last executing test programs:

1.864126937s ago: executing program 0 (id=888):
unshare(0x400)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, 0x0, 0x0)

1.863936486s ago: executing program 0 (id=889):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc6}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x24008000)

1.762345243s ago: executing program 0 (id=890):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0)

1.753119078s ago: executing program 0 (id=893):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0)

1.528294374s ago: executing program 1 (id=894):
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xd)

1.462451723s ago: executing program 1 (id=895):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00')
getdents(r0, &(0x7f00000000c0)=""/35, 0x23)

1.462081876s ago: executing program 1 (id=896):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x20aa48251336d465}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

1.387370024s ago: executing program 1 (id=897):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0422001a"], 0x4)
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)

1.103941199s ago: executing program 0 (id=898):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getpid()
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = gettid()
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x11, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x2, 0x5, 0x4, 0x1600, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x1, 0x4, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, 0x0, &(0x7f0000000140)=r4}, 0x20)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
r6 = inotify_init()
inotify_add_watch(r6, 0x0, 0x20000002)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

811.606659ms ago: executing program 1 (id=901):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20000000)
getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xea2029dcd3934029}}]}}]}, 0x40}}, 0x24000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

637.61219ms ago: executing program 1 (id=904):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@intr}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x4450, &(0x7f000000cd80)="$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")

637.246653ms ago: executing program 2 (id=905):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

519.363485ms ago: executing program 2 (id=906):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)

464.497036ms ago: executing program 2 (id=907):
r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

203.35674ms ago: executing program 2 (id=908):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0xfffffffffffffd96)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

203.164948ms ago: executing program 2 (id=909):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003800)='net/igmp6\x00')
fcntl$setownex(r0, 0xf, &(0x7f0000003880)={0x1})
fcntl$getflags(r0, 0xb)

117.58338ms ago: executing program 2 (id=910):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)

0s ago: executing program 0 (id=911):
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000100), &(0x7f0000000280))
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000500)={0x0, 0x0, 0x1}, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43550' (ED25519) to the list of known hosts.
syzkaller login: [   49.389486][ T5805] cgroup: Unknown subsys name 'net'
[   49.458882][ T5805] cgroup: Unknown subsys name 'cpuset'
[   49.463350][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.163080][ T5805] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.131025][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.134501][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.137401][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.141221][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.144638][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.188427][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.192065][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.205079][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.208483][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.211316][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.230490][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.233982][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.236788][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.240310][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.243819][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.402418][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   56.589402][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.593082][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.596601][ T5843] bridge_slave_0: entered allmulticast mode
[   56.601501][ T5843] bridge_slave_0: entered promiscuous mode
[   56.607656][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   56.629364][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.632516][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.637929][ T5843] bridge_slave_1: entered allmulticast mode
[   56.641902][ T5843] bridge_slave_1: entered promiscuous mode
[   56.687161][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.694710][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.710036][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.799029][ T5843] team0: Port device team_slave_0 added
[   56.802004][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.805235][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.808140][ T5850] bridge_slave_0: entered allmulticast mode
[   56.811691][ T5850] bridge_slave_0: entered promiscuous mode
[   56.824762][ T5843] team0: Port device team_slave_1 added
[   56.827666][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.830538][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.833449][ T5850] bridge_slave_1: entered allmulticast mode
[   56.837749][ T5850] bridge_slave_1: entered promiscuous mode
[   56.924422][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.927539][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.930580][ T5848] bridge_slave_0: entered allmulticast mode
[   56.934918][ T5848] bridge_slave_0: entered promiscuous mode
[   56.939541][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.942616][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.946478][ T5848] bridge_slave_1: entered allmulticast mode
[   56.950547][ T5848] bridge_slave_1: entered promiscuous mode
[   56.954793][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.957905][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.969055][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.976365][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.979321][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.990221][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.998722][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.012058][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.066919][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.098173][ T5843] hsr_slave_0: entered promiscuous mode
[   57.101492][ T5843] hsr_slave_1: entered promiscuous mode
[   57.105535][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.109574][ T5850] team0: Port device team_slave_0 added
[   57.134179][ T5850] team0: Port device team_slave_1 added
[   57.149306][ T5848] team0: Port device team_slave_0 added
[   57.162851][ T5848] team0: Port device team_slave_1 added
[   57.194642][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.197833][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.210536][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.235771][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.238766][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.250310][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.255829][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.258730][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.268196][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.284533][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.287026][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.295573][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.369449][ T5848] hsr_slave_0: entered promiscuous mode
[   57.371854][ T5848] hsr_slave_1: entered promiscuous mode
[   57.375079][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.377066][ T5848] Cannot create hsr debugfs directory
[   57.395700][ T5850] hsr_slave_0: entered promiscuous mode
[   57.399120][ T5850] hsr_slave_1: entered promiscuous mode
[   57.402076][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   57.405430][ T5850] Cannot create hsr debugfs directory
[   57.596760][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.615938][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.632142][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.646848][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.693023][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.700419][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.705163][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.716275][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.762607][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.775440][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.782058][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.789525][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.858527][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.870207][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.887657][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   57.909161][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   57.914315][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.916684][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.922448][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.937445][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.940430][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.949199][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.951943][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.969178][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.971962][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.988170][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   58.017461][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.020702][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.038719][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.041897][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.206214][ T5235] Bluetooth: hci0: command tx timeout
[   58.270110][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.284224][ T5235] Bluetooth: hci2: command tx timeout
[   58.286602][ T5235] Bluetooth: hci1: command tx timeout
[   58.328867][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.353039][ T5850] veth0_vlan: entered promiscuous mode
[   58.376664][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.391733][ T5850] veth1_vlan: entered promiscuous mode
[   58.416561][ T5843] veth0_vlan: entered promiscuous mode
[   58.438572][ T5843] veth1_vlan: entered promiscuous mode
[   58.467367][ T5850] veth0_macvtap: entered promiscuous mode
[   58.481272][ T5850] veth1_macvtap: entered promiscuous mode
[   58.487826][ T5848] veth0_vlan: entered promiscuous mode
[   58.503221][ T5848] veth1_vlan: entered promiscuous mode
[   58.522131][ T5843] veth0_macvtap: entered promiscuous mode
[   58.531451][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.543204][ T5843] veth1_macvtap: entered promiscuous mode
[   58.552034][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.568237][ T5870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.577022][ T5870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.584384][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.596368][ T5870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.600117][ T5870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.612027][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.627421][ T5848] veth0_macvtap: entered promiscuous mode
[   58.647085][ T5848] veth1_macvtap: entered promiscuous mode
[   58.656701][ T5870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.676547][ T5870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.680646][ T5870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.710187][ T5870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.735820][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.754477][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.773986][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.784666][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.796510][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.803063][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.811262][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.818908][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.858413][ T4819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.861774][ T4819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.882591][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.888391][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.939895][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.942688][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.957518][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.012734][ T4819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.021443][ T4819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.037016][ T5909] syz_tun: entered allmulticast mode
[   59.077266][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.081713][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.305356][ T5925] loop0: detected capacity change from 0 to 512
[   59.325479][ T5925] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   59.335545][ T5925] EXT4-fs (loop0): 1 truncate cleaned up
[   59.338525][ T5925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.408942][ T5931] loop1: detected capacity change from 0 to 1024
[   59.420844][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.424499][ T5931] =======================================================
[   59.424499][ T5931] WARNING: The mand mount option has been deprecated and
[   59.424499][ T5931]          and is ignored by this kernel. Remove the mand
[   59.424499][ T5931]          option from the mount to silence this warning.
[   59.424499][ T5931] =======================================================
[   59.537743][ T1088] hfsplus: b-tree write err: -5, ino 4
[   60.164245][ T5938] loop1: detected capacity change from 0 to 32768
[   60.284150][   T55] Bluetooth: hci0: command tx timeout
[   60.296001][ T5938] ERROR: (device loop1): dbDiscardAG: -EIO
[   60.296001][ T5938] 
[   60.310766][ T5938] ERROR: (device loop1): remounting filesystem as read-only
[   60.364208][   T55] Bluetooth: hci1: command tx timeout
[   60.367127][ T5235] Bluetooth: hci2: command tx timeout
[   60.932144][ T5953] netlink: 39 bytes leftover after parsing attributes in process `syz.0.21'.
[   61.205575][ T5955] loop2: detected capacity change from 0 to 32768
[   61.216934][ T5955] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.23 (5955)
[   61.238737][ T5955] BTRFS info (device loop2 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   61.242988][ T5966] loop0: detected capacity change from 0 to 512
[   61.243771][ T5955] BTRFS info (device loop2 state S): using blake2b (blake2b-256-generic) checksum algorithm
[   61.252358][ T5966] EXT4-fs (loop0): invalid first ino: 0
[   61.256808][ T5955] BTRFS info (device loop2 state S): using free-space-tree
[   61.300006][   T32] BTRFS warning (device loop2 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x752e265ca9724eb47c3236b0e85f876d1222941063a0a0afe40232d9dc9ca6dd level 0, ignored
[   61.317903][ T4572] BTRFS warning (device loop2 state CS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored
[   61.327987][ T4572] BTRFS error (device loop2 state CS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1
[   61.344878][ T5905] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   61.400517][ T5850] BTRFS info (device loop2 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   61.527899][ T5905] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   61.530816][ T5905] usb 2-1: config 0 has no interface number 0
[   61.560182][ T5905] usb 2-1: config 0 interface 41 has no altsetting 0
[   61.585112][ T5905] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   61.589385][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.593257][ T5905] usb 2-1: Product: syz
[   61.604902][ T5905] usb 2-1: Manufacturer: syz
[   61.606734][ T5905] usb 2-1: SerialNumber: syz
[   61.619708][ T5905] usb 2-1: config 0 descriptor??
[   61.856655][ T5892] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   61.886527][ T5892] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   62.045866][ T5905] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[   62.065995][ T5905] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[   62.092508][ T5905] usb 2-1: USB disconnect, device number 2
[   62.363655][ T5235] Bluetooth: hci0: command tx timeout
[   62.366839][ T6005] IPv6: Can't replace route, no match found
[   62.443850][ T5235] Bluetooth: hci2: command tx timeout
[   62.445829][ T5235] Bluetooth: hci1: command tx timeout
[   62.736177][ T6011] loop0: detected capacity change from 0 to 32768
[   62.770451][ T6011] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   62.860657][ T6011] XFS (loop0): Ending clean mount
[   62.911418][ T5848] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   63.290820][ T6054] Bluetooth: MGMT ver 1.23
[   64.444028][   T55] Bluetooth: hci0: command tx timeout
[   64.524251][   T55] Bluetooth: hci1: command tx timeout
[   64.526480][   T55] Bluetooth: hci2: command tx timeout
[   64.666522][ T6081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.898437][ T6090] loop0: detected capacity change from 0 to 2048
[   64.922704][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.930890][ T6086] team0 (unregistering): Port device team_slave_0 removed
[   64.942104][ T6090] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.950421][ T6086] team0 (unregistering): Port device team_slave_1 removed
[   64.974951][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.205310][ T6104] loop0: detected capacity change from 0 to 8
[   65.213314][ T6104] SQUASHFS error: lzo decompression failed, data probably corrupt
[   65.218131][ T6104] SQUASHFS error: Failed to read block 0x91: -5
[   65.221285][ T6104] SQUASHFS error: Unable to read metadata cache entry [8f]
[   65.232270][ T6104] SQUASHFS error: Unable to read inode 0x11f
[   65.263036][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'.
[   65.345014][ T6097] loop1: detected capacity change from 0 to 32768
[   65.351207][ T6097] btrfs: Deprecated parameter 'usebackuproot'
[   65.355324][ T6097] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   65.361008][ T6097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.62 (6097)
[   65.371273][ T6097] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   65.377881][ T6097] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   65.381409][ T6097] BTRFS info (device loop1): disk space caching is enabled
[   65.385102][ T6097] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   65.403117][ T6113] loop0: detected capacity change from 0 to 512
[   65.409305][ T6113] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   65.450123][ T6113] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[   65.453072][ T6113] FAT-fs (loop0): Filesystem has been set read-only
[   65.505882][ T6097] BTRFS info (device loop1): rebuilding free space tree
[   65.554529][ T6097] BTRFS info (device loop1): disabling free space tree
[   65.557132][ T6097] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   65.560450][ T6097] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   65.659280][ T6138] loop2: detected capacity change from 0 to 256
[   65.705151][ T6138] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   65.725926][ T6097] loop1: detected capacity change from 32768 to 64
[   65.738564][ T6140] syz.1.62: attempt to access beyond end of device
[   65.738564][ T6140] loop1: rw=6145, sector=10520, nr_sectors = 8 limit=64
[   65.755244][ T6140] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[   65.760705][ T6140] syz.1.62: attempt to access beyond end of device
[   65.760705][ T6140] loop1: rw=6145, sector=10512, nr_sectors = 8 limit=64
[   65.780975][ T6140] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[   65.801337][ T1088] kworker/u10:3: attempt to access beyond end of device
[   65.801337][ T1088] loop1: rw=67112961, sector=10488, nr_sectors = 8 limit=64
[   65.817089][ T1088] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[   65.823028][ T6140] BTRFS error (device loop1 state AL): Transaction aborted (error -5)
[   65.835300][ T1088] kworker/u10:3: attempt to access beyond end of device
[   65.835300][ T1088] loop1: rw=67112961, sector=10496, nr_sectors = 8 limit=64
[   65.842354][ T6140] BTRFS: error (device loop1 state AL) in free_log_tree:3311: errno=-5 IO failure
[   65.846655][ T1088] BTRFS error (device loop1 state AL): bdev /dev/loop1 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0
[   65.850943][ T1088] kworker/u10:3: attempt to access beyond end of device
[   65.850943][ T1088] loop1: rw=67112961, sector=10504, nr_sectors = 8 limit=64
[   65.863664][ T6140] BTRFS info (device loop1 state EAL): forced readonly
[   65.869466][ T6140] BTRFS: error (device loop1 state EAL) in free_log_tree:3311: errno=-5 IO failure
[   65.874157][ T6140] BTRFS warning (device loop1 state EAL): Skipping commit of aborted transaction.
[   65.878633][ T6140] BTRFS: error (device loop1 state EAL) in cleanup_transaction:2023: errno=-5 IO failure
[   65.885187][ T1088] BTRFS error (device loop1 state EAL): bdev /dev/loop1 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0
[   65.893710][ T1088] kworker/u10:3: attempt to access beyond end of device
[   65.893710][ T1088] loop1: rw=67112961, sector=10528, nr_sectors = 8 limit=64
[   65.904001][ T1088] BTRFS error (device loop1 state EAL): bdev /dev/loop1 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0
[   65.970702][ T6148] loop2: detected capacity change from 0 to 8
[   65.986164][ T5843] BTRFS info (device loop1 state EAL): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   65.993170][ T6148] SQUASHFS error: xz decompression failed, data probably corrupt
[   66.007812][ T6148] SQUASHFS error: Failed to read block 0x108: -5
[   66.010575][ T6148] SQUASHFS error: Unable to read metadata cache entry [106]
[   66.013992][ T6148] SQUASHFS error: Unable to read inode 0x0
[   66.048882][ T6139] loop0: detected capacity change from 0 to 32768
[   66.052676][ T6139] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.72 (6139)
[   66.089713][ T6139] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   66.093099][ T6139] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   66.103879][ T6139] BTRFS info (device loop0): using free-space-tree
[   66.122308][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.79'.
[   66.127443][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.79'.
[   66.264615][ T5848] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   66.506888][   T33] audit: type=1326 audit(1755051677.016:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.1.85" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a2698ebe9 code=0x0
[   66.816678][ T6184] loop0: detected capacity change from 0 to 32768
[   66.984697][ T6197] loop0: detected capacity change from 0 to 2048
[   67.909639][ T6209] loop0: detected capacity change from 0 to 40427
[   67.920006][ T6209] F2FS-fs (loop0): build fault injection rate: 14
[   67.929870][ T6209] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   67.941215][ T6209] F2FS-fs (loop0): invalid crc value
[   67.952612][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   67.966265][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   67.972027][ T6228] tc_dump_action: action bad kind
[   68.005953][ T6209] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   68.010908][ T6209] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   68.022410][ T6209] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   68.034921][ T6209] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   68.035486][ T6233] loop1: detected capacity change from 0 to 256
[   68.044144][ T6209] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_convert_inline_inode+0x6bd/0x880
[   68.067661][ T5848] syz-executor: attempt to access beyond end of device
[   68.067661][ T5848] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   68.077116][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   68.077130][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   68.077134][ T5848] Call Trace:
[   68.077138][ T5848]  <TASK>
[   68.077141][ T5848]  dump_stack_lvl+0x189/0x250
[   68.077156][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[   68.077165][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[   68.077173][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   68.077183][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   68.077194][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[   68.077207][ T5848]  f2fs_write_end_io+0x886/0xb60
[   68.077224][ T5848]  __submit_merged_bio+0x27a/0x6a0
[   68.077235][ T5848]  __submit_merged_write_cond+0x255/0x530
[   68.077246][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[   68.077269][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   68.077295][ T5848]  ? check_path+0x21/0x40
[   68.077302][ T5848]  ? check_noncircular+0xe0/0x160
[   68.077328][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   68.077337][ T5848]  do_writepages+0x32e/0x550
[   68.077351][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   68.077361][ T5848]  filemap_fdatawrite+0x199/0x240
[   68.077371][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   68.077398][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   68.077424][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[   68.077442][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[   68.077461][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   68.077489][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[   68.077501][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[   68.077513][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[   68.077522][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[   68.077533][ T5848]  ? shrinker_free+0x2ce/0x3e0
[   68.077543][ T5848]  deactivate_locked_super+0xbc/0x130
[   68.077552][ T5848]  cleanup_mnt+0x425/0x4c0
[   68.077561][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[   68.077571][ T5848]  task_work_run+0x1d4/0x260
[   68.077582][ T5848]  ? __pfx_task_work_run+0x10/0x10
[   68.077590][ T5848]  ? __x64_sys_umount+0x122/0x160
[   68.077603][ T5848]  ? exit_to_user_mode_loop+0x40/0x110
[   68.077615][ T5848]  exit_to_user_mode_loop+0xec/0x110
[   68.077625][ T5848]  do_syscall_64+0x2bd/0x3b0
[   68.077633][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[   68.077641][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.077647][ T5848]  ? exc_page_fault+0x9f/0xf0
[   68.077656][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.077663][ T5848] RIP: 0033:0x7f5a5698ff17
[   68.077671][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   68.077677][ T5848] RSP: 002b:00007ffec9b9c388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   68.077686][ T5848] RAX: 0000000000000000 RBX: 00007f5a56a11c05 RCX: 00007f5a5698ff17
[   68.077691][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec9b9c440
[   68.077695][ T5848] RBP: 00007ffec9b9c440 R08: 0000000000000000 R09: 0000000000000000
[   68.077699][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec9b9d4d0
[   68.077703][ T5848] R13: 00007f5a56a11c05 R14: 000000000001095e R15: 00007ffec9b9d510
[   68.077715][ T5848]  </TASK>
[   68.078694][ T5848] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   68.102863][ T6235] loop1: detected capacity change from 0 to 8
[   68.232519][ T6235] squashfs image failed sanity check
[   68.301967][ T6237] capability: warning: `syz.2.110' uses deprecated v2 capabilities in a way that may be insecure
[   68.476850][ T6241] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   68.486766][ T6241] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   68.807958][ T6250] loop0: detected capacity change from 0 to 32768
[   68.875864][ T6250] JBD2: Ignoring recovery information on journal
[   68.928884][ T6250] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   68.937870][ T6261] loop2: detected capacity change from 0 to 40427
[   68.943376][ T6261] F2FS-fs (loop2): build fault injection rate: 14
[   68.952201][ T6261] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[   68.964316][ T6261] F2FS-fs (loop2): invalid crc value
[   68.973085][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   68.982400][ T5848] ocfs2: Unmounting device (7,0) on (node local)
[   68.994802][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   69.061466][ T6261] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   69.065640][ T6261] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   69.070553][ T6261] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   69.087871][ T6261] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   69.107721][ T6261] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0xfa/0x570
[   69.110914][   T55] Bluetooth: Unknown BR/EDR signaling command 0x11
[   69.114698][   T55] Bluetooth: Wrong link type (-22)
[   69.115304][ T6261] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[   69.145624][ T5850] syz-executor: attempt to access beyond end of device
[   69.145624][ T5850] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   69.151654][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   69.151674][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.151681][ T5850] Call Trace:
[   69.151686][ T5850]  <TASK>
[   69.151691][ T5850]  dump_stack_lvl+0x189/0x250
[   69.151714][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.151729][ T5850]  ? __pfx_queue_work_on+0x10/0x10
[   69.151768][ T5850]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   69.151784][ T5850]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   69.151808][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[   69.151829][ T5850]  f2fs_write_end_io+0x886/0xb60
[   69.151861][ T5850]  __submit_merged_bio+0x27a/0x6a0
[   69.151882][ T5850]  __submit_merged_write_cond+0x255/0x530
[   69.151909][ T5850]  f2fs_write_data_pages+0x261d/0x3000
[   69.151955][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.152009][ T5850]  ? __mod_zone_page_state+0xd7/0x140
[   69.152036][ T5850]  ? folios_put_refs+0x560/0x640
[   69.152061][ T5850]  ? __lock_acquire+0xab9/0xd20
[   69.152088][ T5850]  ? do_raw_spin_lock+0x121/0x290
[   69.152112][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[   69.152128][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.152145][ T5850]  do_writepages+0x32e/0x550
[   69.152171][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[   69.152190][ T5850]  filemap_fdatawrite+0x199/0x240
[   69.152207][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   69.152265][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[   69.152284][ T5850]  f2fs_sync_dirty_inodes+0x31f/0x830
[   69.152314][ T5850]  f2fs_write_checkpoint+0x95a/0x1df0
[   69.152353][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   69.152412][ T5850]  ? kill_f2fs_super+0x298/0x6c0
[   69.152434][ T5850]  kill_f2fs_super+0x2c3/0x6c0
[   69.152456][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[   69.152471][ T5850]  ? radix_tree_delete_item+0x2b6/0x400
[   69.152492][ T5850]  ? shrinker_free+0x2ce/0x3e0
[   69.152508][ T5850]  deactivate_locked_super+0xbc/0x130
[   69.152526][ T5850]  cleanup_mnt+0x425/0x4c0
[   69.152540][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.152557][ T5850]  task_work_run+0x1d4/0x260
[   69.152576][ T5850]  ? __pfx_task_work_run+0x10/0x10
[   69.152590][ T5850]  ? __x64_sys_umount+0x122/0x160
[   69.152610][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[   69.152631][ T5850]  exit_to_user_mode_loop+0xec/0x110
[   69.152647][ T5850]  do_syscall_64+0x2bd/0x3b0
[   69.152661][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.152675][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.152687][ T5850]  ? exc_page_fault+0x9f/0xf0
[   69.152703][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.152715][ T5850] RIP: 0033:0x7fb56838ff17
[   69.152727][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   69.152737][ T5850] RSP: 002b:00007fff473a34e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   69.152778][ T5850] RAX: 0000000000000000 RBX: 00007fb568411c05 RCX: 00007fb56838ff17
[   69.152786][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff473a35a0
[   69.152793][ T5850] RBP: 00007fff473a35a0 R08: 0000000000000000 R09: 0000000000000000
[   69.152801][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff473a4630
[   69.152808][ T5850] R13: 00007fb568411c05 R14: 0000000000010d95 R15: 00007fff473a4670
[   69.152833][ T5850]  </TASK>
[   69.152838][ T5850] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   69.302594][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   69.302609][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.302614][ T5850] Call Trace:
[   69.302618][ T5850]  <TASK>
[   69.302622][ T5850]  dump_stack_lvl+0x189/0x250
[   69.302637][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.302646][ T5850]  ? __pfx_queue_work_on+0x10/0x10
[   69.302655][ T5850]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   69.302665][ T5850]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   69.302677][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[   69.302690][ T5850]  f2fs_write_end_io+0x886/0xb60
[   69.302708][ T5850]  __submit_merged_bio+0x27a/0x6a0
[   69.302719][ T5850]  __submit_merged_write_cond+0x255/0x530
[   69.302730][ T5850]  f2fs_write_data_pages+0x261d/0x3000
[   69.302777][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.302804][ T5850]  ? __mod_zone_page_state+0xd7/0x140
[   69.302818][ T5850]  ? folios_put_refs+0x560/0x640
[   69.302832][ T5850]  ? __lock_acquire+0xab9/0xd20
[   69.302849][ T5850]  ? do_raw_spin_lock+0x121/0x290
[   69.302862][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[   69.302870][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.302880][ T5850]  do_writepages+0x32e/0x550
[   69.302895][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[   69.302905][ T5850]  filemap_fdatawrite+0x199/0x240
[   69.302916][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   69.302942][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[   69.302952][ T5850]  f2fs_sync_dirty_inodes+0x31f/0x830
[   69.302968][ T5850]  f2fs_write_checkpoint+0x95a/0x1df0
[   69.302987][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   69.303015][ T5850]  ? kill_f2fs_super+0x298/0x6c0
[   69.303026][ T5850]  kill_f2fs_super+0x2c3/0x6c0
[   69.303038][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[   69.303047][ T5850]  ? radix_tree_delete_item+0x2b6/0x400
[   69.303059][ T5850]  ? shrinker_free+0x2ce/0x3e0
[   69.303069][ T5850]  deactivate_locked_super+0xbc/0x130
[   69.303079][ T5850]  cleanup_mnt+0x425/0x4c0
[   69.303093][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.303103][ T5850]  task_work_run+0x1d4/0x260
[   69.303114][ T5850]  ? __pfx_task_work_run+0x10/0x10
[   69.303123][ T5850]  ? __x64_sys_umount+0x122/0x160
[   69.303134][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[   69.303147][ T5850]  exit_to_user_mode_loop+0xec/0x110
[   69.303156][ T5850]  do_syscall_64+0x2bd/0x3b0
[   69.303165][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.303172][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.303179][ T5850]  ? exc_page_fault+0x9f/0xf0
[   69.303188][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.303195][ T5850] RIP: 0033:0x7fb56838ff17
[   69.303203][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   69.303209][ T5850] RSP: 002b:00007fff473a34e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   69.303218][ T5850] RAX: 0000000000000000 RBX: 00007fb568411c05 RCX: 00007fb56838ff17
[   69.303223][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff473a35a0
[   69.303227][ T5850] RBP: 00007fff473a35a0 R08: 0000000000000000 R09: 0000000000000000
[   69.303231][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff473a4630
[   69.303236][ T5850] R13: 00007fb568411c05 R14: 0000000000010d95 R15: 00007fff473a4670
[   69.303247][ T5850]  </TASK>
[   69.303250][ T5850] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   69.444206][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   69.448288][ T5891] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   69.593796][   T24] usb 1-1: Using ep0 maxpacket: 8
[   69.599475][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[   69.605640][   T24] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   69.609487][   T24] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   69.612896][   T24] usb 1-1: Product: syz
[   69.615338][   T24] usb 1-1: Manufacturer: syz
[   69.617522][   T24] usb 1-1: SerialNumber: syz
[   69.620957][ T5891] usb 2-1: config 0 has an invalid interface number: 3 but max is 0
[   69.624538][ T5891] usb 2-1: config 0 has no interface number 0
[   69.627173][ T5891] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[   69.635173][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.654131][ T5891] usb 2-1: config 0 descriptor??
[   69.662457][ T5891] hub 2-1:0.3: bad descriptor, ignoring hub
[   69.665282][ T5891] hub 2-1:0.3: probe with driver hub failed with error -5
[   69.674941][ T5891] sierra 2-1:0.3: Sierra USB modem converter detected
[   69.820786][ T6287] netlink: 'syz.2.129': attribute type 28 has an invalid length.
[   69.853680][   T24] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[   69.856444][   T24] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[   69.859078][   T24] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[   69.875185][ T5891] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[   69.927725][ T5891] usb 2-1: USB disconnect, device number 3
[   69.940688][ T5891] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[   69.949890][ T5891] sierra 2-1:0.3: device disconnected
[   70.052250][   T24] usb 1-1: palm_os_3_probe - error -71 getting bytes available request
[   70.062476][   T24] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[   70.069131][   T24] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[   70.075558][   T24] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[   70.080621][   T24] usb 1-1: USB disconnect, device number 2
[   70.084395][   T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[   70.096181][   T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[   70.099984][   T24] visor 1-1:1.0: device disconnected
[   70.747600][ T6317] loop0: detected capacity change from 0 to 512
[   70.757714][ T6317] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   71.097490][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.099768][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.159864][ T6321] Driver unsupported XDP return value 0 on prog  (id 10) dev N/A, expect packet loss!
[   72.147406][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   72.303590][   T24] usb 1-1: Using ep0 maxpacket: 16
[   72.308859][   T24] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[   72.311628][   T24] usb 1-1: config 0 has no interface number 0
[   72.314601][   T24] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[   72.319555][   T24] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[   72.327187][   T24] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[   72.331240][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.335150][   T24] usb 1-1: Product: syz
[   72.336963][   T24] usb 1-1: Manufacturer: syz
[   72.338977][   T24] usb 1-1: SerialNumber: syz
[   72.344302][   T24] usb 1-1: config 0 descriptor??
[   72.349913][   T24] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected
[   72.556871][   T24] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[   72.566295][   T24] usb 1-1: USB disconnect, device number 3
[   72.571122][   T24] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[   72.576686][   T24] cypress_m8 1-1:0.35: device disconnected
[   72.650985][ T6336] block device autoloading is deprecated and will be removed.
[   72.658849][ T6336] syz.2.148: attempt to access beyond end of device
[   72.658849][ T6336] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   72.973664][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   73.137371][    T9] usb 3-1: Using ep0 maxpacket: 32
[   73.145307][    T9] usb 3-1: config 0 has an invalid interface number: 136 but max is 0
[   73.154031][    T9] usb 3-1: config 0 has no interface number 0
[   73.161255][    T9] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df
[   73.169656][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.173144][    T9] usb 3-1: Product: syz
[   73.179105][    T9] usb 3-1: Manufacturer: syz
[   73.181282][    T9] usb 3-1: SerialNumber: syz
[   73.186188][    T9] usb 3-1: config 0 descriptor??
[   73.202509][    T9] usb_ehset_test 3-1:0.136: probe with driver usb_ehset_test failed with error -32
[   73.265450][ T6342] loop1: detected capacity change from 0 to 32768
[   73.270910][ T6342] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   73.270910][ T6342] clean (size 2912):
[   73.270910][ T6342] flags:          0
[   73.270910][ T6342] journal_seq:    10
[   73.270910][ T6342] usage: type=inodes v=8
[   73.270910][ T6342] usage: type=key_version v=0
[   73.270910][ T6342] usage: type=reserved v=0
[   73.270910][ T6342] usage: type=reserved v=0
[   73.270910][ T6342] usage: type=reserved v=0
[   73.270910][ T6342] usage: type=reserved v=0
[   73.270910][ T6342] data_usage: btree: 1/1 [0]=2816
[   73.270910][ T6342] data_usage: journal: 1/1 [0]=0
[   73.270910][ T6342] data_usage: user: 1/1 [0]=16
[   73.270910][ T6342] dev_usage: dev=0  
[   73.270910][ T6342]   free: buckets=83 sectors=0 fragmented=0
[   73.270910][ T6342]   sb: buckets=25 sectors=6152 fragmented=248
[   73.270910][ T6342]   journal: buckets=8 sectors=2048 fragmented=0
[   73.270910][ T6342]   btree: buckets=11 sectors=2816 fragmented=0
[   73.270910][ T6342]   user: buckets=1 sectors=16 fragmented=240
[   73.270910][ T6342]   cached: buckets=0 sectors=0 fragmented=0
[   73.270910][ T6342]   parity: buckets=0 sectors=0 fragmented=0
[   73.270910][ T6342]   stripe: buckets=0 sectors=0 fragmented=0
[   73.270910][ T6342]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   73.270910][ T6342]   need_discard: buckets=0 sectors=0 fragmented=0
[   73.270910][ T6342] log: 
[   73.270910][ T6342] clock: write=1280
[   73.270910][ T6342] 
[   73.327978][    C0] vkms_vblank_simulate: vblank timer overrun
[   73.348710][ T6342] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   73.687423][  T974] usb 3-1: USB disconnect, device number 2
[   73.972122][ T6359] loop1: detected capacity change from 0 to 1024
[   73.982979][ T6359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.039669][ T6361] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.114037][   T33] audit: type=1326 audit(1755051684.606:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2698ebe9 code=0x7ffc0000
[   74.123112][   T33] audit: type=1326 audit(1755051684.606:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2698ebe9 code=0x7ffc0000
[   74.172419][   T33] audit: type=1326 audit(1755051684.606:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.160" exe="/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8a2698ebe9 code=0x7ffc0000
[   74.191531][   T33] audit: type=1326 audit(1755051684.606:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2698ebe9 code=0x7ffc0000
[   74.205260][   T33] audit: type=1326 audit(1755051684.606:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2698ebe9 code=0x7ffc0000
[   74.367803][ T6371] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   74.762225][ T6367] loop0: detected capacity change from 0 to 32768
[   74.792781][ T6367] JBD2: Ignoring recovery information on journal
[   74.921516][ T6367] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   75.088609][ T5848] ocfs2: Unmounting device (7,0) on (node local)
[   75.684628][ T6392] loop2: detected capacity change from 0 to 512
[   75.692482][ T6392] EXT4-fs: Ignoring removed oldalloc option
[   75.728939][ T6392] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.172: Parent and EA inode have the same ino 15
[   75.737274][ T6392] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   75.742980][ T6392] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.172: Parent and EA inode have the same ino 15
[   75.751590][ T6392] EXT4-fs (loop2): 1 orphan inode deleted
[   75.763443][ T6392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.824885][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.084032][   T33] audit: type=1326 audit(1755051686.596:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.180" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56838ebe9 code=0x7ffc0000
[   76.107183][   T33] audit: type=1326 audit(1755051686.596:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.180" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56838ebe9 code=0x7ffc0000
[   76.122817][   T33] audit: type=1326 audit(1755051686.596:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.180" exe="/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb56838ebe9 code=0x7ffc0000
[   76.145056][   T33] audit: type=1326 audit(1755051686.596:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.180" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56838ebe9 code=0x7ffc0000
[   76.155941][   T33] audit: type=1326 audit(1755051686.606:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.180" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56838ebe9 code=0x7ffc0000
[   76.580706][ T6437] loop0: detected capacity change from 0 to 32768
[   76.663352][ T6441] Device name cannot be null; rc = [-22]
[   76.998512][ T6437] JBD2: Ignoring recovery information on journal
[   77.077635][ T6437] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   77.123092][ T5848] ocfs2: Unmounting device (7,0) on (node local)
[   77.322995][ T6453] loop2: detected capacity change from 0 to 2364
[   77.609168][ T6478] (syz.1.209,6478,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   77.612130][ T6478] (syz.1.209,6478,0):ocfs2_fill_super:1177 ERROR: status = -22
[   77.659340][ T6482] loop2: detected capacity change from 0 to 1024
[   77.691195][ T6482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.768838][ T6495] netlink: 'syz.1.215': attribute type 29 has an invalid length.
[   77.772315][ T6495] netlink: 'syz.1.215': attribute type 29 has an invalid length.
[   77.776074][ T6495] netlink: 'syz.1.215': attribute type 29 has an invalid length.
[   77.951666][ T6492] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.211: Allocating blocks 497-513 which overlap fs metadata
[   77.995911][ T6500] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.211: Allocating blocks 497-513 which overlap fs metadata
[   78.622050][ T6518] netlink: 96 bytes leftover after parsing attributes in process `syz.1.225'.
[   79.198746][ T6540] loop0: detected capacity change from 0 to 2048
[   79.239779][ T6540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.280904][ T6540] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   79.289938][ T6540] EXT4-fs (loop0): Remounting filesystem read-only
[   79.319382][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.388255][ T6550] loop1: detected capacity change from 0 to 512
[   79.399891][ T6550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.503059][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.630477][ T6556] loop0: detected capacity change from 0 to 32768
[   79.636037][ T6556] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 1, max 64)
[   79.636037][ T6556] members_v2 (size 152):
[   79.636037][ T6556] Device:                        0
[   79.636037][ T6556]   Label:                       (none)
[   79.636037][ T6556]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[   79.636037][ T6556]   Size:                        131072
[   79.636037][ T6556]   read errors:                 0
[   79.636037][ T6556]   write errors:                0
[   79.636037][ T6556]   checksum errors:             0
[   79.636037][ T6556]   seqread iops:                0
[   79.636037][ T6556]   seqwrite iops:               0
[   79.636037][ T6556]   randread iops:               0
[   79.636037][ T6556]   randwrite iops:              0
[   79.636037][ T6556]   Bucket size:                 131072
[   79.636037][ T6556]   First bucket:                0
[   79.636037][ T6556]   Buckets:                     1
[   79.636037][ T6556]   Last mount:                  1714681267
[   79.636037][ T6556]   Last superblock write:       42
[   79.636037][ T6556]   State:                       rw
[   79.636037][ T6556]   Data allowed:                journal,btree,user
[   79.636037][ T6556]   Has data:                    btree,user
[   79.636037][ T6556]   Btree allocated bitmap blocksize:256
[   79.636037][ T6556]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[   79.636037][ T6556]   Durability:
[   79.636118][ T6556] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[   79.750012][ T6560] Bluetooth: hci0: service_discovery: too big uuid_count value 33022
[   79.813744][ T5891] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   79.910008][ T6570] loop0: detected capacity change from 0 to 512
[   79.913131][ T6570] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   79.918281][ T6570] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   79.926033][ T6570] EXT4-fs (loop0): 1 truncate cleaned up
[   79.929274][ T6570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.948079][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.967643][ T5891] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   79.987986][ T5891] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[   79.991621][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.995677][ T5891] usb 2-1: Product: syz
[   79.997458][ T5891] usb 2-1: Manufacturer: syz
[   79.999338][ T5891] usb 2-1: SerialNumber: syz
[   80.019933][ T5891] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[   80.192604][ T6573] loop0: detected capacity change from 0 to 32768
[   80.212611][ T6573] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   80.228117][ T6573] (syz.0.250,6573,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[   80.237863][ T6573] ocfs2: Unmounting device (7,0) on (node local)
[   80.633915][ T5891] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[   80.652433][ T5891] usb 2-1: USB disconnect, device number 4
[   80.683986][ T6500] EXT4-fs (loop2): pa ffff88801dd26570: logic 32, phys. 161, len 22
[   80.689423][ T6500] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   80.705750][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.709381][ T6589] netlink: 'syz.0.257': attribute type 10 has an invalid length.
[   80.713315][ T6589] veth0_vlan: left promiscuous mode
[   80.718774][ T6589] veth0_vlan: entered promiscuous mode
[   80.725729][ T6589] team0: Device veth0_vlan failed to register rx_handler
[   80.984828][ T5892] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   81.155237][ T5892] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77
[   81.159240][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.162167][ T5892] usb 3-1: Product: syz
[   81.164091][ T5892] usb 3-1: Manufacturer: syz
[   81.177186][ T5892] usb 3-1: SerialNumber: syz
[   81.196304][ T5892] usb 3-1: config 0 descriptor??
[   81.329252][   T10] cfg80211: failed to load regulatory.db
[   81.527533][   T24] usb 3-1: USB disconnect, device number 3
[   82.824511][ T6647] netlink: 277 bytes leftover after parsing attributes in process `syz.0.271'.
[   83.162378][ T6679] loop0: detected capacity change from 0 to 64
[   83.317628][ T6683] loop2: detected capacity change from 0 to 32768
[   83.415717][ T6683] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   83.415731][ T6683]   allowing incompatible features above 0.0: (unknown version)
[   83.415736][ T6683]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   83.430476][ T6683] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   83.433243][ T6683] bcachefs (loop2): initializing new filesystem
[   83.440854][ T6683] bcachefs (loop2): going read-write
[   83.459420][ T6683] bcachefs (loop2): marking superblocks
[   83.467645][ T6683] bcachefs (loop2): initializing freespace
[   83.471288][ T6683] bcachefs (loop2): done initializing freespace
[   83.475841][ T6683] bcachefs (loop2): reading snapshots table
[   83.478071][ T6683] bcachefs (loop2): reading snapshots done
[   83.502049][ T6683] bcachefs (loop2): done starting filesystem
[   83.528416][ T6713] loop0: detected capacity change from 0 to 1024
[   83.557816][ T6713] hfsplus: failed to load extents file
[   84.141791][ T6683] syz.2.283 (6683) used greatest stack depth: 17448 bytes left
[   84.197798][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'.
[   84.209126][ T5850] bcachefs (loop2): shutting down
[   84.220432][ T5850] bcachefs (loop2): going read-only
[   84.221083][ T6746] loop1: detected capacity change from 0 to 256
[   84.222931][ T5850] bcachefs (loop2): finished waiting for writes to stop
[   84.260957][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[   84.279785][ T6753] loop1: detected capacity change from 0 to 1024
[   84.290974][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[   84.310346][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 4
[   84.314770][ T5850] bcachefs (loop2): marking filesystem clean
[   84.336174][ T5850] bcachefs (loop2): shutdown complete
[   84.353291][ T6732] loop0: detected capacity change from 0 to 32768
[   84.379212][ T6732] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.292 (6732)
[   84.399853][ T6732] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   84.403355][ T6732] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   84.409917][ T6732] BTRFS info (device loop0): using free-space-tree
[   84.562659][ T5848] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   85.013592][ T5892] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   85.165229][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.173586][ T5892] usb 1-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[   85.176486][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.184850][ T5892] usb 1-1: config 0 descriptor??
[   85.863943][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   85.924408][ T5905] usb 1-1: USB disconnect, device number 4
[   86.045290][   T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   86.048807][   T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   86.052113][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   86.055254][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.060447][ T6810] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   86.069967][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   86.350567][ T5877] usb 3-1: USB disconnect, device number 4
[   86.433786][ T6863] netlink: 'syz.1.307': attribute type 1 has an invalid length.
[   86.437183][ T6863] netlink: 224 bytes leftover after parsing attributes in process `syz.1.307'.
[   86.932783][ T6879] loop1: detected capacity change from 0 to 4096
[   86.995205][ T6879] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   87.130512][ T6879] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   87.139598][ T6879] ntfs3(loop1): Failed to load $Extend (-22).
[   87.141868][ T6879] ntfs3(loop1): Failed to initialize $Extend.
[   89.846990][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   90.414366][   T24] usb 1-1: Using ep0 maxpacket: 32
[   90.421575][   T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   90.426307][   T24] usb 1-1: config 0 has no interface number 0
[   90.428991][   T24] usb 1-1: config 0 interface 184 has no altsetting 0
[   90.440809][   T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   90.448794][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.452257][   T24] usb 1-1: Product: syz
[   90.456465][   T24] usb 1-1: Manufacturer: syz
[   90.458856][   T24] usb 1-1: SerialNumber: syz
[   90.466162][   T24] usb 1-1: config 0 descriptor??
[   90.474122][   T24] smsc75xx v1.0.0
[   91.138008][ T6967] loop2: detected capacity change from 0 to 128
[   91.280523][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[   91.487303][   T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[   91.689725][   T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   91.693240][   T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   91.701466][   T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   91.705712][   T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   91.709096][   T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[   91.718229][   T24] usb 1-1: USB disconnect, device number 5
[   92.609507][ T7060] loop0: detected capacity change from 0 to 512
[   92.622498][ T7060] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   92.628064][ T7060] EXT4-fs (loop0): orphan cleanup on readonly fs
[   92.631924][ T7060] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.353: Block bitmap for bg 0 marked uninitialized
[   92.638530][ T7060] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   92.641868][ T7060] EXT4-fs (loop0): 1 orphan inode deleted
[   92.646672][ T7060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   92.750706][ T7070] vlan2: entered promiscuous mode
[   92.752532][ T7070] vlan2: entered allmulticast mode
[   92.756238][ T7070] hsr_slave_1: entered allmulticast mode
[   93.505148][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.692386][ T7115] loop0: detected capacity change from 0 to 256
[   93.700522][ T7115] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[   93.716459][ T7119] sctp: Trying to GSO but underlying device doesn't support it.
[   94.273376][ T7125] loop1: detected capacity change from 0 to 128
[   94.332841][ T7125] FAT-fs (loop1): error, corrupted directory (invalid i_start)
[   94.338424][ T7125] FAT-fs (loop1): Filesystem has been set read-only
[   95.106197][ T7170] loop2: detected capacity change from 0 to 4096
[   95.161321][ T7172] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.002504][ T7223] loop0: detected capacity change from 0 to 512
[   97.104451][ T7223] __quota_error: 1 callbacks suppressed
[   97.104468][ T7223] Quota error (device loop0): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[   97.111362][ T7223] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   97.189649][ T7223] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.390: Failed to acquire dquot type 1
[   97.228192][ T7223] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.390: corrupted inode contents
[   97.240722][ T7221] loop2: detected capacity change from 0 to 32768
[   97.244234][ T7223] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.390: mark_inode_dirty error
[   97.272907][ T7223] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.390: corrupted inode contents
[   97.284987][ T7223] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.390: mark_inode_dirty error
[   97.290492][ T7223] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.390: corrupted inode contents
[   97.311072][ T7223] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   97.316835][ T7223] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.390: corrupted inode contents
[   97.323146][ T7223] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.390: mark_inode_dirty error
[   97.330037][ T7223] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   97.336915][ T7223] EXT4-fs (loop0): 1 truncate cleaned up
[   97.340715][ T7223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.347538][ T7223] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.385187][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.783718][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   97.813760][ T5891] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   97.948076][    T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[   97.951894][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.956025][    T9] usb 2-1: Product: syz
[   97.957837][    T9] usb 2-1: Manufacturer: syz
[   97.959860][    T9] usb 2-1: SerialNumber: syz
[   97.963723][ T5891] usb 1-1: Using ep0 maxpacket: 16
[   97.965417][    T9] usb 2-1: config 0 descriptor??
[   97.970458][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short
[   97.979692][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.989018][ T5891] usb 1-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   97.997996][ T5891] usb 1-1: config 1 interface 0 has no altsetting 0
[   98.004206][ T5891] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[   98.007655][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.010236][ T5891] usb 1-1: Product: syz
[   98.011767][ T5891] usb 1-1: Manufacturer: syz
[   98.013335][ T5891] usb 1-1: SerialNumber: syz
[   98.028363][ T5891] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input4
[   98.224935][ T5279] bcm5974 1-1:1.0: could not read from device
[   98.234851][ T5891] bcm5974 1-1:1.0: could not read from device
[   98.240144][ T5279] bcm5974 1-1:1.0: could not read from device
[   98.246368][ T5891] input: failed to attach handler mousedev to device input4, error: -5
[   98.253210][ T5279] bcm5974 1-1:1.0: could not read from device
[   98.253967][ T5891] usb 1-1: USB disconnect, device number 6
[   98.324444][ T5905] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   98.496343][ T5905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.501125][ T5905] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[   98.506958][ T5905] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[   98.514319][ T5905] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   98.518215][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.521669][ T5905] usb 3-1: Product: syz
[   98.523685][ T5905] usb 3-1: Manufacturer: syz
[   98.525804][ T5905] usb 3-1: SerialNumber: syz
[   98.737727][ T7269] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   98.781854][    T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   98.793663][    T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   98.797230][    T9] asix 2-1:0.0: probe with driver asix failed with error -71
[   98.805311][    T9] usb 2-1: USB disconnect, device number 5
[   99.177595][ T7311] loop0: detected capacity change from 0 to 32768
[   99.344300][ T7269] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   99.458014][ T7327] netlink: 'syz.0.404': attribute type 22 has an invalid length.
[   99.461063][ T7325] loop1: detected capacity change from 0 to 8192
[   99.461553][ T7327] netlink: 168 bytes leftover after parsing attributes in process `syz.0.404'.
[   99.518592][ T7325] Dev loop1: unable to read partition block 24912959864832
[   99.531454][ T7325]  loop1: RDSK (150994944) unable to read partition table
[   99.539672][ T7325] loop1: partition table beyond EOD, truncated
[   99.546912][ T7325] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[   99.551722][ T5905] cdc_mbim 3-1:1.0: bind() failure
[   99.557596][ T5294] Dev loop1: unable to read partition block 24912959864832
[   99.565643][ T5905] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[   99.573066][ T5294]  loop1: RDSK (150994944) unable to read partition table
[   99.577205][ T5294] loop1: partition table beyond EOD, truncated
[   99.579794][ T5905] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[   99.604380][ T5905] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[   99.621679][ T5905] usb 3-1: USB disconnect, device number 5
[   99.896068][ T7372] loop0: detected capacity change from 0 to 512
[   99.920102][ T7372] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   99.950980][ T7372] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.416: iget: bad i_size value: 360287970189639680
[   99.959803][ T7372] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.416: couldn't read orphan inode 15 (err -117)
[   99.967217][ T7372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.057543][ T7375] loop1: detected capacity change from 0 to 32768
[  100.145388][ T7375] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=xxhash,compression=gzip,str_hash=crc32c,wide_macs,no_splitbrain_check,fix_errors=ask,norecovery,noexcl,version_upgrade=none
[  100.145410][ T7375]   allowing incompatible features above 0.0: (unknown version)
[  100.145418][ T7375]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  100.164712][ T7375] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  100.168429][ T7375] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  100.191140][ T7375] bcachefs (loop1): accounting_read... done
[  100.195509][ T7375] bcachefs (loop1): alloc_read... done
[  100.198252][ T7375] bcachefs (loop1): snapshots_read... done
[  100.201711][ T7375] bcachefs (loop1): done starting filesystem
[  100.259041][ T5843] bcachefs (loop1): shutting down
[  100.282980][ T5843] bcachefs (loop1): shutdown complete
[  100.283019][ T7387] loop2: detected capacity change from 0 to 32768
[  100.291898][ T7387] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.418 (7387)
[  100.317023][ T7387] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  100.323855][ T7387] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  100.332509][ T7387] BTRFS info (device loop2): using free-space-tree
[  100.563440][ T5850] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  100.765123][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.171129][ T7458] netlink: 'syz.0.430': attribute type 1 has an invalid length.
[  101.179698][ T7458] netlink: 224 bytes leftover after parsing attributes in process `syz.0.430'.
[  101.319643][ T7469] syz.0.431 uses obsolete (PF_INET,SOCK_PACKET)
[  101.476782][ T7475] loop2: detected capacity change from 0 to 2048
[  101.486596][ T7475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  101.672654][ T7492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.197207][ T7511] loop2: detected capacity change from 0 to 131072
[  102.207190][ T7511] F2FS-fs (loop2): invalid crc value
[  102.258808][ T7511] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.269898][ T7511] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  102.403668][ T5877] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  102.556199][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short
[  102.561081][ T5877] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  102.567416][ T5877] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  102.573309][ T5877] usb 1-1: config 1 interface 0 has no altsetting 1
[  102.581572][ T5877] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  102.587727][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.591362][ T5877] usb 1-1: Product: syz
[  102.593303][ T5877] usb 1-1: Manufacturer: syz
[  102.596288][ T5877] usb 1-1: SerialNumber: syz
[  102.608853][ T5877] smsusb:smsusb_probe: board id=8, interface number 0
[  102.808192][ T5877] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  102.822364][ T5877] smsusb 1-1:1.0: probe with driver smsusb failed with error -71
[  102.861125][ T5877] usb 1-1: USB disconnect, device number 7
[  102.930420][ T7545] program syz.1.446 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  103.355504][ T5877] IPVS: starting estimator thread 0...
[  103.453706][ T7558] IPVS: using max 77 ests per chain, 184800 per kthread
[  103.475958][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'.
[  104.159078][ T7590] loop1: detected capacity change from 0 to 40427
[  104.173772][ T7590] F2FS-fs (loop1): Image doesn't support compression
[  104.176627][ T7590] F2FS-fs (loop1): build fault injection rate: 690
[  104.181527][ T7590] F2FS-fs (loop1): invalid crc value
[  104.219988][ T7590] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  104.224274][ T7590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  104.333056][ T7602] netlink: 788 bytes leftover after parsing attributes in process `syz.0.457'.
[  104.644076][ T7619] loop0: detected capacity change from 0 to 512
[  104.686558][ T7619] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.713383][ T7619] EXT4-fs (loop0): Test dummy encryption mode enabled
[  104.735232][ T7619] EXT4-fs (loop0): 1 truncate cleaned up
[  104.744112][ T7619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.479847][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.529554][ T7642] loop0: detected capacity change from 0 to 512
[  107.613816][   T33] audit: type=1326 audit(1755051718.126:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5698ebe9 code=0x7fc00000
[  107.878319][   T33] audit: type=1326 audit(1755051718.336:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a5698ebe9 code=0x7fc00000
[  107.887272][   T33] audit: type=1326 audit(1755051718.336:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5698ebe9 code=0x7fc00000
[  107.897173][   T33] audit: type=1326 audit(1755051718.336:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5698ebe9 code=0x7fc00000
[  107.905389][   T33] audit: type=1326 audit(1755051718.336:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5698ebe9 code=0x7fc00000
[  107.913161][   T33] audit: type=1326 audit(1755051718.336:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5698ebe9 code=0x7fc00000
[  107.937471][   T33] audit: type=1326 audit(1755051718.336:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5698ebe9 code=0x7fc00000
[  107.961882][   T33] audit: type=1326 audit(1755051718.336:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5698ebe9 code=0x7fc00000
[  107.984635][   T33] audit: type=1326 audit(1755051718.336:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5698ebe9 code=0x7fc00000
[  107.984680][   T33] audit: type=1326 audit(1755051718.336:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5698ebe9 code=0x7fc00000
[  108.203800][ T5905] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  108.372996][ T5905] usb 1-1: unable to get BOS descriptor or descriptor too short
[  108.398755][ T5905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.413874][ T5905] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  108.417918][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.421095][ T5905] usb 1-1: Product: syz
[  108.423031][ T5905] usb 1-1: Manufacturer: syz
[  108.427115][ T5905] usb 1-1: SerialNumber: syz
[  108.712246][ T5905] usb 1-1: USB disconnect, device number 8
[  108.744033][ T6152] udevd[6152]: setting owner of /dev/bus/usb/001/008 to uid=0, gid=0 failed: No such file or directory
[  108.830163][ T7750] loop1: detected capacity change from 0 to 512
[  108.832183][ T6152] udevd[6152]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.860656][ T7750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.876509][ T7750] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.992084][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.528491][ T7759] loop1: detected capacity change from 0 to 32768
[  109.537088][ T7759] XFS: attr2 mount option is deprecated.
[  109.572539][ T7759] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  109.605004][ T7759] XFS (loop1): Ending clean mount
[  109.661620][ T7759] XFS (loop1): Quotacheck needed: Please wait.
[  109.699544][ T7759] XFS (loop1): Quotacheck: Done.
[  109.725607][ T5843] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  109.792490][ T7789] binder: BINDER_SET_CONTEXT_MGR already set
[  109.799008][ T7789] binder: 7788:7789 ioctl 4018620d 2000000001c0 returned -16
[  110.073777][ T5905] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  110.131536][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'.
[  110.217977][ T7803] loop1: detected capacity change from 0 to 32768
[  110.225334][ T5905] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  110.228081][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.235912][ T5905] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  110.238784][ T5905] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  110.241462][ T5905] usb 3-1: Manufacturer: syz
[  110.265961][ T5905] usb 3-1: config 0 descriptor??
[  110.272197][ T5905] igorplugusb 3-1:0.0: endpoint incorrect
[  110.341302][ T7830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.474966][ T5905] usb 3-1: USB disconnect, device number 6
[  110.603664][  T974] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  110.766919][  T974] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  110.770881][  T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.784672][  T974] usb 1-1: config 0 descriptor??
[  110.795000][  T974] cp210x 1-1:0.0: cp210x converter detected
[  111.204393][  T974] usb 1-1: cp210x converter now attached to ttyUSB0
[  111.401445][ T5891] usb 1-1: USB disconnect, device number 9
[  111.413640][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  111.422024][ T7899] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  111.430788][ T5891] cp210x 1-1:0.0: device disconnected
[  111.555662][  T974] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  111.718167][  T974] usb 3-1: Using ep0 maxpacket: 16
[  111.722154][  T974] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  111.725330][  T974] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE
[  111.730003][  T974] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0xE has an invalid bInterval 170, changing to 11
[  111.733864][  T974] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid maxpacket 34661, setting to 1024
[  111.737947][  T974] usb 3-1: config 0 interface 0 has no altsetting 0
[  111.743055][  T974] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  111.746187][  T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.748816][  T974] usb 3-1: Product: syz
[  111.750263][  T974] usb 3-1: Manufacturer: syz
[  111.752213][  T974] usb 3-1: SerialNumber: syz
[  111.763335][  T974] usb 3-1: config 0 descriptor??
[  111.765794][ T7882] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  111.990474][ T7882] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  112.012158][ T7942] loop0: detected capacity change from 0 to 16
[  112.028216][ T7942] erofs (device loop0): mounted with root inode @ nid 36.
[  112.049643][ T7942] erofs (device loop0): readahead error at folio 6 @ nid 36
[  112.053203][ T7942] erofs (device loop0): readahead error at folio 4 @ nid 36
[  112.070010][ T7942] erofs (device loop0): invalid logical cluster 0 at nid 36
[  112.075864][ T7942] erofs (device loop0): readahead error at folio 0 @ nid 36
[  112.079284][ T7942] syz.0.522: attempt to access beyond end of device
[  112.079284][ T7942] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16
[  112.085422][ T7942] syz.0.522: attempt to access beyond end of device
[  112.085422][ T7942] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  112.093762][ T7942] syz.0.522: attempt to access beyond end of device
[  112.093762][ T7942] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16
[  112.108452][ T7942] syz.0.522: attempt to access beyond end of device
[  112.108452][ T7942] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16
[  112.115741][ T7942] erofs (device loop0): invalid logical cluster 0 at nid 36
[  112.125386][ T7942] syz.0.522: attempt to access beyond end of device
[  112.125386][ T7942] loop0: rw=0, sector=296, nr_sectors = 8 limit=16
[  112.131916][ T7942] erofs (device loop0): read error -5 @ 0 of nid 36
[  112.134841][ T7942] erofs (device loop0): failed to readdir of logical block 0 of nid 36
[  112.230601][  T974] usb 3-1: USB disconnect, device number 7
[  113.465981][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  113.465996][   T33] audit: type=1326 audit(1755051723.827:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.0.529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5698ebe9 code=0x7fc00000
[  113.525329][ T7994] loop0: detected capacity change from 0 to 512
[  113.531793][ T7994] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  113.539810][ T7994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  113.548893][ T7994] System zones: 1-12
[  113.552985][ T7994] EXT4-fs (loop0): orphan cleanup on readonly fs
[  113.560627][ T7994] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.534: invalid indirect mapped block 12 (level 1)
[  113.573142][ T7994] EXT4-fs (loop0): Remounting filesystem read-only
[  113.575637][ T7994] EXT4-fs (loop0): 1 truncate cleaned up
[  113.578503][ T7994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  113.588768][ T7994] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.534: error -117 reading directory block
[  113.595024][ T7994] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.534: error -117 reading directory block
[  113.611275][ T8000] loop1: detected capacity change from 0 to 4096
[  113.617503][ T8000] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  113.629463][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  113.722002][ T8007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.537'.
[  115.826630][ T8065] warning: `syz.2.553' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  116.022087][ T8068] loop2: detected capacity change from 0 to 1024
[  116.180517][ T8059] loop0: detected capacity change from 0 to 32768
[  116.239263][ T8059] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  116.294178][ T8059] (syz.0.551,8059,0):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume.
[  116.299137][ T8059] (syz.0.551,8059,0):ocfs2_group_add:511 ERROR: status = -22
[  116.382325][ T5848] ocfs2: Unmounting device (7,0) on (node local)
[  116.617977][ T8076] loop2: detected capacity change from 0 to 32768
[  116.627781][ T8076] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.555 (8076)
[  116.645223][ T8076] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  116.653598][ T8076] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  116.658088][ T8076] BTRFS info (device loop2): using free-space-tree
[  117.260466][ T5850] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  117.352982][ T8126] loop1: detected capacity change from 0 to 4096
[  117.480625][ T8131] loop4: detected capacity change from 0 to 524255232
[  117.691827][ T8131] loop4: detected capacity change from 524255232 to 524287956
[  117.692647][ T8135] netlink: 'syz.2.561': attribute type 16 has an invalid length.
[  117.768032][ T8135] netlink: 48 bytes leftover after parsing attributes in process `syz.2.561'.
[  117.828824][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.821208][ T8160] netlink: 'syz.0.568': attribute type 4 has an invalid length.
[  119.001182][ T8148] loop1: detected capacity change from 0 to 32768
[  119.005131][ T8148] BTRFS warning: excessive commit interval 2147483647, use with care
[  119.009165][ T8148] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.565 (8148)
[  119.184776][ T8148] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  119.195687][ T8148] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  119.199152][ T8148] BTRFS info (device loop1): disk space caching is enabled
[  119.202224][ T8148] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  119.389385][ T1090] Bluetooth: hci3: Frame reassembly failed (-84)
[  119.401770][ T1090] Bluetooth: hci3: Frame reassembly failed (-84)
[  119.787374][ T8194] loop2: detected capacity change from 0 to 1024
[  119.790247][ T8148] BTRFS info (device loop1): rebuilding free space tree
[  119.870222][ T8148] BTRFS info (device loop1): disabling free space tree
[  119.888669][ T8148] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  119.910402][ T8148] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  120.063989][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.535609][ T5235] Bluetooth: hci3: command 0x1003 tx timeout
[  121.538908][   T55] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  121.568670][ T1090] hfsplus: b-tree write err: -5, ino 4
[  122.467167][ T8231] loop1: detected capacity change from 0 to 512
[  122.547116][ T8231] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.579: corrupted in-inode xattr: invalid ea_ino
[  122.572558][ T8231] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.579: couldn't read orphan inode 15 (err -117)
[  122.627107][ T8231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.695798][ T8228] loop0: detected capacity change from 0 to 40427
[  122.709660][ T8228] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  122.712297][ T8228] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  122.730044][ T8228] F2FS-fs (loop0): invalid crc value
[  122.784888][ T8228] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.800038][ T8228] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  122.801094][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.803456][ T8228] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  122.891937][ T8228] syz.0.578: attempt to access beyond end of device
[  122.891937][ T8228] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  123.017146][ T8246] loop1: detected capacity change from 0 to 1024
[  123.162086][ T1090] hfsplus: b-tree write err: -5, ino 4
[  123.532896][ T8266] loop2: detected capacity change from 0 to 128
[  123.610998][ T8277] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  123.786063][ T8297] loop0: detected capacity change from 0 to 164
[  123.804364][ T8297] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82
[  123.812047][ T8300] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  123.817869][ T5905] kernel write not supported for file /audio (pid: 5905 comm: kworker/0:5)
[  124.084854][ T8339] loop1: detected capacity change from 0 to 16
[  124.101192][ T8339] erofs (device loop1): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[  124.118593][ T8339] erofs (device loop1): mounted with root inode @ nid 36.
[  124.282199][ T8339] syz.1.604: attempt to access beyond end of device
[  124.282199][ T8339] loop1: rw=0, sector=15300821024, nr_sectors = 8 limit=16
[  124.289847][ T8339] erofs (device loop1): read error -5 @ 72 of nid 36
[  124.296703][ T5877] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  124.396197][ T8351] netlink: 'syz.1.606': attribute type 1 has an invalid length.
[  124.399411][ T8351] netlink: 232 bytes leftover after parsing attributes in process `syz.1.606'.
[  124.472935][ T5877] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  124.476331][ T5877] usb 3-1: config 0 has no interface number 0
[  124.478890][ T5877] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.484417][ T5877] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.488706][ T5877] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[  124.497865][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.504005][ T5877] usb 3-1: config 0 descriptor??
[  124.903471][ T5905] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  124.955995][ T5877] uclogic 0003:28BD:0905.0003: Interface probing failed: -22
[  124.959129][ T5877] uclogic 0003:28BD:0905.0003: interface is invalid, ignoring
[  125.093023][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  125.096752][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.105569][ T5905] usb 2-1: config 0 descriptor??
[  125.112342][ T5905] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  125.174874][  T791] usb 3-1: USB disconnect, device number 8
[  126.599307][ T5905] usb 2-1: USB disconnect, device number 6
[  126.925062][   T10] libceph: connect (1)[c::]:6789 error -101
[  126.930779][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  127.213735][ T5905] libceph: connect (1)[c::]:6789 error -101
[  127.216398][ T5905] libceph: mon0 (1)[c::]:6789 connect error
[  127.287086][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  127.295056][ T8407] ceph: No mds server is up or the cluster is laggy
[  127.450438][   T10] usb 3-1: Using ep0 maxpacket: 8
[  127.463855][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  127.471317][   T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  127.475056][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.487172][   T10] usb 3-1: config 0 descriptor??
[  127.721588][   T10] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  127.738383][ T8447] binder: 8441:8447 unknown command 0
[  127.740851][ T8447] binder: 8441:8447 ioctl c0306201 2000000003c0 returned -22
[  128.187194][ T5891] usb 3-1: USB disconnect, device number 9
[  129.902588][ T8491] QAT: failed to copy from user.
[  130.494322][ T8504] bridge0: port 3(erspan0) entered blocking state
[  130.509032][ T8504] bridge0: port 3(erspan0) entered disabled state
[  130.519039][ T8504] erspan0: entered allmulticast mode
[  130.524248][ T8508] loop1: detected capacity change from 0 to 2048
[  130.527662][ T8504] erspan0: entered promiscuous mode
[  130.541770][ T8504] bridge0: port 3(erspan0) entered blocking state
[  130.545174][ T8510] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.545257][ T8504] bridge0: port 3(erspan0) entered forwarding state
[  130.828526][ T8524] mmap: syz.1.640 (8524) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  130.874339][ T8528] tmpfs: Unknown parameter 'no'
[  131.498868][ T8542] loop1: detected capacity change from 0 to 512
[  131.505643][ T8542] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  131.509410][ T8542] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  131.513826][ T8542] EXT4-fs (loop1): group descriptors corrupted!
[  131.674370][ T8554] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.647'.
[  131.802139][ T8559] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  131.807724][ T5905] IPVS: starting estimator thread 0...
[  131.902369][ T8567] IPVS: using max 84 ests per chain, 201600 per kthread
[  131.908903][   T33] audit: type=1326 audit(1755051740.856:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2698ebe9 code=0x7ffc0000
[  131.923508][   T33] audit: type=1326 audit(1755051740.856:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2698ebe9 code=0x7ffc0000
[  131.945749][   T33] audit: type=1326 audit(1755051740.866:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.652" exe="/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f8a2698ebe9 code=0x7ffc0000
[  131.961614][   T33] audit: type=1326 audit(1755051740.866:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2698ebe9 code=0x7ffc0000
[  131.971892][   T33] audit: type=1326 audit(1755051740.866:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2698ebe9 code=0x7ffc0000
[  132.029633][ T8586] loop2: detected capacity change from 0 to 2048
[  132.038976][ T8586] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  132.045688][ T8586] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  132.049186][ T8586] UDF-fs: Scanning with blocksize 512 failed
[  132.058539][ T8586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.526399][ T8635] netlink: 72 bytes leftover after parsing attributes in process `syz.2.669'.
[  132.560942][ T8638] netlink: 140 bytes leftover after parsing attributes in process `syz.0.670'.
[  132.647089][ T8647] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  132.652648][ T8647] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[  133.315553][ T8652] loop1: detected capacity change from 0 to 32768
[  133.663364][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.683'.
[  133.727726][ T8688] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82
[  133.906717][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  134.278601][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  134.281132][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  134.299544][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 168, changing to 11
[  134.304253][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  134.312780][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  134.316706][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.321189][   T10] usb 2-1: Product: syz
[  134.322944][   T10] usb 2-1: Manufacturer: syz
[  134.324892][   T10] usb 2-1: SerialNumber: syz
[  134.333732][ T8665] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  134.491771][ T5905] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  134.567375][   T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  134.576830][   T10] usb 2-1: USB disconnect, device number 7
[  134.747708][ T5905] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  134.751534][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.755682][ T5905] usb 3-1: Product: syz
[  134.757448][ T5905] usb 3-1: Manufacturer: syz
[  134.759550][ T5905] usb 3-1: SerialNumber: syz
[  134.767905][ T5905] usb 3-1: config 0 descriptor??
[  134.781758][ T5905] usb 3-1: selecting invalid altsetting 3
[  134.786150][ T5905] comedi comedi5: could not set alternate setting 3 in high speed
[  134.789757][ T5905] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device.
[  134.809193][ T5905] usbdux 3-1:0.0: probe with driver usbdux failed with error -22
[  135.235811][ T5877] usb 3-1: USB disconnect, device number 10
[  136.844283][ T8753] loop0: detected capacity change from 0 to 8
[  136.865312][ T8753] SQUASHFS error: xz decompression failed, data probably corrupt
[  136.869890][ T8753] SQUASHFS error: Failed to read block 0x108: -5
[  136.872935][ T8753] SQUASHFS error: Unable to read metadata cache entry [106]
[  136.885623][ T8753] SQUASHFS error: Unable to read inode 0x11f
[  137.100763][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'.
[  137.174887][ T8775] nbd: must specify a size in bytes for the device
[  137.409786][ T8792] loop2: detected capacity change from 0 to 1024
[  137.455234][ T8792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.482102][ T5905] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  137.497898][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.537195][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'.
[  137.541022][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'.
[  137.646165][ T8804] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  137.652042][ T8804] Error validating options; rc = [-22]
[  137.655974][ T5905] usb 1-1: Using ep0 maxpacket: 32
[  137.666601][ T5905] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  137.672165][ T5905] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  137.678213][ T5905] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.678871][ T8790] loop1: detected capacity change from 0 to 40427
[  137.686235][ T5905] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  137.692159][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  137.695556][ T5905] usb 1-1: Product: syz
[  137.697441][ T5905] usb 1-1: Manufacturer: syz
[  137.700229][ T8790] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  137.703774][ T8790] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  137.705098][ T5905] usb 1-1: SerialNumber: syz
[  137.743529][ T5905] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6
[  137.764671][ T8790] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  137.971664][ T5905] usb 1-1: USB disconnect, device number 10
[  137.973574][ T8790] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  137.988083][ T8790] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  137.994967][ T8790] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  138.047571][ T5905] appletouch 1-1:1.0: input: appletouch disconnected
[  138.072676][ T8790] f2fs_printk: 2 callbacks suppressed
[  138.072764][ T8790] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  138.083222][ T8790] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  138.098809][ T8790] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  138.109750][ T8790] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  138.118175][ T8790] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  138.121173][ T8790] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  138.123671][ T8790] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  139.046346][ T8835] loop0: detected capacity change from 0 to 1024
[  139.055159][ T8835] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  139.130887][ T8835] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.714: lblock 1 mapped to illegal pblock 1 (length 1)
[  139.170179][ T8835] Quota error (device loop0): write_blk: dquota write failed
[  139.176876][ T8835] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  139.180207][ T8835] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.714: Failed to acquire dquot type 0
[  139.188115][ T8835] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.714: Freeing blocks not in datazone - block = 0, count = 4096
[  139.201306][ T8835] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.714: Invalid inode bitmap blk 0 in block_group 0
[  139.208240][ T4819] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  139.212289][ T8835] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  139.218248][ T4819] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  139.218487][ T4819] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u9:5: Failed to release dquot type 0
[  139.223511][ T8835] EXT4-fs (loop0): 1 orphan inode deleted
[  139.238877][ T8835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.371980][ T8835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.516609][ T8845] loop2: detected capacity change from 0 to 4096
[  139.691778][ T8845] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  139.775410][ T8845] ntfs3(loop2): Failed to load $Extend (-22).
[  139.788016][ T8845] ntfs3(loop2): Failed to initialize $Extend.
[  140.284357][ T8874] loop0: detected capacity change from 0 to 512
[  140.296111][ T8874] EXT4-fs: Ignoring removed mblk_io_submit option
[  140.311365][ T8874] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  140.323519][ T8874] EXT4-fs (loop0): 1 truncate cleaned up
[  140.360174][ T8874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.437986][ T8882] Zero length message leads to an empty skb
[  140.746901][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.110381][ T8896] loop2: detected capacity change from 0 to 512
[  141.120888][ T8896] EXT4-fs (loop2): Test dummy encryption mode enabled
[  141.125152][ T8896] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  141.131082][ T8896] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  141.136961][ T8896] EXT4-fs (loop2): The Hurd can't support 64-bit file systems
[  141.162207][ T8896] loop2: detected capacity change from 0 to 512
[  141.198753][ T8896] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.727: bad orphan inode 15
[  141.211159][ T8896] ext4_test_bit(bit=14, block=5) = 0
[  141.214776][ T8896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.337526][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.928352][ T8972] loop0: detected capacity change from 0 to 1024
[  141.954719][   T33] audit: type=1800 audit(1755051750.123:36): pid=8972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.745" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=25 res=0 errno=0
[  142.303995][ T5877] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  142.337000][ T5905] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  142.483664][ T5877] usb 3-1: config 252 has an invalid interface number: 186 but max is 0
[  142.493977][ T5877] usb 3-1: config 252 has no interface number 0
[  142.509971][ T5877] usb 3-1: New USB device found, idVendor=0403, idProduct=bcd8, bcdDevice=27.67
[  142.513802][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.517170][ T5877] usb 3-1: Product: syz
[  142.519070][ T5877] usb 3-1: Manufacturer: syz
[  142.521409][ T5877] usb 3-1: SerialNumber: syz
[  142.530776][ T5905] usb 1-1: Using ep0 maxpacket: 16
[  142.534736][ T5905] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  142.537821][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.545542][ T5877] ftdi_sio 3-1:252.186: FTDI USB Serial Device converter detected
[  142.550374][ T5877] ftdi_sio ttyUSB0: unknown device type: 0x2767
[  142.560303][ T5905] usb 1-1: config 0 has no interface number 0
[  142.575385][ T5905] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  142.578966][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.597755][ T5905] usb 1-1: Product: syz
[  142.603604][ T5905] usb 1-1: Manufacturer: syz
[  142.605323][ T5905] usb 1-1: SerialNumber: syz
[  142.626121][ T5905] usb 1-1: config 0 descriptor??
[  142.641496][ T5905] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  142.647900][ T5905] usb 1-1: No valid video chain found.
[  142.661229][ T9008] trusted_key: encrypted_key: keylen parameter is missing
[  142.749687][ T5877] usb 3-1: USB disconnect, device number 11
[  142.752944][ T5877] ftdi_sio 3-1:252.186: device disconnected
[  142.840037][ T9012] loop1: detected capacity change from 0 to 32768
[  142.853463][ T9012] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  142.861667][ T5905] usb 1-1: USB disconnect, device number 11
[  142.918308][ T5843] ocfs2: Unmounting device (7,1) on (node local)
[  143.957928][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'.
[  144.522035][ T9077] loop1: detected capacity change from 0 to 4096
[  144.537018][ T9079] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.544373][   T33] audit: type=1800 audit(1755051752.514:37): pid=9077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.766" name="file1" dev="loop1" ino=15 res=0 errno=0
[  144.855893][ T9091] misc userio: The device must be registered before sending interrupts
[  145.669232][ T9126] loop0: detected capacity change from 0 to 8
[  146.000612][ T9150] loop2: detected capacity change from 0 to 16
[  146.024153][ T9150] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  146.035366][ T9150] erofs (device loop2): mounted with root inode @ nid 36.
[  146.046692][ T9150] syz.2.783: attempt to access beyond end of device
[  146.046692][ T9150] loop2: rw=0, sector=1152, nr_sectors = 257 limit=16
[  146.054626][ T9150] erofs (device loop2): read error -5 @ 0 of nid 36
[  146.488529][ T9159] loop2: detected capacity change from 0 to 256
[  146.492844][ T9159] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  146.596317][ T9167] netlink: 'syz.2.786': attribute type 7 has an invalid length.
[  146.601029][ T9167] netlink: 'syz.2.786': attribute type 8 has an invalid length.
[  146.686926][ T9176] netlink: 'syz.1.790': attribute type 1 has an invalid length.
[  147.140246][ T9217] loop0: detected capacity change from 0 to 256
[  147.153109][ T9217] FAT-fs (loop0): Directory bread(block 64) failed
[  147.155429][ T9217] FAT-fs (loop0): Directory bread(block 65) failed
[  147.158045][ T9217] FAT-fs (loop0): Directory bread(block 66) failed
[  147.160390][ T9217] FAT-fs (loop0): Directory bread(block 67) failed
[  147.162692][ T9217] FAT-fs (loop0): Directory bread(block 68) failed
[  147.164972][ T9217] FAT-fs (loop0): Directory bread(block 69) failed
[  147.168152][ T9217] FAT-fs (loop0): Directory bread(block 70) failed
[  147.173405][ T9217] FAT-fs (loop0): Directory bread(block 71) failed
[  147.176387][ T9217] FAT-fs (loop0): Directory bread(block 72) failed
[  147.182851][ T9217] FAT-fs (loop0): Directory bread(block 73) failed
[  147.591643][ T9228] loop0: detected capacity change from 0 to 512
[  147.615840][ T9228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.621238][ T9228] ext4 filesystem being mounted at /267/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  147.641864][ T9228] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.805: corrupted xattr block 33: invalid ea_ino
[  147.651447][ T9228] EXT4-fs (loop0): Remounting filesystem read-only
[  147.675854][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.684719][ T4819] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  147.688451][ T4819] Quota error (device loop0): write_blk: dquota write failed
[  147.691122][ T4819] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries
[  147.694776][ T4819] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  147.698342][ T4819] Quota error (device loop0): write_blk: dquota write failed
[  147.700876][ T4819] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list
[  147.704261][ T4819] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  147.707714][ T4819] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  148.151711][ T9250] loop1: detected capacity change from 0 to 32768
[  148.158925][ T9250] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.810 (9250)
[  148.179234][ T9250] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.183545][ T9250] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  148.189274][ T9250] BTRFS info (device loop1): using free-space-tree
[  148.222616][ T9250] BTRFS info (device loop1): rebuilding free space tree
[  148.245452][ T9288] loop0: detected capacity change from 0 to 2048
[  148.296271][   T13] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  148.346786][ T5843] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.967869][ T9310] loop0: detected capacity change from 0 to 131072
[  148.976253][ T9310] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  148.979062][ T9310] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  148.982917][ T9310] F2FS-fs (loop0): invalid crc value
[  149.011119][ T9310] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  149.018449][ T9310] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  149.022583][ T9310] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  149.854312][ T9352] loop0: detected capacity change from 0 to 32768
[  149.876469][   T10] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  150.000564][ T9357] loop0: detected capacity change from 0 to 256
[  150.044957][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.049768][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  150.053955][   T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  150.056994][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.062658][   T10] usb 2-1: config 0 descriptor??
[  150.070361][   T10] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22
[  150.089291][ T9364] loop0: detected capacity change from 0 to 2048
[  150.119504][ T9364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.124615][ T9364] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.170160][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.287012][   T10] usb 2-1: USB disconnect, device number 8
[  150.378022][ T9384] wg1 speed is unknown, defaulting to 1000
[  150.380979][ T9384] wg1 speed is unknown, defaulting to 1000
[  150.390748][ T9384] wg1 speed is unknown, defaulting to 1000
[  150.418890][ T9384] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  150.433277][ T9384] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  150.508711][ T9384] wg1 speed is unknown, defaulting to 1000
[  150.514017][ T9384] wg1 speed is unknown, defaulting to 1000
[  150.528621][ T9384] wg1 speed is unknown, defaulting to 1000
[  151.086455][   T33] audit: type=1326 audit(1755051758.550:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.2.848" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb56838ebe9 code=0x0
[  151.497986][ T9404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.850'.
[  152.790752][ T5905] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  152.964702][ T9430] nfs4: Bad value for 'source'
[  152.967975][ T5905] usb 3-1: Using ep0 maxpacket: 16
[  152.972269][ T5905] usb 3-1: config 4 has an invalid interface number: 51 but max is 0
[  152.975890][ T5905] usb 3-1: config 4 has no interface number 0
[  152.978353][ T5905] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  152.982235][ T5905] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  152.988926][ T5905] usb 3-1: config 4 interface 51 has no altsetting 0
[  152.993743][ T5905] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  152.997998][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.005593][ T5905] usb 3-1: Product: syz
[  153.009359][ T5905] usb 3-1: Manufacturer: syz
[  153.011208][ T5905] usb 3-1: SerialNumber: syz
[  153.016237][ T9412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  153.022307][ T9412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  153.060370][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'.
[  153.065545][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.862'.
[  153.080663][ T9436] gretap0: entered promiscuous mode
[  153.084164][ T9436] macvlan0: entered promiscuous mode
[  153.177015][ T5877] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  153.186737][ T5877] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  153.187837][ T9442] loop0: detected capacity change from 0 to 1024
[  153.244243][ T9453] loop0: detected capacity change from 0 to 1024
[  153.250196][ T5905] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -71
[  153.251822][ T9453] hfsplus: failed to load extents file
[  153.261064][ T5905] usb 3-1: USB disconnect, device number 12
[  153.436222][ T9469] loop0: detected capacity change from 0 to 4096
[  153.442444][ T9469] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  153.462716][ T9469] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  153.550061][ T9471] loop1: detected capacity change from 0 to 32768
[  153.563347][ T9471] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.869 (9471)
[  153.572710][ T9471] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.576098][ T9471] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  153.578802][ T9471] BTRFS info (device loop1): using free-space-tree
[  153.642079][ T5843] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.803636][ T9508] loop1: detected capacity change from 0 to 256
[  153.861102][ T9513] loop0: detected capacity change from 0 to 2048
[  153.870538][ T9513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.970698][ T9523] tipc: Started in network mode
[  153.979104][ T9523] tipc: Node identity daac1d7ab0d3, cluster identity 4711
[  153.982625][ T9523] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.021354][ T9523] syzkaller0: entered promiscuous mode
[  154.023624][ T9523] syzkaller0: entered allmulticast mode
[  154.031004][ T9523] tipc: Resetting bearer <eth:syzkaller0>
[  154.110866][   T33] audit: type=1800 audit(1755051761.329:39): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.877" name="bus" dev="loop0" ino=1367 res=0 errno=0
[  154.126837][ T9522] tipc: Resetting bearer <eth:syzkaller0>
[  154.134954][   T24] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  154.319414][   T24] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  154.322372][   T24] usb 3-1: config 179 has no interface number 0
[  154.329766][   T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  154.334433][   T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  154.343404][   T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  154.347205][   T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  154.351226][   T24] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  154.360951][   T24] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  154.364223][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.373328][ T9511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  154.380815][   T24] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  154.389096][   T24] xpad 3-1:179.65: probe with driver xpad failed with error -90
[  154.618171][   T24] usb 3-1: USB disconnect, device number 13
[  155.108871][ T9540] loop0: detected capacity change from 0 to 32768
[  155.155785][ T9540] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.182395][ T9540] XFS (loop0): Ending clean mount
[  155.200412][ T5877] tipc: Node number set to 1786715514
[  155.252076][ T5848] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.765560][ T9522] tipc: Disabling bearer <eth:syzkaller0>
[  157.195694][ T5905] kernel write not supported for file /dsp1 (pid: 5905 comm: kworker/0:5)
[  157.374225][ T9642] loop1: detected capacity change from 0 to 32768
[  157.422954][ T9642] (syz.1.904,9642,1):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[  157.422954][ T9642] found = 0, set = 0, taken = 0, off = 1280
[  157.432015][ T9642] (syz.1.904,9642,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[  157.435650][ T9642] (syz.1.904,9642,1):ocfs2_check_volume:2404 ERROR: status = -22
[  157.443740][ T9642] (syz.1.904,9642,1):ocfs2_check_volume:2432 ERROR: status = -22
[  157.447139][ T9642] (syz.1.904,9642,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  157.470905][ T9642] (syz.1.904,9642,1):ocfs2_fill_super:1177 ERROR: status = -22
[  157.991192][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  158.153657][   T24] usb 2-1: Using ep0 maxpacket: 16
[  158.157744][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.161992][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  158.166662][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  158.170554][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  158.174591][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.181150][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  158.184884][   T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  158.187810][   T24] usb 2-1: Manufacturer: syz
[  158.190856][   T24] usb 2-1: config 0 descriptor??
[  158.456976][   T24] rc_core: IR keymap rc-hauppauge not found
[  158.458915][   T24] Registered IR keymap rc-empty
[  158.460727][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.478701][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.501102][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  158.506644][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  158.513069][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.532874][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.554650][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.576229][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.597848][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.619615][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.641278][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.662946][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.684614][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.706258][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.729166][   T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  158.732450][   T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  158.901043][    T9] usb 2-1: USB disconnect, device number 9
[  186.452740][ T5235] Bluetooth: hci1: command 0x0406 tx timeout
[  192.014782][ T5235] Bluetooth: hci2: command 0x0405 tx timeout
[  200.847002][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  200.849233][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  267.409265][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  267.411870][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  333.976191][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  333.978252][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  400.539377][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  400.541830][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  467.104978][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  467.107864][ T1363] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
02:27:58  Registers:
info registers vcpu 0

CPU#0
RAX=2ebb360439812700 RBX=ffffffff81968308 RCX=2ebb360439812700 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bfd21ad2f8 CR3=0000000107a34000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ff00 XMM01=000000000000ff00 0000000000000000
XMM02=0000000000000000 000000000000ff00 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d44bbc9e71c0d800 RBX=ffffffff81968308 RCX=d44bbc9e71c0d800 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bfc2c51680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
