last executing test programs:

1m38.041315844s ago: executing program 1 (id=267):
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$unix(r0, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x24}}], 0x20, 0x24000010}}], 0x1, 0x0)

1m37.956818928s ago: executing program 1 (id=268):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10}, 0x90)

1m37.846264262s ago: executing program 1 (id=269):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0)

1m37.770684545s ago: executing program 1 (id=270):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file1\x00', 0xc00, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x1, 0x6207, &(0x7f0000012500)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

1m37.119950729s ago: executing program 1 (id=271):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2})

1m36.869155247s ago: executing program 1 (id=277):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901)
unshare(0x22020600)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)

1m36.591301069s ago: executing program 32 (id=277):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901)
unshare(0x22020600)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)

1m6.423846786s ago: executing program 2 (id=550):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000)

1m6.256193077s ago: executing program 2 (id=551):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020)

1m6.18938651s ago: executing program 2 (id=553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x0)

1m6.12060173s ago: executing program 2 (id=554):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

1m5.975398866s ago: executing program 2 (id=555):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200)

1m5.579380187s ago: executing program 2 (id=559):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)

1m5.44288061s ago: executing program 33 (id=559):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)

2.945535126s ago: executing program 4 (id=1177):
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xa, 0x2, 0x0, 0x0, 0x4ffffff)

1.721383542s ago: executing program 4 (id=1186):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x20000080ffff, 0x100000}}, 0x40)

1.495365674s ago: executing program 0 (id=1189):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1}, 0x14)
syz_emit_ethernet(0x77, &(0x7f0000000340)={@local, @empty, @void, {@llc={0x4, {@llc={0x42, 0x8e, "be", "7dd1b21a61c41e0edac9ee009fb60d410ecdb81442c8be02743d2f5c3ebac1950b493970c795893f320e7471deaee3931353794c249c914bfe5e03909ad4e826474446236c7aada080bab42f82d0abdc2cbcdd040b1a4c7a664da962f65ce0c5bdc857e83170"}}}}}, 0x0)

1.495176591s ago: executing program 3 (id=1190):
quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0)

1.377625907s ago: executing program 3 (id=1191):
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0)

1.377352685s ago: executing program 0 (id=1192):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x11, 0x1cb, 0x20000a2e, 0x4, 0x0, 0x3, 0x7ff, 0x0, 0xa}})

1.24544768s ago: executing program 0 (id=1193):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, <r6=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8})
ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8, r6})

1.244848847s ago: executing program 3 (id=1194):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x982a, &(0x7f0000009b80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

435.164078ms ago: executing program 4 (id=1195):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x59091fd, 0x2}, 0x0, 0x7, 0x0, 0x1, 0x0}})

434.894263ms ago: executing program 4 (id=1196):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x2c9ab000)
fadvise64(r1, 0x2, 0x106, 0x5)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x1000)

380.193616ms ago: executing program 3 (id=1197):
r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}, &(0x7f00000001c0)="7088034492da3843c3970bcc22c65729c97f7bfa4ced008a3dae1715e1a6ff823012401ca911cbb43d00d397a0", 0x2d})

296.696106ms ago: executing program 4 (id=1198):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$rds(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x24000001)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4000)

203.830054ms ago: executing program 0 (id=1199):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x3c}}, 0x0)

123.082639ms ago: executing program 4 (id=1200):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000})

57.077054ms ago: executing program 0 (id=1201):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x31e39, 0x59629}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x5dc381dc}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0)

1.897266ms ago: executing program 3 (id=1202):
socket$kcm(0x2, 0xa, 0x2)
socket$kcm(0x2, 0xa, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0)

1.675331ms ago: executing program 0 (id=1203):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00')
write$cgroup_int(r0, &(0x7f0000000080)=0x101, 0x12)

0s ago: executing program 3 (id=1204):
r0 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000000), &(0x7f0000000100), 0xfe00, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x1001)

kernel console output (not intermixed with test programs):

atawrite+0x199/0x240
[  106.807676][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  106.807748][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  106.807769][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[  106.807795][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[  106.807853][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  106.807901][ T5848]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  106.807915][ T5848]  ? kfree+0x18e/0x440
[  106.807932][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[  106.807950][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[  106.807968][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[  106.807986][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[  106.808010][ T5848]  ? shrinker_free+0x2ce/0x3e0
[  106.808026][ T5848]  deactivate_locked_super+0xbc/0x130
[  106.808045][ T5848]  cleanup_mnt+0x425/0x4c0
[  106.808060][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.808081][ T5848]  task_work_run+0x1d4/0x260
[  106.808101][ T5848]  ? __pfx_task_work_run+0x10/0x10
[  106.808115][ T5848]  ? __x64_sys_umount+0x122/0x160
[  106.808134][ T5848]  ? exit_to_user_mode_loop+0x40/0x110
[  106.808154][ T5848]  exit_to_user_mode_loop+0xec/0x110
[  106.808172][ T5848]  do_syscall_64+0x2bd/0x3b0
[  106.808189][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.808206][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.808218][ T5848]  ? exc_page_fault+0x9f/0xf0
[  106.808235][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.808247][ T5848] RIP: 0033:0x7f584478ff17
[  106.808260][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  106.808270][ T5848] RSP: 002b:00007ffc7642f548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  106.808284][ T5848] RAX: 0000000000000000 RBX: 00007f5844811c05 RCX: 00007f584478ff17
[  106.808293][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7642f600
[  106.808301][ T5848] RBP: 00007ffc7642f600 R08: 0000000000000000 R09: 0000000000000000
[  106.808308][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc76430690
[  106.808316][ T5848] R13: 00007f5844811c05 R14: 00000000000196ed R15: 00007ffc764306d0
[  106.808334][ T5848]  </TASK>
[  106.808794][ T5848] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  106.974855][ T5877] usb 1-1: USB disconnect, device number 8
[  107.151775][ T6892] loop2: detected capacity change from 0 to 256
[  107.167504][ T6892] FAT-fs (loop2): Directory bread(block 64) failed
[  107.170184][ T6892] FAT-fs (loop2): Directory bread(block 65) failed
[  107.173107][ T6892] FAT-fs (loop2): Directory bread(block 66) failed
[  107.175600][ T6892] FAT-fs (loop2): Directory bread(block 67) failed
[  107.178286][ T6892] FAT-fs (loop2): Directory bread(block 68) failed
[  107.180584][ T6892] FAT-fs (loop2): Directory bread(block 69) failed
[  107.184429][ T6892] FAT-fs (loop2): Directory bread(block 70) failed
[  107.186761][ T6892] FAT-fs (loop2): Directory bread(block 71) failed
[  107.188947][ T6892] FAT-fs (loop2): Directory bread(block 72) failed
[  107.191066][ T6892] FAT-fs (loop2): Directory bread(block 73) failed
[  107.208329][ T6892] syz.2.322: attempt to access beyond end of device
[  107.208329][ T6892] loop2: rw=2051, sector=1224, nr_sectors = 608 limit=256
[  107.327809][ T6896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.324'.
[  108.087941][ T6924] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  108.111256][ T6924] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  108.275465][ T6930] loop3: detected capacity change from 0 to 512
[  108.286185][ T6930] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  108.302422][ T6930] EXT4-fs (loop3): 1 truncate cleaned up
[  108.306564][ T6930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.392519][ T6696] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.546006][ T6928] loop0: detected capacity change from 0 to 32768
[  108.692725][   T54] Bluetooth: hci1: command tx timeout
[  108.721537][ T2283] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  108.781191][ T6945] loop2: detected capacity change from 0 to 1024
[  108.815190][ T6945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  108.823879][ T6945] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.840775][   T33] audit: type=1800 audit(1755245958.314:14): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.347" name="file1" dev="loop2" ino=15 res=0 errno=0
[  108.863330][ T6945] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.347: lblock 0 mapped to illegal pblock 0 (length 1)
[  108.896056][ T2283] usb 4-1: config 1 interface 0 has no altsetting 0
[  108.909653][ T2283] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  108.914408][ T2283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.920559][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  108.932223][ T2283] usb 4-1: Product: syz
[  108.944803][ T2283] usb 4-1: Manufacturer: syz
[  108.949408][ T2283] usb 4-1: SerialNumber: syz
[  109.124836][ T6959] loop2: detected capacity change from 0 to 512
[  109.144958][ T6959] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.352: casefold flag without casefold feature
[  109.150867][ T6959] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.352: couldn't read orphan inode 15 (err -117)
[  109.162832][ T6959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.224151][ T2283] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  109.244522][ T2283] usb 4-1: USB disconnect, device number 2
[  109.252653][ T2283] usblp0: removed
[  109.337553][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.413069][ T6970] netlink: 'syz.0.357': attribute type 1 has an invalid length.
[  109.418527][ T6970] netlink: 1 bytes leftover after parsing attributes in process `syz.0.357'.
[  109.491013][ T6972] loop0: detected capacity change from 0 to 1764
[  109.821200][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'.
[  109.832451][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'.
[  109.836259][ T6991] netlink: 'syz.3.367': attribute type 6 has an invalid length.
[  109.867327][ T6991] netlink: 'syz.3.367': attribute type 5 has an invalid length.
[  110.069765][ T7001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'.
[  110.082633][ T6989] loop0: detected capacity change from 0 to 32768
[  110.105596][ T6989] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  110.125513][ T6989] XFS (loop0): Ending clean mount
[  110.184522][ T5842] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  110.238146][ T2283] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  110.457673][ T2283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.461577][ T2283] usb 4-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[  110.465210][ T2283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.488640][ T2283] usb 4-1: config 0 descriptor??
[  110.966247][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  111.010035][ T2283] wacom 0003:056A:032B.0004: unbalanced collection at end of report description
[  111.016697][ T2283] wacom 0003:056A:032B.0004: parse failed
[  111.019589][ T2283] wacom 0003:056A:032B.0004: probe with driver wacom failed with error -22
[  111.037313][ T7020] loop2: detected capacity change from 0 to 32768
[  111.047453][ T7020] (syz.2.377,7020,1):ocfs2_check_set_options:1259 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled.
[  111.068280][ T7020] (syz.2.377,7020,1):ocfs2_fill_super:1177 ERROR: status = -22
[  111.225422][   T24] usb 4-1: USB disconnect, device number 3
[  111.274543][ T7030] tipc: Resetting bearer <eth:vlan0>
[  111.280369][ T7030] vlan0: entered promiscuous mode
[  111.627498][   T48] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  111.638952][ T7046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.387'.
[  111.649700][ T7046] netlink: 43 bytes leftover after parsing attributes in process `syz.0.387'.
[  111.654039][ T7046] netlink: 'syz.0.387': attribute type 5 has an invalid length.
[  111.658546][ T7046] netlink: 43 bytes leftover after parsing attributes in process `syz.0.387'.
[  111.809153][   T48] usb 3-1: Using ep0 maxpacket: 8
[  111.814999][   T48] usb 3-1: unable to get BOS descriptor or descriptor too short
[  111.819225][   T48] usb 3-1: config 2 has an invalid interface number: 164 but max is 0
[  111.824875][   T48] usb 3-1: config 2 has no interface number 0
[  111.827312][   T48] usb 3-1: config 2 interface 164 has no altsetting 0
[  111.839851][   T48] usb 3-1: New USB device found, idVendor=0424, idProduct=9730, bcdDevice=50.16
[  111.852361][   T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.855548][   T48] usb 3-1: Product: syz
[  111.858200][   T48] usb 3-1: Manufacturer: syz
[  111.861947][   T48] usb 3-1: SerialNumber: syz
[  111.994434][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'.
[  111.997868][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'.
[  112.093415][ T7057] bond1: entered promiscuous mode
[  112.095219][ T7057] bond1: entered allmulticast mode
[  112.112838][ T7057] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.170681][ T7051] loop0: detected capacity change from 0 to 32768
[  112.229007][   T48] smsc95xx v2.0.0
[  112.232549][   T48] smsc95xx 3-1:2.164 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  112.236906][ T7051] XFS (loop0): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  112.237251][   T48] smsc95xx 3-1:2.164: probe with driver smsc95xx failed with error -22
[  112.263065][   T48] usb 3-1: USB disconnect, device number 7
[  112.373818][ T7051] XFS (loop0): Ending clean mount
[  112.624964][ T5842] XFS (loop0): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  113.147835][ T7073] cgroup: Invalid name
[  113.337084][ T7088] vivid-000: disconnect
[  113.341794][ T7088] vivid-000: reconnect
[  113.480358][ T7088] loop0: detected capacity change from 0 to 32768
[  113.490266][ T7088] ERROR: (device loop0): jfs_readdir: DT_GETPAGE: dtree page corrupt
[  113.490266][ T7088] 
[  113.493897][ T7088] ERROR: (device loop0): remounting filesystem as read-only
[  113.639812][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'.
[  113.640024][   T48] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  113.824205][   T48] usb 3-1: Using ep0 maxpacket: 32
[  113.828295][   T48] usb 3-1: config 0 has an invalid interface number: 96 but max is 0
[  113.831571][   T48] usb 3-1: config 0 has no interface number 0
[  113.833945][   T48] usb 3-1: config 0 interface 96 has no altsetting 0
[  113.841721][   T48] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44
[  113.845408][   T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.848936][   T48] usb 3-1: Product: syz
[  113.850618][   T48] usb 3-1: Manufacturer: syz
[  113.852460][   T48] usb 3-1: SerialNumber: syz
[  113.859368][   T48] usb 3-1: config 0 descriptor??
[  113.864519][   T48] legousbtower 3-1:0.96: interrupt endpoints not found
[  114.019216][   T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  114.052865][  T975] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  114.089288][   T48] usb 3-1: USB disconnect, device number 8
[  114.181975][   T24] usb 4-1: Using ep0 maxpacket: 32
[  114.187077][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  114.191584][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  114.195645][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.201822][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  114.205745][   T24] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  114.208963][   T24] usb 4-1: Product: syz
[  114.210605][   T24] usb 4-1: Manufacturer: syz
[  114.212401][   T24] usb 4-1: SerialNumber: syz
[  114.216155][  T975] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  114.219261][  T975] usb 1-1: config 0 has no interface number 0
[  114.221701][  T975] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  114.226948][  T975] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  114.236481][   T24] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6
[  114.243242][  T975] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  114.248041][  T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.251809][  T975] usb 1-1: Product: syz
[  114.255435][  T975] usb 1-1: Manufacturer: syz
[  114.258421][  T975] usb 1-1: SerialNumber: syz
[  114.263765][  T975] usb 1-1: config 0 descriptor??
[  114.267279][ T7111] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  114.280911][  T975] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  114.289832][  T975] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  114.455654][ T2283] usb 4-1: USB disconnect, device number 4
[  114.476171][ T2283] appletouch 4-1:1.0: input: appletouch disconnected
[  114.727753][ T5927] usb 1-1: USB disconnect, device number 9
[  114.741540][ T5927] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  114.755597][ T5927] cyberjack 1-1:0.69: device disconnected
[  115.005208][  T975] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  115.182566][  T975] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  115.186225][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.191418][  T975] usb 3-1: Product: syz
[  115.193094][  T975] usb 3-1: Manufacturer: syz
[  115.194966][  T975] usb 3-1: SerialNumber: syz
[  115.199392][  T975] usb 3-1: config 0 descriptor??
[  115.549633][  T975] usb 3-1: Firmware version (0.0) predates our first public release.
[  115.552800][  T975] usb 3-1: Please update to version 0.2 or newer
[  115.674545][  T975] usb 3-1: USB disconnect, device number 9
[  116.104562][ T7129] loop0: detected capacity change from 0 to 8
[  116.193496][ T7129] SQUASHFS error: xz decompression failed, data probably corrupt
[  116.198701][ T7129] SQUASHFS error: Failed to read block 0x108: -5
[  116.201291][ T7129] SQUASHFS error: Unable to read metadata cache entry [106]
[  116.204218][ T7129] SQUASHFS error: Unable to read inode 0x11f
[  116.303264][ T7129] loop0: detected capacity change from 0 to 1024
[  116.308067][ T7129] hfsplus: Bad value for 'gid'
[  116.836717][   T48] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  117.042362][   T48] usb 4-1: Using ep0 maxpacket: 32
[  117.087456][   T48] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  117.104834][   T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.153115][   T48] usb 4-1: config 0 descriptor??
[  117.197263][   T48] gspca_main: nw80x-2.14.0 probing 055f:d001
[  117.615839][ T7149] loop2: detected capacity change from 0 to 32768
[  117.628988][ T7149] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.422 (7149)
[  117.643138][ T7149] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  117.650321][ T7149] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  117.653198][ T7149] BTRFS info (device loop2): using free-space-tree
[  117.754450][ T7149] BTRFS warning (device loop2): get dev_stats failed, device not found
[  117.780229][ T7185] netlink: 52 bytes leftover after parsing attributes in process `syz.0.428'.
[  117.858939][ T5848] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  117.910228][ T7189] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  119.169126][  T975] usb 4-1: USB disconnect, device number 5
[  119.302803][ T7225] loop0: detected capacity change from 0 to 8
[  119.792845][ T7254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.443'.
[  119.799310][ T7254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.443'.
[  119.869873][ T2283] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  119.915183][ T7260] netlink: 'syz.0.445': attribute type 30 has an invalid length.
[  119.993360][ T7262] loop3: detected capacity change from 0 to 4096
[  119.997119][ T7262] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  120.008781][ T7262] ntfs3(loop3): $AttrDef is corrupted.
[  120.047884][ T2283] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.051258][ T2283] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  120.057451][ T2283] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  120.070443][ T2283] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  120.074563][ T2283] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  120.097355][ T2283] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  120.100974][ T2283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  120.104131][ T2283] usb 3-1: SerialNumber: syz
[  120.116792][ T2283] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  120.122123][ T2283] usb-storage 3-1:1.0: USB Mass Storage device detected
[  120.137922][ T2283] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  120.259767][  T975] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  120.336403][   T24] usb 3-1: USB disconnect, device number 10
[  120.433019][  T975] usb 1-1: Using ep0 maxpacket: 8
[  120.436838][  T975] usb 1-1: unable to get BOS descriptor or descriptor too short
[  120.443409][  T975] usb 1-1: config 7 has an invalid interface number: 142 but max is 0
[  120.447568][  T975] usb 1-1: config 7 has no interface number 0
[  120.451769][  T975] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[  120.455311][  T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.458538][  T975] usb 1-1: Product: syz
[  120.459948][  T975] usb 1-1: Manufacturer: syz
[  120.461566][  T975] usb 1-1: SerialNumber: syz
[  120.697371][  T975] usb 1-1: USB disconnect, device number 10
[  120.790727][ T2283] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  120.954293][ T2283] usb 4-1: Using ep0 maxpacket: 16
[  120.964455][ T2283] usb 4-1: too many configurations: 212, using maximum allowed: 8
[  120.972846][ T2283] usb 4-1: config 6 has no interfaces?
[  120.978453][ T2283] usb 4-1: config 6 has no interfaces?
[  120.988394][ T2283] usb 4-1: config 6 has no interfaces?
[  120.995314][ T2283] usb 4-1: config 6 has no interfaces?
[  120.999901][ T2283] usb 4-1: config 6 has no interfaces?
[  121.003532][ T2283] usb 4-1: config 6 has no interfaces?
[  121.009449][ T2283] usb 4-1: config 6 has no interfaces?
[  121.012758][ T2283] usb 4-1: config 6 has no interfaces?
[  121.029288][ T2283] usb 4-1: string descriptor 0 read error: -71
[  121.034481][ T2283] usb 4-1: New USB device found, idVendor=0980, idProduct=06fd, bcdDevice=14.8c
[  121.038110][ T2283] usb 4-1: New USB device strings: Mfr=54, Product=54, SerialNumber=151
[  121.051459][ T2283] usb 4-1: rejected 8 configurations due to insufficient available bus power
[  121.056978][ T2283] usb 4-1: no configuration chosen from 8 choices
[  121.064286][ T2283] usb 4-1: USB disconnect, device number 6
[  121.167554][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.456'.
[  121.427179][ T7298] syzkaller1: entered promiscuous mode
[  121.428979][ T7298] syzkaller1: entered allmulticast mode
[  121.475593][ T7291] loop2: detected capacity change from 0 to 32768
[  121.582442][ T7291] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  121.582457][ T7291]   allowing incompatible features above 0.0: (unknown version)
[  121.582462][ T7291]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  121.585668][ T7307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.463'.
[  121.589813][ T7291] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  121.604030][ T7291] bcachefs (loop2): initializing new filesystem
[  121.614211][ T7291] bcachefs (loop2): going read-write
[  121.630192][ T7291] bcachefs (loop2): marking superblocks
[  121.643893][ T7291] bcachefs (loop2): initializing freespace
[  121.648776][ T7291] bcachefs (loop2): done initializing freespace
[  121.652612][ T7291] bcachefs (loop2): reading snapshots table
[  121.654573][ T7291] bcachefs (loop2): reading snapshots done
[  121.680390][ T7291] bcachefs (loop2): done starting filesystem
[  121.751266][   T33] audit: type=1800 audit(1755245970.221:15): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.458" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  121.879391][ T7291] syz.2.458 (7291) used greatest stack depth: 17448 bytes left
[  121.905156][ T5848] bcachefs (loop2): shutting down
[  121.925911][ T5848] bcachefs (loop2): going read-only
[  121.932291][ T5848] bcachefs (loop2): finished waiting for writes to stop
[  121.940617][ T5848] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  121.984967][ T5848] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  121.989962][ T5848] bcachefs (loop2): clean shutdown complete, journal seq 4
[  121.993777][ T5848] bcachefs (loop2): marking filesystem clean
[  122.029482][ T5848] bcachefs (loop2): shutdown complete
[  122.130159][ T7321] loop3: detected capacity change from 0 to 32768
[  122.137340][ T7321] bcachefs (/dev/loop3): error validating superblock: Invalid superblock: optional field with size 0 (type 0)
[  122.141659][ T7321] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  122.227845][ T7330] netlink: 'syz.0.471': attribute type 2 has an invalid length.
[  122.525629][ T7347] loop0: detected capacity change from 0 to 256
[  123.399618][ T7361] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  123.427045][ T7363] loop3: detected capacity change from 0 to 16
[  123.436904][ T7363] erofs (device loop3): mounted with root inode @ nid 36.
[  123.520828][ T2283] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  123.696919][ T2283] usb 1-1: Using ep0 maxpacket: 16
[  123.705490][ T2283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.709466][ T2283] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  123.724452][ T2283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  123.731731][ T2283] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  123.741860][ T2283] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  123.745084][ T2283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.747586][ T2283] usb 1-1: Product: syz
[  123.749047][ T5904] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  123.751738][ T2283] usb 1-1: Manufacturer: syz
[  123.753362][ T2283] usb 1-1: SerialNumber: syz
[  123.759826][ T2283] usb 1-1: config 0 descriptor??
[  123.813347][ T2283] rc_core: IR keymap rc-xbox-dvd not found
[  123.815951][ T2283] Registered IR keymap rc-empty
[  123.820417][ T2283] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  123.826494][ T2283] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  123.834779][ T7384] netlink: 180 bytes leftover after parsing attributes in process `syz.3.494'.
[  123.840966][ T7381] netlink: 180 bytes leftover after parsing attributes in process `syz.3.494'.
[  123.848756][ T7381] netlink: 180 bytes leftover after parsing attributes in process `syz.3.494'.
[  123.911440][ T5904] usb 3-1: Using ep0 maxpacket: 16
[  123.921495][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short
[  123.930545][ T5904] usb 3-1: config 1 has an invalid interface descriptor of length 5, skipping
[  123.943417][ T5904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.947750][ T5904] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  123.958421][ T5904] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  123.962387][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.974647][ T5904] usb 3-1: Product: syz
[  123.976723][ T5904] usb 3-1: Manufacturer: syz
[  123.978789][ T5904] usb 3-1: SerialNumber: syz
[  123.995797][   T24] usb 1-1: USB disconnect, device number 11
[  123.996011][    C0] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  124.322995][ T5904] usb 3-1: USB disconnect, device number 11
[  124.589581][ T7393] netlink: 'syz.0.497': attribute type 25 has an invalid length.
[  124.642898][ T7395] netlink: 96 bytes leftover after parsing attributes in process `syz.0.498'.
[  124.694691][ T7397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  124.998709][ T7410] fuse: Bad value for 'fd'
[  125.140981][ T7420] loop2: detected capacity change from 0 to 164
[  125.150430][ T7420] Unable to read rock-ridge attributes
[  125.160372][ T7420] Unable to read rock-ridge attributes
[  125.376684][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'.
[  126.905229][ T7461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.015027][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'.
[  127.485118][ T7480] loop2: detected capacity change from 0 to 32768
[  127.585927][ T7484] loop0: detected capacity change from 0 to 32768
[  127.601893][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'.
[  127.610119][ T7484] (syz.0.537,7484,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.616339][ T7484] (syz.0.537,7484,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.649292][ T7484] (syz.0.537,7484,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  127.668810][ T7484] JBD2: Ignoring recovery information on journal
[  127.712501][ T7484] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  127.785301][ T7484] (syz.0.537,7484,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  127.796934][ T7484] (syz.0.537,7484,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  127.801993][ T7484] (syz.0.537,7484,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  127.805507][ T7484] (syz.0.537,7484,0):ocfs2_quota_read:201 ERROR: status = -5
[  127.809201][ T7484] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 5
[  127.816051][ T7484] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  127.820011][ T7484] (syz.0.537,7484,0):ocfs2_acquire_dquot:890 ERROR: status = -5
[  127.825068][ T7484] (syz.0.537,7484,0):ocfs2_mknod:317 ERROR: status = -5
[  127.827817][ T7484] (syz.0.537,7484,0):ocfs2_mknod:505 ERROR: status = -5
[  127.830764][ T7484] (syz.0.537,7484,0):ocfs2_mkdir:661 ERROR: status = -5
[  128.092613][ T7507] loop2: detected capacity change from 0 to 736
[  128.369175][ T5842] ocfs2: Unmounting device (7,0) on (node local)
[  128.994056][   T33] audit: type=1326 audit(1755245976.922:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.0.549" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b6078ebe9 code=0x0
[  129.484727][ T7524] loop2: detected capacity change from 0 to 512
[  129.510093][ T7524] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  129.527262][ T7524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  129.532897][ T7524] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.554: corrupted in-inode xattr: e_value size too large
[  129.538884][ T7524] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.554: couldn't read orphan inode 15 (err -117)
[  129.545770][ T7524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.561019][   T33] audit: type=1800 audit(1755245977.439:17): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.554" name="bus" dev="loop2" ino=18 res=0 errno=0
[  129.600866][ T7524] loop2: detected capacity change from 512 to 64
[  129.609488][ T7524] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 68:freeing already freed block (bit 67); block bitmap corrupt.
[  129.615818][ T7524] EXT4-fs (loop2): pa ffff8881035ed488: logic 0, phys. 37, len 219
[  129.618291][ T7524] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 219, pa_free 101
[  129.634652][ T5848] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0
[  129.664851][ T7520] loop3: detected capacity change from 0 to 32768
[  129.685123][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.687616][ T7520] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  129.718969][ T7520] XFS (loop3): Ending clean mount
[  129.723322][ T7520] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x20 
[  129.728205][ T7520] XFS (loop3): Unmount and run xfs_repair
[  129.731092][ T7520] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  129.733952][ T7520] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  129.737507][ T7520] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  129.742394][ T7520] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  129.746063][ T7520] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  129.752735][ T7520] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  129.756285][ T7520] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  129.759927][ T7520] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  129.763615][ T7520] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  129.775205][ T7520] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x20 len 8 error 74
[  129.780009][ T7520] XFS (loop3): Failed to initialize disk quotas, err -117.
[  129.810987][ T6696] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  129.814284][ T6696] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  130.069782][ T5851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.222428][ T5851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.349993][ T5851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.404124][ T7548] evm: overlay not supported
[  130.438685][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.443545][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.462152][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.466929][ T5851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.472859][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.476117][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.583684][ T7545] loop3: detected capacity change from 0 to 40427
[  130.588614][ T7545] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  130.591968][ T7545] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  130.610716][ T7545] F2FS-fs (loop3): invalid crc_offset: 33558524
[  130.720472][ T7545] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.735188][ T7545] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  130.741737][ T7545] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  130.794629][ T5851] bridge_slave_1: left allmulticast mode
[  130.796333][ T5851] bridge_slave_1: left promiscuous mode
[  130.798307][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.803487][ T7545] F2FS-fs (loop3): Stopped filesystem due to reason: 0
[  130.815085][ T5851] bridge_slave_0: left allmulticast mode
[  130.817009][ T5851] bridge_slave_0: left promiscuous mode
[  130.818998][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.243720][ T5851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.266848][ T5851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.273877][ T5851] bond0 (unregistering): Released all slaves
[  131.379495][ T7549] chnl_net:caif_netlink_parms(): no params data found
[  131.407857][ T5851] tipc: Disabling bearer <eth:vlan0>
[  131.426214][ T5851] tipc: Left network mode
[  131.881555][ T7549] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.884470][ T7549] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.891152][ T7549] bridge_slave_0: entered allmulticast mode
[  131.894640][ T7549] bridge_slave_0: entered promiscuous mode
[  131.899672][ T7549] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.906592][ T7549] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.914466][ T7549] bridge_slave_1: entered allmulticast mode
[  131.919771][ T7549] bridge_slave_1: entered promiscuous mode
[  131.969866][ T5851] hsr_slave_0: left promiscuous mode
[  131.974452][ T5851] hsr_slave_1: left promiscuous mode
[  131.978269][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.980995][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.987514][ T5851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.990550][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.014297][ T5851] veth1_macvtap: left promiscuous mode
[  132.017817][ T5851] veth0_macvtap: left promiscuous mode
[  132.019667][ T5851] veth1_vlan: left promiscuous mode
[  132.483943][ T5851] team0 (unregistering): Port device team_slave_1 removed
[  132.559739][ T5851] team0 (unregistering): Port device team_slave_0 removed
[  132.708315][ T5844] Bluetooth: hci2: command tx timeout
[  132.793292][ T7615] loop3: detected capacity change from 0 to 32768
[  132.808335][ T7615] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  132.818319][ T7615] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  132.864573][ T7615] XFS (loop3): Ending clean mount
[  132.883344][ T7615] XFS (loop3): Quotacheck needed: Please wait.
[  133.000339][ T7615] XFS (loop3): Quotacheck: Done.
[  133.036939][ T7549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.042184][ T7549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.044779][ T6696] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  133.140345][ T7625] netlink: 'syz.0.587': attribute type 1 has an invalid length.
[  133.148702][ T7625] netlink: 'syz.0.587': attribute type 1 has an invalid length.
[  133.151286][ T7625] netlink: 'syz.0.587': attribute type 1 has an invalid length.
[  133.172702][ T7549] team0: Port device team_slave_0 added
[  133.177801][ T7625] block nbd0: shutting down sockets
[  133.199653][ T7549] team0: Port device team_slave_1 added
[  133.270631][ T7549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.273400][ T7549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.306585][ T7549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.312952][ T7549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.322463][ T7549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.357712][ T7549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.458927][ T7549] hsr_slave_0: entered promiscuous mode
[  133.461913][ T7549] hsr_slave_1: entered promiscuous mode
[  133.464634][ T7549] debugfs: 'hsr0' already exists in 'hsr'
[  133.488297][ T7549] Cannot create hsr debugfs directory
[  133.651054][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  133.659228][ T7645] loop3: detected capacity change from 0 to 128
[  133.663315][ T7645] EXT4-fs: Ignoring removed nobh option
[  133.696717][ T7645] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  133.706255][ T7645] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.825231][   T24] usb 1-1: Using ep0 maxpacket: 16
[  133.848311][   T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  133.852558][   T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  133.865568][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  133.865879][ T6696] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  133.871601][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.876311][   T24] usb 1-1: Product: syz
[  133.878172][   T24] usb 1-1: Manufacturer: syz
[  133.885543][ T7549] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  133.889622][   T24] usb 1-1: SerialNumber: syz
[  133.919164][ T7549] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  133.947300][ T7549] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  133.956861][ T7549] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  133.970755][ T7655] binder: transaction release 7 bad handle 1, ret = -22
[  134.144700][   T24] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  134.173239][   T24] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  134.196941][   T24] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5)
[  134.208056][ T7549] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.222589][   T24] usb 1-1: USB disconnect, device number 12
[  134.231631][ T7549] 8021q: adding VLAN 0 to HW filter on device team0
[  134.247607][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.250617][ T6068] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.267746][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.270163][ T6068] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.337302][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.466152][ T7682] loop3: detected capacity change from 0 to 2048
[  134.546363][ T7549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.802696][ T7549] veth0_vlan: entered promiscuous mode
[  134.808402][ T7549] veth1_vlan: entered promiscuous mode
[  134.828733][ T7549] veth0_macvtap: entered promiscuous mode
[  134.835756][ T7549] veth1_macvtap: entered promiscuous mode
[  134.846864][ T7549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.855729][ T7549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.862689][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.876060][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.886834][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.889613][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.949133][ T6068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.952346][ T5844] Bluetooth: hci2: command tx timeout
[  134.958485][ T6068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.995841][ T6062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.999129][ T6062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.999205][ T7688] loop3: detected capacity change from 0 to 32768
[  135.006271][ T5904] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  135.010053][ T7688] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  135.105895][ T7705] loop4: detected capacity change from 0 to 256
[  135.172835][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.176620][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.188414][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  135.200542][ T5904] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  135.213443][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.230130][ T5904] usb 1-1: config 0 descriptor??
[  135.707984][ T5904] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  135.897571][  T975] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  135.978398][   T24] usb 1-1: USB disconnect, device number 13
[  136.068208][  T975] usb 4-1: Using ep0 maxpacket: 32
[  136.075572][  T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.082407][  T975] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  136.088565][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.102155][  T975] usb 4-1: config 0 descriptor??
[  136.559949][  T975] magicmouse 0003:05AC:0265.0006: item fetching failed at offset 2/5
[  136.573434][  T975] magicmouse 0003:05AC:0265.0006: magicmouse hid parse failed
[  136.591506][  T975] magicmouse 0003:05AC:0265.0006: probe with driver magicmouse failed with error -22
[  136.775502][ T5927] usb 4-1: USB disconnect, device number 7
[  136.845093][ T7774] loop4: detected capacity change from 0 to 1764
[  136.911246][ T7776] iso9660: Corrupted directory entry in block 2 of inode 1920
[  137.204715][ T5844] Bluetooth: hci2: command tx timeout
[  137.555728][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  137.558467][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  137.572287][ T7791] loop4: detected capacity change from 0 to 4096
[  137.793063][   T33] audit: type=1804 audit(1755245985.044:18): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.631" name="/newroot/223/file0" dev="tmpfs" ino=1184 res=1 errno=0
[  138.157552][ T7822] loop4: detected capacity change from 0 to 2048
[  138.178609][ T7822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.291332][ T7810] loop0: detected capacity change from 0 to 40427
[  138.300514][ T7827] syzkaller1: entered promiscuous mode
[  138.310200][ T7810] f2fs: Bad value for 'fault_injection'
[  138.311052][ T7827] syzkaller1: entered allmulticast mode
[  138.342317][ T7827] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  138.389414][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'.
[  138.392815][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'.
[  138.751889][ T7835] loop0: detected capacity change from 0 to 40427
[  138.756276][ T7835] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  138.759409][ T7835] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  138.762849][ T7835] F2FS-fs (loop0): build fault injection type: 0x6
[  138.767613][ T7835] F2FS-fs (loop0): invalid crc value
[  138.786929][ T2283] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  138.813371][ T7835] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  138.817469][ T7835] F2FS-fs (loop0): Start checkpoint disabled!
[  138.825493][ T7835] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  138.828334][ T7835] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  138.868296][ T5927] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  138.982604][ T2283] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  139.002658][ T2283] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.019692][ T2283] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  139.023899][ T2283] usb 5-1: config 1 has no interface number 1
[  139.031264][ T2283] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  139.039575][ T2283] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  139.051705][ T5927] usb 4-1: Using ep0 maxpacket: 8
[  139.062406][ T5927] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  139.066347][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  139.076083][ T2283] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  139.079636][ T2283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.082326][ T2283] usb 5-1: Product: syz
[  139.084106][ T2283] usb 5-1: Manufacturer: syz
[  139.086099][ T2283] usb 5-1: SerialNumber: syz
[  139.089903][ T5927] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  139.093537][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.117068][ T5927] usb 4-1: config 0 descriptor??
[  139.122282][ T7839] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  139.413788][ T2283] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  139.424742][  T792] usb 4-1: USB disconnect, device number 8
[  139.435597][ T2283] usb 5-1: MIDIStreaming interface descriptor not found
[  139.468857][ T5844] Bluetooth: hci2: command tx timeout
[  139.539475][ T2283] usb 5-1: USB disconnect, device number 2
[  139.604496][ T5928] udevd[5928]: setting mode of /dev/bus/usb/005/002 to 020664 failed: No such file or directory
[  139.608983][ T5928] udevd[5928]: setting owner of /dev/bus/usb/005/002 to uid=0, gid=0 failed: No such file or directory
[  139.691124][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.946092][   T26] kworker/u9:0: attempt to access beyond end of device
[  139.946092][   T26] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  139.950675][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  139.950688][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.950693][   T26] Workqueue: writeback wb_workfn (flush-7:0)
[  139.950710][   T26] Call Trace:
[  139.950713][   T26]  <TASK>
[  139.950718][   T26]  dump_stack_lvl+0x189/0x250
[  139.950732][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.950741][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  139.950749][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  139.950760][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  139.950775][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  139.950790][   T26]  f2fs_write_end_io+0x886/0xb60
[  139.950808][   T26]  __submit_merged_bio+0x27a/0x6a0
[  139.950822][   T26]  __submit_merged_write_cond+0x255/0x530
[  139.950836][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  139.950865][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.950883][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  139.950909][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  139.950926][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  139.950938][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  139.950950][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  139.950968][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.950980][   T26]  do_writepages+0x32e/0x550
[  139.950993][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  139.951001][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  139.951016][   T26]  __writeback_single_inode+0x145/0xff0
[  139.951026][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  139.951037][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  139.951061][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  139.951092][   T26]  ? rcu_is_watching+0x15/0xb0
[  139.951106][   T26]  wb_writeback+0x43b/0xaf0
[  139.951119][   T26]  ? queue_io+0x3d1/0x590
[  139.951131][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  139.951145][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  139.951157][   T26]  wb_workfn+0x409/0xef0
[  139.951173][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  139.951184][   T26]  ? __lock_acquire+0xab9/0xd20
[  139.951200][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  139.951211][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  139.951220][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  139.951226][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  139.951235][   T26]  process_scheduled_works+0xae1/0x17b0
[  139.951259][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  139.951282][   T26]  worker_thread+0x8a0/0xda0
[  139.951315][   T26]  kthread+0x711/0x8a0
[  139.951327][   T26]  ? __pfx_worker_thread+0x10/0x10
[  139.951335][   T26]  ? __pfx_kthread+0x10/0x10
[  139.951345][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  139.951354][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.951363][   T26]  ? __pfx_kthread+0x10/0x10
[  139.951373][   T26]  ret_from_fork+0x3fc/0x770
[  139.951383][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  139.951395][   T26]  ? __switch_to_asm+0x39/0x70
[  139.951403][   T26]  ? __switch_to_asm+0x33/0x70
[  139.951412][   T26]  ? __pfx_kthread+0x10/0x10
[  139.951421][   T26]  ret_from_fork_asm+0x1a/0x30
[  139.951440][   T26]  </TASK>
[  139.951443][   T26] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  140.307159][ T7859] loop3: detected capacity change from 0 to 4096
[  140.318796][ T7859] ntfs3(loop3): Primary boot: invalid bytes per index 2(-1).
[  140.323397][ T7859] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  140.392243][ T7865] loop3: detected capacity change from 0 to 16
[  140.395200][ T7865] erofs (device loop3): mounted with root inode @ nid 36.
[  140.449013][ T2283] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  140.606542][ T2283] usb 5-1: Using ep0 maxpacket: 16
[  140.611048][ T2283] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.614079][ T2283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  140.630409][ T2283] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  140.632993][ T2283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.635608][ T2283] usb 5-1: Product: syz
[  140.637302][ T2283] usb 5-1: Manufacturer: syz
[  140.644842][ T2283] usb 5-1: SerialNumber: syz
[  140.716165][ T7884] netlink: 'syz.0.668': attribute type 21 has an invalid length.
[  140.718953][ T7884] IPv6: NLM_F_CREATE should be specified when creating new route
[  141.172327][ T2283] usb 5-1: 0:1 : does not exist
[  141.207656][ T2283] usb 5-1: USB disconnect, device number 3
[  141.274110][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  142.202397][ T7904] loop0: detected capacity change from 0 to 1024
[  142.215141][ T7904] EXT4-fs: Ignoring removed mblk_io_submit option
[  142.219661][ T7896] loop3: detected capacity change from 0 to 32768
[  142.225075][ T7896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.673 (7896)
[  142.233716][ T7896] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.237894][ T7896] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  142.241391][ T7896] BTRFS info (device loop3): using free-space-tree
[  142.288633][ T7904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.368841][   T33] audit: type=1800 audit(1755245989.262:19): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.673" name="file1" dev="loop3" ino=260 res=0 errno=0
[  142.473714][ T6696] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.557586][ T7929] loop4: detected capacity change from 0 to 4096
[  142.574335][ T7929] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  142.574741][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.690040][ T7933] netlink: 48 bytes leftover after parsing attributes in process `syz.3.680'.
[  142.803420][ T7938] loop4: detected capacity change from 0 to 256
[  142.865579][ T7938] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9aa2f194, utbl_chksum : 0xe619d30d)
[  143.013100][ T7947] loop4: detected capacity change from 0 to 128
[  143.031991][ T7947] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  143.037880][ T7947] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.064595][ T7947] EXT4-fs error (device loop4): ext4_check_dx_root:2203: inode #2: comm syz.4.686: Corrupt dir, invalid name for '.', running e2fsck is recommended
[  143.129312][ T7549] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.195499][ T7955] netlink: 27 bytes leftover after parsing attributes in process `syz.0.688'.
[  143.397236][ T7964] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  143.626221][ T7971] loop4: detected capacity change from 0 to 1024
[  143.675991][ T7973] loop0: detected capacity change from 0 to 4096
[  143.719849][ T7971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  143.747015][ T7977] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.751996][ T7971] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.794864][ T7549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  144.035354][ T7989] delete_channel: no stack
[  144.187768][ T7979] loop4: detected capacity change from 0 to 32768
[  144.201783][ T7979] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.698 (7979)
[  144.210707][ T7997] netlink: 'syz.0.706': attribute type 9 has an invalid length.
[  144.213931][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'.
[  144.228499][ T7979] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.232734][ T7979] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  144.250009][ T7979] BTRFS info (device loop4): disk space caching is enabled
[  144.256542][ T7979] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  144.258420][ T7997] netlink: 'syz.0.706': attribute type 9 has an invalid length.
[  144.268413][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.271808][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.273626][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'.
[  144.279405][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.283945][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.311807][ T8014] program syz.3.707 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  144.349207][ T7979] BTRFS info (device loop4): rebuilding free space tree
[  144.368040][ T7979] BTRFS info (device loop4): disabling free space tree
[  144.375319][ T7979] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  144.382502][ T7979] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  144.579742][ T7549] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  145.606797][ T8047] loop0: detected capacity change from 0 to 256
[  146.118468][ T8051] loop0: detected capacity change from 0 to 32768
[  146.136542][ T8051] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.169602][ T8051] XFS (loop0): Ending clean mount
[  146.180540][ T8051] XFS (loop0): Quotacheck needed: Please wait.
[  146.203343][ T8051] XFS (loop0): Quotacheck: Done.
[  146.289007][ T5842] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.336221][ T5904] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  146.500626][ T5904] usb 4-1: Using ep0 maxpacket: 16
[  146.505453][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.509636][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.513308][ T5904] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  146.516900][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.529557][ T5904] usb 4-1: config 0 descriptor??
[  147.004230][ T5904] playstation 0003:054C:05C4.0007: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0
[  147.043986][ T8097] loop0: detected capacity change from 0 to 4096
[  147.053232][ T8097] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  147.079350][ T8097] ntfs3(loop0): ino=1a, mi_enum_attr
[  147.085604][ T8097] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  147.092304][ T8097] ntfs3(loop0): ino=1a, mi_enum_attr
[  147.094437][ T8097] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  147.101794][ T8099] netlink: 36 bytes leftover after parsing attributes in process `syz.4.732'.
[  147.203206][ T5904] playstation 0003:054C:05C4.0007: Failed to retrieve feature with reportID 18: -71
[  147.212484][ T5904] playstation 0003:054C:05C4.0007: Failed to retrieve DualShock4 pairing info: -71
[  147.224035][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.734'.
[  147.228898][ T5904] playstation 0003:054C:05C4.0007: Failed to get MAC address from DualShock4
[  147.232227][ T5904] playstation 0003:054C:05C4.0007: Failed to create dualshock4.
[  147.242877][ T5904] playstation 0003:054C:05C4.0007: probe with driver playstation failed with error -71
[  147.257711][ T5904] usb 4-1: USB disconnect, device number 9
[  147.284420][ T8105] loop4: detected capacity change from 0 to 1024
[  147.331062][ T8105] hfsplus: bad catalog entry type
[  147.351376][ T1101] hfsplus: b-tree write err: -5, ino 4
[  147.718728][ T8132] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[  147.721895][ T8132] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[  147.738589][ T8132] netlink: 216 bytes leftover after parsing attributes in process `syz.0.743'.
[  147.851608][ T8142] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  148.136733][ T8146] loop3: detected capacity change from 0 to 32768
[  148.264684][ T8146] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  148.264724][ T8146]   allowing incompatible features above 0.0: (unknown version)
[  148.264730][ T8146]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  148.278000][ T8146] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  148.280928][ T8146] bcachefs (loop3): initializing new filesystem
[  148.288324][ T8146] bcachefs (loop3): going read-write
[  148.296447][ T8146] bcachefs (loop3): marking superblocks
[  148.304385][ T8146] bcachefs (loop3): initializing freespace
[  148.308064][ T8146] bcachefs (loop3): done initializing freespace
[  148.311429][ T8146] bcachefs (loop3): reading snapshots table
[  148.313388][ T8146] bcachefs (loop3): reading snapshots done
[  148.336382][ T8146] bcachefs (loop3): done starting filesystem
[  148.567459][ T6696] bcachefs (loop3): shutting down
[  148.574383][ T6696] bcachefs (loop3): going read-only
[  148.576923][ T6696] bcachefs (loop3): finished waiting for writes to stop
[  148.593829][ T6696] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  148.773108][ T6696] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4
[  148.792086][ T6696] bcachefs (loop3): clean shutdown complete, journal seq 5
[  148.829325][ T6696] bcachefs (loop3): marking filesystem clean
[  148.921613][ T6696] bcachefs (loop3): shutdown complete
[  149.176857][  T975] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  149.349821][  T975] usb 5-1: Using ep0 maxpacket: 32
[  149.371723][  T975] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8
[  149.375506][  T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.440945][  T975] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:16.0/input/input9
[  149.637025][ T5278] bcm5974 5-1:16.0: could not read from device
[  149.662197][ T5278] bcm5974 5-1:16.0: could not read from device
[  149.683375][  T975] usb 5-1: USB disconnect, device number 4
[  149.686666][ T5278] bcm5974 5-1:16.0: could not read from device
[  149.700023][ T5278] bcm5974 5-1:16.0: could not read from device
[  150.483710][ T8208] loop4: detected capacity change from 0 to 32768
[  150.491638][ T8208] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.757 (8208)
[  150.507794][ T8208] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  150.519776][ T8208] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  150.522668][ T8208] BTRFS info (device loop4): using free-space-tree
[  150.999533][ T7549] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  151.494932][  T792] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  151.668538][  T792] usb 4-1: Using ep0 maxpacket: 16
[  151.675457][  T792] usb 4-1: config 0 has an invalid interface number: 94 but max is 0
[  151.678701][  T792] usb 4-1: config 0 has no interface number 0
[  151.686143][  T792] usb 4-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90
[  151.694296][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.697676][  T792] usb 4-1: Product: syz
[  151.699414][  T792] usb 4-1: Manufacturer: syz
[  151.702926][  T792] usb 4-1: SerialNumber: syz
[  151.707792][  T792] usb 4-1: config 0 descriptor??
[  151.714381][  T792] usb 4-1: unsupported MDLM descriptors
[  151.822984][ T8250] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  151.876903][ T8254] netlink: 182 bytes leftover after parsing attributes in process `syz.0.768'.
[  152.104897][ T8258] loop0: detected capacity change from 0 to 32768
[  152.205371][ T8258] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  152.205392][ T8258]   allowing incompatible features above 0.0: (unknown version)
[  152.205402][ T8258]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  152.219643][ T8258] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  152.222842][ T8258] bcachefs (loop0): initializing new filesystem
[  152.230357][ T8258] bcachefs (loop0): going read-write
[  152.245536][ T8258] bcachefs (loop0): marking superblocks
[  152.253487][ T8258] bcachefs (loop0): initializing freespace
[  152.258325][ T8258] bcachefs (loop0): done initializing freespace
[  152.261436][ T8258] bcachefs (loop0): reading snapshots table
[  152.263804][ T8258] bcachefs (loop0): reading snapshots done
[  152.289799][ T8258] bcachefs (loop0): done starting filesystem
[  152.434094][ T5842] bcachefs (loop0): shutting down
[  152.436127][ T5842] bcachefs (loop0): going read-only
[  152.438585][ T5842] bcachefs (loop0): finished waiting for writes to stop
[  152.441924][ T5842] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  152.477889][ T5842] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  152.485217][ T5842] bcachefs (loop0): clean shutdown complete, journal seq 4
[  152.488658][ T5842] bcachefs (loop0): marking filesystem clean
[  152.518381][  T975] usb 4-1: USB disconnect, device number 10
[  152.523926][ T5842] bcachefs (loop0): shutdown complete
[  152.617961][ T8264] loop4: detected capacity change from 0 to 32768
[  152.620427][ T8264] XFS: ikeep mount option is deprecated.
[  152.624607][ T8264] XFS: ikeep mount option is deprecated.
[  152.626809][ T8264] XFS: noikeep mount option is deprecated.
[  152.657181][ T8264] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  152.688101][ T8264] XFS (loop4): Ending clean mount
[  152.711484][ T7549] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.033338][  T975] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  153.209648][  T975] usb 4-1: unable to get BOS descriptor or descriptor too short
[  153.213148][  T975] usb 4-1: not running at top speed; connect to a high speed hub
[  153.229480][  T975] usb 4-1: config 5 has an invalid interface number: 246 but max is 0
[  153.232794][  T975] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  153.236489][  T975] usb 4-1: config 5 has no interface number 0
[  153.238623][  T975] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  153.249927][  T975] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0
[  153.253003][  T975] usb 4-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  153.256963][  T975] usb 4-1: config 5 interface 246 has no altsetting 0
[  153.273795][  T975] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  153.276714][  T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.279864][  T975] usb 4-1: Product: syz
[  153.281531][  T975] usb 4-1: Manufacturer: syz
[  153.293385][  T975] usb 4-1: SerialNumber: syz
[  153.545207][  T975] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  153.548367][ T5876] usb 4-1: Failed to submit usb control message: -71
[  153.551148][  T975] usb 4-1: USB disconnect, device number 11
[  153.552276][ T5876] usb 4-1: unable to send the bmi data to the device: -71
[  153.556715][ T5876] usb 4-1: unable to get target info from device
[  153.560022][ T5876] usb 4-1: could not get target info (-71)
[  153.562359][ T5876] usb 4-1: could not probe fw (-71)
[  154.182439][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  154.337584][ T8305] netlink: 'syz.3.785': attribute type 30 has an invalid length.
[  154.359064][   T24] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  154.362683][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.376826][   T24] usb 5-1: config 0 descriptor??
[  154.390865][   T24] gspca_main: cpia1-2.14.0 probing 0813:0001
[  154.976921][ T8324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.015535][ T8325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.264630][   T24] gspca_cpia1: usb_control_msg 02, error -71
[  155.267552][   T24] gspca_cpia1: usb_control_msg 05, error -71
[  155.274425][   T24] gspca_cpia1: usb_control_msg 04, error -71
[  155.279530][   T24] cpia1 5-1:0.0: probe with driver cpia1 failed with error -71
[  155.287834][   T24] usb 5-1: USB disconnect, device number 5
[  155.448621][ T8329] loop3: detected capacity change from 0 to 32768
[  155.453289][ T8329] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section disk_groups: label 3 empty
[  155.453289][ T8329] disk_groups (size 2912):
[  155.453289][ T8329] [deleted] [deleted] [parent 1028 name ] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 
[  155.453446][ T8329] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  155.572230][ T8333] loop3: detected capacity change from 0 to 512
[  155.576252][ T8333] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  155.590683][ T8333] EXT4-fs (loop3): 1 truncate cleaned up
[  155.594280][ T8333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.612862][ T8333] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.797: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  155.624851][ T8333] EXT4-fs error (device loop3) in ext4_delete_entry:2739: Corrupt filesystem
[  155.668703][ T6696] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.997515][ T8350] netlink: 'syz.0.804': attribute type 8 has an invalid length.
[  156.139147][ T8357] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  156.152685][ T8357] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  156.159414][ T8357] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  156.216579][ T8355] loop4: detected capacity change from 0 to 8192
[  156.222046][ T8355] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  156.286654][ T8355] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  156.301120][ T8355] ntfs3(loop4): Failed to load root (-22).
[  156.432723][ T8371] loop4: detected capacity change from 0 to 256
[  156.449392][ T8371] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  156.820400][ T8396] netlink: 104 bytes leftover after parsing attributes in process `syz.4.827'.
[  157.626988][   T48] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  157.691844][ T8416] loop3: detected capacity change from 0 to 4096
[  157.708611][ T8416] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  157.716881][ T8416] ntfs3(loop3): Failed to load $Extend (-22).
[  157.719214][ T8416] ntfs3(loop3): Failed to initialize $Extend.
[  157.732956][ T5844] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  157.888478][   T48] usb 1-1: Using ep0 maxpacket: 8
[  157.897331][   T48] usb 1-1: unable to get BOS descriptor or descriptor too short
[  157.907536][   T48] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  157.917552][   T48] usb 1-1: config 1 has no interface number 1
[  157.921883][   T48] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  158.210287][   T48] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  158.223297][   T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.231284][   T48] usb 1-1: Product: syz
[  158.233060][   T48] usb 1-1: Manufacturer: syz
[  158.240365][   T48] usb 1-1: SerialNumber: syz
[  158.599628][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  158.609076][   T48] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  158.612499][   T48] usb 1-1: 2:1 : sample bitwidth 65 in over sample bytes 1
[  158.616399][   T48] usb 1-1: 2:1 : invalid channels 0
[  158.634126][   T48] usb 1-1: USB disconnect, device number 14
[  158.654035][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  158.765566][   T24] usb 5-1: Using ep0 maxpacket: 16
[  158.770051][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.774234][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  158.778860][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  158.782841][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  158.787091][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.795264][   T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  158.799929][   T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  158.803236][   T24] usb 5-1: Manufacturer: syz
[  158.809044][   T24] usb 5-1: config 0 descriptor??
[  159.102113][   T24] rc_core: IR keymap rc-hauppauge not found
[  159.104646][   T24] Registered IR keymap rc-empty
[  159.106686][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.122731][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.146544][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  159.152743][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10
[  159.160673][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.176590][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.199180][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.219901][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.248361][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.263243][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.285928][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.308559][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.329156][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.349864][   T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  159.375919][   T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  159.379523][   T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  159.553788][   T24] usb 5-1: USB disconnect, device number 6
[  159.588020][ T2283] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  159.705488][ T8452] loop0: detected capacity change from 0 to 2048
[  159.718791][ T8452] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.790396][ T2283] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  159.796315][ T2283] usb 4-1: config 0 has no interface number 0
[  159.798712][ T2283] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.802707][ T2283] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  159.809205][ T2283] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  159.812609][ T2283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.820637][ T2283] usb 4-1: config 0 descriptor??
[  160.308762][ T2283] hid (null): report_id 35660 is invalid
[  160.527147][ T2283] uclogic 0003:28BD:0042.0008: failed retrieving string descriptor #100: -71
[  160.538411][ T2283] uclogic 0003:28BD:0042.0008: failed retrieving pen parameters: -71
[  160.542723][ T2283] uclogic 0003:28BD:0042.0008: pen probing failed: -71
[  160.545203][ T2283] uclogic 0003:28BD:0042.0008: failed probing parameters: -71
[  160.555864][ T2283] uclogic 0003:28BD:0042.0008: probe with driver uclogic failed with error -71
[  160.583497][ T2283] usb 4-1: USB disconnect, device number 12
[  160.961745][   T33] audit: type=1800 audit(1755246006.421:20): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.857" name="file1" dev="tmpfs" ino=492 res=0 errno=0
[  161.044831][ T8475] tmpfs: Bad value for 'nr_blocks'
[  161.047540][ T8474] loop4: detected capacity change from 0 to 1024
[  161.134808][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'.
[  161.180931][ T8483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  161.184482][ T8483] IPv6: NLM_F_CREATE should be set when creating new route
[  161.187237][ T8483] IPv6: NLM_F_CREATE should be set when creating new route
[  161.190164][ T8483] IPv6: NLM_F_CREATE should be set when creating new route
[  161.209011][ T8483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  161.507646][ T8497] loop0: detected capacity change from 0 to 32768
[  161.549623][  T792] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  161.565808][ T8497] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  161.565824][ T8497]   allowing incompatible features above 0.0: (unknown version)
[  161.565829][ T8497]   features: 
[  161.579124][ T8497] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  161.583625][ T8497] bcachefs (loop0): initializing new filesystem
[  161.588350][ T8495] loop4: detected capacity change from 0 to 32768
[  161.594988][ T8497] bcachefs (loop0): going read-write
[  161.603299][ T8497] bcachefs (loop0): marking superblocks
[  161.609254][ T8497] bcachefs (loop0): initializing freespace
[  161.613235][ T8497] bcachefs (loop0): done initializing freespace
[  161.616986][ T8497] bcachefs (loop0): reading snapshots table
[  161.619404][ T8497] bcachefs (loop0): reading snapshots done
[  161.647751][ T8497] bcachefs (loop0): done starting filesystem
[  161.672171][ T8495] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  161.681214][   T33] audit: type=1800 audit(1755246007.095:21): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.870" name="file1" dev="loop0" ino=4098 res=0 errno=0
[  161.721304][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.723593][ T8497] syz.0.870 (8497) used greatest stack depth: 16408 bytes left
[  161.735802][  T792] usb 4-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[  161.738065][ T8495] XFS (loop4): Ending clean mount
[  161.740476][ T5842] bcachefs (loop0): shutting down
[  161.743665][ T5842] bcachefs (loop0): going read-only
[  161.745497][ T8495] XFS (loop4): Quotacheck needed: Please wait.
[  161.747391][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.755154][ T5842] bcachefs (loop0): finished waiting for writes to stop
[  161.762603][ T5842] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  161.775612][  T792] usb 4-1: config 0 descriptor??
[  161.777551][ T8495] XFS (loop4): Quotacheck: Done.
[  161.822780][ T5842] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  161.833748][ T5842] bcachefs (loop0): clean shutdown complete, journal seq 5
[  161.836892][ T7549] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  161.842992][ T5842] bcachefs (loop0): marking filesystem clean
[  161.904478][ T5842] bcachefs (loop0): shutdown complete
[  162.436677][ T8523] loop4: detected capacity change from 0 to 32768
[  162.455615][   T48] usb 4-1: USB disconnect, device number 13
[  162.463320][ T8523] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  162.491883][ T8523] XFS (loop4): Ending clean mount
[  162.500703][ T8523] XFS (loop4): Quotacheck needed: Please wait.
[  162.538859][ T8523] XFS (loop4): Quotacheck: Done.
[  162.585932][ T7549] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  162.743465][ T8533] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  162.750476][ T8533] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  162.840573][ T8537] warning: `syz.4.879' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  163.012136][ T8547] input: syz0 as /devices/virtual/input/input11
[  163.117047][ T8553] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.886'.
[  163.127413][ T8553] openvswitch: netlink: Message has 5 unknown bytes.
[  163.303067][ T8563] netlink: zone id is out of range
[  163.305383][ T8563] netlink: set zone limit has 4 unknown bytes
[  163.510927][ T8571] loop4: detected capacity change from 0 to 4096
[  164.033229][ T8582] loop4: detected capacity change from 0 to 64
[  164.038379][ T8582] Bad inode number on dev loop4: 1 is out of range
[  164.336414][ T8600] loop4: detected capacity change from 0 to 47
[  164.339179][ T8598] netlink: 'syz.3.907': attribute type 1 has an invalid length.
[  164.344555][ T8598] NCSI netlink: No device for ifindex 0
[  164.511710][ T8604] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  165.073879][ T8613] loop4: detected capacity change from 0 to 32768
[  165.087382][ T8613] read_mapping_page failed!
[  165.089223][ T8613] ialloc: diAlloc returned -5!
[  166.039271][ T8624] loop3: detected capacity change from 0 to 32768
[  166.055318][ T8624] (syz.3.916,8624,0):ocfs2_load_local_alloc:320 ERROR: Local alloc size is invalid (la_size = 0)
[  166.064523][ T8624] (syz.3.916,8624,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[  166.067684][ T8624] (syz.3.916,8624,0):ocfs2_check_volume:2404 ERROR: status = -22
[  166.070585][ T8624] (syz.3.916,8624,0):ocfs2_check_volume:2432 ERROR: status = -22
[  166.073329][ T8624] (syz.3.916,8624,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  166.145518][ T8624] (syz.3.916,8624,1):ocfs2_fill_super:1177 ERROR: status = -22
[  166.242302][ T8631] loop4: detected capacity change from 0 to 65
[  166.260377][ T8631] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  166.793359][   T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  166.980578][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  166.984549][   T24] usb 5-1: not running at top speed; connect to a high speed hub
[  167.002202][   T24] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  167.018115][   T24] usb 5-1: config 1 interface 0 has no altsetting 0
[  167.031748][   T24] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  167.042214][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.045444][   T24] usb 5-1: Product: syz
[  167.058098][   T24] usb 5-1: Manufacturer: syz
[  167.060023][   T24] usb 5-1: SerialNumber: syz
[  167.314503][   T24] usbhid 5-1:1.0: can't add hid device: -71
[  167.316751][   T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  167.321397][   T24] usb 5-1: USB disconnect, device number 7
[  167.329627][ T5908] udevd[5908]: setting mode of /dev/bus/usb/005/007 to 020664 failed: No such file or directory
[  167.334720][ T5908] udevd[5908]: setting owner of /dev/bus/usb/005/007 to uid=0, gid=0 failed: No such file or directory
[  168.259810][ T8664] input: syz0 as /devices/virtual/input/input12
[  168.559926][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'.
[  170.220241][ T8710] loop3: detected capacity change from 0 to 256
[  170.225724][ T8710] exfat: Deprecated parameter 'utf8'
[  170.233033][ T8710] exfat: Deprecated parameter 'utf8'
[  170.258443][ T8710] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  170.534073][ T8712] loop3: detected capacity change from 0 to 512
[  170.581079][ T8712] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  170.605166][ T8712] EXT4-fs (loop3): orphan cleanup on readonly fs
[  170.663377][ T8712] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  170.695915][ T8712] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  170.702499][ T8712] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #16: comm syz.3.954: invalid fast symlink length 9000
[  170.713286][ T8712] EXT4-fs (loop3): Remounting filesystem read-only
[  170.725100][ T8712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  170.786699][ T6696] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.111702][ T8724] bridge0: Caught tx_queue_len zero misconfig
[  171.261629][ T8726] sp0: Synchronizing with TNC
[  171.266520][ T8733] sp0: Found TNC
[  171.462892][ T2283] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  171.624927][ T2283] usb 5-1: Using ep0 maxpacket: 16
[  171.644995][ T2283] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  171.648469][ T2283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.651448][ T2283] usb 5-1: Product: syz
[  171.652941][ T2283] usb 5-1: Manufacturer: syz
[  171.654420][ T2283] usb 5-1: SerialNumber: syz
[  171.672887][ T2283] usb 5-1: config 0 descriptor??
[  171.675493][ T8759] netlink: 96 bytes leftover after parsing attributes in process `syz.3.975'.
[  171.736678][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.977'.
[  171.892582][ T8769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.910374][ T2283] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  171.922168][ T2283] usb 5-1: USB disconnect, device number 8
[  171.972792][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'.
[  172.230598][ T8792] loop0: detected capacity change from 0 to 64
[  172.237261][ T8794] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  172.267546][ T8792] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop0
[  172.389816][ T8802] loop0: detected capacity change from 0 to 16
[  172.705879][ T5904] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  172.742548][   T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  172.951491][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.965511][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.978924][   T24] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  172.988454][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.054028][   T24] usb 4-1: config 0 descriptor??
[  173.185043][ T5904] usb 1-1: Using ep0 maxpacket: 8
[  173.193955][ T5904] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  173.197767][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.200966][ T5904] usb 1-1: Product: syz
[  173.202728][ T5904] usb 1-1: Manufacturer: syz
[  173.204683][ T5904] usb 1-1: SerialNumber: syz
[  173.209727][ T5904] usb 1-1: config 0 descriptor??
[  173.217674][ T5904] gspca_main: sq930x-2.14.0 probing 2770:930c
[  173.438008][ T5904] gspca_sq930x: reg_r 001f failed -71
[  173.511782][ T5904] sq930x 1-1:0.0: probe with driver sq930x failed with error -71
[  173.517011][ T5904] usb 1-1: USB disconnect, device number 15
[  173.548481][   T24] hid-thrustmaster 0003:044F:B65D.000A: collection stack underflow
[  173.553040][   T24] hid-thrustmaster 0003:044F:B65D.000A: item 0 4 0 12 parsing failed
[  173.559850][   T24] hid-thrustmaster 0003:044F:B65D.000A: parse failed with error -22
[  173.563077][   T24] hid-thrustmaster 0003:044F:B65D.000A: probe with driver hid-thrustmaster failed with error -22
[  173.760815][   T24] usb 4-1: USB disconnect, device number 14
[  173.954424][  T975] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  174.116933][  T975] usb 5-1: Using ep0 maxpacket: 32
[  174.121842][  T975] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.125014][  T975] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  174.130349][  T975] usb 5-1: config 0 interface 0 has no altsetting 0
[  174.132443][  T975] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  174.135644][  T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.140007][  T975] usb 5-1: config 0 descriptor??
[  174.346792][ T8827] loop0: detected capacity change from 0 to 40427
[  174.354397][ T8827] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  174.363779][ T8827] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  174.369309][ T8827] F2FS-fs (loop0): invalid crc value
[  174.456498][ T8827] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  174.462583][ T8827] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  174.465726][ T8827] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  174.514538][ T8827] syz.0.1003: attempt to access beyond end of device
[  174.514538][ T8827] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  174.598574][  T975] betop 0003:20BC:5500.000B: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.4-1/input0
[  174.613790][  T975] betop 0003:20BC:5500.000B: no inputs found
[  174.773447][ T8840] loop3: detected capacity change from 0 to 8
[  174.799553][ T8840] Filesystem uses "unknown" compression. This is not supported
[  174.807590][ T2283] usb 5-1: USB disconnect, device number 9
[  174.977497][ T8852] loop3: detected capacity change from 0 to 128
[  174.985006][ T8852] FAT-fs (loop3): Invalid FSINFO signature: 0x41075252, 0x80417272 (sector = 1)
[  175.000740][ T8852] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00070003)
[  175.007633][ T8852] FAT-fs (loop3): Filesystem has been set read-only
[  175.053857][ T8854] loop0: detected capacity change from 0 to 512
[  175.089728][ T8854] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1014: bad orphan inode 11862016
[  175.098982][ T8854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  175.106788][ T8854] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.108251][ T8859] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  175.422783][ T8863] loop3: detected capacity change from 0 to 32768
[  175.429047][ T8863] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1017 (8863)
[  175.452328][ T8863] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.456033][ T8863] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  175.459136][ T8863] BTRFS info (device loop3): disk space caching is enabled
[  175.484476][ T8863] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  175.604288][ T8863] BTRFS info (device loop3): rebuilding free space tree
[  175.649302][ T8863] BTRFS info (device loop3): disabling free space tree
[  175.651850][ T8863] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  175.679372][ T8863] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  175.695432][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  175.829690][ T6696] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.023570][   T48] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  176.051700][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'.
[  176.084419][   T33] audit: type=1326 audit(1755246276.377:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc358ebe9 code=0x50000
[  176.095703][   T33] audit: type=1326 audit(1755246276.377:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc358ebe9 code=0x50000
[  176.105161][   T33] audit: type=1326 audit(1755246276.377:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc358ebe9 code=0x50000
[  176.112155][   T33] audit: type=1326 audit(1755246276.377:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc358ebe9 code=0x50000
[  176.119023][   T33] audit: type=1326 audit(1755246276.377:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc358ebe9 code=0x50000
[  176.127216][   T33] audit: type=1326 audit(1755246276.377:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc358ebe9 code=0x50000
[  176.134707][   T33] audit: type=1326 audit(1755246276.377:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc358ebe9 code=0x50000
[  176.143119][   T33] audit: type=1326 audit(1755246276.377:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc358ebe9 code=0x50000
[  176.151374][   T33] audit: type=1326 audit(1755246276.377:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc358ebe9 code=0x50000
[  176.158844][   T33] audit: type=1326 audit(1755246276.377:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1027" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc358ebe9 code=0x50000
[  176.201577][   T48] usb 1-1: config 0 has an invalid interface number: 156 but max is 0
[  176.209076][   T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.216843][   T48] usb 1-1: config 0 has no interface number 0
[  176.224179][   T48] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  176.233035][   T48] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  176.238146][   T48] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.251084][   T48] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  176.256597][   T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.264089][   T48] usb 1-1: config 0 descriptor??
[  176.273494][   T48] gspca_main: spca561-2.14.0 probing abcd:cdee
[  176.498910][   T48] spca561 1-1:0.156: probe with driver spca561 failed with error -22
[  176.508197][   T48] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  176.513365][   T48] usb 1-1: MIDIStreaming interface descriptor not found
[  176.576848][   T48] usb 1-1: USB disconnect, device number 16
[  177.212134][ T8915] loop0: detected capacity change from 0 to 4096
[  177.227347][ T8915] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  177.247376][ T8915] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  177.258152][ T8915] ntfs3(loop0): Failed to load $Extend (-22).
[  177.268041][ T8915] ntfs3(loop0): Failed to initialize $Extend.
[  177.372182][ T8921] loop4: detected capacity change from 0 to 764
[  177.416445][ T8921] rock: directory entry would overflow storage
[  177.418997][ T8921] rock: sig=0x5245, size=8, remaining=5
[  177.833552][ T5904] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  177.996320][ T5904] usb 5-1: Using ep0 maxpacket: 16
[  178.010870][ T5904] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  178.013820][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.017069][ T5904] usb 5-1: Product: syz
[  178.018764][ T5904] usb 5-1: Manufacturer: syz
[  178.020653][ T5904] usb 5-1: SerialNumber: syz
[  178.030092][ T5904] usb 5-1: config 0 descriptor??
[  178.051293][ T5904] as10x_usb: device has been detected
[  178.053612][ T5904] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  178.073297][ T5904] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  178.090698][ T5904] as10x_usb: error during firmware upload part1
[  178.094122][ T5904] Registered device Sky IT Digital Key (green led)
[  178.259082][ T8926] loop4: detected capacity change from 0 to 8
[  178.282669][   T48] usb 5-1: USB disconnect, device number 10
[  178.326613][   T48] Unregistered device Sky IT Digital Key (green led)
[  178.329221][   T48] as10x_usb: device has been disconnected
[  178.883941][   T48] kernel write not supported for file /uinput (pid: 48 comm: kworker/1:1)
[  179.016105][ T8944] netlink: 'syz.0.1047': attribute type 5 has an invalid length.
[  179.085843][ T8947] loop4: detected capacity change from 0 to 512
[  179.100663][ T8947] EXT4-fs (loop4): Invalid default hash set in the superblock
[  179.421430][ T8964] netlink: 'syz.3.1057': attribute type 84 has an invalid length.
[  179.727983][ T8984] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1064'.
[  179.781987][ T8986] loop4: detected capacity change from 0 to 1024
[  179.924663][ T8990] loop4: detected capacity change from 0 to 1024
[  179.928609][ T8990] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  179.943915][ T8990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  179.950699][ T8990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.991438][ T7549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.010741][   T48] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  180.195992][   T48] usb 4-1: Using ep0 maxpacket: 32
[  180.200311][   T48] usb 4-1: config 0 has an invalid interface number: 219 but max is 0
[  180.204737][   T48] usb 4-1: config 0 has no interface number 0
[  180.207191][   T48] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  180.214199][   T48] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  180.217868][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.221078][   T48] usb 4-1: Product: syz
[  180.222772][   T48] usb 4-1: Manufacturer: syz
[  180.224539][   T48] usb 4-1: SerialNumber: syz
[  180.230088][   T48] usb 4-1: config 0 descriptor??
[  180.234723][ T8983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  180.335617][  T975] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  180.474684][   T48] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz)
[  180.501023][   T48] usb 4-1: USB disconnect, device number 15
[  180.509112][  T975] usb 5-1: Using ep0 maxpacket: 32
[  180.528884][  T975] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  180.537995][  T975] usb 5-1: config 0 has no interface number 0
[  180.557358][  T975] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  180.565898][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.572430][  T975] usb 5-1: Product: syz
[  180.574650][  T975] usb 5-1: Manufacturer: syz
[  180.576499][  T975] usb 5-1: SerialNumber: syz
[  180.587058][  T975] usb 5-1: config 0 descriptor??
[  180.592866][  T975] smsc95xx v2.0.0
[  180.742734][ T9007] bridge0: entered promiscuous mode
[  180.746395][ T9007] bridge0: port 3(macvlan2) entered blocking state
[  180.750872][ T9007] bridge0: port 3(macvlan2) entered disabled state
[  180.753150][ T9007] macvlan2: entered allmulticast mode
[  180.754888][ T9007] bridge0: entered allmulticast mode
[  180.768797][ T9007] macvlan2: left allmulticast mode
[  180.771363][ T9007] bridge0: left allmulticast mode
[  180.774125][ T9007] bridge0: left promiscuous mode
[  180.962861][ T9011] netlink: 'syz.0.1078': attribute type 1 has an invalid length.
[  181.200878][ T9015] loop0: detected capacity change from 0 to 8192
[  181.295190][ T9015] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  181.299599][ T9015] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  181.304119][ T9015]  loop0: unable to read partition table
[  181.306771][ T9015] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  181.423698][ T9019] lo speed is unknown, defaulting to 1000
[  181.426768][ T9019] lo speed is unknown, defaulting to 1000
[  181.437992][ T9019] lo speed is unknown, defaulting to 1000
[  181.493777][ T9019] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98
[  181.582715][ T9019] lo speed is unknown, defaulting to 1000
[  181.593351][ T9019] lo speed is unknown, defaulting to 1000
[  181.604452][ T9019] lo speed is unknown, defaulting to 1000
[  181.855880][ T9028] loop0: detected capacity change from 0 to 1024
[  181.891193][ T9028] syz.0.1085: attempt to access beyond end of device
[  181.891193][ T9028] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024
[  181.901767][ T9028] Buffer I/O error on dev loop0, logical block 458752, async page read
[  181.905442][ T9028] syz.0.1085: attempt to access beyond end of device
[  181.905442][ T9028] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024
[  181.905721][  T975] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  181.913405][ T9028] Buffer I/O error on dev loop0, logical block 458752, async page read
[  181.919697][  T975] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  181.925251][  T975] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  181.931767][  T975] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  181.938524][  T975] usb 5-1: USB disconnect, device number 11
[  182.076415][ T9032] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  182.089226][ T9032] CIFS mount error: No usable UNC path provided in device string!
[  182.089226][ T9032] 
[  182.093542][ T9032] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  182.418695][ T9034] loop3: detected capacity change from 0 to 40427
[  182.422558][ T9034] F2FS-fs: heap/no_heap options were deprecated
[  182.425986][ T9034] F2FS-fs (loop3): build fault injection rate: 19
[  182.428722][ T9034] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  182.439179][ T9034] F2FS-fs (loop3): invalid crc value
[  182.452765][ T9034] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  182.459560][  T975] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  182.517545][ T9034] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  182.530379][ T9034] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  182.537243][ T9034] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  182.558979][ T9034] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  182.566561][ T9034] F2FS-fs (loop3): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9f1/0x16a0
[  182.572238][ T9034] syz.3.1088: attempt to access beyond end of device
[  182.572238][ T9034] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  182.615613][ T6696] syz-executor: attempt to access beyond end of device
[  182.615613][ T6696] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  182.625368][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  182.625384][ T6696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.625390][ T6696] Call Trace:
[  182.625394][ T6696]  <TASK>
[  182.625399][ T6696]  dump_stack_lvl+0x189/0x250
[  182.625415][ T6696]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.625424][ T6696]  ? __pfx_queue_work_on+0x10/0x10
[  182.625433][ T6696]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  182.625444][ T6696]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  182.625460][ T6696]  f2fs_handle_critical_error+0x37c/0x540
[  182.625476][ T6696]  f2fs_write_end_io+0x886/0xb60
[  182.625494][ T6696]  __submit_merged_bio+0x27a/0x6a0
[  182.625508][ T6696]  __submit_merged_write_cond+0x255/0x530
[  182.625522][ T6696]  f2fs_write_data_pages+0x261d/0x3000
[  182.625551][ T6696]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  182.625592][ T6696]  ? folios_put_refs+0x559/0x640
[  182.625607][ T6696]  ? __pfx_folios_put_refs+0x10/0x10
[  182.625614][ T6696]  ? rcu_is_watching+0x15/0xb0
[  182.625627][ T6696]  ? __lock_acquire+0xab9/0xd20
[  182.625652][ T6696]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  182.625664][ T6696]  do_writepages+0x32e/0x550
[  182.625681][ T6696]  ? do_raw_spin_unlock+0x4d/0x240
[  182.625692][ T6696]  filemap_fdatawrite+0x199/0x240
[  182.625703][ T6696]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  182.625738][ T6696]  ? do_raw_spin_unlock+0x4d/0x240
[  182.625750][ T6696]  f2fs_sync_dirty_inodes+0x31f/0x830
[  182.625766][ T6696]  f2fs_write_checkpoint+0x95a/0x1df0
[  182.625787][ T6696]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  182.625820][ T6696]  ? kill_f2fs_super+0x298/0x6c0
[  182.625832][ T6696]  kill_f2fs_super+0x2c3/0x6c0
[  182.625843][ T6696]  ? __pfx_kill_f2fs_super+0x10/0x10
[  182.625850][ T6696]  ? radix_tree_delete_item+0x2b6/0x400
[  182.625865][ T6696]  ? shrinker_free+0x2ce/0x3e0
[  182.625875][ T6696]  deactivate_locked_super+0xbc/0x130
[  182.625888][ T6696]  cleanup_mnt+0x425/0x4c0
[  182.625897][ T6696]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.625912][ T6696]  task_work_run+0x1d4/0x260
[  182.625925][ T6696]  ? __pfx_task_work_run+0x10/0x10
[  182.625933][ T6696]  ? __x64_sys_umount+0x122/0x160
[  182.625947][ T6696]  ? exit_to_user_mode_loop+0x40/0x110
[  182.625960][ T6696]  exit_to_user_mode_loop+0xec/0x110
[  182.625970][ T6696]  do_syscall_64+0x2bd/0x3b0
[  182.625981][ T6696]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.625990][ T6696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.625998][ T6696]  ? exc_page_fault+0x9f/0xf0
[  182.626009][ T6696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.626017][ T6696] RIP: 0033:0x7f4fc358ff17
[  182.626025][ T6696] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  182.626032][ T6696] RSP: 002b:00007ffea98df558 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  182.626042][ T6696] RAX: 0000000000000000 RBX: 00007f4fc3611c05 RCX: 00007f4fc358ff17
[  182.626047][ T6696] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea98df610
[  182.626052][ T6696] RBP: 00007ffea98df610 R08: 0000000000000000 R09: 0000000000000000
[  182.626056][ T6696] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea98e06a0
[  182.626061][ T6696] R13: 00007f4fc3611c05 R14: 000000000002a842 R15: 00007ffea98e06e0
[  182.626076][ T6696]  </TASK>
[  182.626079][ T6696] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  182.744440][ T9048] loop4: detected capacity change from 0 to 16
[  182.747315][  T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.752163][ T9048] erofs (device loop4): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[  182.754045][  T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  182.758477][ T9048] erofs (device loop4): mounted with root inode @ nid 36.
[  182.759525][  T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  182.770212][  T975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  182.777944][  T975] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  182.781106][  T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.795797][  T975] usb 1-1: config 0 descriptor??
[  182.807848][  T975] gspca_main: spca561-2.14.0 probing abcd:cdee
[  183.006760][ T9048] syz.4.1094: attempt to access beyond end of device
[  183.006760][ T9048] loop4: rw=0, sector=15300821024, nr_sectors = 8 limit=16
[  183.015114][ T9048] erofs (device loop4): read error -5 @ 72 of nid 36
[  183.028277][  T975] spca561 1-1:0.0: probe with driver spca561 failed with error -22
[  183.036291][  T975] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  183.038590][  T975] usb 1-1: MIDIStreaming interface descriptor not found
[  183.094758][  T975] usb 1-1: USB disconnect, device number 17
[  183.233005][ T9056] ubi0: attaching mtd0
[  183.748692][ T9075] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  183.825639][  T975] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  183.921256][ T9078] loop0: detected capacity change from 0 to 256
[  183.936415][ T9078] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  183.997622][  T975] usb 5-1: Using ep0 maxpacket: 8
[  183.998561][ T9080] loop0: detected capacity change from 0 to 512
[  184.007586][  T975] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.012095][ T9080] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1106: casefold flag without casefold feature
[  184.016921][  T975] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  184.017165][ T9080] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1106: couldn't read orphan inode 15 (err -117)
[  184.025059][  T975] usb 5-1: config 0 interface 0 has no altsetting 0
[  184.031393][  T975] usb 5-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00
[  184.033841][ T9080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.037043][  T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.046029][  T975] usb 5-1: config 0 descriptor??
[  184.087653][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.208645][ T9088] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1109'.
[  184.277992][  T975] usbhid 5-1:0.0: can't add hid device: -71
[  184.281932][  T975] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  184.289329][  T975] usb 5-1: USB disconnect, device number 12
[  184.522057][ T9090] loop0: detected capacity change from 0 to 32768
[  184.542184][ T9090] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.569371][ T9090] XFS (loop0): Ending clean mount
[  184.573938][ T9090] XFS (loop0): Quotacheck needed: Please wait.
[  184.601314][ T9090] XFS (loop0): Quotacheck: Done.
[  184.620506][ T5842] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.663925][ T2283] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  184.816513][ T9104] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1113'.
[  184.833304][ T2283] usb 4-1: Using ep0 maxpacket: 16
[  184.844392][ T2283] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  184.849155][ T2283] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.861096][ T2283] usb 4-1: config 0 has no interface number 0
[  184.879799][ T2283] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  184.883340][ T2283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.894008][ T2283] usb 4-1: Product: syz
[  184.894027][ T2283] usb 4-1: Manufacturer: syz
[  184.894038][ T2283] usb 4-1: SerialNumber: syz
[  184.902120][ T2283] usb 4-1: config 0 descriptor??
[  184.905414][ T2283] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  184.905444][ T2283] usb 4-1: No valid video chain found.
[  184.909577][ T9108] binder: 9105:9108 unknown command 0
[  184.922111][ T9108] binder: 9105:9108 ioctl c0306201 200000000080 returned -22
[  184.986659][ T9110] loop4: detected capacity change from 0 to 2048
[  185.032271][ T9110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.050549][ T9110] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  185.051608][ T9112] loop0: detected capacity change from 0 to 4096
[  185.065645][ T9110] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  185.077379][ T9110] EXT4-fs (loop4): This should not happen!! Data will be lost
[  185.077379][ T9110] 
[  185.088399][ T9110] EXT4-fs (loop4): Total free blocks count 0
[  185.090771][ T9110] EXT4-fs (loop4): Free/Dirty block details
[  185.094251][ T9110] EXT4-fs (loop4): free_blocks=2415919504
[  185.096684][ T9110] EXT4-fs (loop4): dirty_blocks=16
[  185.098876][ T9115] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.103946][ T9110] EXT4-fs (loop4): Block reservation details
[  185.114007][ T9110] EXT4-fs (loop4): i_reserved_data_blocks=1
[  185.141707][ T2283] usb 4-1: USB disconnect, device number 16
[  185.200872][ T7549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.259535][ T9122] loop4: detected capacity change from 0 to 128
[  185.423621][ T9124] loop4: detected capacity change from 0 to 8192
[  185.518941][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1122'.
[  185.761492][ T9131] cgroup: No subsys list or none specified
[  186.611344][ T9139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1128'.
[  186.614544][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1128'.
[  186.618110][ T9139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1128'.
[  186.635313][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1128'.
[  187.090261][ T9144] loop4: detected capacity change from 0 to 4096
[  187.528748][ T9120] loop0: detected capacity change from 0 to 262144
[  187.561653][ T9151] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  187.610432][ T9120] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  187.616455][ T9120] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  187.817366][ T9157] loop4: detected capacity change from 0 to 128
[  187.847649][ T9157] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  187.853801][ T9157] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  187.881435][   T33] kauditd_printk_skb: 13712 callbacks suppressed
[  187.881446][   T33] audit: type=1800 audit(1755246287.269:13744): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1135" name="bus" dev="loop4" ino=12 res=0 errno=0
[  187.997249][ T7549] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  188.008810][ T9165] loop3: detected capacity change from 0 to 64
[  188.026340][ T9165] syz.3.1139: attempt to access beyond end of device
[  188.026340][ T9165] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  188.038676][ T9165] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  188.057074][ T9165] syz.3.1139: attempt to access beyond end of device
[  188.057074][ T9165] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  188.076892][ T9165] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  188.295312][ T9167] loop4: detected capacity change from 0 to 32768
[  188.312677][ T9167] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1138 (9167)
[  188.351578][ T9167] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  188.357577][ T9167] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  188.360213][ T9167] BTRFS info (device loop4): using free-space-tree
[  188.560961][ T7549] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  188.812196][ T9195] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.1144'.
[  188.820564][ T9195] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  188.820632][ T9186] loop3: detected capacity change from 0 to 32768
[  188.833627][ T9186] XFS: ikeep mount option is deprecated.
[  188.883033][ T9186] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.939830][ T9209] netlink: 'syz.0.1147': attribute type 1 has an invalid length.
[  188.948800][ T9186] XFS (loop3): Ending clean mount
[  188.966461][ T9186] XFS (loop3): Quotacheck needed: Please wait.
[  188.984225][ T9209] bond1: (slave veth3): Enslaving as an active interface with a down link
[  189.040820][ T9186] XFS (loop3): Quotacheck: Done.
[  189.067617][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'.
[  189.077871][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'.
[  189.124484][ T6696] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  189.819201][ T9233] loop3: detected capacity change from 0 to 16
[  189.831768][ T9233] erofs (device loop3): mounted with root inode @ nid 36.
[  190.663393][ T9238] loop4: detected capacity change from 0 to 4096
[  190.692387][ T9238] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  190.734971][ T9238] ntfs3(loop4): ino=19, mi_enum_attr
[  190.740116][ T9238] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  190.786907][ T9242] loop0: detected capacity change from 0 to 512
[  190.815704][ T9242] EXT4-fs: Ignoring removed nobh option
[  190.878311][ T9242] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1161: corrupted inode contents
[  190.888286][ T9242] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.1161: mark_inode_dirty error
[  190.906024][ T9242] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1161: corrupted inode contents
[  190.912672][ T9242] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1161: mark_inode_dirty error
[  190.946165][ T9242] Quota error (device loop0): write_blk: dquota write failed
[  190.949620][ T9242] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  190.953819][ T9242] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1161: Failed to acquire dquot type 0
[  190.971888][ T9242] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1161: corrupted inode contents
[  190.991830][ T9242] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1161: mark_inode_dirty error
[  190.997228][ T9242] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1161: corrupted inode contents
[  191.004286][ T9242] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1161: mark_inode_dirty error
[  191.010016][ T9242] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1161: corrupted inode contents
[  191.015933][ T9242] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  191.021213][ T9242] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1161: corrupted inode contents
[  191.026831][ T9242] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1161: mark_inode_dirty error
[  191.034046][ T9242] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  191.043637][ T9242] EXT4-fs (loop0): 1 truncate cleaned up
[  191.051542][ T9242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.056663][ T9242] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.155254][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.963518][  T975] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  191.988075][ T9248] syz.4.1162 (9248): drop_caches: 2
[  192.048356][ T9267] bridge_slave_1: left allmulticast mode
[  192.051193][ T9267] bridge_slave_1: left promiscuous mode
[  192.055591][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.084987][ T9267] bridge_slave_0: left allmulticast mode
[  192.089165][ T9267] bridge_slave_0: left promiscuous mode
[  192.097080][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.132361][  T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  192.136785][  T975] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  192.140112][  T975] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  192.143981][  T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  192.156805][  T975] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  192.160340][  T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.163529][  T975] usb 1-1: Product: syz
[  192.165183][  T975] usb 1-1: Manufacturer: syz
[  192.168794][  T975] usb 1-1: SerialNumber: syz
[  192.179035][  T975] usb 1-1: config 0 descriptor??
[  192.186121][  T975] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  192.416345][  T975] usb 1-1: USB disconnect, device number 18
[  192.885010][ T9279] loop3: detected capacity change from 0 to 32768
[  192.890145][ T9279] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1178 (9279)
[  192.912766][ T9279] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.917651][ T9279] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  192.921026][ T9279] BTRFS info (device loop3): using free-space-tree
[  193.035816][ T9301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.061648][ T9279] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4)
[  193.154426][ T6696] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  194.671211][ T9338] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  195.081450][ T9335] loop3: detected capacity change from 0 to 32768
[  195.116567][ T9335] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  195.156676][ T9335] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  195.165866][ T9335] XFS (loop3): Starting recovery (logdev: internal)
[  195.182466][ T9335] XFS (loop3): Ending recovery (logdev: internal)
[  195.244751][ T6696] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  195.552295][ T9360] bridge2: entered allmulticast mode
[  195.663727][ T9369] ------------[ cut here ]------------
[  195.667120][ T9369] WARNING: CPU: 1 PID: 9369 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0
[  195.671055][ T9369] Modules linked in:
[  195.673553][ T9369] CPU: 1 UID: 0 PID: 9369 Comm: syz.3.1205 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  195.679654][ T9369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.684084][ T9369] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  195.686406][ T9369] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 62 23 d0 f6 90 0f 0b 90 eb e1 e8 57 23 d0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  195.693715][ T9369] RSP: 0018:ffffc900029aef70 EFLAGS: 00010283
[  195.696095][ T9369] RAX: ffffffff8aef8839 RBX: ffff88810a87c000 RCX: 0000000000080000
[  195.699862][ T9369] RDX: ffffc90028952000 RSI: 0000000000000357 RDI: 0000000000000358
[  195.702607][ T9369] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aef8353
[  195.705201][ T9369] R10: dffffc0000000000 R11: ffffed102150f831 R12: 1ffff1102150f80a
[  195.707779][ T9369] R13: ffff8881129c0e40 R14: 0000000000000001 R15: ffffffff8aef8353
[  195.711013][ T9369] FS:  00007f4fc17f66c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  195.714242][ T9369] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  195.716590][ T9369] CR2: 0000200000001040 CR3: 0000000106102000 CR4: 00000000000006f0
[  195.719233][ T9369] Call Trace:
[  195.720744][ T9369]  <TASK>
[  195.721844][ T9369]  rate_control_rate_init_all_links+0x109/0x1a0
[  195.723914][ T9369]  sta_apply_auth_flags+0x1c2/0x400
[  195.725743][ T9369]  sta_apply_parameters+0xe4b/0x15b0
[  195.727638][ T9369]  ieee80211_add_station+0x424/0x6a0
[  195.729741][ T9369]  rdev_add_station+0x108/0x290
[  195.731948][ T9369]  nl80211_new_station+0x1755/0x1b70
[  195.734636][ T9369]  ? __pfx_nl80211_new_station+0x10/0x10
[  195.736551][ T9369]  ? netdev_run_todo+0xe1d/0xea0
[  195.738557][ T9369]  ? nl80211_pre_doit+0x4f1/0x930
[  195.740321][ T9369]  genl_family_rcv_msg_doit+0x215/0x300
[  195.742381][ T9369]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  195.744727][ T9369]  ? bpf_lsm_capable+0x9/0x20
[  195.746464][ T9369]  ? security_capable+0x7e/0x2e0
[  195.748520][ T9369]  genl_rcv_msg+0x60e/0x790
[  195.750408][ T9369]  ? __pfx_genl_rcv_msg+0x10/0x10
[  195.752413][ T9369]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  195.754627][ T9369]  ? __pfx_nl80211_new_station+0x10/0x10
[  195.756621][ T9369]  ? __pfx_nl80211_post_doit+0x10/0x10
[  195.758464][ T9369]  ? __asan_memcpy+0x40/0x70
[  195.760005][ T9369]  ? __pfx_ref_tracker_free+0x10/0x10
[  195.761772][ T9369]  netlink_rcv_skb+0x208/0x470
[  195.763394][ T9369]  ? __lock_acquire+0xab9/0xd20
[  195.765108][ T9369]  ? __pfx_genl_rcv_msg+0x10/0x10
[  195.766859][ T9369]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  195.768685][ T9369]  ? down_read+0x1ad/0x2e0
[  195.770291][ T9369]  genl_rcv+0x28/0x40
[  195.771689][ T9369]  netlink_unicast+0x82f/0x9e0
[  195.773375][ T9369]  ? __pfx_netlink_unicast+0x10/0x10
[  195.775341][ T9369]  ? netlink_sendmsg+0x642/0xb30
[  195.777077][ T9369]  ? skb_put+0x11b/0x210
[  195.778570][ T9369]  netlink_sendmsg+0x805/0xb30
[  195.780228][ T9369]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.782294][ T9369]  ? aa_sock_msg_perm+0xf1/0x1d0
[  195.783914][ T9369]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  195.786072][ T9369]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.788260][ T9369]  __sock_sendmsg+0x21c/0x270
[  195.789783][ T9369]  ____sys_sendmsg+0x505/0x830
[  195.791361][ T9369]  ? __pfx_____sys_sendmsg+0x10/0x10
[  195.793067][ T9369]  ? import_iovec+0x74/0xa0
[  195.794564][ T9369]  ___sys_sendmsg+0x21f/0x2a0
[  195.796267][ T9369]  ? __pfx____sys_sendmsg+0x10/0x10
[  195.798056][ T9369]  ? __fget_files+0x2a/0x420
[  195.799656][ T9369]  ? __fget_files+0x3a0/0x420
[  195.801248][ T9369]  __x64_sys_sendmsg+0x19b/0x260
[  195.803034][ T9369]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  195.804910][ T9369]  ? rcu_is_watching+0x15/0xb0
[  195.806687][ T9369]  ? do_syscall_64+0xbe/0x3b0
[  195.808585][ T9369]  do_syscall_64+0xfa/0x3b0
[  195.810068][ T9369]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.811762][ T9369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.813831][ T9369]  ? exc_page_fault+0x9f/0xf0
[  195.815439][ T9369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.817398][ T9369] RIP: 0033:0x7f4fc358ebe9
[  195.819048][ T9369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.826451][ T9369] RSP: 002b:00007f4fc17f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.829575][ T9369] RAX: ffffffffffffffda RBX: 00007f4fc37b5fa0 RCX: 00007f4fc358ebe9
[  195.832215][ T9369] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[  195.835009][ T9369] RBP: 00007f4fc3611e19 R08: 0000000000000000 R09: 0000000000000000
[  195.838260][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  195.841435][ T9369] R13: 00007f4fc37b6038 R14: 00007f4fc37b5fa0 R15: 00007ffea98e02c8
[  195.844584][ T9369]  </TASK>
[  195.845714][ T9369] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  195.848592][ T9369] CPU: 1 UID: 0 PID: 9369 Comm: syz.3.1205 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  195.853001][ T9369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.856245][ T9369] Call Trace:
[  195.857420][ T9369]  <TASK>
[  195.858371][ T9369]  dump_stack_lvl+0x99/0x250
[  195.859918][ T9369]  ? __asan_memcpy+0x40/0x70
[  195.861587][ T9369]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.863467][ T9369]  ? __pfx__printk+0x10/0x10
[  195.864995][ T9369]  vpanic+0x281/0x750
[  195.866467][ T9369]  ? __pfx__printk+0x10/0x10
[  195.867999][ T9369]  ? __pfx_vpanic+0x10/0x10
[  195.869426][ T9369]  ? is_bpf_text_address+0x292/0x2b0
[  195.871216][ T9369]  panic+0xb9/0xc0
[  195.872442][ T9369]  ? __pfx_panic+0x10/0x10
[  195.873813][ T9369]  __warn+0x31b/0x4b0
[  195.875056][ T9369]  ? rate_control_rate_init+0x64a/0x6e0
[  195.876778][ T9369]  ? rate_control_rate_init+0x64a/0x6e0
[  195.878628][ T9369]  report_bug+0x2be/0x4f0
[  195.880261][ T9369]  ? rate_control_rate_init+0x64a/0x6e0
[  195.882470][ T9369]  ? rate_control_rate_init+0x64a/0x6e0
[  195.884724][ T9369]  ? rate_control_rate_init+0x64c/0x6e0
[  195.886857][ T9369]  handle_bug+0x84/0x160
[  195.888291][ T9369]  exc_invalid_op+0x1a/0x50
[  195.889839][ T9369]  asm_exc_invalid_op+0x1a/0x20
[  195.891565][ T9369] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  195.893705][ T9369] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 62 23 d0 f6 90 0f 0b 90 eb e1 e8 57 23 d0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  195.900347][ T9369] RSP: 0018:ffffc900029aef70 EFLAGS: 00010283
[  195.902375][ T9369] RAX: ffffffff8aef8839 RBX: ffff88810a87c000 RCX: 0000000000080000
[  195.905289][ T9369] RDX: ffffc90028952000 RSI: 0000000000000357 RDI: 0000000000000358
[  195.908111][ T9369] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aef8353
[  195.911458][ T9369] R10: dffffc0000000000 R11: ffffed102150f831 R12: 1ffff1102150f80a
[  195.914580][ T9369] R13: ffff8881129c0e40 R14: 0000000000000001 R15: ffffffff8aef8353
[  195.917337][ T9369]  ? rate_control_rate_init+0x163/0x6e0
[  195.919239][ T9369]  ? rate_control_rate_init+0x163/0x6e0
[  195.921159][ T9369]  ? rate_control_rate_init+0x649/0x6e0
[  195.923066][ T9369]  rate_control_rate_init_all_links+0x109/0x1a0
[  195.925212][ T9369]  sta_apply_auth_flags+0x1c2/0x400
[  195.927060][ T9369]  sta_apply_parameters+0xe4b/0x15b0
[  195.928866][ T9369]  ieee80211_add_station+0x424/0x6a0
[  195.930731][ T9369]  rdev_add_station+0x108/0x290
[  195.932397][ T9369]  nl80211_new_station+0x1755/0x1b70
[  195.934247][ T9369]  ? __pfx_nl80211_new_station+0x10/0x10
[  195.936188][ T9369]  ? netdev_run_todo+0xe1d/0xea0
[  195.938141][ T9369]  ? nl80211_pre_doit+0x4f1/0x930
[  195.939843][ T9369]  genl_family_rcv_msg_doit+0x215/0x300
[  195.941937][ T9369]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  195.944397][ T9369]  ? bpf_lsm_capable+0x9/0x20
[  195.946425][ T9369]  ? security_capable+0x7e/0x2e0
[  195.948389][ T9369]  genl_rcv_msg+0x60e/0x790
[  195.949931][ T9369]  ? __pfx_genl_rcv_msg+0x10/0x10
[  195.951790][ T9369]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  195.954110][ T9369]  ? __pfx_nl80211_new_station+0x10/0x10
[  195.956410][ T9369]  ? __pfx_nl80211_post_doit+0x10/0x10
[  195.958215][ T9369]  ? __asan_memcpy+0x40/0x70
[  195.960005][ T9369]  ? __pfx_ref_tracker_free+0x10/0x10
[  195.962323][ T9369]  netlink_rcv_skb+0x208/0x470
[  195.963799][ T9369]  ? __lock_acquire+0xab9/0xd20
[  195.965373][ T9369]  ? __pfx_genl_rcv_msg+0x10/0x10
[  195.967096][ T9369]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  195.968823][ T9369]  ? down_read+0x1ad/0x2e0
[  195.970328][ T9369]  genl_rcv+0x28/0x40
[  195.971679][ T9369]  netlink_unicast+0x82f/0x9e0
[  195.973547][ T9369]  ? __pfx_netlink_unicast+0x10/0x10
[  195.975452][ T9369]  ? netlink_sendmsg+0x642/0xb30
[  195.977037][ T9369]  ? skb_put+0x11b/0x210
[  195.978463][ T9369]  netlink_sendmsg+0x805/0xb30
[  195.980131][ T9369]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.981824][ T9369]  ? aa_sock_msg_perm+0xf1/0x1d0
[  195.983547][ T9369]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  195.985439][ T9369]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.987193][ T9369]  __sock_sendmsg+0x21c/0x270
[  195.988864][ T9369]  ____sys_sendmsg+0x505/0x830
[  195.990569][ T9369]  ? __pfx_____sys_sendmsg+0x10/0x10
[  195.992396][ T9369]  ? import_iovec+0x74/0xa0
[  195.993899][ T9369]  ___sys_sendmsg+0x21f/0x2a0
[  195.995497][ T9369]  ? __pfx____sys_sendmsg+0x10/0x10
[  195.997386][ T9369]  ? __fget_files+0x2a/0x420
[  195.999041][ T9369]  ? __fget_files+0x3a0/0x420
[  196.000743][ T9369]  __x64_sys_sendmsg+0x19b/0x260
[  196.002478][ T9369]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  196.004296][ T9369]  ? rcu_is_watching+0x15/0xb0
[  196.006234][ T9369]  ? do_syscall_64+0xbe/0x3b0
[  196.008100][ T9369]  do_syscall_64+0xfa/0x3b0
[  196.009614][ T9369]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.011358][ T9369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.013392][ T9369]  ? exc_page_fault+0x9f/0xf0
[  196.015270][ T9369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.017807][ T9369] RIP: 0033:0x7f4fc358ebe9
[  196.019561][ T9369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.026695][ T9369] RSP: 002b:00007f4fc17f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  196.030151][ T9369] RAX: ffffffffffffffda RBX: 00007f4fc37b5fa0 RCX: 00007f4fc358ebe9
[  196.033157][ T9369] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[  196.036078][ T9369] RBP: 00007f4fc3611e19 R08: 0000000000000000 R09: 0000000000000000
[  196.038966][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.041805][ T9369] R13: 00007f4fc37b6038 R14: 00007f4fc37b5fa0 R15: 00007ffea98e02c8
[  196.045173][ T9369]  </TASK>
[  196.047196][ T9369] Kernel Offset: disabled
[  196.048613][ T9369] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:20:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080000000 RBX=00000000000036b2 RCX=0000000000000000 RDX=0000000000000081
RSI=ffffffff8be334e0 RDI=00000000ffffffff RBP=0000000000000000 RSP=ffffc900065578c0
R8 =ffff888136641b57 R9 =1ffff11026cc836a R10=dffffc0000000000 R11=ffffffff8b7824a0
R12=000000000000a986 R13=0000000000000002 R14=000000813b1b98be R15=0000000000002c24
RIP=ffffffff8b7824fb RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32122ff8 CR3=0000000026cde000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=622d323763342d64 3034352d65353065
XMM06=363934636632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=00000000ffffffff ffffffffffffffff XMM09=37363a3300000000 333a37622f626565
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000010835 RDI=0000000000010836 RBP=00000000000003f8 RSP=ffffc900029ae710
R8 =ffff888107e48237 R9 =1ffff11020fc9046 R10=dffffc0000000000 R11=ffffffff854effb0
R12=dffffc0000000000 R13=ffffffff99af990a R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f002c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4fc17f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001040 CR3=0000000106102000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f4fc42ed100 00007f4fc3787460 XMM05=00007f4fc3787478 00007f4fc37874c0
XMM06=00007f4fc37874b8 00007f4fc37874b0 XMM07=00007f4fc37874a8 00007f4fc37874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f4fc3612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
