last executing test programs:

1.256504289s ago: executing program 2 (id=573):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802)

1.181269952s ago: executing program 2 (id=574):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)

1.175006944s ago: executing program 2 (id=576):
mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x2b00, 0x1, 0x1}, 0x18, 0x0)
landlock_restrict_self(r0, 0x1)
link(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.113528048s ago: executing program 2 (id=577):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)

1.106407161s ago: executing program 2 (id=579):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x7fff}, 0x1c)

1.040540865s ago: executing program 2 (id=582):
epoll_create1(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede010203010902"], 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
memfd_secret(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$inet6(0xa, 0x3, 0x6)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x3, 0x704d, 0x1, 0x3, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x200001, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x200, 0x40, 0x7, 0x8000, 0x7, 0xc1, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x101, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x4, 0x4, 0x4, 0x5643fa73, 0xfffeffff, 0x7, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x16], [0xfffffed2, 0x7fffffff, 0xffff, 0x7, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0xf, 0x800000a, 0x7fd, 0x6c368000, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0x5, 0x8001, 0x10000, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x4, 0x3, 0x40, 0xc14, 0x80000001, 0x3, 0x3, 0x8, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x4, 0x0, 0xfff, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0x3, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x8000006, 0x8, 0x9, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x10000, 0x7f, 0x7ff, 0xd, 0x400, 0x0, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0xfffffffc, 0x2, 0x5d9fff6, 0x3ff, 0xff, 0x4, 0x7, 0x10000, 0xe7, 0x6, 0x7af5, 0x0, 0x9, 0x0, 0xffff, 0x7, 0x100006, 0x0, 0x2, 0x9, 0x2000002, 0x100, 0x100, 0x8, 0x0, 0x200, 0x10], [0xffefff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x6, 0x407, 0xb343, 0x8, 0x1, 0x8, 0x7, 0x8, 0xffffff81, 0x80000000, 0x80000005, 0x3, 0x201, 0xfff, 0x3, 0x0, 0x3c65, 0xa, 0x0, 0x80, 0xffffffff, 0x3, 0xffffffcb, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0x2, 0x9, 0x17ce, 0x0, 0x200, 0x6fe, 0xd6, 0x8, 0x13b, 0x7, 0x8, 0xb757, 0x2, 0x117, 0x996, 0x54, 0x8bd, 0x0, 0x3, 0x5, 0x8, 0x80100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c)
r0 = syz_io_uring_setup(0xd2, &(0x7f00000005c0)={0x0, 0x2000000, 0x800, 0x0, 0x1f8}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000640)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

335.188836ms ago: executing program 1 (id=609):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=0x7, 0x4)
getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)

269.784665ms ago: executing program 1 (id=611):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
lseek(r0, 0x8183, 0x3)

269.606462ms ago: executing program 0 (id=612):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

269.252047ms ago: executing program 0 (id=613):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x1, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x2f}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl(r0, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487")
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2})

179.999271ms ago: executing program 0 (id=614):
init_module(&(0x7f0000000040), 0xffcd4, &(0x7f0000000080)='[[-\'^%{\x00')

140.546071ms ago: executing program 0 (id=615):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)

140.17388ms ago: executing program 0 (id=616):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@noquota}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@noquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

137.976897ms ago: executing program 1 (id=617):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@mcast2, r1}, 0x14)

521.956µs ago: executing program 1 (id=618):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000780)='GPL\x00'}, 0x90)

312.932µs ago: executing program 1 (id=619):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@float={0x2, 0x0, 0x0, 0x10, 0x8}, @struct={0x3, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x5f, 0x5f, 0x61]}}, 0x0, 0x41}, 0x28)

175.655µs ago: executing program 1 (id=620):
syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x3, 0xd7}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

0s ago: executing program 0 (id=621):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc531, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1000, 0x5, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "001000"}, @global=@item_012={0x1, 0x1, 0x8, 'O'}]}}, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23496' (ED25519) to the list of known hosts.
syzkaller login: [   41.138822][ T5773] cgroup: Unknown subsys name 'net'
[   41.259085][ T5773] cgroup: Unknown subsys name 'cpuset'
[   41.263839][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.495130][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.663895][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.667204][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.670334][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.673824][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.677549][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.720461][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.723695][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.726950][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.730370][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.733631][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.767008][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.770767][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.773747][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.777357][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.780656][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.824248][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   45.865654][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.868542][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.871103][ T5845] bridge_slave_0: entered allmulticast mode
[   45.873888][ T5845] bridge_slave_0: entered promiscuous mode
[   45.878971][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.881922][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.884766][ T5845] bridge_slave_1: entered allmulticast mode
[   45.887810][ T5845] bridge_slave_1: entered promiscuous mode
[   45.909155][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.917765][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.944310][ T5845] team0: Port device team_slave_0 added
[   45.948113][ T5845] team0: Port device team_slave_1 added
[   45.974997][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.978156][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.986518][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.994461][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.997500][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.008260][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.013410][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   46.021458][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   46.067732][ T5845] hsr_slave_0: entered promiscuous mode
[   46.069964][ T5845] hsr_slave_1: entered promiscuous mode
[   46.080060][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.082464][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.084941][ T5850] bridge_slave_0: entered allmulticast mode
[   46.087486][ T5850] bridge_slave_0: entered promiscuous mode
[   46.101540][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.104265][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.106859][ T5850] bridge_slave_1: entered allmulticast mode
[   46.109868][ T5850] bridge_slave_1: entered promiscuous mode
[   46.121219][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.123932][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.127399][ T5853] bridge_slave_0: entered allmulticast mode
[   46.130188][ T5853] bridge_slave_0: entered promiscuous mode
[   46.139293][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.142005][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.144722][ T5853] bridge_slave_1: entered allmulticast mode
[   46.148043][ T5853] bridge_slave_1: entered promiscuous mode
[   46.155112][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.170454][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.179463][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.188516][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.214465][ T5850] team0: Port device team_slave_0 added
[   46.226351][ T5850] team0: Port device team_slave_1 added
[   46.233982][ T5853] team0: Port device team_slave_0 added
[   46.246231][ T5853] team0: Port device team_slave_1 added
[   46.272163][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.274970][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.285711][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.291122][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.293985][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.305933][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.311205][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.313930][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.324042][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.328804][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.331623][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.341937][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.374488][ T5850] hsr_slave_0: entered promiscuous mode
[   46.377575][ T5850] hsr_slave_1: entered promiscuous mode
[   46.380254][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   46.382637][ T5850] Cannot create hsr debugfs directory
[   46.409052][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.412963][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.420892][ T5853] hsr_slave_0: entered promiscuous mode
[   46.423707][ T5853] hsr_slave_1: entered promiscuous mode
[   46.426337][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   46.429159][ T5853] Cannot create hsr debugfs directory
[   46.431894][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.436039][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.515984][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.518448][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.520930][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.523509][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.568010][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.573912][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.584865][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.597853][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.619384][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.626507][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.632179][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.640625][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.658644][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.668862][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.671824][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.674936][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.678013][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.685998][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.689096][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.692125][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.695042][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.704750][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.708438][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.714423][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.718098][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.721251][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.724353][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.734969][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   46.749812][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.752659][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.768063][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.770887][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.810664][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.825665][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.839136][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   46.854382][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.857439][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.870707][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   46.874751][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.877899][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.894887][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.897952][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.902380][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.905371][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.938624][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.994213][ T5845] veth0_vlan: entered promiscuous mode
[   47.004032][ T5845] veth1_vlan: entered promiscuous mode
[   47.039969][ T5845] veth0_macvtap: entered promiscuous mode
[   47.047738][ T5845] veth1_macvtap: entered promiscuous mode
[   47.059342][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.063170][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.086473][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.095845][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.106063][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.110994][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.115034][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.126436][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.168296][ T5853] veth0_vlan: entered promiscuous mode
[   47.168419][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.172284][ T5853] veth1_vlan: entered promiscuous mode
[   47.183328][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.200466][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.204370][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.211249][ T5853] veth0_macvtap: entered promiscuous mode
[   47.214593][ T5853] veth1_macvtap: entered promiscuous mode
[   47.222464][ T5850] veth0_vlan: entered promiscuous mode
[   47.229582][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.230161][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.235404][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.258195][ T5850] veth1_vlan: entered promiscuous mode
[   47.262190][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.269312][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.272235][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.274988][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.327595][ T5850] veth0_macvtap: entered promiscuous mode
[   47.335772][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.339595][ T5850] veth1_macvtap: entered promiscuous mode
[   47.343825][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.369210][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.372389][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.378303][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.382965][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.398205][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.409033][ T5717] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.412606][ T5717] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.416213][ T5717] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.507879][ T5204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.515521][ T5204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.549008][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.553592][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.585557][ T5911] loop2: detected capacity change from 0 to 32768
[   47.636878][ T5926] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   47.749046][ T5855] Bluetooth: hci1: command tx timeout
[   47.751365][ T5855] Bluetooth: hci0: command tx timeout
[   47.826837][ T5855] Bluetooth: hci2: command tx timeout
[   47.934582][ T5944] loop1: detected capacity change from 0 to 164
[   47.945811][ T5944] =======================================================
[   47.945811][ T5944] WARNING: The mand mount option has been deprecated and
[   47.945811][ T5944]          and is ignored by this kernel. Remove the mand
[   47.945811][ T5944]          option from the mount to silence this warning.
[   47.945811][ T5944] =======================================================
[   48.039762][ T5932] loop2: detected capacity change from 0 to 32768
[   48.044671][ T5932] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12 (5932)
[   48.055281][ T5932] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   48.060154][ T5932] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   48.103777][ T1088] BTRFS warning (device loop2): checksum verify failed on logical 5341184 mirror 1 wanted 0x0a5a7a5ae10eed219743b156b36184dc5a58d72503dc57b157a62f9528df24e9 found 0xff549293dea1dbaf9b0a1f0ee28e0a88db67a3e97fd64b068aed23a93a8eb1b1 level 0
[   48.118519][ T5932] BTRFS error (device loop2): failed to load root free space
[   48.141653][ T5932] BTRFS error (device loop2): open_ctree failed: -5
[   48.281972][ T5965] loop1: detected capacity change from 0 to 16
[   48.288554][ T5965] erofs (device loop1): mounted with root inode @ nid 36.
[   48.460635][ T5969] loop2: detected capacity change from 0 to 128
[   48.466409][ T5970] netlink: 'syz.1.18': attribute type 10 has an invalid length.
[   48.469590][ T5970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18'.
[   48.476711][ T5970] batman_adv: batadv0: Adding interface: virt_wifi0
[   48.479007][ T5970] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.488287][ T5970] batman_adv: batadv0: Interface activated: virt_wifi0
[   48.664762][ T5171] kworker/u9:4: attempt to access beyond end of device
[   48.664762][ T5171] loop2: rw=1, sector=129, nr_sectors = 912 limit=128
[   48.838130][ T5973] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET)
[   49.110885][ T5977] loop2: detected capacity change from 0 to 4096
[   49.118408][ T5977] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   49.120978][ T5977] UDF-fs: Scanning with blocksize 512 failed
[   49.124758][ T5977] UDF-fs: error (device loop2): udf_read_inode: (ino 1312) failed !bh
[   49.128400][ T5977] UDF-fs: Scanning with blocksize 1024 failed
[   49.132407][ T5977] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   49.135680][ T5977] UDF-fs: Scanning with blocksize 2048 failed
[   49.140801][ T5977] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[   49.144021][ T5977] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   49.161709][ T5977] UDF-fs: Scanning with blocksize 4096 failed
[   49.170359][ T5977] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[   49.295557][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   49.446255][ T5989] loop1: detected capacity change from 0 to 8192
[   49.523094][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'.
[   49.530962][ T5991] batadv_slave_0: entered promiscuous mode
[   49.534967][ T5991] batadv_slave_1: entered promiscuous mode
[   49.540546][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.545097][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.569583][ T5987] loop2: detected capacity change from 0 to 32768
[   49.591024][ T5994] loop0: detected capacity change from 0 to 1024
[   49.597283][ T5994] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   49.606437][ T5994] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   49.617300][ T5987] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   49.621048][ T5994] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   49.625441][ T5994] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   49.636572][ T5994] JBD2: no valid journal superblock found
[   49.641038][ T5994] EXT4-fs (loop0): Could not load journal inode
[   49.670271][ T5987] XFS (loop2): Ending clean mount
[   49.679160][ T5987] XFS (loop2): Quotacheck needed: Please wait.
[   49.685785][ T6010] warning: `syz.0.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.690566][ T5987] XFS (loop2): Quotacheck: Done.
[   49.769443][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   49.780404][ T6016] loop0: detected capacity change from 0 to 2048
[   49.799165][ T6016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   49.811574][ T6016] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[   49.826803][ T5855] Bluetooth: hci0: command tx timeout
[   49.829065][ T5855] Bluetooth: hci1: command tx timeout
[   49.883309][ T6017] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.906775][ T5847] Bluetooth: hci2: command tx timeout
[   50.219402][ T6023] netlink: 84 bytes leftover after parsing attributes in process `syz.2.38'.
[   50.264806][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'.
[   50.273946][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'.
[   50.278170][ T6027] netlink: 'syz.2.42': attribute type 6 has an invalid length.
[   50.281231][ T6027] netlink: 'syz.2.42': attribute type 5 has an invalid length.
[   50.303338][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.479653][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'.
[   50.550207][ T6039] loop1: detected capacity change from 0 to 32768
[   50.555014][ T6039] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.47 (6039)
[   50.582320][ T6039] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   50.591274][ T6039] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   50.594934][ T6039] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   50.623448][ T6039] BTRFS info (device loop1): rebuilding free space tree
[   50.629927][ T6039] BTRFS info (device loop1): disabling free space tree
[   50.632785][ T6039] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   50.637052][ T6039] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   50.644022][ T6039] BTRFS info (device loop1): enabling ssd optimizations
[   50.647118][ T6039] BTRFS info (device loop1): enabling disk space caching
[   50.650231][ T6039] BTRFS info (device loop1): force clearing of disk cache
[   50.653208][ T6039] BTRFS info (device loop1): enabling auto defrag
[   50.656490][ T6039] BTRFS info (device loop1): max_inline set to 0
[   50.907438][   T12] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   50.920845][ T5850] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   51.070295][ T6086] loop1: detected capacity change from 0 to 512
[   51.073799][ T6086] EXT4-fs: Ignoring removed mblk_io_submit option
[   51.079932][ T6086] EXT4-fs: Ignoring removed mblk_io_submit option
[   51.083399][ T6086] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   51.088873][ T6086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[   51.093804][ T6086] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.61: corrupted in-inode xattr: e_value size too large
[   51.100213][ T6086] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.61: couldn't read orphan inode 15 (err -117)
[   51.106267][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.118242][ T6086] EXT4-fs (loop1): shut down requested (1)
[   51.140651][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.315543][ T6094] loop1: detected capacity change from 0 to 32768
[   51.422724][ T6099] loop1: detected capacity change from 0 to 512
[   51.427561][ T6099] EXT4-fs: Invalid journal IO priority (must be 0-7)
[   51.484702][ T6102] loop0: detected capacity change from 0 to 512
[   51.490278][ T6102] EXT4-fs: Ignoring removed nomblk_io_submit option
[   51.505873][ T6102] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   51.509183][ T6102] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[   51.513358][ T6102] EXT4-fs (loop0): 1 truncate cleaned up
[   51.516193][ T6102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.534204][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.716850][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   51.806723][  T972] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   51.879338][   T10] usb 2-1: config 0 has an invalid interface number: 171 but max is 0
[   51.882229][   T10] usb 2-1: config 0 has no interface number 0
[   51.884226][   T10] usb 2-1: config 0 interface 171 has no altsetting 0
[   51.888166][   T10] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[   51.891196][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.894383][   T10] usb 2-1: Product: syz
[   51.895898][   T10] usb 2-1: Manufacturer: syz
[   51.898190][   T10] usb 2-1: SerialNumber: syz
[   51.900968][   T10] usb 2-1: config 0 descriptor??
[   51.907386][ T5855] Bluetooth: hci0: command tx timeout
[   51.909344][ T5847] Bluetooth: hci1: command tx timeout
[   51.958090][  T972] usb 1-1: config 0 has an invalid interface number: 168 but max is 0
[   51.961412][  T972] usb 1-1: config 0 has no interface number 0
[   51.964087][  T972] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[   51.968585][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.972727][  T972] usb 1-1: config 0 descriptor??
[   51.987913][ T5847] Bluetooth: hci2: command tx timeout
[   52.107278][   T10] dvb_usb_m920x 2-1:0.171: probe with driver dvb_usb_m920x failed with error -71
[   52.113620][   T10] usb 2-1: USB disconnect, device number 2
[   52.183892][  T972] usb 1-1: string descriptor 0 read error: -71
[   52.188549][  T972] usb-storage 1-1:0.168: USB Mass Storage device detected
[   52.203731][  T972] usb-storage 1-1:0.168: Quirks match for vid 05ab pid 0060: 2
[   52.216348][ T6114] netlink: 'syz.2.72': attribute type 2 has an invalid length.
[   52.243289][  T972] usb 1-1: USB disconnect, device number 2
[   52.288813][ T6120] loop2: detected capacity change from 0 to 1024
[   52.309363][ T6120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.313568][ T6120] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.321384][ T6120] EXT4-fs (loop2): shut down requested (1)
[   52.329609][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.566553][ T6129] loop2: detected capacity change from 0 to 512
[   52.571954][ T6129] EXT4-fs: Ignoring removed nomblk_io_submit option
[   52.579059][ T6129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.584181][ T6129] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.601455][ T6129] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   52.605936][ T6129] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   52.610280][ T6129] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.78: Failed to acquire dquot type 1
[   52.626341][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.684174][ T6137] loop2: detected capacity change from 0 to 2048
[   52.697758][ T6137] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   52.700387][ T6137] UDF-fs: Scanning with blocksize 512 failed
[   52.712011][ T6137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   52.731213][   T33] audit: type=1326 audit(1756159851.353:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.0.83" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83dcb8ebe9 code=0x7ffc0000
[   52.740751][   T33] audit: type=1326 audit(1756159851.353:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.0.83" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83dcb8ebe9 code=0x7ffc0000
[   52.763315][ T6145] syz_tun: entered allmulticast mode
[   52.766334][ T6144] syz_tun: left allmulticast mode
[   52.776076][   T33] audit: type=1326 audit(1756159851.363:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.0.83" exe="/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f83dcb8ebe9 code=0x7ffc0000
[   52.789776][   T33] audit: type=1326 audit(1756159851.363:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.0.83" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83dcb8ebe9 code=0x7ffc0000
[   52.812901][ T6147] syzkaller1: entered promiscuous mode
[   52.814869][ T6147] syzkaller1: entered allmulticast mode
[   52.819064][   T33] audit: type=1326 audit(1756159851.363:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.0.83" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83dcb8ebe9 code=0x7ffc0000
[   52.821414][ T6150] loop1: detected capacity change from 0 to 256
[   52.835050][ T6150] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.998720][ T6167] loop0: detected capacity change from 0 to 512
[   53.004158][ T6167] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   53.014300][ T6167] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.96: invalid indirect mapped block 83886080 (level 1)
[   53.020678][ T6167] EXT4-fs (loop0): Remounting filesystem read-only
[   53.023603][ T6167] EXT4-fs (loop0): 1 orphan inode deleted
[   53.026041][ T6167] EXT4-fs (loop0): 1 truncate cleaned up
[   53.030591][ T6167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.053172][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.186897][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   53.217707][  T972] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   53.366737][  T972] usb 2-1: Using ep0 maxpacket: 8
[   53.377149][  T972] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[   53.398022][  T972] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   53.401999][  T972] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   53.424239][ T6180] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   53.453808][  T972] usb 2-1: Product: syz
[   53.464397][  T972] usb 2-1: Manufacturer: syz
[   53.470400][  T972] usb 2-1: SerialNumber: syz
[   53.556730][ T5894] usb 3-1: Using ep0 maxpacket: 16
[   53.560829][ T5894] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.565425][ T5894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   53.571448][ T5894] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   53.575200][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.579324][ T5894] usb 3-1: Product: syz
[   53.581143][ T5894] usb 3-1: Manufacturer: syz
[   53.583135][ T5894] usb 3-1: SerialNumber: syz
[   53.768223][  T972] usb 2-1: Invalid connection information received from device
[   53.795245][ T5894] usb 3-1: 0:2 : does not exist
[   53.801121][ T5894] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   53.811440][ T5894] usb 3-1: USB disconnect, device number 2
[   53.825832][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   53.995021][  T972] usb 2-1: USB disconnect, device number 3
[   53.999562][ T5855] Bluetooth: hci0: command tx timeout
[   54.001793][ T5847] Bluetooth: hci1: command tx timeout
[   54.066732][ T5847] Bluetooth: hci2: command tx timeout
[   54.286705][   T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   54.436694][   T47] usb 1-1: Using ep0 maxpacket: 8
[   54.439634][   T47] usb 1-1: config 0 has no interfaces?
[   54.443753][   T47] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[   54.447182][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.449772][   T47] usb 1-1: Product: syz
[   54.451412][   T47] usb 1-1: Manufacturer: syz
[   54.453428][   T47] usb 1-1: SerialNumber: syz
[   54.456126][   T47] usb 1-1: config 0 descriptor??
[   54.487799][ T6189] loop2: detected capacity change from 0 to 32768
[   54.519610][ T6189] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   54.519622][ T6189]   allowing incompatible features above 0.0: (unknown version)
[   54.519626][ T6189]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   54.537001][ T6189] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   54.540817][ T6189] bcachefs (loop2): initializing new filesystem
[   54.547983][ T6189] bcachefs (loop2): going read-write
[   54.557051][ T6189] bcachefs (loop2): marking superblocks
[   54.563947][ T6189] bcachefs (loop2): initializing freespace
[   54.569263][ T6189] bcachefs (loop2): done initializing freespace
[   54.573755][ T6189] bcachefs (loop2): reading snapshots table
[   54.576092][ T6189] bcachefs (loop2): reading snapshots done
[   54.596478][ T6189] bcachefs (loop2): done starting filesystem
[   54.618398][ T6189] syz.2.104 (6189) used greatest stack depth: 17072 bytes left
[   54.621607][ T5845] bcachefs (loop2): shutting down
[   54.623269][ T5845] bcachefs (loop2): going read-only
[   54.625045][ T5845] bcachefs (loop2): finished waiting for writes to stop
[   54.628646][ T5845] bcachefs (loop2): flushing journal and stopping allocators, journal seq 1
[   54.628990][ T6197] loop1: detected capacity change from 0 to 32768
[   54.638598][ T5845] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 2
[   54.644484][ T5845] bcachefs (loop2): clean shutdown complete, journal seq 3
[   54.648751][ T5845] bcachefs (loop2): marking filesystem clean
[   54.657203][ T5845] bcachefs (loop2): shutdown complete
[   54.657709][ T6197] (syz.1.105,6197,0):ocfs2_load_local_alloc:320 ERROR: Local alloc size is invalid (la_size = 33328)
[   54.672817][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.673125][ T6197] (syz.1.105,6197,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[   54.676542][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.681019][ T6197] (syz.1.105,6197,0):ocfs2_check_volume:2404 ERROR: status = -22
[   54.684797][ T6197] (syz.1.105,6197,0):ocfs2_check_volume:2432 ERROR: status = -22
[   54.688421][ T6197] (syz.1.105,6197,0):ocfs2_mount_volume:1764 ERROR: status = -22
[   54.692695][ T6197] (syz.1.105,6197,0):ocfs2_fill_super:1177 ERROR: status = -22
[   54.715598][  T972] usb 1-1: USB disconnect, device number 3
[   54.795800][ T6208] loop1: detected capacity change from 0 to 4096
[   54.799660][ T6208] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   55.012181][ T6210] ntfs3(loop1): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[   55.021518][ T6210] ntfs3(loop1): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[   55.369179][ T6218] loop0: detected capacity change from 0 to 4096
[   55.371792][ T6218] ntfs3: Unknown parameter 'window*s_names'
[   55.783432][ T6229] netlink: 64 bytes leftover after parsing attributes in process `syz.1.114'.
[   56.139306][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'.
[   56.177059][ T6252] loop2: detected capacity change from 0 to 4096
[   56.183611][ T6252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.229963][ T6257] loop0: detected capacity change from 0 to 8
[   56.233171][ T6257] SQUASHFS error: Unable to read inode 0x11f
[   56.240199][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.333514][ T6263] loop2: detected capacity change from 0 to 2048
[   56.365203][ T6263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.390066][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.074706][ T6286] loop2: detected capacity change from 0 to 256
[   57.145532][ T6287] loop1: detected capacity change from 0 to 1024
[   57.175769][ T6287] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[   57.178045][ T6287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   57.181302][ T6287] vhci_hcd vhci_hcd.0: Device attached
[   57.417269][ T5912] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[   57.585851][ T6297] capability: warning: `syz.0.139' uses deprecated v2 capabilities in a way that may be insecure
[   57.809470][ T6303] loop2: detected capacity change from 0 to 1764
[   58.209704][ T6301] loop0: detected capacity change from 0 to 32768
[   58.213252][ T6289] vhci_hcd: connection reset by peer
[   58.215738][   T12] vhci_hcd: stop threads
[   58.218183][   T12] vhci_hcd: release socket
[   58.220115][   T12] vhci_hcd: disconnect device
[   58.263677][ T6301] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   58.270298][ T6306] loop2: detected capacity change from 0 to 32768
[   58.277749][ T6306] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.143 (6306)
[   58.291901][ T6306] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   58.298489][ T6301] XFS (loop0): Ending clean mount
[   58.301223][ T6301] XFS (loop0): Quotacheck needed: Please wait.
[   58.303629][ T6306] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   58.311491][ T6301] XFS (loop0): Quotacheck: Done.
[   58.326583][ T6306] BTRFS info (device loop2): rebuilding free space tree
[   58.333812][ T6306] BTRFS info (device loop2): allowing degraded mounts
[   58.337774][ T6306] BTRFS info (device loop2): enabling ssd optimizations
[   58.340927][ T6306] BTRFS info (device loop2): enabling free space tree
[   58.348799][ T6306] BTRFS info (device loop2): force clearing of disk cache
[   58.352033][ T6306] BTRFS info (device loop2): use zstd compression, level 3
[   58.355311][ T6306] BTRFS info (device loop2): max_inline set to 0
[   58.359400][ T5853] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   58.397848][ T5845] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   58.431156][ T6332] process 'syz.0.144' launched './file0' with NULL argv: empty string added
[   58.706738][   T47] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   58.861873][   T47] usb 1-1: config 0 has an invalid interface number: 212 but max is 0
[   58.864721][   T47] usb 1-1: config 0 has no interface number 0
[   58.876694][   T47] usb 1-1: config 0 interface 212 has no altsetting 0
[   58.880812][   T47] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6
[   58.883799][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.886468][   T47] usb 1-1: Product: syz
[   58.887920][   T47] usb 1-1: Manufacturer: syz
[   58.889425][   T47] usb 1-1: SerialNumber: syz
[   58.892054][   T47] usb 1-1: config 0 descriptor??
[   58.897771][   T47] HFC-S_USB 1-1:0.212: probe with driver HFC-S_USB failed with error -5
[   58.960134][ T6352] loop2: detected capacity change from 0 to 32768
[   58.967638][ T6352] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   58.987455][ T6352] XFS (loop2): Ending clean mount
[   58.990321][ T6352] XFS (loop2): Quotacheck needed: Please wait.
[   58.995847][ T6352] XFS (loop2): Quotacheck: Done.
[   59.015063][ T6352] mmap: syz.2.153 (6352) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   59.031911][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   59.046682][   T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   59.106094][  T972] usb 1-1: USB disconnect, device number 4
[   59.198899][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   59.203043][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[   59.208531][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[   59.212647][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   59.219968][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[   59.223937][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.228134][   T10] usb 2-1: Product: syz
[   59.230088][   T10] usb 2-1: Manufacturer: syz
[   59.232246][   T10] usb 2-1: SerialNumber: syz
[   59.235885][   T10] usb 2-1: config 0 descriptor??
[   59.241566][   T10] xbox_remote_probe: Unexpected endpoint_in
[   59.445075][  T972] usb 2-1: USB disconnect, device number 4
[   59.532742][ T6376] loop2: detected capacity change from 0 to 8
[   59.535720][ T6376] SQUASHFS error: Unable to read inode 0x127
[   59.816731][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   59.968468][   T10] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[   59.971879][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   59.975951][   T10] usb 3-1: config 0 has no interface number 0
[   59.979703][ T6391] loop1: detected capacity change from 0 to 22
[   59.981896][   T10] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   59.982735][ T6391] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   59.992717][   T10] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   59.998795][ T6391] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   60.003887][   T10] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[   60.010019][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.010587][ T6391] MTD: Attempt to mount non-MTD device "./file0"
[   60.013435][   T10] usb 3-1: Product: syz
[   60.017709][   T10] usb 3-1: Manufacturer: syz
[   60.019597][   T10] usb 3-1: SerialNumber: syz
[   60.022533][   T10] usb 3-1: config 0 descriptor??
[   60.055145][ T6391] ./file0: Can't open blockdev
[   60.406696][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   60.556702][    T9] usb 2-1: Using ep0 maxpacket: 16
[   60.566454][    T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[   60.569689][    T9] usb 2-1: config 0 has no interface number 0
[   60.572955][    T9] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   60.578988][    T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   60.582750][    T9] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   60.586138][    T9] usb 2-1: Product: syz
[   60.588459][    T9] usb 2-1: SerialNumber: syz
[   60.594265][    T9] usb 2-1: config 0 descriptor??
[   60.599177][    T9] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[   60.622012][ T6411] loop0: detected capacity change from 0 to 32768
[   60.645281][   T47] usb 3-1: USB disconnect, device number 3
[   60.664729][ T6411] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[   60.664748][ T6411]   allowing incompatible features above 0.0: (unknown version)
[   60.664753][ T6411]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   60.683570][ T6411] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   60.686510][ T6411] bcachefs (loop0): initializing new filesystem
[   60.692508][ T6411] bcachefs (loop0): going read-write
[   60.695838][ T6411] bcachefs (loop0): marking superblocks
[   60.700593][ T6411] bcachefs (loop0): initializing freespace
[   60.703899][ T6411] bcachefs (loop0): done initializing freespace
[   60.707508][ T6411] bcachefs (loop0): reading snapshots table
[   60.709477][ T6411] bcachefs (loop0): reading snapshots done
[   60.716322][ T6411] bcachefs (loop0): done starting filesystem
[   60.757720][   T33] audit: type=1804 audit(1756159859.383:7): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.176" name="/newroot/58/bus/bus" dev="loop0" ino=4098 res=1 errno=0
[   60.764853][ T6411] bcachefs (loop0): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[   60.764853][ T6411]   set version_upgrade=incompat to enable
[   60.793028][ T5853] bcachefs (loop0): shutting down
[   60.795132][ T5853] bcachefs (loop0): going read-only
[   60.797151][ T5853] bcachefs (loop0): finished waiting for writes to stop
[   60.799994][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[   60.800707][ T5880] usb 2-1: USB disconnect, device number 5
[   60.812115][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[   60.815925][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 4
[   60.819263][ T5853] bcachefs (loop0): marking filesystem clean
[   60.829413][ T5853] bcachefs (loop0): shutdown complete
[   61.415721][ T6439] loop2: detected capacity change from 0 to 32768
[   61.418901][ T6439] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.185 (6439)
[   61.425782][ T6439] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   61.433293][ T6439] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   61.467507][ T6439] BTRFS info (device loop2): enabling ssd optimizations
[   61.470314][ T6439] BTRFS info (device loop2): turning on sync discard
[   61.483353][ T6439] BTRFS info (device loop2): enabling free space tree
[   61.486117][ T6439] BTRFS info (device loop2): use zlib compression, level 3
[   61.522932][ T6445] loop1: detected capacity change from 0 to 32768
[   61.527046][ T5845] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   61.557183][ T6445] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   61.570603][   T33] audit: type=1800 audit(1756159860.193:8): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.188" name="file1" dev="loop1" ino=9553 res=0 errno=0
[   61.638773][   T33] audit: type=1800 audit(1756159860.263:9): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.188" name="file1" dev="loop1" ino=9553 res=0 errno=0
[   61.811739][  T972] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   61.899715][ T6484] loop0: detected capacity change from 0 to 4096
[   61.919827][ T6484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.929272][ T6445] (syz.1.188,6445,1):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = -28
[   61.935267][   T33] audit: type=1800 audit(1756159860.553:10): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name="file1" dev="loop0" ino=15 res=0 errno=0
[   61.948787][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.980492][  T972] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   61.993387][  T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 64
[   62.009186][ T5850] ocfs2: Unmounting device (7,1) on (node local)
[   62.010482][  T972] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   62.014986][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.019219][  T972] usb 3-1: Product: syz
[   62.021093][  T972] usb 3-1: Manufacturer: syz
[   62.022688][  T972] usb 3-1: SerialNumber: syz
[   62.028072][  T972] usb 3-1: config 0 descriptor??
[   62.031326][ T6465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   62.081940][ T6492] sctp: [Deprecated]: syz.0.199 (pid 6492) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.081940][ T6492] Use struct sctp_sack_info instead
[   62.146664][  T972] rc_core: IR keymap rc-streamzap not found
[   62.149128][  T972] Registered IR keymap rc-empty
[   62.152392][  T972] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   62.159514][  T972] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5
[   62.261424][    T9] usb 3-1: USB disconnect, device number 4
[   62.436783][ T6494] loop1: detected capacity change from 0 to 32768
[   62.546831][ T5912] vhci_hcd: vhci_device speed not set
[   63.177704][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'.
[   63.317687][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   63.376273][ T6533] Zero length message leads to an empty skb
[   63.402842][ T6535] capability: warning: `syz.0.217' uses 32-bit capabilities (legacy support in use)
[   63.420466][ T6537] loop0: detected capacity change from 0 to 8
[   63.423001][ T6537] SQUASHFS error: Failed to read block 0x62: -5
[   63.425008][ T6537] squashfs image failed sanity check
[   63.469105][    T9] usb 3-1: Using ep0 maxpacket: 32
[   63.488708][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   63.492846][    T9] usb 3-1: config 0 has no interface number 0
[   63.495704][    T9] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[   63.501742][    T9] usb 3-1: config 0 interface 1 has no altsetting 0
[   63.510908][    T9] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[   63.514672][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.517874][    T9] usb 3-1: Product: syz
[   63.519639][    T9] usb 3-1: Manufacturer: syz
[   63.521443][    T9] usb 3-1: SerialNumber: syz
[   63.525925][    T9] usb 3-1: config 0 descriptor??
[   63.756425][    T9] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[   63.762801][    T9] cx231xx 3-1:0.1: Failed to read PCB config
[   63.765914][    T9] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71
[   63.772514][    T9] usb 3-1: USB disconnect, device number 5
[   64.288029][ T6546] loop1: detected capacity change from 0 to 4096
[   64.293828][ T6546] EXT4-fs (loop1): Test dummy encryption mode enabled
[   64.310779][ T6546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.407770][ T6546] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   64.411452][ T6546] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.222: bg 0: block 232: padding at end of block bitmap is not set
[   64.453458][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.666201][ T6576] cgroup: Need name or subsystem set
[   64.776542][ T6588] loop1: detected capacity change from 0 to 1024
[   64.788308][ T6588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.792583][ T6588] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.797643][ T6588] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.236: path /76/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[   64.804703][ T6588] EXT4-fs (loop1): Remounting filesystem read-only
[   64.807453][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   64.818791][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.869265][ T6594] loop1: detected capacity change from 0 to 512
[   64.874899][ T6594] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   64.887550][ T6594] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6).
[   64.891285][ T6594] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   64.897172][ T6594] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   64.907294][ T6594] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6).
[   64.910906][ T6594] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   64.927350][ T5850] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   64.956746][    T9] usb 3-1: Using ep0 maxpacket: 16
[   64.962981][    T9] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2
[   64.966568][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.971499][    T9] usb 3-1: Product: syz
[   64.973250][    T9] usb 3-1: Manufacturer: syz
[   64.975921][    T9] usb 3-1: SerialNumber: syz
[   64.988270][    T9] usb 3-1: config 0 descriptor??
[   64.992927][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   65.002518][    T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2
[   65.200572][    T9] usb 3-1: USB disconnect, device number 6
[   65.223779][ T6613] QAT: failed to copy from user.
[   65.265247][ T6615] loop1: detected capacity change from 0 to 4096
[   65.270072][ T6615] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   65.273626][ T6615] ntfs3(loop1): Failed to load $MFT.
[   65.388615][ T6626] loop1: detected capacity change from 0 to 64
[   65.391122][ T6626] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[   65.416447][ T6628] loop1: detected capacity change from 0 to 256
[   65.465218][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'.
[   65.501051][ T6638] loop1: detected capacity change from 0 to 2048
[   65.509164][ T6638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   65.540351][ T6642] bridge1: entered promiscuous mode
[   65.632910][ T6646] loop0: detected capacity change from 0 to 16
[   65.639288][ T6646] erofs (device loop0): mounted with root inode @ nid 36.
[   65.946346][   T33] audit: type=1326 audit(1756159864.563:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.2.265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6558ebe9 code=0x7ffc0000
[   65.954783][   T33] audit: type=1326 audit(1756159864.563:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.2.265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6558ebe9 code=0x7ffc0000
[   65.963460][   T33] audit: type=1326 audit(1756159864.573:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.2.265" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6558ebe9 code=0x7ffc0000
[   65.976169][   T33] audit: type=1326 audit(1756159864.573:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.2.265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6558ebe9 code=0x7ffc0000
[   65.986491][ T6650] loop1: detected capacity change from 0 to 32768
[   65.989113][   T33] audit: type=1326 audit(1756159864.573:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.2.265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6558ebe9 code=0x7ffc0000
[   65.998478][   T33] audit: type=1326 audit(1756159864.573:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.2.265" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6558ebe9 code=0x7ffc0000
[   66.008786][   T33] audit: type=1326 audit(1756159864.573:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.2.265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6558ebe9 code=0x7ffc0000
[   66.018533][   T33] audit: type=1326 audit(1756159864.573:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.2.265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6558ebe9 code=0x7ffc0000
[   66.027502][   T33] audit: type=1326 audit(1756159864.583:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.2.265" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fce6558ebe9 code=0x7ffc0000
[   66.037396][   T33] audit: type=1326 audit(1756159864.583:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.2.265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6558ebe9 code=0x7ffc0000
[   66.046125][ T6650] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   66.064211][ T6650] XFS (loop1): Ending clean mount
[   66.068591][ T6650] XFS (loop1): Quotacheck needed: Please wait.
[   66.077227][ T6650] XFS (loop1): Quotacheck: Done.
[   66.091924][ T5850] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   66.433199][ T6674] loop1: detected capacity change from 0 to 32768
[   66.444047][ T6674] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.270 (6674)
[   66.455343][ T6674] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   66.464223][ T6674] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   66.471259][ T6674] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   66.559434][ T6674] BTRFS info (device loop1): rebuilding free space tree
[   66.563898][ T6674] BTRFS info (device loop1): disabling free space tree
[   66.566860][ T6674] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   66.570479][ T6674] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   66.575856][ T6674] BTRFS info (device loop1): allowing degraded mounts
[   66.584742][ T6674] BTRFS info (device loop1): enabling ssd optimizations
[   66.587837][ T6674] BTRFS info (device loop1): enabling disk space caching
[   66.598218][ T6674] BTRFS info (device loop1): force clearing of disk cache
[   66.603196][ T6674] BTRFS info (device loop1): use zlib compression, level 3
[   66.627500][ T6674] BTRFS info (device loop1): balance: start -f -sprofiles=data|system|metadata|raid1|dup|raid5|raid1c3,usage=18446744073709551615,usage=4294967295..4294967295,drange=18446744073709551612..8,vrange=288230376151711744..1,limit=51539607559
[   66.643104][ T6674] BTRFS info (device loop1): balance: ended with status: 0
[   66.675135][ T5850] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   66.728526][ T6705] loop0: detected capacity change from 0 to 1024
[   66.764158][ T1088] hfsplus: b-tree write err: -5, ino 4
[   66.781501][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'.
[   67.010904][ T6712] loop0: detected capacity change from 0 to 40427
[   67.014229][ T6712] F2FS-fs (loop0): invalid crc value
[   67.016841][ T6725] loop2: detected capacity change from 0 to 2048
[   67.022766][ T6725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   67.030935][ T6712] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   67.034098][ T6712] F2FS-fs (loop0): Start checkpoint disabled!
[   67.038373][ T6712] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   67.400456][ T6731] loop0: detected capacity change from 0 to 256
[   67.403581][ T6731] FAT-fs (loop0): Directory bread(block 1285) failed
[   67.409132][ T6731] FAT-fs (loop0): Directory bread(block 1285) failed
[   67.438116][ T6733] loop0: detected capacity change from 0 to 1024
[   67.453767][   T27] hfsplus: b-tree write err: -5, ino 4
[   68.055697][ T6756] loop1: detected capacity change from 0 to 16
[   68.060577][ T6756] erofs (device loop1): mounted with root inode @ nid 36.
[   68.135056][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.342406][ T6766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.392893][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'.
[   69.068462][ T6799] loop1: detected capacity change from 0 to 32768
[   69.072694][ T6799] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.318 (6799)
[   69.079722][ T6799] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   69.084038][ T6799] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   69.097063][ T6799] BTRFS info (device loop1): enabling ssd optimizations
[   69.099653][ T6799] BTRFS info (device loop1): enabling free space tree
[   69.102698][ T6799] BTRFS info (device loop1): use lzo compression, level 0
[   69.132344][ T5850] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   69.237670][ T6820] openvswitch: netlink: IP tunnel TTL not specified.
[   69.260472][ T6822] netlink: 'syz.1.322': attribute type 10 has an invalid length.
[   69.613329][ T6839] loop2: detected capacity change from 0 to 8
[   69.631326][ T6839] squashfs image failed sanity check
[   69.769593][ T6843] loop0: detected capacity change from 0 to 128
[   69.772553][ T6843] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   69.777083][ T6843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.951854][ T6852] loop0: detected capacity change from 0 to 32768
[   69.957898][ T6852] read_mapping_page failed!
[   69.959677][ T6852] ERROR: (device loop0): txCommit: 
[   69.959677][ T6852] 
[   69.962403][ T6852] ERROR: (device loop0): diFree: numfree > numinos
[   69.962403][ T6852] 
[   70.117811][ T6866] loop0: detected capacity change from 0 to 4096
[   70.121859][ T6866] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   70.133528][ T6866] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   70.149904][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'.
[   70.244261][ T6876] loop0: detected capacity change from 0 to 4096
[   70.249497][ T6876] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   70.284361][ T6876] ntfs3(loop0): ino=0, attr_set_size
[   70.290970][ T6876] ntfs3(loop0): ino=0, attr_set_size
[   70.341149][ T6888] loop2: detected capacity change from 0 to 512
[   70.351665][ T6888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.387696][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.408380][ T6898] loop2: detected capacity change from 0 to 512
[   70.413131][ T6898] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   70.416938][ T6898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[   70.420354][ T6898] EXT4-fs (loop2): orphan cleanup on readonly fs
[   70.423310][ T6898] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.355: iget: bad i_size value: 12154761577498
[   70.431883][ T6898] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.355: couldn't read orphan inode 13 (err -117)
[   70.441241][ T6898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   70.459523][ T6898] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.355: dx entry: limit 65535 != root limit 120
[   70.466903][ T6898] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.355: Corrupt directory, running e2fsck is recommended
[   70.506261][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.572982][ T6896] loop0: detected capacity change from 0 to 32768
[   70.576566][ T6896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.354 (6896)
[   70.583483][ T6896] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   70.597843][ T6896] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   70.604180][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.362'.
[   70.611881][ T6915] netlink: 224 bytes leftover after parsing attributes in process `syz.2.362'.
[   70.627556][ T6923] loop1: detected capacity change from 0 to 16
[   70.631161][ T6923] erofs (device loop1): mounted with root inode @ nid 36.
[   70.682574][ T6896] BTRFS info (device loop0): rebuilding free space tree
[   70.697184][ T6896] BTRFS info (device loop0): allowing degraded mounts
[   70.705315][ T6896] BTRFS info (device loop0): enabling ssd optimizations
[   70.713127][ T6896] BTRFS info (device loop0): enabling free space tree
[   70.715962][ T6896] BTRFS info (device loop0): force clearing of disk cache
[   70.721379][ T6896] BTRFS info (device loop0): use zstd compression, level 3
[   70.726073][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   70.731241][ T6896] BTRFS info (device loop0): max_inline set to 0
[   70.735231][   T10] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   70.797601][ T6926] loop2: detected capacity change from 0 to 32768
[   70.811736][ T6926] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   70.838906][ T5853] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   70.844541][ T5845] ocfs2: Unmounting device (7,2) on (node local)
[   70.895596][ T6948] netlink: 'syz.1.373': attribute type 6 has an invalid length.
[   70.974409][ T6962] loop2: detected capacity change from 0 to 128
[   70.979214][ T6962] EXT4-fs (loop2): Test dummy encryption mode enabled
[   70.986233][ T6962] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   71.000941][ T6965] loop0: detected capacity change from 0 to 1024
[   71.003429][ T6965] EXT4-fs: Ignoring removed mblk_io_submit option
[   71.016159][ T6965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.060338][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.062183][ T6962] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   71.091227][ T5845] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   71.108455][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.110871][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.303511][ T6982] binder: 6981:6982 ioctl c00c6211 0 returned -14
[   71.306576][ T6984] netlink: 164 bytes leftover after parsing attributes in process `syz.0.384'.
[   71.426020][ T6986] loop2: detected capacity change from 0 to 32768
[   71.432591][ T6986] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   71.438909][ T6986] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   71.447015][ T6986] (syz.2.385,6986,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[   71.450157][ T6986] (syz.2.385,6986,1):update_backups:196 ERROR: status = -12
[   71.453028][ T6986] ocfs2: Failed to update super blocks on 7,2 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it
[   71.465547][ T5845] ocfs2: Unmounting device (7,2) on (node local)
[   71.561924][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'.
[   71.692550][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'.
[   71.976802][   T47] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   72.000528][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   72.004007][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'.
[   72.126768][   T47] usb 3-1: Using ep0 maxpacket: 8
[   72.133028][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[   72.138198][   T47] usb 3-1: config 8 has an invalid interface number: 255 but max is 0
[   72.141653][   T47] usb 3-1: config 8 has no interface number 0
[   72.144328][   T47] usb 3-1: config 8 interface 255 has no altsetting 0
[   72.151855][   T47] usb 3-1: string descriptor 0 read error: -22
[   72.154654][   T47] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[   72.159281][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.171369][ T7022] loop1: detected capacity change from 0 to 32768
[   72.177925][ T7022] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   72.192549][ T7022] XFS (loop1): Ending clean mount
[   72.217608][ T5850] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   72.284800][ T7032] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   72.291265][ T7032] iommufd_mock iommufd_mock1: Adding to iommu group 1
[   72.368816][   T47] catc 3-1:8.255: Can't set altsetting 1.
[   72.371336][   T47] catc 3-1:8.255: probe with driver catc failed with error -5
[   72.377845][   T47] usb 3-1: USB disconnect, device number 7
[   72.438896][ T7050] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   72.630115][   T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1)
[   72.917343][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   73.081827][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   73.085126][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   73.088618][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   73.099047][   T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[   73.102155][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.105093][   T10] usb 2-1: Product: syz
[   73.106503][   T10] usb 2-1: Manufacturer: syz
[   73.108272][   T10] usb 2-1: SerialNumber: syz
[   73.112486][   T10] usb 2-1: config 0 descriptor??
[   73.118035][   T10] adutux 2-1:0.0: interrupt endpoints not found
[   73.157044][ T5894] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   73.306900][ T5894] usb 3-1: Using ep0 maxpacket: 16
[   73.320905][   T47] usb 2-1: USB disconnect, device number 6
[   73.321612][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.332694][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.337294][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   73.343089][ T5894] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[   73.349860][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.354181][ T5894] usb 3-1: config 0 descriptor??
[   73.360777][ T5894] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7
[   73.369105][ T5281] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   73.374692][ T5281] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   73.380606][ T5281] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   73.385661][ T5281] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[   73.578740][   T47] usb 3-1: USB disconnect, device number 8
[   73.851619][ T7097] netlink: 'syz.1.433': attribute type 1 has an invalid length.
[   73.869655][ T7097] gretap1: entered allmulticast mode
[   73.873140][ T7097] bond1: (slave gretap1): making interface the new active one
[   73.876479][ T7097] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   73.927830][   T33] kauditd_printk_skb: 6 callbacks suppressed
[   73.927839][   T33] audit: type=1326 audit(73.806:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.0.439" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83dcb8ebe9 code=0x0
[   73.990017][ T7116] loop0: detected capacity change from 0 to 2048
[   73.993215][ T7116] NILFS (loop0): too small inode size: 0 bytes
[   74.106976][ T7112] loop1: detected capacity change from 0 to 32768
[   74.112763][ T7112] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.441 (7112)
[   74.246329][ T7134] netlink: 'syz.0.451': attribute type 2 has an invalid length.
[   74.352152][ T7128] loop2: detected capacity change from 0 to 65536
[   74.357993][ T7112] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[   74.374316][ T7112] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   74.393556][ T7128] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   74.431118][ T7128] XFS (loop2): Ending clean mount
[   74.437447][ T7128] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[   74.441270][ T7128] XFS (loop2): Unmount and run xfs_repair
[   74.443174][ T7128] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   74.446274][ T7128] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[   74.449979][ T7128] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[   74.453638][ T7128] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[   74.454636][ T7164] loop0: detected capacity change from 0 to 1024
[   74.457701][ T7128] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[   74.463677][ T7128] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   74.467385][ T7128] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[   74.471008][ T7128] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   74.475394][ T7128] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   74.475957][   T26] hfsplus: b-tree write err: -5, ino 4
[   74.479580][ T7128] XFS (loop2): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[   74.488120][ T7128] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[   74.494032][ T7128] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   74.516977][ T5845] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   74.526271][ T7112] BTRFS info (device loop1): enabling ssd optimizations
[   74.532700][ T7112] BTRFS info (device loop1): enabling free space tree
[   74.587050][ T5850] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[   74.707315][ T7202] loop0: detected capacity change from 0 to 256
[   74.710180][ T7201] loop1: detected capacity change from 0 to 1024
[   74.710534][ T7202] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   74.718398][ T7202] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   74.751106][ T7206] tmpfs: Bad value for 'mpol'
[   74.881970][ T7211] loop0: detected capacity change from 0 to 40427
[   74.885389][ T7211] F2FS-fs (loop0): invalid crc value
[   74.905283][ T7211] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   74.909240][ T7215] loop1: detected capacity change from 0 to 32768
[   74.913399][ T7211] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   74.914881][ T7215] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   74.937244][ T5853] syz-executor: attempt to access beyond end of device
[   74.937244][ T5853] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   74.937909][ T5850] (syz-executor,5850,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[   74.943055][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   74.943071][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.943079][ T5853] Call Trace:
[   74.943083][ T5853]  <TASK>
[   74.943088][ T5853]  dump_stack_lvl+0x189/0x250
[   74.943107][ T5853]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.943120][ T5853]  ? __pfx_queue_work_on+0x10/0x10
[   74.943132][ T5853]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.943147][ T5853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   74.943164][ T5853]  f2fs_handle_critical_error+0x37c/0x540
[   74.943193][ T5853]  f2fs_write_end_io+0x886/0xb60
[   74.943210][ T5853]  __submit_merged_bio+0x27a/0x6a0
[   74.943255][ T5853]  __submit_merged_write_cond+0x255/0x530
[   74.943272][ T5853]  f2fs_write_data_pages+0x261d/0x3000
[   74.943288][ T5853]  ? arch_stack_walk+0xfc/0x150
[   74.943311][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   74.943327][ T5853]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.943344][ T5853]  ? rcu_is_watching+0x15/0xb0
[   74.943367][ T5853]  ? folios_put_refs+0x559/0x640
[   74.943383][ T5853]  ? __pfx_folios_put_refs+0x10/0x10
[   74.943394][ T5853]  ? rcu_is_watching+0x15/0xb0
[   74.943403][ T5853]  ? lru_add+0xa2f/0xd80
[   74.943414][ T5853]  ? lru_add+0x198/0xd80
[   74.943426][ T5853]  ? folio_batch_move_lru+0x319/0x3a0
[   74.943440][ T5853]  ? filemap_get_folios_tag+0xed/0x630
[   74.943450][ T5853]  ? rcu_is_watching+0x15/0xb0
[   74.943462][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   74.943478][ T5853]  do_writepages+0x32e/0x550
[   74.943494][ T5853]  ? rcu_is_watching+0x15/0xb0
[   74.943506][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[   74.943522][ T5853]  filemap_fdatawrite+0x199/0x240
[   74.943536][ T5853]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   74.943563][ T5853]  ? rcu_is_watching+0x15/0xb0
[   74.943575][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[   74.943589][ T5853]  f2fs_sync_dirty_inodes+0x31f/0x830
[   74.943604][ T5853]  f2fs_write_checkpoint+0x95a/0x1df0
[   74.943623][ T5853]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   74.943648][ T5853]  ? kill_f2fs_super+0x298/0x6c0
[   74.943661][ T5853]  kill_f2fs_super+0x2c3/0x6c0
[   74.943674][ T5853]  ? __pfx_kill_f2fs_super+0x10/0x10
[   74.943684][ T5853]  ? radix_tree_delete_item+0x2b6/0x400
[   74.943701][ T5853]  ? shrinker_free+0x2ce/0x3e0
[   74.943715][ T5853]  deactivate_locked_super+0xbc/0x130
[   74.943729][ T5853]  cleanup_mnt+0x425/0x4c0
[   74.943743][ T5853]  task_work_run+0x1d4/0x260
[   74.943759][ T5853]  ? __pfx_task_work_run+0x10/0x10
[   74.943773][ T5853]  ? __x64_sys_umount+0x122/0x160
[   74.943787][ T5853]  ? __pfx___x64_sys_umount+0x10/0x10
[   74.943801][ T5853]  ? rcu_is_watching+0x15/0xb0
[   74.943813][ T5853]  exit_to_user_mode_loop+0xec/0x110
[   74.943829][ T5853]  do_syscall_64+0x2bd/0x3b0
[   74.943846][ T5853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.943858][ T5853]  ? exc_page_fault+0x9f/0xf0
[   74.943872][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.943883][ T5853] RIP: 0033:0x7f83dcb8ff17
[   74.943894][ T5853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   74.943904][ T5853] RSP: 002b:00007ffc939d8a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   74.943917][ T5853] RAX: 0000000000000000 RBX: 00007f83dcc11c05 RCX: 00007f83dcb8ff17
[   74.943925][ T5853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc939d8ac0
[   74.943932][ T5853] RBP: 00007ffc939d8ac0 R08: 0000000000000000 R09: 0000000000000000
[   74.943939][ T5853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc939d9b50
[   74.943946][ T5853] R13: 00007f83dcc11c05 R14: 0000000000012437 R15: 00007ffc939d9b90
[   74.943959][ T5853]  </TASK>
[   74.943964][ T5853] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   74.953662][ T5850] ocfs2: Unmounting device (7,1) on (node local)
[   75.196824][ T7227] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   75.268303][ T7223] loop1: detected capacity change from 0 to 32768
[   75.271842][ T7223] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.480 (7223)
[   75.281519][ T7223] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   75.285737][ T7223] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   75.289446][ T7223] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   75.313319][ T7223] BTRFS info (device loop1): rebuilding free space tree
[   75.321128][ T7223] BTRFS info (device loop1): disabling free space tree
[   75.324422][ T7223] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   75.329569][ T7223] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   75.337126][ T7223] BTRFS info (device loop1): setting nodatasum
[   75.339889][ T7223] BTRFS info (device loop1): setting nodatacow
[   75.342602][ T7223] BTRFS info (device loop1): enabling disk space caching
[   75.345724][ T7223] BTRFS info (device loop1): force clearing of disk cache
[   75.350179][ T7223] BTRFS info (device loop1): doing ref verification
[   75.378470][ T5850] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   75.592079][ T7264] syz.0.488: attempt to access beyond end of device
[   75.592079][ T7264] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0
[   75.598103][ T7264] syz.0.488: attempt to access beyond end of device
[   75.598103][ T7264] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0
[   75.892751][ T7276] netlink: 76 bytes leftover after parsing attributes in process `syz.2.494'.
[   76.278310][ T7278] netlink: 'syz.0.495': attribute type 10 has an invalid length.
[   76.284463][ T7278] team0: Port device dummy0 added
[   76.289048][ T7278] netlink: 'syz.0.495': attribute type 10 has an invalid length.
[   76.292551][ T7278] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   76.298011][ T7278] team0: Failed to send options change via netlink (err -105)
[   76.300869][ T7278] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   76.304286][ T7278] team0: Port device dummy0 removed
[   76.311590][ T7278] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   76.546759][   T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   76.717876][ T5855] Bluetooth: hci2: command 0x0405 tx timeout
[   76.787352][   T47] usb 2-1: Using ep0 maxpacket: 8
[   76.791748][   T47] usb 2-1: config 6 has an invalid interface number: 64 but max is 0
[   76.795049][   T47] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[   76.799349][   T47] usb 2-1: config 6 has no interface number 0
[   76.801816][   T47] usb 2-1: too many endpoints for config 6 interface 64 altsetting 21: 207, using maximum allowed: 30
[   76.806188][   T47] usb 2-1: config 6 interface 64 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[   76.811752][   T47] usb 2-1: config 6 interface 64 has no altsetting 0
[   76.816767][   T47] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   76.820334][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.823552][   T47] usb 2-1: Product: syz
[   76.825213][   T47] usb 2-1: Manufacturer: syz
[   76.827152][   T47] usb 2-1: SerialNumber: syz
[   77.006715][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   77.032245][ T5894] usb 2-1: USB disconnect, device number 7
[   77.158323][   T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   77.163121][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.168316][   T10] usb 3-1: config 0 descriptor??
[   77.171911][   T10] cp210x 3-1:0.0: cp210x converter detected
[   77.448412][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'.
[   77.571154][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'.
[   77.574777][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'.
[   77.578694][   T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71
[   77.582481][   T10] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71
[   77.585748][   T10] cp210x 3-1:0.0: GPIO initialisation failed: -71
[   77.592027][   T10] usb 3-1: cp210x converter now attached to ttyUSB0
[   77.603910][   T10] usb 3-1: USB disconnect, device number 9
[   77.607910][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   77.611225][   T10] cp210x 3-1:0.0: device disconnected
[   77.847758][ T5880] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   77.916837][ T5894] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   77.998394][ T5880] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   78.002120][ T5880] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   78.005391][ T5880] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   78.008913][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.078298][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   78.083965][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   78.089728][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   78.093964][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   78.099819][ T5894] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   78.103656][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.108734][ T5894] usb 1-1: config 0 descriptor??
[   78.218112][ T5880] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[   78.221601][ T5880] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input9
[   78.225438][ T5880] input: failed to attach handler kbd to device input9, error: -5
[   78.231299][ T5880] usb 2-1: USB disconnect, device number 8
[   78.346691][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   78.515290][ T5894] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max
[   78.517934][   T10] usb 3-1: Using ep0 maxpacket: 16
[   78.522193][ T5894] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   78.527709][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.531275][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   78.536123][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[   78.539257][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.542011][   T10] usb 3-1: Product: syz
[   78.543391][   T10] usb 3-1: Manufacturer: syz
[   78.544853][   T10] usb 3-1: SerialNumber: syz
[   78.753510][   T10] usb 3-1: 0:2 : does not exist
[   78.758889][   T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   78.767725][   T10] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[   78.773026][   T10] usb 3-1: USB disconnect, device number 10
[   78.856034][ T7344] loop1: detected capacity change from 0 to 256
[   79.316334][ T7357] lo speed is unknown, defaulting to 1000
[   79.319372][ T7357] lo speed is unknown, defaulting to 1000
[   79.321814][ T7357] lo speed is unknown, defaulting to 1000
[   79.324681][ T7357] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   79.329730][ T7357] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   79.339144][ T7357] lo speed is unknown, defaulting to 1000
[   79.342093][ T7357] lo speed is unknown, defaulting to 1000
[   79.344690][ T7357] lo speed is unknown, defaulting to 1000
[   79.355538][ T7357] netlink: 'syz.2.532': attribute type 10 has an invalid length.
[   79.359745][ T7357] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   79.364134][   T10] lo speed is unknown, defaulting to 1000
[   79.367985][   T10] syz0: Port: 1 Link DOWN
[   79.452093][ T7367] kernel read not supported for file /   (pid: 7367 comm: syz.2.537)
[   79.454910][   T33] audit: type=1800 audit(79.326:28): pid=7367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.537" name=200120 dev="mqueue" ino=11325 res=0 errno=0
[   79.518048][ T7375] Bluetooth: MGMT ver 1.23
[   79.544478][ T7377] loop2: detected capacity change from 0 to 2048
[   79.552503][ T7377] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   79.970063][ T7389] loop1: detected capacity change from 0 to 8
[   80.271622][ T7390] SQUASHFS error: lzo decompression failed, data probably corrupt
[   80.275011][ T7390] SQUASHFS error: Failed to read block 0x0: -5
[   80.277832][ T7390] SQUASHFS error: lzo decompression failed, data probably corrupt
[   80.281192][ T7390] SQUASHFS error: Failed to read block 0x0: -5
[   80.283994][   T33] audit: type=1800 audit(80.156:29): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.547" name="file2" dev="loop1" ino=3 res=0 errno=0
[   80.473099][ T7396] netlink: 76 bytes leftover after parsing attributes in process `syz.0.549'.
[   80.544512][ T7399] netlink: 165 bytes leftover after parsing attributes in process `syz.0.550'.
[   80.688441][ T5894] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   80.692243][    T9] usb 1-1: USB disconnect, device number 5
[   80.952297][ T5894] usb 3-1: Using ep0 maxpacket: 32
[   80.962977][ T5894] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[   80.977258][ T5894] usb 3-1: config 4 has no interface number 0
[   80.980049][ T5894] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.985003][ T5894] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.007641][ T5894] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   81.011570][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.022852][ T5894] hub 3-1:4.128: USB hub found
[   81.058765][ T7403] netlink: 'syz.1.552': attribute type 10 has an invalid length.
[   81.067279][ T7403] team0: Device hsr_slave_0 failed to register rx_handler
[   81.224181][ T7405] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in;
[   81.224181][ T7405]    program syz.1.553 not setting count and/or reply_len properly
[   81.232287][ T5894] hub 3-1:4.128: 6 ports detected
[   81.234833][ T5894] hub 3-1:4.128: Using single TT (err -22)
[   81.242958][ T5894] hub 3-1:4.128: insufficient power available to use all downstream ports
[   81.370303][ T1273] cfg80211: failed to load regulatory.db
[   81.515065][ T7413] netlink: 'syz.1.557': attribute type 6 has an invalid length.
[   81.597225][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   81.601937][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout
[   81.652805][ T5894] usb 3-1: USB disconnect, device number 11
[   81.796815][   T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   81.860615][ T7417] loop0: detected capacity change from 0 to 32768
[   81.863618][ T7417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.559 (7417)
[   81.870582][ T7417] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   81.873941][ T7417] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   81.896495][ T7417] BTRFS info (device loop0): enabling ssd optimizations
[   81.899567][ T7417] BTRFS info (device loop0): enabling free space tree
[   81.911110][ T5853] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   81.956776][   T47] usb 2-1: Using ep0 maxpacket: 16
[   81.963451][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.968256][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.972250][   T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   81.977764][   T47] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   81.981536][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.989487][   T47] usb 2-1: config 0 descriptor??
[   82.314404][ T7445] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   82.318180][ T7445] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   82.481924][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'.
[   83.046013][   T47] HID 045e:07da: Invalid code 65791 type 1
[   83.053406][   T47] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input10
[   83.058491][   T47] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   83.067819][ T7462] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   83.070789][ T7462] overlayfs: missing 'lowerdir'
[   83.349164][   T47] usb 2-1: USB disconnect, device number 9
[   83.944591][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'.
[   84.020142][ T7476] loop1: detected capacity change from 0 to 128
[   84.045714][ T7476] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.081395][ T5850] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.239919][ T7488] loop1: detected capacity change from 0 to 32768
[   84.247927][ T7488] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   84.254171][ T7488] ocfs2: Unmounting device (7,1) on (node local)
[   84.377220][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   84.402303][ T7513] loop0: detected capacity change from 0 to 32768
[   84.405632][ T7513] jfs_mount: dbMount failed w/rc = -22
[   84.408133][ T7513] Mount JFS Failure: -22
[   84.409639][ T7513] jfs_mount failed w/return code = -22
[   84.535886][ T7519] loop1: detected capacity change from 0 to 32768
[   84.538782][   T10] usb 3-1: Using ep0 maxpacket: 32
[   84.542489][ T7519] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.595 (7519)
[   84.551748][   T10] usb 3-1: config 0 has no interfaces?
[   84.556585][   T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   84.561337][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.564787][ T7519] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   84.569298][   T10] usb 3-1: Product: syz
[   84.570987][   T10] usb 3-1: Manufacturer: syz
[   84.572854][   T10] usb 3-1: SerialNumber: syz
[   84.574881][ T7519] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   84.580730][ T7519] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   84.587979][   T10] usb 3-1: config 0 descriptor??
[   84.613393][ T7519] BTRFS info (device loop1): rebuilding free space tree
[   84.619882][ T7519] BTRFS info (device loop1): disabling free space tree
[   84.622818][ T7519] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.626556][ T7519] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   84.631775][ T7519] BTRFS info (device loop1): setting nodatasum
[   84.634373][ T7519] BTRFS info (device loop1): setting nodatacow
[   84.638098][ T7519] BTRFS info (device loop1): enabling ssd optimizations
[   84.641057][ T7519] BTRFS info (device loop1): using spread ssd allocation scheme
[   84.647303][ T7519] BTRFS info (device loop1): turning off barriers
[   84.649445][ T7519] BTRFS info (device loop1): enabling disk space caching
[   84.651803][ T7519] BTRFS info (device loop1): force clearing of disk cache
[   84.659842][ T7550] loop0: detected capacity change from 0 to 512
[   84.662652][   T33] audit: type=1800 audit(84.536:30): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.595" name="bus" dev="loop1" ino=263 res=0 errno=0
[   84.662966][ T7550] EXT4-fs: Ignoring removed oldalloc option
[   84.684265][ T7550] EXT4-fs (loop0): 1 truncate cleaned up
[   84.687990][ T7550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.689641][ T5850] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   84.718674][ T7550] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.603: invalid indirect mapped block 234881024 (level 0)
[   84.724937][ T7550] EXT4-fs (loop0): Remounting filesystem read-only
[   84.750173][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.797812][   T10] usb 3-1: USB disconnect, device number 12
[   84.814247][ T7562] netlink: 60 bytes leftover after parsing attributes in process `syz.1.606'.
[   84.817748][ T7555] netlink: 60 bytes leftover after parsing attributes in process `syz.1.606'.
[   84.881317][ T7569] netlink: 132 bytes leftover after parsing attributes in process `syz.0.612'.
[   84.990632][ T7575] Invalid ELF header type: 0 != 1
[   85.013022][ T7570] loop1: detected capacity change from 0 to 32768
[   85.019543][ T7570] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   85.055218][ T5850] ocfs2: Unmounting device (7,1) on (node local)
[   85.155623][ T7581] loop0: detected capacity change from 0 to 32768
[   85.164147][ T7581] read_mapping_page failed!
[   85.166187][ T7581] ERROR: (device loop0): txCommit: 
[   85.166187][ T7581] 
[   85.183081][  T117] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[   85.186318][  T117] ------------[ cut here ]------------
[   85.189046][  T117] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[   85.192348][  T117] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[   85.195693][  T117] CPU: 1 UID: 0 PID: 117 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[   85.199441][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.203629][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[   85.205704][  T117] Code: e5 fd 90 0f 0b e8 31 34 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba a3 03 00 00 48 c7 c1 20 28 c4 8b e8 02 28 e5 fd 90 <0f> 0b e8 0a 34 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba
[   85.213718][  T117] RSP: 0018:ffffc9000243fbc8 EFLAGS: 00010246
[   85.216336][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 3ded9183a3394e00
[   85.219669][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   85.222988][  T117] RBP: ffffc90001f92120 R08: ffffc9000243f8e7 R09: 1ffff92000487f1c
[   85.226240][  T117] R10: dffffc0000000000 R11: fffff52000487f1d R12: dffffc0000000000
[   85.229385][  T117] R13: 1ffff1100790d615 R14: ffff88803c86b0a8 R15: 0000000000000000
[   85.232663][  T117] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[   85.236310][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   85.238923][  T117] CR2: 0000001b32521ff8 CR3: 000000010aae4000 CR4: 00000000000006f0
[   85.242206][  T117] Call Trace:
[   85.243635][  T117]  <TASK>
[   85.244929][  T117]  jfs_lazycommit+0x584/0xa90
[   85.246954][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[   85.249209][  T117]  ? __pfx_default_wake_function+0x10/0x10
[   85.251685][  T117]  ? __kthread_parkme+0x7b/0x200
[   85.253789][  T117]  ? __kthread_parkme+0x1a1/0x200
[   85.255908][  T117]  kthread+0x711/0x8a0
[   85.257660][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[   85.259896][  T117]  ? __pfx_kthread+0x10/0x10
[   85.261878][  T117]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.264120][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.266348][  T117]  ? __pfx_kthread+0x10/0x10
[   85.268331][  T117]  ret_from_fork+0x3fc/0x770
[   85.270331][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[   85.272459][  T117]  ? __switch_to_asm+0x39/0x70
[   85.274413][  T117]  ? __switch_to_asm+0x33/0x70
[   85.276452][  T117]  ? __pfx_kthread+0x10/0x10
[   85.278361][  T117]  ret_from_fork_asm+0x1a/0x30
[   85.280404][  T117]  </TASK>
[   85.281739][  T117] Modules linked in:
[   85.284347][  T117] ---[ end trace 0000000000000000 ]---
[   85.290559][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[   85.292715][  T117] Code: e5 fd 90 0f 0b e8 31 34 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba a3 03 00 00 48 c7 c1 20 28 c4 8b e8 02 28 e5 fd 90 <0f> 0b e8 0a 34 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba
[   85.301006][  T117] RSP: 0018:ffffc9000243fbc8 EFLAGS: 00010246
[   85.303604][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 3ded9183a3394e00
[   85.307005][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   85.310262][  T117] RBP: ffffc90001f92120 R08: ffffc9000243f8e7 R09: 1ffff92000487f1c
[   85.313516][  T117] R10: dffffc0000000000 R11: fffff52000487f1d R12: dffffc0000000000
[   85.317017][  T117] R13: 1ffff1100790d615 R14: ffff88803c86b0a8 R15: 0000000000000000
[   85.320386][  T117] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[   85.324244][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   85.327401][  T117] CR2: 0000001b32521ff8 CR3: 00000000284dc000 CR4: 00000000000006f0
[   85.331180][  T117] Kernel panic - not syncing: Fatal exception
[   85.335163][  T117] Kernel Offset: disabled
[   85.337245][  T117] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:11:23  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81fafa4f RBX=dffffc0000000000 RCX=ffff888022b89cc0 RDX=0000000000000000
RSI=0000000000000006 RDI=000000000000001f RBP=ffffc900025df090 RSP=ffffc900025def98
R8 =ffffea000080ac77 R9 =1ffffd400010158e R10=dffffc0000000000 R11=fffff9400010158f
R12=ffffc900025df100 R13=ffffc900025df138 R14=0000000000000006 R15=0000000000000007
RIP=ffffffff81bfabb0 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5d7a6386c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555795ed5c8 CR3=000000010d9c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=030202002c034804 0028030402002603 XMM03=1202002403020200 2203000200200300
XMM04=0000000000000000 0000000000000000 XMM05=000055557d10e29b 000055557d10e1d0
XMM06=0000000000000000 0000000000000000 XMM07=02001e030002001c 0300040018030694
XMM08=010fffffffffffff 0402800401000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bde60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99def670 RSP=ffffc9000243f2b0
R8 =ffff888020640237 R9 =1ffff110040c8046 R10=dffffc0000000000 R11=ffffffff854f1c30
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1ca7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32521ff8 CR3=000000010aae4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5d79812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
