last executing test programs:

54.952217281s ago: executing program 1 (id=307):
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000002c0)=0xffe, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)

54.903964579s ago: executing program 1 (id=308):
r0 = socket(0x29, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)

54.903730633s ago: executing program 1 (id=309):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

54.746319244s ago: executing program 1 (id=313):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887818, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

54.639722071s ago: executing program 1 (id=315):
setresgid(0xee00, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={<r2=>0x0, <r3=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20, 0x40044}}], 0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[], 0x78)
recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/138, 0x8a}], 0x1}, 0x358}], 0x1, 0x10000, 0x0)

54.281775684s ago: executing program 1 (id=323):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x15, 0x80001088, 0x73}, 0x2c)

54.059471536s ago: executing program 32 (id=323):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x15, 0x80001088, 0x73}, 0x2c)

2.542789388s ago: executing program 3 (id=1000):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b"], 0x70}}, 0x0)

2.542454078s ago: executing program 3 (id=1001):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)={[{@nodiscard}, {@extent_cache}, {@alloc_mode_def}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x17}}, {@discard}, {@adaptive_mode}, {@fsync_mode_posix}, {@alloc_mode_def}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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")
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

2.086779296s ago: executing program 3 (id=1002):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x446f, &(0x7f0000004480)="$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")

1.422043382s ago: executing program 3 (id=1007):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8)

1.373191438s ago: executing program 3 (id=1009):
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x7, 0x2, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}})

1.100503706s ago: executing program 0 (id=1014):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x33]}}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14167e, 0xa0)
fallocate(r0, 0x0, 0x0, 0x1000f4)

1.013005511s ago: executing program 0 (id=1015):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
openat$dir(0xffffff9c, &(0x7f0000000200)='./file1\x00', 0x44100, 0x15c)
fcntl$getflags(r0, 0x401)

707.653107ms ago: executing program 2 (id=1018):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000001c0)={0xa, 0xe1c, 0x80000, @private2, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000001dc0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x6c}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x5c}}}], 0x30}, 0x40c0)

633.314921ms ago: executing program 2 (id=1019):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x833, '\x00', 0x0, 0x0}, 0x50)
close(r2)

633.082631ms ago: executing program 2 (id=1020):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
unshare(0x2040400)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={0x0, r0}, 0x18)

552.013574ms ago: executing program 2 (id=1021):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r0, &(0x7f0000005d00)={0x2a, 0x2}, 0xc)

551.772819ms ago: executing program 2 (id=1022):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000000f40)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5e0b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESHEX, @ANYRES32], 0x2, 0x556a, &(0x7f0000006480)="$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")
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

152.094128ms ago: executing program 0 (id=1023):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000140)=0x5ffaffa, 0x4)

151.121647ms ago: executing program 0 (id=1024):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043b0aaaaa010100be4749cf00"], 0xd)
setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='asymmetric\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0xff, 0x526, &(0x7f0000000b40)="$eJzs281vHGcdB/Df41m76y1QNw2pW1XIqBJNmyZy7KSJZA7NCwmRqoBIwz2N7WDVsUPsVE2FSiWQ+g9whQMoBw4gcS2iNyQOSFSAUKAceuKChHxA4gia2Znd2a0Tb+ra2+DPJ4pndva362dW+919XsYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAESc/tqp6aNp2K0AAHbTxUvfmp71/Q8Ae8qrxv8AALBXpMhiPFI89aeN9Fxxu635ytLKrTcvnz23+cPGU6QYiayoz/83j87MHjv+0omT1fb+j/+0PRXfuPTqqakzq9dv3FxYW1uYn7q8snR1dX5h4GfY7uP7vVC8AFPXX781v7i4NjVzZLbn7jcn/vHIowcm5k4ePvSlqvby2XPnLtVqGqOf+Ld/jBEemxmLLH4fKU7//JfpYESMxPazsMVnx04bj0aev+IkLp89V5zI8tKVlfX8zjRSVjV6MzFWZWQXsrgtjYjDeVvHJJrtG40sPowU57+7kZ6PiKzKwaFiYXDrJ2jsQiPv8WuPRMQ34yHILHxGPRJZHI8UF386ES+UuSry34h4e9iNA3ZUI7L4UaRYTRvpUNEfyL9P827zK9+eurCyuFqrTSPlN+rDPj7YTfomfIY1I4vni2/8jfTisBsD7KrxyGI9Unzw7zeKeaUo5qUfmzt58XSjPsP05BbPk8rx+NyAY/LRcq4xjeT/PknLzX/BdjVTFu9Gij/8rFnczrPbKvY++m/bkBsI7JyUxUik+N2ZjZT61qWz2vp+x33H/lsPaoc+9t/ZuYvx5pnVG7dvLl37zvqm97eap15bW7955ermd7fXLrP6ka3WMfs1yjVcGEArZfGTSPGbjzaitjSeZ/7z7Vvdd+Od73U/Cw72bSv1z49B9gfuxT/APFreppSyeDlSLL432R5n5L0a2YAeef5/EClOLH2QyqQX8+Ops7Jfy/9Xu/lppt5tR5HtL7Sva6vmEi60nr3X8Z3If96mPP+3IsXpfZPlNQ3t/Gd9tXnd+Uhx/sNnyrqRsbyuuqxhov2Mi0vLC9N57V8jxd/vVrVR1FYLCk90a4/mtY1I8eX3e2tbZe3+bu1M1YZbv9i89ovd2tm89k6kmJyfqmpbee3+svZAt/bI1dXl+UFfXvamPP/vR4of//brqXrPN+6V/9r3/zt9246PZf7++59W/idqx94pc/1Gmf/GFvk/HCleu/NMdd5F9qqPlceLn938H4kUT/+rt7ZZ1u7r1h4d9LRgmPL8/y1S/Hr2buc9X763y5vdhNbz/3Sjd9vpVw8p/4/Xjk2U7Rp7wNcC9pq122+9fmV5eeGmHTt27HR2hv3JBOy0vP//q0jx7mNZqsaxZf//c+1b3RHzf97u9v/n+rYdQ+r/76sdmytHLaP52Hz9+o3RJyOaa7ffOrx0/cq1hWsLK7MvHZs5PnPi5LHp0erspkfHqmH+oC2Ch16e/79Eij9P/rEzj907/t98/q/Vt+0YUv6fqJ9Tz7hm4JcC9pxq/e8ry3c7We7Nf7NTm+e/muc7+GzvtvNHNUPK//7asYmyXY8+4GsBAAAAAAAAAAAAD4tWyuKHkeLCP19M1TV0g1z/O9+37RjS9X8Hasfmd+XvGkddWQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwJI5HFjUjx3ssb6fv5gcmI5+pb4P/W/wIAAP//b01HLw==")

135.85457ms ago: executing program 2 (id=1025):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x9008)

2.168835ms ago: executing program 0 (id=1026):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20)

138.596µs ago: executing program 3 (id=1027):
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpid()
kcmp(r1, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

0s ago: executing program 0 (id=1028):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c01000016000100000000000000000000000000000000000000000000000001ffffffff00000000000000000000000000000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000004d66c00000000000000000000000000ffffac1e00010000000000000000040000000000000000000000000000000000000000000000000000000020000000000000000000000108000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000010000000000000000000000000ff7f00001c001700000000002bbd700028bd700029bd70002bbd7000f25f403628001a"], 0x13c}}, 0x0)

kernel console output (not intermixed with test programs):

  T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   94.898866][  T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   94.904182][  T790] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   94.909716][  T790] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[   94.914466][  T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.919670][  T790] usb 1-1: config 0 descriptor??
[   94.922850][ T6970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   95.062415][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   95.217943][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.222790][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.226923][    T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   95.230828][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.237703][    T9] usb 4-1: config 0 descriptor??
[   95.340146][  T790] aureal 0003:0755:2626.0001: unknown main item tag 0x6
[   95.343186][  T790] aureal 0003:0755:2626.0001: report_id 29495 is invalid
[   95.346048][  T790] aureal 0003:0755:2626.0001: item 0 2 1 8 parsing failed
[   95.349839][  T790] aureal 0003:0755:2626.0001: probe with driver aureal failed with error -22
[   95.545907][  T973] usb 1-1: USB disconnect, device number 7
[   95.672446][ T5842] Bluetooth: hci0: command tx timeout
[   95.784695][ T6998] tls_set_device_offload: netdev not found
[   95.850931][    T9] usb 4-1: string descriptor 0 read error: -22
[   96.031920][ T7000] loop2: detected capacity change from 0 to 32768
[   96.040372][ T7000] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   96.057095][ T7000] XFS (loop2): Ending clean mount
[   96.058860][    T9] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0002/input/input7
[   96.067286][ T7000] tmpfs: Bad value for 'mpol'
[   96.099313][ T5845] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   96.156726][    T9] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[   96.255938][   T24] usb 4-1: USB disconnect, device number 3
[   96.705250][ T7032] loop2: detected capacity change from 0 to 4096
[   96.801639][ T7036] loop3: detected capacity change from 0 to 2048
[   96.813809][ T7036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.994178][ T7039] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[   97.034414][ T7039] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   97.086323][ T7045] loop0: detected capacity change from 0 to 4096
[   97.089344][ T7045] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   97.108955][ T7045] ntfs3(loop0): ino=5, "/" ntfs_readdir
[   97.125711][ T7049] warning: `syz.3.432' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   97.168665][ T7052] 8021q: VLANs not supported on gre0
[   97.206483][ T7056] loop3: detected capacity change from 0 to 512
[   97.209679][ T7056] EXT4-fs: Ignoring removed orlov option
[   97.215323][ T7056] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   97.240558][ T7056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   97.245635][ T7056] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.435: corrupted in-inode xattr: e_value size too large
[   97.253306][ T7056] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.435: couldn't read orphan inode 15 (err -117)
[   97.259653][ T7056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.284218][ T6772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.092555][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   98.163124][ T5235] Bluetooth: hci0: command 0x0405 tx timeout
[   98.253573][    T9] usb 3-1: Using ep0 maxpacket: 8
[   98.260199][    T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   98.268944][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   98.278944][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   98.290778][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   98.290916][ T7085] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.296839][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   98.306524][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   98.310528][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.398840][ T7092] loop3: detected capacity change from 0 to 1024
[   98.466103][ T7092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   98.471292][ T7092] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.546159][    T9] usb 3-1: usb_control_msg returned -32
[   98.548028][ T6772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   98.548647][    T9] usbtmc 3-1:16.0: can't read capabilities
[   99.007440][ T7104] loop3: detected capacity change from 0 to 256
[   99.400176][ T7124] Zero length message leads to an empty skb
[   99.481494][ T7133] loop3: detected capacity change from 0 to 1024
[   99.490624][ T7133] hfsplus: bad catalog folder entry
[   99.537004][ T7137] loop3: detected capacity change from 0 to 512
[   99.540371][ T7137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   99.576781][ T7137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.583166][ T7137] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.624531][ T6772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.685584][ T7145] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004
[   99.888833][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'.
[   99.924248][ T7153] loop3: detected capacity change from 0 to 1024
[   99.929232][ T7153] EXT4-fs: inline encryption not supported
[   99.935454][ T7153] EXT4-fs: Ignoring removed i_version option
[   99.959856][ T7153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.994930][ T7153] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  100.051325][ T6772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.803877][   T24] usb 3-1: USB disconnect, device number 9
[  101.713408][ T7187] loop0: detected capacity change from 0 to 32768
[  101.723335][ T7187] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.487 (7187)
[  101.742644][ T7187] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.746288][ T7187] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  101.849324][ T7187] BTRFS info (device loop0): enabling ssd optimizations
[  101.851845][ T7187] BTRFS info (device loop0): enabling free space tree
[  102.232740][ T5847] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.721867][ T7219] loop3: detected capacity change from 0 to 32768
[  102.728904][ T7219] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1)
[  102.728904][ T7219] downgrade (size 2912):
[  102.728904][ T7219] version:	0.0: (unknown version)
[  102.728904][ T7219] recovery passes:	
[  102.728904][ T7219] errors:	sb_clean_missing
[  102.728904][ T7219] version:	0.0: (unknown version)
[  102.728904][ T7219] recovery passes:	snapshots_read
[  102.728904][ T7219] errors:	
[  102.728904][ T7219] version:	0.0: (unknown version)
[  102.728904][ T7219] recovery passes:	set_fs_needs_rebalance
[  102.728904][ T7219] errors:	
[  102.728904][ T7219] version:	0.0: (unknown version)
[  102.728904][ T7219] recovery passes:	alloc_read,check_inodes,delete_dead_inodes,set_fs_needs_rebalance
[  102.728904][ T7219] errors:	(unknown error 512)
[  102.728904][ T7219] version:	0.5: (unknown version)
[  102.728904][ T7219] recovery passes:	
[  102.728904][ T7219] errors:	
[  102.728904][ T7219] version:	0.0: (unknown version)
[  102.728904][ T7219] recovery passes:	
[  102.728904][ T7219] errors:	
[  102.728904][ T7219] version:	0.0: (unknown version)
[  102.728904][ T7219] recovery passes:	fs_freespace_init,bucket_gens_init,check_inodes,delete_dead_inodes
[  102.728904][ T7219] errors:	
[  102.728904][ T7219] version:	0.0: (unknown version)
[  102.728904][ T7219] recovery passes:	
[  102.728904][ T7219] errors:	
[  102.728904][ T7219] version:	0.6: (unknown version)
[  102.728904][ T7219] recovery passes:	check_subvols
[  102.728904][ T7219] errors:	
[  102.728904][ T7219] version:	0.33: (unknown version)
[  102.728904][ T7219] recovery passes:	check_snapshots
[  102.728904][ T7219] errors:	
[  102.728904][ T7219] version:	0.0: (unknown version)
[  102.797295][ T7219] bcachefs: bch2_fs_get_tree() error: invalid_sb_downgrade
[  102.852526][  T973] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  103.022379][  T973] usb 1-1: Using ep0 maxpacket: 16
[  103.032862][  T973] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  103.036411][  T973] usb 1-1: config 0 has no interface number 0
[  103.045088][  T973] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  103.048920][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.053043][  T973] usb 1-1: Product: syz
[  103.054857][  T973] usb 1-1: Manufacturer: syz
[  103.056881][  T973] usb 1-1: SerialNumber: syz
[  103.060982][  T973] usb 1-1: config 0 descriptor??
[  103.066527][  T973] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  103.149265][ T7235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.270376][  T973] gspca_spca1528: reg_w err -71
[  103.293150][  T973] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  103.299161][  T973] usb 1-1: USB disconnect, device number 8
[  103.672409][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  103.829764][    T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  103.834109][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.837707][    T9] usb 4-1: Product: syz
[  103.839770][    T9] usb 4-1: Manufacturer: syz
[  103.841949][    T9] usb 4-1: SerialNumber: syz
[  103.850567][    T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  103.904154][ T5904] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  104.175336][ T7259] Invalid ELF header magic: != ELF
[  104.327791][   T24] usb 4-1: USB disconnect, device number 4
[  104.865493][ T7269] input: syz1 as /devices/virtual/input/input8
[  104.868267][ T7269] input: failed to attach handler leds to device input8, error: -6
[  104.952743][ T5904] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  104.956176][ T5904] ath9k_htc: Failed to initialize the device
[  104.962427][   T24] usb 4-1: ath9k_htc: USB layer deinitialized
[  104.978353][ T7279] netlink: 48 bytes leftover after parsing attributes in process `syz.0.522'.
[  105.023166][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'.
[  105.077069][ T7285] loop3: detected capacity change from 0 to 4096
[  105.107595][ T7285] ntfs3(loop3): ino=b, Correct links count -> 1.
[  105.111103][ T7285] ntfs3(loop3): ino=18, mi_enum_attr
[  105.117163][ T7285] ntfs3: Cannot use different iocharset when remounting!
[  105.217184][ T7292] loop2: detected capacity change from 0 to 1764
[  105.258625][ T7295] loop3: detected capacity change from 0 to 128
[  105.265685][ T7295] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  105.278153][ T7295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.513486][ T5904] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  105.662383][ T5904] usb 3-1: Using ep0 maxpacket: 16
[  105.689266][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short
[  105.696877][ T5904] usb 3-1: config 13 has an invalid interface number: 50 but max is 0
[  105.700668][ T5904] usb 3-1: config 13 has no interface number 0
[  105.707591][ T5904] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[  105.714951][ T5904] usb 3-1: config 13 interface 50 has no altsetting 0
[  105.725730][ T5904] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  105.729646][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.735329][ T5904] usb 3-1: Product: syz
[  105.737315][ T5904] usb 3-1: Manufacturer: syz
[  105.739398][ T5904] usb 3-1: SerialNumber: syz
[  105.758292][ T7292] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  106.028044][ T5904] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  106.031278][ T5904] usb 3-1: MIDIStreaming interface descriptor not found
[  106.112084][ T5904] usb 3-1: USB disconnect, device number 10
[  106.271493][ T7301] netlink: 372 bytes leftover after parsing attributes in process `syz.0.532'.
[  106.759877][ T7305] loop0: detected capacity change from 0 to 65536
[  106.825114][ T7305] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  106.846668][ T7305] XFS (loop0): Ending clean mount
[  106.909143][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  106.909646][ T7327] openvswitch: netlink: IP tunnel dst address not specified
[  106.921213][ T1234] XFS (loop0): Unmount and run xfs_repair
[  106.926816][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  106.929433][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  106.934096][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  106.937521][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  106.941104][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  106.946404][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  106.951934][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  106.963191][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  106.966302][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  106.967319][ T7329] loop3: detected capacity change from 0 to 512
[  106.970142][ T1234] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  106.979144][ T7329] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  106.980492][ T1234] XFS (loop0): page discard on page ffffea0000b13180, inode 0x26, pos 36864.
[  106.989034][  T790] loop0: writeback error on inode 38, offset 0, sector 22
[  106.991397][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  106.999513][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.001742][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.004877][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.008402][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.011595][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.011594][ T7329] EXT4-fs (loop3): 1 truncate cleaned up
[  107.018730][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.020645][ T7329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.021591][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.032784][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.036016][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.038868][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.041912][ T1234] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  107.047701][ T1234] XFS (loop0): page discard on page ffffea0000dbab00, inode 0x26, pos 40960.
[  107.051758][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.056292][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.058710][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.061685][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.066114][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.070596][ T6772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.085664][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.089291][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.092978][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.096789][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.100461][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.103968][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.107309][ T1234] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  107.111546][ T1234] XFS (loop0): page discard on page ffffea0000db6b00, inode 0x26, pos 49152.
[  107.115284][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.119588][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.121975][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.132370][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.136100][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.139735][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.149562][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.152764][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.156172][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.159875][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.166372][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.170111][ T1234] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  107.174446][ T1234] XFS (loop0): page discard on page ffffea0000db2c00, inode 0x26, pos 65536.
[  107.178870][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.183259][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.185670][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.188755][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.192525][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.196110][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.199676][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.207285][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.211616][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.216423][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.220329][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.223882][ T1234] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  107.228062][ T1234] XFS (loop0): page discard on page ffffea0000db0800, inode 0x26, pos 131072.
[  107.235116][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.239710][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.242188][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.245446][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.249095][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.254049][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.257795][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.261434][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.265138][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.271060][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.279144][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.285183][ T1234] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  107.291751][ T1234] XFS (loop0): page discard on page ffffea0000dfe000, inode 0x26, pos 262144.
[  107.298359][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.304079][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.307161][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.310230][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.314106][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.318116][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.328281][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.332019][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.335722][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.342739][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.348552][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.355760][ T1234] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  107.371162][ T1234] XFS (loop0): page discard on page ffffea0000e1c000, inode 0x26, pos 524288.
[  107.379639][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.384287][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.386769][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.390079][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.398605][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.402439][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.407017][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.410923][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.415675][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.419358][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.423252][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.427005][ T1234] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  107.434181][ T1234] XFS (loop0): page discard on page ffffea0000e4c000, inode 0x26, pos 1048576.
[  107.438512][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.443246][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.445799][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.449009][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.453688][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.457398][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.459179][ T7343] loop2: detected capacity change from 0 to 4096
[  107.461169][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.467602][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.471403][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.476641][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.480503][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.489115][ T7343] ntfs3(loop2): $Secure::$SII is corrupted.
[  107.489265][ T1234] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  107.496383][ T1234] XFS (loop0): page discard on page ffffea0000b38000, inode 0x26, pos 2097152.
[  107.500763][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.502387][ T7343] ntfs3(loop2): Failed to initialize $Secure (-22).
[  107.505542][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.510330][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.513729][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.517530][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.521493][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.530577][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.534957][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.538882][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.543128][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.547071][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.550731][ T1234] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  107.555625][ T1234] XFS (loop0): page discard on page ffffea0000d98200, inode 0x26, pos 4194304.
[  107.561000][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.571925][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.575707][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.580087][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.587790][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.594147][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.600354][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.604716][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.608956][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.614289][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.619001][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.624335][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.629049][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.631660][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.635271][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.638954][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.642847][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.646711][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.650579][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.654707][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.658433][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.662031][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.667111][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.671702][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.674450][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.677681][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.681515][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.685607][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.689460][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.694595][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.698372][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.702076][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.706158][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.710487][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.715289][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.717875][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.721063][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.725130][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.728878][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.732805][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.736510][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.740465][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.744530][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.748195][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.754303][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.759183][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.761729][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.765419][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.769213][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.773159][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.777098][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.780963][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.784894][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.788664][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.792508][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.796731][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.801285][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.805328][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.808549][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.812484][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.816106][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.819957][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.824165][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.827877][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.831642][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.835812][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.840196][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.844718][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.847367][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.850657][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.854741][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.858587][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.862632][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.866279][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.870143][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.874152][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.877800][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.882564][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.887140][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.889626][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.893268][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.897286][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.901108][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.905350][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.909045][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.914682][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.918678][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.923556][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.928153][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  107.933102][ T1234] XFS (loop0): Unmount and run xfs_repair
[  107.935694][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  107.939018][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  107.943038][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  107.956871][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  107.960534][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  107.972278][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  107.976181][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  107.979864][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.984183][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  107.988771][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  108.000502][ T1234] XFS (loop0): Unmount and run xfs_repair
[  108.003802][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  108.016107][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  108.019650][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  108.024047][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  108.027771][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  108.037741][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  108.041360][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  108.045399][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.049041][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.056753][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  108.061163][ T1234] XFS (loop0): Unmount and run xfs_repair
[  108.067886][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  108.070956][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  108.081216][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  108.085726][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  108.088662][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  108.094535][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  108.098232][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  108.101850][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.106274][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.110183][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  108.115080][ T1234] XFS (loop0): Unmount and run xfs_repair
[  108.117460][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  108.120518][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  108.124326][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  108.128147][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  108.131891][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  108.139884][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  108.144150][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  108.147855][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.151613][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.158664][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  108.162699][ T1234] XFS (loop0): Unmount and run xfs_repair
[  108.165126][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  108.167654][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  108.170539][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  108.174676][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  108.177574][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  108.180562][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  108.185674][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  108.189369][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.202454][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.206442][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  108.210412][ T1234] XFS (loop0): Unmount and run xfs_repair
[  108.214686][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  108.217781][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  108.220980][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  108.224665][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  108.228373][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  108.231767][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  108.238401][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  108.242098][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.245694][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.249168][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  108.253959][ T1234] XFS (loop0): Unmount and run xfs_repair
[  108.256020][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  108.258769][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  108.262172][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  108.266056][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  108.269628][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  108.274152][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  108.277260][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  108.280488][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.284765][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.288714][ T1234] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  108.295484][ T1234] XFS (loop0): Unmount and run xfs_repair
[  108.297737][ T1234] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  108.300627][ T1234] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  108.304571][ T1234] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  108.308512][ T1234] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  108.316023][ T1234] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  108.320375][ T1234] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  108.324792][ T1234] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  108.328702][ T1234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.335120][ T1234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.349265][ T5847] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  108.357264][ T5847] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  108.700353][ T7364] loop3: detected capacity change from 0 to 4096
[  108.715348][ T7365] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.425582][ T7383] loop3: detected capacity change from 0 to 16
[  109.437539][ T7383] erofs (device loop3): mounted with root inode @ nid 36.
[  109.545633][ T7396] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  109.551656][ T7398] syzkaller1: entered promiscuous mode
[  109.554369][ T7398] syzkaller1: entered allmulticast mode
[  109.597821][ T7400] loop3: detected capacity change from 0 to 2048
[  109.601971][ T7400] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  109.609114][ T7400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.638171][ T7400] UDF-fs: unknown compression code (0)
[  109.694640][ T7405] loop3: detected capacity change from 0 to 128
[  109.717603][ T6772] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  109.721072][ T6772] FAT-fs (loop3): Filesystem has been set read-only
[  109.854182][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.858502][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.152658][ T5904] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  110.162177][ T7420] loop0: detected capacity change from 0 to 65536
[  110.221347][ T7420] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  110.250409][ T7420] XFS (loop0): Ending clean mount
[  110.303697][ T5904] usb 4-1: Using ep0 maxpacket: 8
[  110.307617][ T5904] usb 4-1: config 0 has no interfaces?
[  110.313703][ T5904] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  110.392947][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.398697][ T5904] usb 4-1: Product: syz
[  110.400118][ T5904] usb 4-1: Manufacturer: syz
[  110.404639][ T5904] usb 4-1: SerialNumber: syz
[  110.408181][ T5904] usb 4-1: config 0 descriptor??
[  110.620432][ T7436] dlm: non-version read from control device 36
[  110.824696][ T7422] loop3: detected capacity change from 0 to 64
[  110.830707][ T7422] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  110.836362][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  110.840940][ T1089] XFS (loop0): Unmount and run xfs_repair
[  110.844330][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  110.848958][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  110.850446][   T24] usb 4-1: USB disconnect, device number 5
[  110.852072][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  110.857939][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  110.861593][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  110.865148][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  110.868316][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.067296][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.072406][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.075545][ T1089] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  111.080132][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.083917][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.086561][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.089611][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.095250][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.099066][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.102926][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.106922][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.110744][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.114636][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.118771][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.122598][ T1089] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  111.128590][   T24] loop0: writeback error on inode 38, offset 0, sector 22
[  111.131182][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.138905][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.141455][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.144586][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.148728][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.154037][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.157571][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.161261][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.165344][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.169135][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.173133][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.177141][ T1089] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  111.181791][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.186304][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.188830][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.191968][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.196022][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.200165][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.203993][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.207798][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.211466][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.215278][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.219128][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.222827][ T1089] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  111.227479][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.231794][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.234425][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.237504][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.241143][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.244913][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.248691][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.252413][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.256021][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.259593][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.264735][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.268305][ T1089] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  111.272755][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.276450][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.278329][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.280721][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.283727][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.287072][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.290016][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.293604][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.297198][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.300211][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.303243][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.306077][ T1089] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  111.310255][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.314345][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.316172][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.318515][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.321326][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.324352][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.327213][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.330262][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.333715][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.336679][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.339617][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.342721][ T1089] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  111.346834][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.350279][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.352405][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.354862][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.357836][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.360744][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.364136][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.367419][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.370348][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.374528][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.377377][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.380629][ T1089] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  111.385834][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.389809][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.392007][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.394777][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.402534][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.405338][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.408188][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.410944][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.416688][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.420277][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.423527][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.427149][ T1089] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  111.431377][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.436526][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.438909][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.442011][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.449243][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.454772][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.458640][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.463602][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.467241][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.470801][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.474765][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.478421][ T1089] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  111.489629][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.494614][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.496571][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.499557][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.503296][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.507006][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.510747][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.514857][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.518574][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.522301][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.526066][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.530312][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.535006][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.537548][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.540787][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.545275][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.549023][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.553094][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.557010][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.560775][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.564730][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.634587][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.645103][ T1089] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  111.648824][ T1089] XFS (loop0): Unmount and run xfs_repair
[  111.650825][ T1089] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  111.653717][ T1089] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  111.656698][ T1089] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  111.659869][ T1089] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  111.664942][ T1089] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  111.670361][ T1089] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  111.676029][ T1089] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  111.676555][ T7445] loop2: detected capacity change from 0 to 512
[  111.679046][ T1089] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.687083][ T1089] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  111.836526][ T7445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.876652][ T5847] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  111.941101][ T5847] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  112.020454][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.243993][ T7461] loop6: detected capacity change from 0 to 524287999
[  112.509805][ T7484] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  112.727170][ T7504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.613'.
[  112.947481][ T7512] loop2: detected capacity change from 0 to 32768
[  112.960141][ T7512] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  112.980056][   T33] audit: type=1800 audit(1757000159.104:6): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.616" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  113.016844][ T5845] ocfs2: Unmounting device (7,2) on (node local)
[  113.112717][    T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  113.275417][    T9] usb 1-1: config 8 has an invalid interface number: 223 but max is 0
[  113.278608][    T9] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  113.282418][    T9] usb 1-1: config 8 has no interface number 0
[  113.292324][    T9] usb 1-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  113.299485][    T9] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.45
[  113.303407][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.304191][ T7520] loop2: detected capacity change from 0 to 32768
[  113.306184][    T9] usb 1-1: Product: syz
[  113.306193][    T9] usb 1-1: Manufacturer: syz
[  113.306200][    T9] usb 1-1: SerialNumber: syz
[  113.315937][ T7520] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.620 (7520)
[  113.323096][ T7520] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.327069][ T7520] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  113.359645][ T7520] BTRFS info (device loop2): enabling ssd optimizations
[  113.362739][ T7520] BTRFS info (device loop2): enabling free space tree
[  113.388333][ T5845] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.520557][    T9] usb 1-1: USB disconnect, device number 9
[  113.843178][ T7541] loop2: detected capacity change from 0 to 32768
[  113.849451][ T7541] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.622 (7541)
[  113.861011][ T7541] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  113.865365][ T7541] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  113.888198][ T7541] BTRFS info (device loop2): allowing degraded mounts
[  113.890619][ T7541] BTRFS info (device loop2): enabling ssd optimizations
[  113.893315][ T7541] BTRFS info (device loop2): enabling free space tree
[  113.896019][ T7541] BTRFS info (device loop2): force clearing of disk cache
[  113.898794][ T7541] BTRFS info (device loop2): use zlib compression, level 3
[  113.924391][ T5845] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  114.128058][ T7560] loop2: detected capacity change from 0 to 1024
[  114.133566][ T7560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  114.137672][ T7560] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  114.148261][ T7560] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  114.163097][ T7560] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.623: Freeing blocks not in datazone - block = 0, count = 4096
[  114.174407][ T7560] EXT4-fs (loop2): Remounting filesystem read-only
[  114.177504][ T7560] EXT4-fs (loop2): 1 orphan inode deleted
[  114.181265][ T7560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.196369][ T1147] EXT4-fs (loop2): Quota write (off=3072, len=1024) cancelled because transaction is not started
[  114.200828][ T1147] Quota error (device loop2): write_blk: dquota write failed
[  114.214315][ T1147] Quota error (device loop2): free_dqentry: Can't move quota data block (2) to free list
[  114.225892][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.299187][ T7558] loop0: detected capacity change from 0 to 32768
[  114.308780][ T7558] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  114.327156][ T7558] XFS (loop0): Ending clean mount
[  114.335125][ T7558] XFS (loop0): Quotacheck needed: Please wait.
[  114.354691][ T7558] XFS (loop0): Quotacheck: Done.
[  114.371994][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  114.548257][ T7563] loop2: detected capacity change from 0 to 32768
[  114.561355][ T7563] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.625 (7563)
[  114.577391][ T7563] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.584790][ T7563] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  114.611120][ T7563] BTRFS info (device loop2): enabling ssd optimizations
[  114.623949][ T7563] BTRFS info (device loop2): enabling free space tree
[  114.658364][ T5845] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.678083][ T7596] loop0: detected capacity change from 0 to 256
[  114.681442][ T7596] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  114.686280][ T7596] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  114.699541][ T7596] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  114.806747][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'.
[  114.837862][ T7608] loop2: detected capacity change from 0 to 512
[  114.840486][ T7608] EXT4-fs: Ignoring removed nobh option
[  114.850925][ T7608] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  114.856510][ T7608] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.636: invalid indirect mapped block 256 (level 1)
[  114.862080][ T7608] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.636: invalid indirect mapped block 2683928664 (level 1)
[  114.868873][ T7608] EXT4-fs (loop2): 1 truncate cleaned up
[  114.873851][ T7608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.681185][   T33] audit: type=1800 audit(1757000161.804:7): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.636" name="file0" dev="loop2" ino=13 res=0 errno=0
[  115.746161][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.639'.
[  115.755908][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.761545][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.639'.
[  115.767999][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'.
[  115.930395][ T7626] libceph: resolve '4' (ret=-3): failed
[  116.062455][  T973] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  116.212424][  T973] usb 1-1: Using ep0 maxpacket: 8
[  116.214732][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  116.219788][  T973] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  116.224201][  T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  116.227836][  T973] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  116.231577][  T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.236770][  T973] usb 1-1: config 0 descriptor??
[  116.239200][ T7618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  116.362427][    T9] usb 3-1: Using ep0 maxpacket: 16
[  116.367128][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  116.373133][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  116.376531][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.379927][    T9] usb 3-1: Product: syz
[  116.381788][    T9] usb 3-1: Manufacturer: syz
[  116.384863][    T9] usb 3-1: SerialNumber: syz
[  116.388272][    T9] usb 3-1: config 0 descriptor??
[  116.393289][    T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  116.396865][    T9] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  116.446513][   T24] usb 1-1: USB disconnect, device number 10
[  116.632377][ T5842] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  116.996122][    T9] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  117.146338][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.649'.
[  117.204134][ T7641] loop3: detected capacity change from 0 to 512
[  117.227582][ T7641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.235474][ T7641] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.247665][ T7641] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.651: corrupted inode contents
[  117.255753][ T7641] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.651: mark_inode_dirty error
[  117.261849][ T7641] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.651: corrupted inode contents
[  117.269676][ T7641] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.651: mark_inode_dirty error
[  117.279600][ T7641] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #18: comm syz.3.651: directory missing '.'
[  117.304195][ T6772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.411664][    T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  117.415220][    T9] em28xx 3-1:0.0: board has no eeprom
[  117.452373][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  117.471840][ T7656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.657'.
[  117.605169][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.610013][   T10] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00
[  117.617691][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.624762][   T10] usb 1-1: config 0 descriptor??
[  117.637513][ T7664] netlink: 'syz.3.661': attribute type 142 has an invalid length.
[  117.640821][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.661'.
[  117.677832][ T7630] em28xx 3-1:0.0: reading from i2c device at 0x0 failed (error=-5)
[  117.732420][    T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  117.735843][    T9] em28xx 3-1:0.0: dvb set to bulk mode.
[  117.738623][  T973] em28xx 3-1:0.0: Binding DVB extension
[  117.753006][    T9] usb 3-1: USB disconnect, device number 11
[  117.757236][    T9] em28xx 3-1:0.0: Disconnecting em28xx
[  117.774771][  T973] em28xx 3-1:0.0: Registering input extension
[  117.778922][    T9] em28xx 3-1:0.0: Closing input extension
[  117.884081][    T9] em28xx 3-1:0.0: Freeing device
[  117.922541][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  118.035809][   T10] steelseries 0003:1038:12C2.0003: unknown main item tag 0x0
[  118.038825][   T10] steelseries 0003:1038:12C2.0003: unknown main item tag 0x0
[  118.041858][   T10] steelseries 0003:1038:12C2.0003: unknown main item tag 0x0
[  118.045240][   T10] steelseries 0003:1038:12C2.0003: unknown main item tag 0x0
[  118.047916][   T10] steelseries 0003:1038:12C2.0003: unknown main item tag 0x0
[  118.050303][   T10] steelseries 0003:1038:12C2.0003: unknown main item tag 0x0
[  118.053257][   T10] steelseries 0003:1038:12C2.0003: unknown main item tag 0x0
[  118.083749][ T5927] usb 4-1: Using ep0 maxpacket: 16
[  118.088638][ T5927] usb 4-1: too many configurations: 123, using maximum allowed: 8
[  118.093454][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.098300][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.103615][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.107863][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.112870][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.118257][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.122710][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.126970][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.133926][ T5927] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  118.137316][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  118.140099][ T5927] usb 4-1: SerialNumber: syz
[  118.143125][ T5927] usb 4-1: config 0 descriptor??
[  118.147648][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[  118.234988][   T24] usb 1-1: USB disconnect, device number 11
[  118.356949][ T7667] input: syz1 as /devices/virtual/input/input11
[  118.368540][ T5280] bcm5974 4-1:0.0: could not read from device
[  118.376944][ T5927] usb 4-1: USB disconnect, device number 6
[  118.377314][ T5280] bcm5974 4-1:0.0: could not read from device
[  118.505466][ T7674] netlink: 'syz.2.665': attribute type 1 has an invalid length.
[  118.805434][ T7682] loop0: detected capacity change from 0 to 128
[  118.822416][ T5927] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  118.923864][ T7687] loop3: detected capacity change from 0 to 512
[  118.928470][ T7687] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: comm syz.3.672: inode #16777216: comm syz.3.672: iget: illegal inode #
[  118.936196][ T7687] EXT4-fs (loop3): Remounting filesystem read-only
[  118.940973][ T7687] EXT4-fs (loop3): no journal found
[  118.943389][ T7687] EXT4-fs (loop3): can't get journal size
[  118.949979][ T7687] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  118.958611][ T7687] EXT4-fs (loop3): failed to initialize system zone (-22)
[  118.967287][ T7687] EXT4-fs (loop3): mount failed
[  118.987802][ T5927] usb 3-1: Using ep0 maxpacket: 16
[  118.991975][ T5927] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.997424][ T5927] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.001664][ T5927] usb 3-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  119.018998][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0
[  119.021814][ T5927] usb 3-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.00
[  119.026554][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.034193][ T5927] usb 3-1: config 0 descriptor??
[  119.041541][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12
[  119.070289][ T7697] delete_channel: no stack
[  119.176102][ T7706] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.680'.
[  119.254650][ T5280] bcm5974 3-1:0.0: could not read from device
[  119.258575][   T10] usb 3-1: USB disconnect, device number 12
[  119.265387][ T5280] bcm5974 3-1:0.0: could not read from device
[  119.402810][  T790] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  119.542980][ T7723] bridge0: port 3(team0) entered blocking state
[  119.545249][ T7723] bridge0: port 3(team0) entered disabled state
[  119.547551][ T7723] team0: entered allmulticast mode
[  119.549289][ T7723] team_slave_0: entered allmulticast mode
[  119.551233][ T7723] team_slave_1: entered allmulticast mode
[  119.554548][ T7723] team0: entered promiscuous mode
[  119.556693][ T7723] team_slave_0: entered promiscuous mode
[  119.559308][ T7723] team_slave_1: entered promiscuous mode
[  119.561743][ T7723] bridge0: port 3(team0) entered blocking state
[  119.564546][ T7723] bridge0: port 3(team0) entered forwarding state
[  119.574444][  T790] usb 4-1: Using ep0 maxpacket: 16
[  119.579570][  T790] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  119.583106][  T790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.588031][  T790] usb 4-1: config 0 has no interface number 0
[  119.593924][  T790] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  119.597518][  T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.600646][ T7725] QAT: Invalid ioctl 21531
[  119.600946][  T790] usb 4-1: Product: syz
[  119.600959][  T790] usb 4-1: Manufacturer: syz
[  119.600969][  T790] usb 4-1: SerialNumber: syz
[  119.612169][  T790] usb 4-1: config 0 descriptor??
[  119.622031][  T790] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22
[  119.832815][   T10] usb 4-1: USB disconnect, device number 7
[  119.942524][  T790] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  120.010310][ T7735] netlink: 'syz.2.694': attribute type 2 has an invalid length.
[  120.112395][  T790] usb 1-1: Using ep0 maxpacket: 32
[  120.120829][  T790] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  120.124719][  T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.128069][  T790] usb 1-1: Product: syz
[  120.129728][  T790] usb 1-1: Manufacturer: syz
[  120.131615][  T790] usb 1-1: SerialNumber: syz
[  120.136059][  T790] usb 1-1: config 0 descriptor??
[  120.207630][ T7739] loop2: detected capacity change from 0 to 64
[  120.562078][ T7741] loop2: detected capacity change from 0 to 40427
[  120.565293][  T790] airspy 1-1:0.0: Board ID: 00
[  120.567539][  T790] airspy 1-1:0.0: Firmware version: 
[  120.570675][ T7741] F2FS-fs (loop2): invalid crc value
[  120.625849][ T7741] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  120.631806][ T7741] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  120.657572][ T5845] syz-executor: attempt to access beyond end of device
[  120.657572][ T5845] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  120.663641][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  120.663653][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.663658][ T5845] Call Trace:
[  120.663661][ T5845]  <TASK>
[  120.663664][ T5845]  dump_stack_lvl+0x189/0x250
[  120.663678][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.663687][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  120.663695][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  120.663706][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.663720][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  120.663735][ T5845]  f2fs_write_end_io+0x886/0xb60
[  120.663775][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  120.663790][ T5845]  __submit_merged_write_cond+0x255/0x530
[  120.663803][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  120.663828][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.663862][ T5845]  ? folios_put_refs+0x559/0x640
[  120.663876][ T5845]  ? __pfx_folios_put_refs+0x10/0x10
[  120.663882][ T5845]  ? rcu_is_watching+0x15/0xb0
[  120.663894][ T5845]  ? __lock_acquire+0xab9/0xd20
[  120.663915][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.663928][ T5845]  do_writepages+0x32e/0x550
[  120.663942][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  120.663952][ T5845]  filemap_fdatawrite+0x199/0x240
[  120.663962][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  120.663992][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  120.664002][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  120.664016][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[  120.664034][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  120.664061][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[  120.664071][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[  120.664081][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  120.664086][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[  120.664100][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  120.664109][ T5845]  deactivate_locked_super+0xbc/0x130
[  120.664118][ T5845]  cleanup_mnt+0x425/0x4c0
[  120.664126][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.664137][ T5845]  task_work_run+0x1d4/0x260
[  120.664153][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  120.664165][ T5845]  ? __x64_sys_umount+0x122/0x160
[  120.664181][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[  120.664199][ T5845]  exit_to_user_mode_loop+0xec/0x110
[  120.664223][ T5845]  do_syscall_64+0x2bd/0x3b0
[  120.664232][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.664248][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.664260][ T5845]  ? exc_page_fault+0x9f/0xf0
[  120.664274][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.664280][ T5845] RIP: 0033:0x7f4ed998ff17
[  120.664288][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  120.664294][ T5845] RSP: 002b:00007ffdf20e2f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  120.664302][ T5845] RAX: 0000000000000000 RBX: 00007f4ed9a11c05 RCX: 00007f4ed998ff17
[  120.664307][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf20e3040
[  120.664311][ T5845] RBP: 00007ffdf20e3040 R08: 0000000000000000 R09: 0000000000000000
[  120.664315][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf20e40d0
[  120.664320][ T5845] R13: 00007f4ed9a11c05 R14: 000000000001d6cf R15: 00007ffdf20e4110
[  120.664332][ T5845]  </TASK>
[  120.664336][ T5845] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  121.237299][ T7766] loop2: detected capacity change from 0 to 512
[  121.241689][ T7766] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  121.259836][ T7766] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002c018, mo2=0002]
[  121.264662][ T7766] System zones: 0-7
[  121.268962][ T7766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.316331][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.589010][  T790] airspy 1-1:0.0: Registered as swradio24
[  121.591526][  T790] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  121.787436][  T790] usb 1-1: USB disconnect, device number 12
[  121.857877][ T7796] netlink: 76 bytes leftover after parsing attributes in process `syz.3.716'.
[  122.157439][ T7808] loop3: detected capacity change from 0 to 4096
[  122.161688][ T7808] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  122.179357][ T7808] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  122.185526][ T7808] ntfs3(loop3): Failed to load $Extend (-22).
[  122.188056][ T7808] ntfs3(loop3): Failed to initialize $Extend.
[  122.270301][ T7816] loop3: detected capacity change from 0 to 2048
[  122.278845][ T7816] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.456918][ T7830] loop0: detected capacity change from 0 to 2048
[  122.501154][ T7830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.537038][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.624462][ T7844] vlan2: entered promiscuous mode
[  122.626660][ T7844] macvtap0: entered promiscuous mode
[  122.662994][  T790] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  122.676410][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'.
[  122.683205][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'.
[  122.768081][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'.
[  122.779130][ T7854] hsr0: entered promiscuous mode
[  122.785825][ T7854] macsec1: entered promiscuous mode
[  122.787741][ T7854] macsec1: entered allmulticast mode
[  122.789436][ T7854] hsr0: entered allmulticast mode
[  122.791427][ T7854] hsr_slave_0: entered allmulticast mode
[  122.794006][ T7854] hsr_slave_1: entered allmulticast mode
[  122.799176][ T7854] hsr0: left allmulticast mode
[  122.801216][ T7854] hsr_slave_0: left allmulticast mode
[  122.805089][ T7854] hsr_slave_1: left allmulticast mode
[  122.832504][  T790] usb 3-1: Using ep0 maxpacket: 8
[  122.836012][  T790] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[  122.839623][  T790] usb 3-1: config 2 has no interface number 0
[  122.842486][  T790] usb 3-1: config 2 interface 31 has no altsetting 0
[  122.847500][  T790] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  122.851414][  T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.854599][  T790] usb 3-1: Product: syz
[  122.856504][  T790] usb 3-1: Manufacturer: syz
[  122.858414][  T790] usb 3-1: SerialNumber: syz
[  123.008840][ T7856] loop3: detected capacity change from 0 to 32768
[  123.020025][ T7856] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.037553][ T7870] syz_tun: entered allmulticast mode
[  123.039326][ T7856] XFS (loop3): Ending clean mount
[  123.041240][ T7869] syz_tun: left allmulticast mode
[  123.079789][  T790] ch9200 3-1:2.31: probe with driver ch9200 failed with error -71
[  123.092089][  T790] usb 3-1: USB disconnect, device number 13
[  123.101569][ T6772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.655773][ T7885] loop2: detected capacity change from 0 to 4096
[  123.667440][ T7885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.710432][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.804222][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'.
[  123.808172][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'.
[  123.879897][ T7903] loop2: detected capacity change from 0 to 128
[  123.884162][ T7903] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  123.889619][ T7903] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  124.009853][ T7909] loop2: detected capacity change from 0 to 4096
[  124.013095][ T7909] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  124.048873][ T7909] ntfs3(loop2): Failed to load root (-22).
[  124.214347][ T7901] loop3: detected capacity change from 0 to 32768
[  124.219482][ T7901] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.760 (7901)
[  124.228812][ T7901] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.233544][ T7901] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  124.261514][ T7901] BTRFS info (device loop3): turning off barriers
[  124.265285][ T7901] BTRFS info (device loop3): enabling free space tree
[  124.268244][ T7901] BTRFS info (device loop3): use zstd compression, level 3
[  124.330121][ T6772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.422314][  T790] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  124.518462][ T7944] loop3: detected capacity change from 0 to 1024
[  124.573377][  T790] usb 3-1: Using ep0 maxpacket: 32
[  124.595030][  T790] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  124.598872][  T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.602186][  T790] usb 3-1: Product: syz
[  124.604194][  T790] usb 3-1: Manufacturer: syz
[  124.607358][  T790] usb 3-1: SerialNumber: syz
[  124.611263][  T790] usb 3-1: config 0 descriptor??
[  124.625276][  T790] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  124.829936][ T7950] loop0: detected capacity change from 0 to 32768
[  124.837312][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'.
[  124.856911][ T7950] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  124.902415][ T7950] XFS (loop0): Ending clean mount
[  124.909287][ T7950] XFS (loop0): Quotacheck needed: Please wait.
[  124.939763][ T7950] XFS (loop0): Quotacheck: Done.
[  124.995874][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.292345][ T5927] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  125.556174][ T5927] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  125.559995][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.564936][ T5927] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  125.569143][ T5927] usb 4-1: config 1 has no interface number 1
[  125.571316][ T5927] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  125.577357][ T5927] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  125.584608][ T5927] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  125.587700][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.590313][ T5927] usb 4-1: Product: syz
[  125.591792][ T5927] usb 4-1: Manufacturer: syz
[  125.595325][ T5927] usb 4-1: SerialNumber: syz
[  125.812160][ T5927] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  125.815360][ T5927] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  125.858187][ T5927] usb 4-1: USB disconnect, device number 8
[  125.930394][  T790] gspca_ov534_9: reg_w failed -71
[  126.292388][  T790] gspca_ov534_9: Unknown sensor 0000
[  126.292468][  T790] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[  126.300648][  T790] usb 3-1: USB disconnect, device number 14
[  126.764568][ T8009] loop2: detected capacity change from 0 to 1024
[  126.778277][ T8009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.200393][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.294753][ T8019] loop2: detected capacity change from 0 to 128
[  127.300482][ T8019] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  127.308386][ T8019] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  127.337513][ T5845] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  127.535288][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'.
[  127.549445][ T8032] loop2: detected capacity change from 0 to 512
[  127.578005][ T8032] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  127.580961][ T8032] EXT4-fs (loop2): orphan cleanup on readonly fs
[  127.586631][ T8032] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  127.592042][ T8032] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  127.597840][ T8032] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.807: casefold flag without casefold feature
[  127.603761][ T8032] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.807: couldn't read orphan inode 16 (err -117)
[  127.609033][ T8032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  127.643666][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.695225][ T8040] loop2: detected capacity change from 0 to 1024
[  127.697098][ T8041] syzkaller1: tun_chr_ioctl cmd 1074025677
[  127.700804][ T8041] syzkaller1: linktype set to 773
[  127.719679][ T8040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.732173][   T33] audit: type=1800 audit(1757000173.854:8): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.811" name="file1" dev="loop2" ino=15 res=0 errno=0
[  127.747899][ T8040] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt.
[  127.805265][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.841671][ T8049] loop2: detected capacity change from 0 to 8
[  127.854930][ T8049] SQUASHFS error: Unable to read directory block [629:26]
[  127.920905][ T8054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'.
[  127.956932][ T8056] loop2: detected capacity change from 0 to 736
[  128.382392][  T790] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  128.557787][  T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  128.564677][  T790] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  128.568507][  T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.571928][  T790] usb 3-1: Product: syz
[  128.576966][  T790] usb 3-1: Manufacturer: syz
[  128.579081][  T790] usb 3-1: SerialNumber: syz
[  128.583437][  T790] usb 3-1: config 0 descriptor??
[  128.736378][ T8072] loop0: detected capacity change from 0 to 40427
[  128.740050][ T8072] F2FS-fs (loop0): Image doesn't support compression
[  128.742848][ T8072] F2FS-fs (loop0): build fault injection rate: 690
[  128.746579][ T8072] F2FS-fs (loop0): invalid crc value
[  128.776987][ T8072] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.780421][ T8072] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  128.788965][   T33] audit: type=1800 audit(1757000174.914:9): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.826" name="file1" dev="loop0" ino=10 res=0 errno=0
[  128.809391][  T790] usb 3-1: USB disconnect, device number 15
[  128.816033][ T5847] syz-executor: attempt to access beyond end of device
[  128.816033][ T5847] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  128.821666][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  128.821687][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.821695][ T5847] Call Trace:
[  128.821701][ T5847]  <TASK>
[  128.821708][ T5847]  dump_stack_lvl+0x189/0x250
[  128.821733][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.821748][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[  128.821761][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.821778][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.821804][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[  128.821828][ T5847]  f2fs_write_end_io+0x886/0xb60
[  128.821855][ T5847]  __submit_merged_bio+0x27a/0x6a0
[  128.821878][ T5847]  __submit_merged_write_cond+0x255/0x530
[  128.821901][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[  128.821917][ T5847]  ? __pfx_usage_match+0x10/0x10
[  128.821927][ T5847]  ? __bfs+0x154/0x2a0
[  128.821964][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.821979][ T5847]  ? __switch_to+0xdae/0x1670
[  128.822031][ T5847]  ? rcu_is_watching+0x15/0xb0
[  128.822045][ T5847]  ? trace_sched_exit_tp+0x36/0x110
[  128.822061][ T5847]  ? __schedule+0x17ae/0x4cc0
[  128.822080][ T5847]  ? folios_put_refs+0x559/0x640
[  128.822105][ T5847]  ? __lock_acquire+0xab9/0xd20
[  128.822129][ T5847]  ? do_raw_spin_lock+0x121/0x290
[  128.822152][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  128.822166][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.822185][ T5847]  do_writepages+0x32e/0x550
[  128.822229][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  128.822246][ T5847]  filemap_fdatawrite+0x199/0x240
[  128.822261][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  128.822345][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  128.822363][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[  128.822388][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[  128.822420][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  128.822471][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[  128.822488][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[  128.822505][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[  128.822515][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[  128.822538][ T5847]  ? shrinker_free+0x2ce/0x3e0
[  128.822553][ T5847]  deactivate_locked_super+0xbc/0x130
[  128.822570][ T5847]  cleanup_mnt+0x425/0x4c0
[  128.822584][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.822604][ T5847]  task_work_run+0x1d4/0x260
[  128.822650][ T5847]  ? __pfx_task_work_run+0x10/0x10
[  128.822665][ T5847]  ? __x64_sys_umount+0x122/0x160
[  128.822685][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[  128.822706][ T5847]  exit_to_user_mode_loop+0xec/0x110
[  128.822722][ T5847]  do_syscall_64+0x2bd/0x3b0
[  128.822733][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.822748][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.822760][ T5847]  ? exc_page_fault+0x9f/0xf0
[  128.822778][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.822789][ T5847] RIP: 0033:0x7f04e3d8ff17
[  128.822802][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  128.822812][ T5847] RSP: 002b:00007fffabf98548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  128.822827][ T5847] RAX: 0000000000000000 RBX: 00007f04e3e11c05 RCX: 00007f04e3d8ff17
[  128.822835][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffabf98600
[  128.822842][ T5847] RBP: 00007fffabf98600 R08: 0000000000000000 R09: 0000000000000000
[  128.822849][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffabf99690
[  128.822856][ T5847] R13: 00007f04e3e11c05 R14: 000000000001f6ad R15: 00007fffabf996d0
[  128.822879][ T5847]  </TASK>
[  128.969876][ T5847] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  129.380670][ T8087] can0: slcan on ttyS3.
[  129.434307][ T8087] can0 (unregistered): slcan off ttyS3.
[  129.441311][ T8083] loop0: detected capacity change from 0 to 32768
[  129.449303][ T8083] (syz.0.830,8083,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  129.457258][ T8083] (syz.0.830,8083,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  129.466201][ T8083] (syz.0.830,8083,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0xfec4e493. Applying ECC.
[  129.471557][ T8083] (syz.0.830,8083,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0xfec4e493
[  129.477672][ T8083] (syz.0.830,8083,1):ocfs2_validate_inode_block:1455 ERROR: Checksum failed for dinode 25
[  129.483076][ T8083] (syz.0.830,8083,1):ocfs2_read_locked_inode:597 ERROR: status = -5
[  129.486526][ T8083] (syz.0.830,8083,1):_ocfs2_get_system_file_inode:144 ERROR: status = -5
[  129.490203][ T8083] (syz.0.830,8083,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  129.493780][ T8083] (syz.0.830,8083,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 6, possibly corrupt fs?
[  129.493797][ T8083] (syz.0.830,8083,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  129.501742][ T8083] (syz.0.830,8083,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  129.504817][ T8083] (syz.0.830,8083,1):ocfs2_fill_super:1177 ERROR: status = -22
[  130.268646][ T8092] loop3: detected capacity change from 0 to 16
[  130.272063][ T8092] erofs (device loop3): bogus i_mode (6) @ nid 36
[  130.496268][ T8103] loop3: detected capacity change from 0 to 32768
[  130.498803][ T8103] XFS: attr2 mount option is deprecated.
[  130.502331][   T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  130.524536][ T8103] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  130.528397][ T8103] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  130.559187][ T8103] XFS (loop3): Ending clean mount
[  130.563453][ T8103] XFS (loop3): Quotacheck needed: Please wait.
[  130.583786][ T8103] XFS (loop3): Quotacheck: Done.
[  130.589057][   T33] audit: type=1800 audit(1757000176.714:10): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.840" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  130.603433][ T8103] XFS (loop3): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xe0, xfs_refcountbt block 0x28 
[  130.607880][ T8103] XFS (loop3): Unmount and run xfs_repair
[  130.609848][ T8103] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  130.612428][ T8103] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[  130.616083][ T8103] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[  130.619889][ T8103] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  130.623791][ T8103] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[  130.627621][ T8103] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.631469][ T8103] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.635825][ T8103] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.639642][ T8103] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.643633][ T8103] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x28 len 8 error 74
[  130.652427][   T24] usb 3-1: Using ep0 maxpacket: 16
[  130.655100][ T8103] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  130.658361][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.661341][ T8103] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  130.666465][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.685021][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  130.692538][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.699453][   T24] usb 3-1: Product: syz
[  130.704274][ T6772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  130.708052][   T24] usb 3-1: Manufacturer: syz
[  130.710586][   T24] usb 3-1: SerialNumber: syz
[  131.026870][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.845'.
[  131.145124][   T24] usb 3-1: 0:2 : does not exist
[  131.397288][ T8138] loop3: detected capacity change from 0 to 128
[  131.399994][ T8138] EXT4-fs: Ignoring removed nobh option
[  131.406941][ T8138] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  131.417115][ T8138] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  131.453240][ T6772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.510878][ T8146] loop3: detected capacity change from 0 to 2048
[  131.523148][ T8147] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.546443][ T8146] NILFS (loop3): error -2 truncating bmap (ino=16)
[  131.549626][   T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  131.570793][   T24] usb 3-1: USB disconnect, device number 16
[  131.572725][ T8146] syz.3.855 (8146) used greatest stack depth: 19856 bytes left
[  131.610126][ T8149] loop3: detected capacity change from 0 to 256
[  131.619931][ T8149] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  131.707782][ T8144] loop0: detected capacity change from 0 to 32768
[  131.724921][ T8144] JBD2: Ignoring recovery information on journal
[  131.764203][ T8144] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  131.808526][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  132.133398][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  132.282483][    T9] usb 4-1: Using ep0 maxpacket: 8
[  132.286650][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  132.291066][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  132.295945][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  132.303971][    T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  132.311656][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.315546][    T9] usb 4-1: Product: syz
[  132.317396][    T9] usb 4-1: Manufacturer: syz
[  132.319414][    T9] usb 4-1: SerialNumber: syz
[  132.324919][    T9] usb 4-1: config 0 descriptor??
[  132.329082][    T9] imon_raw 4-1:0.0: IR endpoint missing
[  132.538169][   T24] usb 4-1: USB disconnect, device number 9
[  132.558985][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.561646][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.695646][ T8192] loop2: detected capacity change from 0 to 4096
[  132.699741][ T8192] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  132.718380][ T8192] ntfs3(loop2): ino=1a, mi_enum_attr
[  132.720832][ T8192] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  132.725031][ T8192] ntfs3(loop2): ino=1a, mi_enum_attr
[  132.727428][ T8192] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  132.735149][ T8192] ntfs3(loop2): ino=5, "/" ntfs_readdir
[  132.883632][ T8204] bridge0: port 3(veth0_to_bridge) entered blocking state
[  132.886806][ T8204] bridge0: port 3(veth0_to_bridge) entered disabled state
[  132.890050][ T8204] veth0_to_bridge: entered allmulticast mode
[  132.897816][ T8204] veth0_to_bridge: entered promiscuous mode
[  132.900659][ T8204] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  132.908876][ T8204] bridge0: port 3(veth0_to_bridge) entered blocking state
[  132.911992][ T8204] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  132.919465][ T8203] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  132.922330][ T8203] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  132.964100][ T8207] loop0: detected capacity change from 0 to 1764
[  133.085824][ T8220] netlink: 72 bytes leftover after parsing attributes in process `syz.0.886'.
[  133.224481][   T33] audit: type=1400 audit(1757000179.354:11): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5D15F47DB2D pid=8233 comm="syz.0.893"
[  133.251024][ T8236] IPv6: sit1: Disabled Multicast RS
[  133.725596][ T8242] loop3: detected capacity change from 0 to 32768
[  133.730311][ T8242] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.897 (8242)
[  133.739601][ T8242] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  133.743122][ T8242] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  133.764089][ T8242] BTRFS info (device loop3): enabling ssd optimizations
[  133.767161][ T8242] BTRFS info (device loop3): enabling free space tree
[  133.785505][ T6772] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  133.875681][ T8214] ceph: No mds server is up or the cluster is laggy
[  134.030950][ T8265] loop2: detected capacity change from 0 to 512
[  134.034876][ T8265] EXT4-fs: Ignoring removed nomblk_io_submit option
[  134.041419][ T8265] EXT4-fs: Ignoring removed i_version option
[  134.061982][ T8265] EXT4-fs (loop2): 1 orphan inode deleted
[  134.068662][ T8265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.102958][ T8269] loop3: detected capacity change from 0 to 4096
[  134.106123][ T8269] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  134.117976][ T8269] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  134.145132][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.215469][ T8273] netlink: 232 bytes leftover after parsing attributes in process `syz.0.904'.
[  134.519913][ T8305] loop2: detected capacity change from 0 to 2048
[  134.555641][ T8305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.570148][    T9] IPVS: starting estimator thread 0...
[  134.597507][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.682618][ T8310] IPVS: using max 50 ests per chain, 120000 per kthread
[  135.135103][ T8332] loop0: detected capacity change from 0 to 64
[  135.368581][ T8346] loop3: detected capacity change from 0 to 256
[  135.573367][ T8366] syz_tun: entered allmulticast mode
[  135.588719][ T8364] syz_tun: left allmulticast mode
[  135.761922][ T8383] loop2: detected capacity change from 0 to 256
[  135.817178][ T8385] bridge1: entered allmulticast mode
[  135.862073][ T8387] __vm_enough_memory: pid: 8387, comm: syz.2.955, bytes: 21200425988096 not enough memory for the allocation
[  135.873348][ T8389] loop0: detected capacity change from 0 to 512
[  135.885688][ T8389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.922480][  T790] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  135.930026][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.970126][ T8395] loop0: detected capacity change from 0 to 256
[  135.973903][ T8395] exfat: Deprecated parameter 'namecase'
[  135.976606][ T8395] exfat: Deprecated parameter 'namecase'
[  135.986576][ T8395] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  136.077917][  T790] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  136.090104][  T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  136.095238][  T790] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  136.099138][  T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.104860][  T790] usb 4-1: config 0 descriptor??
[  136.308744][ T8405] loop0: detected capacity change from 0 to 2048
[  136.317218][ T8405] NILFS (loop0): couldn't find nilfs on the device
[  136.321488][  T790] ath6kl: Failed to submit usb control message: -71
[  136.706701][  T790] ath6kl: unable to send the bmi data to the device: -71
[  136.710056][  T790] ath6kl: Unable to send get target info: -71
[  136.862088][ T8410] 8021q: VLANs not supported on lo
[  136.915346][ T8413] loop3: detected capacity change from 0 to 512
[  136.918957][ T8413] EXT4-fs: Ignoring removed bh option
[  136.926980][ T8413] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  136.934437][ T8413] EXT4-fs (loop3): invalid journal inode
[  136.937060][ T8413] EXT4-fs (loop3): can't get journal size
[  136.947763][ T8413] EXT4-fs (loop3): 1 truncate cleaned up
[  136.956305][ T8413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.968771][ T8413] Device name not specified.
[  136.968771][ T8413] 
[  137.008325][ T6772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.086879][  T790] ath6kl: Failed to init ath6kl core: -71
[  137.090795][  T790] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  137.100952][  T790] usb 4-1: USB disconnect, device number 10
[  137.145449][ T8418] loop0: detected capacity change from 0 to 256
[  137.154657][ T8418] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x200c26b4, utbl_chksum : 0xe619d30d)
[  137.386283][ T8441] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.977'.
[  137.389813][ T8441] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  137.394031][ T8441] openvswitch: netlink: Duplicate key (type 0).
[  137.480962][ T8447] loop0: detected capacity change from 0 to 128
[  137.709304][ T8453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.983'.
[  137.713324][ T8453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.983'.
[  137.725534][ T8449] loop3: detected capacity change from 0 to 32768
[  137.734692][ T8449] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.759414][ T8449] XFS (loop3): Ending clean mount
[  137.762658][  T790] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  137.801102][ T6772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.932581][  T790] usb 1-1: Using ep0 maxpacket: 16
[  137.939625][  T790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.951160][  T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  137.962320][  T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  137.966543][  T790] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  137.970635][  T790] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  137.984813][  T790] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  137.990529][  T790] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  138.000864][  T790] usb 1-1: Manufacturer: syz
[  138.011425][  T790] usb 1-1: config 0 descriptor??
[  138.160842][ T8486] netlink: 'syz.2.995': attribute type 1 has an invalid length.
[  138.172330][ T8486] netlink: 'syz.2.995': attribute type 1 has an invalid length.
[  138.343106][  T790] rc_core: IR keymap rc-hauppauge not found
[  138.345444][  T790] Registered IR keymap rc-empty
[  138.348034][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.373052][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.385948][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1000'.
[  138.394335][  T790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  138.399020][  T790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13
[  138.407404][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.433770][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.462666][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.495382][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.522397][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.553544][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.582392][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  138.582664][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.614450][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.642465][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.649559][ T8500] loop3: detected capacity change from 0 to 40427
[  138.654914][ T8500] F2FS-fs (loop3): build fault injection rate: 19
[  138.657695][ T8500] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  138.661965][ T8500] F2FS-fs (loop3): invalid crc value
[  138.673798][ T8500] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  138.675135][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.702350][  T790] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.706247][ T8500] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  138.716924][ T8500] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  138.721454][ T8500] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  138.732310][   T10] usb 3-1: Using ep0 maxpacket: 32
[  138.735037][  T790] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  138.738513][  T790] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  138.744829][   T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  138.745917][  T790] usb 1-1: USB disconnect, device number 13
[  138.748174][   T10] usb 3-1: config 0 has no interface number 0
[  138.756201][ T8500] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  138.760929][   T10] usb 3-1: config 0 interface 184 has no altsetting 0
[  138.771367][   T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  138.774679][ T8500] syz.3.1001: attempt to access beyond end of device
[  138.774679][ T8500] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  138.781802][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.785105][   T10] usb 3-1: Product: syz
[  138.787074][   T10] usb 3-1: Manufacturer: syz
[  138.789015][   T10] usb 3-1: SerialNumber: syz
[  138.803938][   T10] usb 3-1: config 0 descriptor??
[  138.808264][   T10] smsc75xx v1.0.0
[  138.823207][ T6772] syz-executor: attempt to access beyond end of device
[  138.823207][ T6772] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  138.828986][ T6772] CPU: 0 UID: 0 PID: 6772 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  138.829010][ T6772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.829017][ T6772] Call Trace:
[  138.829022][ T6772]  <TASK>
[  138.829029][ T6772]  dump_stack_lvl+0x189/0x250
[  138.829070][ T6772]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.829084][ T6772]  ? __pfx_queue_work_on+0x10/0x10
[  138.829097][ T6772]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  138.829112][ T6772]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  138.829136][ T6772]  f2fs_handle_critical_error+0x37c/0x540
[  138.829159][ T6772]  f2fs_write_end_io+0x886/0xb60
[  138.829184][ T6772]  __submit_merged_bio+0x27a/0x6a0
[  138.829206][ T6772]  __submit_merged_write_cond+0x255/0x530
[  138.829227][ T6772]  f2fs_write_data_pages+0x261d/0x3000
[  138.829242][ T6772]  ? __lock_acquire+0xab9/0xd20
[  138.829282][ T6772]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  138.829333][ T6772]  ? __pfx_stack_trace_save+0x10/0x10
[  138.829363][ T6772]  ? kthread_stop+0x194/0x5c0
[  138.829375][ T6772]  ? kill_f2fs_super+0x137/0x6c0
[  138.829385][ T6772]  ? deactivate_locked_super+0xbc/0x130
[  138.829404][ T6772]  ? __lock_acquire+0xab9/0xd20
[  138.829432][ T6772]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  138.829449][ T6772]  do_writepages+0x32e/0x550
[  138.829472][ T6772]  ? do_raw_spin_unlock+0x4d/0x240
[  138.829512][ T6772]  filemap_fdatawrite+0x199/0x240
[  138.829529][ T6772]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  138.829579][ T6772]  ? do_raw_spin_unlock+0x4d/0x240
[  138.829596][ T6772]  f2fs_sync_dirty_inodes+0x31f/0x830
[  138.829619][ T6772]  f2fs_write_checkpoint+0x95a/0x1df0
[  138.829650][ T6772]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  138.829697][ T6772]  ? kill_f2fs_super+0x298/0x6c0
[  138.829715][ T6772]  kill_f2fs_super+0x2c3/0x6c0
[  138.829731][ T6772]  ? __pfx_kill_f2fs_super+0x10/0x10
[  138.829740][ T6772]  ? radix_tree_delete_item+0x2b6/0x400
[  138.829763][ T6772]  ? shrinker_free+0x2ce/0x3e0
[  138.829777][ T6772]  deactivate_locked_super+0xbc/0x130
[  138.829793][ T6772]  cleanup_mnt+0x425/0x4c0
[  138.829806][ T6772]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.829824][ T6772]  task_work_run+0x1d4/0x260
[  138.829841][ T6772]  ? __pfx_task_work_run+0x10/0x10
[  138.829854][ T6772]  ? __x64_sys_umount+0x122/0x160
[  138.829872][ T6772]  ? exit_to_user_mode_loop+0x40/0x110
[  138.829892][ T6772]  exit_to_user_mode_loop+0xec/0x110
[  138.829907][ T6772]  do_syscall_64+0x2bd/0x3b0
[  138.829917][ T6772]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.829932][ T6772]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.829942][ T6772]  ? exc_page_fault+0x9f/0xf0
[  138.829959][ T6772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.829969][ T6772] RIP: 0033:0x7fb8bdd8ff17
[  138.829981][ T6772] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  138.829991][ T6772] RSP: 002b:00007ffcccb10368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  138.830009][ T6772] RAX: 0000000000000000 RBX: 00007fb8bde11c05 RCX: 00007fb8bdd8ff17
[  138.830016][ T6772] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcccb10420
[  138.830024][ T6772] RBP: 00007ffcccb10420 R08: 0000000000000000 R09: 0000000000000000
[  138.830030][ T6772] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcccb114b0
[  138.830037][ T6772] R13: 00007fb8bde11c05 R14: 0000000000021db4 R15: 00007ffcccb114f0
[  138.830057][ T6772]  </TASK>
[  138.832575][ T6772] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  139.338403][ T8506] loop3: detected capacity change from 0 to 32768
[  139.352006][ T8506] (syz.3.1002,8506,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=7, slot=0
[  139.356866][ T8506] (syz.3.1002,8506,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  139.360624][ T8506] (syz.3.1002,8506,1):ocfs2_mount_volume:1758 ERROR: status = -22
[  139.379187][ T8506] (syz.3.1002,8506,0):ocfs2_fill_super:1177 ERROR: status = -22
[  139.617915][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  139.623184][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  139.627523][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  139.631960][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  139.637031][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  139.641130][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  139.648245][   T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  139.654767][   T10] usb 3-1: USB disconnect, device number 17
[  139.802399][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  139.952488][    T9] usb 4-1: Using ep0 maxpacket: 32
[  139.956941][    T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  139.960865][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.969580][    T9] usb 4-1: config 0 descriptor??
[  140.183762][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  140.191345][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  140.196343][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  140.199907][    T9] usb 4-1: media controller created
[  140.224599][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  140.385767][    T9] az6027: usb out operation failed. (-71)
[  140.389130][    T9] az6027: usb out operation failed. (-71)
[  140.391199][    T9] stb0899_attach: Driver disabled by Kconfig
[  140.394124][    T9] az6027: no front-end attached
[  140.394124][    T9] 
[  140.397976][    T9] az6027: usb out operation failed. (-71)
[  140.400402][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  140.406725][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14
[  140.414132][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  140.421559][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  140.426747][    T9] usb 4-1: USB disconnect, device number 11
[  140.465656][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  140.680189][ T8549] loop2: detected capacity change from 0 to 40427
[  140.686409][ T8549] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  140.690027][ T8549] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  140.696771][ T8549] F2FS-fs (loop2): invalid crc value
[  140.753426][ T8549] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  140.764289][ T8549] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  140.767281][ T8549] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  140.840327][ T8557] loop0: detected capacity change from 0 to 256
[  140.845322][ T8557] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  140.857370][ T8557] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  140.860837][ T8557] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  140.864531][ T8557] UDF-fs: Scanning with blocksize 512 failed
[  140.869174][ T8557] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  140.877849][ T8557] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  140.986547][ T8564] ==================================================================
[  140.990150][ T8564] BUG: KFENCE: use-after-free read in xfrm_alloc_spi+0x3b9/0xf30
[  140.990150][ T8564] 
[  140.994435][ T8564] Use-after-free read at 0xffff888136548cc4 (in kfence-#163):
[  140.998752][ T8564]  xfrm_alloc_spi+0x3b9/0xf30
[  141.000717][ T8564]  xfrm_alloc_userspi+0x70b/0xc90
[  141.002834][ T8564]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.004963][ T8564]  netlink_rcv_skb+0x208/0x470
[  141.007071][ T8564]  xfrm_netlink_rcv+0x79/0x90
[  141.009142][ T8564]  netlink_unicast+0x82f/0x9e0
[  141.011338][ T8564]  netlink_sendmsg+0x805/0xb30
[  141.013477][ T8564]  __sock_sendmsg+0x21c/0x270
[  141.015627][ T8564]  ____sys_sendmsg+0x505/0x830
[  141.017730][ T8564]  ___sys_sendmsg+0x21f/0x2a0
[  141.019750][ T8564]  __x64_sys_sendmsg+0x19b/0x260
[  141.021815][ T8564]  do_syscall_64+0xfa/0x3b0
[  141.023707][ T8564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.026120][ T8564] 
[  141.027333][ T8564] kfence-#163: 0xffff888136548c00-0xffff888136548f9f, size=928, cache=xfrm_state
[  141.027333][ T8564] 
[  141.032561][ T8564] allocated by task 7301 on cpu 1 at 106.278593s (34.753965s ago):
[  141.036109][ T8564]  xfrm_state_alloc+0x24/0x2f0
[  141.038336][ T8564]  __find_acq_core+0x8a7/0x1c00
[  141.040882][ T8564]  xfrm_find_acq+0x78/0xa0
[  141.043183][ T8564]  xfrm_alloc_userspi+0x6b3/0xc90
[  141.045402][ T8564]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.047140][ T8564]  netlink_rcv_skb+0x208/0x470
[  141.049503][ T8564]  xfrm_netlink_rcv+0x79/0x90
[  141.051784][ T8564]  netlink_unicast+0x82f/0x9e0
[  141.053858][ T8564]  netlink_sendmsg+0x805/0xb30
[  141.056027][ T8564]  __sock_sendmsg+0x21c/0x270
[  141.058353][ T8564]  ____sys_sendmsg+0x505/0x830
[  141.060388][ T8564]  ___sys_sendmsg+0x21f/0x2a0
[  141.062709][ T8564]  __x64_sys_sendmsg+0x19b/0x260
[  141.064965][ T8564]  do_syscall_64+0xfa/0x3b0
[  141.066914][ T8564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.069580][ T8564] 
[  141.070802][ T8564] freed by task 24 on cpu 1 at 136.286118s (4.784683s ago):
[  141.074065][ T8564]  xfrm_state_gc_task+0x52d/0x6b0
[  141.076236][ T8564]  process_scheduled_works+0xae1/0x17b0
[  141.078708][ T8564]  worker_thread+0x8a0/0xda0
[  141.080604][ T8564]  kthread+0x711/0x8a0
[  141.082386][ T8564]  ret_from_fork+0x3fc/0x770
[  141.084385][ T8564]  ret_from_fork_asm+0x1a/0x30
[  141.086513][ T8564] 
[  141.087606][ T8564] CPU: 0 UID: 0 PID: 8564 Comm: syz.0.1028 Not tainted syzkaller #0 PREEMPT(full) 
[  141.091600][ T8564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.095869][ T8564] RIP: 0010:xfrm_alloc_spi+0x3b9/0xf30
[  141.098216][ T8564] Code: c1 08 c1 74 0a e8 d7 db 9d f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9f 01 00 00 <8b> 1b 89 df 44 89 f6 e8 6b dd 9d f7 44 39 f3 0f 85 df 00 00 00 49
[  141.106734][ T8564] RSP: 0018:ffffc900078f70e0 EFLAGS: 00010246
[  141.109565][ T8564] RAX: 0000000000000000 RBX: ffff888136548cc4 RCX: 0000000000080000
[  141.112958][ T8564] RDX: ffffc90003581000 RSI: 0000000000000222 RDI: 0000000000000223
[  141.116718][ T8564] RBP: ffffc900078f7230 R08: 0000000000000000 R09: ffffffff8a21d140
[  141.120481][ T8564] R10: dffffc0000000000 R11: fffff52000f1ee0c R12: dffffc0000000000
[  141.124068][ T8564] R13: ffff888136548c00 R14: 0000000010690000 R15: ffffc900078f76a0
[  141.127579][ T8564] FS:  00007f04e4c6e6c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  141.131719][ T8564] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  141.134958][ T8564] CR2: ffff888136548cc4 CR3: 000000011e616000 CR4: 00000000000006f0
[  141.138486][ T8564] Call Trace:
[  141.140148][ T8564]  <TASK>
[  141.141785][ T8564]  ? xfrm_alloc_spi+0x2a0/0xf30
[  141.144226][ T8564]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  141.146826][ T8564]  ? xfrm_find_acq+0x87/0xa0
[  141.149595][ T8564]  xfrm_alloc_userspi+0x70b/0xc90
[  141.151968][ T8564]  ? apparmor_capable+0x137/0x1b0
[  141.154242][ T8564]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  141.157019][ T8564]  ? __nla_parse+0x40/0x60
[  141.159188][ T8564]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.161710][ T8564]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.164430][ T8564]  ? __pfx___mutex_trylock_common+0x10/0x10
[  141.167087][ T8564]  ? rcu_is_watching+0x15/0xb0
[  141.169935][ T8564]  ? trace_contention_end+0x39/0x120
[  141.172285][ T8564]  ? __mutex_lock+0x335/0x1350
[  141.174469][ T8564]  netlink_rcv_skb+0x208/0x470
[  141.176823][ T8564]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.179241][ T8564]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  141.181593][ T8564]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.184067][ T8564]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.186751][ T8564]  xfrm_netlink_rcv+0x79/0x90
[  141.188965][ T8564]  netlink_unicast+0x82f/0x9e0
[  141.191320][ T8564]  ? __pfx_netlink_unicast+0x10/0x10
[  141.193671][ T8564]  ? netlink_sendmsg+0x642/0xb30
[  141.195853][ T8564]  ? skb_put+0x11b/0x210
[  141.197763][ T8564]  netlink_sendmsg+0x805/0xb30
[  141.199822][ T8564]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.202199][ T8564]  ? aa_sock_msg_perm+0xf1/0x1d0
[  141.204421][ T8564]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  141.206758][ T8564]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.209201][ T8564]  __sock_sendmsg+0x21c/0x270
[  141.211359][ T8564]  ____sys_sendmsg+0x505/0x830
[  141.213686][ T8564]  ? __pfx_____sys_sendmsg+0x10/0x10
[  141.216136][ T8564]  ? import_iovec+0x74/0xa0
[  141.218131][ T8564]  ___sys_sendmsg+0x21f/0x2a0
[  141.220236][ T8564]  ? __pfx____sys_sendmsg+0x10/0x10
[  141.222399][ T8564]  ? __fget_files+0x2a/0x420
[  141.224577][ T8564]  ? __fget_files+0x3a0/0x420
[  141.226709][ T8564]  __x64_sys_sendmsg+0x19b/0x260
[  141.228892][ T8564]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  141.231238][ T8564]  ? rcu_is_watching+0x15/0xb0
[  141.233271][ T8564]  ? do_syscall_64+0xbe/0x3b0
[  141.235313][ T8564]  do_syscall_64+0xfa/0x3b0
[  141.237348][ T8564]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.239511][ T8564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.242168][ T8564]  ? exc_page_fault+0x9f/0xf0
[  141.244533][ T8564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.247130][ T8564] RIP: 0033:0x7f04e3d8ebe9
[  141.248982][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.257268][ T8564] RSP: 002b:00007f04e4c6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  141.260793][ T8564] RAX: ffffffffffffffda RBX: 00007f04e3fc5fa0 RCX: 00007f04e3d8ebe9
[  141.263821][ T8564] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  141.267034][ T8564] RBP: 00007f04e3e11e19 R08: 0000000000000000 R09: 0000000000000000
[  141.270353][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.273821][ T8564] R13: 00007f04e3fc6038 R14: 00007f04e3fc5fa0 R15: 00007fffabf992b8
[  141.277563][ T8564]  </TASK>
[  141.278934][ T8564] ==================================================================
[  141.282372][ T8564] Kernel panic - not syncing: KFENCE: panic_on_warn set ...
[  141.286624][ T8564] CPU: 0 UID: 0 PID: 8564 Comm: syz.0.1028 Not tainted syzkaller #0 PREEMPT(full) 
[  141.290701][ T8564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.295694][ T8564] Call Trace:
[  141.297349][ T8564]  <TASK>
[  141.298624][ T8564]  dump_stack_lvl+0x99/0x250
[  141.300593][ T8564]  ? __asan_memcpy+0x40/0x70
[  141.302825][ T8564]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.305033][ T8564]  ? __pfx__printk+0x10/0x10
[  141.307133][ T8564]  vpanic+0x281/0x750
[  141.308995][ T8564]  ? __pfx_vpanic+0x10/0x10
[  141.311240][ T8564]  ? is_bpf_text_address+0x292/0x2b0
[  141.313650][ T8564]  panic+0xb9/0xc0
[  141.315500][ T8564]  ? __pfx_panic+0x10/0x10
[  141.317641][ T8564]  ? __pfx__printk+0x10/0x10
[  141.319757][ T8564]  check_panic_on_warn+0x89/0xb0
[  141.322498][ T8564]  kfence_report_error+0x748/0xa40
[  141.324866][ T8564]  ? __pfx_kfence_report_error+0x10/0x10
[  141.327355][ T8564]  ? xfrm_alloc_spi+0x3b9/0xf30
[  141.329550][ T8564]  ? xfrm_alloc_userspi+0x70b/0xc90
[  141.331959][ T8564]  ? xfrm_user_rcv_msg+0x7a3/0xab0
[  141.334478][ T8564]  ? netlink_rcv_skb+0x208/0x470
[  141.337367][ T8564]  ? xfrm_netlink_rcv+0x79/0x90
[  141.339776][ T8564]  ? netlink_unicast+0x82f/0x9e0
[  141.341885][ T8564]  ? netlink_sendmsg+0x805/0xb30
[  141.344649][ T8564]  ? __sock_sendmsg+0x21c/0x270
[  141.346858][ T8564]  ? ____sys_sendmsg+0x505/0x830
[  141.349605][ T8564]  ? ___sys_sendmsg+0x21f/0x2a0
[  141.351722][ T8564]  ? __x64_sys_sendmsg+0x19b/0x260
[  141.353877][ T8564]  ? do_syscall_64+0xfa/0x3b0
[  141.356397][ T8564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.359124][ T8564]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  141.361436][ T8564]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  141.364106][ T8564]  ? search_bpf_extables+0x26/0x3f0
[  141.366562][ T8564]  kfence_handle_page_fault+0x358/0x4d0
[  141.369122][ T8564]  page_fault_oops+0x19f/0xa10
[  141.371385][ T8564]  ? __pfx_fixup_exception+0x10/0x10
[  141.373821][ T8564]  ? __pfx_page_fault_oops+0x10/0x10
[  141.376163][ T8564]  ? is_prefetch+0x403/0x640
[  141.378211][ T8564]  ? __lock_acquire+0xab9/0xd20
[  141.380262][ T8564]  ? __pfx_is_prefetch+0x10/0x10
[  141.382798][ T8564]  ? get_random_u32+0x155/0x940
[  141.384509][ T8564]  __bad_area_nosemaphore+0x11a/0x780
[  141.386873][ T8564]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.389229][ T8564]  ? get_random_u32+0x155/0x940
[  141.391410][ T8564]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  141.394317][ T8564]  ? spurious_kernel_fault+0x1c7/0x6b0
[  141.397022][ T8564]  ? do_kern_addr_fault+0x30/0x80
[  141.399218][ T8564]  exc_page_fault+0xc3/0xf0
[  141.401302][ T8564]  asm_exc_page_fault+0x26/0x30
[  141.403571][ T8564] RIP: 0010:xfrm_alloc_spi+0x3b9/0xf30
[  141.406041][ T8564] Code: c1 08 c1 74 0a e8 d7 db 9d f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9f 01 00 00 <8b> 1b 89 df 44 89 f6 e8 6b dd 9d f7 44 39 f3 0f 85 df 00 00 00 49
[  141.415196][ T8564] RSP: 0018:ffffc900078f70e0 EFLAGS: 00010246
[  141.418154][ T8564] RAX: 0000000000000000 RBX: ffff888136548cc4 RCX: 0000000000080000
[  141.422160][ T8564] RDX: ffffc90003581000 RSI: 0000000000000222 RDI: 0000000000000223
[  141.425736][ T8564] RBP: ffffc900078f7230 R08: 0000000000000000 R09: ffffffff8a21d140
[  141.429253][ T8564] R10: dffffc0000000000 R11: fffff52000f1ee0c R12: dffffc0000000000
[  141.432979][ T8564] R13: ffff888136548c00 R14: 0000000010690000 R15: ffffc900078f76a0
[  141.437009][ T8564]  ? xfrm_alloc_spi+0x2a0/0xf30
[  141.439223][ T8564]  ? xfrm_alloc_spi+0x2a0/0xf30
[  141.441384][ T8564]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  141.443822][ T8564]  ? xfrm_find_acq+0x87/0xa0
[  141.445930][ T8564]  xfrm_alloc_userspi+0x70b/0xc90
[  141.448223][ T8564]  ? apparmor_capable+0x137/0x1b0
[  141.450399][ T8564]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  141.452985][ T8564]  ? __nla_parse+0x40/0x60
[  141.454985][ T8564]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.457169][ T8564]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.459546][ T8564]  ? __pfx___mutex_trylock_common+0x10/0x10
[  141.462113][ T8564]  ? rcu_is_watching+0x15/0xb0
[  141.464422][ T8564]  ? trace_contention_end+0x39/0x120
[  141.467068][ T8564]  ? __mutex_lock+0x335/0x1350
[  141.469155][ T8564]  netlink_rcv_skb+0x208/0x470
[  141.471253][ T8564]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.473861][ T8564]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  141.476699][ T8564]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.479028][ T8564]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.481224][ T8564]  xfrm_netlink_rcv+0x79/0x90
[  141.483346][ T8564]  netlink_unicast+0x82f/0x9e0
[  141.485645][ T8564]  ? __pfx_netlink_unicast+0x10/0x10
[  141.488037][ T8564]  ? netlink_sendmsg+0x642/0xb30
[  141.490091][ T8564]  ? skb_put+0x11b/0x210
[  141.491955][ T8564]  netlink_sendmsg+0x805/0xb30
[  141.494270][ T8564]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.496749][ T8564]  ? aa_sock_msg_perm+0xf1/0x1d0
[  141.498900][ T8564]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  141.501250][ T8564]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.503603][ T8564]  __sock_sendmsg+0x21c/0x270
[  141.505677][ T8564]  ____sys_sendmsg+0x505/0x830
[  141.507804][ T8564]  ? __pfx_____sys_sendmsg+0x10/0x10
[  141.510077][ T8564]  ? import_iovec+0x74/0xa0
[  141.512052][ T8564]  ___sys_sendmsg+0x21f/0x2a0
[  141.514081][ T8564]  ? __pfx____sys_sendmsg+0x10/0x10
[  141.516350][ T8564]  ? __fget_files+0x2a/0x420
[  141.518358][ T8564]  ? __fget_files+0x3a0/0x420
[  141.520341][ T8564]  __x64_sys_sendmsg+0x19b/0x260
[  141.522486][ T8564]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  141.524840][ T8564]  ? rcu_is_watching+0x15/0xb0
[  141.526906][ T8564]  ? do_syscall_64+0xbe/0x3b0
[  141.528900][ T8564]  do_syscall_64+0xfa/0x3b0
[  141.530909][ T8564]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.533145][ T8564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.535746][ T8564]  ? exc_page_fault+0x9f/0xf0
[  141.537753][ T8564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.540214][ T8564] RIP: 0033:0x7f04e3d8ebe9
[  141.542067][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.549846][ T8564] RSP: 002b:00007f04e4c6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  141.553473][ T8564] RAX: ffffffffffffffda RBX: 00007f04e3fc5fa0 RCX: 00007f04e3d8ebe9
[  141.556843][ T8564] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  141.560154][ T8564] RBP: 00007f04e3e11e19 R08: 0000000000000000 R09: 0000000000000000
[  141.563587][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.567021][ T8564] R13: 00007f04e3fc6038 R14: 00007f04e3fc5fa0 R15: 00007fffabf992b8
[  141.570417][ T8564]  </TASK>
[  141.572679][ T8564] Kernel Offset: disabled
[  141.575022][ T8564] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:36:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000011b4 RDI=00000000000011b5 RBP=00000000000003f8 RSP=ffffc900078f63b0
R8 =ffff888020818237 R9 =1ffff11004103046 R10=dffffc0000000000 R11=ffffffff854f3b40
R12=dffffc0000000000 R13=ffffffff99afd8ff R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3bbc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f04e4c6e6c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffff888136548cc4 CR3=000000011e616000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f04e3f97498 00007f04e3f97470 XMM03=00007f04e3f974a8 00007f04e3f974a0
XMM04=00007f04e4afd100 00007f04e3f97460 XMM05=00007f04e3f97478 00007f04e3f974c0
XMM06=00007f04e3f974b8 00007f04e3f974b0 XMM07=00007f04e3f974a8 00007f04e3f974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f04e3e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81faff01 RBX=0080000000000000 RCX=ffffffff81faffdf RDX=0000000000000001
RSI=0000000000000004 RDI=ffffea0000ce7134 RBP=ffffc9000295f6f0 RSP=ffffc9000295f5c8
R8 =ffffea0000ce7138 R9 =ffff800000000000 R10=dffffc0000000000 R11=fffff94000140e6f
R12=0000000000000001 R13=ffffea0000ce7100 R14=0000000000000009 R15=1ffffd400019ce26
RIP=ffffffff82230437 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555595544500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555955447d0 CR3=0000000028182000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f04e3e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
