last executing test programs:

5m7.119946226s ago: executing program 2 (id=149):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000080900010073797a30000000000900020073797a30000000001400038008000140000000000800024000e5ff0050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018210380140001007465616d3000000000000000000000000800074000000001"], 0xd8}}, 0x800)

5m7.100694427s ago: executing program 2 (id=150):
syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090265000101000004090400001202060080052406000005240000000d200f01000000000000000000152412"], 0x0)

5m5.851266764s ago: executing program 2 (id=157):
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f000000c440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000009580)=""/19, 0x13}, 0x7}], 0x1, 0x10000, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)

5m5.781375768s ago: executing program 2 (id=158):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
link(&(0x7f0000000040)='./file0/file0\x00', 0x0)

5m5.698773151s ago: executing program 2 (id=159):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0xf4240}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0)

5m5.441774512s ago: executing program 2 (id=163):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xfffffffc, 0xffffffff, 0x8}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005200010000000000000000001c000000080002"], 0x1c}}, 0x80)

5m5.042364984s ago: executing program 32 (id=163):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xfffffffc, 0xffffffff, 0x8}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005200010000000000000000001c000000080002"], 0x1c}}, 0x80)

3m1.967280773s ago: executing program 3 (id=1368):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40001}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

3m1.786651691s ago: executing program 3 (id=1369):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setgroups(0x4000000000000106, &(0x7f0000000180))
quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0)

3m1.286919221s ago: executing program 3 (id=1372):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './control\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
listen(r2, 0xd3)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, 0x0)

2m57.546054059s ago: executing program 3 (id=1391):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f700"/116], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000840)=ANY=[], 0x110)
syz_mount_image$hfsplus(&(0x7f0000000c00), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000002cc0)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0a42f7415a3663f0ccff19a8b6c74a5ca36cde3a0764e4539a0072118a8ca35f4cfd925432ff27a561206de87f8ef8fd024eb3b7293d4f804164aa55affb403bca8af4c0f0fb72f91e3d6b0bb844b31943a9deeeafb1a147ec2703ef0dcb51f0b130653ab2053803328849a0ce1549c14673bd2905fb1371c07486fcc547a816c117c340d1683e87ffde3073bb03c6b1155e6cb645b5e79b6c216befe7790345349e", @ANYRESOCT, @ANYRES8], 0xfb, 0x6a8, &(0x7f0000000180)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1b, 0x10, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a3110697e4298d1e14ef01060000e9009600fdff0000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x3]})
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)

2m57.188795613s ago: executing program 3 (id=1396):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m56.509601261s ago: executing program 3 (id=1404):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="4007490000002a4e22f5c5196e03ba8bebf15b08cd0649fed85decf2413abee4d4038ccbb74527e74636849e944f932f50821243b8106afba1842d46ec710cb202fb49d1771543d1"], 0x0, 0x0})

2m56.171280477s ago: executing program 33 (id=1404):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="4007490000002a4e22f5c5196e03ba8bebf15b08cd0649fed85decf2413abee4d4038ccbb74527e74636849e944f932f50821243b8106afba1842d46ec710cb202fb49d1771543d1"], 0x0, 0x0})

29.416764804s ago: executing program 0 (id=2290):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x60bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x4c033}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

29.416258564s ago: executing program 0 (id=2291):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x2, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0)

29.339883755s ago: executing program 0 (id=2292):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)

21.988494606s ago: executing program 0 (id=2293):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220)

21.662624663s ago: executing program 0 (id=2296):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "609eeff8756985a6", "534548cd1994aef978ddcb14bc518f8b", "12b922ff", "fc79fdc63274e783"}, 0x28)
recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0)

11.682018857s ago: executing program 0 (id=2377):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x143000, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8)
r1 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)=0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000000c0)={{}, 0x0, 0x0})

11.462086589s ago: executing program 34 (id=2377):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x143000, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8)
r1 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)=0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000000c0)={{}, 0x0, 0x0})

6.863569113s ago: executing program 1 (id=2405):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket$inet6(0xa, 0x80000, 0x10000)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x200040c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

5.281112535s ago: executing program 1 (id=2412):
syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4040, &(0x7f0000000000)=ANY=[], 0x1, 0x21d, &(0x7f00000006c0)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)
truncate(&(0x7f00000003c0)='./file2\x00', 0x1bfc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

3.500832479s ago: executing program 1 (id=2420):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @mcast1, 0x8}, 0x1c)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x4, 0x4)
sendmmsg$inet6(r1, &(0x7f0000005c00)=[{{&(0x7f00000022c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c, &(0x7f0000003a40)=[{&(0x7f00000037c0)="1049456d5c", 0x5}], 0x1}}], 0x1, 0x20000080)

3.407162188s ago: executing program 1 (id=2421):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20)

2.01812007s ago: executing program 1 (id=2426):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x24, &(0x7f0000000bc0)={0x20, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.294991294s ago: executing program 4 (id=2427):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$sysctl(r0, &(0x7f0000000000)='1\x00', 0x2)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

1.004602248s ago: executing program 4 (id=2428):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x29, 0x0, &(0x7f0000000240))

808.086407ms ago: executing program 4 (id=2429):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000540)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0xb, 0x6, 0xfffffffffffffff0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

555.318182ms ago: executing program 4 (id=2430):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x20020000)

305.582216ms ago: executing program 4 (id=2431):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

295.283733ms ago: executing program 1 (id=2432):
socket$kcm(0x2d, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
write$tun(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0xfc6d)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
readv(r5, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
preadv(r7, &(0x7f0000001cc0), 0x0, 0x0, 0xa3)
write(r6, &(0x7f0000000000)="fa", 0xfffffdef)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x50)
close(r8)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r9, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=2433):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000180)=0x5, 0x4)

kernel console output (not intermixed with test programs):

2, SerialNumber=3
[  171.550164][   T24] usb 2-1: Product: syz
[  171.552007][   T24] usb 2-1: Manufacturer: syz
[  171.560533][   T24] usb 2-1: SerialNumber: syz
[  171.567613][   T24] usb 2-1: config 0 descriptor??
[  171.804755][    C1] usb 2-1: NFC: Urb failure (status -71)
[  171.820019][    C1] usb 2-1: NFC: Urb failure (status -71)
[  171.831894][   T24] usb 2-1: NFC: Unable to get FW version
[  171.854153][   T24] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -71
[  171.879087][   T24] usb 2-1: USB disconnect, device number 12
[  172.416725][ T8780] trusted_key: syz.3.1116 sent an empty control message without MSG_MORE.
[  172.784348][ T8787] loop1: detected capacity change from 0 to 4096
[  172.807426][ T8787] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  172.830050][ T8787] ntfs3(loop1): ino=3, mi_enum_attr
[  172.832314][ T8787] ntfs3(loop1): ino=1, mi_enum_attr
[  172.862380][ T8787] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  172.876162][ T8787] ntfs3(loop1): Failed to load $MFTMirr (-22).
[  173.360231][ T8808] autofs4:pid:8808:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967295.0), cmd(0xc018937e)
[  173.366074][ T8808] autofs4:pid:8808:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e)
[  173.952853][ T8812] Driver unsupported XDP return value 0 on prog  (id 105) dev N/A, expect packet loss!
[  175.068810][ T6035] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  175.228766][ T6035] usb 4-1: Using ep0 maxpacket: 8
[  175.238932][ T6035] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  175.243454][ T6035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.267486][ T6035] usb 4-1: Product: syz
[  175.278862][ T6035] usb 4-1: Manufacturer: syz
[  175.280905][ T6035] usb 4-1: SerialNumber: syz
[  175.292851][ T6035] usb 4-1: config 0 descriptor??
[  175.307245][ T6035] gspca_main: se401-2.14.0 probing 047d:5003
[  175.709006][ T6035] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  175.725438][ T6035] se401 4-1:0.0: probe with driver se401 failed with error -71
[  175.743257][ T6035] usb 4-1: USB disconnect, device number 10
[  176.840734][ T8865] loop3: detected capacity change from 0 to 4096
[  176.884438][ T8865] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  177.039355][ T8865] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  177.052922][ T8865] ntfs3(loop3): ino=19, mi_enum_attr
[  177.121981][ T8865] ntfs3(loop3): failed to convert "c46c" to cp857
[  177.137893][ T8865] ntfs3(loop3): ino=20, mi_enum_attr
[  177.329685][ T8863] loop1: detected capacity change from 0 to 32768
[  177.407313][ T8863] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.464121][ T8863] XFS (loop1): Ending clean mount
[  177.486046][ T8863] XFS (loop1): Quotacheck needed: Please wait.
[  177.585297][ T8863] XFS (loop1): Quotacheck: Done.
[  177.859856][ T5848] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.336488][ T8889] mmap: syz.0.1160 (8889) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  178.604110][ T8894] comedi comedi0: Minor 47 could not be opened
[  179.274516][ T8916] loop3: detected capacity change from 0 to 8
[  179.293064][ T8916] SQUASHFS error: lzo decompression failed, data probably corrupt
[  179.303931][ T8916] SQUASHFS error: Failed to read block 0x144: -5
[  179.314067][ T8916] SQUASHFS error: Unable to read metadata cache entry [142]
[  179.324207][ T8916] SQUASHFS error: Unable to read inode 0x11f
[  179.606742][ T8925] tipc: Failed to obtain node identity
[  179.622799][ T8925] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  179.980665][ T8926] loop3: detected capacity change from 0 to 32768
[  179.994760][ T8926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1177 (8926)
[  180.068214][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'.
[  180.077039][ T8926] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.086887][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'.
[  180.096999][ T8926] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  180.266409][ T8926] BTRFS info (device loop3): enabling ssd optimizations
[  180.288154][ T8926] BTRFS info (device loop3): enabling free space tree
[  180.470841][ T6378] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.504508][ T6035] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  180.702966][ T6035] usb 2-1: Using ep0 maxpacket: 8
[  180.712921][ T6035] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  180.715987][ T6035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.729942][ T6035] pvrusb2: Hardware description: Terratec Grabster AV400
[  180.732423][ T6035] pvrusb2: **********
[  180.733877][ T6035] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  180.737514][ T6035] pvrusb2: Important functionality might not be entirely working.
[  180.748058][ T6035] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  180.752726][ T6035] pvrusb2: **********
[  180.981893][ T2397] pvrusb2: Invalid write control endpoint
[  181.152391][ T6035] usb 2-1: USB disconnect, device number 13
[  181.193817][ T2397] pvrusb2: Invalid write control endpoint
[  181.215098][ T2397] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  181.235579][ T2397] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  181.254109][ T2397] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  181.278497][ T2397] pvrusb2: Device being rendered inoperable
[  181.315860][ T2397] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  181.349000][ T2397] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  181.459054][ T2397] pvrusb2: Attached sub-driver cx25840
[  181.468395][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  181.477228][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  181.724375][ T8966] loop3: detected capacity change from 0 to 32768
[  181.731896][ T8968] loop1: detected capacity change from 0 to 16
[  181.737851][ T8966] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  181.754329][ T8968] erofs (device loop1): mounted with root inode @ nid 36.
[  181.942824][ T8972] loop1: detected capacity change from 0 to 256
[  181.970205][ T8972] exfat: Deprecated parameter 'utf8'
[  181.972037][ T8972] exfat: Deprecated parameter 'utf8'
[  181.997324][ T8972] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  182.288785][ T6035] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  182.478907][ T6035] usb 4-1: Using ep0 maxpacket: 32
[  182.485487][ T6035] usb 4-1: config 0 has an invalid interface number: 136 but max is 0
[  182.490074][ T6035] usb 4-1: config 0 has no interface number 0
[  182.494691][ T6035] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df
[  182.498506][ T6035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.511472][ T6035] usb 4-1: Product: syz
[  182.513352][ T6035] usb 4-1: Manufacturer: syz
[  182.515642][ T6035] usb 4-1: SerialNumber: syz
[  182.524232][ T6035] usb 4-1: config 0 descriptor??
[  182.543507][ T6035] usb_ehset_test 4-1:0.136: probe with driver usb_ehset_test failed with error -32
[  182.675338][ T8993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1200'.
[  182.682824][ T8993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1200'.
[  182.752702][ T6035] usb 4-1: USB disconnect, device number 11
[  182.976104][ T8995] loop1: detected capacity change from 0 to 32768
[  183.131775][ T5854]  loop1: p9 p11 p16
[  183.152318][ T8995]  loop1: p9 p11 p16
[  183.303127][ T9000] loop1: detected capacity change from 0 to 2048
[  183.358997][ T9000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.437392][ T6200] udevd[6200]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory
[  183.448406][ T6179] udevd[6179]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory
[  183.453802][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory
[  183.506782][ T6179] udevd[6179]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory
[  183.517240][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory
[  183.525733][ T6200] udevd[6200]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory
[  183.636227][ T9009] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0
[  183.686106][   T33] kauditd_printk_skb: 72 callbacks suppressed
[  183.686121][   T33] audit: type=1326 audit(1757265341.357:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.3.1209" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750938ebe9 code=0x7ffc0000
[  183.764989][   T33] audit: type=1326 audit(1757265341.357:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.3.1209" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750938ebe9 code=0x7ffc0000
[  183.883088][ T9018] loop3: detected capacity change from 0 to 64
[  183.991071][ T9018] syz.3.1212: attempt to access beyond end of device
[  183.991071][ T9018] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64
[  183.996614][ T9018] Buffer I/O error on dev loop3, logical block 512, async page read
[  184.036166][ T9018] syz.3.1212: attempt to access beyond end of device
[  184.036166][ T9018] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64
[  184.064354][ T9018] Buffer I/O error on dev loop3, logical block 56576, async page read
[  185.223417][   T33] audit: type=1326 audit(1757265342.897:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.0.1224" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x0
[  186.268692][ T9079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1238'.
[  186.273050][ T9077] loop3: detected capacity change from 0 to 1024
[  186.303227][ T9077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.385293][ T6378] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.090078][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'.
[  187.368844][   T24] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  187.534940][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  187.547383][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.560916][   T24] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  187.575059][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.599240][   T24] usb 2-1: config 0 descriptor??
[  187.615754][ T9110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  187.879183][ T9110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.887311][ T9110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.117256][   T24] wacom 0003:056A:003F.0006: unbalanced collection at end of report description
[  188.133494][   T24] wacom 0003:056A:003F.0006: parse failed
[  188.135984][   T24] wacom 0003:056A:003F.0006: probe with driver wacom failed with error -22
[  188.329463][   T24] usb 2-1: USB disconnect, device number 14
[  188.754041][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1270'.
[  189.165123][ T9160] bridge0: entered promiscuous mode
[  189.177705][ T9160] bridge0: entered allmulticast mode
[  189.394338][ T9165] loop3: detected capacity change from 0 to 256
[  189.419230][ T9165] exfat: Deprecated parameter 'namecase'
[  189.447805][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'.
[  189.459104][ T9165] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d)
[  189.470735][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1276'.
[  189.733083][ T9161] loop1: detected capacity change from 0 to 32768
[  189.765087][ T9161] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1273 (9161)
[  189.899188][   T95] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  189.941010][ T9161] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  190.011127][ T9161] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  190.024391][ T9161] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  190.090976][   T95] usb 1-1: Using ep0 maxpacket: 8
[  190.114313][   T95] usb 1-1: config 0 has an invalid interface number: 94 but max is 0
[  190.118274][   T95] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[  190.134235][   T95] usb 1-1: config 0 has no interface number 0
[  190.136643][   T95] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd
[  190.148661][   T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.162474][   T95] usb 1-1: config 0 descriptor??
[  190.177015][   T95] bfusb 1-1:0.94: probe with driver bfusb failed with error -5
[  190.209288][ T9178] IPv6: sit1: Disabled Multicast RS
[  190.211448][ T9178] sit1: entered allmulticast mode
[  190.273359][ T9161] BTRFS info (device loop1): rebuilding free space tree
[  190.295883][ T9161] BTRFS info (device loop1): disabling free space tree
[  190.298233][ T9161] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  190.302987][ T9161] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  190.329951][ T9161] BTRFS info (device loop1): setting nodatasum
[  190.333403][ T9161] BTRFS info (device loop1): allowing degraded mounts
[  190.336129][ T9161] BTRFS info (device loop1): enabling disk space caching
[  190.346575][ T9161] BTRFS info (device loop1): force clearing of disk cache
[  190.349883][ T9161] BTRFS info (device loop1): force zlib compression, level 3
[  190.387841][ T9161] BTRFS error (device loop1): balance: mixed groups data and metadata options must be the same
[  190.405266][   T95] usb 1-1: USB disconnect, device number 17
[  190.447741][ T5848] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  191.338794][ T6035] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  191.506186][ T6035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.510646][ T6035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.514472][ T6035] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  191.517940][ T6035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.528073][ T6035] usb 1-1: config 0 descriptor??
[  192.164250][ T6035] usb 1-1: USB disconnect, device number 18
[  192.266128][ T9216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.462599][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1295'.
[  192.966794][ T9244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1304'.
[  193.986994][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  195.729747][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'.
[  195.745922][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'.
[  195.750341][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'.
[  195.754696][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'.
[  196.038756][ T5861] Bluetooth: hci2: command 0x0406 tx timeout
[  196.818644][    C0] sched: DL replenish lagged too much
[  199.578380][ T9278] all: renamed from lo
[  199.903000][   T95] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  200.059609][   T95] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  200.064012][   T95] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.067205][   T95] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  200.093045][   T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.112709][   T95] usb 1-1: config 0 descriptor??
[  200.131035][   T95] usb 1-1: Found UVC 0.00 device <unnamed> (10c4:ea90)
[  200.145026][   T95] usb 1-1: No valid video chain found.
[  200.331005][   T95] usb 1-1: USB disconnect, device number 19
[  200.491456][ T9271] loop1: detected capacity change from 0 to 40427
[  200.515765][ T9271] F2FS-fs (loop1): build fault injection rate: 771
[  200.587824][ T9271] F2FS-fs (loop1): invalid crc value
[  201.345139][ T9271] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  202.253348][ T5238] Bluetooth: hci2: unexpected event 0x14 length: 20 > 6
[  202.849029][   T95] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  203.063823][   T95] usb 2-1: Using ep0 maxpacket: 32
[  203.092766][   T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.129305][   T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.160768][   T95] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  203.196772][   T95] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.297073][   T95] usb 2-1: config 0 descriptor??
[  204.573085][   T95] uclogic 0003:28BD:0042.0008: interface is invalid, ignoring
[  204.775265][   T95] usb 2-1: USB disconnect, device number 15
[  204.945782][ T9376] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.779807][ T9390] loop1: detected capacity change from 0 to 32768
[  206.956646][ T9390] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.046844][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:1' failed: Read-only file system
[  207.067992][ T9390] XFS (loop1): Ending clean mount
[  207.130377][ T9390] XFS (loop1): Quotacheck needed: Please wait.
[  207.244246][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:1' failed: Read-only file system
[  207.330084][ T9390] XFS (loop1): Quotacheck: Done.
[  207.693120][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  208.397733][ T9413] Bluetooth: MGMT ver 1.23
[  208.508159][ T9415] loop3: detected capacity change from 0 to 512
[  208.531053][ T9284] udevd[9284]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  208.563768][ T9415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.568091][ T9415] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  208.586686][ T9284] udevd[9284]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  208.740721][ T9422] tipc: Started in network mode
[  208.744971][ T9422] tipc: Node identity 4, cluster identity 4711
[  208.747145][ T9422] tipc: Node number set to 4
[  208.992564][ T6378] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.082876][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.087252][ T9428] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.397518][ T9439] loop1: detected capacity change from 0 to 1764
[  211.567223][ T5861] Bluetooth: hci1: command 0x0406 tx timeout
[  212.798238][ T9474] loop3: detected capacity change from 0 to 1024
[  212.823429][ T9284] udevd[9284]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system
[  212.871941][   T33] audit: type=1800 audit(1757265370.537:160): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1391" name="file1" dev="loop3" ino=20 res=0 errno=0
[  212.879976][ T9284] udevd[9284]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system
[  212.989864][ T9474] loop3: detected capacity change from 1024 to 0
[  213.627818][ T9497] loop1: detected capacity change from 0 to 8192
[  213.700024][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-uuid/1DE1-D756.tmp-b7:1' failed: Read-only file system
[  213.786738][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-uuid/1DE1-D756.tmp-b7:1' failed: Read-only file system
[  213.835454][ T9497] FAT-fs (loop1): error, clusters badly computed (2 != 1)
[  213.858303][ T9497] FAT-fs (loop1): Filesystem has been set read-only
[  214.439469][ T9510] loop1: detected capacity change from 0 to 512
[  214.472349][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  214.505628][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  214.562759][ T9510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.567720][ T9510] ext4 filesystem being mounted at /533/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  214.580750][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  214.586758][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  214.591002][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  214.594578][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  214.597269][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  214.643122][ T9510] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1409: corrupted inode contents
[  214.652995][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'.
[  214.664864][ T9510] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1409: mark_inode_dirty error
[  214.673569][ T9510] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1409: corrupted inode contents
[  214.745206][ T9520] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1409: corrupted inode contents
[  214.790048][ T9520] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1409: mark_inode_dirty error
[  214.814642][ T9520] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1409: corrupted inode contents
[  214.830596][ T9522] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.1413'.
[  214.837806][ T9520] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1409: mark_inode_dirty error
[  214.869614][ T9520] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1409: corrupted inode contents
[  214.874935][ T9520] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1409: mark_inode_dirty error
[  214.963599][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.003058][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'.
[  215.135041][ T9515] chnl_net:caif_netlink_parms(): no params data found
[  215.430268][ T9539] loop1: detected capacity change from 0 to 40427
[  215.437921][ T9539] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  215.441329][ T9539] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  215.482715][ T9539] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  215.494690][ T9539] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  215.498105][ T9539] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  215.514094][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  215.561472][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  215.627778][ T9515] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.634733][ T9515] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.637313][ T9515] bridge_slave_0: entered allmulticast mode
[  215.641665][ T9515] bridge_slave_0: entered promiscuous mode
[  215.695949][ T9539] syz.1.1419: attempt to access beyond end of device
[  215.695949][ T9539] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  215.732235][ T9539] syz.1.1419: attempt to access beyond end of device
[  215.732235][ T9539] loop1: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[  215.738988][ T9539] syz.1.1419: attempt to access beyond end of device
[  215.738988][ T9539] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  215.783681][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.786283][ T9515] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.789131][ T9515] bridge_slave_1: entered allmulticast mode
[  215.791948][ T9515] bridge_slave_1: entered promiscuous mode
[  215.870696][ T9515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.876327][ T9515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.012210][ T9515] team0: Port device team_slave_0 added
[  216.028304][ T9515] team0: Port device team_slave_1 added
[  216.148424][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.154524][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.169094][ T9515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.189021][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.198761][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.233998][ T9515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.383095][ T9515] hsr_slave_0: entered promiscuous mode
[  216.392243][ T9515] hsr_slave_1: entered promiscuous mode
[  216.397172][ T9515] debugfs: 'hsr0' already exists in 'hsr'
[  216.402635][ T9515] Cannot create hsr debugfs directory
[  216.678678][ T5861] Bluetooth: hci1: command tx timeout
[  216.760113][ T9515] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  216.783054][ T9515] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  216.796680][ T9515] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  216.800734][ T9551] loop1: detected capacity change from 0 to 32768
[  216.844006][ T9515] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  216.857117][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-uuid/ed37bf6e-74ea-4e01-afba-5fee274b0f3a.tmp-b7:1' failed: Read-only file system
[  216.892392][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-uuid/ed37bf6e-74ea-4e01-afba-5fee274b0f3a.tmp-b7:1' failed: Read-only file system
[  216.950593][ T9551] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  216.992070][ T9551] XFS (loop1): Ending clean mount
[  217.003099][ T9551] XFS (loop1): Quotacheck needed: Please wait.
[  217.015706][ T9515] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.044108][ T1099] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1807 dinode
[  217.047933][ T1099] XFS (loop1): Unmount and run xfs_repair
[  217.061274][ T1099] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  217.072115][ T1099] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  217.082847][ T9515] 8021q: adding VLAN 0 to HW filter on device team0
[  217.085917][ T1099] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  217.096268][ T1099] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[  217.105825][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.108668][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.112914][ T1099] 00000030: 34 f7 58 68 a5 a5 b6 11 7c 0b 00 00 00 00 00 00  4.Xh....|.......
[  217.116181][ T1099] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01  ................
[  217.135394][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.138274][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.146465][ T1099] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 bb 36 00 a5  .............6..
[  217.156340][ T1099] 00000060: ff ff ff ff 8c da 54 79 00 00 00 00 00 00 00 06  ......Ty........
[  217.173547][ T1099] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  217.223945][ T9551] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  217.357640][ T5848] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  217.402560][ T5848] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  217.512880][ T9515] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.198513][ T9589] loop1: detected capacity change from 0 to 16
[  218.374750][ T9589] erofs (device loop1): mounted with root inode @ nid 36.
[  218.392815][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:1' failed: Read-only file system
[  218.668404][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:1' failed: Read-only file system
[  218.843209][ T5861] Bluetooth: hci1: command tx timeout
[  218.936636][ T9515] veth0_vlan: entered promiscuous mode
[  218.959184][ T9515] veth1_vlan: entered promiscuous mode
[  219.021302][ T9515] veth0_macvtap: entered promiscuous mode
[  219.030146][ T9515] veth1_macvtap: entered promiscuous mode
[  219.053528][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.087316][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.126499][ T5915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.137376][ T5915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.170588][ T5915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.185315][ T5915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.929059][ T5861] Bluetooth: hci1: command tx timeout
[  221.612298][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.615177][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.635494][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.640575][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.998996][ T5861] Bluetooth: hci1: command tx timeout
[  223.556023][ T9621] loop1: detected capacity change from 0 to 64
[  223.665634][ T9621] minix_free_block (loop1:1): bit already cleared
[  223.684857][ T9621] minix_free_block (loop1:4): bit already cleared
[  223.695495][ T9621] minix_free_block (loop1:3): bit already cleared
[  223.698233][ T9621] minix_free_block (loop1:2): bit already cleared
[  223.722052][ T9621] minix_free_block (loop1:1): bit already cleared
[  224.548737][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  224.562846][ T9641] loop1: detected capacity change from 0 to 128
[  224.614672][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:1' failed: Read-only file system
[  224.661299][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:1' failed: Read-only file system
[  224.727941][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.742004][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.766924][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  224.807712][   T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  224.822838][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.849530][   T24] usb 5-1: config 0 descriptor??
[  224.927607][ T9643] loop1: detected capacity change from 0 to 2048
[  224.991456][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  225.027074][ T9643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.204502][ T9643] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1449: bg 0: block 234: padding at end of block bitmap is not set
[  225.229942][ T9643] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117
[  225.251939][ T9643] EXT4-fs (loop1): This should not happen!! Data will be lost
[  225.251939][ T9643] 
[  225.355813][   T24] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  225.382762][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.494520][   T24] usb 5-1: USB disconnect, device number 2
[  226.196834][ T9659] overlayfs: statfs failed on './file0'
[  232.286499][ T9720] loop4: detected capacity change from 0 to 128
[  232.322733][ T9720] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  232.375704][ T9720] hpfs: hpfs_map_sector(): read error
[  233.087153][ T9732] loop1: detected capacity change from 0 to 4096
[  233.157392][ T9732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.195214][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  233.269646][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  233.340368][ T9738] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1490'.
[  233.357777][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.120857][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1498'.
[  234.443896][ T9766] loop1: detected capacity change from 0 to 256
[  234.455843][ T9766] exfat: Deprecated parameter 'utf8'
[  234.502826][ T9766] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  235.379726][ T9785] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1513'.
[  237.486492][ T9799] loop4: detected capacity change from 0 to 2048
[  237.500627][ T9799] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  237.527703][ T9799] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  237.541227][ T9799] UDF-fs: Scanning with blocksize 512 failed
[  237.556516][ T9799] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  237.566941][ T9799] UDF-fs: Scanning with blocksize 1024 failed
[  237.578777][ T9799] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  237.587201][ T9799] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  237.596343][ T9799] UDF-fs: Scanning with blocksize 2048 failed
[  237.605353][ T9799] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  237.620339][ T9799] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  237.628340][ T9799] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  237.637039][ T9799] UDF-fs: Scanning with blocksize 4096 failed
[  237.645336][ T9799] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  238.013622][ T9806] 9pnet_virtio: no channels available for device syz
[  239.071531][ T9831] loop1: detected capacity change from 0 to 1024
[  239.122114][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:1' failed: Read-only file system
[  239.141650][ T9831] hfsplus: failed to load root directory
[  239.336674][ T9833] loop1: detected capacity change from 0 to 8
[  239.783039][ T9829] loop4: detected capacity change from 0 to 32768
[  239.818926][ T9829] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1533 (9829)
[  239.912621][ T9637] udevd[9637]: symlink '../../loop4' '/dev/disk/by-uuid/14d642db-7b15-43e4-81e6-4b8fac6a25f8.tmp-b7:4' failed: Read-only file system
[  239.928404][ T9829] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  239.943647][ T9829] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  240.185383][ T9829] BTRFS info (device loop4): enabling ssd optimizations
[  240.188295][ T9829] BTRFS info (device loop4): enabling free space tree
[  240.292973][   T33] audit: type=1800 audit(1757265397.967:161): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1533" name="file1" dev="loop4" ino=260 res=0 errno=0
[  240.485166][ T9515] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  242.209737][ T9877] loop1: detected capacity change from 0 to 1024
[  242.243307][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  242.252207][ T9877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.283699][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  243.685485][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.778433][ T9888] loop4: detected capacity change from 0 to 32768
[  243.796389][ T9896] loop1: detected capacity change from 0 to 1024
[  243.828272][ T9888] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  243.844485][ T9284] udevd[9284]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system
[  243.860157][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  243.871102][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:1' failed: Read-only file system
[  243.880397][ T9284] udevd[9284]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system
[  243.897097][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  243.904729][ T9896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  243.913539][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:1' failed: Read-only file system
[  243.923050][ T9896] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.940466][   T33] audit: type=1800 audit(1757265401.617:162): pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1556" name="file1" dev="loop1" ino=15 res=0 errno=0
[  243.954191][ T9896] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.1556: lblock 0 mapped to illegal pblock 0 (length 1)
[  243.967656][ T9896] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  243.975160][ T9896] EXT4-fs (loop1): This should not happen!! Data will be lost
[  243.975160][ T9896] 
[  243.993663][   T33] audit: type=1800 audit(1757265401.667:163): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1552" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  244.099296][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  244.145827][ T9888] syz.4.1552 (9888) used greatest stack depth: 18984 bytes left
[  244.354483][ T9515] ocfs2: Unmounting device (7,4) on (node local)
[  244.424729][ T9908] ubi31: attaching mtd0
[  244.429596][ T9908] ubi31: scanning is finished
[  244.431106][ T9908] ubi31: empty MTD device detected
[  245.034767][ T5861] Bluetooth: hci1: unexpected cc 0x0402 length: 4 > 1
[  245.139021][ T9920] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  245.158351][ T9920] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  245.402945][ T9908] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  246.818787][ T9953] loop4: detected capacity change from 0 to 40427
[  246.824514][ T9953] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  246.833086][ T9953] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  246.843140][ T9953] F2FS-fs (loop4): invalid crc value
[  246.846111][ T9637] udevd[9637]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  246.887528][ T9953] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  246.894816][ T9953] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  246.897322][ T9953] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  247.365782][ T9959] io-wq is not configured for unbound workers
[  247.482791][ T9961] loop1: detected capacity change from 0 to 16
[  247.514059][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:1' failed: Read-only file system
[  247.519909][ T9961] erofs (device loop1): mounted with root inode @ nid 36.
[  247.529901][ T9961] erofs (device loop1): per-inode big pcluster without sb feature for nid 36
[  247.542022][ T9961] erofs (device loop1): per-inode big pcluster without sb feature for nid 36
[  247.571912][ T9961] erofs (device loop1): readahead error at folio 7 @ nid 36
[  247.574883][ T9961] erofs (device loop1): per-inode big pcluster without sb feature for nid 36
[  247.578445][ T9961] erofs (device loop1): readahead error at folio 6 @ nid 36
[  247.605009][ T9961] erofs (device loop1): per-inode big pcluster without sb feature for nid 36
[  247.636202][ T9961] erofs (device loop1): readahead error at folio 5 @ nid 36
[  247.653592][ T9961] erofs (device loop1): per-inode big pcluster without sb feature for nid 36
[  247.680211][ T9961] erofs (device loop1): readahead error at folio 4 @ nid 36
[  247.687549][ T9961] erofs (device loop1): per-inode big pcluster without sb feature for nid 36
[  247.698742][ T9961] erofs (device loop1): readahead error at folio 3 @ nid 36
[  247.701845][ T9961] erofs (device loop1): per-inode big pcluster without sb feature for nid 36
[  247.715933][ T9961] erofs (device loop1): readahead error at folio 2 @ nid 36
[  247.721646][ T9961] erofs (device loop1): per-inode big pcluster without sb feature for nid 36
[  247.732258][ T9961] erofs (device loop1): readahead error at folio 1 @ nid 36
[  247.741506][ T9961] erofs (device loop1): per-inode big pcluster without sb feature for nid 36
[  247.753740][ T9961] erofs (device loop1): readahead error at folio 0 @ nid 36
[  247.764142][ T9961] erofs (device loop1): per-inode big pcluster without sb feature for nid 36
[  247.773465][ T9961] erofs (device loop1): per-inode big pcluster without sb feature for nid 36
[  247.787283][ T9961] erofs (device loop1): read error -117 @ 0 of nid 36
[  247.798207][ T9961] erofs (device loop1): failed to readdir of logical block 0 of nid 36
[  247.908994][ T6035] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  247.955459][ T9973] loop1: detected capacity change from 0 to 1024
[  247.995306][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system
[  248.034946][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:1' failed: Read-only file system
[  248.061815][ T6035] usb 5-1: Using ep0 maxpacket: 8
[  248.073566][ T6035] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  248.077360][ T6035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.106291][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system
[  248.136748][ T6035] pvrusb2: Hardware description: Terratec Grabster AV400
[  248.151742][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:1' failed: Read-only file system
[  248.170638][ T6035] pvrusb2: **********
[  248.174836][   T27] hfsplus: b-tree write err: -5, ino 4
[  248.177716][ T6035] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  248.204496][ T6035] pvrusb2: Important functionality might not be entirely working.
[  248.207834][ T6035] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  248.259471][ T6035] pvrusb2: **********
[  248.402006][ T2397] pvrusb2: Invalid write control endpoint
[  248.623814][ T5901] usb 5-1: USB disconnect, device number 3
[  248.650897][ T2397] pvrusb2: Invalid write control endpoint
[  248.653356][ T2397] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  248.657281][ T2397] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  248.677354][ T2397] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  248.767889][ T2397] pvrusb2: Device being rendered inoperable
[  248.783248][ T2397] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  248.786331][ T2397] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  248.809922][ T2397] pvrusb2: Attached sub-driver cx25840
[  248.828117][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  248.840513][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  248.888786][ T6035] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  249.061491][ T6035] usb 1-1: Using ep0 maxpacket: 16
[  249.077049][ T6035] usb 1-1: config 254 has an invalid interface number: 235 but max is 0
[  249.087876][ T6035] usb 1-1: config 254 has no interface number 0
[  249.096847][ T6035] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  249.113368][ T6035] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  249.125382][ T6035] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  249.134744][ T6035] usb 1-1: config 254 interface 235 has no altsetting 0
[  249.147260][ T6035] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  249.162874][ T6035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.166335][ T6035] usb 1-1: Product: syz
[  249.196848][ T6035] usb 1-1: Manufacturer: syz
[  249.204299][ T6035] usb 1-1: SerialNumber: syz
[  249.234117][ T9986] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  249.526401][ T6035] usbtest 1-1:254.235: couldn't get endpoints, -71
[  249.534079][ T6035] usbtest 1-1:254.235: probe with driver usbtest failed with error -71
[  249.556101][ T6035] usb 1-1: USB disconnect, device number 20
[  249.618414][ T9983] syz.1.1591 (9983): drop_caches: 2
[  250.847745][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'.
[  251.219841][T10019] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1605'.
[  251.468857][ T5901] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  251.515462][T10026] loop4: detected capacity change from 0 to 512
[  251.530566][ T9637] udevd[9637]: symlink '../../loop4' '/dev/disk/by-label/\x86\x5b.tmp-b7:4' failed: Read-only file system
[  251.579840][T10026] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  251.583300][T10026] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  251.595254][T10026] EXT4-fs (loop4): 1 truncate cleaned up
[  251.598267][T10026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.613733][T10026] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  251.651899][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  251.655931][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.666506][ T5901] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  251.678594][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.683329][ T5901] usb 2-1: config 0 descriptor??
[  251.788447][ T9515] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.100579][ T5901] bigben 0003:146B:0902.000A: unexpected rdesc, please submit for review
[  252.125929][ T5901] bigben 0003:146B:0902.000A: unbalanced collection at end of report description
[  252.157083][ T5901] bigben 0003:146B:0902.000A: parse failed
[  252.173806][ T5901] bigben 0003:146B:0902.000A: probe with driver bigben failed with error -22
[  252.232481][T10038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.302625][   T95] usb 2-1: USB disconnect, device number 16
[  252.324602][T10042] IPv6: addrconf: prefix option has invalid lifetime
[  252.447056][T10046] option changes via remount are deprecated (pid=10045 comm=syz.4.1618)
[  252.528783][ T5901] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  252.678907][ T5901] usb 1-1: Using ep0 maxpacket: 32
[  252.690035][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.694655][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.701181][ T5901] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  252.704835][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.710636][ T5901] usb 1-1: config 0 descriptor??
[  252.720232][   T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  252.891254][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  252.895556][   T24] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  252.937901][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.955550][   T24] usb 5-1: config 0 descriptor??
[  252.982583][   T24] smsusb:smsusb_probe: board id=8, interface number 0
[  253.013311][   T24] smsusb:smsusb_probe: Device initialized with return code -19
[  253.156954][ T5901] ft260 0003:0403:6030.000B: unknown main item tag 0x7
[  253.193757][   T24] usb 5-1: USB disconnect, device number 4
[  253.351809][ T5901] ft260 0003:0403:6030.000B: chip code: 6424 8183
[  253.555833][ T5901] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  253.762193][ T5901] ft260 0003:0403:6030.000B: failed to retrieve status: -71, no wakeup
[  253.781334][ T5901] ft260 0003:0403:6030.000B: failed to retrieve status: -71
[  253.794167][ T5901] ft260 0003:0403:6030.000B: failed to reset I2C controller: -71
[  253.837452][T10057] loop1: detected capacity change from 0 to 32768
[  253.839837][ T5901] usb 1-1: USB disconnect, device number 21
[  253.911668][T10057] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  253.960167][T10057] XFS (loop1): Ending clean mount
[  253.992817][ T9284] udevd[9284]: symlink '../../loop1' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:1' failed: Read-only file system
[  254.105906][ T5848] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  254.120841][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:1' failed: Read-only file system
[  254.444724][T10075] sctp: [Deprecated]: syz.0.1629 (pid 10075) Use of int in max_burst socket option deprecated.
[  254.444724][T10075] Use struct sctp_assoc_value instead
[  254.860582][T10089] kAFS: No cell specified
[  255.403039][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.488898][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  255.653839][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.661890][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.670967][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  255.685580][   T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  255.700817][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.706918][   T24] usb 5-1: config 0 descriptor??
[  256.166566][   T24] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  256.242202][T10119] loop1: detected capacity change from 0 to 512
[  256.257742][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  256.279471][T10119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.294312][T10119] ext4 filesystem being mounted at /601/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.352155][   T24] usb 5-1: USB disconnect, device number 5
[  256.400041][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.938708][   T33] audit: type=1326 audit(1757265415.607:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.1.1670" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44da18ebe9 code=0x0
[  258.128961][T10169] netlink: 'syz.1.1672': attribute type 12 has an invalid length.
[  258.132266][T10169] netlink: 'syz.1.1672': attribute type 29 has an invalid length.
[  258.134728][T10169] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1672'.
[  258.138272][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'.
[  258.495377][T10180] batadv_slave_0: entered promiscuous mode
[  258.526653][T10180] batadv_slave_0: left promiscuous mode
[  258.827494][T10192] loop1: detected capacity change from 0 to 1024
[  258.918028][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system
[  258.952189][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:1' failed: Read-only file system
[  259.007809][T10194] loop4: detected capacity change from 0 to 4096
[  259.057007][T10194] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  259.120180][ T9284] udevd[9284]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  259.154797][T10194] ntfs3(loop4): ino=1a, mi_enum_attr
[  259.157303][T10194] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  259.165320][ T9284] udevd[9284]: symlink '../../loop4' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:4' failed: Read-only file system
[  259.196278][ T9637] udevd[9637]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  259.232200][ T9637] udevd[9637]: symlink '../../loop4' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:4' failed: Read-only file system
[  259.343449][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'.
[  259.858801][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  260.018806][   T24] usb 5-1: Using ep0 maxpacket: 16
[  260.028048][   T24] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  260.040789][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.054423][   T24] usb 5-1: Product: syz
[  260.066513][   T24] usb 5-1: Manufacturer: syz
[  260.081060][   T24] usb 5-1: SerialNumber: syz
[  260.088311][   T24] usb 5-1: config 0 descriptor??
[  260.332185][   T24] speedtch 5-1:0.0: speedtch_bind: wrong device class 68
[  260.349301][   T24] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  260.372206][   T24] usb 5-1: USB disconnect, device number 6
[  260.763667][T10209] loop1: detected capacity change from 0 to 512
[  260.788181][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  260.819220][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  260.876151][T10209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.908715][T10209] ext4 filesystem being mounted at /617/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.994620][T10214] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  261.047897][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.510182][T10226] loop1: detected capacity change from 0 to 512
[  261.564545][T10226] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  262.434627][T10243] loop1: detected capacity change from 0 to 512
[  262.453523][ T9637] udevd[9637]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  262.469514][T10243] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1705: Unrecognised inode hash code 255
[  262.485535][T10243] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1705: Corrupt directory, running e2fsck is recommended
[  262.513536][T10243] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  262.523318][T10243] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1705: corrupted in-inode xattr: invalid ea_ino
[  262.541086][T10243] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1705: couldn't read orphan inode 15 (err -117)
[  262.552220][T10243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.575056][T10243] EXT4-fs (loop1): shut down requested (1)
[  262.649084][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.007792][T10270] loop1: detected capacity change from 0 to 32768
[  269.323982][T10270] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,promote_target=invalid device 15,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  269.324002][T10270]   allowing incompatible features above 0.0: (unknown version)
[  269.324009][T10270]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  269.382855][T10270] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  269.386810][T10270] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  269.407681][T10270] bcachefs (loop1): Version upgrade required:
[  269.407681][T10270] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  269.407681][T10270] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  269.407681][T10270]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  269.590384][T10270] bcachefs (loop1): dropping and reconstructing all alloc info
[  269.620952][T10270] bcachefs (loop1): accounting_read... done
[  269.639409][T10270] bcachefs (loop1): alloc_read... done
[  269.642006][T10270] bcachefs (loop1): snapshots_read... done
[  269.646731][T10270] bcachefs (loop1): done starting filesystem
[  270.045030][ T5848] bcachefs (loop1): shutting down
[  270.096327][ T5848] bcachefs (loop1): shutdown complete
[  271.127875][T10320] lo speed is unknown, defaulting to 1000
[  273.498887][ T5901] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  273.605377][T10320] lo speed is unknown, defaulting to 1000
[  273.609932][T10320] lo speed is unknown, defaulting to 1000
[  273.619260][T10320] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  273.630112][T10320] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  273.665009][T10320] lo speed is unknown, defaulting to 1000
[  273.669144][T10320] lo speed is unknown, defaulting to 1000
[  273.672594][T10320] lo speed is unknown, defaulting to 1000
[  273.676281][T10320] lo speed is unknown, defaulting to 1000
[  273.732066][ T5901] usb 1-1: config 0 has an invalid interface number: 10 but max is 0
[  273.735548][ T5901] usb 1-1: config 0 has no interface number 0
[  273.742306][ T5901] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=1d.a7
[  273.746132][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.752149][ T5901] usb 1-1: Product: syz
[  273.753934][ T5901] usb 1-1: Manufacturer: syz
[  273.756086][ T5901] usb 1-1: SerialNumber: syz
[  273.765502][ T5901] usb 1-1: config 0 descriptor??
[  273.776110][ T5901] usb 1-1: Expected 3 endpoints, found: 0
[  274.026732][ T5901] usb 1-1: USB disconnect, device number 22
[  278.762763][T10392] loop1: detected capacity change from 0 to 4096
[  278.802812][T10385] udevd[10385]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  278.821336][T10385] udevd[10385]: symlink '../../loop1' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:1' failed: Read-only file system
[  278.847474][T10385] udevd[10385]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  278.853319][T10385] udevd[10385]: symlink '../../loop1' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:1' failed: Read-only file system
[  279.562346][T10409] loop1: detected capacity change from 0 to 512
[  279.575699][T10409] EXT4-fs: Ignoring removed mblk_io_submit option
[  279.587278][T10385] udevd[10385]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  279.594149][T10409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  279.607062][T10409] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal
[  279.741420][T10415] syzkaller1: entered allmulticast mode
[  280.159701][ T5901] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  280.176415][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1781'.
[  280.469385][ T5901] usb 1-1: Using ep0 maxpacket: 8
[  280.481369][ T5901] usb 1-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=ff.7b
[  280.485604][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.491903][ T5901] usb 1-1: Product: syz
[  280.493758][ T5901] usb 1-1: Manufacturer: syz
[  280.495758][ T5901] usb 1-1: SerialNumber: syz
[  280.509628][ T5901] usb 1-1: config 0 descriptor??
[  280.516045][ T5901] upd78f0730 1-1:0.0: upd78f0730 converter detected
[  280.531778][ T5901] usb 1-1: upd78f0730 converter now attached to ttyUSB0
[  280.744759][ T5901] usb 1-1: USB disconnect, device number 23
[  280.764199][ T5901] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  280.775686][ T5901] upd78f0730 1-1:0.0: device disconnected
[  280.788824][T10441] loop1: detected capacity change from 0 to 764
[  280.837344][T10385] udevd[10385]: symlink '../../loop1' '/dev/disk/by-label/CDROM.tmp-b7:1' failed: Read-only file system
[  280.860451][T10385] udevd[10385]: symlink '../../loop1' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:1' failed: Read-only file system
[  280.913652][T10423] udevd[10423]: symlink '../../loop1' '/dev/disk/by-label/CDROM.tmp-b7:1' failed: Read-only file system
[  280.922730][T10423] udevd[10423]: symlink '../../loop1' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:1' failed: Read-only file system
[  281.639440][ T5861] Bluetooth: hci1: command tx timeout
[  282.561454][T10484] loop1: detected capacity change from 0 to 512
[  282.602335][T10484] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002]
[  282.606296][T10423] udevd[10423]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  282.616360][T10484] System zones: 0-7
[  282.630309][T10484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.661798][   T33] audit: type=1326 audit(1757265441.337:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.0.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7ffc0000
[  283.687565][   T33] audit: type=1326 audit(1757265441.347:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.0.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f714398ebe9 code=0x7ffc0000
[  283.717825][   T33] audit: type=1326 audit(1757265441.347:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.0.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7ffc0000
[  283.741720][   T33] audit: type=1326 audit(1757265441.347:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10515 comm="syz.0.1818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7ffc0000
[  283.833314][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'.
[  283.836462][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'.
[  283.842166][T10526] netlink: 'syz.0.1823': attribute type 12 has an invalid length.
[  288.710108][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.536858][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1847'.
[  291.549321][   T95] usb 1-1: new low-speed USB device number 24 using dummy_hcd
[  291.670042][   T33] audit: type=1326 audit(1757265449.347:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.4.1863" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f349ad8ebe9 code=0x0
[  291.701115][   T95] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  291.705090][   T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.723239][   T95] usb 1-1: config 0 descriptor??
[  293.615210][   T95] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  293.620388][   T95] asix 1-1:0.0: probe with driver asix failed with error -71
[  293.628503][   T95] usb 1-1: USB disconnect, device number 24
[  294.901133][T10647] xt_policy: neither incoming nor outgoing policy selected
[  296.875526][T10666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1883'.
[  296.937001][T10669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1884'.
[  297.017943][T10671] netlink: 868 bytes leftover after parsing attributes in process `syz.4.1885'.
[  297.546029][T10677] loop1: detected capacity change from 0 to 40427
[  297.599064][T10677] F2FS-fs (loop1): invalid crc value
[  297.666587][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  297.772517][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  297.807762][T10677] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  297.831263][T10677] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  297.906225][ T5848] syz-executor: attempt to access beyond end of device
[  297.906225][ T5848] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  297.917635][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  297.917661][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  297.917672][ T5848] Call Trace:
[  297.917679][ T5848]  <TASK>
[  297.917686][ T5848]  dump_stack_lvl+0x189/0x250
[  297.917714][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  297.917740][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[  297.917754][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  297.917773][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  297.917799][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[  297.917826][ T5848]  f2fs_write_end_io+0x886/0xb60
[  297.917854][ T5848]  __submit_merged_bio+0x27a/0x6a0
[  297.917911][ T5848]  __submit_merged_write_cond+0x255/0x530
[  297.917936][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[  297.917953][ T5848]  ? __lock_acquire+0xab9/0xd20
[  297.917998][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.918052][ T5848]  ? __mod_zone_page_state+0xd7/0x140
[  297.918079][ T5848]  ? folios_put_refs+0x560/0x640
[  297.918104][ T5848]  ? __lock_acquire+0xab9/0xd20
[  297.918128][ T5848]  ? do_raw_spin_lock+0x121/0x290
[  297.918152][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  297.918167][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.918185][ T5848]  do_writepages+0x32e/0x550
[  297.918211][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  297.918228][ T5848]  filemap_fdatawrite+0x199/0x240
[  297.918245][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  297.918300][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  297.918318][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[  297.918344][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[  297.918378][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  297.918430][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[  297.918449][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[  297.918467][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[  297.918476][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[  297.918500][ T5848]  ? shrinker_free+0x2ce/0x3e0
[  297.918516][ T5848]  deactivate_locked_super+0xbc/0x130
[  297.918556][ T5848]  cleanup_mnt+0x425/0x4c0
[  297.918573][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.918592][ T5848]  task_work_run+0x1d4/0x260
[  297.918612][ T5848]  ? __pfx_task_work_run+0x10/0x10
[  297.918625][ T5848]  ? __x64_sys_umount+0x122/0x160
[  297.918645][ T5848]  ? exit_to_user_mode_loop+0x40/0x110
[  297.918667][ T5848]  exit_to_user_mode_loop+0xec/0x110
[  297.918684][ T5848]  do_syscall_64+0x2bd/0x3b0
[  297.918695][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.918712][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.918729][ T5848]  ? exc_page_fault+0x9f/0xf0
[  297.918749][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.918760][ T5848] RIP: 0033:0x7f44da18ff17
[  297.918775][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  297.918786][ T5848] RSP: 002b:00007ffef6d09778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  297.918802][ T5848] RAX: 0000000000000000 RBX: 00007f44da211c05 RCX: 00007f44da18ff17
[  297.918810][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef6d09830
[  297.918817][ T5848] RBP: 00007ffef6d09830 R08: 0000000000000000 R09: 0000000000000000
[  297.918824][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef6d0a8c0
[  297.918832][ T5848] R13: 00007f44da211c05 R14: 0000000000048b20 R15: 00007ffef6d0a900
[  297.918856][ T5848]  </TASK>
[  298.314158][ T5848] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  298.619714][T10697] overlay: ./file0 is not a directory
[  299.385580][T10700] macvlan0: entered promiscuous mode
[  299.391711][T10700] netlink: 'syz.4.1897': attribute type 1 has an invalid length.
[  299.395131][T10700] netlink: 'syz.4.1897': attribute type 2 has an invalid length.
[  299.734447][T10715] netlink: 'syz.4.1903': attribute type 10 has an invalid length.
[  299.737486][T10715] macvlan0: entered allmulticast mode
[  299.748293][T10715] veth1_vlan: entered allmulticast mode
[  299.763052][T10715] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  301.655893][T10755] netlink: 'syz.0.1920': attribute type 1 has an invalid length.
[  301.691501][T10755] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.843719][T10757] bond0: (slave gretap1): making interface the new active one
[  301.851733][T10757] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  303.114772][T10794] loop1: detected capacity change from 0 to 128
[  303.170336][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system
[  303.213541][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:1' failed: Read-only file system
[  303.444305][T10802] loop1: detected capacity change from 0 to 4096
[  303.499752][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  303.510674][T10802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.563362][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  303.587349][T10802] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  303.798996][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.646997][T10833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1953'.
[  306.659167][T10833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1953'.
[  307.179156][   T95] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  307.254790][T10855] loop1: detected capacity change from 0 to 4096
[  307.264311][T10855] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  307.278700][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  307.286992][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:1' failed: Read-only file system
[  307.385217][   T95] usb 1-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41
[  307.400382][   T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.404417][   T95] usb 1-1: Product: syz
[  307.407572][   T95] usb 1-1: Manufacturer: syz
[  307.422983][   T95] usb 1-1: SerialNumber: syz
[  307.476579][   T95] usb 1-1: config 0 descriptor??
[  307.535290][   T95] gspca_main: kinect-2.14.0 probing 045e:02bf
[  307.761833][   T95] usb 1-1: USB disconnect, device number 25
[  310.110331][T10904] loop1: detected capacity change from 0 to 8
[  310.135710][T10904] SQUASHFS error: lzo decompression failed, data probably corrupt
[  310.151473][T10904] SQUASHFS error: Failed to read block 0x91: -5
[  310.154143][T10904] SQUASHFS error: Unable to read metadata cache entry [8f]
[  310.175691][T10904] SQUASHFS error: Unable to read inode 0x11f
[  310.259133][   T24] usb 1-1: new low-speed USB device number 26 using dummy_hcd
[  310.425289][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  310.436036][T10911] loop1: detected capacity change from 0 to 4096
[  310.449729][T10911] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  310.463157][   T24] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  310.469883][   T24] usb 1-1: config 0 has no interface number 0
[  310.481994][   T24] usb 1-1: config 0 interface 105 altsetting 10 endpoint 0xE is Bulk; changing to Interrupt
[  310.491018][   T24] usb 1-1: config 0 interface 105 has no altsetting 0
[  310.515416][T10911] ntfs3(loop1): $Secure::$SII is corrupted.
[  310.525784][T10911] ntfs3(loop1): Failed to initialize $Secure (-22).
[  310.612676][   T24] usb 1-1: string descriptor 0 read error: -22
[  310.618022][   T24] usb 1-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  310.635070][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.654297][   T24] usb 1-1: config 0 descriptor??
[  310.664516][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  310.689244][T10901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  310.694698][   T24] usb 1-1: Found UVC 0.00 device <unnamed> (1943:2250)
[  310.702530][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:1' failed: Read-only file system
[  310.710071][   T24] usb 1-1: No valid video chain found.
[  310.717463][   T24] go7007 1-1:0.105: Sensoray 2250 found
[  310.728272][   T24] go7007 1-1:0.105: probe with driver go7007 failed with error -12
[  310.916688][   T24] usb 1-1: USB disconnect, device number 26
[  311.017769][T10928] tc_dump_action: action bad kind
[  313.458729][ T6035] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  313.491546][   T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  313.834933][ T6035] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  313.845704][ T6035] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  313.850813][ T6035] usb 1-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df
[  313.854448][ T6035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.862232][ T6035] usb 1-1: config 0 descriptor??
[  313.871581][ T6035] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected.
[  313.888719][   T24] usb 2-1: Using ep0 maxpacket: 8
[  313.897118][   T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  313.909453][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.918172][   T24] usb 2-1: Product: syz
[  313.924711][   T24] usb 2-1: Manufacturer: syz
[  313.926351][   T24] usb 2-1: SerialNumber: syz
[  313.940704][   T24] usb 2-1: config 0 descriptor??
[  314.088940][ T6035] pwc: send_video_command error -71
[  314.102420][ T6035] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  314.108452][ T6035] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  314.126508][ T6035] usb 1-1: USB disconnect, device number 27
[  314.159121][   T24] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71
[  314.171579][   T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  314.183660][   T24] usb 2-1: USB disconnect, device number 17
[  315.735057][T10981] loop1: detected capacity change from 0 to 40427
[  315.749069][T10981] F2FS-fs (loop1): build fault injection rate: 14
[  315.756906][T10981] F2FS-fs (loop1): build fault injection type: 0x77fd1
[  315.784994][T10981] F2FS-fs (loop1): invalid crc value
[  315.801602][T10981] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4429/0x6ff0
[  315.827214][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  315.838952][T10981] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  315.866707][T10608] udevd[10608]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  315.927141][T10993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2015'.
[  316.542496][T11001] rdma_op ffff8880327951f0 conn xmit_rdma 0000000000000000
[  316.649377][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  316.846022][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.948672][   T24] usb 2-1: Using ep0 maxpacket: 32
[  316.964473][   T24] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  316.978178][   T24] usb 2-1: config 0 has no interface number 0
[  316.989918][   T24] usb 2-1: config 0 interface 12 has no altsetting 0
[  317.009564][   T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  317.020210][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.027971][   T24] usb 2-1: Product: syz
[  317.046728][   T24] usb 2-1: Manufacturer: syz
[  317.056180][   T24] usb 2-1: SerialNumber: syz
[  317.073369][   T24] usb 2-1: config 0 descriptor??
[  318.840285][T11034] ptrace attach of "/syz-executor exec"[9515] was attempted by "\x22"[11034]
[  319.440895][   T24] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  319.443661][   T24] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  319.452614][   T24] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  319.459360][   T24] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  319.472771][   T24] usb 2-1: USB disconnect, device number 18
[  320.109785][T11045] loop1: detected capacity change from 0 to 512
[  320.123092][T11045] EXT4-fs: Ignoring removed i_version option
[  320.125211][T11045] EXT4-fs: Ignoring removed nobh option
[  320.135834][T11039] udevd[11039]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  320.153381][T11045] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  320.195069][T11045] EXT4-fs (loop1): 1 truncate cleaned up
[  320.215641][T11045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.204118][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.440703][T11060] loop1: detected capacity change from 0 to 512
[  321.494720][T11060] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  321.523576][T11060] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  321.634826][T11043] kexec: Could not allocate control_code_buffer
[  321.639346][T11060] FAT-fs (loop1): FAT read failed (blocknr 128)
[  322.001062][T11077] sit0: entered promiscuous mode
[  322.022571][T11077] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2049'.
[  322.308388][T11092] netlink: 'syz.1.2057': attribute type 10 has an invalid length.
[  322.329962][T11092] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  322.571666][T11098] loop1: detected capacity change from 0 to 4096
[  322.587450][T11098] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  322.599475][T11039] udevd[11039]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  322.606722][T11098] ntfs3(loop1): ino=3, mi_enum_attr
[  322.613444][T11098] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  322.616901][T11039] udevd[11039]: symlink '../../loop1' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:1' failed: Read-only file system
[  322.622436][T11098] ntfs3(loop1): volume is dirty and "force" flag is not set!
[  322.745713][T11111] netlink: 'syz.0.2065': attribute type 10 has an invalid length.
[  322.919500][T11109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.220110][T11124] netlink: 'syz.1.2071': attribute type 11 has an invalid length.
[  323.223886][T11124] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2071'.
[  323.447799][T11128] loop1: detected capacity change from 0 to 32768
[  323.465452][T11128] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2073 (11128)
[  323.513772][T11039] udevd[11039]: symlink '../../loop1' '/dev/disk/by-uuid/14d642db-7b15-43e4-81e6-4b8fac6a25f8.tmp-b7:1' failed: Read-only file system
[  323.522839][T11128] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  323.526447][T11128] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  323.596695][T11128] BTRFS info (device loop1): enabling ssd optimizations
[  323.610674][T11128] BTRFS info (device loop1): enabling free space tree
[  323.613085][T11128] BTRFS info (device loop1): use lzo compression, level 0
[  323.855072][ T5848] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  323.906202][T11039] udevd[11039]: symlink '../../loop1' '/dev/disk/by-uuid/14d642db-7b15-43e4-81e6-4b8fac6a25f8.tmp-b7:1' failed: Read-only file system
[  324.065896][T11168] loop6: detected capacity change from 0 to 7
[  324.080623][T10608]  loop6: [POWERTEC] p1 p2 p3 p4 p5 p6
[  324.103363][T10608] loop6: p1 size 1680801792 extends beyond EOD, truncated
[  324.111496][T10608] loop6: p2 start 2602905181 is beyond EOD, truncated
[  324.116489][T10608] loop6: p3 start 1745589262 is beyond EOD, truncated
[  324.141432][T10608] loop6: p4 start 325178268 is beyond EOD, truncated
[  324.152399][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'.
[  324.172712][T10608] loop6: p5 start 2326339850 is beyond EOD, truncated
[  324.175700][T10608] loop6: p6 start 2562259694 is beyond EOD, truncated
[  324.192657][T11170] netlink: 'syz.4.2085': attribute type 1 has an invalid length.
[  324.196407][T11170] netlink: 'syz.4.2085': attribute type 2 has an invalid length.
[  324.222452][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'.
[  324.231580][T11168]  loop6: [POWERTEC] p1 p2 p3 p4 p5 p6
[  324.239462][T11168] loop6: p1 size 1680801792 extends beyond EOD, truncated
[  324.269373][T11168] loop6: p2 start 2602905181 is beyond EOD, truncated
[  324.271804][T11168] loop6: p3 start 1745589262 is beyond EOD, truncated
[  324.274091][T11168] loop6: p4 start 325178268 is beyond EOD, truncated
[  324.276309][T11168] loop6: p5 start 2326339850 is beyond EOD, truncated
[  324.327756][T11168] loop6: p6 start 2562259694 is beyond EOD, truncated
[  324.410564][T10608] udevd[10608]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  324.482071][T10608] udevd[10608]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  324.660167][T11187] loop1: detected capacity change from 0 to 1024
[  324.713959][T11039] udevd[11039]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system
[  324.750369][T11039] udevd[11039]: symlink '../../loop1' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:1' failed: Read-only file system
[  326.660602][T11039] udevd[11039]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system
[  326.675808][T11039] udevd[11039]: symlink '../../loop1' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:1' failed: Read-only file system
[  326.755342][T11196] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2097'.
[  326.776084][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2097'.
[  326.813958][   T33] audit: type=1800 audit(1757265484.497:170): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2093" name="file1" dev="loop1" ino=20 res=0 errno=0
[  326.961696][T11196] team0: Port device team_slave_0 removed
[  327.395263][T11211] loop1: detected capacity change from 0 to 128
[  327.711071][T11219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2108'.
[  330.411436][ T6035] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  330.568812][ T6035] usb 2-1: Using ep0 maxpacket: 8
[  330.590525][ T6035] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  330.615632][ T6035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.633946][ T6035] usb 2-1: Product: syz
[  330.638124][ T6035] usb 2-1: Manufacturer: syz
[  330.647773][ T6035] usb 2-1: SerialNumber: syz
[  330.675964][ T6035] usb 2-1: config 0 descriptor??
[  330.711748][ T6035] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244)
[  331.065806][ T6035] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  331.078442][ T6035] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  331.138266][ T6035] usb 2-1: USB disconnect, device number 19
[  332.096718][ T5861] Bluetooth: hci2: unexpected event for opcode 0x204e
[  334.331643][T11293] netlink: 'syz.4.2139': attribute type 15 has an invalid length.
[  334.335034][T11293] netlink: 'syz.4.2139': attribute type 7 has an invalid length.
[  335.447800][   T33] audit: type=1326 audit(1757265493.117:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.0.2144" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7fc00000
[  335.514348][   T33] audit: type=1326 audit(1757265493.137:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.0.2144" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f714398ebe9 code=0x7fc00000
[  335.538391][   T33] audit: type=1326 audit(1757265493.137:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.0.2144" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7fc00000
[  335.557624][   T33] audit: type=1326 audit(1757265493.137:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.0.2144" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7fc00000
[  335.574693][   T33] audit: type=1326 audit(1757265493.137:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.0.2144" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7fc00000
[  335.599167][   T33] audit: type=1326 audit(1757265493.137:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.0.2144" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7fc00000
[  335.608882][   T33] audit: type=1326 audit(1757265493.147:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.0.2144" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7fc00000
[  335.637492][   T33] audit: type=1326 audit(1757265493.177:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.0.2144" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7fc00000
[  335.653401][   T33] audit: type=1326 audit(1757265493.177:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.0.2144" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7fc00000
[  335.671181][   T33] audit: type=1326 audit(1757265493.177:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz.0.2144" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7fc00000
[  335.991549][T11319] loop1: detected capacity change from 0 to 65
[  336.013489][T11319] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1
[  339.319221][T11366] netlink: 'syz.0.2169': attribute type 1 has an invalid length.
[  339.332968][T11366] nbd: error processing sock list
[  339.337995][T11366] block nbd1: shutting down sockets
[  339.404362][ T5861] Bluetooth: hci1: command 0x0406 tx timeout
[  340.304525][T11384] loop1: detected capacity change from 0 to 512
[  340.307738][T11384] EXT4-fs: Ignoring removed nobh option
[  340.327309][T11039] udevd[11039]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  340.337579][T11384] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  340.354751][T11039] udevd[11039]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  340.362453][T11384] EXT4-fs (loop1): orphan cleanup on readonly fs
[  340.372218][T11384] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2176: bad orphan inode 15
[  340.384985][T11384] ext4_test_bit(bit=14, block=18) = 1
[  340.387266][T11384] is_bad_inode(inode)=0
[  340.390263][T11384] NEXT_ORPHAN(inode)=1023
[  340.391815][T11384] max_ino=32
[  340.393074][T11384] i_nlink=0
[  340.402341][T11384] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2176: bg 0: block 161: padding at end of block bitmap is not set
[  340.410005][T11384] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  340.415682][T11384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  340.531503][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.171549][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2190'.
[  341.518305][T11407] loop1: detected capacity change from 0 to 32768
[  341.663250][T11407] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  341.663270][T11407]   allowing incompatible features above 0.0: (unknown version)
[  341.663278][T11407]   features: 
[  341.678243][T11407] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  341.684095][T11407] bcachefs (loop1): initializing new filesystem
[  341.693941][T11407] bcachefs (loop1): going read-write
[  341.723116][T11407] bcachefs (loop1): marking superblocks
[  341.812585][T11407] bcachefs (loop1): initializing freespace
[  341.851031][T11407] bcachefs (loop1): done initializing freespace
[  341.875088][T11407] bcachefs (loop1): reading snapshots table
[  341.886034][T11407] bcachefs (loop1): reading snapshots done
[  342.193857][T11407] bcachefs (loop1): done starting filesystem
[  342.557307][T11407] syz.1.2187 (11407) used greatest stack depth: 14936 bytes left
[  342.612996][ T5848] bcachefs (loop1): shutting down
[  342.623772][ T5848] bcachefs (loop1): going read-only
[  342.637153][ T5848] bcachefs (loop1): finished waiting for writes to stop
[  342.665572][ T5848] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  343.170109][ T5848] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  343.198588][ T5848] bcachefs (loop1): clean shutdown complete, journal seq 4
[  343.206101][ T5848] bcachefs (loop1): marking filesystem clean
[  343.284128][ T5848] bcachefs (loop1): shutdown complete
[  343.414713][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'.
[  344.415913][T11470] netlink: 'syz.4.2210': attribute type 83 has an invalid length.
[  344.598718][T11479] 9pnet: p9_errstr2errno: server reported unknown error 
[  345.705103][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  345.705120][   T33] audit: type=1326 audit(1757265503.377:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7ffc0000
[  345.740433][   T33] audit: type=1326 audit(1757265503.377:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7ffc0000
[  345.772818][   T33] audit: type=1326 audit(1757265503.397:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f714398ebe9 code=0x7ffc0000
[  345.788649][   T33] audit: type=1326 audit(1757265503.397:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714398ebe9 code=0x7ffc0000
[  345.861404][T11497] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2223'.
[  346.409134][   T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  346.600665][   T24] usb 1-1: Using ep0 maxpacket: 32
[  346.604756][   T24] usb 1-1: config 8 has an invalid interface number: 203 but max is 0
[  346.608064][   T24] usb 1-1: config 8 has no interface number 0
[  346.615856][   T24] usb 1-1: config 8 interface 203 has no altsetting 0
[  346.627990][   T24] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  346.632548][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.636131][   T24] usb 1-1: Product: syz
[  346.637856][   T24] usb 1-1: Manufacturer: syz
[  346.643262][   T24] usb 1-1: SerialNumber: syz
[  346.881373][   T24] port100 1-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint
[  346.899149][   T24] usb 1-1: USB disconnect, device number 28
[  347.179793][T11521] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  347.661357][T11529] netlink: 'syz.0.2236': attribute type 2 has an invalid length.
[  350.228189][T11545] sock: sock_set_timeout: `syz.4.2242' (pid 11545) tries to set negative timeout
[  350.869997][ T5901] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  351.029407][ T5901] usb 2-1: Using ep0 maxpacket: 16
[  351.039087][ T5901] usb 2-1: config 0 has an invalid interface number: 109 but max is 0
[  351.045698][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.062775][ T5901] usb 2-1: config 0 has no interface number 0
[  351.074718][ T5901] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e
[  351.081893][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.099934][ T5901] usb 2-1: Product: syz
[  351.107198][ T5901] usb 2-1: Manufacturer: syz
[  351.116494][ T5901] usb 2-1: SerialNumber: syz
[  351.138958][ T5901] usb 2-1: config 0 descriptor??
[  351.438812][T11559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.459516][T11559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.507282][ T5901] rndis_host 2-1:0.109: More than one union descriptor, skipping ...
[  351.535021][ T5901] usb 2-1: bad CDC descriptors
[  351.538810][ T5901] cdc_acm 2-1:0.109: More than one union descriptor, skipping ...
[  351.564265][ T5901] usb 2-1: USB disconnect, device number 20
[  351.957824][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'.
[  355.806954][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'.
[  355.856387][T11601] netlink: 'syz.4.2266': attribute type 3 has an invalid length.
[  356.083646][T11607] loop1: detected capacity change from 0 to 4096
[  356.102368][T11607] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  356.115220][T11593] udevd[11593]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  356.135070][T11593] udevd[11593]: symlink '../../loop1' '/dev/disk/by-uuid/02AFA4DB32BB7E65.tmp-b7:1' failed: Read-only file system
[  356.162888][T11593] udevd[11593]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  356.175012][T11593] udevd[11593]: symlink '../../loop1' '/dev/disk/by-uuid/02AFA4DB32BB7E65.tmp-b7:1' failed: Read-only file system
[  359.871486][T11631] ceph: No mds server is up or the cluster is laggy
[  360.853093][T11655] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  362.201611][ T5901] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER)
[  368.924250][T11682] netlink: 'syz.4.2302': attribute type 1 has an invalid length.
[  368.927035][T11682] netlink: 'syz.4.2302': attribute type 1 has an invalid length.
[  369.088701][   T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  369.478816][   T24] usb 2-1: Using ep0 maxpacket: 8
[  369.483035][   T24] usb 2-1: config 0 has an invalid interface number: 74 but max is 0
[  369.486474][   T24] usb 2-1: config 0 has no interface number 0
[  369.508335][   T24] usb 2-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=e2.e8
[  369.515464][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.524564][   T24] usb 2-1: Product: syz
[  369.526273][   T24] usb 2-1: Manufacturer: syz
[  369.528200][   T24] usb 2-1: SerialNumber: syz
[  369.541922][   T24] usb 2-1: config 0 descriptor??
[  369.761647][   T24] usb 2-1: NDI device with a latency value of 1
[  369.780638][   T24] ftdi_sio 2-1:0.74: FTDI USB Serial Device converter detected
[  369.784739][   T24] ftdi_sio ttyUSB0: unknown device type: 0xe2e8
[  369.813984][   T24] usb 2-1: USB disconnect, device number 21
[  369.820840][   T24] ftdi_sio 2-1:0.74: device disconnected
[  370.938239][T11704] netlink: 'syz.4.2311': attribute type 12 has an invalid length.
[  371.518793][T11720] 9pnet_rdma: rdma_create_trans (11720): problem binding to privport: 13
[  372.774651][ T5238] Bluetooth: hci1: unexpected event for opcode 0x080d
[  372.963599][T11742] netlink: 'syz.4.2328': attribute type 10 has an invalid length.
[  372.967124][T11742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2328'.
[  373.794937][T11783] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2347'.
[  374.667488][T11796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2353'.
[  374.865227][T11803] overlayfs: failed to clone upperpath
[  378.287954][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.928262][ T5915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.071265][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2381'.
[  379.082654][T11854] vlan0: entered promiscuous mode
[  379.269578][T11765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  379.276206][T11765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  379.281514][T11765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  379.284787][T11765] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  379.289245][T11765] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  379.422852][T11857] chnl_net:caif_netlink_parms(): no params data found
[  379.621128][T11857] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.623738][T11857] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.629510][T11857] bridge_slave_0: entered allmulticast mode
[  379.633295][T11857] bridge_slave_0: entered promiscuous mode
[  379.637599][T11857] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.642511][T11857] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.652336][T11857] bridge_slave_1: entered allmulticast mode
[  379.656914][T11857] bridge_slave_1: entered promiscuous mode
[  379.823539][T11857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.861043][T11857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.934488][T11857] team0: Port device team_slave_0 added
[  379.943722][T11857] team0: Port device team_slave_1 added
[  380.012988][T11857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  380.018884][T11857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.050680][T11857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  380.102578][T11857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  380.105080][T11857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.113874][T11857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  380.217977][ T5905] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  380.264620][ T5915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.285490][T11857] hsr_slave_0: entered promiscuous mode
[  380.293617][T11857] hsr_slave_1: entered promiscuous mode
[  380.299105][T11857] debugfs: 'hsr0' already exists in 'hsr'
[  380.301588][T11857] Cannot create hsr debugfs directory
[  380.454563][ T5915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.557758][ T5905] usb 2-1: Using ep0 maxpacket: 16
[  380.639866][ T5905] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.643917][ T5905] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  380.647549][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0
[  380.683718][ T5905] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  380.689422][ T5915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.760863][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.779157][ T5905] usb 2-1: config 0 descriptor??
[  381.039026][T11857] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  381.073165][T11857] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  381.116477][ T5915] bridge_slave_1: left allmulticast mode
[  381.118505][ T5915] bridge_slave_1: left promiscuous mode
[  381.120516][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.142816][ T5915] bridge_slave_0: left allmulticast mode
[  381.144778][ T5915] bridge_slave_0: left promiscuous mode
[  381.146781][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.212768][ T5905] hid (null): unknown global tag 0xd
[  381.214600][ T5905] hid (null): invalid report_count -314301797
[  381.318969][T11765] Bluetooth: hci2: command tx timeout
[  381.504781][ T5888] usb 2-1: USB disconnect, device number 22
[  381.838166][ T5915] bond0 (unregistering): (slave gretap1): Releasing active interface
[  382.156399][T11902] loop1: detected capacity change from 0 to 64
[  382.426294][T11904] loop1: detected capacity change from 0 to 32768
[  382.459890][T11904] bcachefs: bch2_fs_open() bch_fs_open err opening /dev/loop1: erofs_nochanges
[  382.463175][T11904] bcachefs: bch2_fs_get_tree() error: erofs_nochanges
[  382.793764][ T5915] bond0 (unregistering): Released all slaves
[  382.827618][T11857] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  382.860963][T11857] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  383.422688][T11765] Bluetooth: hci2: command tx timeout
[  383.756255][T11857] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.840423][T11857] 8021q: adding VLAN 0 to HW filter on device team0
[  383.872865][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.875882][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.956599][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.959558][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.105482][ T5915] hsr_slave_0: left promiscuous mode
[  384.134707][ T5915] hsr_slave_1: left promiscuous mode
[  384.143822][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.172122][ T5915] batadv0: mtu less than device minimum
[  384.176908][ T5915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  384.182368][ T5915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  384.187064][ T5915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  384.191997][ T5915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  384.196469][ T5915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  384.200554][ T5915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  384.204544][ T5915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  384.208725][ T5915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  384.213393][ T5915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  384.405173][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.417614][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.456405][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.474080][ T5915] batman_adv: batadv0: Interface deactivated: dummy0
[  384.476873][ T5915] batman_adv: batadv0: Removing interface: dummy0
[  384.531789][ T5915] veth1_macvtap: left promiscuous mode
[  384.534248][ T5915] veth0_macvtap: left promiscuous mode
[  384.536721][ T5915] veth1_vlan: left promiscuous mode
[  384.539803][ T5915] veth0_vlan: left promiscuous mode
[  385.046201][T11952] loop1: detected capacity change from 0 to 64
[  385.231994][T11952] Trying to free block not in datazone
[  385.234316][T11952] Trying to free block not in datazone
[  385.236322][T11952] Trying to free block not in datazone
[  385.257424][T11952] Trying to free block not in datazone
[  385.260236][T11952] Trying to free block not in datazone
[  385.262431][T11952] Trying to free block not in datazone
[  385.284238][T11952] Trying to free block not in datazone
[  385.286567][T11952] Trying to free block not in datazone
[  385.288483][T11952] Trying to free block not in datazone
[  385.294589][T11952] Trying to free block not in datazone
[  385.298791][T11952] Trying to free block not in datazone
[  385.316819][T11952] Trying to free block not in datazone
[  385.328750][T11952] Trying to free block not in datazone
[  385.333410][T11952] Trying to free block not in datazone
[  385.335276][T11952] Trying to free block not in datazone
[  385.337081][T11952] Trying to free block not in datazone
[  385.339906][T11952] Trying to free block not in datazone
[  385.341998][T11952] Trying to free block not in datazone
[  385.343776][T11952] Trying to free block not in datazone
[  385.345936][T11952] Trying to free block not in datazone
[  385.358633][T11952] Trying to free block not in datazone
[  385.361075][T11952] Trying to free block not in datazone
[  385.363041][T11952] Trying to free block not in datazone
[  385.364923][T11952] Trying to free block not in datazone
[  385.367008][T11952] Trying to free block not in datazone
[  385.372291][T11952] Trying to free block not in datazone
[  385.374685][T11952] Trying to free block not in datazone
[  385.377078][T11952] Trying to free block not in datazone
[  385.382209][T11952] Trying to free block not in datazone
[  385.384672][T11952] Trying to free block not in datazone
[  385.390169][T11952] Trying to free block not in datazone
[  385.393416][T11952] Trying to free block not in datazone
[  385.395956][T11952] Trying to free block not in datazone
[  385.397848][T11952] Trying to free block not in datazone
[  385.400439][T11952] Trying to free block not in datazone
[  385.402580][T11952] Trying to free block not in datazone
[  385.404503][T11952] Trying to free block not in datazone
[  385.406402][T11952] Trying to free block not in datazone
[  385.428656][T11952] Trying to free block not in datazone
[  385.430741][T11952] Trying to free block not in datazone
[  385.434108][T11952] Trying to free block not in datazone
[  385.436130][T11952] Trying to free block not in datazone
[  385.438071][T11952] Trying to free block not in datazone
[  385.449009][T11952] Trying to free block not in datazone
[  385.452902][T11952] Trying to free block not in datazone
[  385.472041][T11952] Trying to free block not in datazone
[  385.478624][T11952] Trying to free block not in datazone
[  385.486093][T11952] Trying to free block not in datazone
[  385.488102][T11952] Trying to free block not in datazone
[  385.490397][T11765] Bluetooth: hci2: command tx timeout
[  385.494816][T11952] Trying to free block not in datazone
[  385.497202][T11952] Trying to free block not in datazone
[  385.500420][T11952] Trying to free block not in datazone
[  385.506892][T11952] Trying to free block not in datazone
[  385.527418][T11952] Trying to free block not in datazone
[  385.529901][T11952] Trying to free block not in datazone
[  385.533187][T11952] Trying to free block not in datazone
[  385.537698][T11952] Trying to free block not in datazone
[  385.545728][T11952] Trying to free block not in datazone
[  385.548010][T11952] Trying to free block not in datazone
[  385.569554][T11952] Trying to free block not in datazone
[  385.574157][T11952] Trying to free block not in datazone
[  385.578253][T11952] Trying to free block not in datazone
[  385.584680][T11952] Trying to free block not in datazone
[  385.586965][T11952] Trying to free block not in datazone
[  385.589540][T11952] Trying to free block not in datazone
[  385.591847][T11952] Trying to free block not in datazone
[  385.607189][T11952] Trying to free block not in datazone
[  385.611401][T11952] Trying to free block not in datazone
[  385.613940][T11952] Trying to free block not in datazone
[  385.616280][T11952] Trying to free block not in datazone
[  385.620249][T11952] Trying to free block not in datazone
[  385.622600][T11952] Trying to free block not in datazone
[  385.624943][T11952] Trying to free block not in datazone
[  385.636679][T11964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2417'.
[  385.642704][T11952] Trying to free block not in datazone
[  385.644971][T11952] Trying to free block not in datazone
[  385.647503][T11952] Trying to free block not in datazone
[  385.650686][T11952] Trying to free block not in datazone
[  385.653072][T11952] Trying to free block not in datazone
[  385.655256][T11952] Trying to free block not in datazone
[  385.657222][T11952] Trying to free block not in datazone
[  385.676005][T11952] Trying to free block not in datazone
[  385.677929][T11952] Trying to free block not in datazone
[  385.681993][T11952] Trying to free block not in datazone
[  385.683940][T11952] Trying to free block not in datazone
[  385.686776][T11952] Trying to free block not in datazone
[  385.689111][T11952] Trying to free block not in datazone
[  385.691145][T11952] Trying to free block not in datazone
[  385.693206][T11952] Trying to free block not in datazone
[  385.695561][T11952] Trying to free block not in datazone
[  385.697857][T11952] Trying to free block not in datazone
[  385.709908][T11952] Trying to free block not in datazone
[  385.711983][T11952] Trying to free block not in datazone
[  385.713958][T11952] Trying to free block not in datazone
[  385.715974][T11952] Trying to free block not in datazone
[  385.717873][T11952] Trying to free block not in datazone
[  385.725233][T11952] Trying to free block not in datazone
[  385.731179][T11952] Trying to free block not in datazone
[  385.735543][T11952] Trying to free block not in datazone
[  385.737987][T11952] Trying to free block not in datazone
[  385.743564][T11952] Trying to free block not in datazone
[  385.748286][T11952] Trying to free block not in datazone
[  385.765959][T11952] Trying to free block not in datazone
[  385.770900][T11952] Trying to free block not in datazone
[  385.773780][T11952] Trying to free block not in datazone
[  385.776318][T11952] Trying to free block not in datazone
[  385.782186][T11952] Trying to free block not in datazone
[  385.784734][T11952] Trying to free block not in datazone
[  385.789708][T11952] Trying to free block not in datazone
[  385.792254][T11952] Trying to free block not in datazone
[  385.794732][T11952] Trying to free block not in datazone
[  385.797194][T11952] Trying to free block not in datazone
[  385.812946][T11952] Trying to free block not in datazone
[  385.815455][T11952] Trying to free block not in datazone
[  385.817868][T11952] Trying to free block not in datazone
[  385.823876][T11952] Trying to free block not in datazone
[  385.826432][T11952] Trying to free block not in datazone
[  385.832586][T11952] Trying to free block not in datazone
[  385.846484][T11952] Trying to free block not in datazone
[  385.849870][T11952] Trying to free block not in datazone
[  385.852386][T11952] Trying to free block not in datazone
[  385.854901][T11952] Trying to free block not in datazone
[  385.857443][T11952] Trying to free block not in datazone
[  385.895239][T11952] Trying to free block not in datazone
[  385.902657][T11952] Trying to free block not in datazone
[  385.905140][T11952] Trying to free block not in datazone
[  385.910939][T11952] Trying to free block not in datazone
[  385.927428][T11952] Trying to free block not in datazone
[  385.930182][T11952] Trying to free block not in datazone
[  385.934824][T11952] Trying to free block not in datazone
[  385.936944][T11952] Trying to free block not in datazone
[  385.939720][T11952] Trying to free block not in datazone
[  385.942241][T11952] Trying to free block not in datazone
[  385.944539][T11952] Trying to free block not in datazone
[  385.946576][T11952] Trying to free block not in datazone
[  385.967062][T11952] Trying to free block not in datazone
[  385.969834][T11952] Trying to free block not in datazone
[  385.972456][T11952] Trying to free block not in datazone
[  385.974231][T11952] Trying to free block not in datazone
[  385.976031][T11952] Trying to free block not in datazone
[  385.977869][T11952] Trying to free block not in datazone
[  385.982159][T11952] Trying to free block not in datazone
[  385.984132][T11952] Trying to free block not in datazone
[  385.985954][T11952] Trying to free block not in datazone
[  385.987709][T11952] Trying to free block not in datazone
[  386.007003][T11952] Trying to free block not in datazone
[  386.015319][T11952] Trying to free block not in datazone
[  386.017825][T11952] Trying to free block not in datazone
[  386.021291][T11952] Trying to free block not in datazone
[  386.023934][T11952] Trying to free block not in datazone
[  386.026293][T11952] Trying to free block not in datazone
[  386.031753][T11952] Trying to free block not in datazone
[  386.039560][T11952] Trying to free block not in datazone
[  386.056468][T11952] Trying to free block not in datazone
[  386.059125][T11952] Trying to free block not in datazone
[  386.061590][T11952] Trying to free block not in datazone
[  386.063981][T11952] Trying to free block not in datazone
[  386.066394][T11952] Trying to free block not in datazone
[  386.073553][T11952] Trying to free block not in datazone
[  386.076273][T11952] Trying to free block not in datazone
[  386.080442][T11952] Trying to free block not in datazone
[  386.100437][T11952] Trying to free block not in datazone
[  386.103434][T11952] Trying to free block not in datazone
[  386.105946][T11952] Trying to free block not in datazone
[  386.108450][T11952] Trying to free block not in datazone
[  386.116811][T11952] Trying to free block not in datazone
[  386.125780][T11952] Trying to free block not in datazone
[  386.128307][T11952] Trying to free block not in datazone
[  386.134507][T11952] Trying to free block not in datazone
[  386.150670][T11952] Trying to free block not in datazone
[  386.152557][T11952] Trying to free block not in datazone
[  386.154388][T11952] Trying to free block not in datazone
[  386.156369][T11952] Trying to free block not in datazone
[  386.160998][T11952] Trying to free block not in datazone
[  386.162982][T11952] Trying to free block not in datazone
[  386.164932][T11952] Trying to free block not in datazone
[  386.166919][T11952] Trying to free block not in datazone
[  386.169810][T11952] Trying to free block not in datazone
[  386.171947][T11952] Trying to free block not in datazone
[  386.173843][T11952] Trying to free block not in datazone
[  386.187473][T11952] Trying to free block not in datazone
[  386.191743][T11952] Trying to free block not in datazone
[  386.194078][T11952] Trying to free block not in datazone
[  386.196250][T11952] Trying to free block not in datazone
[  386.200374][T11952] Trying to free block not in datazone
[  386.202949][T11952] Trying to free block not in datazone
[  386.205414][T11952] Trying to free block not in datazone
[  386.214134][T11952] Trying to free block not in datazone
[  386.233001][T11952] Trying to free block not in datazone
[  386.235360][T11952] Trying to free block not in datazone
[  386.237699][T11952] Trying to free block not in datazone
[  386.244072][T11952] Trying to free block not in datazone
[  386.246610][T11952] Trying to free block not in datazone
[  386.249533][T11952] Trying to free block not in datazone
[  386.251989][T11952] Trying to free block not in datazone
[  386.254528][T11952] Trying to free block not in datazone
[  386.272785][T11952] Trying to free block not in datazone
[  386.275198][T11952] Trying to free block not in datazone
[  386.277457][T11952] Trying to free block not in datazone
[  386.283222][T11952] Trying to free block not in datazone
[  386.285650][T11952] Trying to free block not in datazone
[  386.288104][T11952] Trying to free block not in datazone
[  386.292051][T11952] Trying to free block not in datazone
[  386.294608][T11952] Trying to free block not in datazone
[  386.297095][T11952] Trying to free block not in datazone
[  386.334928][T11952] Trying to free block not in datazone
[  386.337511][T11952] Trying to free block not in datazone
[  386.343682][T11952] Trying to free block not in datazone
[  386.346249][T11952] Trying to free block not in datazone
[  386.351387][T11952] Trying to free block not in datazone
[  386.354025][T11952] Trying to free block not in datazone
[  386.356434][T11952] Trying to free block not in datazone
[  386.359850][T11952] Trying to free block not in datazone
[  386.377666][T11952] Trying to free block not in datazone
[  386.380696][T11952] Trying to free block not in datazone
[  386.383186][T11952] Trying to free block not in datazone
[  386.385678][T11952] Trying to free block not in datazone
[  386.388175][T11952] Trying to free block not in datazone
[  386.406855][T11952] Trying to free block not in datazone
[  386.416035][T11952] Trying to free block not in datazone
[  386.426409][T11952] Trying to free block not in datazone
[  386.428491][T11952] Trying to free block not in datazone
[  386.433883][T11952] Trying to free block not in datazone
[  386.436259][T11952] Trying to free block not in datazone
[  386.468056][T11952] Trying to free block not in datazone
[  386.473621][T11952] Trying to free block not in datazone
[  386.475989][T11952] Trying to free block not in datazone
[  386.491830][T11952] Trying to free block not in datazone
[  386.494209][T11952] Trying to free block not in datazone
[  386.496415][T11952] Trying to free block not in datazone
[  386.498304][T11952] Trying to free block not in datazone
[  386.507100][T11952] Trying to free block not in datazone
[  386.532122][T11952] Trying to free block not in datazone
[  386.534515][T11952] Trying to free block not in datazone
[  386.536865][T11952] Trying to free block not in datazone
[  386.551853][T11952] Trying to free block not in datazone
[  386.553756][T11952] Trying to free block not in datazone
[  386.555579][T11952] Trying to free block not in datazone
[  386.557826][T11952] Trying to free block not in datazone
[  386.570219][T11952] Trying to free block not in datazone
[  386.572529][T11952] Trying to free block not in datazone
[  386.574436][T11952] Trying to free block not in datazone
[  386.576267][T11952] Trying to free block not in datazone
[  386.611569][T11952] Trying to free block not in datazone
[  386.613452][T11952] Trying to free block not in datazone
[  386.615270][T11952] Trying to free block not in datazone
[  386.617091][T11952] Trying to free block not in datazone
[  386.628984][T11952] Trying to free block not in datazone
[  386.630881][T11952] Trying to free block not in datazone
[  386.653172][T11952] Trying to free block not in datazone
[  386.655511][T11952] Trying to free block not in datazone
[  386.657360][T11952] Trying to free block not in datazone
[  386.663325][T11952] Trying to free block not in datazone
[  386.665238][T11952] Trying to free block not in datazone
[  386.667516][T11952] Trying to free block not in datazone
[  386.683198][T11952] Trying to free block not in datazone
[  386.685079][T11952] Trying to free block not in datazone
[  386.705683][T11952] Trying to free block not in datazone
[  386.945244][ T5915] team0 (unregistering): Port device team_slave_1 removed
[  387.152172][   T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  387.367046][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  387.373784][   T24] usb 2-1: config 0 has no interfaces?
[  387.375824][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  387.383882][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.400698][   T24] usb 2-1: config 0 descriptor??
[  387.585602][T11765] Bluetooth: hci2: command tx timeout
[  387.617698][   T24] usb 2-1: USB disconnect, device number 23
[  388.594449][ T6035] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  388.771352][ T6035] usb 2-1: Using ep0 maxpacket: 32
[  388.781988][ T6035] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  388.785387][ T6035] usb 2-1: config 0 has no interface number 0
[  388.801382][ T6035] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  388.805416][ T6035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.808356][ T6035] usb 2-1: Product: syz
[  388.813247][ T6035] usb 2-1: Manufacturer: syz
[  388.815196][ T6035] usb 2-1: SerialNumber: syz
[  388.846063][ T6035] usb 2-1: config 0 descriptor??
[  388.863801][ T6035] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[  388.867163][ T6035] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5
[  389.042394][T11857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  389.080470][ T6035] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  389.083876][ T6035] usbhid 2-1:0.35: couldn't find an input interrupt endpoint
[  389.352198][   T24] usb 2-1: USB disconnect, device number 24
[  389.822092][T11857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.182081][ T5915] IPVS: stop unused estimator thread 0...
[  390.336180][ T5915] ------------[ cut here ]------------
[  390.340186][ T5915] WARNING: CPU: 1 PID: 5915 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  390.344377][ T5915] Modules linked in:
[  390.351784][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  390.355913][ T5915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.361165][ T5915] Workqueue: netns cleanup_net
[  390.363403][ T5915] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  390.365857][ T5915] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 db d6 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 94 e1 f7 e8 a4 68 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 68 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  390.374725][ T5915] RSP: 0018:ffffc90003cef898 EFLAGS: 00010293
[  390.377462][ T5915] RAX: ffffffff8a22456c RBX: ffff88810016c880 RCX: ffff888020490000
[  390.381472][ T5915] RDX: 0000000000000000 RSI: ffffffff8dba7696 RDI: ffff888020490000
[  390.384935][ T5915] RBP: ffffc90003cef9b0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  390.388386][ T5915] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: ffffffff8f631a00
[  390.392511][ T5915] R13: 1ffff9200079df40 R14: ffff88810016dd00 R15: dffffc0000000000
[  390.397001][ T5915] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  390.401954][ T5915] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  390.404874][ T5915] CR2: 0000001b32816ff8 CR3: 0000000028268000 CR4: 00000000000006f0
[  390.408192][ T5915] Call Trace:
[  390.410211][ T5915]  <TASK>
[  390.411579][ T5915]  xfrm_net_exit+0x2d/0x70
[  390.413561][ T5915]  ops_undo_list+0x49a/0x990
[  390.415593][ T5915]  ? __pfx_ops_undo_list+0x10/0x10
[  390.417747][ T5915]  ? do_raw_spin_unlock+0x4d/0x240
[  390.420518][ T5915]  cleanup_net+0x4c5/0x800
[  390.422463][ T5915]  ? __pfx_cleanup_net+0x10/0x10
[  390.424637][ T5915]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.426887][ T5915]  ? process_scheduled_works+0x9ef/0x17b0
[  390.429867][ T5915]  ? process_scheduled_works+0x9ef/0x17b0
[  390.432386][ T5915]  process_scheduled_works+0xae1/0x17b0
[  390.434811][ T5915]  ? __pfx_process_scheduled_works+0x10/0x10
[  390.437414][ T5915]  worker_thread+0x8a0/0xda0
[  390.439987][ T5915]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  390.442760][ T5915]  ? __kthread_parkme+0x7b/0x200
[  390.444923][ T5915]  kthread+0x711/0x8a0
[  390.446691][ T5915]  ? __pfx_worker_thread+0x10/0x10
[  390.449295][ T5915]  ? __pfx_kthread+0x10/0x10
[  390.451294][ T5915]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.453511][ T5915]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.455905][ T5915]  ? __pfx_kthread+0x10/0x10
[  390.457975][ T5915]  ret_from_fork+0x3fc/0x770
[  390.460419][ T5915]  ? __pfx_ret_from_fork+0x10/0x10
[  390.462701][ T5915]  ? __switch_to_asm+0x39/0x70
[  390.464817][ T5915]  ? __switch_to_asm+0x33/0x70
[  390.466893][ T5915]  ? __pfx_kthread+0x10/0x10
[  390.469406][ T5915]  ret_from_fork_asm+0x1a/0x30
[  390.471535][ T5915]  </TASK>
[  390.472898][ T5915] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  390.475912][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  390.479984][ T5915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.484373][ T5915] Workqueue: netns cleanup_net
[  390.486428][ T5915] Call Trace:
[  390.487902][ T5915]  <TASK>
[  390.489199][ T5915]  dump_stack_lvl+0x99/0x250
[  390.491201][ T5915]  ? __asan_memcpy+0x40/0x70
[  390.493107][ T5915]  ? __pfx_dump_stack_lvl+0x10/0x10
[  390.495266][ T5915]  ? __pfx__printk+0x10/0x10
[  390.497228][ T5915]  vpanic+0x281/0x750
[  390.499031][ T5915]  ? __pfx__printk+0x10/0x10
[  390.501078][ T5915]  ? __pfx_vpanic+0x10/0x10
[  390.503026][ T5915]  ? is_bpf_text_address+0x292/0x2b0
[  390.505380][ T5915]  panic+0xb9/0xc0
[  390.507032][ T5915]  ? __pfx_panic+0x10/0x10
[  390.508984][ T5915]  __warn+0x31b/0x4b0
[  390.510728][ T5915]  ? xfrm_state_fini+0x26d/0x2f0
[  390.512900][ T5915]  ? xfrm_state_fini+0x26d/0x2f0
[  390.515078][ T5915]  report_bug+0x2be/0x4f0
[  390.516981][ T5915]  ? xfrm_state_fini+0x26d/0x2f0
[  390.519165][ T5915]  ? xfrm_state_fini+0x26d/0x2f0
[  390.521370][ T5915]  ? xfrm_state_fini+0x26f/0x2f0
[  390.523470][ T5915]  handle_bug+0x84/0x160
[  390.525253][ T5915]  exc_invalid_op+0x1a/0x50
[  390.527231][ T5915]  asm_exc_invalid_op+0x1a/0x20
[  390.529340][ T5915] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  390.531717][ T5915] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 db d6 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 94 e1 f7 e8 a4 68 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 68 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  390.539718][ T5915] RSP: 0018:ffffc90003cef898 EFLAGS: 00010293
[  390.542218][ T5915] RAX: ffffffff8a22456c RBX: ffff88810016c880 RCX: ffff888020490000
[  390.545625][ T5915] RDX: 0000000000000000 RSI: ffffffff8dba7696 RDI: ffff888020490000
[  390.549062][ T5915] RBP: ffffc90003cef9b0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  390.552533][ T5915] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: ffffffff8f631a00
[  390.555926][ T5915] R13: 1ffff9200079df40 R14: ffff88810016dd00 R15: dffffc0000000000
[  390.559192][ T5915]  ? xfrm_state_fini+0x26c/0x2f0
[  390.561375][ T5915]  ? xfrm_state_fini+0x26c/0x2f0
[  390.563519][ T5915]  xfrm_net_exit+0x2d/0x70
[  390.565485][ T5915]  ops_undo_list+0x49a/0x990
[  390.567519][ T5915]  ? __pfx_ops_undo_list+0x10/0x10
[  390.569754][ T5915]  ? do_raw_spin_unlock+0x4d/0x240
[  390.571989][ T5915]  cleanup_net+0x4c5/0x800
[  390.573966][ T5915]  ? __pfx_cleanup_net+0x10/0x10
[  390.576096][ T5915]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.578368][ T5915]  ? process_scheduled_works+0x9ef/0x17b0
[  390.580825][ T5915]  ? process_scheduled_works+0x9ef/0x17b0
[  390.583298][ T5915]  process_scheduled_works+0xae1/0x17b0
[  390.585748][ T5915]  ? __pfx_process_scheduled_works+0x10/0x10
[  390.588398][ T5915]  worker_thread+0x8a0/0xda0
[  390.590347][ T5915]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  390.593105][ T5915]  ? __kthread_parkme+0x7b/0x200
[  390.595286][ T5915]  kthread+0x711/0x8a0
[  390.596977][ T5915]  ? __pfx_worker_thread+0x10/0x10
[  390.599129][ T5915]  ? __pfx_kthread+0x10/0x10
[  390.601116][ T5915]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.603350][ T5915]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.605624][ T5915]  ? __pfx_kthread+0x10/0x10
[  390.607505][ T5915]  ret_from_fork+0x3fc/0x770
[  390.609546][ T5915]  ? __pfx_ret_from_fork+0x10/0x10
[  390.611690][ T5915]  ? __switch_to_asm+0x39/0x70
[  390.613658][ T5915]  ? __switch_to_asm+0x33/0x70
[  390.615575][ T5915]  ? __pfx_kthread+0x10/0x10
[  390.617525][ T5915]  ret_from_fork_asm+0x1a/0x30
[  390.619637][ T5915]  </TASK>
[  390.621780][ T5915] Kernel Offset: disabled
[  390.623625][ T5915] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:19:08  Registers:
info registers vcpu 0

CPU#0
RAX=00000000db147cf1 RBX=0000000000000004 RCX=000000006290c103 RDX=00000000071bee9f
RSI=00000000a42637f2 RDI=ffff888022095640 RBP=0000000000000000 RSP=ffffc90000006b68
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc90000006db8 R11=ffffffff81ac3aa0
R12=000000000afe4109 R13=ffff888022096130 R14=ffff8880220961d0 R15=0000000039529a68
RIP=ffffffff819d6952 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3281dff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffffffffffffff XMM05=0000000000000000 00007f44daf646e0
XMM06=00007f44daf646e0 00007f44daf64560 XMM07=00007f44daf645a0 00007f44daf64580
XMM08=8000000000000000 00000000f137be9d XMM09=0000000000000000 00007f44da212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff964fa558 RBX=00000000000003fd RCX=0000000000000320 RDX=0000000000000008
RSI=00000000000003fd RDI=ffff888020490000 RBP=ffffffff93528338 RSP=ffffc900001df430
R8 =ffffc900001df3f8 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819dce90
R12=ffffffff9645da08 R13=ffffffff964fa6a8 R14=ffff888020490cd0 R15=000000000000031f
RIP=ffffffff819db397 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32816ff8 CR3=0000000028268000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffff000000000000 0000000000000000 XMM03=ffffffffffff0000 ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0200000000000000 00000000000080fe
XMM06=0200000000000000 00000000000080fe XMM07=000002ff1d65e255 e9f2d73600000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
