value for 'mpol'
[  108.361807][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.606'.
[  108.393931][ T7705] loop3: detected capacity change from 0 to 8
[  108.402254][ T7705] SQUASHFS error: xz decompression failed, data probably corrupt
[  108.412168][ T7705] SQUASHFS error: Failed to read block 0x108: -5
[  108.463662][ T7705] SQUASHFS error: Unable to read metadata cache entry [106]
[  108.466131][ T7705] SQUASHFS error: Unable to read inode 0x11f
[  109.301702][ T7715] loop4: detected capacity change from 0 to 164
[  109.586119][ T7727] netlink: 'syz.4.615': attribute type 11 has an invalid length.
[  109.675194][ T7733] loop3: detected capacity change from 0 to 256
[  109.782717][ T5910] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  109.841560][ T7736] netlink: 'syz.3.619': attribute type 2 has an invalid length.
[  109.935918][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  109.939506][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  109.943898][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  109.949335][ T5910] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  109.952483][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.955594][ T5910] usb 2-1: Product: syz
[  109.957090][ T5910] usb 2-1: Manufacturer: syz
[  109.958797][ T5910] usb 2-1: SerialNumber: syz
[  109.962063][ T5910] usb 2-1: config 0 descriptor??
[  109.968192][ T7723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  109.970648][ T7723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  109.974548][ T5910] usb 2-1: ucan: probing device on interface #0
[  110.359103][ T7740] 9pnet_fd: p9_fd_create_tcp (7740): problem connecting socket to 127.0.0.1
[  110.717320][ T5910] usb 2-1: ucan: failed to retrieve device info
[  110.719405][ T5910] usb 2-1: ucan: probe failed; try to update the device firmware
[  110.728659][ T5910] usb 2-1: USB disconnect, device number 8
[  110.996835][ T7742] netlink: 'syz.3.621': attribute type 10 has an invalid length.
[  111.207318][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.622'.
[  111.427526][   T47] IPVS: starting estimator thread 0...
[  111.511552][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'.
[  111.517001][ T7758] bridge_slave_1: left allmulticast mode
[  111.519040][ T7758] bridge_slave_1: left promiscuous mode
[  111.521230][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.524630][ T7752] IPVS: using max 79 ests per chain, 189600 per kthread
[  111.529574][ T7758] bridge_slave_0: left allmulticast mode
[  111.531716][ T7758] bridge_slave_0: left promiscuous mode
[  111.535540][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.713912][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  111.872758][   T10] usb 2-1: Using ep0 maxpacket: 32
[  111.876857][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  111.884243][   T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  111.888099][   T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  111.891677][   T10] usb 2-1: Product: syz
[  111.894716][   T10] usb 2-1: Manufacturer: syz
[  111.896779][   T10] usb 2-1: SerialNumber: syz
[  111.900891][   T10] usb 2-1: config 0 descriptor??
[  112.013503][ T5883] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  112.127165][ T5910] usb 2-1: USB disconnect, device number 9
[  112.162714][ T5883] usb 4-1: Using ep0 maxpacket: 32
[  112.176107][ T5883] usb 4-1: config 0 has an invalid interface number: 108 but max is 0
[  112.179235][ T5883] usb 4-1: config 0 has no interface number 0
[  112.181591][ T5883] usb 4-1: config 0 interface 108 altsetting 180 endpoint 0x2 has invalid wMaxPacketSize 0
[  112.190028][ T5883] usb 4-1: config 0 interface 108 has no altsetting 0
[  112.208608][ T5883] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=97.c3
[  112.212111][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.215413][ T5883] usb 4-1: Product: syz
[  112.217623][ T5883] usb 4-1: Manufacturer: syz
[  112.220357][ T5883] usb 4-1: SerialNumber: syz
[  112.229948][ T5883] usb 4-1: config 0 descriptor??
[  112.236847][ T5883] ttusbir 4-1:0.108: cannot find expected altsetting
[  112.289897][ T7778] netlink: 11 bytes leftover after parsing attributes in process `syz.4.638'.
[  112.379675][ T7782] loop4: detected capacity change from 0 to 512
[  112.408647][ T7782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.415052][ T7782] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.448182][ T6736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.449596][ T5910] usb 4-1: USB disconnect, device number 6
[  112.497783][ T7788] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  112.505676][ T7787] IPVS: stopping master sync thread 7788 ...
[  112.596712][ T7792] loop4: detected capacity change from 0 to 1024
[  112.607531][ T7792] EXT4-fs: Ignoring removed bh option
[  112.615956][ T7792] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  112.622473][ T7792] EXT4-fs error (device loop4): ext4_quota_enable:7124: comm syz.4.643: inode #2304: comm syz.4.643: iget: illegal inode #
[  112.630169][ T7792] EXT4-fs (loop4): Remounting filesystem read-only
[  112.633279][ T7792] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  112.639379][ T7792] EXT4-fs (loop4): mount failed
[  112.809279][ T5913] IPVS: starting estimator thread 0...
[  112.892779][ T7801] IPVS: using max 46 ests per chain, 110400 per kthread
[  112.917328][ T7795] loop1: detected capacity change from 0 to 32768
[  112.932140][ T7805] loop4: detected capacity change from 0 to 1024
[  113.040967][ T7795] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  113.230755][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[  113.232350][ T7819] loop3: detected capacity change from 0 to 128
[  113.384973][ T7822] loop4: detected capacity change from 0 to 22
[  113.388339][ T7822] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  113.418442][ T7822] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  113.880857][ T7830] loop1: detected capacity change from 0 to 32768
[  113.950052][ T7830] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  113.965325][ T7830] XFS (loop1): Ending clean mount
[  114.007916][ T5851] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  114.097752][  T109] kworker/u9:2: attempt to access beyond end of device
[  114.097752][  T109] loop3: rw=1, sector=145, nr_sectors = 8 limit=128
[  114.111331][  T109] kworker/u9:2: attempt to access beyond end of device
[  114.111331][  T109] loop3: rw=1, sector=161, nr_sectors = 8 limit=128
[  114.117101][  T109] kworker/u9:2: attempt to access beyond end of device
[  114.117101][  T109] loop3: rw=1, sector=177, nr_sectors = 8 limit=128
[  114.133619][  T109] kworker/u9:2: attempt to access beyond end of device
[  114.133619][  T109] loop3: rw=1, sector=193, nr_sectors = 8 limit=128
[  114.138601][  T109] kworker/u9:2: attempt to access beyond end of device
[  114.138601][  T109] loop3: rw=1, sector=209, nr_sectors = 8 limit=128
[  114.145404][  T109] kworker/u9:2: attempt to access beyond end of device
[  114.145404][  T109] loop3: rw=1, sector=225, nr_sectors = 8 limit=128
[  114.151159][  T109] kworker/u9:2: attempt to access beyond end of device
[  114.151159][  T109] loop3: rw=1, sector=241, nr_sectors = 8 limit=128
[  114.159486][  T109] kworker/u9:2: attempt to access beyond end of device
[  114.159486][  T109] loop3: rw=1, sector=257, nr_sectors = 8 limit=128
[  114.186864][  T109] kworker/u9:2: attempt to access beyond end of device
[  114.186864][  T109] loop3: rw=1, sector=273, nr_sectors = 8 limit=128
[  114.212920][  T109] kworker/u9:2: attempt to access beyond end of device
[  114.212920][  T109] loop3: rw=1, sector=289, nr_sectors = 8 limit=128
[  114.288356][ T7844] capability: warning: `syz.3.662' uses 32-bit capabilities (legacy support in use)
[  114.704115][   T47] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  114.724656][ T7869] Bluetooth: MGMT ver 1.23
[  114.838014][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.675'.
[  114.846353][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'.
[  114.888781][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.893651][   T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  114.898781][   T47] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  114.902397][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.915569][   T47] usb 2-1: config 0 descriptor??
[  115.337420][   T47] wacom 0003:056A:0045.0004: Unknown device_type for 'HID 056a:0045'. Assuming pen.
[  115.344894][   T47] wacom 0003:056A:0045.0004: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.1-1/input0
[  115.353019][   T47] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0045.0004/input/input11
[  115.537105][   T47] usb 2-1: USB disconnect, device number 10
[  116.295746][ T7897] loop1: detected capacity change from 0 to 8
[  116.962691][ T5910] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  117.093759][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  117.117141][ T5910] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[  117.124473][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.153729][ T5910] usb 5-1: Product: syz
[  117.155628][ T5910] usb 5-1: Manufacturer: syz
[  117.157834][ T5910] usb 5-1: SerialNumber: syz
[  117.164287][ T5910] usb 5-1: config 0 descriptor??
[  117.320322][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'.
[  117.403463][ T5910] hso 5-1:0.0: Failed to find BULK IN ep
[  117.618095][   T47] usb 5-1: USB disconnect, device number 5
[  118.106118][ T7937] loop3: detected capacity change from 0 to 512
[  118.188681][ T7937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.201075][ T7937] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.322318][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.051323][ T7962] bridge1: entered allmulticast mode
[  119.491919][ T7976] loop3: detected capacity change from 0 to 32768
[  119.590598][ T7976] JBD2: Ignoring recovery information on journal
[  119.643227][ T7976] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  119.758339][ T6149] ocfs2: Unmounting device (7,3) on (node local)
[  120.213888][ T5913] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  120.383375][ T5913] usb 4-1: Using ep0 maxpacket: 16
[  120.393465][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short
[  120.397341][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -71
[  120.399936][ T5913] usb 4-1: can't read configurations, error -71
[  120.890286][ T8041] evm: overlay not supported
[  121.269504][ T8053] syz.3.755 (8053): /proc/8052/oom_adj is deprecated, please use /proc/8052/oom_score_adj instead.
[  121.324700][ T8049] loop1: detected capacity change from 0 to 32768
[  121.331658][ T8049] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.753 (8049)
[  121.340033][ T8049] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.345484][ T8049] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  121.348719][ T8049] BTRFS info (device loop1): using free-space-tree
[  121.549539][ T5851] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.592006][ T8084] loop3: detected capacity change from 0 to 128
[  121.626805][ T8086] loop4: detected capacity change from 0 to 2048
[  121.631787][ T8086] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.433787][ T1093] bio_check_eod: 102 callbacks suppressed
[  122.433807][ T1093] kworker/u9:7: attempt to access beyond end of device
[  122.433807][ T1093] loop3: rw=1, sector=145, nr_sectors = 896 limit=128
[  122.686837][ T8097] loop1: detected capacity change from 0 to 32768
[  122.690743][ T8097] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.767 (8097)
[  122.704721][ T8097] BTRFS info (device loop1): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  122.712521][ T8097] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  122.772066][ T8097] BTRFS info (device loop1): using free-space-tree
[  122.819377][ T8103] loop3: detected capacity change from 0 to 32768
[  122.839701][ T8113] loop4: detected capacity change from 0 to 1024
[  122.858491][ T8103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.770 (8103)
[  122.887633][ T8103] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.894490][ T8103] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  122.898261][ T8103] BTRFS info (device loop3): using free-space-tree
[  122.958471][ T5851] BTRFS info (device loop1): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  123.158845][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  123.158862][   T33] audit: type=1800 audit(1755047800.603:34): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.770" name="bus" dev="loop3" ino=263 res=0 errno=0
[  123.256184][ T6149] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.528513][ T8158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.676236][   T33] audit: type=1326 audit(1755047801.113:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af958ebe9 code=0x7ffc0000
[  123.695211][   T33] audit: type=1326 audit(1755047801.113:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af958ebe9 code=0x7ffc0000
[  123.741461][   T33] audit: type=1326 audit(1755047801.113:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.774" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5af958ebe9 code=0x7ffc0000
[  123.810284][   T33] audit: type=1326 audit(1755047801.113:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af958ebe9 code=0x7ffc0000
[  123.842335][   T33] audit: type=1326 audit(1755047801.123:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af958ebe9 code=0x7ffc0000
[  123.856921][   T33] audit: type=1326 audit(1755047801.123:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.774" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5af958ebe9 code=0x7ffc0000
[  123.865910][   T33] audit: type=1326 audit(1755047801.123:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af958ebe9 code=0x7ffc0000
[  123.883778][   T33] audit: type=1326 audit(1755047801.123:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.774" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af958ebe9 code=0x7ffc0000
[  123.891789][   T33] audit: type=1326 audit(1755047801.123:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.774" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f5af958ebe9 code=0x7ffc0000
[  123.993368][ T8163] loop1: detected capacity change from 0 to 32768
[  124.000788][ T8163] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.780 (8163)
[  124.027348][ T8163] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  124.032929][ T8163] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  124.037473][ T8163] BTRFS info (device loop1): using free-space-tree
[  124.108784][ T8186] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  124.134188][ T8163] BTRFS info (device loop1): checking UUID tree
[  124.179227][ T8194] loop4: detected capacity change from 0 to 1024
[  124.297688][ T8163] BTRFS info (device loop1): balance: start -d -m
[  124.309858][ T8163] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata
[  124.355463][ T8163] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata
[  124.593753][ T8163] BTRFS info (device loop1): balance: canceled
[  124.619036][ T5851] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  124.964981][ T8209] loop3: detected capacity change from 0 to 4096
[  125.015499][ T8209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.087115][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.142388][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'.
[  125.352722][ T5910] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  125.504650][ T5910] usb 5-1: config 2 has an invalid interface number: 211 but max is 0
[  125.508326][ T5910] usb 5-1: config 2 has no interface number 0
[  125.511031][ T5910] usb 5-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  125.515755][ T5910] usb 5-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  125.521704][ T5910] usb 5-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95
[  125.525873][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.530216][ T5910] usb 5-1: Product: syz
[  125.532033][ T5910] usb 5-1: Manufacturer: syz
[  125.534777][ T5910] usb 5-1: SerialNumber: syz
[  125.542067][ T8215] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  125.549712][ T5910] em28xx 5-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211)
[  125.553264][ T5910] em28xx 5-1:2.211: Device initialization failed.
[  125.555641][ T5910] em28xx 5-1:2.211: Device must be connected to a high-speed USB 2.0 port.
[  125.662859][ T5883] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  125.755141][ T5910] usb 5-1: USB disconnect, device number 6
[  125.817015][ T5883] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[  125.820492][ T5883] usb 4-1: config 0 has no interface number 0
[  125.826269][ T5883] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  125.829322][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.832008][ T5883] usb 4-1: Product: syz
[  125.833542][ T5883] usb 4-1: Manufacturer: syz
[  125.835190][ T5883] usb 4-1: SerialNumber: syz
[  125.838800][ T5883] usb 4-1: config 0 descriptor??
[  126.361438][ T8242] loop1: detected capacity change from 0 to 4096
[  126.369189][ T8242] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  126.399801][ T5883] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[  126.407469][ T5883] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[  126.411929][ T5883] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[  126.414328][ T8242] ntfs3(loop1): ino=19, mi_enum_attr
[  126.415621][ T5883] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[  126.433383][ T5883] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  126.570512][ T5913] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  126.656877][   T24] usb 4-1: USB disconnect, device number 9
[  126.671189][   T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  126.683464][   T24] keyspan 4-1:0.133: device disconnected
[  126.727531][ T5913] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  126.731543][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.736095][ T5913] usb 5-1: Product: syz
[  126.737956][ T5913] usb 5-1: Manufacturer: syz
[  126.739967][ T5913] usb 5-1: SerialNumber: syz
[  126.744765][ T5913] usb 5-1: config 0 descriptor??
[  127.035844][ T8257] netlink: del zone limit has 4 unknown bytes
[  127.159827][ T5913] airspy 5-1:0.0: Board ID: 00
[  127.161902][ T5913] airspy 5-1:0.0: Firmware version: 
[  127.864082][ T8263] loop3: detected capacity change from 0 to 2048
[  127.908750][ T8263] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.118401][ T5913] airspy 5-1:0.0: usb_control_msg() failed -71 request 12
[  128.134609][ T5913] airspy 5-1:0.0: Registered as swradio24
[  128.136825][ T5913] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  128.159090][ T5913] usb 5-1: USB disconnect, device number 7
[  128.452480][ T8268] loop1: detected capacity change from 0 to 32768
[  128.468227][ T8268] XFS: noikeep mount option is deprecated.
[  128.519665][ T8277] loop3: detected capacity change from 0 to 1024
[  128.522333][ T8268] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  128.537824][ T8277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.565375][ T8268] XFS (loop1): Ending clean mount
[  128.593635][ T8268] XFS (loop1): Quotacheck needed: Please wait.
[  128.674033][ T8268] XFS (loop1): Quotacheck: Done.
[  128.710390][ T5851] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.289990][ T8288] loop4: detected capacity change from 0 to 40427
[  129.307688][ T8288] F2FS-fs (loop4): invalid crc value
[  129.453454][ T8288] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.457337][ T8288] F2FS-fs (loop4): Start checkpoint disabled!
[  129.462875][ T8288] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  129.478173][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.519201][   T33] kauditd_printk_skb: 11 callbacks suppressed
[  129.519218][   T33] audit: type=1800 audit(1755047806.963:55): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.817" name="file1" dev="loop4" ino=10 res=0 errno=0
[  129.549492][ T8288] syz.4.817: attempt to access beyond end of device
[  129.549492][ T8288] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  129.577088][ T8300] loop1: detected capacity change from 0 to 1024
[  129.605203][ T8302] loop3: detected capacity change from 0 to 8
[  129.607552][ T8300] EXT4-fs: Ignoring removed nobh option
[  129.611283][ T8300] EXT4-fs: Ignoring removed bh option
[  129.630355][ T8302] SQUASHFS error: lzo decompression failed, data probably corrupt
[  129.634622][  T589] kworker/u9:3: attempt to access beyond end of device
[  129.634622][  T589] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  129.642379][  T589] CPU: 1 UID: 0 PID: 589 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  129.642399][  T589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.642407][  T589] Workqueue: writeback wb_workfn (flush-7:4)
[  129.642429][  T589] Call Trace:
[  129.642434][  T589]  <TASK>
[  129.642441][  T589]  dump_stack_lvl+0x189/0x250
[  129.642461][  T589]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.642477][  T589]  ? __pfx_queue_work_on+0x10/0x10
[  129.642489][  T589]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.642504][  T589]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.642527][  T589]  f2fs_handle_critical_error+0x37c/0x540
[  129.642569][  T589]  f2fs_write_end_io+0x886/0xb60
[  129.642604][  T589]  __submit_merged_bio+0x27a/0x6a0
[  129.642625][  T589]  __submit_merged_write_cond+0x255/0x530
[  129.642647][  T589]  f2fs_write_data_pages+0x261d/0x3000
[  129.642693][  T589]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.642722][  T589]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  129.642770][  T589]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  129.642798][  T589]  ? trace_f2fs_writepages+0x7f/0x200
[  129.642815][  T589]  ? f2fs_write_node_pages+0x478/0x6e0
[  129.642834][  T589]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  129.642862][  T589]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.642879][  T589]  do_writepages+0x32e/0x550
[  129.642901][  T589]  ? reacquire_held_locks+0x127/0x1d0
[  129.642914][  T589]  ? writeback_sb_inodes+0x384/0x1010
[  129.642938][  T589]  __writeback_single_inode+0x145/0xff0
[  129.642953][  T589]  ? do_raw_spin_unlock+0x4d/0x240
[  129.642972][  T589]  writeback_sb_inodes+0x6c7/0x1010
[  129.643012][  T589]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  129.643064][  T589]  ? rcu_is_watching+0x15/0xb0
[  129.643087][  T589]  wb_writeback+0x43b/0xaf0
[  129.643116][  T589]  ? queue_io+0x331/0x590
[  129.643160][  T589]  ? __pfx_wb_writeback+0x10/0x10
[  129.643185][  T589]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.643204][  T589]  wb_workfn+0x409/0xef0
[  129.643231][  T589]  ? __pfx_wb_workfn+0x10/0x10
[  129.643249][  T589]  ? __lock_acquire+0xab9/0xd20
[  129.643277][  T589]  ? process_scheduled_works+0x9ef/0x17b0
[  129.643296][  T589]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.643308][  T589]  ? process_scheduled_works+0x9ef/0x17b0
[  129.643319][  T589]  ? process_scheduled_works+0x9ef/0x17b0
[  129.643333][  T589]  process_scheduled_works+0xae1/0x17b0
[  129.643370][  T589]  ? __pfx_process_scheduled_works+0x10/0x10
[  129.643405][  T589]  worker_thread+0x8a0/0xda0
[  129.643421][  T589]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.643442][  T589]  ? __kthread_parkme+0x7b/0x200
[  129.643465][  T589]  kthread+0x711/0x8a0
[  129.643484][  T589]  ? __pfx_worker_thread+0x10/0x10
[  129.643496][  T589]  ? __pfx_kthread+0x10/0x10
[  129.643513][  T589]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.643525][  T589]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.643538][  T589]  ? __pfx_kthread+0x10/0x10
[  129.643555][  T589]  ret_from_fork+0x3fc/0x770
[  129.643571][  T589]  ? __pfx_ret_from_fork+0x10/0x10
[  129.643590][  T589]  ? __switch_to_asm+0x39/0x70
[  129.643604][  T589]  ? __switch_to_asm+0x33/0x70
[  129.643618][  T589]  ? __pfx_kthread+0x10/0x10
[  129.643634][  T589]  ret_from_fork_asm+0x1a/0x30
[  129.643664][  T589]  </TASK>
[  129.647153][ T8300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.656073][  T589] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  129.660697][ T8302] SQUASHFS error: Failed to read block 0x91: -5
[  129.795656][ T8302] SQUASHFS error: Unable to read metadata cache entry [8f]
[  129.799199][ T8302] SQUASHFS error: Unable to read inode 0x11f
[  129.820687][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.915721][ T8308] loop1: detected capacity change from 0 to 2048
[  129.943771][ T8308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.949026][ T8308] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.020111][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.124738][ T8313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'.
[  130.251240][ T8319] loop1: detected capacity change from 0 to 4096
[  130.272342][ T8319] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  130.278856][ T8319] ntfs3(loop1): Failed to load $LogFile (-22).
[  130.508717][ T8318] loop3: detected capacity change from 0 to 32768
[  130.523159][ T8318] (syz.3.828,8318,0):ocfs2_verify_volume:2312 ERROR: bad cluster size bit found: 8
[  130.537367][ T8318] (syz.3.828,8318,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  130.540927][ T8318] (syz.3.828,8318,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  130.552816][ T8318] (syz.3.828,8318,0):ocfs2_fill_super:1177 ERROR: status = -22
[  130.702376][ T8333] loop3: detected capacity change from 0 to 64
[  130.854850][ T8336] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.836'.
[  130.940498][ T8339] loop3: detected capacity change from 0 to 256
[  131.059680][ T8341] netlink: 100 bytes leftover after parsing attributes in process `syz.3.839'.
[  131.149650][ T8343] loop3: detected capacity change from 0 to 512
[  131.188968][ T8343] EXT4-fs: Ignoring removed nomblk_io_submit option
[  131.196195][ T8343] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  131.199517][ T8343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[  131.204243][ T8343] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  131.208440][ T8343] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[  131.215253][ T8343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  131.228442][ T8343] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.840: dx entry: limit 65535 != root limit 120
[  131.235297][ T8343] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.840: Corrupt directory, running e2fsck is recommended
[  131.240811][ T8343] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.840: path /255/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  131.282038][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.379498][ T8347] loop3: detected capacity change from 0 to 1024
[  131.425469][ T8347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.462498][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.467783][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.495864][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'.
[  132.887965][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.984087][ T5910] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  133.133799][ T5910] usb 5-1: Using ep0 maxpacket: 32
[  133.137085][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.140891][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.148052][ T5910] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[  133.161967][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.168557][ T5910] usb 5-1: config 0 descriptor??
[  133.590338][ T5910] hid-alps 0003:044E:1215.0005: collection stack underflow
[  133.602738][ T5910] hid-alps 0003:044E:1215.0005: item 0 2 0 12 parsing failed
[  133.606259][ T5910] hid-alps 0003:044E:1215.0005: parse failed
[  133.608756][ T5910] hid-alps 0003:044E:1215.0005: probe with driver hid-alps failed with error -22
[  133.789400][ T5913] usb 5-1: USB disconnect, device number 8
[  134.760162][ T8408] loop4: detected capacity change from 0 to 32768
[  134.773243][ T8408] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.833199][ T8408] XFS (loop4): Ending clean mount
[  134.842188][ T8408] XFS (loop4): Quotacheck needed: Please wait.
[  134.886665][ T8408] XFS (loop4): Quotacheck: Done.
[  134.922837][ T5883] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  134.944705][ T6736] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.075383][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  135.079981][ T5883] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[  135.084003][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.090312][ T5883] usb 4-1: config 0 descriptor??
[  135.298528][ T8415] Bluetooth: hci0: unsupported parameter 4096
[  135.300776][ T8415] Bluetooth: hci0: invalid len left 4, exp >= 243
[  135.311789][ T5883] usbhid 4-1:0.0: can't add hid device: -71
[  135.314708][ T5883] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  135.325099][ T5883] usb 4-1: USB disconnect, device number 10
[  135.619027][ T8445] netlink: 'syz.1.880': attribute type 1 has an invalid length.
[  135.965883][ T8459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.885'.
[  136.242398][ T8455] loop1: detected capacity change from 0 to 32768
[  136.258876][ T8455] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.884 (8455)
[  136.284421][ T8455] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  136.290918][ T8455] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  136.296041][ T8455] BTRFS info (device loop1): using free-space-tree
[  136.523776][   T33] audit: type=1800 audit(1755047813.963:56): pid=8455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.884" name="file1" dev="loop1" ino=260 res=0 errno=0
[  136.763769][ T5851] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  136.910891][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'.
[  137.100896][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'.
[  137.620292][ T8499] netlink: 'syz.3.895': attribute type 21 has an invalid length.
[  137.624363][ T8499] netlink: 156 bytes leftover after parsing attributes in process `syz.3.895'.
[  138.121874][ T8525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.305793][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.491409][ T8537] loop1: detected capacity change from 0 to 1024
[  138.515402][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.519551][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.523716][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.526978][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.535963][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.539208][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.550943][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.560282][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.564756][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.567964][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.571374][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.576846][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.580205][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.589017][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.592352][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.597550][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.600779][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.605042][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.608383][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.611749][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.621419][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.650367][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.654402][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.657715][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.660134][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.662484][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.665682][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.668024][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.670663][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.675893][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.679048][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.682020][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.685861][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.817055][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.851080][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.863693][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.874433][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.891784][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.909402][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.914293][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.917552][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.920808][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.925948][ T8537] hfsplus: request for non-existent node 16777216 in B*Tree
[  138.929325][   T33] audit: type=1800 audit(1755047816.373:57): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.911" name="file1" dev="loop1" ino=20 res=0 errno=0
[  139.296866][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88801fdb6c00: rx timeout, send abort
[  139.333761][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.340462][ T8550] loop4: detected capacity change from 0 to 32768
[  139.355280][ T8550] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.917 (8550)
[  139.383008][ T8550] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.387359][ T8550] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  139.390182][ T8550] BTRFS info (device loop4): using free-space-tree
[  139.440935][ T8558] loop3: detected capacity change from 0 to 512
[  139.490757][ T8558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.497061][  T109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.504232][ T8558] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.522503][ T8558] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  139.526940][ T8558] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  139.530370][ T8558] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.918: Failed to acquire dquot type 1
[  139.568500][   T33] audit: type=1800 audit(1755047817.013:58): pid=8550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.917" name="file0" dev="loop4" ino=258 res=0 errno=0
[  139.581708][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.646362][ T6736] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.797911][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88801fdb5c00: rx timeout, send abort
[  139.802511][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88801fdb6c00: abort rx timeout. Force session deactivation
[  139.847601][ T8580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.025237][ T8594] netlink: 'syz.1.930': attribute type 5 has an invalid length.
[  140.097150][   T33] audit: type=1326 audit(1755047817.543:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.1.932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  140.118354][   T33] audit: type=1326 audit(1755047817.563:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.1.932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  140.143564][   T33] audit: type=1326 audit(1755047817.573:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.1.932" exe="/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  140.163838][   T33] audit: type=1326 audit(1755047817.573:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.1.932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  140.174315][   T33] audit: type=1326 audit(1755047817.573:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.1.932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b978ebe9 code=0x7ffc0000
[  140.300704][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88801fdb5c00: abort rx timeout. Force session deactivation
[  140.402482][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.692826][   T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  140.773154][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.846516][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.851202][   T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  140.856861][   T47] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  140.860669][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.873300][   T47] usb 2-1: config 0 descriptor??
[  141.030751][ T8640] syz.3.951 (8640) used obsolete PPPIOCDETACH ioctl
[  141.283659][   T47] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  141.301065][   T47] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  141.412979][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.504933][ T8660] loop4: detected capacity change from 0 to 128
[  141.510341][ T8660] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  141.518986][ T8660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.561128][   T47] usb 2-1: USB disconnect, device number 11
[  142.063151][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.665746][ T8692] loop1: detected capacity change from 0 to 32768
[  142.680120][ T8692] JBD2: Ignoring recovery information on journal
[  142.731154][ T8692] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  142.807406][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[  142.893346][ T5911] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  143.493443][   T47] net_ratelimit: 3 callbacks suppressed
[  143.493463][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.708716][ T8722] loop4: detected capacity change from 0 to 1024
[  143.740568][ T8722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.751936][ T8722] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.761612][   T33] audit: type=1800 audit(1755048077.201:64): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.981" name="file1" dev="loop4" ino=15 res=0 errno=0
[  143.764110][ T8722] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  143.781246][ T8722] EXT4-fs (loop4): Remounting filesystem read-only
[  143.805777][ T6736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.448880][ T8743] loop1: detected capacity change from 0 to 65536
[  144.474343][ T8743] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  144.495588][ T8743] XFS (loop1): Ending clean mount
[  144.533390][ T3145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.548294][ T5851] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  144.752824][ T5910] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  144.904290][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.912815][ T5910] usb 5-1: config 0 has no interfaces?
[  144.915148][ T5910] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  144.922829][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.934463][ T5910] usb 5-1: config 0 descriptor??
[  145.155372][ T8773] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1001'.
[  145.227402][ T8775] loop3: detected capacity change from 0 to 1024
[  145.253835][  T589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.268125][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'.
[  145.272204][ T8775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  145.276847][ T8775] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  145.277417][   T47] usb 5-1: USB disconnect, device number 9
[  145.286219][ T8775] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  145.301914][ T8775] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1002: Freeing blocks not in datazone - block = 0, count = 4096
[  145.311283][ T8775] EXT4-fs (loop3): Remounting filesystem read-only
[  145.315425][ T8775] EXT4-fs (loop3): 1 orphan inode deleted
[  145.323324][ T8775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.364758][ T8779] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  145.377025][ T8779] cramfs: wrong magic
[  145.520915][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.653473][   T27] EXT4-fs (loop3): Quota write (off=3072, len=1024) cancelled because transaction is not started
[  145.657500][   T27] Quota error (device loop3): write_blk: dquota write failed
[  145.660736][ T3145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.662291][   T27] Quota error (device loop3): free_dqentry: Can't move quota data block (2) to free list
[  145.880242][ T8787] loop3: detected capacity change from 0 to 8192
[  145.899692][ T8787] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.916170][ T8787] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046)
[  145.919906][ T8787] FAT-fs (loop3): Filesystem has been set read-only
[  145.983985][ T6149] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046)
[  146.075477][ T8789] loop4: detected capacity change from 0 to 4096
[  146.155995][ T8789] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  146.190513][ T8789] ntfs3(loop4): ino=1a, mi_enum_attr
[  146.195134][ T8789] ntfs3(loop4): ino=1a, mi_enum_attr
[  146.197545][ T8789] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  146.247702][ T8789] ntfs3(loop4): ino=1a, mi_enum_attr
[  146.492942][ T3145] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  146.501865][ T8820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1019'.
[  146.502436][ T8818] loop3: detected capacity change from 0 to 2048
[  146.506406][ T8820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1019'.
[  146.527811][ T8818] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  146.551983][ T8821] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.557973][ T8818] syz.3.1018: attempt to access beyond end of device
[  146.557973][ T8818] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  146.666889][ T3145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.671261][ T3145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.694080][ T3145] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  146.697732][ T3145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.724574][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.730415][ T3145] usb 2-1: config 0 descriptor??
[  146.829342][ T8838] loop3: detected capacity change from 0 to 8
[  146.833310][ T8838] SQUASHFS error: Failed to read block 0x62: -5
[  146.835650][ T8838] squashfs image failed sanity check
[  147.111459][ T8844] loop3: detected capacity change from 0 to 40427
[  147.120474][ T8844] F2FS-fs (loop3): build fault injection rate: 14
[  147.125500][ T8844] F2FS-fs (loop3): build fault injection type: 0xe
[  147.129369][ T8844] F2FS-fs (loop3): invalid crc value
[  147.133421][ T8844] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  147.143959][ T8844] F2FS-fs (loop3): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4462/0x6ff0
[  147.147858][ T8844] F2FS-fs (loop3): Failed to initialize F2FS node manager (-12)
[  147.165659][ T3145] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0
[  147.201221][ T8846] loop4: detected capacity change from 0 to 32768
[  147.242228][   T33] audit: type=1800 audit(1755048080.681:65): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1031" name="file1" dev="loop4" ino=4 res=0 errno=0
[  147.690565][ T8863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1038'.
[  147.733220][ T3145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.757881][ T3145] usb 2-1: USB disconnect, device number 12
[  147.812847][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.246476][ T8890] loop4: detected capacity change from 0 to 256
[  148.267756][ T8890] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  148.273323][ T8890] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  148.288323][ T8890] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  148.301839][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.458464][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.624569][   T33] audit: type=1800 audit(1755048082.061:66): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1051" name="file1" dev="loop4" ino=1048607 res=0 errno=0
[  149.417558][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.235637][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.494108][ T8902] loop3: detected capacity change from 0 to 262144
[  150.532080][ T8902] F2FS-fs (loop3): invalid crc value
[  150.585785][ T8902] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  150.590263][ T8902] F2FS-fs (loop3): Start checkpoint disabled!
[  150.601285][ T8902] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  150.624468][ T3145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.034911][ T8918] sd 0:0:0:0: PR command failed: 1026
[  151.045090][ T8918] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  151.047314][ T8918] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  151.386777][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'.
[  151.914621][   T33] audit: type=1326 audit(1755048085.351:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.4.1069" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5af958ebe9 code=0x0
[  152.141471][ T8952] vlan2: entered allmulticast mode
[  152.143784][ T8952] veth1: entered allmulticast mode
[  152.472723][   T47] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  152.623314][   T47] usb 4-1: Using ep0 maxpacket: 32
[  152.638183][   T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.648557][   T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.652847][   T47] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.665936][   T47] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  152.671179][   T47] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  152.675742][   T47] usb 4-1: Product: syz
[  152.677634][   T47] usb 4-1: Manufacturer: syz
[  152.679606][   T47] usb 4-1: SerialNumber: syz
[  152.699697][   T47] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input17
[  152.706800][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.916366][   T24] usb 4-1: USB disconnect, device number 11
[  152.934275][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.950642][   T24] appletouch 4-1:1.0: input: appletouch disconnected
[  153.003860][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.008809][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.096290][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'.
[  153.100204][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'.
[  153.507586][ T9000] loop4: detected capacity change from 0 to 1024
[  153.540018][ T9000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.621470][ T6736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.916178][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'.
[  153.967304][ T9002] loop3: detected capacity change from 0 to 32768
[  154.006605][   T33] audit: type=1800 audit(1755048087.451:68): pid=9002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1097" name="bus" dev="loop3" ino=7 res=0 errno=0
[  154.098975][ T5910] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  154.203877][ T9032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.254757][ T5910] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.265183][ T5910] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  154.273452][ T5910] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  154.282755][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  154.286138][ T5910] usb 2-1: SerialNumber: syz
[  154.525276][ T5910] usb 2-1: 0:2 : does not exist
[  154.555154][ T5910] usb 2-1: USB disconnect, device number 13
[  154.575217][   T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  154.722741][   T24] usb 4-1: Using ep0 maxpacket: 8
[  154.726967][   T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  154.730658][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  154.740353][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  154.750299][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  154.754944][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  154.763251][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  154.767074][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.013719][   T24] usb 4-1: GET_CAPABILITIES returned 0
[  155.022241][   T24] usbtmc 4-1:16.0: can't read capabilities
[  155.223525][  T792] usb 4-1: USB disconnect, device number 12
[  156.180066][ T9083] loop3: detected capacity change from 0 to 128
[  156.235582][ T9083] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  156.244608][ T9083] ext4 filesystem being mounted at /352/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  156.327009][ T9089] warning: `syz.1.1138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  156.381157][ T6149] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  156.448621][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'.
[  156.495598][ T9101] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1144'.
[  156.615587][ T9096] loop3: detected capacity change from 0 to 32768
[  156.650902][ T9096] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  156.676726][ T9096] XFS (loop3): Ending clean mount
[  156.684288][ T9096] XFS (loop3): Quotacheck needed: Please wait.
[  156.714858][  T792] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  156.718106][ T9096] XFS (loop3): Quotacheck: Done.
[  156.753459][ T6149] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  156.895122][  T792] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  156.898197][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.906431][  T792] usb 5-1: config 0 descriptor??
[  157.065426][ T9133] netlink: 'syz.3.1152': attribute type 9 has an invalid length.
[  157.118388][  T792] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  157.338117][  T792] [drm:udl_init] *ERROR* Selecting channel failed
[  157.396682][  T792] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 3
[  157.412457][  T792] [drm] Initialized udl on minor 3
[  157.419884][  T792] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  157.447184][  T792] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  157.467788][ T5910] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  157.471503][ T5910] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  157.478050][  T792] usb 5-1: USB disconnect, device number 10
[  157.564866][ T9149] loop3: detected capacity change from 0 to 512
[  157.577573][ T9149] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1160: casefold flag without casefold feature
[  157.590425][ T9149] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1160: couldn't read orphan inode 15 (err -117)
[  157.605988][ T9149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.619883][ T9149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.769717][ T9155] loop3: detected capacity change from 0 to 512
[  157.791725][ T9155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.796759][ T9155] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.832782][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.491987][ T9173] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1167'.
[  158.497372][ T9173] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1167'.
[  158.557990][ T9177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  158.560861][ T9177] IPv6: NLM_F_CREATE should be set when creating new route
[  158.567241][ T9177] lo: entered allmulticast mode
[  158.570583][ T9177] tunl0: entered allmulticast mode
[  158.575246][ T9177] gre0: entered allmulticast mode
[  158.581528][ T9177] gretap0: entered allmulticast mode
[  158.587563][ T9177] erspan0: entered allmulticast mode
[  158.591748][ T9177] ip_vti0: entered allmulticast mode
[  158.597585][ T9177] ip6_vti0: entered allmulticast mode
[  158.601377][ T9177] sit0: entered allmulticast mode
[  158.610963][ T9177] ip6tnl0: entered allmulticast mode
[  158.616977][ T9177] ip6gre0: entered allmulticast mode
[  158.620705][ T9177] ip6gretap0: entered allmulticast mode
[  158.627122][ T9177] vcan0: entered allmulticast mode
[  158.630842][ T9177] bond0: entered allmulticast mode
[  158.632883][ T9177] bond_slave_0: entered allmulticast mode
[  158.634970][ T9177] bond_slave_1: entered allmulticast mode
[  158.641521][ T9177] team0: entered allmulticast mode
[  158.643417][ T9177] team_slave_0: entered allmulticast mode
[  158.645334][ T9177] team_slave_1: entered allmulticast mode
[  158.651987][ T9177] dummy0: entered allmulticast mode
[  158.661812][ T9177] nlmon0: entered allmulticast mode
[  158.665361][ T9177] caif0: entered allmulticast mode
[  158.667786][ T9177] batadv0: entered allmulticast mode
[  158.674451][ T9177] vxcan0: entered allmulticast mode
[  158.677666][ T9177] vxcan1: entered allmulticast mode
[  158.680549][ T9177] veth0: entered allmulticast mode
[  158.697262][ T9177] wg0: entered allmulticast mode
[  158.716191][ T9177] wg1: entered allmulticast mode
[  158.720122][ T9177] wg2: entered allmulticast mode
[  158.725655][ T9177] veth0_to_bridge: entered allmulticast mode
[  158.731487][ T9177] bridge_slave_0: entered allmulticast mode
[  158.738277][ T9177] veth1_to_bridge: entered allmulticast mode
[  158.746094][ T9177] bridge_slave_1: entered allmulticast mode
[  158.750968][ T9177] veth0_to_bond: entered allmulticast mode
[  158.764047][ T9177] veth1_to_bond: entered allmulticast mode
[  158.773659][ T9177] veth0_to_team: entered allmulticast mode
[  158.781752][ T9177] veth1_to_team: entered allmulticast mode
[  158.789857][ T9177] veth0_to_batadv: entered allmulticast mode
[  158.795183][ T9177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.805750][ T9177] batadv_slave_0: entered allmulticast mode
[  158.824457][ T9177] veth1_to_batadv: entered allmulticast mode
[  158.828171][ T9177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.829078][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1170'.
[  158.831052][ T9177] batadv_slave_1: entered allmulticast mode
[  158.840119][ T9177] xfrm0: entered allmulticast mode
[  158.844792][ T9177] veth0_to_hsr: entered allmulticast mode
[  158.849242][ T9177] hsr_slave_0: entered allmulticast mode
[  158.853585][ T9177] veth1_to_hsr: entered allmulticast mode
[  158.860944][ T9177] hsr_slave_1: entered allmulticast mode
[  158.867101][ T9177] hsr0: entered allmulticast mode
[  158.873724][ T9177] veth1_virt_wifi: entered allmulticast mode
[  158.882993][ T9177] veth0_virt_wifi: entered allmulticast mode
[  158.888140][ T9177] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  158.892952][ T9177] veth1_vlan: entered allmulticast mode
[  158.897337][ T9177] veth0_vlan: entered allmulticast mode
[  158.899449][ T9177] vlan0: entered allmulticast mode
[  158.901342][ T9177] vlan1: entered allmulticast mode
[  158.905197][ T9177] macvlan0: entered allmulticast mode
[  158.913827][ T9177] macvlan1: entered allmulticast mode
[  158.917420][ T9177] ipvlan0: entered allmulticast mode
[  158.919374][ T9177] ipvlan1: entered allmulticast mode
[  158.921920][ T9177] veth1_macvtap: entered allmulticast mode
[  158.927983][ T9177] veth0_macvtap: entered allmulticast mode
[  158.935582][ T9177] macvtap0: entered allmulticast mode
[  158.939171][ T9177] macsec0: entered allmulticast mode
[  158.948303][ T9177] geneve0: entered allmulticast mode
[  158.965093][ T9177] geneve1: entered allmulticast mode
[  158.977040][ T9177] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  158.983876][ T9177] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  158.996249][ T9177] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  159.004549][ T9177] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  159.026418][ T9177] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  159.042093][ T9177] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  159.047119][ T9177] bond1: entered allmulticast mode
[  159.049315][ T9177] bond2: entered allmulticast mode
[  159.052165][ T9177] ip6tnl1: entered allmulticast mode
[  159.055840][ T9177] bridge1: entered allmulticast mode
[  159.058062][ T9177] syztnl1: entered allmulticast mode
[  159.065930][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.072766][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.101390][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.110246][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.879032][ T9214] loop1: detected capacity change from 0 to 1024
[  159.884783][ T9214] EXT4-fs: Ignoring removed nobh option
[  159.914378][ T9214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.129487][ T9235] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1193'.
[  161.520347][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.594617][ T9245] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component
[  161.959187][ T9247] loop3: detected capacity change from 0 to 32768
[  161.965910][ T9247] btrfs: Deprecated parameter 'usebackuproot'
[  161.968922][ T9247] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  161.985155][ T9247] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1199 (9247)
[  162.026249][ T9247] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.030777][ T9247] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  162.055645][ T9247] BTRFS info (device loop3): using free-space-tree
[  162.138810][ T9255] loop1: detected capacity change from 0 to 32768
[  162.155149][ T9255] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1202 (9255)
[  162.166035][ T2972] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  162.172278][ T9247] BTRFS warning (device loop3): couldn't read tree root
[  162.183446][ T9247] BTRFS warning (device loop3): try to load backup roots slot 1
[  162.189153][ T2972] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  162.198309][ T9255] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  162.202470][ T9255] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  162.206886][ T9247] BTRFS warning (device loop3): couldn't read tree root
[  162.210019][ T9247] BTRFS warning (device loop3): try to load backup roots slot 2
[  162.212883][ T9255] BTRFS info (device loop1): using free-space-tree
[  162.214712][ T2972] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  162.220408][ T9247] BTRFS warning (device loop3): couldn't read tree root
[  162.223760][ T9247] BTRFS warning (device loop3): try to load backup roots slot 3
[  162.244303][ T9247] BTRFS info (device loop3): rebuilding free space tree
[  162.309662][ T9247] BTRFS info (device loop3): checking UUID tree
[  162.342696][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  162.416441][ T5851] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  162.520746][   T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  162.542304][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.563090][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.567100][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  162.595064][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  162.601399][   T24] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  162.611829][   T24] usb 5-1: Manufacturer: syz
[  162.639289][   T24] usb 5-1: config 0 descriptor??
[  162.779445][ T6149] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.264118][   T24] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[  163.341320][   T24] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  164.136967][ T9327] random: crng reseeded on system resumption
[  164.660854][ T9332] delete_channel: no stack
[  164.767772][ T9337] loop3: detected capacity change from 0 to 512
[  164.799946][ T9337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.806064][ T9337] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.815158][ T9337] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1223: corrupted xattr block 33: invalid header
[  164.832223][ T9337] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1223: corrupted xattr block 33: invalid header
[  164.844881][ T9337] fscrypt (loop3, inode 15): Error -117 getting encryption context
[  164.883697][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.078810][ T9345] netlink: 'syz.1.1227': attribute type 34 has an invalid length.
[  165.268130][   T24] usb 5-1: USB disconnect, device number 11
[  165.323025][ T9362] mkiss: ax0: crc mode is auto.
[  165.392776][ T5910] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  165.421589][ T9367] loop1: detected capacity change from 0 to 128
[  165.430805][ T9367] EXT4-fs: Ignoring removed nomblk_io_submit option
[  165.433882][ T9367] EXT4-fs: Ignoring removed nomblk_io_submit option
[  165.437541][ T9367] EXT4-fs (loop1): Test dummy encryption mode enabled
[  165.450948][ T9367] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  165.458480][ T9367] ext4 filesystem being mounted at /410/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  165.543544][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  165.544945][ T9367] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  165.548138][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.555168][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.559494][ T5910] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  165.564017][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.570439][ T5910] usb 4-1: config 0 descriptor??
[  165.582731][ T5910] hub 4-1:0.0: USB hub found
[  165.594348][ T5851] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  165.614837][ T9376] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  165.614837][ T9376] The task syz.4.1236 (9376) triggered the difference, watch for misbehavior.
[  165.643582][ T9378] trusted_key: encrypted_key: master key parameter 'u' is invalid
[  165.782012][ T5910] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  166.120807][ T5910] usbhid 4-1:0.0: can't add hid device: -71
[  166.154770][ T5910] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  166.220056][  T792] hid-generic 0000:007F:0001.0009: unknown main item tag 0x0
[  166.230085][  T792] hid-generic 0000:007F:0001.0009: unknown main item tag 0x0
[  166.239036][  T792] hid-generic 0000:007F:0001.0009: unknown main item tag 0x0
[  166.246337][  T792] hid-generic 0000:007F:0001.0009: unknown main item tag 0x0
[  166.249591][  T792] hid-generic 0000:007F:0001.0009: unknown main item tag 0x0
[  166.255876][  T792] hid-generic 0000:007F:0001.0009: unknown main item tag 0x0
[  166.259621][ T5910] usb 4-1: USB disconnect, device number 13
[  166.262173][  T792] hid-generic 0000:007F:0001.0009: unknown main item tag 0x0
[  166.268420][  T792] hid-generic 0000:007F:0001.0009: unknown main item tag 0x0
[  166.277253][  T792] hid-generic 0000:007F:0001.0009: unknown main item tag 0x0
[  166.286370][  T792] hid-generic 0000:007F:0001.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  166.618148][ T9390] loop4: detected capacity change from 0 to 32768
[  166.765034][ T9390] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  166.765058][ T9390]   allowing incompatible features above 0.0: (unknown version)
[  166.765066][ T9390]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  166.784246][ T9390] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  166.787686][ T9390] bcachefs (loop4): initializing new filesystem
[  166.801400][ T9390] bcachefs (loop4): going read-write
[  166.810806][ T9390] bcachefs (loop4): marking superblocks
[  166.818644][ T9390] bcachefs (loop4): initializing freespace
[  166.826390][ T9390] bcachefs (loop4): done initializing freespace
[  166.830828][ T9390] bcachefs (loop4): reading snapshots table
[  166.833029][ T9390] bcachefs (loop4): reading snapshots done
[  166.874507][ T9390] bcachefs (loop4): done starting filesystem
[  167.970620][ T5910] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  168.148357][ T5910] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.158782][ T5910] usb 4-1: config 0 interface 0 has no altsetting 0
[  168.161847][ T5910] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  168.169082][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.183529][ T5910] usb 4-1: config 0 descriptor??
[  168.576312][ T5913] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  168.608450][ T6736] bcachefs (loop4): shutting down
[  168.610719][ T6736] bcachefs (loop4): going read-only
[  168.614052][ T6736] bcachefs (loop4): finished waiting for writes to stop
[  168.618027][ T5910] hid_parser_main: 34 callbacks suppressed
[  168.618046][ T5910] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  168.627221][ T6736] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4
[  168.630066][ T5910] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  168.634023][ T5910] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  168.637021][ T5910] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  168.640917][ T5910] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  168.646456][ T6736] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4
[  168.650902][ T5910] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  168.656231][ T6736] bcachefs (loop4): clean shutdown complete, journal seq 5
[  168.659856][ T6736] bcachefs (loop4): marking filesystem clean
[  168.662661][ T5910] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  168.666033][ T5910] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  168.682473][ T5910] elecom 0003:056E:00FE.000A: hidraw0: USB HID v0.01 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0
[  168.691239][ T6736] bcachefs (loop4): shutdown complete
[  168.754450][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.759994][ T5913] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72
[  168.763127][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.765848][ T5913] usb 2-1: Product: syz
[  168.767250][ T5913] usb 2-1: Manufacturer: syz
[  168.768810][ T5913] usb 2-1: SerialNumber: syz
[  168.771839][ T5913] usb 2-1: config 0 descriptor??
[  168.778686][ T5913] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  168.781375][ T5913] dvb-usb: bulk message failed: -22 (3/0)
[  168.807448][ T5913] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  168.812482][ T5913] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[  168.816148][ T5913] dvb_usb_umt_010 2-1:0.0: probe with driver dvb_usb_umt_010 failed with error -22
[  168.831801][ T5910] usb 4-1: USB disconnect, device number 14
[  168.992185][  T792] usb 2-1: USB disconnect, device number 14
[  169.944229][  T792] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  170.001157][ T9453] loop4: detected capacity change from 0 to 256
[  170.129904][  T792] usb 4-1: config 8 has an invalid interface number: 95 but max is 0
[  170.135173][  T792] usb 4-1: config 8 has no interface number 0
[  170.140455][  T792] usb 4-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=29.78
[  170.145571][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.149114][  T792] usb 4-1: Product: syz
[  170.151116][  T792] usb 4-1: Manufacturer: syz
[  170.154820][  T792] usb 4-1: SerialNumber: syz
[  170.430232][  T792] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.95/input/input18
[  170.463906][ T5281] bcm5974 4-1:8.95: could not read from device
[  170.498711][ T5281] bcm5974 4-1:8.95: could not read from device
[  170.512372][  T792] usb 4-1: USB disconnect, device number 15
[  170.535255][ T5281] bcm5974 4-1:8.95: could not read from device
[  170.571584][ T5281] bcm5974 4-1:8.95: could not read from device
[  171.096948][ T9474] netlink: 'syz.1.1277': attribute type 1 has an invalid length.
[  171.099772][ T9474] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1277'.
[  171.174403][ T9481] tipc: Enabling of bearer <etl:g> rejected, media not registered
[  171.484795][ T9513] loop3: detected capacity change from 0 to 1024
[  171.489229][ T9513] EXT4-fs: Ignoring removed oldalloc option
[  171.491218][ T9513] EXT4-fs: Ignoring removed bh option
[  171.528547][ T9513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.565527][   T33] audit: type=1804 audit(1755048105.011:69): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1295" name="/newroot/412/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  172.407795][ T6149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.977580][ T9537] loop1: detected capacity change from 0 to 32768
[  174.089142][ T9537] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  174.240730][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[  174.543070][ T9553] trusted_key: encrypted_key: insufficient parameters specified
[  174.880505][ T9565] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  174.905357][ T9563] loop4: detected capacity change from 0 to 4096
[  174.991305][ T9569] loop1: detected capacity change from 0 to 1024
[  174.992749][ T9563] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  175.008198][ T9563] ntfs3(loop4): $Secure::$SDH is corrupted.
[  175.010611][ T9563] ntfs3(loop4): Failed to initialize $Secure (-22).
[  175.163858][ T9579] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  175.191961][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1320'.
[  175.384418][ T9574] loop3: detected capacity change from 0 to 32768
[  175.387404][ T9574] XFS: ikeep mount option is deprecated.
[  175.406023][ T9574] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.434711][ T9574] XFS (loop3): Ending clean mount
[  175.438441][ T9574] XFS (loop3): Quotacheck needed: Please wait.
[  175.459559][ T9574] XFS (loop3): Quotacheck: Done.
[  175.520844][ T6149] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.966925][ T9604] loop1: detected capacity change from 0 to 32768
[  175.981055][ T9604] (syz.1.1326,9604,1):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[  175.981055][ T9604] found = 2, set = 0, taken = 0, off = 0
[  175.987949][ T9604] (syz.1.1326,9604,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[  175.990718][ T9604] (syz.1.1326,9604,1):ocfs2_check_volume:2404 ERROR: status = -22
[  175.993489][ T9604] (syz.1.1326,9604,1):ocfs2_check_volume:2432 ERROR: status = -22
[  175.996298][ T9604] (syz.1.1326,9604,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  176.017236][ T9604] (syz.1.1326,9604,1):ocfs2_fill_super:1177 ERROR: status = -22
[  176.144166][  T792] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  176.303603][  T792] usb 5-1: Using ep0 maxpacket: 8
[  176.308482][  T792] usb 5-1: unable to get BOS descriptor or descriptor too short
[  176.312287][  T792] usb 5-1: config 17 has an invalid interface number: 8 but max is 1
[  176.315638][  T792] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2
[  176.320433][  T792] usb 5-1: config 17 has no interface number 0
[  176.325104][  T792] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 170, changing to 7
[  176.329832][  T792] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 33185, setting to 1024
[  176.334751][  T792] usb 5-1: config 17 interface 8 has no altsetting 0
[  176.349632][  T792] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  176.363699][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.367368][  T792] usb 5-1: Product: syz
[  176.369314][  T792] usb 5-1: Manufacturer: syz
[  176.371074][  T792] usb 5-1: SerialNumber: syz
[  176.603675][  T792] usb 5-1: selecting invalid altsetting 0
[  176.608957][  T792] usb 5-1: 8:6 : no UAC_FORMAT_TYPE desc
[  176.611312][  T792] usb 5-1: selecting invalid altsetting 0
[  176.627394][  T792] usb 5-1: USB disconnect, device number 12
[  176.667604][ T6039] udevd[6039]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  177.177151][ T5848] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  177.181069][ T5848] Bluetooth: hci0: Injecting HCI hardware error event
[  177.199984][ T5848] Bluetooth: hci0: hardware error 0x00
[  177.562870][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  177.710434][ T9657] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  177.714510][   T10] usb 4-1: Using ep0 maxpacket: 32
[  177.725081][   T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  177.728022][   T10] usb 4-1: config 0 has no interface number 0
[  177.734807][   T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  177.738007][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.740773][   T10] usb 4-1: Product: syz
[  177.742534][   T10] usb 4-1: Manufacturer: syz
[  177.746317][   T10] usb 4-1: SerialNumber: syz
[  177.753429][   T10] usb 4-1: config 0 descriptor??
[  177.766665][   T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  177.988431][   T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  178.013026][   T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  178.062399][ T9663] loop1: detected capacity change from 0 to 32768
[  178.180267][  T116] ------------[ cut here ]------------
[  178.182306][  T116] WARNING: CPU: 1 PID: 116 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x454/0x4e0
[  178.185380][  T116] Modules linked in:
[  178.187278][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  178.192832][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.196390][  T116] RIP: 0010:dbAdjTree+0x454/0x4e0
[  178.198119][  T116] Code: 5a ff ff ff e8 cd af 81 fe eb 05 e8 c6 af 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 ad af 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  178.204809][  T116] RSP: 0018:ffffc900023ef508 EFLAGS: 00010293
[  178.206889][  T116] RAX: ffffffff833dfc03 RBX: ffff888128edd010 RCX: ffff888105d1d640
[  178.209577][  T116] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  178.213227][  T116] RBP: 0000000000020056 R08: ffffea0004a3b747 R09: 1ffffd40009476e8
[  178.216386][  T116] R10: dffffc0000000000 R11: fffff940009476e9 R12: ffff888128edd018
[  178.219175][  T116] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  178.222018][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c24000(0000) knlGS:0000000000000000
[  178.225727][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.228494][  T116] CR2: 0000001b31721ff8 CR3: 0000000120196000 CR4: 00000000000006f0
[  178.231989][  T116] Call Trace:
[  178.234028][  T116]  <TASK>
[  178.235311][  T116]  ? __pfx_lock_metapage+0x10/0x10
[  178.237240][  T116]  dbJoin+0x238/0x300
[  178.238609][  T116]  ? do_read_cache_folio+0x4c6/0x590
[  178.240537][  T116]  dbFreeBits+0x4e1/0xdb0
[  178.242223][  T116]  dbFree+0x336/0x650
[  178.244292][  T116]  txFreeMap+0x9e6/0xde0
[  178.246152][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  178.248407][  T116]  xtTruncate+0xcea/0x2e70
[  178.250392][  T116]  ? __pfx_xtTruncate+0x10/0x10
[  178.252468][  T116]  ? reacquire_held_locks+0x127/0x1d0
[  178.254874][  T116]  ? __mark_inode_dirty+0x4a6/0xdf0
[  178.257154][  T116]  ? __asan_memset+0x22/0x50
[  178.259188][  T116]  ? __dquot_initialize+0x218/0xcb0
[  178.261457][  T116]  jfs_free_zero_link+0x33a/0x4a0
[  178.263755][  T116]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  178.266708][  T116]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  178.269379][  T116]  jfs_evict_inode+0x363/0x440
[  178.271481][  T116]  ? evict+0x4f8/0x9c0
[  178.275192][  T116]  ? __pfx_jfs_evict_inode+0x10/0x10
[  178.277493][  T116]  evict+0x504/0x9c0
[  178.279205][  T116]  ? __pfx_evict+0x10/0x10
[  178.281104][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  178.283958][  T116]  ? _raw_spin_unlock+0x28/0x50
[  178.286101][  T116]  ? iput+0x6d8/0x9d0
[  178.287843][  T116]  jfs_lazycommit+0x43f/0xa90
[  178.289816][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  178.292085][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  178.295062][  T116]  ? __kthread_parkme+0x7b/0x200
[  178.297260][  T116]  ? __kthread_parkme+0x1a1/0x200
[  178.299473][  T116]  kthread+0x711/0x8a0
[  178.301248][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  178.303786][  T116]  ? __pfx_kthread+0x10/0x10
[  178.305369][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.307068][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.308825][  T116]  ? __pfx_kthread+0x10/0x10
[  178.310451][  T116]  ret_from_fork+0x3fc/0x770
[  178.312144][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  178.315010][  T116]  ? __switch_to_asm+0x39/0x70
[  178.316889][  T116]  ? __switch_to_asm+0x33/0x70
[  178.318547][  T116]  ? __pfx_kthread+0x10/0x10
[  178.320136][  T116]  ret_from_fork_asm+0x1a/0x30
[  178.322025][  T116]  </TASK>
[  178.323898][  T116] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  178.326991][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  178.331992][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.335648][  T116] Call Trace:
[  178.336759][  T116]  <TASK>
[  178.337745][  T116]  dump_stack_lvl+0x99/0x250
[  178.339345][  T116]  ? __asan_memcpy+0x40/0x70
[  178.340951][  T116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.342950][  T116]  ? __pfx__printk+0x10/0x10
[  178.344534][  T116]  vpanic+0x281/0x750
[  178.345983][  T116]  ? __pfx__printk+0x10/0x10
[  178.347553][  T116]  ? __pfx_vpanic+0x10/0x10
[  178.349140][  T116]  ? is_bpf_text_address+0x26/0x2b0
[  178.351188][  T116]  panic+0xb9/0xc0
[  178.352549][  T116]  ? __pfx_panic+0x10/0x10
[  178.354130][  T116]  __warn+0x31b/0x4b0
[  178.355508][  T116]  ? dbAdjTree+0x454/0x4e0
[  178.357079][  T116]  ? dbAdjTree+0x454/0x4e0
[  178.358653][  T116]  report_bug+0x2be/0x4f0
[  178.360157][  T116]  ? dbAdjTree+0x454/0x4e0
[  178.362073][  T116]  ? dbAdjTree+0x454/0x4e0
[  178.363689][  T116]  ? dbAdjTree+0x456/0x4e0
[  178.365232][  T116]  handle_bug+0x84/0x160
[  178.366704][  T116]  exc_invalid_op+0x1a/0x50
[  178.368309][  T116]  asm_exc_invalid_op+0x1a/0x20
[  178.369976][  T116] RIP: 0010:dbAdjTree+0x454/0x4e0
[  178.371850][  T116] Code: 5a ff ff ff e8 cd af 81 fe eb 05 e8 c6 af 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 ad af 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  178.378408][  T116] RSP: 0018:ffffc900023ef508 EFLAGS: 00010293
[  178.380525][  T116] RAX: ffffffff833dfc03 RBX: ffff888128edd010 RCX: ffff888105d1d640
[  178.383601][  T116] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  178.386204][  T116] RBP: 0000000000020056 R08: ffffea0004a3b747 R09: 1ffffd40009476e8
[  178.388838][  T116] R10: dffffc0000000000 R11: fffff940009476e9 R12: ffff888128edd018
[  178.391499][  T116] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  178.394258][  T116]  ? dbAdjTree+0x453/0x4e0
[  178.395846][  T116]  ? dbAdjTree+0x453/0x4e0
[  178.397424][  T116]  ? __pfx_lock_metapage+0x10/0x10
[  178.399105][  T116]  dbJoin+0x238/0x300
[  178.400522][  T116]  ? do_read_cache_folio+0x4c6/0x590
[  178.402735][  T116]  dbFreeBits+0x4e1/0xdb0
[  178.404453][  T116]  dbFree+0x336/0x650
[  178.406102][  T116]  txFreeMap+0x9e6/0xde0
[  178.407815][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  178.410058][  T116]  xtTruncate+0xcea/0x2e70
[  178.412028][  T116]  ? __pfx_xtTruncate+0x10/0x10
[  178.414071][  T116]  ? reacquire_held_locks+0x127/0x1d0
[  178.416344][  T116]  ? __mark_inode_dirty+0x4a6/0xdf0
[  178.418447][  T116]  ? __asan_memset+0x22/0x50
[  178.420477][  T116]  ? __dquot_initialize+0x218/0xcb0
[  178.422656][  T116]  jfs_free_zero_link+0x33a/0x4a0
[  178.424694][  T116]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  178.427006][  T116]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  178.429565][  T116]  jfs_evict_inode+0x363/0x440
[  178.431588][  T116]  ? evict+0x4f8/0x9c0
[  178.432962][  T116]  ? __pfx_jfs_evict_inode+0x10/0x10
[  178.434835][  T116]  evict+0x504/0x9c0
[  178.436581][  T116]  ? __pfx_evict+0x10/0x10
[  178.438422][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  178.440453][  T116]  ? _raw_spin_unlock+0x28/0x50
[  178.442406][  T116]  ? iput+0x6d8/0x9d0
[  178.443748][  T116]  jfs_lazycommit+0x43f/0xa90
[  178.445358][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  178.447119][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  178.449059][  T116]  ? __kthread_parkme+0x7b/0x200
[  178.450911][  T116]  ? __kthread_parkme+0x1a1/0x200
[  178.452890][  T116]  kthread+0x711/0x8a0
[  178.454271][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  178.455985][  T116]  ? __pfx_kthread+0x10/0x10
[  178.457523][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.459205][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.461170][  T116]  ? __pfx_kthread+0x10/0x10
[  178.462820][  T116]  ret_from_fork+0x3fc/0x770
[  178.464355][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  178.466026][  T116]  ? __switch_to_asm+0x39/0x70
[  178.467640][  T116]  ? __switch_to_asm+0x33/0x70
[  178.469206][  T116]  ? __pfx_kthread+0x10/0x10
[  178.470996][  T116]  ret_from_fork_asm+0x1a/0x30
[  178.472840][  T116]  </TASK>
[  178.474837][  T116] Kernel Offset: disabled
[  178.476487][  T116] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:17:29  Registers:
info registers vcpu 0

CPU#0
RAX=00007f85a581c480 RBX=00007f85a581c3d0 RCX=ffffffff825d2c3a RDX=ffffffff825d2c3a
RSI=ffffffff825d2c3a RDI=00007f85a581c4d0 RBP=00007f85a581c388 RSP=00007ffc5b582bc0
R8 =00007f85a581c428 R9 =00007f85a6fa2000 R10=00007f85a57f9008 R11=00000000000000ff
R12=00007f85a581c380 R13=0000000000000013 R14=00007ffc5b582de8 R15=00007f85a57f9008
RIP=00007f85a6c6802d RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555576abf500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3461bff8 CR3=0000000030299000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff825d2c3a ffffffff825d2c3a XMM01=ffffffff825d2c3a ffffffff825d2c3a
XMM02=00007f85a6f87498 ffffffff825d2c3a XMM03=00007f85a6f874a8 00007f85a6f874a0
XMM04=00007f85a7aed100 00007f85a6f87460 XMM05=00007f85a6f87478 00007f85a6f874c0
XMM06=00007f85a6f874b8 00007f85a6f874b0 XMM07=00007f85a6f874a8 00007f85a6f874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f85a6e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006a RBX=000000000000006a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900023eecb0
R8 =ffff888106f88237 R9 =1ffff11020df1046 R10=dffffc0000000000 R11=ffffffff854e7220
R12=dffffc0000000000 R13=ffffffff99af18f5 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e729c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31721ff8 CR3=0000000120196000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f85a6e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
