last executing test programs:

3m5.269918164s ago: executing program 0 (id=216):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x2, 0x2}, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"})

3m5.107313148s ago: executing program 0 (id=221):
r0 = inotify_init1(0x800)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x80000882)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x54)

3m4.170302108s ago: executing program 0 (id=228):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f00005b9000/0x1000)=nil, 0x1000, 0x1000003, 0x11012, r0, 0x68255000)
setreuid(0x0, 0xee00)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)

3m4.099904013s ago: executing program 0 (id=230):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001600)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@userxattr}], [], 0x2c})

3m4.055909129s ago: executing program 0 (id=232):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x80000, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "1c1f15f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}]}}]}, 0x154}}, 0x80)

3m3.750138372s ago: executing program 0 (id=235):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x34, 0x7, 0xa, 0x4, 0x2, 0x81})

3m3.695318859s ago: executing program 32 (id=235):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x34, 0x7, 0xa, 0x4, 0x2, 0x81})

2m17.970930197s ago: executing program 2 (id=695):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='.dead\x00', &(0x7f00000002c0)='\x00')

2m17.970772233s ago: executing program 2 (id=696):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m17.970415894s ago: executing program 2 (id=697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xfffffffd}]}, 0x34}}, 0x0)

2m17.908160411s ago: executing program 2 (id=699):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400), 0x0, 0x29f, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

2m17.837905166s ago: executing program 2 (id=701):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x1011}})

2m17.549121143s ago: executing program 2 (id=704):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002640)=@delchain={0xc90, 0x65, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x2, 0xffe0}, {0xc, 0x5}}, [@f_tcindex={{0xc}, {0xc60, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7}, @TCA_TCINDEX_ACT={0x4}, @TCA_TCINDEX_ACT={0xc40, 0x7, [@m_police={0xc3c, 0x16, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xd2a6, 0x0, 0x6, 0x8, 0x0, 0x8, 0xd4, 0x3, 0x4, 0xa, 0x9, 0x0, 0x8, 0x3ff, 0x1, 0x4, 0x5, 0x100, 0x2, 0x0, 0x169, 0x8, 0x9, 0x2, 0x1, 0xb69, 0x7, 0x0, 0x0, 0x5, 0x400, 0xfffffffc, 0x1, 0x10, 0x1742, 0x6, 0x1, 0x1, 0x3d5, 0x10000, 0x7ff, 0x4, 0x2, 0x4, 0x40, 0xc34d, 0x0, 0xcd2f, 0xd0a, 0x3, 0x0, 0x4, 0x5, 0x7, 0x8, 0xb8, 0x0, 0x7, 0xffffffff, 0x80, 0x40, 0x9, 0x8, 0x1, 0x4, 0x1000, 0x9, 0x200, 0x7, 0x3dc, 0xfff, 0x4, 0x9, 0x9, 0x7, 0x8001, 0xf, 0x8, 0x2, 0xffff7fff, 0x0, 0x10001, 0x6, 0x10000, 0x0, 0x5, 0x0, 0x81c2, 0xd, 0x91c6, 0xffff5317, 0x7, 0x0, 0x650, 0xf4, 0x9, 0x9, 0x8, 0x81, 0x2, 0x100, 0xa15b, 0xfffffff2, 0x0, 0x9, 0x4, 0xffcb, 0x2e6, 0xc6, 0x7, 0x4, 0x7, 0xffff, 0x8, 0x0, 0xf, 0xffffffff, 0x4e38, 0x4, 0x1ff, 0x2, 0x164e, 0xd0, 0x4, 0x0, 0x3ff, 0x100, 0xff, 0x1, 0x0, 0xe4, 0x6, 0x400, 0x67c147ec, 0x10000000, 0x2, 0x9, 0xd, 0x6, 0x6, 0x5, 0x3408, 0x4, 0x2, 0x6, 0x80000001, 0x0, 0x3, 0x4, 0x2, 0xfffffffe, 0x2, 0x3, 0x4, 0x5, 0x2, 0x2, 0x4, 0xa0, 0x8, 0x7f, 0x100, 0x0, 0x8, 0x800, 0x3, 0x599, 0x7fffffff, 0xb7e0, 0x9, 0x101, 0x3ff, 0x9, 0x7066f890, 0x0, 0xfffffffd, 0xc, 0x7, 0x66, 0x7, 0x0, 0xfffffffc, 0x1ff, 0xfffffe01, 0x4, 0x0, 0x3, 0x1, 0x80000001, 0x0, 0x5, 0x1, 0x8, 0x0, 0x2, 0xfff, 0x4, 0x2, 0xbf4, 0x4, 0x753, 0x4, 0xe, 0x5, 0x7fffffff, 0x4, 0x1ff, 0x8, 0x0, 0x3, 0x6, 0x5, 0x6, 0x7, 0x1ff, 0x2, 0x2, 0x5, 0x5, 0x80, 0x6398, 0x6, 0x8001, 0x2, 0x1, 0x0, 0xf, 0x10, 0x4, 0xfffffffc, 0x0, 0x6, 0x6, 0x2a, 0x10001, 0xdc, 0x7, 0x10, 0x4, 0x3, 0xe1, 0x401, 0x0, 0x6, 0x6, 0x6, 0xe, 0x5, 0xa3e4, 0x8, 0xb, 0x7, 0x80000001, 0x1000, 0x3, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xe389, 0x9, 0x2, 0x9, 0x6, 0x7fff, 0x7, 0x2, 0x5, 0xe362, 0x3, 0x6, 0xcb48, 0x5, 0x8, 0x1, 0x3, 0x7, 0x6, 0x8001, 0x8, 0xeda, 0x6, 0x3, 0x9, 0x3, 0x40000, 0x800, 0x9, 0x45, 0x8000, 0x7, 0x1000, 0xdcc, 0x6, 0x0, 0x3, 0x0, 0x3, 0x8, 0x8, 0x4, 0xc2e, 0xea0b, 0x7, 0x6134, 0x7, 0x3, 0x8, 0xff, 0x0, 0x7f, 0x9, 0x8, 0x0, 0x7, 0x2, 0x1, 0xfffffffa, 0xfffffff8, 0xa4c0, 0x1, 0xe, 0x101, 0x300c38ab, 0xffffff80, 0x70b5, 0x7, 0x6, 0x7fffffff, 0x98, 0x1, 0x5, 0xffffffff, 0x73, 0x2296, 0x3, 0xfffffff8, 0x9, 0x8, 0x1f1, 0x1, 0x40, 0x80000000, 0xa, 0x3, 0x7, 0x9, 0xffffffff, 0x3, 0x5, 0x6, 0x228, 0x490, 0xfffffb8f, 0x3, 0x10000, 0x8, 0xfffffffc, 0x80000001, 0xc6c, 0x8, 0x3ff, 0x1, 0x5, 0x1, 0xffff, 0x6d1f, 0x5, 0x8, 0x4, 0x6, 0x1, 0x9, 0x1ff, 0x2, 0xb1df, 0x0, 0x4730, 0x2, 0x3, 0x8001, 0xc, 0xf, 0x10, 0xfffffffd, 0x0, 0x80000001, 0x80000001, 0xdff, 0x5, 0x51b8, 0x7f, 0x200000, 0x100, 0x8, 0x9, 0x3, 0x8, 0x2, 0x3, 0x0, 0x8, 0x762a, 0x3, 0x5, 0x3, 0x5, 0x9, 0x3, 0x5, 0x8, 0x8, 0x101, 0x80000000, 0xffffff66, 0x4, 0x5, 0x0, 0x200, 0x7ff, 0x8, 0x9, 0x1, 0xffffff88, 0x5, 0x5, 0x2, 0x7ff, 0x6, 0x4, 0x3, 0xffffff4f, 0xd, 0x1, 0x9, 0x0, 0x1, 0x871, 0x9, 0x9, 0x584, 0x0, 0x10001, 0x7fff, 0x8, 0x54db, 0x200, 0x80000001, 0xe4f, 0x6, 0xfffffff7, 0xdc2f, 0xeb4f, 0x3, 0x4, 0x7, 0x0, 0x3, 0x8001, 0x6, 0x7fff, 0x1, 0x6, 0x9, 0x2c, 0x4, 0x21, 0x7fff, 0x24, 0x40000, 0x10, 0x4, 0x1, 0x10001, 0x80, 0x757, 0x6, 0xf3df, 0x7, 0x4, 0x8, 0x1, 0x7, 0x8, 0xcc, 0x3, 0x1, 0xb, 0xfffffffb, 0xb, 0x6, 0x800, 0x7, 0x7ff, 0x5, 0x6, 0xdea, 0x8, 0xdbc1, 0x1e1, 0x10001, 0x8, 0x80000000, 0x8, 0x7f, 0x7f, 0x400, 0xfff, 0x1, 0x6, 0x1000, 0x878, 0x7, 0x70dd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x0, 0xfffffffc, 0x8001, 0x2f6, 0x2, 0x4, 0x80000000, 0x100, 0x9, 0x8be6, 0x61a3, 0xc10d, 0x81, 0xfffffffa, 0x0, 0x5, 0x7f, 0x9, 0x93, 0x919, 0xfe0, 0x9, 0x1, 0x5, 0x8, 0x1, 0x9, 0x8a, 0xfffffff9, 0x7fff, 0x6, 0x3, 0x9, 0x4, 0xb4d, 0x2, 0x1, 0xe346, 0x1, 0x9b6c, 0x8, 0x8, 0x5, 0x1, 0x80000000, 0x80, 0x1c, 0x1, 0x7, 0x8, 0x8000, 0x6, 0x5, 0xffff, 0x8, 0x5, 0xd2, 0x0, 0x4, 0x9, 0x9, 0x7fffffff, 0xf9, 0x1, 0x7fffffff, 0x8, 0x2, 0xfffffffb, 0x10000, 0x4, 0xfffffe98, 0xab6, 0x6, 0x2, 0x8, 0x2, 0x2, 0x7, 0x6, 0x6ca8, 0x4, 0x9, 0x400, 0xe, 0x9, 0x8001, 0x3, 0x2, 0x4, 0x0, 0x40, 0x5, 0x5, 0xff, 0x0, 0x3, 0xfff, 0x4, 0x3, 0x6, 0x6, 0x1, 0x3ff, 0x9, 0x4d26, 0x0, 0x7ff, 0x3, 0x6b, 0xffff, 0x100, 0x80, 0x1, 0x5, 0xffffff12, 0x80000000, 0x38bec763, 0x8, 0x6, 0x3, 0x7, 0x8, 0xfff, 0x7, 0xff, 0xfffffff5, 0x1, 0x0, 0x0, 0x8001, 0x3d, 0x2, 0xf0, 0xa9, 0x1, 0xc, 0x0, 0x3, 0xa37, 0x0, 0x8, 0x81, 0x1014, 0x5, 0x6, 0x400, 0x2, 0x2, 0x8, 0x3, 0x9, 0x4, 0x1, 0x1, 0x6e07, 0x2, 0x1, 0x5, 0x4, 0x5, 0x1000, 0x2d23, 0x9, 0xbd6, 0x3, 0x4, 0x1, 0x4, 0x1, 0x5, 0x0, 0x1, 0x7, 0xa, 0xb543, 0x100, 0x3, 0x30, 0x3af, 0x3, 0x0, 0xe122, 0xfffffffa, 0x9bf8, 0x8, 0x2f, 0x8, 0x5, 0x100, 0x3, 0x8, 0x400, 0x9, 0x0, 0x9, 0x7, 0x7, 0x9b6, 0x6, 0x7, 0x1d8, 0x6, 0xdd6, 0x5, 0x1, 0x7, 0xd88, 0x1, 0x3, 0x1, 0x49e, 0x6, 0x8, 0x7838, 0xa, 0x0, 0x9, 0x6, 0x0, 0x2, 0x4, 0x1, 0x5, 0x0, 0x7, 0x7, 0x6, 0xffff, 0x0, 0x5, 0xc4e0, 0x5, 0x200, 0x2, 0xfffffff8, 0x6, 0x4, 0x6, 0x3, 0x0, 0x8, 0x5, 0xfffffffd, 0x5, 0xecb, 0x3, 0x7, 0x9, 0xffffffff, 0x7f, 0x9, 0x5, 0x2, 0x3, 0xfffffffa]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xc90}, 0x1, 0x0, 0x0, 0x4044000}, 0x1)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001600)=""/4120, 0x1018}], 0x1}, 0x12060)

2m17.390626885s ago: executing program 33 (id=704):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002640)=@delchain={0xc90, 0x65, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x2, 0xffe0}, {0xc, 0x5}}, [@f_tcindex={{0xc}, {0xc60, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7}, @TCA_TCINDEX_ACT={0x4}, @TCA_TCINDEX_ACT={0xc40, 0x7, [@m_police={0xc3c, 0x16, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xd2a6, 0x0, 0x6, 0x8, 0x0, 0x8, 0xd4, 0x3, 0x4, 0xa, 0x9, 0x0, 0x8, 0x3ff, 0x1, 0x4, 0x5, 0x100, 0x2, 0x0, 0x169, 0x8, 0x9, 0x2, 0x1, 0xb69, 0x7, 0x0, 0x0, 0x5, 0x400, 0xfffffffc, 0x1, 0x10, 0x1742, 0x6, 0x1, 0x1, 0x3d5, 0x10000, 0x7ff, 0x4, 0x2, 0x4, 0x40, 0xc34d, 0x0, 0xcd2f, 0xd0a, 0x3, 0x0, 0x4, 0x5, 0x7, 0x8, 0xb8, 0x0, 0x7, 0xffffffff, 0x80, 0x40, 0x9, 0x8, 0x1, 0x4, 0x1000, 0x9, 0x200, 0x7, 0x3dc, 0xfff, 0x4, 0x9, 0x9, 0x7, 0x8001, 0xf, 0x8, 0x2, 0xffff7fff, 0x0, 0x10001, 0x6, 0x10000, 0x0, 0x5, 0x0, 0x81c2, 0xd, 0x91c6, 0xffff5317, 0x7, 0x0, 0x650, 0xf4, 0x9, 0x9, 0x8, 0x81, 0x2, 0x100, 0xa15b, 0xfffffff2, 0x0, 0x9, 0x4, 0xffcb, 0x2e6, 0xc6, 0x7, 0x4, 0x7, 0xffff, 0x8, 0x0, 0xf, 0xffffffff, 0x4e38, 0x4, 0x1ff, 0x2, 0x164e, 0xd0, 0x4, 0x0, 0x3ff, 0x100, 0xff, 0x1, 0x0, 0xe4, 0x6, 0x400, 0x67c147ec, 0x10000000, 0x2, 0x9, 0xd, 0x6, 0x6, 0x5, 0x3408, 0x4, 0x2, 0x6, 0x80000001, 0x0, 0x3, 0x4, 0x2, 0xfffffffe, 0x2, 0x3, 0x4, 0x5, 0x2, 0x2, 0x4, 0xa0, 0x8, 0x7f, 0x100, 0x0, 0x8, 0x800, 0x3, 0x599, 0x7fffffff, 0xb7e0, 0x9, 0x101, 0x3ff, 0x9, 0x7066f890, 0x0, 0xfffffffd, 0xc, 0x7, 0x66, 0x7, 0x0, 0xfffffffc, 0x1ff, 0xfffffe01, 0x4, 0x0, 0x3, 0x1, 0x80000001, 0x0, 0x5, 0x1, 0x8, 0x0, 0x2, 0xfff, 0x4, 0x2, 0xbf4, 0x4, 0x753, 0x4, 0xe, 0x5, 0x7fffffff, 0x4, 0x1ff, 0x8, 0x0, 0x3, 0x6, 0x5, 0x6, 0x7, 0x1ff, 0x2, 0x2, 0x5, 0x5, 0x80, 0x6398, 0x6, 0x8001, 0x2, 0x1, 0x0, 0xf, 0x10, 0x4, 0xfffffffc, 0x0, 0x6, 0x6, 0x2a, 0x10001, 0xdc, 0x7, 0x10, 0x4, 0x3, 0xe1, 0x401, 0x0, 0x6, 0x6, 0x6, 0xe, 0x5, 0xa3e4, 0x8, 0xb, 0x7, 0x80000001, 0x1000, 0x3, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xe389, 0x9, 0x2, 0x9, 0x6, 0x7fff, 0x7, 0x2, 0x5, 0xe362, 0x3, 0x6, 0xcb48, 0x5, 0x8, 0x1, 0x3, 0x7, 0x6, 0x8001, 0x8, 0xeda, 0x6, 0x3, 0x9, 0x3, 0x40000, 0x800, 0x9, 0x45, 0x8000, 0x7, 0x1000, 0xdcc, 0x6, 0x0, 0x3, 0x0, 0x3, 0x8, 0x8, 0x4, 0xc2e, 0xea0b, 0x7, 0x6134, 0x7, 0x3, 0x8, 0xff, 0x0, 0x7f, 0x9, 0x8, 0x0, 0x7, 0x2, 0x1, 0xfffffffa, 0xfffffff8, 0xa4c0, 0x1, 0xe, 0x101, 0x300c38ab, 0xffffff80, 0x70b5, 0x7, 0x6, 0x7fffffff, 0x98, 0x1, 0x5, 0xffffffff, 0x73, 0x2296, 0x3, 0xfffffff8, 0x9, 0x8, 0x1f1, 0x1, 0x40, 0x80000000, 0xa, 0x3, 0x7, 0x9, 0xffffffff, 0x3, 0x5, 0x6, 0x228, 0x490, 0xfffffb8f, 0x3, 0x10000, 0x8, 0xfffffffc, 0x80000001, 0xc6c, 0x8, 0x3ff, 0x1, 0x5, 0x1, 0xffff, 0x6d1f, 0x5, 0x8, 0x4, 0x6, 0x1, 0x9, 0x1ff, 0x2, 0xb1df, 0x0, 0x4730, 0x2, 0x3, 0x8001, 0xc, 0xf, 0x10, 0xfffffffd, 0x0, 0x80000001, 0x80000001, 0xdff, 0x5, 0x51b8, 0x7f, 0x200000, 0x100, 0x8, 0x9, 0x3, 0x8, 0x2, 0x3, 0x0, 0x8, 0x762a, 0x3, 0x5, 0x3, 0x5, 0x9, 0x3, 0x5, 0x8, 0x8, 0x101, 0x80000000, 0xffffff66, 0x4, 0x5, 0x0, 0x200, 0x7ff, 0x8, 0x9, 0x1, 0xffffff88, 0x5, 0x5, 0x2, 0x7ff, 0x6, 0x4, 0x3, 0xffffff4f, 0xd, 0x1, 0x9, 0x0, 0x1, 0x871, 0x9, 0x9, 0x584, 0x0, 0x10001, 0x7fff, 0x8, 0x54db, 0x200, 0x80000001, 0xe4f, 0x6, 0xfffffff7, 0xdc2f, 0xeb4f, 0x3, 0x4, 0x7, 0x0, 0x3, 0x8001, 0x6, 0x7fff, 0x1, 0x6, 0x9, 0x2c, 0x4, 0x21, 0x7fff, 0x24, 0x40000, 0x10, 0x4, 0x1, 0x10001, 0x80, 0x757, 0x6, 0xf3df, 0x7, 0x4, 0x8, 0x1, 0x7, 0x8, 0xcc, 0x3, 0x1, 0xb, 0xfffffffb, 0xb, 0x6, 0x800, 0x7, 0x7ff, 0x5, 0x6, 0xdea, 0x8, 0xdbc1, 0x1e1, 0x10001, 0x8, 0x80000000, 0x8, 0x7f, 0x7f, 0x400, 0xfff, 0x1, 0x6, 0x1000, 0x878, 0x7, 0x70dd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x0, 0xfffffffc, 0x8001, 0x2f6, 0x2, 0x4, 0x80000000, 0x100, 0x9, 0x8be6, 0x61a3, 0xc10d, 0x81, 0xfffffffa, 0x0, 0x5, 0x7f, 0x9, 0x93, 0x919, 0xfe0, 0x9, 0x1, 0x5, 0x8, 0x1, 0x9, 0x8a, 0xfffffff9, 0x7fff, 0x6, 0x3, 0x9, 0x4, 0xb4d, 0x2, 0x1, 0xe346, 0x1, 0x9b6c, 0x8, 0x8, 0x5, 0x1, 0x80000000, 0x80, 0x1c, 0x1, 0x7, 0x8, 0x8000, 0x6, 0x5, 0xffff, 0x8, 0x5, 0xd2, 0x0, 0x4, 0x9, 0x9, 0x7fffffff, 0xf9, 0x1, 0x7fffffff, 0x8, 0x2, 0xfffffffb, 0x10000, 0x4, 0xfffffe98, 0xab6, 0x6, 0x2, 0x8, 0x2, 0x2, 0x7, 0x6, 0x6ca8, 0x4, 0x9, 0x400, 0xe, 0x9, 0x8001, 0x3, 0x2, 0x4, 0x0, 0x40, 0x5, 0x5, 0xff, 0x0, 0x3, 0xfff, 0x4, 0x3, 0x6, 0x6, 0x1, 0x3ff, 0x9, 0x4d26, 0x0, 0x7ff, 0x3, 0x6b, 0xffff, 0x100, 0x80, 0x1, 0x5, 0xffffff12, 0x80000000, 0x38bec763, 0x8, 0x6, 0x3, 0x7, 0x8, 0xfff, 0x7, 0xff, 0xfffffff5, 0x1, 0x0, 0x0, 0x8001, 0x3d, 0x2, 0xf0, 0xa9, 0x1, 0xc, 0x0, 0x3, 0xa37, 0x0, 0x8, 0x81, 0x1014, 0x5, 0x6, 0x400, 0x2, 0x2, 0x8, 0x3, 0x9, 0x4, 0x1, 0x1, 0x6e07, 0x2, 0x1, 0x5, 0x4, 0x5, 0x1000, 0x2d23, 0x9, 0xbd6, 0x3, 0x4, 0x1, 0x4, 0x1, 0x5, 0x0, 0x1, 0x7, 0xa, 0xb543, 0x100, 0x3, 0x30, 0x3af, 0x3, 0x0, 0xe122, 0xfffffffa, 0x9bf8, 0x8, 0x2f, 0x8, 0x5, 0x100, 0x3, 0x8, 0x400, 0x9, 0x0, 0x9, 0x7, 0x7, 0x9b6, 0x6, 0x7, 0x1d8, 0x6, 0xdd6, 0x5, 0x1, 0x7, 0xd88, 0x1, 0x3, 0x1, 0x49e, 0x6, 0x8, 0x7838, 0xa, 0x0, 0x9, 0x6, 0x0, 0x2, 0x4, 0x1, 0x5, 0x0, 0x7, 0x7, 0x6, 0xffff, 0x0, 0x5, 0xc4e0, 0x5, 0x200, 0x2, 0xfffffff8, 0x6, 0x4, 0x6, 0x3, 0x0, 0x8, 0x5, 0xfffffffd, 0x5, 0xecb, 0x3, 0x7, 0x9, 0xffffffff, 0x7f, 0x9, 0x5, 0x2, 0x3, 0xfffffffa]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xc90}, 0x1, 0x0, 0x0, 0x4044000}, 0x1)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001600)=""/4120, 0x1018}], 0x1}, 0x12060)

16.514410934s ago: executing program 3 (id=2053):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

16.427354219s ago: executing program 3 (id=2054):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0xe, 0x0, &(0x7f0000000340)="9d2e959f4b63a810c49c4a9bd81f", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.315802587s ago: executing program 3 (id=2058):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3e, 0x10b, 0xfffffffc, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0x8, 0x136, 0x0, 0x1, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

16.236906352s ago: executing program 3 (id=2062):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$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")
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100))

16.169601894s ago: executing program 3 (id=2066):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50)
fanotify_init(0x2, 0x1000)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00')
read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020)

15.918723366s ago: executing program 3 (id=2072):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x88, 0x13, &(0x7f0000000100)=0x2, 0x4)

15.851075703s ago: executing program 34 (id=2072):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x88, 0x13, &(0x7f0000000100)=0x2, 0x4)

9.046680254s ago: executing program 4 (id=2124):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)

8.929550881s ago: executing program 4 (id=2125):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0)

8.849417762s ago: executing program 4 (id=2126):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0))

8.779322718s ago: executing program 4 (id=2127):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

8.674420356s ago: executing program 4 (id=2129):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x66, 0x0, 0x0, 0x89, 0x0, @rand_addr, @private=0xa010101}}}})

7.969256558s ago: executing program 4 (id=2131):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000305feffffff000000000000000000000000080001"], 0x20}}, 0x10094)

7.571414743s ago: executing program 35 (id=2131):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000305feffffff000000000000000000000000080001"], 0x20}}, 0x10094)

2.891033156s ago: executing program 5 (id=2171):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'lzo'}}, {@max_inline={'max_inline', 0x3d, [0x70]}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = open(&(0x7f0000000040)='./file2\x00', 0x81, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000006c0)={0x1, 0x1, @start={0x0, 0x1, "4edccf4d91e714fb492f188e9185a17a7402cb6f59fe50d8751038eb7946ef0496f479bc93ca384aadef731bb82364450036664795c00bab2a372d42c76c60d767cc41135fe581d85a23a59e615eecba5ef1224e8cb4af0a4ea00dcd310035a491b3540e89a23183f8f67c4305ad913a5b15980fef67c2085a27f93662d073530ad7d24d8f49f13ef0df164af505d42766cfad2eefd26718ef093b2615af9506d834ce4e4440c36cc43d6ef7a32eebb59def372a52fa9efc16bbaf15d3be1e40d58fe555df4aabec07fba14bf338ce95b8a32882f10ea8265aa2c51a56bc7432bbf9fcbcbe276f612d316893fcbe3a09388c58a5d78911590ecf7332d23cd791cb87d77b15e3fa07b983d7473aa92b9395d71c78a6d4f05563d0ac9d78c7c4572ac54cdb29e9656c9c020261166c82b3804660ced547e07e3c623a389a8ed77831da46e00fe2003b43ab5e6ee391a9c347f46727f99db6745ddca8f1cea232b7b445c447f0ca01500a459f94459101779d81251732182574155709ee8657a10e9f5b54adc1ab0c626ebd874c6e70b3fef7214c11f72c15eab836dbb413684bbbaf73d02e2cdd0c453caef06e0597ef9d56b163252c4f2922973cc0018d9afb3779f540489916c5a365418b16123384ce81017c4a0b627f5c88dd5cfe6e07312e44c8c6ff8da2021b6ee320875c56562235196b7f189110e4241448026ff4185daaacade6bf01a851511c4ac7f97406858fe4044181bf9116151315fbc6d10bc865dac4389bcc061ab9e01b7425782f910f6b967caefa1b0ade8d598bce771d1056d44e818c2abe0bfc16824c742643effb6bec578d1a9d4cb4835a381d0849f79f1742f80e0d9800a3766a39766f1da6b980b41d4541a27761433119db3496976b173eb9e16a62d2638973c212ea9ca14506a2ea6ecc5737999bff4eb9ce481bcb3834acf77904700e5dd53c13ff23a9add2c25ce3dce85be5497b226e3a3b8150abbfecc85ed221181480c6ae1ed4574d12042fb05c1f1fcb5e78ede785878fa6534f0c93fca06f3c9f275104432e98fdf2f7b6d2f5bbf225aa0a3536f15c2e570467afbfdbfdd522920cec315baab54de1d6ffe15efebf0c00311d8517b5dc147539e38b2cac9911b75f08339466c46c8d5db64744f260bc7ffb71319aabea8b0c2855a31d5b483c472055490881559caf7a260a9e84cddb704954884bb80f76d3e6013b882157cf8ccb95e1489bdecfbb8fe8cdfe63fbd05014e3013bc7476c055bde07abad3f7964a547855de817decce51301c2e89f359ec10d50e962ce7b8ce6b2cc6e089ae3f80ae3e06291901032602e49aeed624cb74ea3df45b7d8ef711ab327e42df3a184dec1b46fb2d90376c3f104edd3e8782203061d4f2d74b2a1c0c5dabdbe8ddc52abe65e9b847eb1f2654738a9e758a617543aba4ffede0c", "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"}, [0x7, 0x0, 0xdac9, 0x1, 0x0, 0x6, 0x80000000, 0x8, 0x1, 0x57a9, 0x10001, 0x200, 0x5, 0xffffffff, 0x3, 0x7, 0x7, 0x3, 0x7ff, 0x400000008, 0x5, 0x80000000, 0x6, 0x8001, 0x8, 0x7, 0xffffffff, 0x4, 0x2, 0x7, 0x53, 0x7ff, 0x9, 0x4, 0x44a7, 0xc, 0xa4, 0x2, 0x7, 0x689b, 0x7, 0x0, 0x5, 0x7ff, 0x0, 0x2, 0x454b, 0x2, 0x2, 0x9, 0x1, 0x9, 0x3, 0x8001, 0x6, 0x8c, 0x7, 0x5683, 0x7fffffff, 0x1, 0x3ff, 0x2, 0x6, 0x20005]})

2.132962371s ago: executing program 5 (id=2176):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2)

1.60951608s ago: executing program 5 (id=2182):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

1.519002961s ago: executing program 5 (id=2184):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf251200004008000300", @ANYRES32=r1, @ANYBLOB="0c009900f1606b07000000000a000600ffffffffffff00000800118004000400"], 0x48}, 0x1, 0x0, 0x0, 0x24000001}, 0x4054)

1.016517247s ago: executing program 6 (id=2186):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x40800)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x2, 0x2020})

909.825404ms ago: executing program 6 (id=2187):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061187b000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

820.511587ms ago: executing program 6 (id=2189):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000100003052cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0503020000000000240012800b0001006d616373656300001400028005000b00010000000500090001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)

687.974842ms ago: executing program 6 (id=2190):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
unshare(0x28000600)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x10, 0x0)
unshare(0xc000400)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

559.671288ms ago: executing program 6 (id=2191):
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46faf)
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x122)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x803400, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000180)='./file0\x00', 0x1)
unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0)

424.225752ms ago: executing program 6 (id=2192):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), 0x0}, 0x20)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402"], 0x0)

331.037904ms ago: executing program 1 (id=2194):
mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)

330.806122ms ago: executing program 1 (id=2195):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x437, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0)

169.824206ms ago: executing program 5 (id=2196):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4ea3, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/142, 0x8e}], 0x1)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xd4, &(0x7f0000000780)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9e, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x9e, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e79dc1db6ecbf24b32e08c54a7cbee5809d8b542e7458ef7cbac933d79068a1492f809caa178afcd5c30f429764c3840100e00117dd6712781ba0385c1846e6c001eac6c71939e1d33a4b120e44584225740f0421a5ee1ae4cfc8d7acf721d5c8ee35323d6a880e43b9ac00499eee5afa3d65886ff58ccb7a62defb784e566bbf8c2320c1e4650bd339"}}}}}}}, 0x0)

169.652715ms ago: executing program 1 (id=2197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x38, 0x18, 0x1, 0x3, 0x25dedbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0)

89.994678ms ago: executing program 1 (id=2198):
syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0)

1.903822ms ago: executing program 5 (id=2199):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0})

1.690037ms ago: executing program 1 (id=2200):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000000000000001c140000001a"], 0x24}}, 0x0)

0s ago: executing program 1 (id=2201):
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"})

kernel console output (not intermixed with test programs):


[  185.208910][ T5904] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  185.218855][ T5692] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 38341 - 0
[  185.222303][ T5692] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  185.229473][ T5692] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 38341 - 0
[  185.232808][ T5692] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  185.326281][   T52] usb 4-1: Using ep0 maxpacket: 16
[  185.329546][   T52] usb 4-1: unable to get BOS descriptor or descriptor too short
[  185.332782][   T52] usb 4-1: config 5 has an invalid interface number: 118 but max is 0
[  185.335492][   T52] usb 4-1: config 5 has no interface number 0
[  185.339292][   T52] usb 4-1: config 5 interface 118 has no altsetting 0
[  185.343522][   T52] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=1c.96
[  185.347280][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.349924][   T52] usb 4-1: Product: syz
[  185.351699][   T52] usb 4-1: Manufacturer: syz
[  185.354588][   T52] usb 4-1: SerialNumber: syz
[  185.376581][ T9623] loop4: detected capacity change from 0 to 16
[  185.384249][ T9623] erofs (device loop4): mounted with root inode @ nid 36.
[  185.436504][   T33] audit: type=1326 audit(1757529436.540:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9624 comm="syz.4.1339" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa47c38eba9 code=0x0
[  185.590800][   T52] imon_raw 4-1:5.118: IR endpoint missing
[  185.600816][   T52] usb 4-1: USB disconnect, device number 25
[  186.542532][ T9638] loop4: detected capacity change from 0 to 32768
[  186.573908][ T9638] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  186.593603][ T9638] XFS (loop4): Ending clean mount
[  186.636727][ T7913] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  186.912519][ T9665] loop3: detected capacity change from 0 to 4096
[  186.925404][ T9665] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  186.937663][ T9665] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  186.942996][ T9665] ntfs3(loop3): ino=1a, mi_enum_attr
[  186.945027][ T9665] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  187.020812][ T9661] loop4: detected capacity change from 0 to 32768
[  187.048502][ T9661] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  187.553151][ T9683] loop3: detected capacity change from 0 to 32768
[  187.557794][ T9683] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1359 (9683)
[  187.573665][ T9683] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.578875][ T9683] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  187.654130][ T9683] BTRFS info (device loop3): enabling ssd optimizations
[  187.677940][ T9683] BTRFS info (device loop3): enabling free space tree
[  187.730767][ T6623] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.865437][ T7913] ocfs2: Unmounting device (7,4) on (node local)
[  188.356094][ T6637] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  188.406761][ T5848] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  188.522690][ T6637] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  188.526962][ T6637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.534644][ T6637] usb 5-1: config 0 descriptor??
[  188.640317][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.643968][ T5848] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  188.648967][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.658950][ T5848] usb 4-1: config 0 descriptor??
[  188.838337][ T9719] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:1022x2160 (0x30314752, 8, 0, 0, 0)
[  188.960850][ T6637] usb 5-1: Cannot read MAC address
[  188.962674][ T6637] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  188.971543][ T6637] usb 5-1: USB disconnect, device number 10
[  189.166312][ T5848] logitech-djreceiver 0003:046D:C71F.0011: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0
[  189.380397][ T5844] usb 4-1: USB disconnect, device number 26
[  189.585110][ T5235] Bluetooth: hci1: SCO packet for unknown connection handle 100
[  189.720713][ T9738] loop1: detected capacity change from 0 to 1024
[  189.750909][ T9738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.793972][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.896542][ T5844] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  190.061963][ T5844] usb 5-1: unable to get BOS descriptor or descriptor too short
[  190.069711][ T5844] usb 5-1: not running at top speed; connect to a high speed hub
[  190.076516][ T5844] usb 5-1: config 4 has an invalid interface number: 32 but max is 0
[  190.079893][ T5844] usb 5-1: config 4 has no interface number 0
[  190.092580][ T5844] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  190.101297][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.104549][ T5844] usb 5-1: Product: syz
[  190.113441][ T5844] usb 5-1: Manufacturer: syz
[  190.115445][ T5844] usb 5-1: SerialNumber: syz
[  190.152815][    T9] kernel write not supported for file /975/sched (pid: 9 comm: kworker/0:0)
[  190.256292][ T5848] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  190.340255][ T5844] usb 5-1: Found UVC 0.02 device syz (17dc:0202)
[  190.342982][ T5844] usb 5-1: No valid video chain found.
[  190.349641][ T5844] usb 5-1: USB disconnect, device number 11
[  190.418163][ T5848] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  190.421501][ T5848] usb 4-1: config 0 has no interface number 0
[  190.424255][ T5848] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.429211][ T5848] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.432656][ T5848] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  190.439188][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.447995][ T5848] usb 4-1: config 0 descriptor??
[  190.466239][   T52] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  190.629769][   T52] usb 2-1: unable to get BOS descriptor or descriptor too short
[  190.635404][   T52] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  190.639182][   T52] usb 2-1: config 6 has no interface number 0
[  190.641852][   T52] usb 2-1: config 6 interface 2 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32
[  190.646068][   T52] usb 2-1: config 6 interface 2 has no altsetting 0
[  190.658146][   T52] usb 2-1: New USB device found, idVendor=110a, idProduct=1151, bcdDevice=ce.71
[  190.661898][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.665243][   T52] usb 2-1: Product: syz
[  190.667246][   T52] usb 2-1: Manufacturer: syz
[  190.669320][   T52] usb 2-1: SerialNumber: syz
[  190.676094][ T9763] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  190.863859][ T5848] prodikeys 0003:041E:2801.0012: unknown main item tag 0x0
[  190.872423][ T5848] prodikeys 0003:041E:2801.0012: unknown main item tag 0x0
[  190.887493][ T5848] prodikeys 0003:041E:2801.0012: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1
[  190.914406][   T52] ti_usb_3410_5052 2-1:6.2: TI USB 3410 1 port adapter converter detected
[  190.918105][ T5848] hid_prodikeys: hid-prodikeys: failed to find output report
[  190.918105][ T5848] 
[  190.922340][   T52] ti_usb_3410_5052 2-1:6.2: missing endpoints
[  190.933336][   T52] usb 2-1: USB disconnect, device number 29
[  191.069566][ T5848] usb 4-1: USB disconnect, device number 27
[  191.146472][ T5844] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  191.306387][ T5844] usb 5-1: Using ep0 maxpacket: 16
[  191.312110][ T5844] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[  191.315256][ T5844] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  191.318461][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.322482][ T5844] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  191.325878][ T5844] usb 5-1: config 0 has no interface number 0
[  191.332386][ T5844] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  191.336048][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.339489][ T5844] usb 5-1: Product: syz
[  191.341182][ T5844] usb 5-1: Manufacturer: syz
[  191.343011][ T5844] usb 5-1: SerialNumber: syz
[  191.347789][ T5844] usb 5-1: config 0 descriptor??
[  191.520586][ T9771] loop1: detected capacity change from 0 to 64
[  191.560303][ T5844] usb 5-1: USB disconnect, device number 12
[  191.759580][ T9777] loop3: detected capacity change from 0 to 40427
[  191.762417][ T9777] F2FS-fs: heap/no_heap options were deprecated
[  191.767516][ T9777] F2FS-fs (loop3): invalid crc value
[  191.769345][ T9777] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node
[  191.800514][ T9777] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  191.803998][ T9777] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  191.872886][ T9775] loop1: detected capacity change from 0 to 32768
[  191.889223][ T9775] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  191.909450][ T9775] XFS (loop1): Ending clean mount
[  191.990605][ T5846] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  192.011919][ T9788] loop3: detected capacity change from 0 to 128
[  192.052473][ T9788] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  192.065776][ T9788] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  192.158053][ T6623] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.244727][ T9800] loop3: detected capacity change from 0 to 128
[  192.262418][ T9800] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  192.274756][ T9800] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  192.513167][ T9802] 9p: Unknown access argument 18446744073709551615: -34
[  192.929392][ T9797] loop1: detected capacity change from 0 to 32768
[  193.282938][ T9819] loop1: detected capacity change from 0 to 512
[  193.305576][ T9819] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  193.313748][ T9819] EXT4-fs (loop1): 1 truncate cleaned up
[  193.317277][ T5848] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  193.330477][ T9819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.342646][ T9819] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.1406: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  193.351955][ T9819] EXT4-fs (loop1): Remounting filesystem read-only
[  193.354095][ T9819] EXT4-fs warning (device loop1): ext4_rename_delete:3731: inode #2: comm syz.1.1406: Deleting old file: nlink 5, error=-117
[  193.378671][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.486230][ T5848] usb 5-1: Using ep0 maxpacket: 16
[  193.501099][ T5848] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.505382][ T5848] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.520181][ T5848] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  193.526634][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.529905][ T5848] usb 5-1: Product: syz
[  193.531682][ T5848] usb 5-1: Manufacturer: syz
[  193.538510][ T5848] usb 5-1: SerialNumber: syz
[  193.758641][ T5848] usb 5-1: 0:2 : does not exist
[  193.761649][ T5848] usb 5-1: unit 9 not found!
[  193.765911][ T5848] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4)
[  193.775251][ T5848] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4)
[  193.780562][ T5848] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4)
[  193.788241][ T5848] usb 5-1: USB disconnect, device number 13
[  193.803227][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.907098][   T52] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  193.976676][ T5905] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  194.048811][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.051462][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.070415][   T52] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  194.073587][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.077097][   T52] usb 2-1: Product: syz
[  194.078775][   T52] usb 2-1: Manufacturer: syz
[  194.080735][   T52] usb 2-1: SerialNumber: syz
[  194.138581][ T5905] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  194.141464][ T5905] usb 4-1: config 0 has no interface number 0
[  194.143902][ T5905] usb 4-1: config 0 interface 188 has no altsetting 0
[  194.146481][ T5905] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=dc.ab
[  194.150065][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.155712][ T5905] usb 4-1: config 0 descriptor??
[  194.161780][ T5905] ftdi_sio 4-1:0.188: FTDI USB Serial Device converter detected
[  194.165528][ T5905] ftdi_sio ttyUSB0: unknown device type: 0xdcab
[  194.305794][   T52] gspca_main: pac207-2.14.0 probing 093a:2476
[  194.309263][   T52] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  194.313246][   T52] uvcvideo 2-1:13.0: probe with driver uvcvideo failed with error -22
[  194.321532][   T52] usb 2-1: USB disconnect, device number 30
[  194.364543][ T5905] usb 4-1: USB disconnect, device number 28
[  194.378310][ T5905] ftdi_sio 4-1:0.188: device disconnected
[  194.852489][ T9858] loop1: detected capacity change from 0 to 256
[  195.196142][ T9864] loop3: detected capacity change from 0 to 4096
[  195.269892][ T9866] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.565672][ T9889] loop4: detected capacity change from 0 to 256
[  195.569278][ T9889] exfat: Deprecated parameter 'utf8'
[  195.571047][ T9889] exfat: Deprecated parameter 'utf8'
[  195.572833][ T9889] exfat: Deprecated parameter 'namecase'
[  195.585464][ T9889] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  195.670776][ T9881] loop3: detected capacity change from 0 to 40427
[  195.699526][ T9881] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  195.701860][ T9881] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  195.716261][ T9897] netlink: 'syz.1.1442': attribute type 2 has an invalid length.
[  195.745354][ T9881] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  195.750370][ T9881] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  195.753139][ T9881] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  195.797042][ T6623] bio_check_eod: 1 callbacks suppressed
[  195.797055][ T6623] syz-executor: attempt to access beyond end of device
[  195.797055][ T6623] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  195.806915][ T6623] CPU: 0 UID: 0 PID: 6623 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  195.806926][ T6623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.806931][ T6623] Call Trace:
[  195.806934][ T6623]  <TASK>
[  195.806938][ T6623]  dump_stack_lvl+0x189/0x250
[  195.806952][ T6623]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.806961][ T6623]  ? __pfx_queue_work_on+0x10/0x10
[  195.806972][ T6623]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  195.806984][ T6623]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  195.807022][ T6623]  f2fs_handle_critical_error+0x37c/0x540
[  195.807038][ T6623]  f2fs_write_end_io+0x886/0xb60
[  195.807055][ T6623]  __submit_merged_bio+0x27a/0x6a0
[  195.807067][ T6623]  __submit_merged_write_cond+0x255/0x530
[  195.807079][ T6623]  f2fs_write_data_pages+0x261d/0x3000
[  195.807102][ T6623]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  195.807131][ T6623]  ? folio_unqueue_deferred_split+0x93/0x230
[  195.807140][ T6623]  ? folios_put_refs+0x584/0x670
[  195.807152][ T6623]  ? __lock_acquire+0xab9/0xd20
[  195.807165][ T6623]  ? do_raw_spin_lock+0x121/0x290
[  195.807177][ T6623]  ? do_raw_spin_unlock+0x4d/0x240
[  195.807185][ T6623]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  195.807196][ T6623]  do_writepages+0x32e/0x550
[  195.807209][ T6623]  ? do_raw_spin_unlock+0x4d/0x240
[  195.807219][ T6623]  filemap_fdatawrite+0x199/0x240
[  195.807229][ T6623]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  195.807256][ T6623]  ? do_raw_spin_unlock+0x4d/0x240
[  195.807265][ T6623]  f2fs_sync_dirty_inodes+0x31f/0x830
[  195.807282][ T6623]  f2fs_write_checkpoint+0x93e/0x2440
[  195.807301][ T6623]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  195.807307][ T6623]  ? kasan_record_aux_stack+0xbd/0xd0
[  195.807335][ T6623]  kill_f2fs_super+0x2cc/0x6d0
[  195.807345][ T6623]  ? __pfx_kill_f2fs_super+0x10/0x10
[  195.807358][ T6623]  ? shrinker_free+0x2ce/0x3e0
[  195.807366][ T6623]  deactivate_locked_super+0xbc/0x130
[  195.807376][ T6623]  cleanup_mnt+0x425/0x4c0
[  195.807383][ T6623]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.807392][ T6623]  task_work_run+0x1d4/0x260
[  195.807402][ T6623]  ? __pfx_task_work_run+0x10/0x10
[  195.807409][ T6623]  ? __x64_sys_umount+0x122/0x160
[  195.807420][ T6623]  ? exit_to_user_mode_loop+0x40/0x130
[  195.807430][ T6623]  exit_to_user_mode_loop+0xec/0x130
[  195.807440][ T6623]  do_syscall_64+0x2bd/0xfa0
[  195.807447][ T6623]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.807453][ T6623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.807460][ T6623]  ? exc_page_fault+0xab/0x100
[  195.807472][ T6623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.807479][ T6623] RIP: 0033:0x7f8fedf8fed7
[  195.807486][ T6623] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  195.807493][ T6623] RSP: 002b:00007fffe197b538 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  195.807501][ T6623] RAX: 0000000000000000 RBX: 00007f8fee011c05 RCX: 00007f8fedf8fed7
[  195.807506][ T6623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe197b5f0
[  195.807511][ T6623] RBP: 00007fffe197b5f0 R08: 0000000000000000 R09: 0000000000000000
[  195.807515][ T6623] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffe197c680
[  195.807520][ T6623] R13: 00007f8fee011c05 R14: 000000000002fc40 R15: 00007fffe197c6c0
[  195.807532][ T6623]  </TASK>
[  195.807536][ T6623] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  195.976495][ T9907] loop4: detected capacity change from 0 to 32768
[  195.981588][ T9907] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  195.988420][ T9907] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  196.048168][ T7913] ocfs2: Unmounting device (7,4) on (node local)
[  196.162518][ T9915] loop3: detected capacity change from 0 to 512
[  196.187325][ T5905] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  196.187656][ T9917] loop4: detected capacity change from 0 to 512
[  196.207058][ T9917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  196.208255][ T9915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.219286][ T9917] EXT4-fs (loop4): 1 truncate cleaned up
[  196.221286][ T9915] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.222061][ T9917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.250615][ T6623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.270025][ T7913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.346869][ T5905] usb 2-1: Using ep0 maxpacket: 32
[  196.356334][ T5905] usb 2-1: config 0 has an invalid interface number: 235 but max is 0
[  196.360293][ T5905] usb 2-1: config 0 has no interface number 0
[  196.368822][ T5905] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[  196.371791][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.376043][ T5905] usb 2-1: Product: syz
[  196.379955][ T5905] usb 2-1: Manufacturer: syz
[  196.384928][ T5905] usb 2-1: SerialNumber: syz
[  196.391058][ T5905] usb 2-1: config 0 descriptor??
[  196.620381][ T5905] kaweth 2-1:0.235: Firmware present in device.
[  196.657558][ T9941] loop4: detected capacity change from 0 to 4096
[  196.682348][ T9944] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  196.807547][ T5905] kaweth 2-1:0.235: Statistics collection: 0
[  196.809431][ T5905] kaweth 2-1:0.235: Multicast filter limit: 0
[  196.811456][ T5905] kaweth 2-1:0.235: MTU: 0
[  196.813224][ T5905] kaweth 2-1:0.235: Read MAC address 00:00:00:00:00:00
[  196.916724][   T52] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  197.016722][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  197.069829][   T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.077648][   T52] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  197.081374][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.084634][   T52] usb 4-1: Product: syz
[  197.086402][   T52] usb 4-1: Manufacturer: syz
[  197.088425][   T52] usb 4-1: SerialNumber: syz
[  197.094172][   T52] usb 4-1: config 0 descriptor??
[  197.176719][    T9] usb 5-1: Using ep0 maxpacket: 16
[  197.180651][    T9] usb 5-1: config 3 has an invalid interface number: 155 but max is 0
[  197.183280][    T9] usb 5-1: config 3 has an invalid interface association descriptor of length 3, skipping
[  197.187009][    T9] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  197.190461][    T9] usb 5-1: config 3 has no interface number 0
[  197.192915][    T9] usb 5-1: config 3 interface 155 has no altsetting 0
[  197.198072][    T9] usb 5-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c
[  197.200962][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.203739][    T9] usb 5-1: Product: syz
[  197.205312][    T9] usb 5-1: Manufacturer: syz
[  197.207085][    T9] usb 5-1: SerialNumber: syz
[  197.310679][   T52] usb 4-1: USB disconnect, device number 29
[  197.410117][ T5905] kaweth 2-1:0.235: Error setting receive filter
[  197.413715][ T5905] kaweth 2-1:0.235: probe with driver kaweth failed with error -5
[  197.418436][ T5905] usb 2-1: USB disconnect, device number 31
[  197.431331][    T9] usb 5-1: Found UVC 0.00 device syz (05a9:264a)
[  197.435688][    T9] usb 5-1: No valid video chain found.
[  197.440509][    T9] usb 5-1: USB disconnect, device number 14
[  198.433685][ T9976] loop1: detected capacity change from 0 to 1024
[  198.507724][ T9972] loop4: detected capacity change from 0 to 32768
[  198.515436][ T9972] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  198.524966][ T9972] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  198.596252][ T7913] ocfs2: Unmounting device (7,4) on (node local)
[  198.702551][ T9982] loop1: detected capacity change from 0 to 2048
[  198.722498][ T9982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.808702][  T740] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  198.827953][  T740] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  198.843645][  T740] EXT4-fs (loop1): This should not happen!! Data will be lost
[  198.843645][  T740] 
[  198.852566][  T740] EXT4-fs (loop1): Total free blocks count 0
[  198.855543][  T740] EXT4-fs (loop1): Free/Dirty block details
[  198.858210][  T740] EXT4-fs (loop1): free_blocks=4096
[  198.860470][  T740] EXT4-fs (loop1): dirty_blocks=528
[  198.862698][  T740] EXT4-fs (loop1): Block reservation details
[  198.865133][  T740] EXT4-fs (loop1): i_reserved_data_blocks=33
[  198.875015][  T740] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 5 with error 28
[  199.139370][T10010] loop1: detected capacity change from 0 to 16
[  199.158651][T10010] erofs (device loop1): mounted with root inode @ nid 36.
[  199.278647][    T9] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  199.464539][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  199.474188][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  199.480320][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  199.490297][    T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  199.493868][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.506614][    T9] usb 4-1: Product: syz
[  199.508203][    T9] usb 4-1: Manufacturer: syz
[  199.509807][    T9] usb 4-1: SerialNumber: syz
[  199.519239][    T9] usb 4-1: config 0 descriptor??
[  199.529270][    T9] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  199.639405][T10029] Bluetooth: MGMT ver 1.23
[  199.740256][   T52] usb 4-1: USB disconnect, device number 30
[  199.946694][ T5905] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  200.012947][T10044] sctp: [Deprecated]: syz.4.1506 (pid 10044) Use of int in maxseg socket option.
[  200.012947][T10044] Use struct sctp_assoc_value instead
[  200.023904][T10042] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.1506'.
[  200.028299][T10042] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\+`
[  200.136634][ T5905] usb 2-1: Using ep0 maxpacket: 8
[  200.141351][ T5905] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=dc.f4
[  200.144433][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.147616][ T5905] usb 2-1: Product: syz
[  200.149348][ T5905] usb 2-1: Manufacturer: syz
[  200.151194][ T5905] usb 2-1: SerialNumber: syz
[  200.155041][ T5905] usb 2-1: config 0 descriptor??
[  200.160609][ T5905] gl620a 2-1:0.0: probe with driver gl620a failed with error -22
[  200.350608][   T33] audit: type=1326 audit(1757530475.452:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.3.1509" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fedf8eba9 code=0x0
[  200.366314][ T5848] usb 2-1: USB disconnect, device number 32
[  200.710001][T10053] program syz.4.1510 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  200.915231][T10058] loop1: detected capacity change from 0 to 2048
[  200.931619][T10058] NILFS (loop1): ifile inode (checkpoint number=2) corrupted
[  200.936039][T10058] NILFS (loop1): error -5 while loading last checkpoint (checkpoint number=2)
[  201.246643][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  201.319673][T10068] loop3: detected capacity change from 0 to 16
[  201.323658][T10068] erofs (device loop3): mounted with root inode @ nid 36.
[  201.330393][T10068] erofs (device loop3): read error -95 @ 8200 of nid 36
[  201.366875][ T5848] IPVS: starting estimator thread 0...
[  201.466699][T10071] IPVS: using max 43 ests per chain, 103200 per kthread
[  201.665072][T10084] loop4: detected capacity change from 0 to 256
[  201.985130][T10092] loop4: detected capacity change from 0 to 256
[  202.004745][T10092] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  202.943429][T10123] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[  203.298245][T10141] loop1: detected capacity change from 0 to 256
[  203.321132][T10141] FAT-fs (loop1): Directory bread(block 64) failed
[  203.324053][T10141] FAT-fs (loop1): Directory bread(block 65) failed
[  203.338785][T10141] FAT-fs (loop1): Directory bread(block 66) failed
[  203.341654][T10141] FAT-fs (loop1): Directory bread(block 67) failed
[  203.344498][T10141] FAT-fs (loop1): Directory bread(block 68) failed
[  203.347942][T10141] FAT-fs (loop1): Directory bread(block 69) failed
[  203.350806][T10141] FAT-fs (loop1): Directory bread(block 70) failed
[  203.353600][T10141] FAT-fs (loop1): Directory bread(block 71) failed
[  203.359898][T10141] FAT-fs (loop1): Directory bread(block 72) failed
[  203.366182][T10141] FAT-fs (loop1): Directory bread(block 73) failed
[  203.490412][T10149] loop3: detected capacity change from 0 to 512
[  203.520541][T10149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.534608][T10149] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.782215][T10149] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  203.806935][T10149] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28
[  203.815164][T10149] EXT4-fs (loop3): This should not happen!! Data will be lost
[  203.815164][T10149] 
[  203.830885][T10149] EXT4-fs (loop3): Total free blocks count 0
[  203.837921][T10149] EXT4-fs (loop3): Free/Dirty block details
[  203.847748][T10149] EXT4-fs (loop3): free_blocks=39626
[  203.851613][T10149] EXT4-fs (loop3): dirty_blocks=2048
[  203.862554][T10149] EXT4-fs (loop3): Block reservation details
[  203.872702][T10149] EXT4-fs (loop3): i_reserved_data_blocks=2048
[  204.054077][ T6623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.186686][ T5848] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  204.235296][    T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  204.346658][ T5848] usb 5-1: Using ep0 maxpacket: 16
[  204.350006][ T5848] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.354819][ T5848] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.387783][ T5848] usb 5-1: config 0 interface 0 has no altsetting 0
[  204.393376][ T5848] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  204.398360][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.399121][    T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  204.405561][ T5848] usb 5-1: config 0 descriptor??
[  204.419050][    T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  204.430728][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.434891][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  204.439308][    T9] usb 2-1: config 1 has no interface number 0
[  204.442041][    T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  204.446158][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.486161][    T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  204.678404][    T9] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[  204.681992][    T9] snd_usb_pod 2-1:1.1: invalid control EP
[  204.684426][    T9] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  204.687670][    T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  204.691007][    T9] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[  204.813213][ T5848] apple 0003:05AC:0247.0013: unexpected long global item
[  204.816036][ T5848] apple 0003:05AC:0247.0013: parse failed
[  204.819997][ T5848] apple 0003:05AC:0247.0013: probe with driver apple failed with error -22
[  204.890527][    T9] usb 2-1: USB disconnect, device number 33
[  205.020290][ T5911] usb 5-1: USB disconnect, device number 15
[  205.815612][T10216] loop4: detected capacity change from 0 to 32768
[  205.820469][T10216] jfs_mount: dbMount failed w/rc = -22
[  205.823053][T10216] Mount JFS Failure: -22
[  205.824853][T10216] jfs_mount failed w/return code = -22
[  205.928582][T10226] netlink: 'syz.4.1586': attribute type 11 has an invalid length.
[  206.030439][T10232] bridge0: entered promiscuous mode
[  206.037152][T10232] team0: entered promiscuous mode
[  206.040122][T10232] team_slave_0: entered promiscuous mode
[  206.042164][T10232] team_slave_1: entered promiscuous mode
[  206.044704][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1590'.
[  206.045268][T10232] hsr1: entered allmulticast mode
[  206.049633][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1590'.
[  206.049644][T10234] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1590'.
[  206.056933][T10232] bridge0: entered allmulticast mode
[  206.058796][T10232] team0: entered allmulticast mode
[  206.060499][T10232] team_slave_0: entered allmulticast mode
[  206.062478][T10232] team_slave_1: entered allmulticast mode
[  206.146478][T10237] loop1: detected capacity change from 0 to 1764
[  206.271035][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'.
[  206.389141][T10258] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  206.548398][T10270] loop3: detected capacity change from 0 to 256
[  206.575047][T10270] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  206.607339][ T5911] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  206.631303][T10274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1610'.
[  206.760843][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.765851][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.771185][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  206.776637][ T5911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  206.780738][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.813860][ T5911] usb 5-1: config 0 descriptor??
[  206.879184][T10288] loop3: detected capacity change from 0 to 64
[  207.093149][T10300] loop1: detected capacity change from 0 to 128
[  207.113487][T10300] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  207.128309][T10300] ext4 filesystem being mounted at /529/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  207.154654][T10304] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1624'.
[  207.199974][ T5846] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  207.277157][ T5911] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  207.290386][T10308] loop3: detected capacity change from 0 to 512
[  207.299793][T10308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  207.320072][T10308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.332362][T10308] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.370997][ T6623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.433190][T10318] tmpfs: Bad value for 'mpol'
[  207.656758][ T5848] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  207.819001][ T5848] usb 2-1: unable to get BOS descriptor or descriptor too short
[  207.822794][ T5848] usb 2-1: not running at top speed; connect to a high speed hub
[  207.828841][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.832984][ T5848] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  207.837414][ T5848] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  207.843394][ T5848] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  207.846452][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.849038][ T5848] usb 2-1: Product: syz
[  207.850390][ T5848] usb 2-1: Manufacturer: syz
[  207.851992][ T5848] usb 2-1: SerialNumber: syz
[  208.109486][ T5848] usb 2-1: USB disconnect, device number 34
[  208.353805][T10326] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  208.814244][T10338] loop3: detected capacity change from 0 to 32768
[  208.818158][T10338] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1639 (10338)
[  208.847388][T10338] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  208.851427][T10338] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  208.964224][T10338] BTRFS info (device loop3): enabling ssd optimizations
[  208.969024][T10338] BTRFS info (device loop3): enabling free space tree
[  208.971788][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'.
[  208.975361][T10338] BTRFS info (device loop3): use zstd compression, level 3
[  208.996978][   T33] audit: type=1800 audit(1757530484.102:29): pid=10338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1639" name="file1" dev="loop3" ino=260 res=0 errno=0
[  209.044756][   T33] audit: type=1804 audit(1757530484.142:30): pid=10338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1639" name="/newroot/447/file0/file1" dev="loop3" ino=260 res=1 errno=0
[  209.097695][ T6623] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  209.390056][ T5911] usb 5-1: USB disconnect, device number 16
[  209.402829][T10377] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  209.473671][T10377] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  210.686386][T10399] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  210.727009][T10397] loop3: detected capacity change from 0 to 32768
[  210.745766][T10397] 
[  210.745766][T10397]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.745766][T10397] 
[  210.770417][T10401] Invalid ELF header magic: != ELF
[  210.810220][ T6623] 
[  210.810220][ T6623]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.810220][ T6623] 
[  210.816807][ T6623] 
[  210.816807][ T6623]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  210.816807][ T6623] 
[  211.014815][T10405] loop1: detected capacity change from 0 to 32768
[  211.039994][T10405] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  211.049691][T10405] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  211.107917][T10405] (syz.1.1662,10405,0):ocfs2_double_lock:1192 ERROR: status = -2
[  211.111075][T10405] (syz.1.1662,10405,0):ocfs2_rename:1301 ERROR: status = -2
[  211.113667][T10405] (syz.1.1662,10405,0):ocfs2_rename:1702 ERROR: status = -2
[  211.153890][ T5846] ocfs2: Unmounting device (7,1) on (node local)
[  211.356980][ T6637] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  211.525947][ T6637] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  211.533217][ T6637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.545025][ T6637] usb 4-1: config 0 descriptor??
[  211.564861][ T6637] cp210x 4-1:0.0: cp210x converter detected
[  211.961195][T10436] loop4: detected capacity change from 0 to 4096
[  211.976050][ T6637] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  211.988283][ T6637] usb 4-1: cp210x converter now attached to ttyUSB0
[  212.151824][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'.
[  212.154882][T10439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1675'.
[  212.158582][ T5911] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  212.173575][ T6637] IPVS: starting estimator thread 0...
[  212.205232][ T5905] usb 4-1: USB disconnect, device number 31
[  212.234228][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  212.266830][T10440] IPVS: using max 39 ests per chain, 93600 per kthread
[  212.299815][ T5905] cp210x 4-1:0.0: device disconnected
[  212.341160][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.345696][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  212.353411][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.369661][ T5911] usb 2-1: config 0 descriptor??
[  212.487060][ T6637] usb 5-1: new full-speed USB device number 17 using dummy_hcd

syzkaller
syzkaller login: [  212.702507][ T6637] usb 5-1: unable to get BOS descriptor or descriptor too short
[  212.710875][ T6637] usb 5-1: not running at top speed; connect to a high speed hub
[  212.716459][ T6637] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  212.731009][ T6637] usb 5-1: config 1 interface 0 has no altsetting 0
[  212.754191][ T6637] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40
[  212.771243][ T6637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.775077][ T6637] usb 5-1: Product: syz
[  212.782639][ T6637] usb 5-1: SerialNumber: syz
[  212.906349][ T5911] logitech-hidpp-device 0003:046D:C262.0015: unknown main item tag 0x7
[  212.911160][ T5911] logitech-hidpp-device 0003:046D:C262.0015: item fetching failed at offset 6/7
[  212.932448][ T5911] logitech-hidpp-device 0003:046D:C262.0015: hidpp_probe:parse failed
[  212.936279][ T5911] logitech-hidpp-device 0003:046D:C262.0015: probe with driver logitech-hidpp-device failed with error -22
[  213.119031][ T5911] usb 2-1: USB disconnect, device number 35
[  213.162881][T10447] input: syz0 as /devices/virtual/input/input18
[  213.668965][ T6637] usbhid 5-1:1.0: can't add hid device: -71
[  213.671325][ T6637] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  213.676192][ T6637] usb 5-1: USB disconnect, device number 17
[  214.117233][T10456] loop1: detected capacity change from 0 to 32768
[  214.477050][ T5848] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  214.628444][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.632082][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  214.643900][ T5848] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  214.656698][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  214.660126][ T5848] usb 2-1: SerialNumber: syz
[  214.873384][ T5848] usb 2-1: 0:2 : does not exist
[  214.889361][ T5848] usb 2-1: USB disconnect, device number 36
[  214.912051][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  215.080960][T10472] loop3: detected capacity change from 0 to 4096
[  215.096636][T10472] ntfs3(loop3): ino=3, Correct links count -> 2.
[  215.191360][T10478] loop3: detected capacity change from 0 to 512
[  215.204830][T10478] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1690: invalid indirect mapped block 4294967295 (level 1)
[  215.215148][T10478] EXT4-fs (loop3): Remounting filesystem read-only
[  215.220536][T10478] EXT4-fs (loop3): 2 truncates cleaned up
[  215.224115][T10478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.271045][ T6623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.490166][T10490] overlay: filesystem on ./file0 not supported as upperdir
[  217.373627][T10511] loop1: detected capacity change from 0 to 32768
[  217.380923][T10511] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  217.380923][T10511] members_v2 (size 640):
[  217.380923][T10511] member_bytes 0
[  217.403885][T10511] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  217.566784][ T5848] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  217.605199][T10532] loop1: detected capacity change from 0 to 512
[  217.640629][T10532] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1710: corrupted in-inode xattr: invalid ea_ino
[  217.653842][T10532] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1710: couldn't read orphan inode 15 (err -117)
[  217.671247][T10532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.720685][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.729052][ T5848] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  217.732599][ T5848] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.748428][ T5848] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  217.754753][ T5848] usb 4-1: config 1 has no interface number 1
[  217.760857][ T5848] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  217.779129][ T5848] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  217.791035][ T5848] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  217.798082][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.806786][ T5848] usb 4-1: Product: syz
[  217.808837][ T5848] usb 4-1: Manufacturer: syz
[  217.810847][ T5848] usb 4-1: SerialNumber: syz
[  218.054693][ T5848] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  218.059124][ T5848] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  218.091167][ T5848] usb 4-1: USB disconnect, device number 32
[  218.138884][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.155430][T10543] loop1: detected capacity change from 0 to 32768
[  218.166072][T10543] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal: duplicate journal buckets 1
[  218.166072][T10543] journal (size 40):
[  218.166072][T10543] Buckets:  1 7 24 1
[  218.166072][T10543] 
[  218.195512][T10543] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  218.493499][T10557] loop1: detected capacity change from 0 to 8192
[  218.702963][T10565] loop1: detected capacity change from 0 to 1024
[  218.724935][   T33] audit: type=1800 audit(1757530493.822:31): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1725" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=25 res=0 errno=0
[  218.915858][T10572] loop1: detected capacity change from 0 to 512
[  218.920559][T10572] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  218.950128][T10572] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #17: comm syz.1.1728: inline data xattr refers to an external xattr inode
[  218.950821][T10574] loop4: detected capacity change from 0 to 2048
[  218.975509][T10572] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1728: couldn't read orphan inode 17 (err -117)
[  218.989776][T10572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.991208][T10574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  219.010755][T10572] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  219.031822][T10578] loop3: detected capacity change from 0 to 2048
[  219.059925][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.080095][T10578] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  219.182298][T10580] loop1: detected capacity change from 0 to 1024
[  219.424754][T10588] loop4: detected capacity change from 0 to 128
[  219.445458][T10588] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  219.464271][T10588] hpfs: filesystem error: improperly stopped
[  219.469163][T10588] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  219.477955][T10588] hpfs: You really don't want any checks? You are crazy...
[  219.481594][T10588] hpfs: hpfs_map_sector(): read error
[  219.494341][T10588] hpfs: code page support is disabled
[  219.501802][T10588] hpfs: hpfs_map_4sectors(): unaligned read
[  219.538351][T10588] hpfs: hpfs_map_4sectors(): unaligned read
[  219.540868][T10588] hpfs: filesystem error: unable to find root dir
[  219.890877][T10594] ceph: No mds server is up or the cluster is laggy
[  219.913185][ T5905] libceph: connect (1)[c::]:6789 error -101
[  219.953335][ T5905] libceph: mon0 (1)[c::]:6789 connect error
[  220.083348][T10604] loop4: detected capacity change from 0 to 16
[  220.099095][T10604] erofs (device loop4): unidentified incompatible feature 1000000, please upgrade kernel
[  220.461030][T10611] loop3: detected capacity change from 0 to 512
[  220.490045][T10611] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1743: corrupted in-inode xattr: invalid ea_ino
[  220.505962][T10611] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1743: couldn't read orphan inode 15 (err -117)
[  220.532437][T10611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.636690][ T5905] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  220.796666][ T5905] usb 2-1: Using ep0 maxpacket: 16
[  220.801319][ T5905] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  220.804172][ T5905] usb 2-1: config 0 has no interface number 0
[  220.806297][ T5905] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  220.812224][ T5905] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  220.820034][ T5905] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  220.823765][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  220.827949][ T5905] usb 2-1: Product: syz
[  220.829415][ T5905] usb 2-1: SerialNumber: syz
[  220.835753][ T5905] usb 2-1: config 0 descriptor??
[  220.853124][ T5905] cm109 2-1:0.8: invalid payload size 0, expected 4
[  220.861110][ T5905] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input19
[  221.074915][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.079761][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.083265][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.086651][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.089950][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.093160][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.096435][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.101058][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.104329][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.107620][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  221.111678][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  221.115732][ T5905] usb 2-1: USB disconnect, device number 37
[  221.134464][ T5905] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  221.235556][ T6623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.397986][T10614] loop3: detected capacity change from 0 to 4096
[  221.408868][T10614] ntfs3(loop3): try to read out of volume at offset 0x200800
[  221.416641][T10614] ntfs3(loop3): Failed to load $Volume (-5).
[  221.573732][T10623] CUSE: unknown device info ""
[  221.575995][T10623] CUSE: zero length info key specified
[  221.734757][T10629] loop1: detected capacity change from 0 to 1024
[  222.373865][T10639] loop4: detected capacity change from 0 to 164
[  223.123228][T10651] netlink: 'syz.3.1759': attribute type 29 has an invalid length.
[  223.269646][   T33] audit: type=1326 audit(1757530498.362:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.1.1762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2997d8eba9 code=0x7ffc0000
[  223.313924][   T33] audit: type=1326 audit(1757530498.362:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.1.1762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2997d8eba9 code=0x7ffc0000
[  223.363810][   T33] audit: type=1326 audit(1757530498.372:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.1.1762" exe="/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f2997d8eba9 code=0x7ffc0000
[  223.421986][T10659] loop3: detected capacity change from 0 to 256
[  223.485474][T10659] FAT-fs (loop3): Directory bread(block 64) failed
[  223.490187][T10659] FAT-fs (loop3): Directory bread(block 65) failed
[  223.494012][T10659] FAT-fs (loop3): Directory bread(block 66) failed
[  223.498017][T10659] FAT-fs (loop3): Directory bread(block 67) failed
[  223.500663][T10659] FAT-fs (loop3): Directory bread(block 68) failed
[  223.502925][T10659] FAT-fs (loop3): Directory bread(block 69) failed
[  223.505620][T10659] FAT-fs (loop3): Directory bread(block 70) failed
[  223.509000][T10659] FAT-fs (loop3): Directory bread(block 71) failed
[  223.511172][T10659] FAT-fs (loop3): Directory bread(block 72) failed
[  223.513711][T10659] FAT-fs (loop3): Directory bread(block 73) failed
[  223.545264][   T33] audit: type=1326 audit(1757530498.642:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.1.1762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2997d8eba9 code=0x7ffc0000
[  223.553970][   T33] audit: type=1326 audit(1757530498.642:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.1.1762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2997d8eba9 code=0x7ffc0000
[  223.630066][T10667] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  223.740444][T10675] loop1: detected capacity change from 0 to 2048
[  223.756393][T10675] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  223.762656][T10675] NILFS (loop1): mounting unchecked fs
[  223.763996][ T5951] udevd[5951]: incorrect nilfs2 checksum on /dev/loop1
[  223.782518][T10675] NILFS (loop1): recovery complete
[  223.797536][T10684] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.933366][T10690] loop3: detected capacity change from 0 to 512
[  223.939748][T10690] EXT4-fs: Ignoring removed oldalloc option
[  223.961365][T10690] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1779: Parent and EA inode have the same ino 15
[  223.967256][T10690] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1779: Parent and EA inode have the same ino 15
[  223.972689][T10690] EXT4-fs (loop3): 1 orphan inode deleted
[  223.976340][T10690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.004964][   T33] audit: type=1800 audit(1757530499.102:37): pid=10690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1779" name="file1" dev="loop3" ino=15 res=0 errno=0
[  224.043468][ T6623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.186684][ T5848] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  224.318276][T10700] loop1: detected capacity change from 0 to 40427
[  224.325773][T10700] F2FS-fs (loop1): invalid crc value
[  224.336763][ T5848] usb 5-1: Using ep0 maxpacket: 8
[  224.342353][ T5848] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  224.350990][ T5848] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  224.354888][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.356045][T10700] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  224.359451][ T5848] usb 5-1: Product: syz
[  224.362028][T10700] F2FS-fs (loop1): Start checkpoint disabled!
[  224.363171][ T5848] usb 5-1: Manufacturer: syz
[  224.368264][T10700] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  224.370071][ T5848] usb 5-1: SerialNumber: syz
[  224.374080][T10700] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  224.381190][ T5848] usb 5-1: config 0 descriptor??
[  224.392039][ T5848] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  224.395388][ T5848] usb 5-1: setting power ON
[  224.402031][ T5848] dvb-usb: bulk message failed: -22 (2/0)
[  224.405303][T10700] syz.1.1782: attempt to access beyond end of device
[  224.405303][T10700] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  224.412783][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  224.419219][ T5848] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  224.423017][ T5848] usb 5-1: media controller created
[  224.441572][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  224.449764][T10700] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  224.460854][ T5848] usb 5-1: selecting invalid altsetting 6
[  224.463616][ T5848] usb 5-1: digital interface selection failed (-22)
[  224.468449][ T5848] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  224.473606][ T5848] usb 5-1: setting power OFF
[  224.475889][ T5848] dvb-usb: bulk message failed: -22 (2/0)
[  224.480859][ T5848] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  224.484812][ T5848] (NULL device *): no alternate interface
[  224.503377][   T28] kworker/u9:1: attempt to access beyond end of device
[  224.503377][   T28] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  224.510978][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  224.510989][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.510994][   T28] Workqueue: writeback wb_workfn (flush-7:1)
[  224.511008][   T28] Call Trace:
[  224.511012][   T28]  <TASK>
[  224.511015][   T28]  dump_stack_lvl+0x189/0x250
[  224.511027][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.511036][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  224.511047][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  224.511059][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  224.511075][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  224.511089][   T28]  f2fs_write_end_io+0x886/0xb60
[  224.511108][   T28]  __submit_merged_bio+0x27a/0x6a0
[  224.511122][   T28]  __submit_merged_write_cond+0x255/0x530
[  224.511135][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  224.511161][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.511207][   T28]  ? f2fs_write_meta_pages+0x357/0x450
[  224.511222][   T28]  ? __lock_acquire+0xab9/0xd20
[  224.511234][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.511245][   T28]  do_writepages+0x32e/0x550
[  224.511257][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  224.511268][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  224.511281][   T28]  __writeback_single_inode+0x145/0xff0
[  224.511290][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  224.511300][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  224.511321][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  224.511349][   T28]  ? rcu_is_watching+0x15/0xb0
[  224.511365][   T28]  wb_writeback+0x43b/0xaf0
[  224.511377][   T28]  ? queue_io+0x2f1/0x590
[  224.511387][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  224.511400][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.511413][   T28]  wb_workfn+0x409/0xef0
[  224.511427][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  224.511437][   T28]  ? __lock_acquire+0xab9/0xd20
[  224.511451][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  224.511465][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.511474][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  224.511484][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  224.511495][   T28]  process_scheduled_works+0xae1/0x17b0
[  224.511519][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  224.511537][   T28]  worker_thread+0x8a0/0xda0
[  224.511561][   T28]  kthread+0x711/0x8a0
[  224.511570][   T28]  ? __pfx_worker_thread+0x10/0x10
[  224.511581][   T28]  ? __pfx_kthread+0x10/0x10
[  224.511590][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.511600][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.511606][   T28]  ? __pfx_kthread+0x10/0x10
[  224.511614][   T28]  ret_from_fork+0x47f/0x820
[  224.511627][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  224.511641][   T28]  ? __switch_to_asm+0x39/0x70
[  224.511649][   T28]  ? __switch_to_asm+0x33/0x70
[  224.511658][   T28]  ? __pfx_kthread+0x10/0x10
[  224.511668][   T28]  ret_from_fork_asm+0x1a/0x30
[  224.511687][   T28]  </TASK>
[  224.511690][   T28] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  224.525534][ T5848] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  224.658154][ T5848] usb 5-1: USB disconnect, device number 18
[  225.372230][T10721] loop3: detected capacity change from 0 to 256
[  225.379408][T10721] exfat: Deprecated parameter 'utf8'
[  225.382183][T10721] exfat: Deprecated parameter 'namecase'
[  225.385182][T10721] exfat: Deprecated parameter 'utf8'
[  225.424002][T10721] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  225.474479][T10721] Invalid source name
[  226.401204][T10753] netlink: 'syz.1.1804': attribute type 1 has an invalid length.
[  226.406013][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'.
[  226.465305][T10761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1808'.
[  226.474194][T10761] IPVS: Error connecting to the multicast addr
[  226.512365][T10766] loop4: detected capacity change from 0 to 128
[  226.518287][T10766] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  226.538373][T10766] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  226.564774][   T33] audit: type=1800 audit(1757530501.662:38): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1811" name="file1" dev="loop4" ino=1048658 res=0 errno=0
[  226.630327][  T159] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  226.663296][T10773] loop1: detected capacity change from 0 to 4096
[  226.678518][T10773] ntfs3(loop1): mft corrupted
[  226.680598][T10773] ntfs3(loop1): Failed to load $MFT.
[  226.697463][ T5848] usb 4-1: new low-speed USB device number 33 using dummy_hcd
[  226.877698][ T5848] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  226.880789][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.885583][ T5848] usb 4-1: config 0 descriptor??
[  226.979486][T10779] loop4: detected capacity change from 0 to 32768
[  227.009171][T10779] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.018192][T10793] loop1: detected capacity change from 0 to 1024
[  227.050537][T10779] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  227.060353][T10779] XFS (loop4): Starting recovery (logdev: internal)
[  227.078047][T10779] XFS (loop4): Ending recovery (logdev: internal)
[  227.080905][T10779] XFS (loop4): AG 0: Corrupt finobt pointer at level 1 index 0.
[  227.094591][T10779] XFS (loop4): Failed to initialize disk quotas, err -117.
[  227.116283][ T5848] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  227.173257][ T7913] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.178919][ T7913] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  227.736725][ T5911] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  227.890319][ T5911] usb 2-1: config 4 has an invalid interface number: 156 but max is 0
[  227.894096][ T5911] usb 2-1: config 4 has no interface number 0
[  227.899335][ T5911] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e
[  227.903195][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.908431][ T5911] usb 2-1: Product: syz
[  227.910269][ T5911] usb 2-1: Manufacturer: syz
[  227.912281][ T5911] usb 2-1: SerialNumber: syz
[  227.914738][ T5848] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  227.921263][ T5848] asix 4-1:0.0: probe with driver asix failed with error -71
[  227.928322][ T5848] usb 4-1: USB disconnect, device number 33
[  227.941180][ T5911] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state.
[  227.944904][ T5911] usb 2-1: setting power ON
[  227.950079][ T5911] dvb-usb: bulk message failed: -22 (2/0)
[  227.959058][ T5911] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  227.973928][ T5911] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19)
[  227.979138][ T5911] dvb_usb_cxusb 2-1:4.156: probe with driver dvb_usb_cxusb failed with error -22
[  228.144169][ T5911] usb 2-1: USB disconnect, device number 38
[  228.406381][T10821] Failed to get privilege flags for destination (handle=0x2:0x0)
[  228.463285][T10823] loop4: detected capacity change from 0 to 2048
[  228.484435][ T5951] udevd[5951]: incorrect nilfs2 checksum on /dev/loop4
[  228.501674][ T5951] udevd[5951]: incorrect nilfs2 checksum on /dev/loop4
[  228.520008][T10823] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  228.541262][T10826] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.545919][T10823] syz.4.1833: attempt to access beyond end of device
[  228.545919][T10823] loop4: rw=524288, sector=65534, nr_sectors = 2 limit=2048
[  228.721093][T10825] loop3: detected capacity change from 0 to 32768
[  228.732544][T10830] loop4: detected capacity change from 0 to 4096
[  228.775021][T10825] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  228.788678][T10825] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  228.821977][T10825] XFS (loop3): Ending clean mount
[  228.835896][T10825] XFS (loop3): Quotacheck needed: Please wait.
[  228.892714][T10825] XFS (loop3): Quotacheck: Done.
[  229.005306][ T6623] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  229.446713][   T52] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  229.610561][   T52] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  229.614500][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.626373][   T52] usb 5-1: config 0 descriptor??
[  229.634895][T10869] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  229.640509][   T52] gspca_main: spca508-2.14.0 probing 8086:0110
[  229.753830][T10878] loop3: detected capacity change from 0 to 256
[  229.779124][T10878] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  229.818178][T10880] loop1: detected capacity change from 0 to 512
[  229.822367][T10880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  229.831791][T10880] EXT4-fs (loop1): 1 truncate cleaned up
[  229.834051][   T52] gspca_spca508: reg_read err -32
[  229.836073][T10880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.904042][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.967712][T10888] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1859'.
[  230.060609][   T52] gspca_spca508: reg_read err -71
[  230.063176][   T52] gspca_spca508: reg_read err -71
[  230.074155][   T52] gspca_spca508: reg_read err -71
[  230.083102][   T52] gspca_spca508: reg write: error -71
[  230.085052][   T52] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[  230.102154][   T52] usb 5-1: USB disconnect, device number 19
[  230.357745][T10898] loop3: detected capacity change from 0 to 32768
[  230.360748][T10898] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1862 (10898)
[  230.371206][T10898] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  230.374946][T10898] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  230.417941][T10898] BTRFS info (device loop3): enabling ssd optimizations
[  230.420613][T10898] BTRFS info (device loop3): enabling free space tree
[  230.453972][ T6623] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  231.163819][T10930] PKCS8: Unsupported PKCS#8 version
[  231.215225][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'.
[  231.551412][T10916] loop3: detected capacity change from 0 to 262144
[  231.556055][T10916] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1863 (10916)
[  231.562321][T10916] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  231.565623][T10916] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  231.693591][T10916] BTRFS info (device loop3): enabling ssd optimizations
[  231.696462][T10916] BTRFS info (device loop3): enabling free space tree
[  231.766644][   T52] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  231.769821][ T5905] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  231.812881][ T6623] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  231.922330][ T5905] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  231.925559][ T5905] usb 5-1: config 0 has no interface number 0
[  231.929767][   T52] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  231.933564][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.937726][ T5905] usb 5-1: config 0 interface 255 has no altsetting 0
[  231.940340][ T5905] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  231.951279][   T52] usb 2-1: config 0 descriptor??
[  231.963773][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.990493][ T5905] usb 5-1: config 0 descriptor??
[  231.995998][ T5905] cp210x 5-1:0.255: cp210x converter detected
[  232.168000][T10945] loop1: detected capacity change from 0 to 256
[  232.181746][T10945] FAT-fs (loop1): bogus sectors per cluster 223
[  232.184551][T10945] FAT-fs (loop1): Can't find a valid FAT filesystem
[  232.210794][   T52] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  232.410615][   T52] [drm:udl_init] *ERROR* Selecting channel failed
[  232.420199][ T5905] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -32
[  232.442825][   T52] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[  232.445753][   T52] [drm] Initialized udl on minor 3
[  232.459892][T10966] loop3: detected capacity change from 0 to 4096
[  232.466887][   T52] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  232.471979][   T52] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  232.479003][ T5848] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  232.482389][ T5848] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  232.487858][   T52] usb 2-1: USB disconnect, device number 39
[  232.492051][T10966] ntfs3(loop3): Failed to load $Volume (-22).
[  232.628274][ T5905] cp210x 5-1:0.255: GPIO initialisation failed: -19
[  232.633225][ T5905] usb 5-1: cp210x converter now attached to ttyUSB0
[  232.672553][T10972] loop3: detected capacity change from 0 to 128
[  232.683513][T10972] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  232.688965][T10972] hpfs: filesystem error: improperly stopped
[  232.691654][T10972] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  232.694805][T10972] hpfs: You really don't want any checks? You are crazy...
[  232.700684][T10972] hpfs: hpfs_map_sector(): read error
[  232.703562][T10972] hpfs: code page support is disabled
[  232.705432][T10972] hpfs: hpfs_map_4sectors(): unaligned read
[  232.708596][T10972] hpfs: hpfs_map_4sectors(): unaligned read
[  232.711162][T10972] hpfs: filesystem error: unable to find root dir
[  232.718253][T10972] hpfs: hpfs_map_4sectors(): unaligned read
[  232.722627][T10972] hpfs: hpfs_map_sector(): read error
[  232.812532][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'.
[  232.842264][ T5844] usb 5-1: USB disconnect, device number 20
[  232.848690][ T5844] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  232.857300][ T5844] cp210x 5-1:0.255: device disconnected
[  232.874614][T10980] loop3: detected capacity change from 0 to 4096
[  232.891685][T10980] EXT4-fs: Ignoring removed mblk_io_submit option
[  232.902408][T10980] EXT4-fs (loop3): Test dummy encryption mode enabled
[  232.912448][T10980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.968668][T10984] loop1: detected capacity change from 0 to 2048
[  232.983410][T10984] NILFS (loop1): invalid segment: Sequence number mismatch
[  232.989696][T10984] NILFS (loop1): trying rollback from an earlier position
[  233.004524][T10984] NILFS (loop1): recovery complete
[  233.009900][T10987] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.028953][T10980] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  233.083446][ T6623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.394144][T10992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1890'.
[  233.619346][T10990] loop1: detected capacity change from 0 to 131072
[  233.622890][T10990] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name
[  233.625772][T10990] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name
[  233.628968][T10990] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name
[  233.637744][T10990] F2FS-fs (loop1): invalid crc value
[  233.669914][T10990] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  233.673848][T10990] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955
[  233.819152][T11010] loop3: detected capacity change from 0 to 128
[  233.822244][T11010] EXT4-fs (loop3): Test dummy encryption mode enabled
[  233.829263][T11010] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  233.833523][T11010] ext4 filesystem being mounted at /529/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  233.850926][T11010] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.1898: checksumming directory block 0
[  233.943875][ T6623] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  234.062522][T11017] loop4: detected capacity change from 0 to 4096
[  234.130580][T11020] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.370183][T11030] loop3: detected capacity change from 0 to 4096
[  234.382201][T11030] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  234.432296][T11030] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  234.453572][T11030] ntfs3(loop3): ino=1a, mi_enum_attr
[  234.464383][T11030] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  234.655130][T11044] loop3: detected capacity change from 0 to 2048
[  234.674374][T11034] loop1: detected capacity change from 0 to 32768
[  234.679874][T11034] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  234.684133][T11045] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.702907][T11044] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[  234.714422][T11044] Remounting filesystem read-only
[  234.756743][ T5911] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  234.930213][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.934499][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.940853][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  234.946240][ T5911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  234.950997][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.959024][ T5911] usb 5-1: config 0 descriptor??
[  234.996942][ T6637] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  235.108837][T11059] loop3: detected capacity change from 0 to 64
[  235.119980][T11059] MINIX-fs: deleted inode referenced: 1
[  235.156943][ T6637] usb 2-1: Using ep0 maxpacket: 16
[  235.175975][ T6637] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  235.188895][ T6637] usb 2-1: config 0 has no interface number 0
[  235.191600][ T6637] usb 2-1: config 0 interface 41 has no altsetting 0
[  235.206312][ T6637] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  235.209252][T11061] loop3: detected capacity change from 0 to 256
[  235.218138][ T6637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.221524][ T6637] usb 2-1: Product: syz
[  235.224809][T11061] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  235.240378][ T6637] usb 2-1: Manufacturer: syz
[  235.242477][ T6637] usb 2-1: SerialNumber: syz
[  235.252344][ T6637] usb 2-1: config 0 descriptor??
[  235.269158][ T6637] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22
[  235.389237][ T5911] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  235.462064][ T5905] usb 2-1: USB disconnect, device number 40
[  235.628741][ T5911] usb 5-1: USB disconnect, device number 21
[  236.097922][T11071] block nbd1: Unsupported socket: should be TCP or UNIX.
[  236.302187][T11085] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1933'.
[  236.354262][T11089] loop1: detected capacity change from 0 to 8
[  236.375751][T11089] squashfs image failed sanity check
[  236.429890][T11097] loop3: detected capacity change from 0 to 2048
[  236.434252][T11097] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  236.441680][T11097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  236.667025][ T5911] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  236.768398][ T5844] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  236.846759][ T5911] usb 2-1: Using ep0 maxpacket: 32
[  236.853491][ T5911] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  236.857311][ T5911] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  236.862385][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  236.866145][ T5911] usb 2-1: config 1 has no interface number 0
[  236.871194][ T5911] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  236.875728][ T5911] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  236.881253][ T5911] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  236.884998][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.903606][ T5911] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  236.934952][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  236.941084][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  236.945470][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  236.949829][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  236.955202][ T5844] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  236.959223][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.967793][ T5844] usb 4-1: config 0 descriptor??
[  237.101749][ T5911] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  237.403628][ T5844] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  237.551129][ T5844] usb 2-1: USB disconnect, device number 41
[  237.555688][ T5844] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  237.684320][T11127] comedi comedi3: no devices specified
[  238.027792][   T52] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  238.141920][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'.
[  238.176694][   T52] usb 5-1: Using ep0 maxpacket: 8
[  238.187617][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  238.192113][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  238.200571][   T52] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  238.204685][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  238.224717][   T52] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  238.229199][   T52] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  238.232610][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.241944][   T52] usb 5-1: config 0 descriptor??
[  238.246018][T11137] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  238.371249][T11151] Dead loop on virtual device ip6_vti0, fix it urgently!
[  238.466310][    C0] Bluetooth: hci3: Unexpected continuation: 1 bytes
[  238.470695][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.473847][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.479096][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.481992][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.484878][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.488023][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.490975][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.493922][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.498233][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.501919][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.504783][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.507923][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.511069][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.513833][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.516746][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.519556][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.522398][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.525234][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.528264][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.531119][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.533962][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.536909][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.539861][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.542678][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.545499][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.548368][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.551087][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.553854][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.557999][   T55] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  238.611162][T11158] loop1: detected capacity change from 0 to 8192
[  238.666469][ T5235] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  238.669698][   T52] usb 5-1: USB disconnect, device number 22
[  238.751474][T11161] loop1: detected capacity change from 0 to 128
[  238.768693][T11161] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  238.789263][T11161] ext4 filesystem being mounted at /645/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  239.157338][   T52] usb 4-1: reset high-speed USB device number 34 using dummy_hcd
[  239.679894][ T5846] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  240.144050][T11182] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1975'.
[  240.305574][T11190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1979'.
[  240.381050][ T5848] usb 4-1: USB disconnect, device number 34
[  240.496884][ T5844] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  240.656986][ T5844] usb 2-1: Using ep0 maxpacket: 16
[  240.660888][ T5844] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  240.669135][ T5844] usb 2-1: config 0 has no interface number 0
[  240.671753][ T5844] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  240.675808][ T5844] usb 2-1: config 0 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  240.695818][T11205] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  240.703191][ T5844] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  240.706609][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.710114][ T5844] usb 2-1: Product: syz
[  240.711828][ T5844] usb 2-1: Manufacturer: syz
[  240.723971][ T5844] usb 2-1: SerialNumber: syz
[  240.737487][ T5844] usb 2-1: config 0 descriptor??
[  240.760010][ T5844] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  240.948754][   T52] usb 2-1: USB disconnect, device number 42
[  241.012956][T11207] loop4: detected capacity change from 0 to 32768
[  241.022533][T11207] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section replicas_v0: no devices in entry btree: 1/0 []
[  241.022533][T11207] replicas_v0 (size 24):
[  241.022533][T11207] btree: 0 [] (unknown data_type 16): 2 [1 0] user: 1 [0]
[  241.022533][T11207] 
[  241.046758][T11207] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  241.160402][ T5235] Bluetooth: hci1: link tx timeout
[  241.163501][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  241.345323][    C1] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  241.355497][T11223] bcachefs (/dev/loop4): error reading default superblock: IO error: -5
[  241.362661][    C1] I/O error, dev loop4, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  241.369057][T11223] bcachefs (/dev/loop4): error reading superblock: IO error: -5
[  241.372280][T11223] bcachefs: bch2_fs_get_tree() error: EIO
[  241.442282][T11225] netlink: 'syz.4.1994': attribute type 3 has an invalid length.
[  241.680721][T11235] loop4: detected capacity change from 0 to 2048
[  241.714954][T11235] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  241.753288][T11235] syz.4.1999: attempt to access beyond end of device
[  241.753288][T11235] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  241.759369][T11238] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  241.776059][T11235] syz.4.1999: attempt to access beyond end of device
[  241.776059][T11235] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  241.802843][T11235] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3)
[  241.806663][T11235] NILFS (loop4): error -5 reading inode: ino=15
[  241.810420][T11235] syz.4.1999: attempt to access beyond end of device
[  241.810420][T11235] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  241.818664][T11235] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3)
[  241.821272][T11235] NILFS (loop4): error -5 reading inode: ino=15
[  241.994890][T11244] loop3: detected capacity change from 0 to 32768
[  242.013887][T11244] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2003 (11244)
[  242.024772][T11244] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  242.034210][T11244] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  242.077317][T11246] loop1: detected capacity change from 0 to 32768
[  242.113303][T11246] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  242.151957][T11244] BTRFS info (device loop3): enabling ssd optimizations
[  242.165404][T11244] BTRFS info (device loop3): enabling free space tree
[  242.169767][T11244] BTRFS info (device loop3): use lzo compression, level 1
[  242.236607][   T33] audit: type=1800 audit(1757530517.322:39): pid=11246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2004" name="file2" dev="loop1" ino=17061 res=0 errno=0
[  242.725838][ T6623] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  242.730027][ T5911] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  242.798200][ T5846] ocfs2: Unmounting device (7,1) on (node local)
[  242.907071][ T5911] usb 5-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b
[  242.911023][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.981327][T11278] loop3: detected capacity change from 0 to 1024
[  243.019425][T11278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.061386][ T6623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.132028][ T5911] pegasus 5-1:254.0: probe with driver pegasus failed with error -71
[  243.141962][ T5911] usb 5-1: USB disconnect, device number 23
[  243.158116][T11287] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  243.161832][T11287] block device autoloading is deprecated and will be removed.
[  243.161846][T11285] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  243.170938][T11285] block device autoloading is deprecated and will be removed.
[  243.257153][ T5235] Bluetooth: hci1: command 0x0406 tx timeout
[  244.070314][T11319] netlink: 'syz.4.2028': attribute type 12 has an invalid length.
[  244.073556][T11319] netlink: 'syz.4.2028': attribute type 29 has an invalid length.
[  244.077451][T11319] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2028'.
[  244.081126][T11319] netlink: 'syz.4.2028': attribute type 2 has an invalid length.
[  244.084261][T11319] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2028'.
[  244.215319][T11314] loop1: detected capacity change from 0 to 32768
[  244.360335][T11321] loop4: detected capacity change from 0 to 32768
[  244.379849][T11314] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  244.410014][T11321] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  244.414378][T11321] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  244.429830][T11314] XFS (loop1): Ending clean mount
[  244.450525][T11321] XFS (loop4): Ending clean mount
[  244.451535][T11314] XFS (loop1): Quotacheck needed: Please wait.
[  244.456270][T11321] XFS (loop4): Quotacheck needed: Please wait.
[  244.517708][T11314] XFS (loop1): Quotacheck: Done.
[  244.520393][T11321] XFS (loop4): Quotacheck: Done.
[  244.591338][ T5846] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  244.627105][ T7913] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  244.936465][T11355] loop4: detected capacity change from 0 to 512
[  244.947985][T11355] EXT4-fs: Ignoring removed nomblk_io_submit option
[  244.981231][T11355] EXT4-fs: Mount option(s) incompatible with ext3
[  245.181842][T11365] bridge1: entered allmulticast mode
[  245.592243][T11397] netlink: 'syz.3.2058': attribute type 2 has an invalid length.
[  245.663849][T11405] loop3: detected capacity change from 0 to 256
[  245.669363][T11405] exfat: Deprecated parameter 'namecase'
[  245.672015][T11405] exfat: Deprecated parameter 'utf8'
[  245.701962][T11405] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  245.842844][T11415] syz_tun: entered allmulticast mode
[  245.850894][T11414] syz_tun: left allmulticast mode
[  245.958213][ T5848] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  246.032159][ T5904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.119436][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.123853][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.129656][ T5904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.137982][ T5848] usb 2-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  246.143623][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.160846][ T5848] usb 2-1: config 0 descriptor??
[  246.205966][ T5904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.287581][ T5904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.413650][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  246.420530][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  246.428246][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  246.434591][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  246.441835][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  246.521336][ T5904] bridge_slave_1: left allmulticast mode
[  246.523869][ T5904] bridge_slave_1: left promiscuous mode
[  246.527610][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.535126][ T5904] bridge_slave_0: left allmulticast mode
[  246.542330][ T5904] bridge_slave_0: left promiscuous mode
[  246.545229][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.580704][ T5848] hid (null): nested delimiters
[  246.594253][ T5848] wacom 0003:056A:030C.0018: nested delimiters
[  246.597220][ T5848] wacom 0003:056A:030C.0018: item 0 1 2 10 parsing failed
[  246.601217][ T5848] wacom 0003:056A:030C.0018: parse failed
[  246.603780][ T5848] wacom 0003:056A:030C.0018: probe with driver wacom failed with error -22
[  246.782323][ T5848] usb 2-1: USB disconnect, device number 43
[  246.997189][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.002128][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.007187][ T5904] bond0 (unregistering): Released all slaves
[  247.280905][   T33] audit: type=1800 audit(1757530522.382:40): pid=11457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2080" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  247.366382][T11432] chnl_net:caif_netlink_parms(): no params data found
[  247.449880][ T5904] hsr_slave_0: left promiscuous mode
[  247.455230][ T5904] hsr_slave_1: left promiscuous mode
[  247.466488][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.473120][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.486241][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.492124][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.573357][ T5904] veth1_macvtap: left promiscuous mode
[  247.586010][ T5904] veth0_macvtap: left promiscuous mode
[  247.592016][ T5904] veth1_vlan: left promiscuous mode
[  247.594230][ T5904] veth0_vlan: left promiscuous mode
[  247.617838][T11472] loop4: detected capacity change from 0 to 32768
[  247.756264][T11472] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  247.756276][T11472]   allowing incompatible features above 0.0: (unknown version)
[  247.756281][T11472]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  247.773634][T11472] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  247.777058][T11472] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  247.780472][T11472] bcachefs (loop4): Version upgrade required:
[  247.780472][T11472] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  247.780472][T11472] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  247.780472][T11472]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  247.809530][    C1] vkms_vblank_simulate: vblank timer overrun
[  247.811908][T11485] binder: 11484:11485 ioctl c0306201 200000000080 returned -14
[  247.815165][T11472] bcachefs (loop4): dropping and reconstructing all alloc info
[  247.827695][T11472] bcachefs (loop4): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870913:U32_MAX len 0 ver 0: (unpack error)
[  247.827733][T11472]   invalid variable length fields, deleting
[  247.841159][T11472] bcachefs (loop4): accounting_read... done
[  247.870044][T11472] bcachefs (loop4): alloc_read... done
[  247.873598][T11472] bcachefs (loop4): snapshots_read... done
[  247.880801][   T33] audit: type=1326 audit(1757530522.982:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.1.2091" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2997d8eba9 code=0x7ffc0000
[  247.881840][   T33] audit: type=1326 audit(1757530522.982:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.1.2091" exe="/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f2997d8eba9 code=0x7ffc0000
[  247.892302][T11472] bcachefs (loop4): check_allocations...
[  247.932851][   T33] audit: type=1326 audit(1757530523.002:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.1.2091" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2997d8eba9 code=0x7ffc0000
[  247.934229][T11472]  done
[  247.935029][   T33] audit: type=1326 audit(1757530523.002:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11486 comm="syz.1.2091" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2997d8eba9 code=0x7ffc0000
[  247.944959][T11472] bcachefs (loop4): going read-write
[  248.041457][T11472] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean
[  248.049090][T11472] bcachefs (loop4): done starting filesystem
[  248.134154][   T53] bcachefs (loop4): bucket incorrectly unset in freespace btree
[  248.134192][   T53]   u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing
[  248.158976][T11472] bcachefs (loop4): dirent to missing inode:
[  248.159013][T11472]   u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg
[  248.159018][T11472]   emergency read only at seq 12
[  248.173782][ T5848] bcachefs (loop4): going read-only
[  248.176022][ T5848] bcachefs (loop4): finished waiting for writes to stop
[  248.215807][ T5848] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12
[  248.215889][ T7913] bcachefs (loop4): shutting down
[  248.224259][ T5848] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 12
[  248.233838][ T5848] bcachefs (loop4): unclean shutdown complete, journal seq 12
[  248.240144][ T5848] bcachefs (loop4): done going read-only, filesystem not clean
[  248.248658][T11494] loop1: detected capacity change from 0 to 2048
[  248.258337][T11494] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  248.264050][T11494] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  248.270684][ T7913] bcachefs (loop4): shutdown complete
[  248.536104][   T55] Bluetooth: hci0: command tx timeout
[  248.572313][T11500] binder: 11499:11500 ioctl c0306201 2000000003c0 returned -14
[  248.775006][ T5904] team_slave_1 (unregistering): left promiscuous mode
[  248.782821][ T5904] team0 (unregistering): Port device team_slave_1 removed
[  248.827633][ T5904] team_slave_0 (unregistering): left promiscuous mode
[  248.831535][ T5904] team0 (unregistering): Port device team_slave_0 removed
[  248.858116][T11509] loop1: detected capacity change from 0 to 64
[  248.865881][T11509] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  248.981062][T11513] loop1: detected capacity change from 0 to 4096
[  248.990679][T11513] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  249.018521][T11513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.083260][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.484878][T11519] loop4: detected capacity change from 0 to 1024
[  249.491371][T11519] EXT4-fs: Ignoring removed nomblk_io_submit option
[  249.498443][T11519] EXT4-fs: Ignoring removed nomblk_io_submit option
[  249.503303][T11519] EXT4-fs: Ignoring removed orlov option
[  249.507095][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2104'.
[  249.508405][T11519] EXT4-fs: Mount option(s) incompatible with ext2
[  249.584139][T11519] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  249.597470][T11432] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.609710][T11432] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.612711][T11432] bridge_slave_0: entered allmulticast mode
[  249.619314][T11432] bridge_slave_0: entered promiscuous mode
[  249.625323][T11432] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.629969][T11432] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.633210][T11432] bridge_slave_1: entered allmulticast mode
[  249.639870][T11432] bridge_slave_1: entered promiscuous mode
[  249.709984][T11432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.731249][T11432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.819806][T11530] loop4: detected capacity change from 0 to 512
[  249.829068][T11530] EXT4-fs: Ignoring removed oldalloc option
[  249.831389][T11530] EXT4-fs: Ignoring removed orlov option
[  249.831445][T11432] team0: Port device team_slave_0 added
[  249.846854][   T97] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  249.857496][T11432] team0: Port device team_slave_1 added
[  249.862218][T11530] EXT4-fs: Invalid want_extra_isize 8
[  249.932292][T11432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.933344][ T5904] IPVS: stop unused estimator thread 0...
[  249.936354][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.968460][T11432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.976894][T11432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.979824][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.005250][T11432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.010723][   T97] usb 2-1: Using ep0 maxpacket: 8
[  250.037151][   T97] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  250.040979][   T97] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.044229][   T97] usb 2-1: Product: syz
[  250.045895][   T97] usb 2-1: Manufacturer: syz
[  250.049618][   T97] usb 2-1: SerialNumber: syz
[  250.077072][   T97] usb 2-1: config 0 descriptor??
[  250.083880][   T97] gspca_main: sq930x-2.14.0 probing 2770:930c
[  250.171978][T11432] hsr_slave_0: entered promiscuous mode
[  250.195683][T11432] hsr_slave_1: entered promiscuous mode
[  250.382103][   T97] gspca_sq930x: reg_r 001f failed -71
[  250.389184][   T97] sq930x 2-1:0.0: probe with driver sq930x failed with error -71
[  250.401614][   T97] usb 2-1: USB disconnect, device number 44
[  250.607289][   T55] Bluetooth: hci0: command tx timeout
[  251.002577][T11432] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  251.034893][T11432] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  251.073566][T11432] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  251.094063][T11432] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  251.283193][T11432] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.325537][T11432] 8021q: adding VLAN 0 to HW filter on device team0
[  251.355152][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.357764][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.377922][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.380601][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.407441][T11562] loop1: detected capacity change from 0 to 2048
[  251.414647][T11562] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576
[  251.443082][T11562] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  251.466165][T11432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  251.477092][T11432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  252.263914][T11432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.363849][T11574] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  252.570857][T11590] netlink: 'syz.4.2118': attribute type 4 has an invalid length.
[  252.587044][T11591] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  252.637190][T11432] veth0_vlan: entered promiscuous mode
[  252.662283][T11432] veth1_vlan: entered promiscuous mode
[  252.691557][   T55] Bluetooth: hci0: command tx timeout
[  252.713168][T11432] veth0_macvtap: entered promiscuous mode
[  252.728970][T11432] veth1_macvtap: entered promiscuous mode
[  252.748523][T11432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.758384][T11432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.768414][ T5904] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.792459][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.838601][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.852577][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.863395][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2123'.
[  252.961479][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.972314][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.995642][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.999821][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.147613][T11614] loop4: detected capacity change from 0 to 2048
[  253.160351][T11614] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  253.183557][T11614] overlayfs: upper fs needs to support d_type.
[  253.191857][T11614] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  253.194148][T11614] overlayfs: failed to set xattr on upper
[  253.196273][T11614] overlayfs: ...falling back to redirect_dir=nofollow.
[  253.203673][T11614] overlayfs: ...falling back to index=off.
[  253.205851][T11614] overlayfs: ...falling back to uuid=null.
[  253.293777][ T7913] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  253.298710][ T7913] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  253.708783][T11618] loop1: detected capacity change from 0 to 8
[  253.741595][T11618] SQUASHFS error: Unable to read inode 0x6
[  254.079994][T11620] loop1: detected capacity change from 0 to 256
[  254.115999][T11620] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d)
[  254.146756][T11620] input: syz0 as /devices/virtual/input/input22
[  254.358451][T11623] comedi comedi1: 8255: I/O port conflict (0x3,4)
[  254.360669][T11623] comedi comedi1: 8255: I/O port conflict (0x10002,4)
[  254.531442][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  254.539163][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  254.570220][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  254.614841][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  254.621410][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  254.766841][ T5235] Bluetooth: hci0: command tx timeout
[  254.901053][T11632] chnl_net:caif_netlink_parms(): no params data found
[  254.947447][  T797] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  255.036191][T11660] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2147'.
[  255.046992][T11632] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.050099][T11632] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.053113][T11632] bridge_slave_0: entered allmulticast mode
[  255.062100][T11632] bridge_slave_0: entered promiscuous mode
[  255.069967][T11632] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.077274][T11632] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.080252][T11632] bridge_slave_1: entered allmulticast mode
[  255.084149][T11632] bridge_slave_1: entered promiscuous mode
[  255.110693][  T797] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  255.114610][  T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.118190][  T797] usb 6-1: Product: syz
[  255.120048][  T797] usb 6-1: Manufacturer: syz
[  255.122036][  T797] usb 6-1: SerialNumber: syz
[  255.125604][T11632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.130368][  T797] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  255.150354][T11632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.158152][  T797] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  255.192121][T11632] team0: Port device team_slave_0 added
[  255.197316][T11632] team0: Port device team_slave_1 added
[  255.240472][T11632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.243183][T11632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.264697][T11632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.277828][T11632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.280703][T11632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.472176][T11632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.492989][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.495988][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.534081][T11632] hsr_slave_0: entered promiscuous mode
[  255.536925][T11632] hsr_slave_1: entered promiscuous mode
[  255.539265][T11632] debugfs: 'hsr0' already exists in 'hsr'
[  255.541161][T11632] Cannot create hsr debugfs directory
[  255.587535][ T5911] usb 6-1: USB disconnect, device number 2
[  255.715469][T11632] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  255.723404][T11632] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  255.731835][T11632] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  255.739150][T11632] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  255.776260][T11632] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.779891][T11632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.783973][T11632] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.786967][T11632] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.840561][T11632] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.854971][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.859940][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.875658][T11632] 8021q: adding VLAN 0 to HW filter on device team0
[  255.884259][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.887417][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.898471][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.901297][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.030652][T11632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.095356][T11681] loop1: detected capacity change from 0 to 2048
[  256.110198][T11681] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  256.142323][   T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 38341 - 0
[  256.172261][   T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  256.209352][  T797] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  256.212182][  T797] ath9k_htc: Failed to initialize the device
[  256.235949][ T5911] usb 6-1: ath9k_htc: USB layer deinitialized
[  256.329884][   T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 38341 - 0
[  256.333170][   T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  256.348102][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2153'.
[  256.354811][T11690] nbd: socks must be embedded in a SOCK_ITEM attr
[  256.419834][   T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 38341 - 0
[  256.428220][   T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  256.481980][T11632] veth0_vlan: entered promiscuous mode
[  256.491528][T11632] veth1_vlan: entered promiscuous mode
[  256.523072][T11632] veth0_macvtap: entered promiscuous mode
[  256.536349][T11632] veth1_macvtap: entered promiscuous mode
[  256.551627][T11632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.562197][T11632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.572257][ T5904] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.585105][ T5904] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.602411][ T5904] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.606145][ T5904] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.624942][   T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 38341 - 0
[  256.629190][   T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  256.687203][   T55] Bluetooth: hci1: command tx timeout
[  256.759764][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.762888][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.823948][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.828908][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.907437][   T12] bridge_slave_1: left allmulticast mode
[  256.910124][   T12] bridge_slave_1: left promiscuous mode
[  256.912910][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.922393][   T12] bridge_slave_0: left allmulticast mode
[  256.924909][   T12] bridge_slave_0: left promiscuous mode
[  256.928313][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.216242][   T12] bridge0 (unregistering): left promiscuous mode
[  257.324257][T11715] netlink: 'syz.1.2161': attribute type 10 has an invalid length.
[  257.416478][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.423332][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.430145][   T12] bond0 (unregistering): Released all slaves
[  257.455163][T11715] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.461025][T11715] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.493706][T11715] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.500050][T11715] bridge0: port 2(bridge_slave_1) entered listening state
[  257.503235][T11715] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.506183][T11715] bridge0: port 1(bridge_slave_0) entered listening state
[  257.524162][T11715] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  257.753178][T11727] random: crng reseeded on system resumption
[  257.903165][T11727] loop6: detected capacity change from 0 to 2048
[  258.010138][T11736] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  258.101605][T11737] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12
[  258.132547][T11737] Remounting filesystem read-only
[  258.217564][  T797] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  258.297646][   T12] team0: left promiscuous mode
[  258.301580][   T12] team_slave_0: left promiscuous mode
[  258.321619][   T12] team_slave_1: left promiscuous mode
[  258.343290][   T12] hsr_slave_0: left promiscuous mode
[  258.350667][   T12] hsr_slave_1: left promiscuous mode
[  258.353801][T11740] loop5: detected capacity change from 0 to 128
[  258.356511][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.375211][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.385846][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.391473][T11740] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  258.396400][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.403339][  T797] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  258.413268][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  258.433565][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.442971][   T12] veth1_macvtap: left promiscuous mode
[  258.447235][  T797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  258.465900][   T12] veth0_macvtap: left promiscuous mode
[  258.469261][T11432] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  258.473226][  T797] usb 2-1: New USB device found, idVendor=056a, idProduct=48de, bcdDevice= 0.2e
[  258.486832][   T12] veth1_vlan: left promiscuous mode
[  258.501730][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.507778][   T12] veth0_vlan: left promiscuous mode
[  258.541939][  T797] usb 2-1: config 0 descriptor??
[  258.767073][   T55] Bluetooth: hci1: command tx timeout
[  258.803492][T11632] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer
[  258.856354][T11743] loop5: detected capacity change from 0 to 4096
[  258.972297][  T797] wacom 0003:056A:48DE.0019: unknown main item tag 0x0
[  258.975260][  T797] wacom 0003:056A:48DE.0019: unknown main item tag 0x0
[  258.990761][  T797] wacom 0003:056A:48DE.0019: Unknown device_type for 'HID 056a:48de'. Ignoring.
[  259.166924][T11750] netlink: 'syz.6.2172': attribute type 4 has an invalid length.
[  259.182859][ T5844] usb 2-1: USB disconnect, device number 45
[  259.373361][T11748] loop5: detected capacity change from 0 to 32768
[  259.409731][T11748] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2171 (11748)
[  259.425069][T11748] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  259.431748][T11748] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  259.576909][T11774] loop6: detected capacity change from 0 to 512
[  259.582206][T11774] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  259.615677][T11774] EXT4-fs (loop6): 1 truncate cleaned up
[  259.619611][T11748] BTRFS info (device loop5): enabling ssd optimizations
[  259.622643][T11748] BTRFS info (device loop5): enabling free space tree
[  259.628467][T11774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.653926][T11748] BTRFS info (device loop5): use lzo compression, level 1
[  259.666233][T11748] BTRFS info (device loop5): max_inline set to 0
[  259.712071][T11632] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.787164][T11432] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  260.153586][T11789] loop1: detected capacity change from 0 to 1024
[  260.179917][T11789] hfsplus: invalid catalog btree flag
[  260.182188][T11789] hfsplus: failed to load catalog file
[  260.392915][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2184'.
[  260.479532][   T12] team_slave_1 (unregistering): left allmulticast mode
[  260.484282][   T12] team0 (unregistering): Port device team_slave_1 removed
[  260.599943][   T12] team_slave_0 (unregistering): left allmulticast mode
[  260.604866][   T12] team0 (unregistering): Port device team_slave_0 removed
[  260.838322][T11801] loop1: detected capacity change from 0 to 32768
[  260.852137][T11801] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.856845][   T55] Bluetooth: hci1: command tx timeout
[  260.906235][T11801] XFS (loop1): Ending clean mount
[  260.927949][T11801] XFS (loop1): Quotacheck needed: Please wait.
[  260.993196][T11801] XFS (loop1): Quotacheck: Done.
[  261.086140][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  261.123512][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2189'.
[  261.432921][   T55] Bluetooth: hci2: unexpected event for opcode 0x2019
[  261.767564][ T5844] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  261.938236][ T5844] usb 7-1: config 0 has an invalid interface number: 64 but max is 0
[  261.940934][ T5844] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.944563][ T5844] usb 7-1: config 0 has no interface number 0
[  261.960977][ T5844] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  261.964179][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.971327][ T5844] usb 7-1: Product: syz
[  261.974247][ T5844] usb 7-1: Manufacturer: syz
[  261.975849][ T5844] usb 7-1: SerialNumber: syz
[  261.984241][ T5844] usb 7-1: config 0 descriptor??
[  261.987992][   T12] ------------[ cut here ]------------
[  261.988761][ T5844] usb 7-1: Found UVC 0.00 device syz (046d:0823)
[  261.990589][   T12] WARNING: net/ipv6/xfrm6_tunnel.c:341 at xfrm6_tunnel_net_exit+0x7e/0x100, CPU#1: kworker/u8:0/12
[  261.990649][   T12] Modules linked in:
[  261.993342][ T5844] usb 7-1: No valid video chain found.
[  261.998256][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  262.007577][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.011486][   T12] Workqueue: netns cleanup_net
[  262.013368][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  262.015740][   T12] Code: 08 14 d8 f7 4b 83 3c 2c 00 75 19 e8 ac d0 73 f7 49 81 fd f8 07 00 00 74 1d e8 9e d0 73 f7 49 83 c5 08 eb c9 e8 93 d0 73 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  262.023622][   T12] RSP: 0018:ffffc900000f7890 EFLAGS: 00010293
[  262.026151][   T12] RAX: ffffffff8a4becad RBX: ffff888123f3c000 RCX: ffff88801c6e5700
[  262.029285][   T12] RDX: 0000000000000000 RSI: ffffffff8dbbb89d RDI: ffff888123f3c000
[  262.032463][   T12] RBP: ffffc900000f7990 R08: ffffffff8fc3ce37 R09: 1ffffffff1f879c6
[  262.035734][   T12] R10: dffffc0000000000 R11: fffffbfff1f879c7 R12: ffff888123f3c000
[  262.038978][   T12] R13: 0000000000000000 R14: ffff888123ea8000 R15: dffffc0000000000
[  262.042277][   T12] FS:  0000000000000000(0000) GS:ffff8881a39ed000(0000) knlGS:0000000000000000
[  262.045851][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  262.049047][   T12] CR2: 00007ffc24e46c78 CR3: 000000002451a000 CR4: 00000000000006f0
[  262.052893][   T12] Call Trace:
[  262.054264][   T12]  <TASK>
[  262.057158][   T12]  ops_undo_list+0x49a/0x990
[  262.059176][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  262.061415][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  262.063656][   T12]  cleanup_net+0x4c5/0x800
[  262.065547][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  262.067764][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  262.070004][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  262.072470][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  262.074946][   T12]  process_scheduled_works+0xae1/0x17b0
[  262.077387][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  262.079955][   T12]  worker_thread+0x8a0/0xda0
[  262.082014][   T12]  kthread+0x711/0x8a0
[  262.083808][   T12]  ? __pfx_worker_thread+0x10/0x10
[  262.086045][   T12]  ? __pfx_kthread+0x10/0x10
[  262.088174][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  262.090480][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.092771][   T12]  ? __pfx_kthread+0x10/0x10
[  262.094753][   T12]  ret_from_fork+0x47f/0x820
[  262.096930][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  262.099196][   T12]  ? __switch_to_asm+0x39/0x70
[  262.101285][   T12]  ? __switch_to_asm+0x33/0x70
[  262.103286][   T12]  ? __pfx_kthread+0x10/0x10
[  262.105230][   T12]  ret_from_fork_asm+0x1a/0x30
[  262.107454][   T12]  </TASK>
[  262.108808][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  262.111909][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  262.115803][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.120045][   T12] Workqueue: netns cleanup_net
[  262.122077][   T12] Call Trace:
[  262.123479][   T12]  <TASK>
[  262.124668][   T12]  dump_stack_lvl+0x99/0x250
[  262.126612][   T12]  ? __asan_memcpy+0x40/0x70
[  262.128588][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.130847][   T12]  ? __pfx__printk+0x10/0x10
[  262.132883][   T12]  vpanic+0x237/0x6d0
[  262.134599][   T12]  ? __pfx_vpanic+0x10/0x10
[  262.136562][   T12]  ? is_bpf_text_address+0x26/0x2b0
[  262.138797][   T12]  panic+0xb9/0xc0
[  262.140393][   T12]  ? __pfx_panic+0x10/0x10
[  262.142358][   T12]  __warn+0x334/0x4c0
[  262.144113][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  262.146384][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  262.148521][   T12]  report_bug+0x2be/0x4f0
[  262.150408][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  262.152751][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  262.155050][   T12]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  262.157269][   T12]  handle_bug+0x84/0x160
[  262.158956][   T12]  exc_invalid_op+0x1a/0x50
[  262.160945][   T12]  asm_exc_invalid_op+0x1a/0x20
[  262.163049][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  262.165494][   T12] Code: 08 14 d8 f7 4b 83 3c 2c 00 75 19 e8 ac d0 73 f7 49 81 fd f8 07 00 00 74 1d e8 9e d0 73 f7 49 83 c5 08 eb c9 e8 93 d0 73 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  262.173234][   T12] RSP: 0018:ffffc900000f7890 EFLAGS: 00010293
[  262.175711][   T12] RAX: ffffffff8a4becad RBX: ffff888123f3c000 RCX: ffff88801c6e5700
[  262.178974][   T12] RDX: 0000000000000000 RSI: ffffffff8dbbb89d RDI: ffff888123f3c000
[  262.182170][   T12] RBP: ffffc900000f7990 R08: ffffffff8fc3ce37 R09: 1ffffffff1f879c6
[  262.185379][   T12] R10: dffffc0000000000 R11: fffffbfff1f879c7 R12: ffff888123f3c000
[  262.188751][   T12] R13: 0000000000000000 R14: ffff888123ea8000 R15: dffffc0000000000
[  262.191936][   T12]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  262.194117][   T12]  ops_undo_list+0x49a/0x990
[  262.196018][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  262.198040][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  262.200056][   T12]  cleanup_net+0x4c5/0x800
[  262.201896][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  262.203904][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  262.206020][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  262.208323][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  262.210584][   T12]  process_scheduled_works+0xae1/0x17b0
[  262.212901][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  262.215338][   T12]  worker_thread+0x8a0/0xda0
[  262.217322][   T12]  kthread+0x711/0x8a0
[  262.219105][   T12]  ? __pfx_worker_thread+0x10/0x10
[  262.221295][   T12]  ? __pfx_kthread+0x10/0x10
[  262.223151][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  262.225271][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.227727][   T12]  ? __pfx_kthread+0x10/0x10
[  262.229678][   T12]  ret_from_fork+0x47f/0x820
[  262.231679][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  262.233778][   T12]  ? __switch_to_asm+0x39/0x70
[  262.235713][   T12]  ? __switch_to_asm+0x33/0x70
[  262.237664][   T12]  ? __pfx_kthread+0x10/0x10
[  262.239540][   T12]  ret_from_fork_asm+0x1a/0x30
[  262.241516][   T12]  </TASK>
[  262.243636][   T12] Kernel Offset: disabled
[  262.245506][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:34:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=1ffff11026cc7f69 RCX=ffff88801ced1d00 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000061f7c0 RSP=ffffc9000061f640
R8 =ffffffff8fc3ce37 R9 =1ffffffff1f879c6 R10=dffffc0000000000 R11=fffffbfff1f879c7
R12=ffff88813663fb48 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44924 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83ed000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2997fd7dac CR3=000000000e138000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fa860212e53
XMM06=0000000000000000 00007fa860212e4d XMM07=0000000000000000 00007fa860212e61
XMM08=0000000000000000 00007fa860212ee7 XMM09=0000000000000000 00007fa860212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff888107a90237 R9 =1ffff11020f52046 R10=dffffc0000000000 R11=ffffffff85535fb0
R12=dffffc0000000000 R13=ffffffff99d28905 R14=ffffffff9a03b060 R15=0000000000000000
RIP=ffffffff8553602c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39ed000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc24e46c78 CR3=000000002451a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000000000ff00 0000000000000000 XMM05=6863612a62732a2a 656d762a6400312a
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000ff0000 XMM09=72737c2a64737c2a 656d766e7c00312d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
