last executing test programs:

21.026838898s ago: executing program 2 (id=847):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2})

20.730591217s ago: executing program 2 (id=848):
r0 = io_uring_setup(0x4e95, &(0x7f0000000000)={0x0, 0xd7e2, 0x100, 0x2, 0xc5})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x6, 0xffffffffffffffff, 0xa, {0x4, 0x5}, 0x9}, 0x1)

20.532664521s ago: executing program 2 (id=849):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x235, &(0x7f0000000240)={0x0, 0x42eb, 0x10100, 0x1, 0x20, 0x0, r1}, &(0x7f0000000200)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)

20.358668523s ago: executing program 1 (id=851):
r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0x7ffd, 0x1000, 0x3, 0x6}})

20.293448318s ago: executing program 1 (id=852):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2185, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0)

20.293157058s ago: executing program 1 (id=853):
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x2)

20.254935257s ago: executing program 1 (id=854):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

20.173512833s ago: executing program 1 (id=855):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xffff, 0x100000001, 0x4, 0xa})

19.922525209s ago: executing program 1 (id=856):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x71, 0x0, &(0x7f00000004c0))

19.759510668s ago: executing program 32 (id=856):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x71, 0x0, &(0x7f00000004c0))

19.596033443s ago: executing program 2 (id=860):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4444, &(0x7f000000cd00)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

18.770568129s ago: executing program 2 (id=865):
syz_mount_image$qnx6(&(0x7f0000009e00), &(0x7f0000000080)='./file0\x00', 0x20c800, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0, 0x9e10, &(0x7f000001da80)="$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")

17.890942915s ago: executing program 2 (id=868):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)

17.624128033s ago: executing program 33 (id=868):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)

6.520807441s ago: executing program 4 (id=941):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r1=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x0, 0x1, 0x8001, 0x5, r1}, &(0x7f0000000340)=0x10)

6.160515915s ago: executing program 4 (id=942):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}}], 0x2, 0xf04)

6.159919975s ago: executing program 4 (id=943):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0xb}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x349218d8, {}, {0x2}, @connect={{0x2, 0x83}, {0x3, 0xfc}}}, {0x0, 0x9, 0x0, 0x0, @time={0x800002, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x3}, {}, {0x0, 0xfc}, @result={0x2, 0x2}}], 0x70)

6.090221306s ago: executing program 4 (id=945):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@nojournal_checksum}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x452, &(0x7f0000001400)="$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")
capset(0x0, 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x40)
open(0x0, 0x72083, 0xa9)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000004)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xc4140, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1d)

4.958845772s ago: executing program 4 (id=951):
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8935, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"})

4.607501861s ago: executing program 4 (id=953):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48)

4.207399775s ago: executing program 34 (id=953):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67200000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48)

3.892915s ago: executing program 0 (id=960):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
timerfd_create(0x8, 0x80800)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})
lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000006400)={0x2020}, 0x2020)
write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000f5ffffff", @ANYRES64=r0], 0x10)

3.598488979s ago: executing program 3 (id=961):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x25, 0x6}}, 0x1c}}, 0x0)

3.301686652s ago: executing program 3 (id=962):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x0, 0x0, 0x0})

3.250668146s ago: executing program 3 (id=963):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x41, 0x0)
write$6lowpan_enable(r0, 0x0, 0x0)

3.177951738s ago: executing program 3 (id=964):
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
pread64(r1, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)

2.900747304s ago: executing program 0 (id=965):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
shutdown(r0, 0x300)

2.752007979s ago: executing program 0 (id=966):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x0)

1.341805859s ago: executing program 0 (id=967):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000680)=@ethtool_perm_addr={0x33}})

1.100759647s ago: executing program 0 (id=968):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000000)
write$P9_RREADDIR(r0, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95)

1.001469775s ago: executing program 0 (id=969):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil)
r2 = socket$kcm(0x29, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x3)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r3, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
shutdown(r3, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/205, 0xcd, 0x0, &(0x7f0000000000)=""/4, 0x4}, &(0x7f0000000100)=0x40)
sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4)

261.946234ms ago: executing program 3 (id=970):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x43, 0x0, 0x1}, 0x28)

0s ago: executing program 3 (id=971):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x1008850, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0xffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0xbf39)

kernel console output (not intermixed with test programs):

T6233] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[   76.888562][ T6233] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[   76.888579][ T6233] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[   76.888596][ T6233] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[   76.888612][ T6233] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[   76.888629][ T6233] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[   76.888655][ T6233] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[   76.913056][ T6233] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[   76.915780][ T6233] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[   76.918264][ T6233] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[   76.920760][ T6233] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0
[   77.098972][ T6246] netlink: 'syz.1.117': attribute type 6 has an invalid length.
[   77.608217][ T6249] loop1: detected capacity change from 0 to 32768
[   78.208010][ T6262] syz.1.121 (6262): attempted to duplicate a private mapping with mremap.  This is not supported.
[   78.566626][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'.
[   78.617861][ T6287] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.128'.
[   78.903492][ T6315] loop1: detected capacity change from 0 to 64
[   79.272413][ T5878] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   79.445843][ T5878] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   79.448976][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.462639][ T5878] usb 2-1: config 0 descriptor??
[   79.483190][ T5878] cp210x 2-1:0.0: cp210x converter detected
[   79.582350][ T6234] EXT4-fs (loop2): pa ffff88801df48740: logic 32, phys. 161, len 22
[   79.586133][ T6234] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   79.623487][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.934447][ T5878] usb 2-1: cp210x converter now attached to ttyUSB0
[   80.111817][ T5751] usb 2-1: USB disconnect, device number 3
[   80.165039][ T5751] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   80.215002][ T5751] cp210x 2-1:0.0: device disconnected
[   80.461777][ T6376] loop0: detected capacity change from 0 to 512
[   80.480195][ T6376] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.147: casefold flag without casefold feature
[   80.486835][ T6376] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.147: couldn't read orphan inode 15 (err -117)
[   80.493152][ T6376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.534312][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.722811][ T6399] loop1: detected capacity change from 0 to 4096
[   80.733500][ T6399] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   80.749869][ T6399] ntfs3(loop1): ino=5, mi_enum_attr
[   80.756970][ T6399] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   80.765229][ T6406] loop0: detected capacity change from 0 to 512
[   80.780581][ T6406] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent
[   81.052066][ T5751] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   81.195722][ T6455] Bluetooth: MGMT ver 1.23
[   81.203428][ T5751] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   81.207049][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.229292][ T5751] usb 1-1: config 0 descriptor??
[   81.244451][ T5751] cp210x 1-1:0.0: cp210x converter detected
[   81.313735][   T33] audit: type=1326 audit(1755077333.371:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.172" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2218ebe9 code=0x7ffc0000
[   81.321169][   T33] audit: type=1326 audit(1755077333.371:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.172" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2218ebe9 code=0x7ffc0000
[   81.345874][   T33] audit: type=1326 audit(1755077333.371:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.172" exe="/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6f2218ebe9 code=0x7ffc0000
[   81.363408][   T33] audit: type=1326 audit(1755077333.371:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.172" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2218ebe9 code=0x7ffc0000
[   81.371023][   T33] audit: type=1326 audit(1755077333.371:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.172" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2218ebe9 code=0x7ffc0000
[   81.655593][ T5751] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[   81.684795][ T5751] usb 1-1: cp210x converter now attached to ttyUSB0
[   81.847487][ T6497] loop1: detected capacity change from 0 to 512
[   81.912388][ T5978] usb 1-1: USB disconnect, device number 5
[   81.928358][ T5978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   81.929567][ T6497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.938162][ T6497] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.973273][ T5978] cp210x 1-1:0.0: device disconnected
[   82.085801][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.574818][ T6524] vivid-003: disconnect
[   82.699869][ T6520] vivid-003: reconnect
[   83.107123][ T6544] Invalid option length (0) for dns_resolver key
[   83.179560][ T6552] loop2: detected capacity change from 0 to 1024
[   83.205785][ T6554] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[   83.260376][ T6559] loop0: detected capacity change from 0 to 256
[   83.267637][ T5937] hfsplus: b-tree write err: -5, ino 4
[   83.294874][ T6559] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[   83.300206][ T6559] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   83.328975][ T6559] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000006)
[   83.332232][ T5751] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   83.485055][ T5751] usb 2-1: config 3 has an invalid interface number: 61 but max is 0
[   83.488422][ T5751] usb 2-1: config 3 has no interface number 0
[   83.491068][ T5751] usb 2-1: config 3 interface 61 has no altsetting 0
[   83.497342][ T5751] usb 2-1: string descriptor 0 read error: -22
[   83.500132][ T5751] usb 2-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26
[   83.505833][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.522538][ T5751] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   83.557737][ T5751] snd-usb-audio 2-1:3.61: probe with driver snd-usb-audio failed with error -2
[   83.562438][ T5978] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   83.612778][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   83.711521][ T5978] usb 3-1: Using ep0 maxpacket: 8
[   83.720088][ T5978] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   83.723235][ T5978] usb 3-1: config 0 has no interface number 0
[   83.726736][ T5978] usb 3-1: config 0 interface 1 has no altsetting 0
[   83.727724][  T791] usb 2-1: USB disconnect, device number 4
[   83.733308][ T5978] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[   83.736436][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.739383][ T5978] usb 3-1: Product: syz
[   83.740939][ T5978] usb 3-1: Manufacturer: syz
[   83.744029][ T5978] usb 3-1: SerialNumber: syz
[   83.747187][ T5978] usb 3-1: config 0 descriptor??
[   83.776730][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.781083][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.785862][ T5878] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[   83.790100][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.797309][ T5878] usb 1-1: config 0 descriptor??
[   83.955330][ T5978] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22
[   84.159471][ T5978] usb 3-1: USB disconnect, device number 7
[   84.208944][ T5878] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0
[   84.541545][   T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   84.608500][ T5878] hid-led 0003:0FC5:B080.0004: probe with driver hid-led failed with error -71
[   84.618606][ T5878] usb 1-1: USB disconnect, device number 6
[   84.697909][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   84.709197][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[   84.720282][   T10] usb 2-1: config 0 has an invalid interface number: 88 but max is 0
[   84.726200][   T10] usb 2-1: config 0 has no interface number 0
[   84.728720][   T10] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[   84.741134][   T10] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   84.748038][   T10] usb 2-1: config 0 interface 88 has no altsetting 0
[   84.763924][   T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   84.771532][   T10] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   84.774821][   T10] usb 2-1: Product: syz
[   84.779862][   T10] usb 2-1: Manufacturer: syz
[   84.787554][   T10] usb 2-1: SerialNumber: syz
[   84.792935][   T10] usb 2-1: config 0 descriptor??
[   84.898921][ T6639] macsec1: entered promiscuous mode
[   85.012805][   T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input5
[   85.032811][   T10] usb 2-1: USB disconnect, device number 5
[   85.140382][ T6674] capability: warning: `syz.0.206' uses 32-bit capabilities (legacy support in use)
[   85.180761][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'.
[   85.409073][ T6680] loop2: detected capacity change from 0 to 32768
[   85.414564][ T6680] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.208 (6680)
[   85.451257][ T6680] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   85.460229][ T6680] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   85.469178][ T6680] BTRFS info (device loop2): using free-space-tree
[   85.589148][ T6680] BTRFS info (device loop2): rebuilding free space tree
[   85.785762][ T6734] loop1: detected capacity change from 0 to 512
[   85.808265][ T5843] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   85.819031][ T6734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.842029][   T33] audit: type=1804 audit(1755077337.891:13): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.219" name="/newroot/75/file0/bus" dev="loop1" ino=18 res=1 errno=0
[   85.850624][   T33] audit: type=1800 audit(1755077337.891:14): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.219" name="bus" dev="loop1" ino=18 res=0 errno=0
[   85.884593][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.946389][ T6743] loop0: detected capacity change from 0 to 2048
[   85.971318][ T6743] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.458539][ T6796] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[   86.503240][ T1271] cfg80211: failed to load regulatory.db
[   86.751296][ T6808] loop1: detected capacity change from 0 to 4096
[   87.516650][ T6834] loop1: detected capacity change from 0 to 128
[   87.564828][ T6834] FAT-fs (loop1): Directory bread(block 11554) failed
[   87.576876][ T6834] FAT-fs (loop1): Directory bread(block 11555) failed
[   87.586414][ T6834] FAT-fs (loop1): Directory bread(block 11556) failed
[   87.596853][ T6834] FAT-fs (loop1): Directory bread(block 11557) failed
[   87.607554][ T6834] FAT-fs (loop1): Directory bread(block 11558) failed
[   87.621819][ T6834] FAT-fs (loop1): Directory bread(block 11559) failed
[   87.624276][ T6834] FAT-fs (loop1): Directory bread(block 11560) failed
[   87.635725][ T6834] FAT-fs (loop1): Directory bread(block 11561) failed
[   87.639890][ T6834] FAT-fs (loop1): Directory bread(block 11562) failed
[   87.643090][ T6834] FAT-fs (loop1): Directory bread(block 11563) failed
[   87.658426][ T6831] loop2: detected capacity change from 0 to 16384
[   87.770726][ T6840] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.102126][  T791] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   88.261949][  T791] usb 2-1: Using ep0 maxpacket: 16
[   88.285120][  T791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.289115][  T791] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[   88.311708][  T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[   88.316159][  T791] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   88.339871][  T791] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[   88.345463][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.352940][  T791] usb 2-1: Product: syz
[   88.354583][  T791] usb 2-1: Manufacturer: syz
[   88.356293][  T791] usb 2-1: SerialNumber: syz
[   88.386814][  T791] usb 2-1: config 0 descriptor??
[   88.454131][ T6878] loop0: detected capacity change from 0 to 8
[   88.459588][ T6878] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   88.472517][  T791] rc_core: IR keymap rc-xbox-dvd not found
[   88.474502][  T791] Registered IR keymap rc-empty
[   88.481000][ T6878] cramfs: Error -3 while decompressing!
[   88.484734][  T791] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   88.490453][  T791] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6
[   88.492241][ T6878] cramfs: ffffffff99be3628(26)->ffff888036c94000(4096)
[   88.497444][ T6878] cramfs: Error -3 while decompressing!
[   88.501068][ T6878] cramfs: ffffffff99be3642(282)->ffff888036f9b000(4096)
[   88.505764][ T6878] cramfs: bad data blocksize 4294966884
[   88.511112][ T6878] cramfs: Error -3 while decompressing!
[   88.514335][ T6878] cramfs: ffffffff99be3628(26)->ffff888036c94000(4096)
[   88.519545][   T33] audit: type=1800 audit(1755077340.571:15): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.249" name="file2" dev="loop0" ino=348 res=0 errno=0
[   88.581553][ T1271] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   88.596221][  T791] usb 2-1: USB disconnect, device number 6
[   88.598688][    C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[   88.694640][ T6905] loop0: detected capacity change from 0 to 512
[   88.708686][ T6905] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   88.731683][ T1271] usb 3-1: Using ep0 maxpacket: 32
[   88.739207][ T1271] usb 3-1: config 4 has an invalid interface number: 8 but max is 0
[   88.743967][ T1271] usb 3-1: config 4 has no interface number 0
[   88.746594][ T1271] usb 3-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[   88.750390][ T1271] usb 3-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0
[   88.754856][ T1271] usb 3-1: config 4 interface 8 has no altsetting 0
[   88.764587][ T1271] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65
[   88.774096][ T1271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.781015][ T1271] usb 3-1: Product: syz
[   88.785480][ T1271] usb 3-1: Manufacturer: syz
[   88.787472][ T1271] usb 3-1: SerialNumber: syz
[   88.868230][ T6920] Zero length message leads to an empty skb
[   89.021881][ T1271] opticon 3-1:4.8: opticon converter detected
[   89.029852][ T1271] usb 3-1: opticon converter now attached to ttyUSB0
[   89.038928][ T1271] usb 3-1: USB disconnect, device number 8
[   89.051123][ T1271] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[   89.066401][ T1271] opticon 3-1:4.8: device disconnected
[   89.198839][ T6927] loop0: detected capacity change from 0 to 32768
[   89.243898][ T6951] loop1: detected capacity change from 0 to 512
[   89.270368][ T6951] EXT4-fs (loop1): 1 truncate cleaned up
[   89.276264][ T6951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.288454][ T6951] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.260: invalid indirect mapped block 234881024 (level 0)
[   89.318188][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.705050][ T6979] vxcan0: tx drop: invalid sa for name 0x0000001000000000
[   90.400632][ T1271] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   90.451236][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'.
[   90.498796][ T6999] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   90.504446][ T5870] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   90.509066][ T5870] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   90.513832][ T5870] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   90.517641][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   90.520871][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.270'.
[   90.524468][ T6999] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.561528][ T1271] usb 1-1: Using ep0 maxpacket: 8
[   90.565098][ T1271] usb 1-1: unable to get BOS descriptor or descriptor too short
[   90.568574][ T1271] usb 1-1: config 1 interface 0 has no altsetting 0
[   90.575582][ T1271] usb 1-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=6a.56
[   90.581936][ T1271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.588128][ T1271] usb 1-1: Product: syz
[   90.595435][ T1271] usb 1-1: Manufacturer: syz
[   90.597013][ T1271] usb 1-1: SerialNumber: syz
[   90.713212][ T7045] loop1: detected capacity change from 0 to 256
[   90.716460][ T7045] exfat: Deprecated parameter 'namecase'
[   90.724106][ T7045] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1c5e6afd, utbl_chksum : 0xe619d30d)
[   90.833803][ T1271] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[   90.840310][ T1271] pwc: send_video_command error -71
[   90.845603][ T1271] pwc: Failed to set video mode VGA@30 fps; return code = -71
[   90.848867][ T1271] Philips webcam 1-1:1.0: probe with driver Philips webcam failed with error -71
[   90.856125][ T1271] usb 1-1: USB disconnect, device number 7
[   90.961822][ T5875] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   90.967979][ T7071] program syz.2.278 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   90.980744][ T5875] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   91.043726][ T7078] syz.2.279 uses obsolete (PF_INET,SOCK_PACKET)
[   91.417130][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.287'.
[   91.641511][ T1271] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   91.798177][ T1271] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   91.803325][ T7146] netlink: 'syz.2.297': attribute type 7 has an invalid length.
[   91.805531][ T1271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 64
[   91.806304][ T7146] netlink: 'syz.2.297': attribute type 8 has an invalid length.
[   91.819748][ T1271] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   91.825399][ T1271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.832850][ T1271] usb 1-1: Product: syz
[   91.838046][ T1271] usb 1-1: Manufacturer: syz
[   91.840081][ T1271] usb 1-1: SerialNumber: syz
[   91.862519][ T1271] usb 1-1: config 0 descriptor??
[   91.868805][ T7110] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   91.951689][ T1271] rc_core: IR keymap rc-streamzap not found
[   91.954224][ T1271] Registered IR keymap rc-empty
[   91.962852][ T1271] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   91.974020][ T1271] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7
[   92.080965][   T33] audit: type=1800 audit(2000000000.490:16): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.301" name="/newroot/97/file0" dev="tmpfs" ino=518 res=0 errno=0
[   92.088956][ T1271] usb 1-1: USB disconnect, device number 8
[   92.403864][ T7184] loop2: detected capacity change from 0 to 32768
[   92.808391][ T7207] loop0: detected capacity change from 0 to 32768
[   92.822291][ T7207] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.310 (7207)
[   92.836393][ T7207] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   92.840279][ T7207] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   92.844107][ T7207] BTRFS info (device loop0): using free-space-tree
[   92.851791][ T5875] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   92.878425][ T6203] BTRFS warning (device loop0): checksum verify failed on logical 1052672 mirror 1 wanted 0x11f3e929624b680852cd2754314153a53c00b22ae8936d589814e00d5ed09030 found 0xe38ba9bd71c513db051652ecf0e4e83d075b6f90790e6c1c1ddb1c188093d1e0 level 0
[   92.889474][ T7207] BTRFS error (device loop0): failed to read chunk root
[   92.913493][ T7207] BTRFS error (device loop0): open_ctree failed: -5
[   93.024956][ T5875] usb 2-1: Using ep0 maxpacket: 32
[   93.036300][ T5875] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[   93.049886][ T5875] usb 2-1: config 0 has no interface number 0
[   93.061666][ T5875] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   93.080117][ T5875] usb 2-1: config 0 interface 85 has no altsetting 0
[   93.094324][ T5875] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   93.098244][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.108336][ T5875] usb 2-1: Product: syz
[   93.109783][ T5875] usb 2-1: Manufacturer: syz
[   93.113841][ T5875] usb 2-1: SerialNumber: syz
[   93.118436][ T5875] usb 2-1: config 0 descriptor??
[   93.243813][ T5751] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   93.391594][ T5751] usb 1-1: Using ep0 maxpacket: 8
[   93.396124][ T5751] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[   93.398833][ T5751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.402299][ T5751] usb 1-1: config 0 has no interface number 0
[   93.404844][ T5751] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[   93.408349][ T5751] usb 1-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[   93.417414][ T5751] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[   93.420803][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.423571][ T5751] usb 1-1: Product: syz
[   93.424934][ T5751] usb 1-1: Manufacturer: syz
[   93.426439][ T5751] usb 1-1: SerialNumber: syz
[   93.429587][ T5751] usb 1-1: config 0 descriptor??
[   93.434252][ T7229] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   93.451628][ T1271] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   93.607131][ T1271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.611024][ T1271] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   93.616158][ T1271] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   93.619537][ T1271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.626952][ T1271] usb 3-1: config 0 descriptor??
[   93.643463][ T5751] usb 1-1: NFC: intf ffff88803b0b5000 id ffffffff8eb509a0
[   93.659706][ T5751] usb 1-1: USB disconnect, device number 9
[   93.729904][ T5875] appletouch 2-1:0.85: Geyser mode initialized.
[   93.735283][ T5875] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input8
[   93.937613][ T5875] usb 2-1: USB disconnect, device number 7
[   93.953439][ T5875] appletouch 2-1:0.85: input: appletouch disconnected
[   94.040767][ T1271] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0
[   94.577959][ T7285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.314'.
[   94.674104][ T1271] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device
[   94.677672][ T1271] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse
[   94.693134][ T1271] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -71
[   94.709587][ T1271] usb 3-1: USB disconnect, device number 9
[   94.719209][ T7294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.316'.
[   95.250717][ T7320] netlink: 40 bytes leftover after parsing attributes in process `syz.2.322'.
[   95.342509][ T7315] loop0: detected capacity change from 0 to 32768
[   95.347229][ T7315] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section journal: journal bucket 1 before first bucket 32767
[   95.347229][ T7315] journal (size 40):
[   95.347229][ T7315] Buckets:  9 7 24 1
[   95.347229][ T7315] 
[   95.355557][ T7315] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[   95.567065][ T7343] loop0: detected capacity change from 0 to 32768
[   95.593972][ T7343] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   95.604157][ T7343] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   95.610555][ T7343] (syz.0.327,7343,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9
[   95.639334][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[   95.745591][ T7354] loop0: detected capacity change from 0 to 256
[   95.749955][ T7354] vfat: Unexpected value for 'sys_immutable'
[   96.069212][ T7370] loop0: detected capacity change from 0 to 32768
[   96.098731][ T7370] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   96.129759][ T7370] XFS (loop0): Ending clean mount
[   96.138170][ T7370] XFS (loop0): Quotacheck needed: Please wait.
[   96.164371][ T7370] XFS (loop0): Quotacheck: Done.
[   96.199313][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   97.956924][ T1271] libceph: connect (1)[c::]:6789 error -101
[   97.959990][ T1271] libceph: mon0 (1)[c::]:6789 connect error
[   97.976220][ T7449] ceph: No mds server is up or the cluster is laggy
[   97.980867][ T7447] 9pnet_fd: Insufficient options for proto=fd
[   98.533550][ T7477] loop0: detected capacity change from 0 to 8
[   98.593360][ T7477] SQUASHFS error: zlib decompression failed, data probably corrupt
[   98.620914][ T7477] SQUASHFS error: Failed to read block 0x9b: -5
[   98.634555][ T7477] SQUASHFS error: Unable to read metadata cache entry [99]
[   98.655929][ T7477] SQUASHFS error: Unable to read inode 0x104
[   99.995735][ T7524] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  100.278860][ T7556] loop0: detected capacity change from 0 to 2048
[  100.292577][ T7556] EXT4-fs: Ignoring removed mblk_io_submit option
[  100.315790][ T7556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.743444][ T7556] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.373: bg 0: block 234: padding at end of block bitmap is not set
[  100.762905][ T7556] EXT4-fs (loop0): Remounting filesystem read-only
[  100.789354][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.866040][ T7581] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  101.242802][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.383'.
[  101.246787][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.383'.
[  101.250745][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'.
[  101.254936][ T5751] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  101.402090][ T5751] usb 3-1: Using ep0 maxpacket: 32
[  101.407514][ T5751] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  101.411338][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.422009][ T5751] usb 3-1: config 0 descriptor??
[  101.429591][ T5751] gspca_main: nw80x-2.14.0 probing 055f:d001
[  101.632303][ T5751] gspca_nw80x: reg_w err -71
[  101.634375][ T5751] nw80x 3-1:0.0: probe with driver nw80x failed with error -71
[  101.652118][ T5751] usb 3-1: USB disconnect, device number 10
[  101.682411][ T7630] loop1: detected capacity change from 0 to 512
[  101.690745][ T7630] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.696531][ T7630] EXT4-fs: old and new quota format mixing
[  101.966749][ T7654] loop1: detected capacity change from 0 to 256
[  102.005750][ T7654] FAT-fs (loop1): Directory bread(block 64) failed
[  102.008690][ T7654] FAT-fs (loop1): Directory bread(block 65) failed
[  102.024455][ T7654] FAT-fs (loop1): Directory bread(block 66) failed
[  102.037456][ T7654] FAT-fs (loop1): Directory bread(block 67) failed
[  102.040395][ T7654] FAT-fs (loop1): Directory bread(block 68) failed
[  102.047310][ T7654] FAT-fs (loop1): Directory bread(block 69) failed
[  102.050666][ T7654] FAT-fs (loop1): Directory bread(block 70) failed
[  102.055487][ T7654] FAT-fs (loop1): Directory bread(block 71) failed
[  102.058496][ T7654] FAT-fs (loop1): Directory bread(block 72) failed
[  102.061328][ T7654] FAT-fs (loop1): Directory bread(block 73) failed
[  102.628440][ T7675] fuse: Unexpected value for 'allow_other'
[  102.728381][ T7682] loop2: detected capacity change from 0 to 4096
[  102.750207][ T7682] ntfs3(loop2): ino=3, Correct links count -> 2.
[  102.774046][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'.
[  102.947023][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'.
[  103.102249][ T5878] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  103.199357][ T7751] loop0: detected capacity change from 0 to 512
[  103.206328][ T7751] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  103.223664][ T7751] EXT4-fs (loop0): orphan cleanup on readonly fs
[  103.227432][ T7751] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.412: Block bitmap for bg 0 marked uninitialized
[  103.237166][ T7751] EXT4-fs (loop0): Remounting filesystem read-only
[  103.240012][ T7751] EXT4-fs (loop0): 1 orphan inode deleted
[  103.246714][ T7751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  103.263580][ T5878] usb 2-1: Using ep0 maxpacket: 32
[  103.268185][ T5878] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  103.276113][ T5878] usb 2-1: config 0 has no interface number 0
[  103.282229][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.289387][ T5878] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  103.293809][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.304492][ T5878] usb 2-1: Product: syz
[  103.306335][ T5878] usb 2-1: Manufacturer: syz
[  103.308345][ T5878] usb 2-1: SerialNumber: syz
[  103.320852][ T5878] usb 2-1: config 0 descriptor??
[  103.335588][ T5878] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  103.562291][ T5878] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  103.593303][ T5878] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  103.666268][ T7764] loop0: detected capacity change from 0 to 32768
[  103.675788][ T7764] XFS: ikeep mount option is deprecated.
[  103.723021][ T7764] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.780930][ T7764] XFS (loop0): Ending clean mount
[  103.797909][ T7764] XFS (loop0): Quotacheck needed: Please wait.
[  103.834276][ T7764] XFS (loop0): Quotacheck: Done.
[  103.872433][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'.
[  103.887089][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.951263][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  103.959736][   T24] usb 2-1: USB disconnect, device number 8
[  104.003522][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  104.023966][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  104.031952][   T24] quatech2 2-1:0.51: device disconnected
[  104.106475][ T5232] Bluetooth: hci1: unexpected event 0x3e length: 283 > 260
[  104.106507][ T5232] Bluetooth: hci1: unexpected subevent 0x0d length: 282 > 260
[  104.113284][ T5232] Bluetooth: hci1: adv larger than maximum supported
[  104.113323][ T5232] Bluetooth: hci1: adv larger than maximum supported
[  104.551663][ T1271] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  104.712270][ T1271] usb 1-1: Using ep0 maxpacket: 8
[  104.716263][ T1271] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  104.723034][ T1271] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  104.728217][ T1271] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  104.733237][ T1271] usb 1-1: Product: syz
[  104.735156][ T1271] usb 1-1: Manufacturer: syz
[  104.737290][ T1271] usb 1-1: SerialNumber: syz
[  104.742986][ T7856] loop1: detected capacity change from 0 to 32768
[  104.772821][ T7856] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.789819][ T7856] XFS (loop1): Ending clean mount
[  104.794582][ T7856] XFS (loop1): Quotacheck needed: Please wait.
[  104.818999][ T7856] XFS (loop1): Quotacheck: Done.
[  104.845517][   T33] audit: type=1800 audit(2000000013.260:17): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.435" name="bus" dev="loop1" ino=9291 res=0 errno=0
[  104.855808][ T7856] XFS (loop1): User initiated shutdown received.
[  104.860344][ T7856] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:472).  Shutting down filesystem.
[  104.865826][ T7856] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  104.882387][ T5850] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.916163][ T7824] Bluetooth: hci0: Opcode 0x080f failed: -4
[  104.954083][ T1271] usb 1-1: Handspring Visor / Palm OS: No valid connect info available
[  104.965269][ T1271] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  104.967914][ T1271] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  104.983739][ T1271] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[  105.156317][ T1271] usb 1-1: palm_os_3_probe - error -71 getting bytes available request
[  105.162766][ T1271] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  105.191048][ T1271] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  105.204703][ T1271] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  105.216843][ T1271] usb 1-1: USB disconnect, device number 10
[  105.227611][ T1271] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  105.246099][ T1271] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  105.258771][ T1271] visor 1-1:1.0: device disconnected
[  105.667427][ T7935] loop2: detected capacity change from 0 to 512
[  105.713529][ T7935] EXT4-fs: Ignoring removed nobh option
[  105.725137][ T7935] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  105.729532][ T7935] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  105.733971][ T7935] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.449: casefold flag without casefold feature
[  105.739913][ T7935] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.449: couldn't read orphan inode 13 (err -117)
[  105.754922][ T7935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.045693][ T7935] syz_tun: entered promiscuous mode
[  106.093777][ T5232] Bluetooth: hci0: command 0x080f tx timeout
[  106.106091][ T7935] syz_tun: left promiscuous mode
[  106.196956][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.505783][ T7965] netlink: 'syz.1.454': attribute type 1 has an invalid length.
[  107.300639][ T7992] nfs: Unknown parameter 'ntext'
[  109.424115][   T33] audit: type=1804 audit(2000000017.830:18): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.477" name="/newroot/143/file0" dev="tmpfs" ino=764 res=1 errno=0
[  109.440669][ T8037] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[  109.447855][ T8037] ref_ctr increment failed for inode: 0x2fc offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888028a52040
[  109.589262][ T8031] loop2: detected capacity change from 0 to 32768
[  109.602300][ T8031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.474 (8031)
[  109.671604][ T8031] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.679450][ T8031] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  109.695549][ T8031] BTRFS info (device loop2): disk space caching is enabled
[  109.702289][ T8031] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  109.765681][ T8031] BTRFS info (device loop2): rebuilding free space tree
[  109.780996][ T8031] BTRFS info (device loop2): disabling free space tree
[  109.784866][ T8031] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  109.789527][ T8031] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  109.826072][   T33] audit: type=1800 audit(2000000018.240:19): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.474" name="file1" dev="loop2" ino=260 res=0 errno=0
[  109.882118][ T5878] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  109.905967][ T5843] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  110.032137][ T5878] usb 2-1: Using ep0 maxpacket: 32
[  110.042106][ T5878] usb 2-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config
[  110.048838][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  110.079233][ T5878] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[  110.086340][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.103077][ T5878] usb 2-1: Product: syz
[  110.108608][ T5878] usb 2-1: Manufacturer: syz
[  110.112729][ T5878] usb 2-1: SerialNumber: syz
[  110.115370][ T8069] xt_policy: too many policy elements
[  110.137512][ T5878] usb 2-1: config 0 descriptor??
[  110.158290][ T5878] qmi_wwan 2-1:0.0: bogus CDC Union: master=2, slave=183
[  110.171815][ T5878] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22
[  110.363265][ T5878] usb 2-1: USB disconnect, device number 9
[  110.699189][ T8106] loop0: detected capacity change from 0 to 512
[  110.707364][ T8106] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.489: Invalid inode bitmap blk 4 in block_group 0
[  110.712191][ T5751] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  110.717631][ T8106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.756547][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.861704][ T5751] usb 3-1: Using ep0 maxpacket: 8
[  110.865803][ T5751] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  110.869036][ T5751] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  110.875287][ T5751] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  110.879437][ T5751] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  110.887755][ T5751] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  110.902722][ T5751] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  110.908193][ T5751] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  110.913190][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.849582][ T5751] usb 3-1: GET_CAPABILITIES returned 0
[  111.852141][ T5751] usbtmc 3-1:16.0: can't read capabilities
[  111.867967][ T5751] usb 3-1: USB disconnect, device number 11
[  111.885836][ T8141] loop1: detected capacity change from 0 to 256
[  111.906434][ T8141] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  111.910219][ T8141] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  111.929370][ T8141] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  111.944802][   T33] audit: type=1800 audit(2000000020.360:20): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.494" name="file1" dev="loop1" ino=1048595 res=0 errno=0
[  111.967791][   T33] audit: type=1804 audit(2000000020.380:21): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.494" name="/newroot/164/file1/file1" dev="loop1" ino=1048595 res=1 errno=0
[  112.087380][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.103776][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.106750][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.601187][ T8207] process 'syz.1.512' launched '/dev/fd/3' with NULL argv: empty string added
[  112.654080][ T8215] loop1: detected capacity change from 0 to 4096
[  112.657273][ T8215] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  112.681934][ T5751] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  112.842890][ T1271] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  112.847544][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  112.851848][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  112.855909][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  112.859128][ T5751] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  112.866477][ T8232] loop1: detected capacity change from 0 to 2048
[  112.868752][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.878078][ T5751] usb 1-1: config 0 descriptor??
[  112.889994][ T5751] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  112.909630][ T8232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  112.978818][ T8232] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  112.988341][ T8232] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1936 with error 28
[  112.991725][ T1271] usb 3-1: Using ep0 maxpacket: 16
[  112.993741][ T8232] EXT4-fs (loop1): This should not happen!! Data will be lost
[  112.993741][ T8232] 
[  112.997988][ T1271] usb 3-1: config 8 has an invalid interface number: 223 but max is 0
[  112.999070][ T8232] EXT4-fs (loop1): Total free blocks count 0
[  113.002262][ T1271] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  113.004634][ T8232] EXT4-fs (loop1): Free/Dirty block details
[  113.007435][ T1271] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  113.009593][ T8232] EXT4-fs (loop1): free_blocks=2415919104
[  113.014341][ T1271] usb 3-1: config 8 has no interface number 0
[  113.015528][ T8232] EXT4-fs (loop1): dirty_blocks=1952
[  113.017278][ T1271] usb 3-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32
[  113.019067][ T8232] EXT4-fs (loop1): Block reservation details
[  113.022750][ T1271] usb 3-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  113.025239][ T8232] EXT4-fs (loop1): i_reserved_data_blocks=122
[  113.028924][ T1271] usb 3-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  113.040432][ T1271] usb 3-1: config 8 interface 223 has no altsetting 0
[  113.057425][ T1271] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  113.061170][ T1271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.071665][ T1271] usb 3-1: Product: syz
[  113.073441][ T1271] usb 3-1: Manufacturer: syz
[  113.075110][ T1271] usb 3-1: SerialNumber: syz
[  113.087201][ T8210] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  113.099070][ T5751] usb 1-1: USB disconnect, device number 11
[  113.115253][ T5937] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  113.183621][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'.
[  113.186577][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'.
[  113.318363][ T1271] usb 3-1: USB disconnect, device number 12
[  113.936310][ T8296] loop0: detected capacity change from 0 to 512
[  113.945258][ T8296] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  113.957644][ T8296] EXT4-fs (loop0): orphan cleanup on readonly fs
[  113.964959][ T8296] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.528: Block bitmap for bg 0 marked uninitialized
[  113.975463][ T8296] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  113.979617][ T8296] EXT4-fs (loop0): 1 orphan inode deleted
[  113.983898][ T8296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  114.431890][ T5875] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  114.596998][ T5875] usb 3-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= d.df
[  114.601029][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.610951][ T5875] usb 3-1: config 0 descriptor??
[  114.620042][ T5875] gspca_main: benq-2.14.0 probing 04a5:3035
[  114.822779][   T24] usb 3-1: USB disconnect, device number 13
[  114.897248][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.952767][ T8334] netlink: 64 bytes leftover after parsing attributes in process `syz.0.532'.
[  115.126940][ T8356] loop1: detected capacity change from 0 to 128
[  115.133024][ T8356] FAT-fs (loop1): bogus number of reserved sectors
[  115.135631][ T8356] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  115.138507][ T8356] FAT-fs (loop1): Can't find a valid FAT filesystem
[  115.169083][ T8362] loop1: detected capacity change from 0 to 256
[  115.222230][ T8368] loop1: detected capacity change from 0 to 1024
[  115.235137][ T8368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.240800][ T8368] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.253601][ T8368] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  115.260637][ T8368] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28
[  115.265647][ T8368] EXT4-fs (loop1): This should not happen!! Data will be lost
[  115.265647][ T8368] 
[  115.268851][ T8368] EXT4-fs (loop1): Total free blocks count 0
[  115.270894][ T8368] EXT4-fs (loop1): Free/Dirty block details
[  115.273329][ T8368] EXT4-fs (loop1): free_blocks=4293918720
[  115.275406][ T8368] EXT4-fs (loop1): dirty_blocks=48
[  115.277175][ T8368] EXT4-fs (loop1): Block reservation details
[  115.279326][ T8368] EXT4-fs (loop1): i_reserved_data_blocks=3
[  115.293370][   T69] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 17 with error 28
[  115.353403][ T8377] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  115.421020][ T8390] loop1: detected capacity change from 0 to 512
[  115.425455][ T8390] EXT4-fs: Ignoring removed mblk_io_submit option
[  115.429453][ T8390] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  115.438069][ T8390] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.545: attempt to clear invalid blocks 2 len 1
[  115.444269][ T8390] EXT4-fs (loop1): Remounting filesystem read-only
[  115.446861][ T8390] EXT4-fs (loop1): 1 truncate cleaned up
[  115.449600][ T8390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.478175][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.685761][ T8398] loop1: detected capacity change from 0 to 32768
[  116.003982][ T8398] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=gzip,str_hash=crc32c,journal_flush_disabled,recovery_pass_last=set_may_go_rw,reconstruct_alloc
[  116.004008][ T8398]   allowing incompatible features above 0.0: (unknown version)
[  116.004016][ T8398]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  116.023597][ T8398] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  116.028719][ T8398] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  116.032456][ T8398] bcachefs (loop1): Version upgrade required:
[  116.032456][ T8398] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  116.032456][ T8398] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  116.032456][ T8398]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  116.086226][ T8398] bcachefs (loop1): dropping and reconstructing all alloc info
[  116.131736][ T8398] bcachefs (loop1): accounting_read... done
[  116.177957][ T8398] bcachefs (loop1): alloc_read... done
[  116.180851][ T8398] bcachefs (loop1): snapshots_read... done
[  116.184268][ T8398] bcachefs (loop1): check_allocations... done
[  116.205133][ T8398] bcachefs (loop1): going read-write
[  116.234609][ T8398] bcachefs (loop1): done starting filesystem
[  116.234960][ T1091] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  116.239767][ T1091]   u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing
[  116.267903][ T1091] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  116.267949][ T1091]   u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing
[  116.279914][ T1091] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  116.279925][ T1091]   u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing
[  116.293886][ T1091] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  116.293896][ T1091]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  116.307651][ T8398] bcachefs (loop1): inode 536870912 truncated to 0 but i_blocks 8 (ondisk 8)
[  116.320154][ T5937] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  116.320165][ T5937]   u64s 5 type deleted 0:43:0 len 0 ver 0, , continuing
[  116.332100][ T8398] syz.1.546 (8398) used greatest stack depth: 17544 bytes left
[  116.347974][ T5850] bcachefs (loop1): shutting down
[  116.353184][ T5850] bcachefs (loop1): going read-only
[  116.356891][ T5850] bcachefs (loop1): finished waiting for writes to stop
[  116.364629][ T5850] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11
[  116.389696][ T6203] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  116.389708][ T6203]   u64s 5 type deleted 0:48:0 len 0 ver 0, , continuing
[  116.407718][ T5850] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11
[  116.417400][ T5850] bcachefs (loop1): unclean shutdown complete, journal seq 12
[  116.423622][ T5850] bcachefs (loop1): done going read-only, filesystem not clean
[  116.477393][ T8425] loop0: detected capacity change from 0 to 32768
[  116.517326][ T8425] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  116.526000][ T8425] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  116.550861][ T5850] bcachefs (loop1): shutdown complete
[  116.635831][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  117.043239][ T8475] loop2: detected capacity change from 0 to 4096
[  117.050166][ T8475] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  117.062333][ T8475] NILFS (loop2): mounting unchecked fs
[  117.067799][ T6332] udevd[6332]: incorrect nilfs2 checksum on /dev/loop2
[  117.071049][ T8475] NILFS (loop2): recovery required for readonly filesystem
[  117.076975][ T8475] NILFS (loop2): write access will be enabled during recovery
[  117.086148][ T8475] NILFS (loop2): invalid segment: Inconsistency found
[  117.089098][ T8475] NILFS (loop2): unable to fall back to spare super block
[  117.094586][ T8475] NILFS (loop2): error -22 while searching super root
[  117.094779][ T6332] udevd[6332]: incorrect nilfs2 checksum on /dev/loop2
[  117.376261][ T8485] loop0: detected capacity change from 0 to 32768
[  117.385459][ T8485] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.563 (8485)
[  117.397830][ T8485] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  117.406092][ T8485] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  117.409737][ T8485] BTRFS info (device loop0): using free-space-tree
[  117.458962][ T8499] loop2: detected capacity change from 0 to 4096
[  117.466652][ T8499] ntfs3: Unknown parameter 'fma00000002007'
[  117.693288][ T5847] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  118.531621][ T5878] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  118.592548][ T8563] geneve3: entered promiscuous mode
[  118.594406][ T8563] geneve3: entered allmulticast mode
[  118.681574][ T5878] usb 3-1: Using ep0 maxpacket: 32
[  118.685114][ T5878] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  118.688488][ T5878] usb 3-1: config 0 has no interface number 0
[  118.697323][ T5878] usb 3-1: config 0 interface 12 has no altsetting 0
[  118.705342][ T5878] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  118.711166][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.718936][ T5878] usb 3-1: Product: syz
[  118.723237][ T5878] usb 3-1: Manufacturer: syz
[  118.727313][ T5878] usb 3-1: SerialNumber: syz
[  118.727796][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'.
[  118.737280][ T5878] usb 3-1: config 0 descriptor??
[  118.947184][ T5878] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  118.950345][ T5878] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  118.954677][ T5878] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  118.961808][ T5878] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  118.972357][ T5878] usb 3-1: USB disconnect, device number 14
[  119.218049][ T8608] loop0: detected capacity change from 0 to 32768
[  119.222120][ T8608] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  119.246815][ T8625] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  119.752960][ T8642] loop1: detected capacity change from 0 to 32768
[  119.757635][ T8642] bcachefs: bch2_fs_parse_param() Error parsing option background_compression: option_value
[  120.940717][ T8689] loop0: detected capacity change from 0 to 32768
[  120.946906][ T8689] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.610 (8689)
[  120.968077][ T8689] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.971322][ T8689] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  120.978238][ T8689] BTRFS info (device loop0): using free-space-tree
[  121.042216][ T5878] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  121.087767][ T5847] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.125345][ T8699] loop1: detected capacity change from 0 to 32768
[  121.136652][ T8699] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry journal: 1/3 [0 1 4]
[  121.136652][ T8699] replicas_v0 (size 24):
[  121.136652][ T8699] btree: 1 [0] journal: 3 [0 4 1]
[  121.136652][ T8699] 
[  121.154050][ T8699] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  121.235324][ T5878] usb 3-1: unable to get BOS descriptor or descriptor too short
[  121.239169][ T5878] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  121.251627][ T5878] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 2
[  121.254876][ T5878] usb 3-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0
[  121.258667][ T5878] usb 3-1: config 66 interface 0 has no altsetting 0
[  121.272601][ T5878] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  121.275968][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.278748][ T5878] usb 3-1: Product: syz
[  121.280355][ T5878] usb 3-1: Manufacturer: syz
[  121.280542][ T8727] loop0: detected capacity change from 0 to 512
[  121.294980][ T5878] usb 3-1: SerialNumber: syz
[  121.311133][ T8727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.317085][ T8727] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.332905][ T8727] EXT4-fs: Ignoring removed orlov option
[  121.335469][ T8727] EXT4-fs: can't change dax mount option while remounting
[  121.376024][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.517683][ T5878] ati_remote2 3-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1
[  121.615367][ T5878] usb 3-1: USB disconnect, device number 15
[  121.662704][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'.
[  121.694547][ T8768] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  122.083707][ T8788] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  122.109165][ T8792] loop0: detected capacity change from 0 to 16
[  122.127966][ T8792] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  122.310008][ T8813] PKCS8: Unsupported PKCS#8 version
[  122.499421][ T8829] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  122.502395][ T8829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  122.508452][ T8829] vhci_hcd vhci_hcd.0: Device attached
[  122.554244][ T8840] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  122.752952][ T5875] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  122.756713][ T8856] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  122.776962][ T5878] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  122.911865][ T5875] usb 2-1: Using ep0 maxpacket: 16
[  122.955200][ T5875] usb 2-1: config 0 has no interfaces?
[  122.967374][ T5875] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  122.981401][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.987609][ T5875] usb 2-1: config 0 descriptor??
[  123.209850][ T8830] vhci_hcd: connection closed
[  123.210266][ T5875] usb 2-1: USB disconnect, device number 10
[  123.214660][ T5870] vhci_hcd: stop threads
[  123.217829][ T5870] vhci_hcd: release socket
[  123.226021][ T5870] vhci_hcd: disconnect device
[  123.232678][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'.
[  123.247390][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'.
[  123.271899][ T5878] vhci_hcd: vhci_device speed not set
[  123.293968][ T8881] loop0: detected capacity change from 0 to 512
[  123.315201][ T8881] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.650: casefold flag without casefold feature
[  123.325080][ T8881] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.650: couldn't read orphan inode 15 (err -117)
[  123.329970][ T8881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.339684][ T8881] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.650: Directory hole found for htree leaf block 0
[  123.360392][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.012874][ T8904] loop0: detected capacity change from 0 to 32768
[  124.017448][ T8904] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.656 (8904)
[  124.038936][ T8904] BTRFS error: invalid seeding and uuid-changed device detected
[  124.379973][ T8940] loop1: detected capacity change from 0 to 128
[  124.420797][ T8940] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  124.436047][ T8940] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  124.534147][ T5850] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.605140][ T8948] netlink: 72 bytes leftover after parsing attributes in process `syz.2.668'.
[  124.608801][ T8948] netlink: 'syz.2.668': attribute type 1 has an invalid length.
[  124.735780][ T8964] loop1: detected capacity change from 0 to 1764
[  124.788374][ T8942] loop0: detected capacity change from 0 to 32768
[  124.851767][ T8942]  loop0: p1 p3 < >
[  124.898173][ T5292]  loop0: p1 p3 < >
[  124.959675][ T8994] warning: `syz.0.676' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  125.012998][ T9000] loop1: detected capacity change from 0 to 22
[  125.016840][ T9000] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  125.037059][ T9000] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  125.100664][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  125.108896][ T6332] udevd[6332]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  125.174169][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  125.182784][ T6332] udevd[6332]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  125.273535][ T9030] loop1: detected capacity change from 0 to 512
[  125.328127][ T9030] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  125.330965][ T9030] EXT4-fs (loop1): mount failed
[  125.392389][ T9039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.685'.
[  125.424568][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'.
[  125.428631][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'.
[  125.510088][ T9057] batadv_slave_0: entered allmulticast mode
[  125.527590][ T9057] dvmrp1: entered allmulticast mode
[  125.536429][ T9056] batadv_slave_0: left allmulticast mode
[  125.631990][ T5878] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  125.764776][ T9083] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  125.811556][ T5878] usb 2-1: Using ep0 maxpacket: 32
[  125.819990][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short
[  125.829658][ T5878] usb 2-1: config 4 has an invalid interface number: 10 but max is 0
[  125.833462][ T5878] usb 2-1: config 4 has no interface number 0
[  125.834070][ T9086] loop0: detected capacity change from 0 to 512
[  125.836314][ T5878] usb 2-1: config 4 interface 10 has no altsetting 0
[  125.844969][ T5878] usb 2-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15
[  125.851004][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.855805][ T5878] usb 2-1: Product: syz
[  125.858560][ T5878] usb 2-1: Manufacturer: syz
[  125.861709][ T9086] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.696: corrupted in-inode xattr: e_value size too large
[  125.867704][ T5878] usb 2-1: SerialNumber: syz
[  125.871694][ T9086] EXT4-fs (loop0): Remounting filesystem read-only
[  125.879720][ T9086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.881700][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  125.906850][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.032242][    T9] usb 3-1: Using ep0 maxpacket: 8
[  126.036574][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  126.040638][    T9] usb 3-1: config 9 has an invalid interface number: 229 but max is 0
[  126.044524][    T9] usb 3-1: config 9 has an invalid interface number: 255 but max is 0
[  126.047780][    T9] usb 3-1: config 9 has 2 interfaces, different from the descriptor's value: 1
[  126.051169][    T9] usb 3-1: config 9 has no interface number 0
[  126.054705][    T9] usb 3-1: config 9 has no interface number 1
[  126.056942][    T9] usb 3-1: config 9 interface 229 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  126.061050][    T9] usb 3-1: config 9 interface 229 has no altsetting 0
[  126.066960][    T9] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice=12.34
[  126.070268][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.074460][    T9] usb 3-1: Product: syz
[  126.076298][    T9] usb 3-1: Manufacturer: syz
[  126.084152][ T5878] radio-si470x 2-1:4.10: could not find interrupt in endpoint
[  126.085361][    T9] usb 3-1: SerialNumber: syz
[  126.086621][ T5878] radio-si470x 2-1:4.10: probe with driver radio-si470x failed with error -5
[  126.086756][ T5878] usbhid 2-1:4.10: couldn't find an input interrupt endpoint
[  126.097099][ T5878] usb 2-1: USB disconnect, device number 11
[  126.211908][ T5751] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  126.300434][    T9] hub 3-1:9.229: Invalid hub with more than one config or interface
[  126.304786][    T9] hub 3-1:9.229: probe with driver hub failed with error -22
[  126.325745][    T9] usb 3-1: USB disconnect, device number 16
[  126.344788][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.229/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  126.362486][ T5751] usb 1-1: Using ep0 maxpacket: 16
[  126.366710][ T5751] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  126.373481][ T5751] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  126.377345][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.380705][ T5751] usb 1-1: Product: syz
[  126.383054][ T5751] usb 1-1: Manufacturer: syz
[  126.385088][ T5751] usb 1-1: SerialNumber: syz
[  126.390935][ T5751] usb 1-1: config 0 descriptor??
[  126.397679][ T5751] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  126.401905][ T5751] usb 1-1: Detected FT232R
[  126.686381][ T5751] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  126.693736][ T5751] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  126.699714][ T5751] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  126.706322][ T5751] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  126.729552][ T5751] usb 1-1: USB disconnect, device number 12
[  126.739943][ T5751] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  126.752424][ T5751] ftdi_sio 1-1:0.0: device disconnected
[  126.878397][ T9172] netlink: 'syz.1.705': attribute type 10 has an invalid length.
[  126.881007][ T9172] netlink: 152 bytes leftover after parsing attributes in process `syz.1.705'.
[  127.141576][    T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  127.327691][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  127.335907][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  127.350726][    T9] usb 2-1: config 4 has an invalid interface number: 111 but max is 0
[  127.357341][    T9] usb 2-1: config 4 has no interface number 0
[  127.360089][    T9] usb 2-1: config 4 interface 111 has no altsetting 0
[  127.365439][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99
[  127.369024][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.373091][    T9] usb 2-1: Product: syz
[  127.374593][    T9] usb 2-1: Manufacturer: syz
[  127.376256][    T9] usb 2-1: SerialNumber: syz
[  127.554727][ T9202] AppArmor: change_hat: Invalid input 'p'
[  127.588976][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  127.597863][    T9] pvrusb2: **********
[  127.599453][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  127.607883][    T9] pvrusb2: Important functionality might not be entirely working.
[  127.611232][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  127.616109][    T9] pvrusb2: **********
[  127.618814][    T9] usb 2-1: selecting invalid altsetting 0
[  127.626892][    T9] usb 2-1: USB disconnect, device number 12
[  127.631841][ T2396] pvrusb2: control-write URB failure, status=-71
[  127.639558][ T2396] pvrusb2: Device being rendered inoperable
[  127.647412][ T2396] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  127.655997][ T2396] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  127.785635][ T9224] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.796180][ T9228] loop0: detected capacity change from 0 to 128
[  128.078969][ T9256] loop0: detected capacity change from 0 to 256
[  128.089643][ T9256] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  128.102787][ T9256] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  128.106543][ T9256] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  128.109468][ T9256] UDF-fs: Scanning with blocksize 512 failed
[  128.114791][ T9256] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  128.119380][ T9256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.189456][ T9266] loop0: detected capacity change from 0 to 128
[  128.400155][ T9276] loop1: detected capacity change from 0 to 32768
[  128.405589][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  128.462680][ T9276] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  128.462696][ T9276]   allowing incompatible features above 0.0: (unknown version)
[  128.462701][ T9276]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  128.462709][ T9276]   with devices loop1
[  128.480127][ T9276] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  128.484309][ T9276] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  128.492387][ T9276] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  128.499341][ T9276] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  128.512945][ T9276] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  128.519477][ T9276] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  128.525790][ T9276] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  128.529557][ T9276] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  128.561872][ T9276] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  128.577695][    T9] usb 3-1: config 0 has no interfaces?
[  128.580102][    T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  128.592973][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.605885][    T9] usb 3-1: config 0 descriptor??
[  128.651113][ T9276] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown by ioctl type 0emergency read only at seq 2
[  128.656429][    T9] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  128.659964][    T9] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  128.677672][ T9276] syz.1.730 (9276) used greatest stack depth: 17096 bytes left
[  128.692976][ T5850] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  128.702580][    T9] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 2
[  128.707239][    T9] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 2
[  128.718245][    T9] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): unclean shutdown complete, journal seq 2
[  128.730813][    T9] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done going read-only, filesystem not clean
[  128.764124][ T5850] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  128.828028][    T9] usb 3-1: USB disconnect, device number 17
[  128.881193][ T9323] loop0: detected capacity change from 0 to 4096
[  128.890004][ T9323] ntfs3: Invalid value for umask.
[  129.528175][ T9358] loop0: detected capacity change from 0 to 1024
[  129.587824][   T33] audit: type=1800 audit(2000000038.000:22): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.751" name="bus" dev="loop0" ino=26 res=0 errno=0
[  129.674897][ T1232] hfsplus: b-tree write err: -5, ino 4
[  129.802424][ T5905] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  129.963690][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  129.971541][ T5905] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  129.974753][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.983441][ T5905] usb 3-1: config 0 descriptor??
[  130.027809][ T9387] loop0: detected capacity change from 0 to 40427
[  130.042288][ T9387] F2FS-fs: heap/no_heap options were deprecated
[  130.045358][ T9387] F2FS-fs: heap/no_heap options were deprecated
[  130.319839][ T9398] loop0: detected capacity change from 0 to 32768
[  130.325673][ T9398] (syz.0.760,9398,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.327652][ T9406] loop1: detected capacity change from 0 to 128
[  130.331714][ T9398] (syz.0.760,9398,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.369093][ T9398] JBD2: Ignoring recovery information on journal
[  130.388005][ T5905] hid (null): unknown global tag 0xe
[  130.423369][ T5905] elecom 0003:056E:00E6.0007: unknown main item tag 0x7
[  130.425711][ T5905] elecom 0003:056E:00E6.0007: unknown global tag 0xe
[  130.427985][ T5905] elecom 0003:056E:00E6.0007: item 0 0 1 14 parsing failed
[  130.434542][ T9398] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  130.448977][ T9398] (syz.0.760,9398,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  130.476468][ T9398] (syz.0.760,9398,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[  130.515331][ T9398] (syz.0.760,9398,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  130.521255][ T9398] (syz.0.760,9398,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  130.526235][ T9398] (syz.0.760,9398,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  130.529200][ T9398] (syz.0.760,9398,1):ocfs2_quota_read:201 ERROR: status = -5
[  130.531812][ T9398] Quota error (device loop0): find_block_dqentry: Can't read quota tree block 6
[  130.535267][ T9398] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  130.538334][ T9398] (syz.0.760,9398,1):ocfs2_acquire_dquot:890 ERROR: status = -5
[  130.542380][ T9398] (syz.0.760,9398,1):ocfs2_mknod:317 ERROR: status = -5
[  130.544671][ T9398] (syz.0.760,9398,1):ocfs2_mknod:505 ERROR: status = -5
[  130.568420][ T5905] elecom 0003:056E:00E6.0007: probe with driver elecom failed with error -22
[  130.603864][ T5905] usb 3-1: USB disconnect, device number 18
[  130.699811][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  131.053134][ T5905] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  131.189602][ T1232] kworker/u10:3: attempt to access beyond end of device
[  131.189602][ T1232] loop1: rw=1, sector=145, nr_sectors = 8 limit=128
[  131.198324][ T1232] kworker/u10:3: attempt to access beyond end of device
[  131.198324][ T1232] loop1: rw=1, sector=161, nr_sectors = 8 limit=128
[  131.208746][ T1232] kworker/u10:3: attempt to access beyond end of device
[  131.208746][ T1232] loop1: rw=1, sector=177, nr_sectors = 8 limit=128
[  131.220972][ T1232] kworker/u10:3: attempt to access beyond end of device
[  131.220972][ T1232] loop1: rw=1, sector=193, nr_sectors = 8 limit=128
[  131.233412][ T5905] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  131.237256][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.243411][ T1232] kworker/u10:3: attempt to access beyond end of device
[  131.243411][ T1232] loop1: rw=1, sector=209, nr_sectors = 8 limit=128
[  131.251845][ T5905] usb 1-1: Product: syz
[  131.253682][ T5905] usb 1-1: Manufacturer: syz
[  131.255685][ T5905] usb 1-1: SerialNumber: syz
[  131.259097][ T1232] kworker/u10:3: attempt to access beyond end of device
[  131.259097][ T1232] loop1: rw=1, sector=225, nr_sectors = 8 limit=128
[  131.260284][ T9439] loop2: detected capacity change from 0 to 2048
[  131.268561][ T5905] usb 1-1: config 0 descriptor??
[  131.270831][ T1232] kworker/u10:3: attempt to access beyond end of device
[  131.270831][ T1232] loop1: rw=1, sector=241, nr_sectors = 8 limit=128
[  131.279120][ T1232] kworker/u10:3: attempt to access beyond end of device
[  131.279120][ T1232] loop1: rw=1, sector=257, nr_sectors = 8 limit=128
[  131.286135][ T1232] kworker/u10:3: attempt to access beyond end of device
[  131.286135][ T1232] loop1: rw=1, sector=273, nr_sectors = 8 limit=128
[  131.294331][ T1232] kworker/u10:3: attempt to access beyond end of device
[  131.294331][ T1232] loop1: rw=1, sector=289, nr_sectors = 8 limit=128
[  131.305251][ T9439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.392064][ T9448] EXT4-fs (loop2): shut down requested (1)
[  131.555996][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.583846][   T33] audit: type=1326 audit(2000000040.000:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.1.770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd5f8ebe9 code=0x7ffc0000
[  131.611079][   T33] audit: type=1326 audit(2000000040.000:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.1.770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd5f8ebe9 code=0x7ffc0000
[  131.635145][   T33] audit: type=1326 audit(2000000040.000:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.1.770" exe="/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fabd5f8ebe9 code=0x7ffc0000
[  131.667813][   T33] audit: type=1326 audit(2000000040.000:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.1.770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd5f8ebe9 code=0x7ffc0000
[  131.679438][   T33] audit: type=1326 audit(2000000040.000:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9456 comm="syz.1.770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd5f8ebe9 code=0x7ffc0000
[  131.716116][ T5905] usb 1-1: Firmware: major: 0, minor: 101, hardware type: UNKNOWN (114)
[  131.734753][ T9468] loop2: detected capacity change from 0 to 164
[  131.753130][ T9468]  nullb0: [CUMANA/ADFS] p1
[  131.754607][ T9468] nullb0: p1 size 3074847350 extends beyond EOD, truncated
[  131.915692][ T5905] usb 1-1: failed to fetch extended address, random address set
[  131.922352][ T5905] usb 1-1: atusb_probe: initialization failed, error = -524
[  131.925146][ T5905] atusb 1-1:0.0: probe with driver atusb failed with error -524
[  131.934651][ T5905] usb 1-1: USB disconnect, device number 13
[  132.164386][ T9498] loop2: detected capacity change from 0 to 764
[  132.170965][ T9498] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  132.633445][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.636224][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.157409][ T9535] Illegal XDP return value 4294967294 on prog  (id 54) dev N/A, expect packet loss!
[  133.900897][ T9559] loop2: detected capacity change from 0 to 16
[  133.939109][ T9559] erofs (device loop2): invalid sb_extslots 4208 (more than a fs block)
[  134.174017][ T9567] loop2: detected capacity change from 0 to 256
[  134.237250][ T9567] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[  134.506990][ T9582] loop1: detected capacity change from 0 to 1024
[  135.396390][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'.
[  135.400715][ T9594] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  135.407858][ T9594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.576432][ T9601] loop2: detected capacity change from 0 to 1024
[  135.674373][ T9604] loop0: detected capacity change from 0 to 256
[  135.691049][ T9604] exfat: Deprecated parameter 'utf8'
[  135.701804][ T9604] exfat: Deprecated parameter 'namecase'
[  135.705619][ T9604] exfat: Deprecated parameter 'utf8'
[  135.711347][ T5937] hfsplus: b-tree write err: -5, ino 4
[  135.717989][ T9604] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  136.608266][ T9645] loop1: detected capacity change from 0 to 128
[  136.632035][ T9645] EXT4-fs: Ignoring removed nobh option
[  136.639777][ T9645] EXT4-fs (loop1): Invalid log block size: 4294967295
[  136.963119][ T9660] loop1: detected capacity change from 0 to 40427
[  136.990323][ T9660] F2FS-fs (loop1): invalid crc value
[  137.294392][ T9660] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  137.311672][ T9660] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  137.360415][ T5850] bio_check_eod: 102 callbacks suppressed
[  137.360427][ T5850] syz-executor: attempt to access beyond end of device
[  137.360427][ T5850] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  137.380704][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  137.380728][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.380736][ T5850] Call Trace:
[  137.380741][ T5850]  <TASK>
[  137.380748][ T5850]  dump_stack_lvl+0x189/0x250
[  137.380772][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.380787][ T5850]  ? __pfx_queue_work_on+0x10/0x10
[  137.380801][ T5850]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  137.380817][ T5850]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  137.380838][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[  137.380862][ T5850]  f2fs_write_end_io+0x886/0xb60
[  137.380893][ T5850]  __submit_merged_bio+0x27a/0x6a0
[  137.380913][ T5850]  __submit_merged_write_cond+0x255/0x530
[  137.380933][ T5850]  f2fs_write_data_pages+0x261d/0x3000
[  137.380974][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  137.381024][ T5850]  ? check_path+0x21/0x40
[  137.381045][ T5850]  ? check_noncircular+0xe0/0x160
[  137.381094][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  137.381111][ T5850]  do_writepages+0x32e/0x550
[  137.381137][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  137.381154][ T5850]  filemap_fdatawrite+0x199/0x240
[  137.381172][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  137.381223][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  137.381241][ T5850]  f2fs_sync_dirty_inodes+0x31f/0x830
[  137.381269][ T5850]  f2fs_write_checkpoint+0x95a/0x1df0
[  137.381303][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  137.381354][ T5850]  ? kill_f2fs_super+0x298/0x6c0
[  137.381376][ T5850]  kill_f2fs_super+0x2c3/0x6c0
[  137.381397][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[  137.381433][ T5850]  ? radix_tree_delete_item+0x2b6/0x400
[  137.381482][ T5850]  ? shrinker_free+0x2ce/0x3e0
[  137.381499][ T5850]  deactivate_locked_super+0xbc/0x130
[  137.381516][ T5850]  cleanup_mnt+0x425/0x4c0
[  137.381531][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.381548][ T5850]  task_work_run+0x1d4/0x260
[  137.381567][ T5850]  ? __pfx_task_work_run+0x10/0x10
[  137.381580][ T5850]  ? __x64_sys_umount+0x122/0x160
[  137.381601][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[  137.381622][ T5850]  exit_to_user_mode_loop+0xec/0x110
[  137.381639][ T5850]  do_syscall_64+0x2bd/0x3b0
[  137.381654][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.381667][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.381679][ T5850]  ? exc_page_fault+0x9f/0xf0
[  137.381695][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.381706][ T5850] RIP: 0033:0x7fabd5f8ff17
[  137.381719][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  137.381730][ T5850] RSP: 002b:00007ffc02e83bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  137.381745][ T5850] RAX: 0000000000000000 RBX: 00007fabd6011c05 RCX: 00007fabd5f8ff17
[  137.381754][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc02e83c90
[  137.381761][ T5850] RBP: 00007ffc02e83c90 R08: 0000000000000000 R09: 0000000000000000
[  137.381768][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc02e84d20
[  137.381776][ T5850] R13: 00007fabd6011c05 R14: 0000000000021807 R15: 00007ffc02e84d60
[  137.381796][ T5850]  </TASK>
[  137.527288][ T5850] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  137.807617][ T9701] loop0: detected capacity change from 0 to 512
[  137.853713][ T9701] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.831: bg 0: block 5: invalid block bitmap
[  137.867919][ T9701] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  137.871237][ T9701] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.831: invalid indirect mapped block 3 (level 2)
[  137.878831][ T9701] EXT4-fs (loop0): 1 orphan inode deleted
[  137.881272][ T9701] EXT4-fs (loop0): 1 truncate cleaned up
[  137.885860][ T9708] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  137.888252][ T9701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.888363][ T9708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  137.902755][ T9708] vhci_hcd vhci_hcd.0: Device attached
[  137.949511][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.068353][ T9726] loop0: detected capacity change from 0 to 512
[  138.098339][ T9726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.105684][ T9726] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.121735][ T5751] vhci_hcd: vhci_device speed not set
[  138.126461][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.182597][ T5751] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  138.192465][ T5978] usb 3-1: new low-speed USB device number 19 using dummy_hcd
[  138.349802][ T5978] usb 3-1: config 0 has no interfaces?
[  138.352752][ T5978] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  138.358665][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.372886][ T5978] usb 3-1: config 0 descriptor??
[  138.579389][ T9709] vhci_hcd: connection reset by peer
[  138.584135][    T9] usb 3-1: USB disconnect, device number 19
[  138.588636][   T13] vhci_hcd: stop threads
[  138.590543][   T13] vhci_hcd: release socket
[  138.592590][   T13] vhci_hcd: disconnect device
[  138.641583][ T5751] vhci_hcd: vhci_device speed not set
[  138.681557][ T5978] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  138.880134][ T5978] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  138.889022][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.897587][ T5978] usb 1-1: Product: syz
[  138.899315][ T5978] usb 1-1: Manufacturer: syz
[  138.899324][ T5978] usb 1-1: SerialNumber: syz
[  138.903984][ T5978] usb 1-1: config 0 descriptor??
[  138.926591][ T5978] gspca_main: sunplus-2.14.0 probing 055f:c230
[  138.977133][ T9771] misc userio: The device must be registered before sending interrupts
[  139.525733][ T9782] loop2: detected capacity change from 0 to 1024
[  139.547128][ T9782] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.321641][ T5978] gspca_sunplus: reg_r err -71
[  140.327081][ T5978] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  140.342385][ T5978] usb 1-1: USB disconnect, device number 14
[  140.877319][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.880978][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  140.930546][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.934495][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  141.004784][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.008388][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  141.050177][ T9827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.858'.
[  141.095389][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.121528][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  141.171186][ T9830] loop0: detected capacity change from 0 to 1024
[  141.184023][ T9830] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  141.263501][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  141.267604][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  141.270860][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  141.275804][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  141.278759][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  141.286751][ T9843] loop0: detected capacity change from 0 to 512
[  141.325546][ T9843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  141.367940][ T9843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.383915][ T9843] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.465584][   T13] bridge_slave_1: left allmulticast mode
[  141.467959][   T13] bridge_slave_1: left promiscuous mode
[  141.471363][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.483192][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.514628][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.537672][ T9836] loop2: detected capacity change from 0 to 32768
[  141.581310][ T9836] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  141.590458][ T9836] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  141.673896][ T9836] loop2: detected capacity change from 32768 to 64
[  141.677012][ T9896] syz.2.860: attempt to access beyond end of device
[  141.677012][ T9896] loop2: rw=0, sector=71, nr_sectors = 1 limit=64
[  141.721837][ T9896] (syz.2.860,9896,1):ocfs2_assign_bh:2417 ERROR: status = -5
[  141.725083][ T9896] (syz.2.860,9896,1):ocfs2_inode_lock_full_nested:2512 ERROR: status = -5
[  141.761618][ T9896] (syz.2.860,9896,0):ocfs2_reserve_suballoc_bits:795 ERROR: status = -5
[  141.771634][ T9896] (syz.2.860,9896,0):ocfs2_reserve_cluster_bitmap_bits:1139 ERROR: status = -5
[  141.775367][ T9896] (syz.2.860,9896,0):ocfs2_local_alloc_reserve_for_window:1119 ERROR: status = -5
[  141.789887][ T9896] (syz.2.860,9896,0):ocfs2_local_alloc_reserve_for_window:1135 ERROR: status = -5
[  141.799773][ T9896] (syz.2.860,9896,0):ocfs2_local_alloc_slide_window:1250 ERROR: status = -5
[  141.811677][ T9896] (syz.2.860,9896,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -5
[  141.815263][ T9896] (syz.2.860,9896,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -5
[  141.828991][ T9896] (syz.2.860,9896,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -5
[  141.832798][ T9896] (syz.2.860,9896,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -5
[  141.836766][ T9896] (syz.2.860,9896,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -5
[  141.851254][ T9896] (syz.2.860,9896,0):ocfs2_expand_inline_dir:2864 ERROR: status = -5
[  141.866194][ T9896] (syz.2.860,9896,0):ocfs2_extend_dir:3211 ERROR: status = -5
[  141.869398][ T9896] (syz.2.860,9896,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -5
[  141.897564][ T9896] (syz.2.860,9896,0):ocfs2_symlink:1879 ERROR: status = -5
[  141.900752][ T9896] (syz.2.860,9896,0):ocfs2_symlink:2080 ERROR: status = -5
[  141.979307][ T5843] syz-executor: attempt to access beyond end of device
[  141.979307][ T5843] loop2: rw=0, sector=17057, nr_sectors = 1 limit=64
[  141.990844][ T9895] loop0: detected capacity change from 0 to 32768
[  141.999406][ T5843] (syz-executor,5843,1):ocfs2_read_locked_inode:597 ERROR: status = -5
[  142.008998][ T5843] syz-executor: attempt to access beyond end of device
[  142.008998][ T5843] loop2: rw=0, sector=17057, nr_sectors = 1 limit=64
[  142.016271][ T5843] (syz-executor,5843,1):ocfs2_read_locked_inode:597 ERROR: status = -5
[  142.040023][ T9895] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  142.067114][   T13] bond1 (unregistering): (slave geneve2): Releasing backup interface
[  142.069146][ T9895] XFS (loop0): Ending clean mount
[  142.078327][ T9895] XFS (loop0): Quotacheck needed: Please wait.
[  142.111098][ T9895] XFS (loop0): Quotacheck: Done.
[  142.120517][ T9889] jbd2/loop2-75: attempt to access beyond end of device
[  142.120517][ T9889] loop2: rw=38913, sector=640, nr_sectors = 1 limit=64
[  142.128372][ T9889] Buffer I/O error on dev loop2, logical block 640, lost sync page write
[  142.146797][ T9889] JBD2: I/O error when updating journal superblock for loop2-75.
[  142.154619][ T9889] Aborting journal on device loop2-75.
[  142.159289][ T9889] jbd2/loop2-75: attempt to access beyond end of device
[  142.159289][ T9889] loop2: rw=38913, sector=640, nr_sectors = 1 limit=64
[  142.169401][ T5847] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  142.173302][ T9889] Buffer I/O error on dev loop2, logical block 640, lost sync page write
[  142.176924][ T9889] JBD2: I/O error when updating journal superblock for loop2-75.
[  142.180867][ T6132] syz.2.94: attempt to access beyond end of device
[  142.180867][ T6132] loop2: rw=0, sector=71, nr_sectors = 1 limit=64
[  142.188813][ T6132] (syz.2.94,6132,1):ocfs2_assign_bh:2417 ERROR: status = -5
[  142.193199][ T6132] (syz.2.94,6132,1):ocfs2_inode_lock_full_nested:2512 ERROR: status = -5
[  142.214630][ T6132] (syz.2.94,6132,1):ocfs2_shutdown_local_alloc:412 ERROR: status = -5
[  142.224789][ T6132] syz.2.94: attempt to access beyond end of device
[  142.224789][ T6132] loop2: rw=1, sector=17024, nr_sectors = 1 limit=64
[  142.235284][ T6132] Buffer I/O error on dev loop2, logical block 17024, lost sync page write
[  142.252191][ T6132] (syz.2.94,6132,1):ocfs2_write_block:78 ERROR: status = -5
[  142.255620][ T6132] (syz.2.94,6132,1):ocfs2_update_disk_slot:199 ERROR: status = -5
[  142.258900][ T6132] (syz.2.94,6132,1):ocfs2_put_slot:517 ERROR: status = -5
[  142.271043][ T6132] (syz.2.94,6132,1):ocfs2_journal_shutdown:1107 ERROR: status = -5
[  142.285610][ T6132] ocfs2: Unmounting device (7,2) on (node local)
[  142.469948][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.476112][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.481046][   T13] bond0 (unregistering): Released all slaves
[  142.574831][   T13] bond1 (unregistering): Released all slaves
[  142.666638][ T5751] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  142.681978][   T13] tipc: Disabling bearer <udp:syz2>
[  142.690745][   T13] tipc: Left network mode
[  142.843238][ T5751] usb 1-1: Using ep0 maxpacket: 32
[  142.851012][ T5751] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  142.861834][ T5751] usb 1-1: config 0 has no interface number 0
[  142.894259][ T9838] chnl_net:caif_netlink_parms(): no params data found
[  142.929898][ T5751] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.940216][ T5751] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.948337][ T5751] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  142.971172][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.987773][ T5751] usb 1-1: config 0 descriptor??
[  143.117997][ T9838] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.120975][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.130031][ T9838] bridge_slave_0: entered allmulticast mode
[  143.142513][ T9838] bridge_slave_0: entered promiscuous mode
[  143.158929][ T9838] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.169021][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.173147][ T9838] bridge_slave_1: entered allmulticast mode
[  143.177874][ T9838] bridge_slave_1: entered promiscuous mode
[  143.227507][   T13] hsr_slave_0: left promiscuous mode
[  143.232511][   T13] hsr_slave_1: left promiscuous mode
[  143.235507][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.238664][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.256982][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.260245][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.310881][   T13] veth1_macvtap: left promiscuous mode
[  143.336936][   T13] veth0_macvtap: left promiscuous mode
[  143.339540][   T13] veth1_vlan: left promiscuous mode
[  143.358348][   T13] veth0_vlan: left promiscuous mode
[  143.362120][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  143.369446][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  143.374578][ T5846] Bluetooth: hci2: command tx timeout
[  143.381787][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  143.387198][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  143.390612][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  143.616588][ T5751] uclogic 0003:28BD:0094.0008: pen parameters not found
[  143.619591][ T5751] uclogic 0003:28BD:0094.0008: interface is invalid, ignoring
[  143.621358][ T9923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.632006][ T9923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.649347][ T5751] usb 1-1: USB disconnect, device number 15
[  143.745930][   T13] team0 (unregistering): Port device team_slave_1 removed
[  143.770790][   T13] team0 (unregistering): Port device team_slave_0 removed
[  144.148651][ T9838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.175602][ T9838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.244932][ T9838] team0: Port device team_slave_0 added
[  144.257879][ T9838] team0: Port device team_slave_1 added
[  144.295698][ T9838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.296336][T10156] loop0: detected capacity change from 0 to 8192
[  144.298494][ T9838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.330572][ T9838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.358339][ T9838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.361256][ T9838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.371842][ T9838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.487994][ T9838] hsr_slave_0: entered promiscuous mode
[  144.490339][ T9838] hsr_slave_1: entered promiscuous mode
[  144.495467][ T9838] debugfs: 'hsr0' already exists in 'hsr'
[  144.497591][ T9838] Cannot create hsr debugfs directory
[  144.838993][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.979013][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.991332][T10099] chnl_net:caif_netlink_parms(): no params data found
[  145.083025][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.159278][T10373] loop0: detected capacity change from 0 to 32768
[  145.180041][T10373] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  145.204663][T10373] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  145.252351][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.287800][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  145.307735][ T9838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  145.329033][ T9838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  145.385576][T10099] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.388676][T10099] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.391192][T10099] bridge_slave_0: entered allmulticast mode
[  145.402345][T10099] bridge_slave_0: entered promiscuous mode
[  145.411260][ T9838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  145.424775][ T9838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  145.439845][T10099] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.448460][T10099] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.453011][   T54] Bluetooth: hci0: command tx timeout
[  145.453437][ T5232] Bluetooth: hci2: command tx timeout
[  145.456887][T10099] bridge_slave_1: entered allmulticast mode
[  145.459924][T10099] bridge_slave_1: entered promiscuous mode
[  145.507319][T10099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.545359][T10099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.585543][T10099] team0: Port device team_slave_0 added
[  145.606288][T10099] team0: Port device team_slave_1 added
[  145.633298][   T13] bridge_slave_1: left allmulticast mode
[  145.635628][   T13] bridge_slave_1: left promiscuous mode
[  145.638380][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.644905][   T13] bridge_slave_0: left allmulticast mode
[  145.647329][   T13] bridge_slave_0: left promiscuous mode
[  145.651946][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.024467][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.029898][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.036194][   T13] bond0 (unregistering): Released all slaves
[  146.043648][   T13] bond1 (unregistering): Released all slaves
[  146.073078][T10099] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.075858][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.087725][T10099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.094332][T10099] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.097169][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.116983][T10099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.209477][T10099] hsr_slave_0: entered promiscuous mode
[  146.212601][T10099] hsr_slave_1: entered promiscuous mode
[  146.215237][T10099] debugfs: 'hsr0' already exists in 'hsr'
[  146.217589][T10099] Cannot create hsr debugfs directory
[  146.418065][ T9838] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.501388][   T13] hsr_slave_0: left promiscuous mode
[  146.507856][   T13] hsr_slave_1: left promiscuous mode
[  146.510582][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.516227][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.521037][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.524696][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.537640][   T13] veth1_macvtap: left promiscuous mode
[  146.540006][   T13] veth0_macvtap: left promiscuous mode
[  146.543000][   T13] veth1_vlan: left promiscuous mode
[  146.545303][   T13] veth0_vlan: left promiscuous mode
[  146.975782][   T13] team0 (unregistering): Port device team_slave_1 removed
[  147.008338][   T13] team0 (unregistering): Port device team_slave_0 removed
[  147.307058][ T9838] 8021q: adding VLAN 0 to HW filter on device team0
[  147.336516][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.339456][ T6203] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.371334][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.374472][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.537360][ T5232] Bluetooth: hci2: command tx timeout
[  147.539778][ T5232] Bluetooth: hci0: command tx timeout
[  147.548297][T10099] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  147.575821][T10099] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  147.593357][T10099] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  147.619857][T10099] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  147.644128][ T5905] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  147.745792][ T9838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.792915][ T5905] usb 1-1: Using ep0 maxpacket: 16
[  147.801370][ T5905] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  147.808592][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  147.817156][ T9838] veth0_vlan: entered promiscuous mode
[  147.821617][ T5905] usb 1-1: Manufacturer: syz
[  147.826254][ T5905] usb 1-1: config 0 descriptor??
[  147.838445][T10099] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.850498][ T9838] veth1_vlan: entered promiscuous mode
[  147.884842][T10099] 8021q: adding VLAN 0 to HW filter on device team0
[  147.896442][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.899509][ T6203] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.937938][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.940933][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.948760][ T9838] veth0_macvtap: entered promiscuous mode
[  147.974022][ T9838] veth1_macvtap: entered promiscuous mode
[  148.034077][ T5905] usb 1-1: Cannot retrieve CPort count: -71
[  148.038057][ T9838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.046390][T10099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  148.051982][ T5905] usb 1-1: Cannot retrieve CPort count: -71
[  148.054464][ T5905] es2_ap_driver 1-1:0.0: probe with driver es2_ap_driver failed with error -71
[  148.059107][ T5905] usb 1-1: USB disconnect, device number 16
[  148.070059][ T9838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.099467][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.109563][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.124177][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.128514][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.205661][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.208869][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.265187][ T6208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.268543][ T6208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.281137][T10099] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.607743][T10099] veth0_vlan: entered promiscuous mode
[  148.646734][T10099] veth1_vlan: entered promiscuous mode
[  148.667129][T10794] Bluetooth: MGMT ver 1.23
[  148.673946][T10794] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  148.707698][T10099] veth0_macvtap: entered promiscuous mode
[  148.724654][T10099] veth1_macvtap: entered promiscuous mode
[  148.741362][T10799] loop0: detected capacity change from 0 to 1024
[  148.752861][T10799] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  148.763252][T10099] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.784205][T10799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.786349][T10099] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.804470][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.817342][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.820476][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.844043][T10799] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.884: missing EA_INODE flag
[  148.851910][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.866719][T10799] EXT4-fs (loop0): Remounting filesystem read-only
[  148.923102][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.017927][T10782] loop3: detected capacity change from 0 to 32768
[  149.048585][T10782] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  149.058825][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.074778][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.098061][T10782] XFS (loop3): Ending clean mount
[  149.129208][ T5937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.136791][ T5937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.205567][ T9838] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  149.315800][T10853] loop4: detected capacity change from 0 to 1024
[  149.369387][T10853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.544180][T10824] loop0: detected capacity change from 0 to 32768
[  149.561657][T10099] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.563578][T10824] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  149.611601][ T5232] Bluetooth: hci0: command tx timeout
[  149.623833][ T5232] Bluetooth: hci2: command tx timeout
[  149.641180][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  150.620257][T10909] loop4: detected capacity change from 0 to 32768
[  150.646476][T10909] 
[  150.646476][T10909]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.646476][T10909] 
[  150.659211][T10913] loop0: detected capacity change from 0 to 32768
[  150.681624][T10909] ERROR: (device loop4): diWrite: ixpxd invalid
[  150.681624][T10909] 
[  150.697192][T10909] ERROR: (device loop4): txCommit: 
[  150.697192][T10909] 
[  150.700899][T10913] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  150.712804][T10909] 
[  150.712804][T10909]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.712804][T10909] 
[  150.719228][T10909] 
[  150.719228][T10909]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.719228][T10909] 
[  150.739869][T10913] XFS (loop0): Ending clean mount
[  150.750645][T10913] XFS (loop0): Quotacheck needed: Please wait.
[  150.787217][T10099] 
[  150.787217][T10099]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.787217][T10099] 
[  150.799139][T10913] XFS (loop0): Quotacheck: Done.
[  150.804645][T10099] 
[  150.804645][T10099]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.804645][T10099] 
[  150.961840][ T5847] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  151.113279][T10961] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  151.303430][T10972] veth1_to_bond: entered allmulticast mode
[  151.309234][T10970] veth1_to_bond: left allmulticast mode
[  151.554265][T10989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.906'.
[  151.564601][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'.
[  151.692820][ T5232] Bluetooth: hci0: command tx timeout
[  151.977589][T10982] mmap: syz.0.903 (10982) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  152.479836][T11033] loop0: detected capacity change from 0 to 1024
[  152.547780][T11033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.609878][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.744416][T11047] loop0: detected capacity change from 0 to 64
[  152.768418][T11029] loop4: detected capacity change from 0 to 32768
[  152.785346][T11047] syz.0.917: attempt to access beyond end of device
[  152.785346][T11047] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64
[  152.790925][T11047] Buffer I/O error on dev loop0, logical block 512, async page read
[  152.798096][T11029] bcachefs (/dev/loop4): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 1497488896)
[  152.811260][T11029] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  152.816890][T11047] syz.0.917: attempt to access beyond end of device
[  152.816890][T11047] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64
[  152.841295][T11047] Buffer I/O error on dev loop0, logical block 56576, async page read
[  153.098259][T11071] netlink: 'syz.0.921': attribute type 30 has an invalid length.
[  153.448310][T11078] loop0: detected capacity change from 0 to 32768
[  153.504038][T11078] JBD2: Ignoring recovery information on journal
[  153.537263][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'.
[  153.551741][T11078] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  153.599961][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  153.706020][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'.
[  153.774524][T11115] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.790244][T11115] bond0: (slave rose0): Enslaving as an active interface with an up link
[  154.522790][T11156] loop0: detected capacity change from 0 to 256
[  154.557055][T11156] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  154.638769][T11167] dlm: Unknown command passed to DLM device : 11
[  154.638769][T11167] 
[  154.711943][T11175] loop4: detected capacity change from 0 to 512
[  154.725299][T11175] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  154.750484][T11175] EXT4-fs (loop4): 1 truncate cleaned up
[  154.866013][T11175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.256036][T11195] loop3: detected capacity change from 0 to 1024
[  155.285209][T11195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.348881][ T9838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.522126][T11175] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  155.536864][T11175] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  155.574648][T11175] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  155.587573][T11175] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  155.592582][T11175] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  155.597976][T11175] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  155.635625][T11175] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  155.653665][T11175] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  155.753139][T10099] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  155.930615][T11220] loop3: detected capacity change from 0 to 1024
[  155.977551][T11220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.062099][T10099] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.163572][ T9838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.226729][ T5870] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.428425][ T5870] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.539476][ T5870] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.636117][ T5870] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.831866][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  156.836853][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  156.851807][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  156.864992][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  156.874681][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  156.893312][ T5870] bridge_slave_1: left allmulticast mode
[  156.912550][ T5870] bridge_slave_1: left promiscuous mode
[  156.915158][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.924296][ T5870] bridge_slave_0: left allmulticast mode
[  156.927431][ T5870] bridge_slave_0: left promiscuous mode
[  156.930095][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.034309][T11235] loop3: detected capacity change from 0 to 32768
[  157.051613][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  157.111070][T11235] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  157.177684][ T9838] (syz-executor,9838,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  157.193487][ T9838] ocfs2: Unmounting device (7,3) on (node local)
[  157.315455][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.325075][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.330485][ T5870] bond0 (unregistering): Released all slaves
[  157.612686][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  157.726408][ T5870] hsr_slave_0: left promiscuous mode
[  157.729656][ T5870] hsr_slave_1: left promiscuous mode
[  157.738758][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.744409][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.758331][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.780517][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.845528][ T5870] veth1_macvtap: left promiscuous mode
[  157.866192][ T5870] veth0_macvtap: left promiscuous mode
[  157.871038][ T5870] veth1_vlan: left promiscuous mode
[  157.887576][ T5870] veth0_vlan: left promiscuous mode
[  158.619103][ T5870] team0 (unregistering): Port device team_slave_1 removed
[  158.689014][ T5870] team0 (unregistering): Port device team_slave_0 removed
[  158.974267][   T54] Bluetooth: hci0: command tx timeout
[  159.141708][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  159.598659][T11246] chnl_net:caif_netlink_parms(): no params data found
[  159.691707][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  160.247397][T11246] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.256528][T11246] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.262591][T11246] bridge_slave_0: entered allmulticast mode
[  160.272420][T11246] bridge_slave_0: entered promiscuous mode
[  160.287096][T11246] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.298992][T11246] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.312938][T11246] bridge_slave_1: entered allmulticast mode
[  160.319484][T11246] bridge_slave_1: entered promiscuous mode
[  160.462543][T11246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.493956][T11246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.697753][T11246] team0: Port device team_slave_0 added
[  160.709734][T11246] team0: Port device team_slave_1 added
[  160.900058][T11246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.921560][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.951550][T11246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.960955][T11246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.964901][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.988787][T11246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.051701][   T54] Bluetooth: hci0: command tx timeout
[  161.212028][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  161.242687][T11565] loop3: detected capacity change from 0 to 32768
[  161.257256][T11246] hsr_slave_0: entered promiscuous mode
[  161.278044][T11246] hsr_slave_1: entered promiscuous mode
[  161.308844][T11565] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  161.409234][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'.
[  161.413806][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.972'.
[  161.417713][T11563] 
[  161.418619][T11563] ======================================================
[  161.421499][T11563] WARNING: possible circular locking dependency detected
[  161.424368][T11563] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  161.427799][T11563] ------------------------------------------------------
[  161.430552][T11563] syz.3.971/11563 is trying to acquire lock:
[  161.432600][T11563] ffff88811c456be0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_page_mkwrite+0x2ff/0xc40
[  161.436529][T11563] 
[  161.436529][T11563] but task is already holding lock:
[  161.439050][T11563] ffff88811ad84520 (sb_pagefaults#3){.+.+}-{0:0}, at: do_page_mkwrite+0x14d/0x310
[  161.442141][T11563] 
[  161.442141][T11563] which lock already depends on the new lock.
[  161.442141][T11563] 
[  161.445536][T11563] 
[  161.445536][T11563] the existing dependency chain (in reverse order) is:
[  161.448412][T11563] 
[  161.448412][T11563] -> #2 (sb_pagefaults#3){.+.+}-{0:0}:
[  161.450964][T11563]        lock_acquire+0x120/0x360
[  161.452746][T11563]        ocfs2_page_mkwrite+0x1da/0xc40
[  161.454853][T11563]        do_page_mkwrite+0x14d/0x310
[  161.456904][T11563]        do_wp_page+0x268d/0x5800
[  161.458769][T11563]        __handle_mm_fault+0x1033/0x5440
[  161.460950][T11563]        handle_mm_fault+0x40a/0x8e0
[  161.462993][T11563]        do_user_addr_fault+0x764/0x1390
[  161.464967][T11563]        exc_page_fault+0x76/0xf0
[  161.466721][T11563]        asm_exc_page_fault+0x26/0x30
[  161.468523][T11563] 
[  161.468523][T11563] -> #1 (&mm->mmap_lock){++++}-{4:4}:
[  161.471002][T11563]        lock_acquire+0x120/0x360
[  161.472754][T11563]        __might_fault+0xcc/0x130
[  161.474833][T11563]        _copy_to_user+0x2c/0xb0
[  161.476637][T11563]        fiemap_fill_next_extent+0x1c0/0x390
[  161.478699][T11563]        ocfs2_fiemap+0x9dc/0xc90
[  161.480410][T11563]        do_vfs_ioctl+0x1173/0x1430
[  161.482174][T11563]        __se_sys_ioctl+0x82/0x170
[  161.483954][T11563]        do_syscall_64+0xfa/0x3b0
[  161.485857][T11563]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.488033][T11563] 
[  161.488033][T11563] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  161.490976][T11563]        validate_chain+0xb9b/0x2140
[  161.492786][T11563]        __lock_acquire+0xab9/0xd20
[  161.494800][T11563]        lock_acquire+0x120/0x360
[  161.496801][T11563]        down_write+0x96/0x1f0
[  161.498607][T11563]        ocfs2_page_mkwrite+0x2ff/0xc40
[  161.500560][T11563]        do_page_mkwrite+0x14d/0x310
[  161.502374][T11563]        do_wp_page+0x268d/0x5800
[  161.504318][T11563]        __handle_mm_fault+0x1033/0x5440
[  161.506295][T11563]        handle_mm_fault+0x40a/0x8e0
[  161.508250][T11563]        do_user_addr_fault+0x764/0x1390
[  161.510091][T11563]        exc_page_fault+0x76/0xf0
[  161.511930][T11563]        asm_exc_page_fault+0x26/0x30
[  161.513823][T11563] 
[  161.513823][T11563] other info that might help us debug this:
[  161.513823][T11563] 
[  161.517312][T11563] Chain exists of:
[  161.517312][T11563]   &ocfs2_file_ip_alloc_sem_key --> &mm->mmap_lock --> sb_pagefaults#3
[  161.517312][T11563] 
[  161.522899][T11563]  Possible unsafe locking scenario:
[  161.522899][T11563] 
[  161.525430][T11563]        CPU0                    CPU1
[  161.527208][T11563]        ----                    ----
[  161.529291][T11563]   rlock(sb_pagefaults#3);
[  161.531185][T11563]                                lock(&mm->mmap_lock);
[  161.533467][T11563]                                lock(sb_pagefaults#3);
[  161.535713][T11563]   lock(&ocfs2_file_ip_alloc_sem_key);
[  161.537557][T11563] 
[  161.537557][T11563]  *** DEADLOCK ***
[  161.537557][T11563] 
[  161.540224][T11563] 2 locks held by syz.3.971/11563:
[  161.541926][T11563]  #0: ffff888108424260 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x32/0x300
[  161.545150][T11563]  #1: ffff88811ad84520 (sb_pagefaults#3){.+.+}-{0:0}, at: do_page_mkwrite+0x14d/0x310
[  161.548290][T11563] 
[  161.548290][T11563] stack backtrace:
[  161.550222][T11563] CPU: 1 UID: 0 PID: 11563 Comm: syz.3.971 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  161.550233][T11563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.550238][T11563] Call Trace:
[  161.550243][T11563]  <TASK>
[  161.550247][T11563]  dump_stack_lvl+0x189/0x250
[  161.550258][T11563]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.550266][T11563]  ? __pfx__printk+0x10/0x10
[  161.550276][T11563]  ? print_lock_name+0xde/0x100
[  161.550285][T11563]  print_circular_bug+0x2ee/0x310
[  161.550294][T11563]  check_noncircular+0x134/0x160
[  161.550302][T11563]  validate_chain+0xb9b/0x2140
[  161.550310][T11563]  ? do_raw_spin_unlock+0x4d/0x240
[  161.550320][T11563]  __lock_acquire+0xab9/0xd20
[  161.550330][T11563]  ? ocfs2_page_mkwrite+0x2ff/0xc40
[  161.550358][T11563]  lock_acquire+0x120/0x360
[  161.550369][T11563]  ? ocfs2_page_mkwrite+0x2ff/0xc40
[  161.550378][T11563]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.550388][T11563]  ? sigprocmask+0x15d/0x1a0
[  161.550396][T11563]  down_write+0x96/0x1f0
[  161.550406][T11563]  ? ocfs2_page_mkwrite+0x2ff/0xc40
[  161.550415][T11563]  ? __pfx_down_write+0x10/0x10
[  161.550425][T11563]  ocfs2_page_mkwrite+0x2ff/0xc40
[  161.550435][T11563]  ? do_page_mkwrite+0x14d/0x310
[  161.550444][T11563]  ? __pfx_ocfs2_page_mkwrite+0x10/0x10
[  161.550453][T11563]  ? __lock_acquire+0xab9/0xd20
[  161.550463][T11563]  ? page_table_check_set+0x18d/0x730
[  161.550476][T11563]  do_page_mkwrite+0x14d/0x310
[  161.550486][T11563]  do_wp_page+0x268d/0x5800
[  161.550498][T11563]  ? __pfx_do_wp_page+0x10/0x10
[  161.550506][T11563]  ? do_raw_spin_lock+0x121/0x290
[  161.550513][T11563]  ? __handle_mm_fault+0xf87/0x5440
[  161.550522][T11563]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  161.550531][T11563]  __handle_mm_fault+0x1033/0x5440
[  161.550542][T11563]  ? __pfx___handle_mm_fault+0x10/0x10
[  161.550553][T11563]  ? find_vma+0xe7/0x160
[  161.550561][T11563]  ? __pfx_find_vma+0x10/0x10
[  161.550569][T11563]  handle_mm_fault+0x40a/0x8e0
[  161.550579][T11563]  do_user_addr_fault+0x764/0x1390
[  161.550592][T11563]  exc_page_fault+0x76/0xf0
[  161.550600][T11563]  asm_exc_page_fault+0x26/0x30
[  161.550607][T11563] RIP: 0033:0x7fc2b65588d8
[  161.550615][T11563] Code: 10 8a 0e 74 0a 0f b7 74 16 fe 66 89 74 17 fe 88 0f c3 8b 4c 16 fc 8b 36 89 4c 17 fc 89 37 c3 0f 1f 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 0f 10 54 16 f0 0f 10 5c 16 e0 0f 11 07
[  161.550621][T11563] RSP: 002b:00007ffca0136c78 EFLAGS: 00010246
[  161.550628][T11563] RAX: 0000200000000900 RBX: 0000000000000004 RCX: 0031656c69662f2e
[  161.550634][T11563] RDX: 0000000000000008 RSI: 0031656c69662f2e RDI: 0000200000000900
[  161.550638][T11563] RBP: 00007fc2b67b7da0 R08: 0000001b32120000 R09: 0000000000000001
[  161.550643][T11563] R10: 0000000000000001 R11: 0000000000000009 R12: 00007fc2b67b5fac
[  161.550647][T11563] R13: 00007fc2b67b5fa0 R14: fffffffffffffffe R15: 00007ffca0136d90
[  161.550655][T11563]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  161.765145][ T9838] ocfs2: Unmounting device (7,3) on (node local)
[  161.771751][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  162.026479][ T5870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.055660][ T5870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.096224][ T5870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.142433][ T5870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.215672][ T5870] bridge_slave_1: left allmulticast mode
[  162.218863][ T5870] bridge_slave_1: left promiscuous mode
[  162.221394][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.227082][ T5870] bridge_slave_0: left allmulticast mode
[  162.229510][ T5870] bridge_slave_0: left promiscuous mode
[  162.233294][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.287536][ T5870] dvmrp1 (unregistering): left allmulticast mode
[  162.376812][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.381744][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.385809][ T5870] bond0 (unregistering): Released all slaves
[  162.593221][ T5870] hsr_slave_0: left promiscuous mode
[  162.595368][ T5870] hsr_slave_1: left promiscuous mode
[  162.597286][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.599798][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.604543][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.606995][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.612537][ T5870] veth1_macvtap: left promiscuous mode
[  162.614699][ T5870] veth0_macvtap: left promiscuous mode
[  162.616498][ T5870] veth1_vlan: left promiscuous mode
[  162.618363][ T5870] veth0_vlan: left promiscuous mode
[  162.752490][ T5870] team0 (unregistering): Port device team_slave_1 removed
[  162.766821][ T5870] team0 (unregistering): Port device team_slave_0 removed
[  163.065111][ T5870] ------------[ cut here ]------------
[  163.067895][ T5870] WARNING: CPU: 1 PID: 5870 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  163.072042][ T5870] Modules linked in:
[  163.073799][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  163.079079][ T5870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.083710][ T5870] Workqueue: netns cleanup_net
[  163.085831][ T5870] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  163.088255][ T5870] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 08 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 9d e2 f7 e8 51 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 43 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  163.096759][ T5870] RSP: 0018:ffffc9000489f898 EFLAGS: 00010293
[  163.099302][ T5870] RAX: ffffffff8a21365f RBX: ffff88810feda440 RCX: ffff88801ff81cc0
[  163.102838][ T5870] RDX: 0000000000000000 RSI: ffffffff8be325e0 RDI: ffff88801ff81cc0
[  163.106207][ T5870] RBP: ffffc9000489f9b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  163.109576][ T5870] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  163.113087][ T5870] R13: 1ffff92000913f40 R14: ffff88810fedb8c0 R15: dffffc0000000000
[  163.116301][ T5870] FS:  0000000000000000(0000) GS:ffff8881a3c24000(0000) knlGS:0000000000000000
[  163.119923][ T5870] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.122689][ T5870] CR2: 000055a5442a1950 CR3: 0000000023118000 CR4: 00000000000006f0
[  163.126064][ T5870] Call Trace:
[  163.127545][ T5870]  <TASK>
[  163.128815][ T5870]  xfrm_net_exit+0x2d/0x70
[  163.130752][ T5870]  ops_undo_list+0x49a/0x990
[  163.132923][ T5870]  ? __pfx_ops_undo_list+0x10/0x10
[  163.135177][ T5870]  ? do_raw_spin_unlock+0x4d/0x240
[  163.137435][ T5870]  cleanup_net+0x4c5/0x800
[  163.139324][ T5870]  ? __pfx_cleanup_net+0x10/0x10
[  163.141515][ T5870]  ? rcu_is_watching+0x15/0xb0
[  163.143506][ T5870]  ? process_scheduled_works+0x9ef/0x17b0
[  163.145895][ T5870]  ? process_scheduled_works+0x9ef/0x17b0
[  163.148309][ T5870]  process_scheduled_works+0xae1/0x17b0
[  163.150580][ T5870]  ? __pfx_process_scheduled_works+0x10/0x10
[  163.153375][ T5870]  worker_thread+0x8a0/0xda0
[  163.155274][ T5870]  kthread+0x711/0x8a0
[  163.157044][ T5870]  ? __pfx_worker_thread+0x10/0x10
[  163.159240][ T5870]  ? __pfx_kthread+0x10/0x10
[  163.161230][ T5870]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.163747][ T5870]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.165937][ T5870]  ? __pfx_kthread+0x10/0x10
[  163.167940][ T5870]  ret_from_fork+0x3fc/0x770
[  163.169887][ T5870]  ? __pfx_ret_from_fork+0x10/0x10
[  163.171972][ T5870]  ? __switch_to_asm+0x39/0x70
[  163.173857][ T5870]  ? __switch_to_asm+0x33/0x70
[  163.175946][ T5870]  ? __pfx_kthread+0x10/0x10
[  163.177732][ T5870]  ret_from_fork_asm+0x1a/0x30
[  163.179707][ T5870]  </TASK>
[  163.180787][ T5870] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  163.183263][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  163.187225][ T5870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.190854][ T5870] Workqueue: netns cleanup_net
[  163.192936][ T5870] Call Trace:
[  163.194375][ T5870]  <TASK>
[  163.195649][ T5870]  dump_stack_lvl+0x99/0x250
[  163.197621][ T5870]  ? __asan_memcpy+0x40/0x70
[  163.199647][ T5870]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.201920][ T5870]  ? __pfx__printk+0x10/0x10
[  163.203913][ T5870]  vpanic+0x281/0x750
[  163.205649][ T5870]  ? __pfx__printk+0x10/0x10
[  163.207687][ T5870]  ? __pfx_vpanic+0x10/0x10
[  163.209718][ T5870]  ? is_bpf_text_address+0x292/0x2b0
[  163.211943][ T5870]  panic+0xb9/0xc0
[  163.213498][ T5870]  ? __pfx_panic+0x10/0x10
[  163.215369][ T5870]  __warn+0x31b/0x4b0
[  163.217100][ T5870]  ? xfrm_state_fini+0x270/0x2f0
[  163.219260][ T5870]  ? xfrm_state_fini+0x270/0x2f0
[  163.221365][ T5870]  report_bug+0x2be/0x4f0
[  163.223249][ T5870]  ? xfrm_state_fini+0x270/0x2f0
[  163.225301][ T5870]  ? xfrm_state_fini+0x270/0x2f0
[  163.227362][ T5870]  ? xfrm_state_fini+0x272/0x2f0
[  163.229451][ T5870]  handle_bug+0x84/0x160
[  163.231244][ T5870]  exc_invalid_op+0x1a/0x50
[  163.233177][ T5870]  asm_exc_invalid_op+0x1a/0x20
[  163.235276][ T5870] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  163.237666][ T5870] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 08 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 9d e2 f7 e8 51 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 43 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  163.245645][ T5870] RSP: 0018:ffffc9000489f898 EFLAGS: 00010293
[  163.248217][ T5870] RAX: ffffffff8a21365f RBX: ffff88810feda440 RCX: ffff88801ff81cc0
[  163.251548][ T5870] RDX: 0000000000000000 RSI: ffffffff8be325e0 RDI: ffff88801ff81cc0
[  163.254885][ T5870] RBP: ffffc9000489f9b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  163.258212][ T5870] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  163.261521][ T5870] R13: 1ffff92000913f40 R14: ffff88810fedb8c0 R15: dffffc0000000000
[  163.264838][ T5870]  ? xfrm_state_fini+0x26f/0x2f0
[  163.266962][ T5870]  ? xfrm_state_fini+0x26f/0x2f0
[  163.269051][ T5870]  xfrm_net_exit+0x2d/0x70
[  163.270953][ T5870]  ops_undo_list+0x49a/0x990
[  163.272962][ T5870]  ? __pfx_ops_undo_list+0x10/0x10
[  163.275150][ T5870]  ? do_raw_spin_unlock+0x4d/0x240
[  163.277331][ T5870]  cleanup_net+0x4c5/0x800
[  163.279265][ T5870]  ? __pfx_cleanup_net+0x10/0x10
[  163.281415][ T5870]  ? rcu_is_watching+0x15/0xb0
[  163.283504][ T5870]  ? process_scheduled_works+0x9ef/0x17b0
[  163.285919][ T5870]  ? process_scheduled_works+0x9ef/0x17b0
[  163.288395][ T5870]  process_scheduled_works+0xae1/0x17b0
[  163.290748][ T5870]  ? __pfx_process_scheduled_works+0x10/0x10
[  163.293294][ T5870]  worker_thread+0x8a0/0xda0
[  163.295244][ T5870]  kthread+0x711/0x8a0
[  163.296948][ T5870]  ? __pfx_worker_thread+0x10/0x10
[  163.299043][ T5870]  ? __pfx_kthread+0x10/0x10
[  163.300613][ T5870]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.302753][ T5870]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.304482][ T5870]  ? __pfx_kthread+0x10/0x10
[  163.306160][ T5870]  ret_from_fork+0x3fc/0x770
[  163.308021][ T5870]  ? __pfx_ret_from_fork+0x10/0x10
[  163.309686][ T5870]  ? __switch_to_asm+0x39/0x70
[  163.311700][ T5870]  ? __switch_to_asm+0x33/0x70
[  163.313689][ T5870]  ? __pfx_kthread+0x10/0x10
[  163.315516][ T5870]  ret_from_fork_asm+0x1a/0x30
[  163.317495][ T5870]  </TASK>
[  163.319278][ T5870] Kernel Offset: disabled
[  163.320693][ T5870] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:30:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff90376601 RCX=ffffc9000ab26408 RDX=ffffc9000ab26301
RSI=ffffffff8172c195 RDI=ffffffff8e139ee0 RBP=dffffc0000000000 RSP=ffffc9000ab26190
R8 =ffffc9000ab263f0 R9 =0000000000000000 R10=ffffc9000ab26318 R11=fffff52001564c65
R12=ffffc9000ab26400 R13=ffffffff8172c195 R14=ffffffff8e139ee0 R15=ffffffff8172c195
RIP=ffffffff819d6c36 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558fd75500 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005626d7044000 CR3=00000001144a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f076b987498 00007f076b987470 XMM03=00007f076b9874a8 00007f076b9874a0
XMM04=00007f076c4ed100 00007f076b987460 XMM05=00007f076b987478 00007f076b9874c0
XMM06=00007f076b9874b8 00007f076b9874b0 XMM07=00007f076b9874a8 00007f076b9874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f076b812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f9 RSP=ffffc900064a6e30
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557704f500 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000900 CR3=00000001099c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=00007fc2b6787498 ffffffff8133c57e XMM03=00007fc2b67874a8 00007fc2b67874a0
XMM04=00007fc2b72ed100 00007fc2b6787460 XMM05=00007fc2b6787478 00007fc2b67874c0
XMM06=00007fc2b67874b8 00007fc2b67874b0 XMM07=00007fc2b67874a8 00007fc2b67874a0
XMM08=0000000000000000 00000000006df451 XMM09=0000000000000000 00007fc2b6612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
