last executing test programs:

1m6.673141509s ago: executing program 2 (id=1181):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x2, 0x100, 0x14ed})

1m4.621302084s ago: executing program 2 (id=1192):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x280c413, &(0x7f0000000080)={[{@inlinecrypt}, {@nouser_xattr}, {@errors_remount}]}, 0x1, 0x5ad, &(0x7f00000000c0)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f00000002c0)="41dfb080ca21db08098e002f86dd", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x7f, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28)

1m4.224316406s ago: executing program 2 (id=1195):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0x8, "7488dffc"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0xd2, 0x40800)
ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000100))

1m2.152977262s ago: executing program 2 (id=1212):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x48, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})
llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3)

1m1.2530013s ago: executing program 2 (id=1218):
r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
read$usbmon(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)

59.800738586s ago: executing program 2 (id=1225):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = memfd_secret(0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x8000000)

58.75315697s ago: executing program 32 (id=1225):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = memfd_secret(0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x8000000)

6.461698095s ago: executing program 4 (id=1527):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000400)={{}, 0x16, 0x3, 0x4}, 0x18)

6.203450993s ago: executing program 4 (id=1529):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x14040, &(0x7f0000001e40)=ANY=[], 0xff, 0x5e92, &(0x7f0000018400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0xbd)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)

4.847941116s ago: executing program 4 (id=1540):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @local=@item_4={0x3, 0x2, 0x1, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x3a01, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})

2.765200812s ago: executing program 3 (id=1556):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f0000000140))

2.554555769s ago: executing program 3 (id=1558):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80800c, &(0x7f0000000e80)={[{@uid}, {@creator={'creator', 0x3d, "a7580947"}}, {@umask={'umask', 0x3d, 0x4}}, {@session={'session', 0x3d, 0x3}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@force}, {@umask={'umask', 0x3d, 0x7ff}}, {@part={'part', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x41}}, {@nls={'nls', 0x3d, 'macinuit'}}, {@session={'session', 0x3d, 0x7}}, {@uid}, {@force}, {@creator={'creator', 0x3d, "f3dc6368"}}, {@barrier}, {@gid}, {}]}, 0x2, 0x6de, &(0x7f0000000600)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x3, 0xdddd1000, 0x1000, &(0x7f0000fea000/0x1000)=nil})
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1})

2.262735818s ago: executing program 1 (id=1559):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
socket$inet_tcp(0x2, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0)

2.258554278s ago: executing program 4 (id=1560):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0x80000a)

1.977621887s ago: executing program 3 (id=1561):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'})
pselect6(0x40, &(0x7f0000001600)={0x8, 0x8, 0x7, 0x7, 0x40002c16035f, 0x86a, 0xbd7, 0x7ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x9, 0x0, 0x0, 0x20000, 0x0, 0xfffffffd, 0x0, 0x1, 0x10001, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x10000000, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x6c230c0, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x0, 0x4, 0x80, 0x20, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfffffffd, 0x0, 0xfffff714, 0x200, 0x7, 0x2, 0x7, 0x0, 0x5, 0x20004, 0x0, 0x0, 0x105, 0x0, 0x800000], [0x11, 0xffff0003, 0x3, 0x0, 0xffffffff, 0x9, 0x88bf9219, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x4, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x218001, 0xfffffffe, 0x6, 0x100, 0x40, 0x10000, 0xec6a, 0xca86, 0x40000000, 0xffffffff, 0xfffffffc, 0x8, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0xfffffffc, 0x4, 0x18c, 0x0, 0xffffffff, 0x4000802, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x8, 0x0, 0x4, 0x9dd, 0x80, 0x8000, 0x40000004, 0x6, 0x3, 0x8f, 0x7], [0xf, 0x4, 0x0, 0x40000000, 0xffffffff, 0x3, 0xa000000, 0x0, 0xfff, 0xffff7fff, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x401, 0x0, 0x2, 0x420, 0xc, 0x4, 0x0, 0x0, 0x1ff, 0x3, 0xfffffffc, 0x7, 0xfffffffc, 0x2af, 0x5, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x401, 0x401, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x3, 0x199, 0xfffffffe, 0xff, 0x4000005, 0x0, 0x4, 0x3ff, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x1, 0xd, 0xffffffdb], [0x3, 0x0, 0x4, 0xc58, 0x0, 0x401, 0x1000, 0x215, 0x4, 0x7ff, 0x100, 0x3, 0xa, 0xf862, 0x80, 0x0, 0x6, 0x0, 0x7d, 0x5, 0x7ffd, 0x9, 0x4, 0x72, 0x0, 0xfffffffe, 0x0, 0x8, 0x5d66, 0x1, 0x800000, 0x9, 0x3, 0x0, 0x0, 0x6, 0xbfb6, 0x4, 0x8, 0x5, 0x0, 0xfffffffd, 0x1, 0xffffffff, 0x100, 0x4006f, 0x6, 0x3, 0xfffffffd, 0x53591a27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x80000000, 0x5, 0x8]}, 0x45c)

1.862173131s ago: executing program 0 (id=1562):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474d, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)

1.640134858s ago: executing program 3 (id=1563):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0)
poll(&(0x7f0000000540)=[{r0, 0x2020}], 0x1, 0xb8)
read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xd6e, 0x0, 0x6a9}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0)

1.633921918s ago: executing program 0 (id=1564):
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020)
close(0x3)
io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}])

1.55887735s ago: executing program 4 (id=1565):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$TCXONC(r0, 0x540a, 0x2)

1.455828813s ago: executing program 1 (id=1566):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x1000, &(0x7f000097e000/0x1000)=nil})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080))

1.395854666s ago: executing program 0 (id=1567):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0)

1.287033599s ago: executing program 3 (id=1568):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x14040, &(0x7f0000001e40)=ANY=[], 0xff, 0x5e92, &(0x7f0000018400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0xbd)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)

1.2615906s ago: executing program 0 (id=1569):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
ppoll(&(0x7f0000000040)=[{r1}, {r1, 0x2051}, {0xffffffffffffffff, 0x2}], 0x3, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

1.084551385s ago: executing program 1 (id=1570):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3}, {0xd, 0xfff1}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0xf, 0x20000fff, 0x4, 0x8, 0xd20b, 0x2, 0xe48c, 0xe16, 0xb, 0x102, 0x5, 0x7ad5785a, 0x0, 0x7, 0x4, 0xffffffff, 0x7, 0x7f, 0x7, 0x3, 0x7, 0x9, 0x8, 0x9a6, 0x3518, 0x8, 0x0, 0x6, 0x0, 0x7, 0x21, 0x7, 0x1, 0xc, 0x14, 0x6, 0x7, 0x4, 0x6, 0x3, 0x8, 0xb, 0xd5aa, 0xfff, 0x8, 0x4, 0x1, 0xfff, 0xffff, 0x4, 0xb, 0x1, 0x7, 0x101, 0x6, 0x75a, 0x0, 0x5, 0x3, 0x400, 0xfffffff7, 0x6, 0xfffffffd, 0xfffffdfd, 0x3, 0x7fffffff, 0xd, 0x4, 0x21, 0x4a, 0x3, 0x5, 0x5, 0x2, 0x0, 0x4, 0x3, 0x8, 0x4, 0x2, 0x10, 0x2, 0x4, 0x10000000, 0x6, 0x80000001, 0x3b, 0x8, 0x2000002, 0x9, 0x800, 0x1, 0x8001, 0x6, 0x2a, 0xffffffff, 0x0, 0x401, 0x8, 0xffffffff, 0x5, 0xa479, 0x8, 0x2, 0x6, 0x8a8, 0x7, 0x2, 0x8, 0x6, 0x4, 0x2, 0x0, 0xba5, 0x7, 0x74a3ae00, 0x9, 0x200, 0x7fec, 0x5, 0xffffffff, 0x478, 0x8001, 0x100, 0x2, 0x9, 0x8f69, 0xe, 0x4b4, 0x2, 0x2, 0x20004, 0x8000, 0x5, 0x6, 0xe26, 0xffffffff, 0x7, 0x8, 0xea98f1e, 0x900000, 0x5, 0xd, 0x8, 0xdc3d, 0x8, 0x40, 0x5, 0x81, 0x9, 0x6, 0xfff, 0x400, 0x1, 0x1, 0x13bd0de8, 0xae2, 0xb0e, 0x9, 0x5, 0x40, 0x5, 0x1, 0x8, 0x3, 0x9e1b, 0x7f, 0xe40e, 0xc4, 0xa, 0x152, 0x9d, 0x7ff, 0x0, 0x8, 0x8, 0xc0, 0x2, 0x52e9, 0x1ff, 0x83c, 0x8, 0x2, 0x6, 0x7bfe, 0x8, 0xd8a, 0x765, 0x6, 0xe247, 0x3, 0x80200, 0x8, 0xe, 0x7, 0x5, 0x7, 0x7, 0x0, 0x9, 0x44, 0xb, 0x3, 0x54d, 0x6fd2, 0x6, 0x3, 0x20007, 0xd, 0x1, 0xffffffff, 0x27fff, 0xfff, 0xd7, 0xb90, 0x6, 0xaec, 0x9, 0xfffffffb, 0xe, 0x407, 0xffff, 0x1, 0x1, 0x6, 0x2, 0xffffffff, 0x2, 0x200, 0x6, 0x1, 0x49f, 0x6, 0x0, 0x1000, 0x8000, 0x4, 0x4, 0xfffffff8, 0x9, 0x3, 0x7, 0x1, 0x6, 0xdee, 0x3, 0x9, 0x6, 0x8, 0x8, 0x8, 0x3, 0x9, 0x5, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4004000)

970.950239ms ago: executing program 1 (id=1571):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0xc0089364, 0x1000000000000)

849.444323ms ago: executing program 1 (id=1572):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

703.266107ms ago: executing program 1 (id=1573):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902240001060000000904"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x76, 0xfa, 0xf, 0x10, 0x1c40, 0x534, 0xbc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x3e, 0xf6, 0x35, 0x40, 0x4bb, 0x951, 0x6549, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbe, 0x0, 0x20, 0x9, "", [{{0x9, 0x4, 0xf2, 0x8, 0x0, 0x88, 0xfc, 0x7f, 0x7}}]}}]}}, 0x0)

544.102392ms ago: executing program 4 (id=1574):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

240.489622ms ago: executing program 0 (id=1575):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socket(0x840000000002, 0x3, 0x100)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES16=r1], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

101.667736ms ago: executing program 0 (id=1576):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
cachestat(0xffffffffffffffff, &(0x7f0000000000)={0xf3, 0x1}, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0)
r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0xcea5, 0x6)

0s ago: executing program 3 (id=1577):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @string={0x4, 0x3, "f749"}}, 0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

nge from 0 to 65536
[  240.817482][ T6868] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  240.839070][ T8588] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  240.857027][ T6868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  240.906444][ T6868] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  240.922136][ T8588] XFS (loop2): Ending clean mount
[  240.970077][ T6868] usb 2-1: media controller created
[  241.038182][ T6868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  241.121661][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  241.125973][ T6868] zl10353_read_register: readreg error (reg=127, ret==0)
[  241.136106][ T6868] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  241.144323][ T6868] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  241.161175][ T6868] usb 2-1: USB disconnect, device number 20
[  241.205672][ T5774] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  241.259133][ T6868] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  241.472716][ T5813] cdc_ncm 4-1:1.0: bind() failure
[  241.482944][ T5813] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  241.489955][ T5813] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  241.498331][ T5813] usbtest: probe of 4-1:1.1 failed with error -71
[  241.512840][ T5813] usb 4-1: USB disconnect, device number 14
[  241.681641][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  242.161634][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  242.721629][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  242.869602][ T8613] loop3: detected capacity change from 0 to 764
[  243.201927][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  243.381545][ T5813] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  243.581327][ T5813] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  243.622349][ T5813] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  243.642815][ T5813] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  243.691061][ T5813] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  243.705242][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  243.714239][ T5813] usb 2-1: Product: syz
[  243.718538][ T5813] usb 2-1: Manufacturer: syz
[  243.724159][ T5813] usb 2-1: SerialNumber: syz
[  243.761648][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  243.952354][ T5813] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  244.091767][ T8632] loop3: detected capacity change from 0 to 128
[  244.125604][ T8632] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  244.173661][ T5813] usb 2-1: USB disconnect, device number 21
[  244.209001][ T5813] usblp0: removed
[  244.228976][ T8632] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  244.261228][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  244.400246][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  244.499633][ T8638] loop3: detected capacity change from 0 to 512
[  244.524684][ T8638] EXT4-fs (loop3): 1 truncate cleaned up
[  244.532312][ T8638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.577966][ T8638] overlayfs: upper fs needs to support d_type.
[  244.617968][ T8636] loop2: detected capacity change from 0 to 32768
[  244.628553][ T8638] overlayfs: invalid origin (0000)
[  244.635997][ T8636] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1019 (8636)
[  244.690904][ T8636] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  244.714548][ T8636] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  244.742042][ T8636] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  244.758398][ T8636] BTRFS info (device loop2): use zstd compression, level 3
[  244.765930][ T8636] BTRFS info (device loop2): using free space tree
[  244.801598][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  244.875567][ T5773] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  244.902959][ T5773] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  244.922588][ T5773] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[  244.961791][ T8636] BTRFS info (device loop2): enabling ssd optimizations
[  244.968823][ T8636] BTRFS info (device loop2): auto enabling async discard
[  244.994314][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.281678][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  245.375399][ T5774] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  245.841664][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  245.880259][ T8667] loop0: detected capacity change from 0 to 256
[  245.890257][ T8660] loop3: detected capacity change from 0 to 32768
[  245.918962][ T8667] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  245.967553][ T8660] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1021 (8660)
[  245.972228][ T8667] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  246.038478][ T8667] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  246.077774][ T8660] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  246.106935][ T8656] loop1: detected capacity change from 0 to 40427
[  246.124628][ T8660] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  246.157046][ T8656] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  246.192881][ T8660] BTRFS info (device loop3): setting nodatasum
[  246.198407][ T8656] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  246.199098][ T8660] BTRFS info (device loop3): force zlib compression, level 3
[  246.240790][ T8656] F2FS-fs (loop1): invalid crc value
[  246.282597][ T8660] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  246.309061][ T8656] F2FS-fs (loop1): Found nat_bits in checkpoint
[  246.321661][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  246.324592][ T8660] BTRFS info (device loop3): use lzo compression, level 0
[  246.366418][ T8660] BTRFS info (device loop3): turning on flush-on-commit
[  246.399483][ T8660] BTRFS info (device loop3): enabling auto defrag
[  246.449370][ T8660] BTRFS info (device loop3): max_inline at 4096
[  246.472163][ T8660] BTRFS info (device loop3): using free space tree
[  246.541542][ T8673] loop2: detected capacity change from 0 to 1024
[  246.622517][ T8673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  246.635650][ T8673] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.646897][ T8656] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  246.679370][ T8660] BTRFS info (device loop3): enabling ssd optimizations
[  246.679790][ T8656] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  246.759156][ T8656] syz.1.1029: attempt to access beyond end of device
[  246.759156][ T8656] loop1: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[  246.763272][ T8673] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.1025: lblock 3 mapped to illegal pblock 3 (length 1)
[  246.810339][ T8673] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  246.835327][ T8673] EXT4-fs (loop2): This should not happen!! Data will be lost
[  246.835327][ T8673] 
[  246.881576][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  246.884765][ T8656] syz.1.1029: attempt to access beyond end of device
[  246.884765][ T8656] loop1: rw=2051, sector=45096, nr_sectors = 85976 limit=40427
[  246.943209][ T8673] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.1025: lblock 0 mapped to illegal pblock 0 (length 3)
[  246.989209][ T8656] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5
[  247.000752][ T8673] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  247.027085][ T8673] EXT4-fs (loop2): This should not happen!! Data will be lost
[  247.027085][ T8673] 
[  247.043053][ T8656] F2FS-fs (loop1): Issue discard(5637, 5637, 10747) failed, ret: -5
[  247.120574][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.149998][   T12] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:1: lblock 4 mapped to illegal pblock 4 (length 2)
[  247.186585][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  247.226033][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  247.226033][   T12] 
[  247.254944][   T12] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8)
[  247.320681][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  247.361709][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  247.384849][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  247.384849][   T12] 
[  247.446476][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  247.891720][ T5832] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  247.921611][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  248.088278][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.101564][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.111935][ T5832] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  248.131520][ T5832] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  248.140618][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.172703][ T5832] usb 2-1: config 0 descriptor??
[  248.401699][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  248.601748][ T5832] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  248.621717][ T5832] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  248.864366][ T5832] usb 2-1: USB disconnect, device number 22
[  248.915940][ T8730] loop0: detected capacity change from 0 to 512
[  248.939278][ T8730] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  248.961595][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  249.001628][ T8730] EXT4-fs (loop0): 1 truncate cleaned up
[  249.013093][ T8730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.137310][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.441737][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  249.771551][    T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  249.879924][ T8749] loop0: detected capacity change from 0 to 32768
[  249.906052][ T8749] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  249.962399][    T9] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  249.977250][ T8749] XFS (loop0): Ending clean mount
[  249.986451][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  249.999398][ T8749] XFS (loop0): Quotacheck needed: Please wait.
[  250.006012][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  250.017956][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  250.029893][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  250.040351][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  250.049763][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  250.091709][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  250.100925][ T8749] XFS (loop0): Quotacheck: Done.
[  250.107399][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  250.126917][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  250.147153][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  250.162898][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  250.183362][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  250.208740][   T28] audit: type=1800 audit(1778932618.933:91): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1047" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  250.231775][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  250.231794][   T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  250.255122][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  250.287408][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  250.321741][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  250.330596][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  250.341559][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  250.360483][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  250.369493][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  250.378669][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  250.390119][ T5776] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  250.400503][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  250.410946][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  250.420581][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  250.431998][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  250.451549][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  250.460647][    T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  250.469987][    T9] usb 2-1: Product: syz
[  250.474438][    T9] usb 2-1: Manufacturer: syz
[  250.482073][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  250.491367][    T9] usb 2-1: SerialNumber: syz
[  250.496210][   T27] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  250.510135][    T9] usb 2-1: config 0 descriptor??
[  250.524653][   T27] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  250.541730][   T27] usb 3-1: Product: syz
[  250.550533][    T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  250.566800][   T27] usb 3-1: config 0 descriptor??
[  250.585239][   T27] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  250.607642][   T27] usb 3-1: Detected FT232H
[  250.799443][   T27] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  250.863663][    C0] usb 2-1: yurex_control_callback - control failed: -71
[  250.874834][    T9] usb 2-1: USB disconnect, device number 23
[  250.889039][    T9] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  251.041659][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  251.222061][   T27] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  251.301127][ T8775] loop3: detected capacity change from 0 to 128
[  251.339222][   T28] audit: type=1800 audit(1778932620.063:92): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1055" name="a.." dev="loop3" ino=1048616 res=0 errno=0
[  251.464543][   T27] usb 3-1: USB disconnect, device number 14
[  251.500399][   T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  251.523497][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  251.528710][   T27] ftdi_sio 3-1:0.0: device disconnected
[  251.772368][ T8781] overlayfs: invalid origin (000000ca387fe0fb3738702bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f0000000000000000)
[  251.787761][ T8780] tmpfs: Too small a size for current use
[  251.974155][ T8783] sctp: [Deprecated]: syz.0.1053 (pid 8783) Use of struct sctp_assoc_value in delayed_ack socket option.
[  251.974155][ T8783] Use struct sctp_sack_info instead
[  252.081629][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  252.180294][ T8793] input: syz1 as /devices/virtual/input/input25
[  252.193872][ T8792] loop1: detected capacity change from 0 to 512
[  252.204428][ T8793] input: failed to attach handler leds to device input25, error: -6
[  252.236177][ T8792] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  252.304755][ T8792] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  252.381723][ T8792] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1062: bg 0: block 248: padding at end of block bitmap is not set
[  252.451862][ T8792] Quota error (device loop1): write_blk: dquota write failed
[  252.459938][ T8792] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  252.500818][ T8799] loop0: detected capacity change from 0 to 512
[  252.509130][ T8792] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1062: Failed to acquire dquot type 1
[  252.524125][ T8801] loop3: detected capacity change from 0 to 512
[  252.545945][ T8801] EXT4-fs (loop3): Test dummy encryption mode enabled
[  252.561681][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  252.569480][ T8799] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  252.578780][ T8792] EXT4-fs (loop1): 1 truncate cleaned up
[  252.606345][ T8801] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  252.644539][ T8792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  252.658756][ T8801] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  252.672135][ T8799] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.1065: bad orphan inode 15
[  252.689911][ T8799] ext4_test_bit(bit=14, block=18) = 1
[  252.696014][ T8799] is_bad_inode(inode)=0
[  252.699530][ T8801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.700714][ T8799] NEXT_ORPHAN(inode)=1023
[  252.740728][ T8799] max_ino=32
[  252.749072][ T8803] loop2: detected capacity change from 0 to 4096
[  252.761416][ T8803] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  252.778546][ T8799] i_nlink=0
[  252.804452][ T8799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  252.857498][ T8799] ext2 filesystem being mounted at /255/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  252.876563][ T8803] ntfs: volume version 3.1.
[  252.892704][ T8792] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  252.941683][ T8792] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  252.979519][ T8792] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1062: Failed to acquire dquot type 1
[  252.979660][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.007841][ T8799] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1065: path /255/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0
[  253.121596][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  253.195284][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  253.205789][ T5074] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  253.239237][ T5074] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1
[  253.317254][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  253.459260][ T8812] loop1: detected capacity change from 0 to 512
[  253.472441][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'.
[  253.510245][ T8812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  253.594798][ T8812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002]
[  253.602067][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  253.644109][ T8812] System zones: 1-12
[  253.663772][ T8812] EXT4-fs (loop1): 1 truncate cleaned up
[  253.712911][ T8812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.802379][ T8823] loop3: detected capacity change from 0 to 2048
[  253.823768][ T8823] EXT4-fs: Ignoring removed oldalloc option
[  253.869529][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.935088][ T8823] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  253.961722][ T8823] System zones: 0-7
[  253.967271][ T8823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.160944][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.161867][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  254.253054][ T8832] loop2: detected capacity change from 0 to 4096
[  254.276901][ T8832] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  254.551747][ T8832] ntfs3: loop2: ino=1e, "file1" ntfs3_write_inode failed, -22.
[  254.641679][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  254.741139][ T8829] loop0: detected capacity change from 0 to 32768
[  254.789860][ T8829] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1077 (8829)
[  254.840060][ T8829] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  254.873680][ T8829] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  254.931686][ T8829] BTRFS info (device loop0): enabling auto defrag
[  254.938199][ T8829] BTRFS info (device loop0): use no compression
[  254.959535][ T8829] BTRFS info (device loop0): max_inline at 4096
[  254.981777][ T8829] BTRFS info (device loop0): using free space tree
[  255.069505][ T8829] BTRFS info (device loop0): enabling ssd optimizations
[  255.091638][ T8829] BTRFS info (device loop0): auto enabling async discard
[  255.201596][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  255.447818][ T5776] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  255.633098][ T6568] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (6568)
[  255.681598][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  255.746818][ T8853] loop2: detected capacity change from 0 to 32768
[  255.778472][ T8853] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1086 (8853)
[  255.823748][ T8853] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  255.852013][ T8853] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  255.862229][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  255.884932][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  255.895244][ T8853] BTRFS info (device loop2): turning on sync discard
[  255.905654][ T8853] BTRFS info (device loop2): turning on async discard
[  255.912843][ T8853] BTRFS info (device loop2): using free space tree
[  256.154332][ T8853] BTRFS info (device loop2): enabling ssd optimizations
[  256.203525][ T8891] netlink: 'syz.0.1095': attribute type 10 has an invalid length.
[  256.241602][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  256.567994][ T5774] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  256.721603][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  256.836845][ T6568] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (6568)
[  257.137625][ T8902] netlink: 'syz.0.1100': attribute type 10 has an invalid length.
[  257.151613][ T8901] (null): rxe_set_mtu: Set mtu to 256
[  257.191593][ T8901] rdma_rxe: rxe_newlink: failed to add vcan0
[  257.218217][ T8902] team0: Port device dummy0 added
[  257.257019][ T8903] netlink: 'syz.0.1100': attribute type 10 has an invalid length.
[  257.281682][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  257.406151][ T8903] team0: Port device dummy0 removed
[  257.432442][ T8903] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  257.495724][ T8906] loop1: detected capacity change from 0 to 2048
[  257.637112][ T8889] loop3: detected capacity change from 0 to 32768
[  257.645764][ T8889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1087 (8889)
[  257.659082][ T8906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.761674][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  257.829938][ T8889] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  257.925252][ T8889] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  257.949289][ T8906] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1092: bg 0: block 234: padding at end of block bitmap is not set
[  257.966633][ T8889] BTRFS info (device loop3): setting nodatasum
[  257.979855][ T8889] BTRFS info (device loop3): force zlib compression, level 3
[  258.006233][ T8889] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  258.017766][ T8906] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 816 with error 28
[  258.041389][ T8889] BTRFS info (device loop3): use lzo compression, level 0
[  258.048610][ T8889] BTRFS info (device loop3): turning on flush-on-commit
[  258.055964][ T8906] EXT4-fs (loop1): This should not happen!! Data will be lost
[  258.055964][ T8906] 
[  258.079336][ T8906] EXT4-fs (loop1): Total free blocks count 0
[  258.126825][ T8906] EXT4-fs (loop1): Free/Dirty block details
[  258.144772][ T8889] BTRFS info (device loop3): enabling auto defrag
[  258.151307][ T8889] BTRFS info (device loop3): max_inline at 4096
[  258.161586][ T8906] EXT4-fs (loop1): free_blocks=0
[  258.175322][ T8889] BTRFS info (device loop3): using free space tree
[  258.182119][ T8906] EXT4-fs (loop1): dirty_blocks=832
[  258.197661][ T8906] EXT4-fs (loop1): Block reservation details
[  258.211616][ T8906] EXT4-fs (loop1): i_reserved_data_blocks=52
[  258.304945][ T8897] loop2: detected capacity change from 0 to 40427
[  258.321731][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  258.388930][ T8897] F2FS-fs (loop2): invalid crc value
[  258.495979][ T8897] F2FS-fs (loop2): Found nat_bits in checkpoint
[  258.746091][ T8889] BTRFS info (device loop3): enabling ssd optimizations
[  258.753419][ T8897] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  258.801808][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  258.986895][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.061672][ T5774] syz-executor: attempt to access beyond end of device
[  259.061672][ T5774] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  259.104449][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  259.196968][ T8943] loop1: detected capacity change from 0 to 512
[  259.226254][ T8943] EXT4-fs: Ignoring removed oldalloc option
[  259.279661][ T8943] EXT4-fs (loop1): 1 truncate cleaned up
[  259.334814][ T8943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.361598][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  259.634995][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  259.841764][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  259.897923][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.233670][ T8949] loop0: detected capacity change from 0 to 512
[  260.263306][ T8951] input: syz0 as /devices/virtual/input/input26
[  260.303817][ T8949] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  260.392317][ T8949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  260.401597][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  260.541033][ T8949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.613698][ T8949] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.735238][   T28] audit: type=1800 audit(1778932629.463:93): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1103" name=0AF301 dev="loop0" ino=18 res=0 errno=0
[  260.881648][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  261.063105][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.441646][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  261.674843][ T8967] loop2: detected capacity change from 0 to 512
[  261.705416][ T8967] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  261.758944][ T8967] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1108: bad orphan inode 131083
[  261.773555][ T8967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.820509][ T8967] syz.2.1108 (pid 8967) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  261.921718][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  261.967430][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.481635][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  262.573822][ T8958] loop3: detected capacity change from 0 to 40427
[  262.641566][ T8958] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  262.671657][ T5839] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  262.682834][ T8958] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  262.691337][ T8958] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff
[  262.781835][ T8958] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8
[  262.830444][ T8958] F2FS-fs (loop3): invalid crc value
[  262.881142][ T8979] loop2: detected capacity change from 0 to 256
[  262.941377][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.961635][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  263.001573][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.011380][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  263.040859][ T8958] F2FS-fs (loop3): Found nat_bits in checkpoint
[  263.111498][ T5839] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  263.120607][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.171808][   T28] audit: type=1326 audit(1778932631.893:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c659ce59 code=0x7ffc0000
[  263.184522][ T5839] usb 1-1: config 0 descriptor??
[  263.295915][   T28] audit: type=1326 audit(1778932631.923:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c659ce59 code=0x7ffc0000
[  263.324952][ T8958] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  263.358603][ T8958] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  263.376293][   T28] audit: type=1326 audit(1778932631.923:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23c653e1d9 code=0x7ffc0000
[  263.480404][   T28] audit: type=1326 audit(1778932631.923:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c659ce59 code=0x7ffc0000
[  263.521822][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  263.554244][ T8958] syz.3.1101: attempt to access beyond end of device
[  263.554244][ T8958] loop3: rw=2049, sector=53248, nr_sectors = 96 limit=40427
[  263.576647][   T28] audit: type=1326 audit(1778932631.933:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23c653e1d9 code=0x7ffc0000
[  263.635950][   T28] audit: type=1326 audit(1778932631.933:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c659ce59 code=0x7ffc0000
[  263.705691][ T8992] syz.3.1101: attempt to access beyond end of device
[  263.705691][ T8992] loop3: rw=2049, sector=53344, nr_sectors = 128 limit=40427
[  263.735611][   T28] audit: type=1326 audit(1778932631.933:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23c653e1d9 code=0x7ffc0000
[  263.791320][ T5839] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving
[  263.811090][   T28] audit: type=1326 audit(1778932631.933:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23c653e1d9 code=0x7ffc0000
[  263.858110][ T5839] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  263.875109][ T5773] syz-executor: attempt to access beyond end of device
[  263.875109][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  263.881930][   T28] audit: type=1326 audit(1778932631.933:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.1.1114" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23c653e1d9 code=0x7ffc0000
[  263.913418][ T5773] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  264.001604][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  264.194099][ T5839] usb 1-1: USB disconnect, device number 21
[  264.542923][ T8989] loop2: detected capacity change from 0 to 40427
[  264.561623][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  264.580396][ T8989] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  264.603455][ T8989] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  264.636233][ T8989] F2FS-fs (loop2): invalid crc value
[  264.674216][ T8989] F2FS-fs (loop2): Found nat_bits in checkpoint
[  265.014322][ T8989] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  265.041575][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  265.063851][ T8989] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  265.295918][ T8989] syz.2.1116: attempt to access beyond end of device
[  265.295918][ T8989] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[  265.339957][ T9005] loop1: detected capacity change from 0 to 2048
[  265.375220][ T8989] syz.2.1116: attempt to access beyond end of device
[  265.375220][ T8989] loop2: rw=2051, sector=45096, nr_sectors = 85976 limit=40427
[  265.428682][ T8989] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5
[  265.444567][ T9005]  loop1: p3 < > p4 < >
[  265.448913][ T9005] loop1: partition table partially beyond EOD, truncated
[  265.470846][ T9005] loop1: p3 start 4284289 is beyond EOD, truncated
[  265.480788][ T8989] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5
[  265.601622][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  265.973885][ T9000] loop3: detected capacity change from 0 to 131072
[  265.982920][ T9000] F2FS-fs (loop3): invalid crc value
[  265.993692][ T6568] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  266.017054][ T9000] F2FS-fs (loop3): Found nat_bits in checkpoint
[  266.070311][ T9000] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  266.081742][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  266.239732][ T6568] udevd[6568]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  266.385873][ T9018] loop2: detected capacity change from 0 to 2048
[  266.420159][ T9018] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  266.456687][ T9018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.476109][ T9019] loop0: detected capacity change from 0 to 256
[  266.641629][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  267.078098][ T9023] loop2: detected capacity change from 0 to 64
[  267.121592][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  267.440003][ T9015] loop1: detected capacity change from 0 to 40427
[  267.477060][ T9015] F2FS-fs (loop1): heap/no_heap options were deprecated
[  267.501584][ T9015] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff
[  267.533341][ T9015] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x77e8c
[  267.576906][ T9015] F2FS-fs (loop1): invalid crc value
[  267.589227][ T9029] loop2: detected capacity change from 0 to 512
[  267.631653][ T9015] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0
[  267.667613][ T9015] F2FS-fs (loop1): Found nat_bits in checkpoint
[  267.675480][ T9029] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  267.681918][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  267.711016][ T9027] loop0: detected capacity change from 0 to 8192
[  267.719522][ T9029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  267.757932][ T9027] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  267.800163][ T9029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.824770][ T9015] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650
[  267.846235][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40
[  267.901656][ T9029] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.925817][ T9015] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  267.995908][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  267.995924][   T28] audit: type=1800 audit(1778932636.723:115): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1132" name=0AF301 dev="loop2" ino=18 res=0 errno=0
[  268.161596][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  268.169951][ T9015] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910
[  268.289641][ T9015] syz.1.1123: attempt to access beyond end of device
[  268.289641][ T9015] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  268.315740][ T9015] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of f2fs_mpage_readpages+0x1cf6/0x1ea0
[  268.341012][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.356179][ T9015] syz.1.1123: attempt to access beyond end of device
[  268.356179][ T9015] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  268.477862][ T5775] syz-executor: attempt to access beyond end of device
[  268.477862][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  268.506330][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  268.601845][ T9045] netlink: 'syz.2.1134': attribute type 15 has an invalid length.
[  268.624523][ T9045] netlink: 'syz.2.1134': attribute type 15 has an invalid length.
[  268.721586][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  268.786687][ T9047] syzkaller1: entered promiscuous mode
[  268.801825][ T9047] syzkaller1: entered allmulticast mode
[  269.059250][ T9040] loop0: detected capacity change from 0 to 32768
[  269.147328][ T9040] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  269.201697][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  269.219516][ T9040] XFS (loop0): Ending clean mount
[  269.470366][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'.
[  269.574554][ T5776] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  269.594257][ T9072] input: syz1 as /devices/virtual/input/input27
[  269.679664][ T9075] netlink: 'syz.2.1144': attribute type 34 has an invalid length.
[  269.761604][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  269.830938][ T9078] loop1: detected capacity change from 0 to 1024
[  269.845979][ T9078] EXT4-fs: Ignoring removed orlov option
[  269.892988][ T9078] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  269.966348][ T9078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.093091][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.241603][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  270.514790][ T9099] netlink: 'syz.3.1155': attribute type 10 has an invalid length.
[  270.558169][ T9099] bond0: (slave bond_slave_0): Releasing backup interface
[  270.801611][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  270.921893][ T5839] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  271.121606][ T5839] usb 3-1: Using ep0 maxpacket: 32
[  271.128904][ T5839] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  271.147871][ T5839] usb 3-1: config 0 has no interface number 0
[  271.178841][ T5839] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  271.201539][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.220551][ T5839] usb 3-1: Product: syz
[  271.230750][ T5839] usb 3-1: Manufacturer: syz
[  271.240204][ T5839] usb 3-1: SerialNumber: syz
[  271.274711][ T5839] usb 3-1: config 0 descriptor??
[  271.281590][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  271.323169][ T5839] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  271.497255][ T9118] loop1: detected capacity change from 0 to 4096
[  271.540280][ T5839] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  271.585459][ T5839] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  271.698539][ T9118] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  271.834696][   T28] audit: type=1800 audit(2000000000.700:116): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1163" name="file1" dev="loop1" ino=30 res=0 errno=0
[  271.841926][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  272.005309][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  272.021819][    T9] usb 3-1: USB disconnect, device number 15
[  272.052608][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  272.103592][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  272.153240][    T9] quatech2 3-1:0.51: device disconnected
[  272.223669][ T9124] syzkaller1: entered promiscuous mode
[  272.229210][ T9124] syzkaller1: entered allmulticast mode
[  272.321582][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  272.686106][ T9131] netlink: 'syz.2.1167': attribute type 10 has an invalid length.
[  272.711991][ T9131] bond0: (slave bond_slave_0): Releasing backup interface
[  272.881754][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  273.073383][ T9133] loop3: detected capacity change from 0 to 8192
[  273.361698][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  273.762941][ T9150] loop2: detected capacity change from 0 to 128
[  273.798243][ T9150] FAT-fs (loop2): Directory bread(block 162) failed
[  273.814477][ T9150] FAT-fs (loop2): Directory bread(block 163) failed
[  273.827868][ T9150] FAT-fs (loop2): Directory bread(block 164) failed
[  273.835091][ T9150] FAT-fs (loop2): Directory bread(block 165) failed
[  273.847834][ T9150] FAT-fs (loop2): Directory bread(block 166) failed
[  273.856178][ T9150] FAT-fs (loop2): Directory bread(block 167) failed
[  273.881516][ T9150] FAT-fs (loop2): Directory bread(block 168) failed
[  273.896499][ T9150] FAT-fs (loop2): Directory bread(block 169) failed
[  273.911608][ T9150] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  273.921947][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  273.983063][ T9150] FAT-fs (loop2): Directory bread(block 162) failed
[  274.051710][ T9150] FAT-fs (loop2): Directory bread(block 163) failed
[  274.296230][ T9161] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  274.306632][ T9161] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  274.392009][ T5832] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  274.401609][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  274.470619][ T9148] loop0: detected capacity change from 0 to 40427
[  274.481865][ T5839] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  274.491588][ T9148] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3)
[  274.499343][ T9148] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  274.551791][ T9148] F2FS-fs (loop0): heap/no_heap options were deprecated
[  274.559074][ T9148] F2FS-fs (loop0): Image doesn't support compression
[  274.575182][ T9148] F2FS-fs (loop0): invalid crc value
[  274.585514][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  274.589002][ T9148] F2FS-fs (loop0): Found nat_bits in checkpoint
[  274.606478][ T5832] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  274.628930][ T5832] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  274.669578][ T5832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  274.693252][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  274.713313][ T5832] usb 2-1: Product: syz
[  274.717769][ T5832] usb 2-1: Manufacturer: syz
[  274.726688][ T5832] usb 2-1: SerialNumber: syz
[  274.732083][ T5839] usb 3-1: Using ep0 maxpacket: 32
[  274.740185][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.770370][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.789470][ T9148] F2FS-fs (loop0): Start checkpoint disabled!
[  274.800182][ T5839] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  274.817508][ T9169] capability: warning: `syz.3.1184' uses 32-bit capabilities (legacy support in use)
[  274.829203][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.842545][ T9148] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  274.849649][ T9148] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  274.868748][ T5839] usb 3-1: config 0 descriptor??
[  274.961586][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  275.005071][ T5832] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  275.162383][   T70] kworker/u4:4: attempt to access beyond end of device
[  275.162383][   T70] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  275.186245][   T70] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  275.213159][   T70] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  275.229397][ T5832] usb 2-1: USB disconnect, device number 24
[  275.323180][ T5839] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  275.426751][ T9156] usblp0: removed
[  275.442168][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  275.587795][ T5832] usb 3-1: USB disconnect, device number 16
[  275.828546][ T9184] loop0: detected capacity change from 0 to 764
[  275.902861][ T5813] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  276.001585][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  276.115381][ T5813] usb 4-1: Using ep0 maxpacket: 32
[  276.151155][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11
[  276.182526][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024
[  276.198604][ T5813] usb 4-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37
[  276.227744][ T5813] usb 4-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0
[  276.242101][ T5813] usb 4-1: Product: syz
[  276.246320][ T5813] usb 4-1: Manufacturer: syz
[  276.273269][ T5813] usb 4-1: config 0 descriptor??
[  276.289876][ T9179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  276.366859][ T9190] loop2: detected capacity change from 0 to 512
[  276.375857][ T9190] EXT4-fs: inline encryption not supported
[  276.381948][ T9190] ext4: Unknown parameter 'nouser_xattr'
[  276.437365][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  276.481581][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  276.776845][ T5813] hid-generic 0003:25DD:F3D2.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.3-1/input0
[  276.973740][ T5839] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  277.041582][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  277.074298][ T5813] usb 4-1: USB disconnect, device number 15
[  277.186700][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.201987][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.221676][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  277.251852][ T5839] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  277.270867][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.294834][ T9213] loop1: detected capacity change from 0 to 128
[  277.306633][ T5839] usb 3-1: config 0 descriptor??
[  277.331878][ T9213] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  277.366791][ T9213] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  277.521575][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  277.550668][ T9217] loop1: detected capacity change from 0 to 764
[  277.603918][ T9219] vcan0 speed is unknown, defaulting to 1000
[  277.756032][ T5839] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[  277.812394][ T5839] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  278.001917][ T5813] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  278.028667][ T5839] usb 3-1: USB disconnect, device number 17
[  278.081584][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  278.199079][ T5813] usb 4-1: unable to get BOS descriptor or descriptor too short
[  278.218854][ T5813] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  278.240642][ T5813] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  278.266563][ T5813] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  278.281489][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.289610][ T5813] usb 4-1: Product: syz
[  278.300066][ T5813] usb 4-1: Manufacturer: syz
[  278.305046][ T5813] usb 4-1: SerialNumber: syz
[  278.310954][ T9231] ALSA: mixer_oss: invalid OSS volume 'sit0'
[  278.504243][ T9234] loop1: detected capacity change from 0 to 4096
[  278.560275][ T5813] usb 4-1: Can't get UAC3 power state for id 10
[  278.566852][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  278.609077][ T9236] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.659363][ T5813] usb 4-1: 2:0: failed to get current value for ch 0 (-71)
[  278.701959][ T5813] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  278.739879][ T9238] loop2: detected capacity change from 0 to 512
[  278.871625][ T9238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.959070][ T5813] usb 4-1: USB disconnect, device number 16
[  278.963360][ T9238] ext4 filesystem being mounted at /321/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.108679][ T6569] udevd[6569]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  279.122008][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  279.177109][ T9245] loop0: detected capacity change from 0 to 512
[  279.280988][ T9245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.338853][ T9245] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.576025][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.601573][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  279.616215][ T5774] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  279.707708][ T5774] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  279.773792][ T5774] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  279.804884][ T5774] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  279.838112][ T5774] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  279.900381][ T5774] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  279.931988][ T5774] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  279.948152][ T5774] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  279.964522][ T9257] loop1: detected capacity change from 0 to 512
[  279.989805][ T5774] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  280.036549][ T5774] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  280.052730][ T9257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.072115][ T9257] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.161944][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  280.375646][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.584496][ T8669] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.641590][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  280.719303][ T9251] loop3: detected capacity change from 0 to 32768
[  280.751837][ T9251] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1215 (9251)
[  280.812573][ T9251] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  280.841763][ T9251] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  280.855455][ T9251] BTRFS info (device loop3): force clearing of disk cache
[  280.863930][ T9251] BTRFS info (device loop3): enabling auto defrag
[  280.870462][ T9251] BTRFS info (device loop3): max_inline at 0
[  280.899287][ T9251] BTRFS info (device loop3): using free space tree
[  281.051217][ T9263] loop0: detected capacity change from 0 to 32768
[  281.071946][ T9278] Zero length message leads to an empty skb
[  281.090397][ T9251] BTRFS info (device loop3): enabling ssd optimizations
[  281.151725][ T9251] BTRFS info (device loop3): rebuilding free space tree
[  281.186148][ T9263] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  281.201634][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  281.214082][ T9292] loop1: detected capacity change from 0 to 512
[  281.431179][   T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.461709][ T9263] XFS (loop0): Ending clean mount
[  281.603704][   T28] audit: type=1800 audit(2000000010.460:117): pid=9263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1221" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  281.681668][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  281.805566][ T5773] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  281.838229][   T49] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  281.862920][   T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.954136][ T5776] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  282.114491][   T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.241585][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  282.366966][   T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.721758][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  282.933589][ T9307] loop0: detected capacity change from 0 to 4096
[  283.070844][   T70] tipc: Disabling bearer <udp:syz2>
[  283.107993][   T70] tipc: Disabling bearer <udp:s>
[  283.154585][   T70] tipc: Left network mode
[  283.281601][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  283.410365][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  283.433487][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  283.463732][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  283.486718][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  283.494680][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  283.502321][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  283.569226][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  283.588717][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  283.598707][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  283.622333][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  283.630958][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  283.639035][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  283.960460][ T9315] vcan0 speed is unknown, defaulting to 1000
[  284.321674][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  284.460006][ T9342] loop1: detected capacity change from 0 to 1024
[  284.518609][ T9342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.845517][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.979859][ T9337] loop3: detected capacity change from 0 to 32768
[  285.016802][ T9337] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  285.047689][ T9359] loop1: detected capacity change from 0 to 1024
[  285.132557][ T9359] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  285.178918][ T9337] XFS (loop3): Ending clean mount
[  285.187538][ T9359] System zones: 0-1, 3-8
[  285.203307][ T9359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  285.216811][ T9359] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.261924][   T28] audit: type=1800 audit(2000000014.120:118): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1243" name="file1" dev="loop1" ino=15 res=0 errno=0
[  285.340893][ T9337] XFS (loop3): User initiated shutdown received.
[  285.352119][ T9337] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  285.362021][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  285.391615][ T9337] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  285.483056][ T2959] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:7: lblock 4 mapped to illegal pblock 4 (length 2)
[  285.517347][ T2959] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  285.553803][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  285.575755][ T2959] EXT4-fs (loop1): This should not happen!! Data will be lost
[  285.575755][ T2959] 
[  285.613811][ T5074] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 4)
[  285.682697][ T5074] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117
[  285.707660][ T5074] EXT4-fs (loop1): This should not happen!! Data will be lost
[  285.707660][ T5074] 
[  285.720194][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  285.761671][ T5778] Bluetooth: hci1: command tx timeout
[  285.838803][ T9315] chnl_net:caif_netlink_parms(): no params data found
[  286.401594][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  286.431731][   T70] hsr_slave_0: left promiscuous mode
[  286.459057][   T70] hsr_slave_1: left promiscuous mode
[  286.472263][   T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.481738][   T70] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.506323][   T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.521550][   T70] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.540313][   T70] bridge_slave_1: left allmulticast mode
[  286.550492][   T70] bridge_slave_1: left promiscuous mode
[  286.565729][   T70] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.605997][   T70] bridge_slave_0: left allmulticast mode
[  286.611910][   T70] bridge_slave_0: left promiscuous mode
[  286.617674][   T70] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.654376][ T9396] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  286.724598][   T70] veth1_macvtap: left promiscuous mode
[  286.732187][   T70] veth0_macvtap: left promiscuous mode
[  286.737887][   T70] veth1_vlan: left promiscuous mode
[  286.762240][   T70] veth0_vlan: left promiscuous mode
[  287.239212][ T9393] loop1: detected capacity change from 0 to 40427
[  287.269624][ T9393] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  287.278776][ T9393] F2FS-fs (loop1): heap/no_heap options were deprecated
[  287.299348][ T9393] F2FS-fs (loop1): Image doesn't support compression
[  287.320182][ T9393] F2FS-fs (loop1): invalid crc value
[  287.357841][ T9393] F2FS-fs (loop1): Found nat_bits in checkpoint
[  287.441608][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  287.508410][ T9393] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  287.532052][   T70] bond1 (unregistering): Released all slaves
[  287.599499][ T9393] F2FS-fs (loop1): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix.
[  287.721796][ T5775] syz-executor: attempt to access beyond end of device
[  287.721796][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  287.763654][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  287.781012][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  287.841806][ T5778] Bluetooth: hci1: command tx timeout
[  288.191927][ T9402] loop0: detected capacity change from 0 to 32768
[  288.220117][ T9402] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1250 (9402)
[  288.319091][ T9402] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  288.357497][ T9402] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  288.401931][ T9402] BTRFS info (device loop0): enabling disk space caching
[  288.409041][ T9402] BTRFS info (device loop0): force clearing of disk cache
[  288.451678][ T9402] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  288.460973][ T9402] BTRFS info (device loop0): use lzo compression, level 0
[  288.481602][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  288.543557][ T9402] BTRFS info (device loop0): disk space caching is enabled
[  288.692698][ T9402] BTRFS info (device loop0): enabling ssd optimizations
[  288.709949][ T9402] BTRFS info (device loop0): auto enabling async discard
[  288.740456][ T9402] BTRFS info (device loop0): rebuilding free space tree
[  288.792453][ T9402] BTRFS info (device loop0): disabling free space tree
[  288.821758][ T9402] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  288.856787][ T9402] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  288.914956][ T9425] loop1: detected capacity change from 0 to 1024
[  289.047838][ T9425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  289.069770][ T9425] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.144537][ T9425] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.1252: lblock 3 mapped to illegal pblock 3 (length 3)
[  289.206712][ T9425] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  289.231724][ T9425] EXT4-fs (loop1): This should not happen!! Data will be lost
[  289.231724][ T9425] 
[  289.307992][ T9430] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm syz.1.1252: lblock 8 mapped to illegal pblock 8 (length 4)
[  289.355820][ T5776] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  289.361982][ T9430] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117
[  289.402681][ T9430] EXT4-fs (loop1): This should not happen!! Data will be lost
[  289.402681][ T9430] 
[  289.428904][ T9430] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.1252: lblock 0 mapped to illegal pblock 0 (length 3)
[  289.453058][ T9430] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  289.481640][ T9430] EXT4-fs (loop1): This should not happen!! Data will be lost
[  289.481640][ T9430] 
[  289.521798][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  289.638030][   T12] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 7: comm kworker/u4:1: lblock 7 mapped to illegal pblock 7 (length 1)
[  289.691659][   T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117
[  289.704666][   T12] EXT4-fs (loop1): This should not happen!! Data will be lost
[  289.704666][   T12] 
[  289.719030][ T3474] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:8: bg 0: block 112: padding at end of block bitmap is not set
[  289.747382][ T3474] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28
[  289.762660][   T70] team0 (unregistering): Port device team_slave_1 removed
[  289.922234][ T5778] Bluetooth: hci1: command tx timeout
[  290.018000][   T70] team0 (unregistering): Port device team_slave_0 removed
[  290.243075][   T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.333205][ T9439] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1253'.
[  290.561581][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  290.574851][ T9445] netlink: 'syz.1.1259': attribute type 1 has an invalid length.
[  290.601514][ T9445] netlink: 'syz.1.1259': attribute type 2 has an invalid length.
[  290.609349][ T9445] netlink: 'syz.1.1259': attribute type 2 has an invalid length.
[  290.617430][ T9445] netlink: 'syz.1.1259': attribute type 3 has an invalid length.
[  290.650486][ T9445] netlink: 'syz.1.1259': attribute type 4 has an invalid length.
[  290.658456][ T9445] netlink: 'syz.1.1259': attribute type 5 has an invalid length.
[  290.680660][ T9445] netlink: 'syz.1.1259': attribute type 6 has an invalid length.
[  290.711535][ T9445] netlink: 'syz.1.1259': attribute type 7 has an invalid length.
[  290.719328][ T9445] netlink: 'syz.1.1259': attribute type 9 has an invalid length.
[  290.768704][ T9445] netlink: 'syz.1.1259': attribute type 10 has an invalid length.
[  290.781626][ T9445] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.1259'.
[  291.352920][   T70] bond0 (unregistering): Released all slaves
[  291.601604][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  291.694151][ T9315] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.706347][ T9315] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.733084][ T9315] bridge_slave_0: entered allmulticast mode
[  291.765419][ T9315] bridge_slave_0: entered promiscuous mode
[  291.781006][ T9452] loop1: detected capacity change from 0 to 32768
[  291.800332][ T9315] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.832991][ T9315] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.840374][ T9315] bridge_slave_1: entered allmulticast mode
[  291.861382][ T9452] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  291.923515][ T9315] bridge_slave_1: entered promiscuous mode
[  292.003515][ T5778] Bluetooth: hci1: command tx timeout
[  292.079222][ T9452] XFS (loop1): Ending clean mount
[  292.112204][ T9466] loop3: detected capacity change from 0 to 128
[  292.120133][ T9315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.159655][ T9315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.183723][ T9466] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  292.216183][   T28] audit: type=1800 audit(2000000021.070:119): pid=9452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1262" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  292.254783][ T9466] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  292.296048][ T9315] team0: Port device team_slave_0 added
[  292.315010][ T9315] team0: Port device team_slave_1 added
[  292.499460][ T9315] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.525477][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  292.551453][ T9315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.616983][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  292.641627][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  292.706254][ T9315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.722692][ T9315] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.729688][ T9315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.755635][    C1] vkms_vblank_simulate: vblank timer overrun
[  292.762477][ T9315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.065524][   T70] IPVS: stop unused estimator thread 0...
[  293.078561][ T9315] hsr_slave_0: entered promiscuous mode
[  293.140729][ T9315] hsr_slave_1: entered promiscuous mode
[  293.172526][ T9315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  293.180157][ T9315] Cannot create hsr debugfs directory
[  293.681576][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  293.753956][ T9499] loop0: detected capacity change from 0 to 512
[  293.768469][ T9499] EXT4-fs: Ignoring removed nomblk_io_submit option
[  293.793148][ T9499] EXT4-fs: Ignoring removed mblk_io_submit option
[  293.833807][ T9499] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  293.910867][ T9505] loop1: detected capacity change from 0 to 512
[  293.914843][ T9499] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  293.928713][ T9505] EXT4-fs: Ignoring removed mblk_io_submit option
[  293.980690][ T9499] EXT4-fs (loop0): 1 truncate cleaned up
[  293.984124][ T9505] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  294.010987][ T9499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.040421][ T9505] EXT4-fs error (device loop1): __ext4_iget:5078: inode #11: block 1: comm syz.1.1275: invalid block
[  294.052227][ T9505] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1275: couldn't read orphan inode 11 (err -117)
[  294.066324][ T9505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.123297][ T9315] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  294.208829][ T9499] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #2: block 4: comm syz.0.1273: lblock 0 mapped to illegal pblock 4 (length 1)
[  294.225479][ T9315] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  294.285434][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.298126][ T9315] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  294.337643][ T9315] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  294.361717][ T9499] EXT4-fs (loop0): Remounting filesystem read-only
[  294.517937][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.642465][ T9315] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.709841][ T9315] 8021q: adding VLAN 0 to HW filter on device team0
[  294.721607][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  294.759196][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.766409][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.811463][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.818664][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.039750][ T9315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  295.098475][ T9532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  295.523232][ T9546] syzkaller1: entered promiscuous mode
[  295.528786][ T9546] syzkaller1: entered allmulticast mode
[  295.711372][ T9315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.761670][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  295.794679][ T9526] loop3: detected capacity change from 0 to 32768
[  295.843208][ T9526] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1279 (9526)
[  295.909247][ T9526] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  295.943887][ T9526] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  295.974939][ T9526] BTRFS info (device loop3): metadata ratio 0
[  296.002873][ T9526] BTRFS info (device loop3): using free space tree
[  296.267257][ T9526] BTRFS info (device loop3): enabling ssd optimizations
[  296.291911][ T9526] BTRFS info (device loop3): auto enabling async discard
[  296.425019][ T9587] loop1: detected capacity change from 0 to 16
[  296.463325][ T9587] erofs: (device loop1): mounted with root inode @ nid 36.
[  296.499744][   T28] audit: type=1800 audit(2000000025.360:120): pid=9526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1279" name="file0" dev="loop3" ino=258 res=0 errno=0
[  296.575837][ T9587] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  296.636899][ T9587] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  296.706462][ T9593] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  296.761546][ T9593] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  296.802055][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  296.925673][ T5773] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  297.070088][ T9315] veth0_vlan: entered promiscuous mode
[  297.162913][ T9315] veth1_vlan: entered promiscuous mode
[  297.309623][ T9315] veth0_macvtap: entered promiscuous mode
[  297.363722][ T9315] veth1_macvtap: entered promiscuous mode
[  297.471771][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.510404][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.539763][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.566236][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.589080][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.611916][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.690744][ T9315] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.740999][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.763508][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.774043][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.785019][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.795423][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.809578][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.839254][ T9315] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.846784][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  297.890102][ T9315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.909234][ T9315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.960018][ T9315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.991512][ T9315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.410741][ T9605] loop3: detected capacity change from 0 to 32768
[  298.436213][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.460363][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.503340][ T9605] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  298.503340][ T9605] 
[  298.555756][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.565521][ T9605] ERROR: (device loop3): remounting filesystem as read-only
[  298.598051][ T9605] xtLookup: xtSearch returned -5
[  298.603624][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.635757][ T9605] free_index: error reading directory table
[  298.753825][ T9620] loop1: detected capacity change from 0 to 128
[  298.799140][ T9620] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  298.881562][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  298.912958][ T9620] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  298.973418][ T9620] ext2 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.979998][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'.
[  299.118546][   T28] audit: type=1800 audit(2000000027.980:121): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1296" name="bus" dev="loop1" ino=12 res=0 errno=0
[  299.262687][ T9610] loop0: detected capacity change from 0 to 32768
[  299.307565][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  299.921676][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  299.978631][ T9647] loop3: detected capacity change from 0 to 256
[  300.001054][ T9647] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  300.031516][ T9647] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  300.079031][ T9647] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  300.424691][ T9635] loop4: detected capacity change from 0 to 32768
[  300.533473][ T9635] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  300.586786][ T9635] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  300.837787][ T9635] XFS (loop4): Ending clean mount
[  300.887338][ T9635] XFS (loop4): Quotacheck needed: Please wait.
[  300.961586][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  301.091957][ T9635] XFS (loop4): Quotacheck: Done.
[  301.567695][ T9315] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  301.824443][ T9665] loop0: detected capacity change from 0 to 131072
[  301.843276][ T9665] F2FS-fs (loop0): invalid crc value
[  301.884735][ T9665] F2FS-fs (loop0): Found nat_bits in checkpoint
[  301.935237][ T9665] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  301.981146][ T9685] loop1: detected capacity change from 0 to 1024
[  302.001571][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  302.060167][ T9665] F2FS-fs (loop0): inconsistent node block, nid:7, node_footer[nid:2782593031,ino:0,ofs:0,cpver:1219692001,blkaddr:4611]
[  302.096853][ T9665] F2FS-fs (loop0): inconsistent node block, nid:7, node_footer[nid:2782593031,ino:0,ofs:0,cpver:1219692001,blkaddr:4611]
[  302.134273][ T9685] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  302.147966][ T9685] hfsplus: xattr searching failed
[  302.237825][ T9685] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  302.279326][ T9685] hfsplus: xattr search failed
[  302.286544][ T9685] hfsplus: b-tree write err: -5, ino 2
[  302.451169][ T3474] hfsplus: b-tree write err: -5, ino 25
[  302.483233][ T3474] hfsplus: b-tree write err: -5, ino 4
[  302.488861][ T3474] hfsplus: b-tree write err: -5, ino 2
[  302.512122][ T3474] hfsplus: b-tree write err: -5, ino 28
[  302.831527][ T5813] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  303.041591][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  303.049799][ T5813] usb 4-1: Using ep0 maxpacket: 8
[  303.235800][ T5813] usb 4-1: unable to get BOS descriptor or descriptor too short
[  303.261617][ T5813] usb 4-1: unable to read config index 0 descriptor/start: -71
[  303.269270][ T5813] usb 4-1: can't read configurations, error -71
[  303.623752][ T9717] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  303.721018][ T9722] loop0: detected capacity change from 0 to 512
[  303.742456][ T9722] EXT4-fs: Ignoring removed oldalloc option
[  303.782260][ T9722] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  303.855553][ T9722] EXT4-fs (loop0): 1 truncate cleaned up
[  303.872878][ T9722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.081600][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  304.136277][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.374728][ T9743] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  304.413345][ T9743] CIFS mount error: No usable UNC path provided in device string!
[  304.413345][ T9743] 
[  304.429616][ T9743] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  305.115278][ T9764] loop4: detected capacity change from 0 to 4096
[  305.121799][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  305.182746][ T9767] loop1: detected capacity change from 0 to 1024
[  305.266613][ T9764] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  305.282697][ T9767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  305.295862][ T9767] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.368382][ T9764] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[  305.457624][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  305.466707][ T9772] validate_nla: 2 callbacks suppressed
[  305.466720][ T9772] netlink: 'syz.0.1332': attribute type 9 has an invalid length.
[  305.491758][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  305.511199][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  305.530134][ T9772] netlink: 'syz.0.1332': attribute type 9 has an invalid length.
[  305.534215][   T28] audit: type=1800 audit(2000000034.390:122): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1331" name="file1" dev="loop4" ino=30 res=0 errno=0
[  305.555629][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  305.584433][ T9764] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  305.587933][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  306.162131][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  306.936413][ T9811] loop8: detected capacity change from 0 to 7
[  306.956033][ T9811]  loop8: [POWERTEC] p1
[  306.971929][ T9811] loop8: p1 start 448 is beyond EOD, truncated
[  306.982588][ T9809] loop0: detected capacity change from 0 to 4096
[  307.036621][ T9809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.098919][   T28] audit: type=1800 audit(2000000035.960:123): pid=9809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1348" name="bus" dev="loop0" ino=18 res=0 errno=0
[  307.201586][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  307.294221][ T9794] loop3: detected capacity change from 0 to 32768
[  307.357042][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.381892][ T9794] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1341 (9794)
[  307.450220][ T9794] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  307.468454][ T9800] loop1: detected capacity change from 0 to 40427
[  307.493899][ T9800] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  307.511844][ T9794] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  307.532544][ T9800] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  307.565307][ T9794] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  307.592151][ T9800] F2FS-fs (loop1): invalid crc value
[  307.618702][ T9794] BTRFS info (device loop3): trying to use backup root at mount time
[  307.644661][ T9794] BTRFS info (device loop3): enabling auto defrag
[  307.670549][ T9794] BTRFS info (device loop3): turning on sync discard
[  307.677855][ T9794] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  307.710298][ T9794] BTRFS info (device loop3): trying to use backup root at mount time
[  307.732648][ T9794] BTRFS info (device loop3): using free space tree
[  307.789832][ T9800] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  307.797484][ T5813] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  307.814872][ T9800] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  307.980382][ T5775] syz-executor: attempt to access beyond end of device
[  307.980382][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  308.012207][ T5813] usb 5-1: Using ep0 maxpacket: 32
[  308.026704][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  308.039216][ T5813] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  308.056971][ T9845] loop0: detected capacity change from 0 to 2048
[  308.066150][ T5813] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  308.080150][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  308.088628][ T5813] usb 5-1: Product: syz
[  308.093062][ T5813] usb 5-1: Manufacturer: syz
[  308.097964][ T5813] usb 5-1: SerialNumber: syz
[  308.112508][ T9794] BTRFS warning (device loop3: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  308.135332][ T5813] usb 5-1: config 0 descriptor??
[  308.141768][ T9820] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  308.152117][ T5813] hub 5-1:0.0: bad descriptor, ignoring hub
[  308.158082][ T5813] hub: probe of 5-1:0.0 failed with error -5
[  308.176034][ T9794] BTRFS info (device loop3: state M): trying to use backup root at mount time
[  308.206064][ T9794] BTRFS warning (device loop3: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  308.228525][ T9845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.241556][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  308.293321][ T9794] BTRFS info (device loop3: state M): trying to use backup root at mount time
[  308.391899][ T9845] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.1354: reserved inode found cleared - inode=1
[  308.476967][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  309.212581][ T9820] usb 5-1: reset high-speed USB device number 2 using dummy_hcd
[  309.237291][ T9866] loop1: detected capacity change from 0 to 256
[  309.265159][ T9866] exfat: Deprecated parameter 'utf8'
[  309.281600][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  309.314057][ T9866] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  309.414007][ T9820] usb 5-1: device firmware changed
[  309.428601][ T6868] usb 5-1: USB disconnect, device number 2
[  309.611839][ T6868] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  309.621273][ T9870] loop1: detected capacity change from 0 to 512
[  309.663364][ T9870] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1364: inode has both inline data and extents flags
[  309.679440][ T9870] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1364: couldn't read orphan inode 15 (err -117)
[  309.680592][ T9872] loop3: detected capacity change from 0 to 512
[  309.717656][ T9870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback.
[  309.778732][ T9872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  309.821790][ T6868] usb 5-1: Using ep0 maxpacket: 32
[  309.828101][ T9872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003]
[  309.852778][ T9872] System zones: 1-2, 4-12, 8-8
[  309.862076][ T6868] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  309.872188][ T9872] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1365: iget: bad i_size value: 38620345925642
[  309.903835][ T9872] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1365: couldn't read orphan inode 15 (err -117)
[  309.924913][ T6868] usb 5-1: string descriptor 0 read error: -22
[  309.931263][ T6868] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  309.953285][ T9872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.970662][ T6868] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  309.988140][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000.
[  310.013609][ T6868] usb 5-1: config 0 descriptor??
[  310.042021][ T9848] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  310.072802][ T6868] hub 5-1:0.0: bad descriptor, ignoring hub
[  310.093085][ T6868] hub: probe of 5-1:0.0 failed with error -5
[  310.130436][ T9872] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.1365: bg 0: block 5: invalid block bitmap
[  310.208398][ T9879] loop1: detected capacity change from 0 to 1024
[  310.222271][ T9872] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 63 with max blocks 65 with error 28
[  310.230109][ T9879] EXT4-fs: Ignoring removed bh option
[  310.270775][ T9872] EXT4-fs (loop3): This should not happen!! Data will be lost
[  310.270775][ T9872] 
[  310.296791][ T9872] EXT4-fs (loop3): Total free blocks count 0
[  310.317982][ T9879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.321839][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  310.344798][ T9872] EXT4-fs (loop3): Free/Dirty block details
[  310.350981][ T9872] EXT4-fs (loop3): free_blocks=0
[  310.370594][ T9872] EXT4-fs (loop3): dirty_blocks=65
[  310.399302][ T9872] EXT4-fs (loop3): Block reservation details
[  310.406515][ T9872] EXT4-fs (loop3): i_reserved_data_blocks=65
[  310.434208][   T28] audit: type=1800 audit(2000000039.300:124): pid=9879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1366" name="file1" dev="loop1" ino=15 res=0 errno=0
[  310.481817][   T27] usb 5-1: USB disconnect, device number 3
[  310.556648][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.634446][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.137341][ T9905] syzkaller1: entered promiscuous mode
[  311.144937][ T9907] loop4: detected capacity change from 0 to 512
[  311.155068][ T9905] syzkaller1: entered allmulticast mode
[  311.195500][ T9907] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  311.219874][ T9907] EXT4-fs (loop4): 1 truncate cleaned up
[  311.233256][ T9907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.361717][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  311.502326][ T9315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.622480][ T9915] netlink: 'syz.4.1377': attribute type 39 has an invalid length.
[  311.794415][ T9908] loop3: detected capacity change from 0 to 32768
[  311.820149][ T9908] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  311.886225][ T9908] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  312.010263][ T9908] XFS (loop3): Ending clean mount
[  312.037133][ T9927] loop1: detected capacity change from 0 to 512
[  312.082943][ T9929] netlink: 'syz.0.1379': attribute type 20 has an invalid length.
[  312.095733][ T9908] XFS (loop3): Quotacheck needed: Please wait.
[  312.234808][ T9908] XFS (loop3): Quotacheck: Done.
[  312.401665][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  312.509162][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  312.997165][ T5832] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  313.191569][ T5832] usb 2-1: Using ep0 maxpacket: 32
[  313.199031][ T5832] usb 2-1: config 0 has no interfaces?
[  313.204820][ T9725] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  313.227134][ T5832] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  313.244851][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.266080][ T5832] usb 2-1: Product: syz
[  313.270312][ T5832] usb 2-1: Manufacturer: syz
[  313.301476][ T5832] usb 2-1: SerialNumber: syz
[  313.312821][ T5832] usb 2-1: config 0 descriptor??
[  313.441667][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  313.562814][ T5832] usb 2-1: USB disconnect, device number 25
[  313.824792][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'.
[  313.836715][ T9962] hsr_slave_0: left promiscuous mode
[  313.845171][ T9962] hsr_slave_1: left promiscuous mode
[  314.372172][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'.
[  314.381129][ T9975] netlink: 'syz.3.1396': attribute type 20 has an invalid length.
[  314.428744][ T9975] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  314.438446][ T9975] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  314.447543][ T9975] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  314.456336][ T9975] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  314.481623][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  314.760773][ T9978] loop4: detected capacity change from 0 to 32768
[  314.771377][ T9978] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1397 (9978)
[  314.818212][ T9978] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  314.828531][ T9978] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  314.837298][ T9978] BTRFS info (device loop4): using free space tree
[  314.960377][ T5778] block nbd1: Receive control failed (result -107)
[  315.002799][ T9978] BTRFS info (device loop4): enabling ssd optimizations
[  315.009852][ T9978] BTRFS info (device loop4): auto enabling async discard
[  315.052051][ T9981] block nbd1: shutting down sockets
[  315.158294][   T28] audit: type=1800 audit(2000000044.020:125): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1397" name="file1" dev="loop4" ino=260 res=0 errno=0
[  315.448540][ T9315] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  315.521611][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  315.747663][T10016] loop3: detected capacity change from 0 to 256
[  315.843636][T10016] FAT-fs (loop3): Directory bread(block 64) failed
[  315.886688][T10016] FAT-fs (loop3): Directory bread(block 65) failed
[  316.048909][T10016] FAT-fs (loop3): Directory bread(block 66) failed
[  316.082439][T10016] FAT-fs (loop3): Directory bread(block 67) failed
[  316.089127][T10016] FAT-fs (loop3): Directory bread(block 68) failed
[  316.177588][T10016] FAT-fs (loop3): Directory bread(block 69) failed
[  316.206450][T10016] FAT-fs (loop3): Directory bread(block 70) failed
[  316.219440][T10016] FAT-fs (loop3): Directory bread(block 71) failed
[  316.262798][T10016] FAT-fs (loop3): Directory bread(block 72) failed
[  316.321994][T10016] FAT-fs (loop3): Directory bread(block 73) failed
[  316.561574][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  316.575237][   T28] audit: type=1800 audit(2000000045.440:126): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1404" name="bus" dev="loop3" ino=1048641 res=0 errno=0
[  316.819156][T10042] loop1: detected capacity change from 0 to 128
[  316.856430][T10042] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  316.881862][T10042] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  317.285584][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  317.292117][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  317.307861][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  317.601666][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  317.611674][ T5832] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  317.868908][ T5832] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  317.903388][ T5832] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  317.931953][ T5832] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  317.991533][ T5832] usb 1-1: config 220 has no interface number 2
[  317.997928][ T5832] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  318.042172][ T5832] usb 1-1: config 220 interface 0 has no altsetting 0
[  318.081529][ T5832] usb 1-1: config 220 interface 76 has no altsetting 0
[  318.088477][ T5832] usb 1-1: config 220 interface 1 has no altsetting 0
[  318.135462][ T5832] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  318.151812][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.170093][ T5832] usb 1-1: Product: syz
[  318.203157][ T5832] usb 1-1: Manufacturer: syz
[  318.207835][ T5832] usb 1-1: SerialNumber: syz
[  318.418235][T10082] loop3: detected capacity change from 0 to 512
[  318.486647][ T5832] usb 1-1: selecting invalid altsetting 0
[  318.509651][T10082] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  318.520690][ T5832] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  318.581540][ T5832] usb 1-1: No valid video chain found.
[  318.623511][ T5832] usb 1-1: selecting invalid altsetting 0
[  318.631821][ T5832] usbtest: probe of 1-1:220.1 failed with error -22
[  318.641817][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  318.643571][T10082] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1424: bad orphan inode 131083
[  318.650992][ T5832] usb 1-1: USB disconnect, device number 22
[  318.763482][T10082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.015356][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.621157][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1430'.
[  319.681565][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  319.930708][T10121] loop5: detected capacity change from 0 to 7
[  320.004233][T10121] Dev loop5: unable to read RDB block 7
[  320.034537][T10121]  loop5: AHDI p2
[  320.070016][T10121] loop5: partition table partially beyond EOD, truncated
[  320.394737][T10140] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1441'.
[  320.569977][T10148] loop1: detected capacity change from 0 to 512
[  320.591871][ T5832] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  320.605033][T10148] EXT4-fs: Ignoring removed mblk_io_submit option
[  320.654993][T10148] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  320.678425][T10148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  320.721638][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  320.733602][T10148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.784177][ T5832] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  320.794760][ T5832] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  320.817310][ T5832] usb 1-1: config 1 interface 0 has no altsetting 0
[  320.823568][T10148] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  320.836196][ T5832] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  320.855720][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.871495][ T5832] usb 1-1: Product: syz
[  320.875722][ T5832] usb 1-1: Manufacturer: syz
[  320.881122][ T5832] usb 1-1: SerialNumber: syz
[  320.889734][T10136] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  320.897709][T10136] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  321.022419][   T28] audit: type=1800 audit(2000000049.890:127): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1443" name="file2" dev="loop1" ino=16 res=0 errno=0
[  321.204523][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.303094][T10158] loop4: detected capacity change from 0 to 32768
[  321.314700][T10158] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1446 (10158)
[  321.343109][T10158] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  321.353450][T10158] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  321.362392][T10158] BTRFS info (device loop4): turning on async discard
[  321.369284][T10158] BTRFS info (device loop4): metadata ratio 0
[  321.375518][T10158] BTRFS info (device loop4): setting nodatasum
[  321.381846][T10158] BTRFS info (device loop4): using free space tree
[  321.533811][T10158] BTRFS info (device loop4): enabling ssd optimizations
[  321.611263][T10184] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid'
[  321.611263][T10184] 
[  321.745224][ T9315] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  321.763739][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  322.002487][ T5832] (unnamed net_device) (uninitialized): Assigned a random MAC address: 76:65:5b:46:15:dd
[  322.088533][ T5832] rtl8150 1-1:1.0: eth5: rtl8150 is detected
[  322.158302][ T5832] usb 1-1: USB disconnect, device number 23
[  322.419350][T10201] loop4: detected capacity change from 0 to 1024
[  322.438720][T10201] EXT4-fs: Ignoring removed orlov option
[  322.567682][T10201] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  322.581306][T10201] System zones: 0-1, 3-12
[  322.601091][T10201] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.678936][T10201] EXT4-fs (loop4): re-mounted 00000000-0500-0000-0000-000000000000 ro.
[  322.801612][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  322.877252][ T9315] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  323.140702][T10214] loop4: detected capacity change from 0 to 4096
[  323.159350][T10214] EXT4-fs: Ignoring removed mblk_io_submit option
[  323.203954][T10214] EXT4-fs (loop4): Test dummy encryption mode enabled
[  323.262224][T10214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.362662][T10218] syzkaller1: entered promiscuous mode
[  323.368202][T10218] syzkaller1: entered allmulticast mode
[  323.429401][T10193] loop1: detected capacity change from 0 to 32768
[  323.509645][T10214] fs-verity: sha512 using implementation "sha512-avx2"
[  323.841740][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  323.853214][ T9315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.061157][T10238] loop5: detected capacity change from 0 to 7
[  324.108384][T10238]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[  324.121797][T10238] loop5: partition table partially beyond EOD, truncated
[  324.173168][T10238] loop5: p1 size 487441168 extends beyond EOD, truncated
[  324.393575][ T6567] udevd[6567]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  324.754886][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1468'.
[  324.881611][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  325.144972][T10239] loop1: detected capacity change from 0 to 32768
[  325.242921][T10239] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  325.251611][ T5832] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  325.384552][T10239] XFS (loop1): Ending clean mount
[  325.431471][ T5832] usb 5-1: Using ep0 maxpacket: 16
[  325.446218][ T5832] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  325.471063][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.516135][ T5832] usb 5-1: Product: syz
[  325.531514][ T5832] usb 5-1: Manufacturer: syz
[  325.536173][ T5832] usb 5-1: SerialNumber: syz
[  325.542294][T10239] XFS (loop1): User initiated shutdown received.
[  325.581634][T10239] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  325.588119][ T5832] usb 5-1: config 0 descriptor??
[  325.635141][   T28] audit: type=1800 audit(2000000055.500:128): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1461" name="bus" dev="loop1" ino=4425 res=0 errno=0
[  325.648654][ T5832] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  325.671876][T10239] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  325.692591][ T5832] usb 5-1: Detected FT-X
[  325.774033][ T5775] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  325.831536][ T6868] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  325.905797][ T5832] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  325.921676][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  326.058787][ T6868] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  326.090418][T10258] loop3: detected capacity change from 0 to 40427
[  326.100800][ T6868] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  326.134390][ T6868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.144979][T10258] F2FS-fs (loop3): invalid crc value
[  326.163765][T10258] F2FS-fs (loop3): Found nat_bits in checkpoint
[  326.175727][ T6868] usb 1-1: Product: syz
[  326.179953][ T6868] usb 1-1: Manufacturer: syz
[  326.194855][ T6868] usb 1-1: SerialNumber: syz
[  326.329915][T10258] F2FS-fs (loop3): Start checkpoint disabled!
[  326.337214][ T5832] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  326.387042][T10258] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  326.446547][ T6868] usb 1-1: selecting invalid altsetting 1
[  326.597513][    T9] usb 5-1: USB disconnect, device number 4
[  326.623272][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  326.649325][ T6868] LME2510(C): Firmware Status: 06 03 47 00 00 00
[  326.649385][ T6868] usb 1-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state
[  326.685049][ T6868] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  326.690535][    T9] ftdi_sio 5-1:0.0: device disconnected
[  326.747990][ T6868] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15)
[  326.788914][ T6868] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000)
[  326.800044][T10298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1475'.
[  326.811717][ T6868] usb 1-1: media controller created
[  326.818679][ T6868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  326.844138][T10280] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  326.867857][ T2959] kworker/u4:7: attempt to access beyond end of device
[  326.867857][ T2959] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  326.942700][ T2959] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  326.959823][ T2959] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  326.962211][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  327.021936][ T6868] DVB: Unable to find symbol m88rs2000_attach()
[  327.061689][ T6868] LME2510(C): DM04/QQBOX Not Powered up or not Supported
[  327.061727][ T6868] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  327.158463][ T6868] usb 1-1: USB disconnect, device number 24
[  327.505598][T10313] macvlan1: entered promiscuous mode
[  327.553587][T10313] ipvlan0: entered promiscuous mode
[  327.580412][T10313] ipvlan0: left promiscuous mode
[  327.605956][T10313] macvlan1: left promiscuous mode
[  327.726132][T10317] loop4: detected capacity change from 0 to 4096
[  327.775353][T10317] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  327.952788][T10317] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  328.001615][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  328.019063][T10317] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[  328.679376][T10345] input: syz1 as /devices/virtual/input/input29
[  329.041592][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  329.671537][   T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  329.881556][   T27] usb 5-1: Using ep0 maxpacket: 8
[  329.897127][   T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  329.922844][   T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  329.948269][   T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  330.002091][   T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  330.067901][   T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  330.082084][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  330.125355][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.402642][   T27] usb 5-1: GET_CAPABILITIES returned 0
[  330.431360][   T27] usbtmc 5-1:16.0: can't read capabilities
[  330.657457][   T27] usb 5-1: USB disconnect, device number 5
[  331.097242][T10372] loop3: detected capacity change from 0 to 32768
[  331.120113][T10372] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  331.122008][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  331.319192][T10372] XFS (loop3): Ending clean mount
[  331.454457][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  331.832175][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1504'.
[  332.161568][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  333.201557][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  333.382644][T10424] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0)
[  333.901907][T10434] tap0: tun_chr_ioctl cmd 1074025675
[  333.908361][T10434] tap0: persist enabled
[  333.913555][T10434] tap0: tun_chr_ioctl cmd 1074025675
[  333.919025][T10434] tap0: persist disabled
[  334.031515][ T6868] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  334.067448][T10440] loop4: detected capacity change from 0 to 128
[  334.134610][T10440] syz.4.1524: attempt to access beyond end of device
[  334.134610][T10440] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128
[  334.187749][T10442] loop3: detected capacity change from 0 to 1024
[  334.221216][T10440] syz.4.1524: attempt to access beyond end of device
[  334.221216][T10440] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128
[  334.240771][T10442] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  334.241965][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  334.253467][ T6868] usb 2-1: Using ep0 maxpacket: 16
[  334.276422][ T6868] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  334.289887][ T6868] usb 2-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00
[  334.301528][ T5813] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  334.306263][ T6868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.321781][ T6868] usb 2-1: config 0 descriptor??
[  334.495875][ T5813] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  334.507261][ T5813] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  334.518599][T10444] input: syz0 as /devices/virtual/input/input30
[  334.525206][ T5813] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  334.548926][ T5813] usb 1-1: config 220 has no interface number 2
[  334.555658][ T5813] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  334.591795][ T5813] usb 1-1: config 220 interface 0 has no altsetting 0
[  334.605903][ T5813] usb 1-1: config 220 interface 76 has no altsetting 0
[  334.614478][ T5813] usb 1-1: config 220 interface 1 has no altsetting 0
[  334.624575][ T5813] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  334.642236][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.660747][ T5813] usb 1-1: Product: syz
[  334.665287][ T5813] usb 1-1: Manufacturer: syz
[  334.669924][ T5813] usb 1-1: SerialNumber: syz
[  334.783378][ T6868] betop 0003:8380:1850.0015: unknown global tag 0xe
[  334.806297][ T6868] betop 0003:8380:1850.0015: item 0 4 1 14 parsing failed
[  334.817214][ T6868] betop 0003:8380:1850.0015: parse failed
[  334.823695][ T6868] betop: probe of 0003:8380:1850.0015 failed with error -22
[  334.940754][ T5813] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  334.957654][ T5813] usb 1-1: No valid video chain found.
[  334.972904][ T5813] usb 1-1: selecting invalid altsetting 0
[  334.988121][T10453] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1531'.
[  335.026107][ T5813] usb 1-1: selecting invalid altsetting 0
[  335.042401][ T6868] usb 2-1: USB disconnect, device number 26
[  335.051503][ T5813] usbtest: probe of 1-1:220.1 failed with error -22
[  335.077433][ T5813] usb 1-1: USB disconnect, device number 25
[  335.280860][T10449] loop4: detected capacity change from 0 to 32768
[  335.281873][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  335.323969][   T28] audit: type=1800 audit(2000000065.190:129): pid=10449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1529" name="file1" dev="loop4" ino=4 res=0 errno=0
[  335.376616][T10457] loop3: detected capacity change from 0 to 2048
[  335.425953][T10457] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  335.723499][T10462] input: syz0 as /devices/virtual/input/input31
[  335.871918][T10466] loop5: detected capacity change from 0 to 4095
[  336.027978][T10470] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1539'.
[  336.106795][T10472] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  336.321630][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  336.691529][ T5813] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  336.891552][ T5813] usb 5-1: Using ep0 maxpacket: 16
[  336.927945][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.957436][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.996847][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  337.019988][ T5813] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  337.040214][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.063885][ T5813] usb 5-1: config 0 descriptor??
[  337.170692][T10494] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1551'.
[  337.361579][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  337.509526][ T5813] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0016/input/input32
[  337.545053][T10501] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  337.642151][ T5813] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  337.701836][ T6868] usb 5-1: USB disconnect, device number 6
[  337.803536][T10492] loop1: detected capacity change from 0 to 32768
[  337.857064][   T28] audit: type=1800 audit(2000000067.720:130): pid=10492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1549" name="file1" dev="loop1" ino=4 res=0 errno=0
[  337.919854][T10505] fido_id[10505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  338.383047][T10514] loop3: detected capacity change from 0 to 1024
[  338.401743][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  338.437773][ T6568] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  338.745598][T10519] loop4: detected capacity change from 0 to 256
[  338.985960][T10523] input: syz1 as /devices/virtual/input/input33
[  339.341365][T10534] loop3: detected capacity change from 0 to 512
[  339.441639][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  339.976689][T10544] loop3: detected capacity change from 0 to 32768
[  340.052779][   T28] audit: type=1800 audit(2000000069.920:131): pid=10544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1568" name="file1" dev="loop3" ino=4 res=0 errno=0
[  340.226919][T10536] [U] 
[  340.409395][T10559] loop4: detected capacity change from 0 to 8192
[  340.421120][T10559] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  340.448364][T10559] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  340.458435][T10559] REISERFS (device loop4): using ordered data mode
[  340.469783][ T5813] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  340.472022][T10559] reiserfs: using flush barriers
[  340.482142][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  340.497475][T10559] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  340.522118][T10559] REISERFS (device loop4): checking transaction log (loop4)
[  340.657790][ T5813] usb 2-1: config 0 has no interfaces?
[  340.668712][ T5813] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  340.711107][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.740236][ T5813] usb 2-1: config 0 descriptor??
[  340.792330][T10559] REISERFS (device loop4): Using tea hash to sort names
[  340.799903][T10559] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  340.839148][  T113] ==================================================================
[  340.847309][  T113] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x751/0xa70
[  340.855008][  T113] Read of size 4 at addr ffff88807ceadc94 by task jfsCommit/113
[  340.862672][  T113] 
[  340.865030][  T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0
[  340.872255][  T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  340.882364][  T113] Call Trace:
[  340.885672][  T113]  <TASK>
[  340.888626][  T113]  dump_stack_lvl+0x18c/0x250
[  340.893355][  T113]  ? __lock_acquire+0x7d40/0x7d40
[  340.898416][  T113]  ? show_regs_print_info+0x20/0x20
[  340.903659][  T113]  ? load_image+0x420/0x420
[  340.908209][  T113]  ? __virt_addr_valid+0x469/0x540
[  340.913367][  T113]  print_report+0xa8/0x210
[  340.917916][  T113]  ? jfs_lazycommit+0x751/0xa70
[  340.922809][  T113]  kasan_report+0x117/0x150
[  340.927348][  T113]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  340.932850][  T113]  ? jfs_lazycommit+0x751/0xa70
[  340.937842][  T113]  jfs_lazycommit+0x751/0xa70
[  340.942564][  T113]  ? txFreelock+0x5a0/0x5a0
[  340.947103][  T113]  ? do_task_dead+0xd0/0xd0
[  340.951640][  T113]  ? __kthread_parkme+0x7a/0x1c0
[  340.956611][  T113]  kthread+0x2fa/0x390
[  340.960716][  T113]  ? txFreelock+0x5a0/0x5a0
[  340.965283][  T113]  ? kthread_blkcg+0xd0/0xd0
[  340.969910][  T113]  ret_from_fork+0x48/0x80
[  340.974367][  T113]  ? kthread_blkcg+0xd0/0xd0
[  340.979032][  T113]  ret_from_fork_asm+0x11/0x20
[  340.983840][  T113]  </TASK>
[  340.986890][  T113] 
[  340.989248][  T113] Allocated by task 10544:
[  340.993691][  T113]  kasan_set_track+0x4e/0x70
[  340.998306][  T113]  __kasan_kmalloc+0x8f/0xa0
[  341.002916][  T113]  jfs_fill_super+0xdc/0xad0
[  341.007541][  T113]  mount_bdev+0x221/0x2d0
[  341.011893][  T113]  legacy_get_tree+0xea/0x180
[  341.016611][  T113]  vfs_get_tree+0x8c/0x280
[  341.021056][  T113]  do_new_mount+0x24b/0xa40
[  341.025598][  T113]  __se_sys_mount+0x2e7/0x3d0
[  341.030311][  T113]  do_syscall_64+0x55/0xa0
[  341.034760][  T113]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  341.040700][  T113] 
[  341.043054][  T113] Freed by task 5773:
[  341.047052][  T113]  kasan_set_track+0x4e/0x70
[  341.051677][  T113]  kasan_save_free_info+0x2e/0x50
[  341.056743][  T113]  ____kasan_slab_free+0x126/0x1e0
[  341.061894][  T113]  slab_free_freelist_hook+0x130/0x1a0
[  341.067390][  T113]  __kmem_cache_free+0xba/0x1e0
[  341.072279][  T113]  generic_shutdown_super+0x134/0x2b0
[  341.077680][  T113]  kill_block_super+0x44/0x90
[  341.082385][  T113]  deactivate_locked_super+0x97/0x100
[  341.087783][  T113]  cleanup_mnt+0x43b/0x4d0
[  341.092230][  T113]  task_work_run+0x1d4/0x260
[  341.096858][  T113]  exit_to_user_mode_loop+0xe6/0x110
[  341.102190][  T113]  exit_to_user_mode_prepare+0xee/0x180
[  341.107776][  T113]  syscall_exit_to_user_mode+0x1a/0x50
[  341.113293][  T113]  do_syscall_64+0x61/0xa0
[  341.117740][  T113]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  341.123674][  T113] 
[  341.126022][  T113] Last potentially related work creation:
[  341.131761][  T113]  kasan_save_stack+0x3e/0x60
[  341.136468][  T113]  __kasan_record_aux_stack+0xaf/0xc0
[  341.141871][  T113]  kvfree_call_rcu+0xee/0x790
[  341.146616][  T113]  drop_sysctl_table+0x394/0x540
[  341.151604][  T113]  drop_sysctl_table+0x3ab/0x540
[  341.156578][  T113]  unregister_sysctl_table+0x41/0x60
[  341.161902][  T113]  addrconf_ifdown+0x1536/0x18c0
[  341.166887][  T113]  addrconf_notify+0x6c6/0x1010
[  341.171767][  T113]  notifier_call_chain+0x197/0x380
[  341.176917][  T113]  unregister_netdevice_many_notify+0x100d/0x1900
[  341.183367][  T113]  ip6gre_exit_batch_net+0x451/0x4a0
[  341.188691][  T113]  cleanup_net+0x795/0xbb0
[  341.193162][  T113]  process_scheduled_works+0xa5d/0x15d0
[  341.198738][  T113]  worker_thread+0xa55/0xfc0
[  341.203359][  T113]  kthread+0x2fa/0x390
[  341.207455][  T113]  ret_from_fork+0x48/0x80
[  341.211904][  T113]  ret_from_fork_asm+0x11/0x20
[  341.216701][  T113] 
[  341.219049][  T113] Second to last potentially related work creation:
[  341.225651][  T113]  kasan_save_stack+0x3e/0x60
[  341.230363][  T113]  __kasan_record_aux_stack+0xaf/0xc0
[  341.235772][  T113]  kvfree_call_rcu+0xee/0x790
[  341.240493][  T113]  drop_sysctl_table+0x394/0x540
[  341.245460][  T113]  drop_sysctl_table+0x3ab/0x540
[  341.250426][  T113]  unregister_sysctl_table+0x41/0x60
[  341.255747][  T113]  inetdev_event+0x79a/0x1630
[  341.260460][  T113]  notifier_call_chain+0x197/0x380
[  341.265600][  T113]  unregister_netdevice_many_notify+0x100d/0x1900
[  341.272069][  T113]  unregister_netdevice_queue+0x32c/0x370
[  341.277819][  T113]  ppp_release+0xf0/0x1f0
[  341.282193][  T113]  __fput+0x234/0x970
[  341.286212][  T113]  task_work_run+0x1d4/0x260
[  341.290858][  T113]  exit_to_user_mode_loop+0xe6/0x110
[  341.296177][  T113]  exit_to_user_mode_prepare+0xee/0x180
[  341.301761][  T113]  syscall_exit_to_user_mode+0x1a/0x50
[  341.301781][T10556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.307234][  T113]  do_syscall_64+0x61/0xa0
[  341.307251][  T113]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  341.307275][  T113] 
[  341.328280][  T113] The buggy address belongs to the object at ffff88807ceadc00
[  341.328280][  T113]  which belongs to the cache kmalloc-256 of size 256
[  341.342365][  T113] The buggy address is located 148 bytes inside of
[  341.342365][  T113]  freed 256-byte region [ffff88807ceadc00, ffff88807ceadd00)
[  341.356193][  T113] 
[  341.358542][  T113] The buggy address belongs to the physical page:
[  341.364991][  T113] page:ffffea0001f3ab00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ceac
[  341.375164][  T113] head:ffffea0001f3ab00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  341.384108][  T113] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  341.392543][  T113] page_type: 0xffffffff()
[  341.396884][  T113] raw: 00fff00000000840 ffff888017c41b40 0000000000000000 dead000000000001
[  341.405477][  T113] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  341.414065][  T113] page dumped because: kasan: bad access detected
[  341.420492][  T113] page_owner tracks the page as allocated
[  341.426214][  T113] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5773, tgid 5773 (syz-executor), ts 86023633099, free_ts 86006972162
[  341.448977][  T113]  post_alloc_hook+0x1c1/0x200
[  341.453770][  T113]  get_page_from_freelist+0x1951/0x19e0
[  341.459339][  T113]  __alloc_pages+0x1f0/0x460
[  341.463941][  T113]  alloc_slab_page+0x4f/0x160
[  341.468631][  T113]  new_slab+0x87/0x2d0
[  341.472709][  T113]  ___slab_alloc+0xc5d/0x12f0
[  341.477409][  T113]  __kmem_cache_alloc_node+0x19e/0x250
[  341.482902][  T113]  __kmalloc_node+0xa4/0x230
[  341.487510][  T113]  memcg_alloc_slab_cgroups+0x87/0x130
[  341.492980][  T113]  new_slab+0xc3/0x2d0
[  341.497057][  T113]  ___slab_alloc+0xc5d/0x12f0
[  341.501754][  T113]  __kmem_cache_alloc_node+0x19e/0x250
[  341.507230][  T113]  __kmalloc_node+0xa4/0x230
[  341.511855][  T113]  kvmalloc_node+0x70/0x180
[  341.516373][  T113]  alloc_fdtable+0x169/0x2c0
[  341.520974][  T113]  dup_fd+0x786/0xa50
[  341.521862][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  341.524957][  T113] page last free stack trace:
[  341.524965][  T113]  free_unref_page_prepare+0x7b2/0x8c0
[  341.541954][  T113]  free_unref_page+0x32/0x2e0
[  341.546658][  T113]  __slab_free+0x35a/0x400
[  341.551080][  T113]  qlist_free_all+0x75/0xd0
[  341.555625][  T113]  kasan_quarantine_reduce+0x143/0x160
[  341.561103][  T113]  __kasan_slab_alloc+0x22/0x80
[  341.565981][  T113]  slab_post_alloc_hook+0x6e/0x4b0
[  341.571120][  T113]  __kmem_cache_alloc_node+0x13a/0x250
[  341.576595][  T113]  __kmalloc+0xa4/0x230
[  341.580770][  T113]  tomoyo_realpath_from_path+0xe3/0x5d0
[  341.586349][  T113]  tomoyo_path_perm+0x282/0x560
[  341.591217][  T113]  security_inode_getattr+0xd3/0x120
[  341.596533][  T113]  __x64_sys_newfstat+0x12c/0x250
[  341.601573][  T113]  do_syscall_64+0x55/0xa0
[  341.606002][  T113]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  341.611910][  T113] 
[  341.614240][  T113] Memory state around the buggy address:
[  341.619875][  T113]  ffff88807ceadb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  341.627949][  T113]  ffff88807ceadc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  341.636015][  T113] >ffff88807ceadc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  341.644079][  T113]                          ^
[  341.648677][  T113]  ffff88807ceadd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  341.656742][  T113]  ffff88807ceadd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  341.664833][  T113] ==================================================================
[  341.672912][  T113] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  341.680121][  T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0
[  341.687331][  T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  341.697392][  T113] Call Trace:
[  341.700678][  T113]  <TASK>
[  341.703621][  T113]  dump_stack_lvl+0x18c/0x250
[  341.708324][  T113]  ? show_regs_print_info+0x20/0x20
[  341.713546][  T113]  ? load_image+0x420/0x420
[  341.718071][  T113]  panic+0x2dc/0x730
[  341.721996][  T113]  ? bpf_jit_dump+0xd0/0xd0
[  341.726522][  T113]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  341.732435][  T113]  ? _raw_spin_unlock+0x40/0x40
[  341.737297][  T113]  ? print_memory_metadata+0x314/0x400
[  341.742777][  T113]  ? jfs_lazycommit+0x751/0xa70
[  341.747649][  T113]  check_panic_on_warn+0x84/0xa0
[  341.752605][  T113]  ? jfs_lazycommit+0x751/0xa70
[  341.757472][  T113]  end_report+0x6f/0x130
[  341.761736][  T113]  kasan_report+0x128/0x150
[  341.766262][  T113]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  341.771743][  T113]  ? jfs_lazycommit+0x751/0xa70
[  341.776636][  T113]  jfs_lazycommit+0x751/0xa70
[  341.781333][  T113]  ? txFreelock+0x5a0/0x5a0
[  341.785848][  T113]  ? do_task_dead+0xd0/0xd0
[  341.790366][  T113]  ? __kthread_parkme+0x7a/0x1c0
[  341.795323][  T113]  kthread+0x2fa/0x390
[  341.799407][  T113]  ? txFreelock+0x5a0/0x5a0
[  341.803938][  T113]  ? kthread_blkcg+0xd0/0xd0
[  341.808551][  T113]  ret_from_fork+0x48/0x80
[  341.812996][  T113]  ? kthread_blkcg+0xd0/0xd0
[  341.817611][  T113]  ret_from_fork_asm+0x11/0x20
[  341.822402][  T113]  </TASK>
[  341.825596][  T113] Kernel Offset: disabled
[  341.829919][  T113] Rebooting in 86400 seconds..