last executing test programs:

1m52.848000913s ago: executing program 2 (id=306):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

1m52.426788681s ago: executing program 2 (id=312):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)

1m52.369710732s ago: executing program 2 (id=313):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0xa, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x20}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)

1m52.269737838s ago: executing program 2 (id=315):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200010e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@data_journal}, {@test_dummy_encryption}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

1m52.170043771s ago: executing program 2 (id=316):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="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", 0xed1, 0x4008841, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1m51.816780514s ago: executing program 2 (id=319):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0)

1m51.656777646s ago: executing program 32 (id=319):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0)

1m16.273689947s ago: executing program 1 (id=686):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300ff010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x2f, 0xfffffffffffffe7e, 0x1d4}, 0x28)

1m16.273363956s ago: executing program 1 (id=687):
io_setup(0x2278, &(0x7f0000000180)=<r0=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7, 0x2, r1, 0x0, 0x0, 0x0, 0xfefdffff}])

1m16.134598233s ago: executing program 1 (id=688):
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000640)=""/8, 0x8}, 0x10100)

1m16.134424247s ago: executing program 1 (id=689):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

1m16.054548988s ago: executing program 1 (id=690):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

1m15.920407892s ago: executing program 1 (id=691):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0)

1m15.823163816s ago: executing program 33 (id=691):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0)

3.498047786s ago: executing program 0 (id=1561):
syz_usb_connect(0x5, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d02010205240503"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

2.275506595s ago: executing program 4 (id=1572):
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797ab1000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000141400000011000f"], 0x64}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.603819132s ago: executing program 3 (id=1573):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1)

1.332849148s ago: executing program 4 (id=1574):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b4, &(0x7f0000000600)="$eJzs3b9rO2UYAPDn0jQJCiaCkwge6OD05duuLinSQjGTkkEdtNgWpAlCCwV/YOzk6uKmq4sguPlPuPgfCK6Cmx0KJ5e7a5KaxkSb1h+fz9K37z3P+z7vNdfSIU/eeW54cpjG8cXHP0WrlUStG924TKITtah8GjO6nwcA8G92mWXxa1ZYJS+JiNb6ygIA1mjlv//frb0kAGDNXn/jzVd3er3d19K0FXvDz877+X/2+dfi+s5xvBeDOIrH0Y6riOxaMd7LsmxUT3OdeHE4Ou/nmcO3fyjX3/klYpy/Fe3ojKdm8/d7u1tpYSp/lNfxRLl/N8/fjnY8M2f//d7u9pz86DfipRem6n8U7fjx3Xg/BnE4LqLIj1rEJ1tp+kr2xW8fvZWXl+cno/N+cxw3kW3c848GAAAAAAAAAAAAAAAAAAAAAID/sEdl75xmjPv35FNl/52Nq/ybzUgrndn+PEV+Ui10oz/QKIuvqv48j9M0zcrASX49nq1H/WFODQAAAAAAAAAAAAAAAAAAAP8sZx98eHIwGByd3smg6gZQva3/r67TnZp5PhYHNyd71crhgpVjo4pJIhaWkR9iiVKr7Yu2B6ud9Msotnj6tpq/+XbpBb/+87OXg80lYv7moHp1nRwk8+9hM6qZVvUi+X46phFL7tW45dJTZQVL1tyYe6m98tkbT44HowUxkSx6Ll7+uai7nEluPkSN8V2dm75ZDqbSZ2Nay96N4kn5g+S6W0dyN798AAAAAAAAAAAAAAAAAACAGZM3/c65eLEwtZY111YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyryef/rzAYlclLBDfi9OyBjwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wO8BAAD//3tlWs8=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0)
write$eventfd(r1, &(0x7f0000000240), 0xffffff14)

910.32161ms ago: executing program 3 (id=1575):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x80)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes128, 0x3, @desc4})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @adiantum, 0x1, '\x00', @c})

827.102979ms ago: executing program 3 (id=1576):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x241, 0x1, 0x0, 0xdd9f83, 0x8, 0x9, 0x1, 0x2, 0x8, 0x722, 0x13, 0x7, 0x7f, 0x3e, 0xb763599953cb091f, {0x0, 0x6fd8e848}, 0x3, 0xed}})

725.758152ms ago: executing program 3 (id=1577):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ff00000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

725.479535ms ago: executing program 3 (id=1578):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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")
lsetxattr$security_ima(&(0x7f0000000280)='.\x00', &(0x7f00000002c0), &(0x7f0000000300)=ANY=[], 0xc, 0x1)

528.182145ms ago: executing program 3 (id=1579):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
r1 = epoll_create1(0x0)
ppoll(&(0x7f0000000040)=[{r0}, {r1, 0xbaf03d8f7cf92877}], 0x2, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xc0000008})
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000140))

202.408561ms ago: executing program 0 (id=1580):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x14, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94)

193.735495ms ago: executing program 4 (id=1581):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)

116.073696ms ago: executing program 0 (id=1582):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES32], 0x1, 0x5b9, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)

115.606681ms ago: executing program 4 (id=1583):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)

52.49531ms ago: executing program 0 (id=1584):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x6, @sliced={0xc4b1, [0x9, 0x4, 0x7, 0x6, 0x7ff, 0x9, 0x72, 0x8, 0x2, 0xea4, 0xffff, 0x4, 0x9, 0x4, 0xe, 0x6, 0x4, 0x4, 0xe07, 0xfff, 0x7, 0x5, 0x101, 0x8001, 0xd232, 0x8000, 0x7ff, 0x8001, 0x5, 0xffff, 0x7f, 0x8, 0x1, 0x100, 0x8, 0x5, 0xeea9, 0x5, 0x8, 0x0, 0xe1b, 0x40, 0x6, 0xaf, 0x7, 0x9db7, 0x0, 0x9994], 0x1}})

51.968105ms ago: executing program 4 (id=1585):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000680)=@ethtool_perm_addr={0x33}})

51.7695ms ago: executing program 0 (id=1586):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4df9}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}}, 0x0)

51.598504ms ago: executing program 4 (id=1587):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002200)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=1588):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)

kernel console output (not intermixed with test programs):

1363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  121.966015][ T7273] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  121.972269][ T5896] usb 1-1: config 0 descriptor??
[  121.992436][ T7273] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  122.004846][ T7273] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  122.076607][ T7273] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  122.096465][ T7273] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  122.115834][ T7273] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  122.119698][ T7273] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  122.164618][ T7273] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  122.188433][ T5896] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  122.190841][ T5896] usb 1-1: No valid video chain found.
[  122.205424][ T5896] usb 1-1: USB disconnect, device number 15
[  122.238590][ T5842] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  122.241059][ T5842] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  122.243864][ T5842] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  122.253662][ T5842] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3
[  122.279123][ T5842] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 4
[  122.285038][ T5842] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 5
[  122.288773][ T5842] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  122.304001][ T5842] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  122.700892][  T793] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  122.705949][  T793] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  122.712877][  T793] usb 4-1: USB disconnect, device number 5
[  123.862709][ T7304] pimreg: entered allmulticast mode
[  124.338642][ T7326] loop1: detected capacity change from 0 to 512
[  124.344178][ T7326] EXT4-fs: Ignoring removed orlov option
[  124.349362][ T7326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  124.359876][ T7326] EXT4-fs (loop1): orphan cleanup on readonly fs
[  124.367702][ T7326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.532: bg 0: block 248: padding at end of block bitmap is not set
[  124.388014][ T7326] Quota error (device loop1): write_blk: dquota write failed
[  124.391532][ T7326] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  124.397032][ T7326] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.532: Failed to acquire dquot type 1
[  124.404822][ T7326] EXT4-fs (loop1): 1 truncate cleaned up
[  124.412421][ T7326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  124.487383][ T7326] EXT4-fs: Ignoring removed orlov option
[  124.490508][ T7326] EXT4-fs: can't change dax mount option while remounting
[  124.558947][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.189579][ T7340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'.
[  125.204214][ T7340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'.
[  125.303443][ T7343] input: syz1 as /devices/virtual/input/input6
[  126.513149][ T7354] usb usb8: usbfs: process 7354 (syz.3.543) did not claim interface 0 before use
[  126.759677][ T7371] loop3: detected capacity change from 0 to 512
[  126.762928][ T7371] EXT4-fs: Ignoring removed nobh option
[  126.771706][ T7371] EXT4-fs (loop3): Test dummy encryption mode enabled
[  126.795208][ T7371] EXT4-fs error (device loop3): __ext4_iget:5464: inode #11: block 1: comm syz.3.552: invalid block
[  126.801766][ T7371] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.552: couldn't read orphan inode 11 (err -117)
[  126.810397][ T7371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.824939][ T7371] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.863846][ T7371] loop3: detected capacity change from 0 to 128
[  126.871429][ T7371] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  126.877354][ T7371] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.963037][ T7379] loop0: detected capacity change from 0 to 4096
[  127.042790][ T7379] ntfs3(loop0): ino=9, attr_set_size
[  127.103718][ T7386] loop3: detected capacity change from 0 to 128
[  127.125800][ T7386] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  127.131043][ T7386] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.156610][ T7389] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  127.160850][ T7386] syz.3.558 (pid 7386) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  127.252596][ T7386] fscrypt: Adiantum using implementation "adiantum(xchacha12-generic,aes-fixed-time,nhpoly1305-sse2)"
[  127.292769][ T6720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  127.855332][ T7413] loop1: detected capacity change from 0 to 4096
[  127.864680][ T7413] ntfs3(loop1): ino=3, Correct links count -> 2.
[  127.912266][ T7413] ntfs3(loop1): ino=1a, mi_enum_attr
[  127.914195][ T7413] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  127.923134][ T7413] ntfs3(loop1): Failed to load root (-22).
[  127.924485][ T7398] loop0: detected capacity change from 0 to 32768
[  128.002223][ T7398] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.063940][ T7398] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  128.093104][ T7398] XFS (loop0): Starting recovery (logdev: internal)
[  128.160400][ T7398] XFS (loop0): Ending recovery (logdev: internal)
[  128.229437][ T5846] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.946759][ T7432] capability: warning: `syz.0.574' uses 32-bit capabilities (legacy support in use)
[  129.270287][ T7438] loop0: detected capacity change from 0 to 32768
[  129.280037][ T7438] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.576 (7438)
[  129.303417][ T7438] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.307600][ T7438] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  129.311437][ T7438] BTRFS info (device loop0): disk space caching is enabled
[  129.314257][ T7438] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  129.330492][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.581'.
[  129.421752][ T7446] nbd: socks must be embedded in a SOCK_ITEM attr
[  129.472197][ T7440] loop1: detected capacity change from 0 to 40427
[  129.477959][ T7440] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  129.480242][ T7440] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  129.485649][ T7438] BTRFS info (device loop0): rebuilding free space tree
[  129.488925][ T7440] F2FS-fs (loop1): invalid crc value
[  129.511640][ T7438] BTRFS info (device loop0): disabling free space tree
[  129.514472][ T7438] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.518553][ T7438] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  129.643914][ T7440] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.701008][ T7440] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  129.703825][ T7440] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  129.732941][ T7468] BTRFS info (device loop0 state M): max_inline set to 4096
[  129.845765][ T5842] syz-executor: attempt to access beyond end of device
[  129.845765][ T5842] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  129.852375][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  129.852396][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.852405][ T5842] Call Trace:
[  129.852411][ T5842]  <TASK>
[  129.852418][ T5842]  dump_stack_lvl+0x189/0x250
[  129.852445][ T5842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.852462][ T5842]  ? __pfx_queue_work_on+0x10/0x10
[  129.852476][ T5842]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.852494][ T5842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.852519][ T5842]  f2fs_handle_critical_error+0x37c/0x540
[  129.852546][ T5842]  f2fs_write_end_io+0x886/0xb60
[  129.852583][ T5842]  __submit_merged_bio+0x27a/0x6a0
[  129.852605][ T5842]  __submit_merged_write_cond+0x255/0x530
[  129.852629][ T5842]  f2fs_write_data_pages+0x261d/0x3000
[  129.852680][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.852741][ T5842]  ? __mod_zone_page_state+0xd7/0x140
[  129.852786][ T5842]  ? folios_put_refs+0x560/0x640
[  129.852812][ T5842]  ? __lock_acquire+0xab9/0xd20
[  129.852842][ T5842]  ? do_raw_spin_lock+0x121/0x290
[  129.852868][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  129.852885][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.852904][ T5842]  do_writepages+0x32e/0x550
[  129.852934][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  129.852982][ T5842]  filemap_fdatawrite+0x199/0x240
[  129.853002][ T5842]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  129.853063][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  129.853083][ T5842]  f2fs_sync_dirty_inodes+0x31f/0x830
[  129.853119][ T5842]  f2fs_write_checkpoint+0x95a/0x1df0
[  129.853161][ T5842]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.853225][ T5842]  ? kill_f2fs_super+0x298/0x6c0
[  129.853250][ T5842]  kill_f2fs_super+0x2c3/0x6c0
[  129.853276][ T5842]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.853292][ T5842]  ? radix_tree_delete_item+0x2b6/0x400
[  129.853316][ T5842]  ? shrinker_free+0x2ce/0x3e0
[  129.853335][ T5842]  deactivate_locked_super+0xbc/0x130
[  129.853355][ T5842]  cleanup_mnt+0x425/0x4c0
[  129.853371][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.853391][ T5842]  task_work_run+0x1d4/0x260
[  129.853413][ T5842]  ? __pfx_task_work_run+0x10/0x10
[  129.853428][ T5842]  ? __x64_sys_umount+0x122/0x160
[  129.853451][ T5842]  ? exit_to_user_mode_loop+0x40/0x110
[  129.853474][ T5842]  exit_to_user_mode_loop+0xec/0x110
[  129.853494][ T5842]  do_syscall_64+0x2bd/0x3b0
[  129.853509][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.853524][ T5842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.853538][ T5842]  ? exc_page_fault+0x9f/0xf0
[  129.853556][ T5842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.853568][ T5842] RIP: 0033:0x7f8db438ff17
[  129.853582][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.853593][ T5842] RSP: 002b:00007fff42acc9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.853608][ T5842] RAX: 0000000000000000 RBX: 00007f8db4411c05 RCX: 00007f8db438ff17
[  129.853617][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff42accab0
[  129.853625][ T5842] RBP: 00007fff42accab0 R08: 0000000000000000 R09: 0000000000000000
[  129.853633][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff42acdb40
[  129.853642][ T5842] R13: 00007f8db4411c05 R14: 000000000001fa99 R15: 00007fff42acdb80
[  129.853668][ T5842]  </TASK>
[  129.856275][ T5842] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  130.009223][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  130.009246][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.009255][ T5842] Call Trace:
[  130.009260][ T5842]  <TASK>
[  130.009268][ T5842]  dump_stack_lvl+0x189/0x250
[  130.009293][ T5842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.009310][ T5842]  ? __pfx_queue_work_on+0x10/0x10
[  130.009324][ T5842]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  130.009340][ T5842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.009366][ T5842]  f2fs_handle_critical_error+0x37c/0x540
[  130.009392][ T5842]  f2fs_write_end_io+0x886/0xb60
[  130.009427][ T5842]  __submit_merged_bio+0x27a/0x6a0
[  130.009451][ T5842]  __submit_merged_write_cond+0x255/0x530
[  130.009474][ T5842]  f2fs_write_data_pages+0x261d/0x3000
[  130.009525][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.009584][ T5842]  ? __mod_zone_page_state+0xd7/0x140
[  130.009613][ T5842]  ? folios_put_refs+0x560/0x640
[  130.009641][ T5842]  ? __lock_acquire+0xab9/0xd20
[  130.009669][ T5842]  ? do_raw_spin_lock+0x121/0x290
[  130.009697][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  130.009714][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.009734][ T5842]  do_writepages+0x32e/0x550
[  130.009762][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  130.009783][ T5842]  filemap_fdatawrite+0x199/0x240
[  130.009803][ T5842]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  130.009868][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  130.009889][ T5842]  f2fs_sync_dirty_inodes+0x31f/0x830
[  130.009924][ T5842]  f2fs_write_checkpoint+0x95a/0x1df0
[  130.009995][ T5842]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  130.010060][ T5842]  ? kill_f2fs_super+0x298/0x6c0
[  130.010085][ T5842]  kill_f2fs_super+0x2c3/0x6c0
[  130.010110][ T5842]  ? __pfx_kill_f2fs_super+0x10/0x10
[  130.010127][ T5842]  ? radix_tree_delete_item+0x2b6/0x400
[  130.010150][ T5842]  ? shrinker_free+0x2ce/0x3e0
[  130.010168][ T5842]  deactivate_locked_super+0xbc/0x130
[  130.010187][ T5842]  cleanup_mnt+0x425/0x4c0
[  130.010203][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.010222][ T5842]  task_work_run+0x1d4/0x260
[  130.010244][ T5842]  ? __pfx_task_work_run+0x10/0x10
[  130.010260][ T5842]  ? __x64_sys_umount+0x122/0x160
[  130.010282][ T5842]  ? exit_to_user_mode_loop+0x40/0x110
[  130.010307][ T5842]  exit_to_user_mode_loop+0xec/0x110
[  130.010326][ T5842]  do_syscall_64+0x2bd/0x3b0
[  130.010342][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.010358][ T5842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.010372][ T5842]  ? exc_page_fault+0x9f/0xf0
[  130.010389][ T5842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.010403][ T5842] RIP: 0033:0x7f8db438ff17
[  130.010417][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  130.010428][ T5842] RSP: 002b:00007fff42acc9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  130.010444][ T5842] RAX: 0000000000000000 RBX: 00007f8db4411c05 RCX: 00007f8db438ff17
[  130.010453][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff42accab0
[  130.010461][ T5842] RBP: 00007fff42accab0 R08: 0000000000000000 R09: 0000000000000000
[  130.010470][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff42acdb40
[  130.010478][ T5842] R13: 00007f8db4411c05 R14: 000000000001fa99 R15: 00007fff42acdb80
[  130.010503][ T5842]  </TASK>
[  130.010509][ T5842] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  130.149609][ T5846] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.218310][  T793] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  130.378622][  T793] usb 4-1: Using ep0 maxpacket: 8
[  130.386248][  T793] usb 4-1: config index 0 descriptor too short (expected 19222, got 18)
[  130.389880][  T793] usb 4-1: config 28 has too many interfaces: 241, using maximum allowed: 32
[  130.393399][  T793] usb 4-1: config 28 has 1 interface, different from the descriptor's value: 241
[  130.418540][  T793] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=62.0d
[  130.422436][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.425618][  T793] usb 4-1: Product: syz
[  130.427358][  T793] usb 4-1: Manufacturer: syz
[  130.438289][  T793] usb 4-1: SerialNumber: syz
[  130.482633][ T7483] loop1: detected capacity change from 0 to 1024
[  130.496950][ T7483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.502254][ T7481] loop0: detected capacity change from 0 to 4096
[  130.503403][ T7481] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  130.572060][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.627670][ T7490] ip6erspan0: entered promiscuous mode
[  130.653834][    T9] usb 4-1: USB disconnect, device number 6
[  130.867024][ T7492] loop0: detected capacity change from 0 to 32768
[  130.870761][ T7492] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.592 (7492)
[  130.876553][ T7492] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  130.882103][ T7492] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  130.884939][ T7492] BTRFS info (device loop0): using free-space-tree
[  130.900859][ T1092] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0
[  130.908099][ T7492] BTRFS error (device loop0): failed to load root extent
[  130.911663][ T1090] BTRFS warning (device loop0 state C): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0
[  130.920819][ T7492] BTRFS error (device loop0 state C): failed to load root free space
[  130.925728][ T1092] BTRFS warning (device loop0 state C): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xceda3bc49047826ec4468b88ec74a14d6cd3232f25b2c41331ed48993507590e level 0
[  130.934647][   T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  130.934841][   T36] BTRFS warning (device loop0 state C): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0
[  130.939537][   T55] Bluetooth: hci2: Injecting HCI hardware error event
[  130.950256][ T5845] Bluetooth: hci2: hardware error 0x00
[  130.987618][ T5846] BTRFS info (device loop0 state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  131.241901][ T7524] loop0: detected capacity change from 0 to 1024
[  131.250169][ T7524] hfsplus: bad catalog entry type
[  131.268012][   T53] hfsplus: b-tree write err: -5, ino 4
[  131.617406][ T7542] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000'
[  131.625274][   T33] audit: type=1326 audit(1755078505.132:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.1.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db438ebe9 code=0x7fc00000
[  132.717600][ T7562] netlink: 'syz.3.615': attribute type 4 has an invalid length.
[  132.855370][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.858056][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.018390][ T5845] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  133.234755][ T7587] mmap: syz.3.627 (7587) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  133.299065][ T5917] IPVS: starting estimator thread 0...
[  133.409615][ T7588] IPVS: using max 62 ests per chain, 148800 per kthread
[  133.698389][ T7594] loop3: detected capacity change from 0 to 32768
[  133.705164][ T7594] 
[  133.705164][ T7594]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.705164][ T7594] 
[  133.723242][ T7594] read_mapping_page failed!
[  133.725328][ T7594] ERROR: (device loop3): txCommit: 
[  133.725328][ T7594] 
[  133.753006][   T53] 
[  133.753006][   T53]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.753006][   T53] 
[  133.757618][   T53] 
[  133.757618][   T53]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.757618][   T53] 
[  133.763037][ T6720] 
[  133.763037][ T6720]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.763037][ T6720] 
[  133.768649][  T117] 
[  133.768649][  T117]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.768649][  T117] 
[  133.772958][ T6720] 
[  133.772958][ T6720]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.772958][ T6720] 
[  133.922311][ T7602] loop3: detected capacity change from 0 to 47
[  134.066627][ T7608] pim6reg: entered allmulticast mode
[  134.085078][ T7608] pim6reg: left allmulticast mode
[  134.137778][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'.
[  134.232342][ T7616] loop3: detected capacity change from 0 to 4096
[  134.247146][ T7616] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  134.250867][ T7616] ntfs3(loop3): $Secure::$SDH is corrupted.
[  134.253051][ T7616] ntfs3(loop3): Failed to initialize $Secure (-22).
[  134.398410][ T7634] netlink: 108 bytes leftover after parsing attributes in process `syz.1.649'.
[  134.408571][ T7634] netlink: 108 bytes leftover after parsing attributes in process `syz.1.649'.
[  134.416204][ T7634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.649'.
[  134.428939][ T7634] netlink: 108 bytes leftover after parsing attributes in process `syz.1.649'.
[  134.431891][ T7634] netlink: 108 bytes leftover after parsing attributes in process `syz.1.649'.
[  134.434726][ T7634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.649'.
[  135.258645][  T976] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  135.348920][ T7652] input: syz1 as /devices/virtual/input/input7
[  135.440088][  T976] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  135.444344][  T976] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  135.455994][  T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  135.468859][  T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  135.472936][  T976] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  135.485038][  T976] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  135.491014][  T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.491892][ T7661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.497789][  T976] usb 2-1: Product: syz
[  135.505955][  T976] usb 2-1: Manufacturer: syz
[  135.507850][  T976] usb 2-1: SerialNumber: syz
[  135.515057][  T976] usb 2-1: config 0 descriptor??
[  135.534481][  T976] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90)
[  135.537838][  T976] imon 2-1:0.0: unable to initialize intf0, err -90
[  135.545902][  T976] imon:imon_probe: failed to initialize context!
[  135.551201][  T976] imon 2-1:0.0: unable to register, err -19
[  135.617873][ T7668] loop3: detected capacity change from 0 to 512
[  135.624646][ T7668] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  135.647253][ T7668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.652596][ T7668] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.676316][ T7668] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.665: failed to insert inode 16: doubly allocated?
[  135.713775][ T6720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.745289][  T976] usb 2-1: USB disconnect, device number 10
[  135.759930][ T7664] loop0: detected capacity change from 0 to 32768
[  135.763566][ T7664] XFS: noikeep mount option is deprecated.
[  135.781464][ T7664] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.802886][ T7664] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  135.811366][ T7664] XFS (loop0): Starting recovery (logdev: internal)
[  135.821550][ T7664] XFS (loop0): Ending recovery (logdev: internal)
[  135.879560][ T5846] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  136.070814][   T33] audit: type=1326 audit(1755078509.602:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.0.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  136.087228][   T33] audit: type=1326 audit(1755078509.602:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.0.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  136.096983][   T33] audit: type=1326 audit(1755078509.602:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.0.668" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  136.108095][   T33] audit: type=1326 audit(1755078509.602:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.0.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  136.120903][   T33] audit: type=1326 audit(1755078509.602:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.0.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  136.130546][ T7673] loop3: detected capacity change from 0 to 40427
[  136.133256][   T33] audit: type=1326 audit(1755078509.602:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.0.668" exe="/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  136.136058][ T7673] F2FS-fs (loop3): Image doesn't support compression
[  136.144816][ T7673] F2FS-fs (loop3): build fault injection rate: 690
[  136.145331][ T7687] program syz.0.669 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.147153][ T7673] F2FS-fs (loop3): build fault injection type: 0x35f7
[  136.151791][   T33] audit: type=1326 audit(1755078509.602:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.0.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  136.157081][ T7673] F2FS-fs (loop3): invalid crc value
[  136.178646][   T33] audit: type=1326 audit(1755078509.602:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.0.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  136.199125][ T7673] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  136.202388][ T7673] F2FS-fs (loop3): Start checkpoint disabled!
[  136.206667][ T7673] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  136.257759][   T26] kworker/u9:0: attempt to access beyond end of device
[  136.257759][   T26] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  136.265279][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  136.265294][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.265300][   T26] Workqueue: writeback wb_workfn (flush-7:3)
[  136.265316][   T26] Call Trace:
[  136.265320][   T26]  <TASK>
[  136.265325][   T26]  dump_stack_lvl+0x189/0x250
[  136.265339][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.265350][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  136.265359][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  136.265368][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  136.265383][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  136.265398][   T26]  f2fs_write_end_io+0x886/0xb60
[  136.265419][   T26]  __submit_merged_bio+0x27a/0x6a0
[  136.265432][   T26]  __submit_merged_write_cond+0x255/0x530
[  136.265446][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  136.265510][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  136.265530][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  136.265560][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  136.265577][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  136.265588][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  136.265605][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  136.265612][   T26]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  136.265629][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  136.265640][   T26]  do_writepages+0x32e/0x550
[  136.265655][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  136.265663][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  136.265678][   T26]  __writeback_single_inode+0x145/0xff0
[  136.265688][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  136.265700][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  136.265725][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  136.265757][   T26]  ? rcu_is_watching+0x15/0xb0
[  136.265771][   T26]  wb_writeback+0x43b/0xaf0
[  136.265785][   T26]  ? queue_io+0x391/0x590
[  136.265797][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  136.265811][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.265823][   T26]  wb_workfn+0x409/0xef0
[  136.265839][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  136.265850][   T26]  ? __lock_acquire+0xab9/0xd20
[  136.265868][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  136.265879][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.265886][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  136.265893][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  136.265902][   T26]  process_scheduled_works+0xae1/0x17b0
[  136.265926][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  136.265948][   T26]  worker_thread+0x8a0/0xda0
[  136.265970][   T26]  kthread+0x711/0x8a0
[  136.265982][   T26]  ? __pfx_worker_thread+0x10/0x10
[  136.265990][   T26]  ? __pfx_kthread+0x10/0x10
[  136.266000][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.266008][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.266017][   T26]  ? __pfx_kthread+0x10/0x10
[  136.266027][   T26]  ret_from_fork+0x3fc/0x770
[  136.266037][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  136.266049][   T26]  ? __switch_to_asm+0x39/0x70
[  136.266059][   T26]  ? __switch_to_asm+0x33/0x70
[  136.266067][   T26]  ? __pfx_kthread+0x10/0x10
[  136.266078][   T26]  ret_from_fork_asm+0x1a/0x30
[  136.266096][   T26]  </TASK>
[  136.266775][   T26] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  136.396222][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  136.396242][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.396251][   T26] Workqueue: writeback wb_workfn (flush-7:3)
[  136.396274][   T26] Call Trace:
[  136.396280][   T26]  <TASK>
[  136.396287][   T26]  dump_stack_lvl+0x189/0x250
[  136.396317][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.396334][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  136.396347][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  136.396362][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  136.396388][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  136.396413][   T26]  f2fs_write_end_io+0x886/0xb60
[  136.396448][   T26]  __submit_merged_bio+0x27a/0x6a0
[  136.396497][   T26]  __submit_merged_write_cond+0x255/0x530
[  136.396523][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  136.396600][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  136.396634][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  136.396687][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  136.396717][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  136.396735][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  136.396757][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  136.396770][   T26]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  136.396798][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  136.396818][   T26]  do_writepages+0x32e/0x550
[  136.396842][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  136.396856][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  136.396882][   T26]  __writeback_single_inode+0x145/0xff0
[  136.396899][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  136.396920][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  136.396960][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  136.397014][   T26]  ? rcu_is_watching+0x15/0xb0
[  136.397038][   T26]  wb_writeback+0x43b/0xaf0
[  136.397061][   T26]  ? queue_io+0x391/0x590
[  136.397081][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  136.397106][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.397126][   T26]  wb_workfn+0x409/0xef0
[  136.397155][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  136.397175][   T26]  ? __lock_acquire+0xab9/0xd20
[  136.397207][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  136.397227][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.397240][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  136.397253][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  136.397267][   T26]  process_scheduled_works+0xae1/0x17b0
[  136.397316][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  136.397355][   T26]  worker_thread+0x8a0/0xda0
[  136.397396][   T26]  kthread+0x711/0x8a0
[  136.397417][   T26]  ? __pfx_worker_thread+0x10/0x10
[  136.397430][   T26]  ? __pfx_kthread+0x10/0x10
[  136.397449][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.397463][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.397505][   T26]  ? __pfx_kthread+0x10/0x10
[  136.397524][   T26]  ret_from_fork+0x3fc/0x770
[  136.397541][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  136.397562][   T26]  ? __switch_to_asm+0x39/0x70
[  136.397578][   T26]  ? __switch_to_asm+0x33/0x70
[  136.397594][   T26]  ? __pfx_kthread+0x10/0x10
[  136.397611][   T26]  ret_from_fork_asm+0x1a/0x30
[  136.397645][   T26]  </TASK>
[  136.397651][   T26] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  136.552813][ T7700] 9pnet: p9_errstr2errno: server reported unknown error @0xffffffffffffffff
[  136.651689][ T7702] sctp: [Deprecated]: syz.1.677 (pid 7702) Use of struct sctp_assoc_value in delayed_ack socket option.
[  136.651689][ T7702] Use struct sctp_sack_info instead
[  136.839016][ T7708] loop3: detected capacity change from 0 to 1024
[  136.859243][ T7708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  136.863245][ T7708] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.890334][ T7708] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.678: lblock 0 mapped to illegal pblock 0 (length 1)
[  136.899086][ T7708] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  136.903800][ T7708] EXT4-fs (loop3): This should not happen!! Data will be lost
[  136.903800][ T7708] 
[  136.907946][ T7708] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.678: lblock 0 mapped to illegal pblock 0 (length 1)
[  136.942858][ T6720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  137.046276][ T7722] loop1: detected capacity change from 0 to 512
[  137.050489][ T7722] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  137.285013][ T7735] loop1: detected capacity change from 0 to 16
[  137.290618][ T7735] erofs (device loop1): mounted with root inode @ nid 36.
[  137.756424][ T5874] bridge_slave_1: left allmulticast mode
[  137.761135][ T5874] bridge_slave_1: left promiscuous mode
[  137.763494][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.770589][ T5874] bridge_slave_0: left allmulticast mode
[  137.772770][ T5874] bridge_slave_0: left promiscuous mode
[  137.776788][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.809319][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  137.819291][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  137.830111][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  137.842154][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  137.862332][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.310769][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.334498][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.344738][ T5874] bond0 (unregistering): Released all slaves
[  138.803832][ T5874] hsr_slave_0: left promiscuous mode
[  138.817705][ T5874] hsr_slave_1: left promiscuous mode
[  138.825237][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.832254][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.424044][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  139.505527][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  139.895709][   T55] Bluetooth: hci0: command tx timeout
[  140.221900][ T7737] chnl_net:caif_netlink_parms(): no params data found
[  140.375316][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.377621][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.380507][ T7737] bridge_slave_0: entered allmulticast mode
[  140.383669][ T7737] bridge_slave_0: entered promiscuous mode
[  140.389831][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.398581][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.400888][ T7737] bridge_slave_1: entered allmulticast mode
[  140.403689][ T7737] bridge_slave_1: entered promiscuous mode
[  140.434006][ T7737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.451889][ T7737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.486481][ T7737] team0: Port device team_slave_0 added
[  140.488060][ T7737] team0: Port device team_slave_1 added
[  140.516576][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.520154][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.528124][ T7737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.533709][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.536562][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.545698][ T7737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.591260][ T7737] hsr_slave_0: entered promiscuous mode
[  140.596577][ T7737] hsr_slave_1: entered promiscuous mode
[  140.598990][ T7737] debugfs: 'hsr0' already exists in 'hsr'
[  140.600902][ T7737] Cannot create hsr debugfs directory
[  140.608091][ T7774] loop3: detected capacity change from 0 to 128
[  140.616449][ T7774] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  140.622625][ T7774] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  140.646328][ T6720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  140.733805][ T7737] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  140.741671][ T7737] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  140.749657][ T7737] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  140.754374][ T7737] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  140.787436][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.790406][ T7737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.793716][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.796562][ T7737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.853827][ T7737] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.867521][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.872522][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.891267][ T7737] 8021q: adding VLAN 0 to HW filter on device team0
[  140.902658][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.905706][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.922656][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.925452][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.962612][ T7798] tipc: Started in network mode
[  140.964887][ T7798] tipc: Node identity 7f000001, cluster identity 4711
[  140.967685][ T7798] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  141.230004][ T7737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.405193][ T7737] veth0_vlan: entered promiscuous mode
[  141.416181][ T7737] veth1_vlan: entered promiscuous mode
[  141.438030][ T7737] veth0_macvtap: entered promiscuous mode
[  141.442395][ T7737] veth1_macvtap: entered promiscuous mode
[  141.454509][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.465565][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.476742][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.481525][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.486454][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.499415][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.569711][ T5901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.572642][ T5901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.595556][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.598538][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.694451][ T7830] TCP: TCP_TX_DELAY enabled
[  141.969228][   T55] Bluetooth: hci0: command tx timeout
[  143.591580][ T7862] loop3: detected capacity change from 0 to 8
[  143.603355][ T7862] unable to read inode lookup table
[  143.829569][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.734'.
[  143.842612][ T7875] netlink: 60 bytes leftover after parsing attributes in process `syz.3.734'.
[  143.847262][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.734'.
[  143.884180][ T7882] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[  143.947226][ T7886] loop3: detected capacity change from 0 to 1024
[  144.011382][   T32] hfsplus: b-tree write err: -5, ino 4
[  144.048351][   T55] Bluetooth: hci0: command tx timeout
[  144.081033][ T7902] loop4: detected capacity change from 0 to 256
[  144.100416][ T7902] exFAT-fs (loop4): error, invalid access to FAT bad cluster (entry 0x00000005)
[  144.103273][ T7902] exFAT-fs (loop4): Filesystem has been set read-only
[  144.105450][ T7902] exFAT-fs (loop4): failed to count the number of clusters in root
[  144.108506][ T7902] exFAT-fs (loop4): failed to recognize exfat type
[  144.398704][ T5917] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  144.534341][ T7924] loop0: detected capacity change from 0 to 256
[  144.540015][ T7924] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  144.546323][ T7924] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  144.551203][ T7924] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  144.554380][ T7924] UDF-fs: Scanning with blocksize 512 failed
[  144.560545][ T7924] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  144.562918][ T5917] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  144.566807][ T7924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  144.567230][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.574077][ T5917] usb 5-1: config 0 has no interface number 0
[  144.576038][ T5917] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 6018, setting to 64
[  144.590216][   T33] audit: type=1800 audit(1755078518.102:21): pid=7924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.757" name="file2" dev="loop0" ino=66 res=0 errno=0
[  144.596702][ T5917] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.601555][ T5917] usb 5-1: config 0 interface 52 has no altsetting 0
[  144.606929][ T5917] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  144.618401][ T5917] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  144.621667][ T5917] usb 5-1: Product: syz
[  144.623275][ T5917] usb 5-1: Manufacturer: syz
[  144.624876][ T5917] usb 5-1: SerialNumber: syz
[  144.628053][ T5917] usb 5-1: config 0 descriptor??
[  144.766248][ T7930] netlink: 'syz.0.760': attribute type 32 has an invalid length.
[  144.838467][ T7922] loop3: detected capacity change from 0 to 32768
[  144.842563][ T7922] XFS (loop3): Invalid device [./file0], error=-16
[  144.847543][ T5917] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input8
[  144.994589][ T7939] loop3: detected capacity change from 0 to 512
[  145.021831][ T7939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.030631][ T7939] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.050228][    T9] usb 5-1: USB disconnect, device number 2
[  145.050331][    C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  145.093820][ T6720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.140671][ T7946] loop3: detected capacity change from 0 to 512
[  145.143669][ T7946] EXT4-fs: Ignoring removed mblk_io_submit option
[  145.150109][ T7946] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  145.152793][ T7946] EXT4-fs (loop3): DAX unsupported by block device.
[  145.790494][ T7968] netlink: 'syz.0.773': attribute type 10 has an invalid length.
[  145.804134][ T7968] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  145.905644][ T7976] loop0: detected capacity change from 0 to 2048
[  145.912101][ T7976] UDF-fs: error (device loop0): udf_load_logicalvol: error loading logical volume descriptor: Partition table too long (2048 > 72)
[  145.917302][ T7976] UDF-fs: Scanning with blocksize 512 failed
[  145.923204][ T7976] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  145.926259][ T7976] UDF-fs: Scanning with blocksize 1024 failed
[  145.932305][ T7976] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  145.936074][ T7976] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  145.939115][ T7976] UDF-fs: Scanning with blocksize 2048 failed
[  145.942739][ T7976] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  145.947412][ T7976] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  145.951707][ T7976] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  145.954646][ T7976] UDF-fs: Scanning with blocksize 4096 failed
[  145.957000][ T7976] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[  146.033562][ T7980] loop0: detected capacity change from 0 to 4096
[  146.046906][ T7980] NILFS (loop0): invalid segment: Checksum error in segment payload
[  146.051165][ T7980] NILFS (loop0): trying rollback from an earlier position
[  146.068146][ T7980] NILFS (loop0): recovery complete
[  146.082617][ T7981] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.128844][   T55] Bluetooth: hci0: command tx timeout
[  146.148676][ T5896] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  146.308481][ T5896] usb 5-1: Using ep0 maxpacket: 32
[  146.313420][ T5896] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.316790][ T5896] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.322409][ T5896] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  146.325303][ T5896] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  146.328092][ T5896] usb 5-1: Product: syz
[  146.331971][ T5896] usb 5-1: Manufacturer: syz
[  146.336851][ T5896] hub 5-1:4.0: USB hub found
[  146.438983][ T7991] loop3: detected capacity change from 0 to 32768
[  146.442261][ T7991] bcachefs: bch2_fs_parse_param() Error parsing option direct_io: option_value
[  146.537352][ T5896] hub 5-1:4.0: 2 ports detected
[  146.734424][ T7999] loop3: detected capacity change from 0 to 4096
[  146.738316][ T5896] hub 5-1:4.0: hub_hub_status failed (err = -71)
[  146.741633][ T5896] hub 5-1:4.0: config failed, can't get hub status (err -71)
[  146.759371][ T5896] usb 5-1: USB disconnect, device number 3
[  146.774184][ T7999] ntfs3(loop3): ino=1e, "file1" attr_set_size
[  146.776710][ T7999] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  148.228773][  T793] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  148.389969][  T793] usb 4-1: config 0 has an invalid interface number: 176 but max is 2
[  148.392989][  T793] usb 4-1: config 0 has no interface number 1
[  148.395441][  T793] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  148.400023][  T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.405120][  T793] usb 4-1: config 0 descriptor??
[  148.612011][  T793] qcserial 4-1:0.2: Qualcomm USB modem converter detected
[  148.815280][ T5910] usb 4-1: USB disconnect, device number 7
[  148.820727][ T5910] qcserial 4-1:0.2: device disconnected
[  149.380940][ T8027] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.800'.
[  149.391106][ T8027] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.800'.
[  149.528601][ T8029] loop3: detected capacity change from 0 to 4096
[  149.670184][ T8037] capability: warning: `syz.3.804' uses deprecated v2 capabilities in a way that may be insecure
[  150.195801][ T8043] loop3: detected capacity change from 0 to 2048
[  150.223431][ T8043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.867919][ T8056] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  151.281255][ T8061] loop0: detected capacity change from 0 to 32768
[  151.458652][ T5896] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  151.663312][ T8067] loop3: detected capacity change from 0 to 4096
[  151.676816][ T5896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  151.680037][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  151.684162][ T5896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  151.691532][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  151.695847][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  151.708757][ T5896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  151.711914][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  151.716162][ T5896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  151.724934][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  151.730173][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  151.736550][ T5896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  151.739936][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  151.752903][ T5896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  151.767241][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  151.771267][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  151.777889][ T5896] usb 5-1: string descriptor 0 read error: -22
[  151.780798][ T5896] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  151.784073][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.808016][ T5896] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  151.808144][ T8073] loop0: detected capacity change from 0 to 1024
[  151.847414][ T3211] hfsplus: b-tree write err: -5, ino 4
[  151.916404][ T8076] loop3: detected capacity change from 0 to 512
[  151.927491][ T8076] EXT4-fs: Mount option(s) incompatible with ext2
[  152.019234][ T8080] loop0: detected capacity change from 0 to 1024
[  152.035952][  T793] usb 5-1: USB disconnect, device number 4
[  152.098809][   T53] hfsplus: b-tree write err: -5, ino 4
[  153.056119][ T8115] ieee802154 phy0 wpan0: encryption failed: -22
[  153.252749][   T33] audit: type=1804 audit(1755078526.782:22): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.840" name="/newroot/26/bus/file0" dev="overlay" ino=159 res=1 errno=0
[  153.548581][ T5896] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  153.555557][ T8130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.701385][ T5896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.705199][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  153.709611][ T5896] usb 5-1: config 1 has no interface number 0
[  153.712049][ T5896] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  153.717929][ T5896] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  153.721868][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.724968][ T5896] usb 5-1: Product: syz
[  153.726647][ T5896] usb 5-1: Manufacturer: syz
[  153.728894][ T5896] usb 5-1: SerialNumber: syz
[  153.734974][ T5896] usb 5-1: selecting invalid altsetting 1
[  153.918382][ T5910] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  154.085192][ T5910] usb 4-1: Using ep0 maxpacket: 8
[  154.089978][ T5910] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  154.092568][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.095795][ T5910] usb 4-1: config 0 has no interface number 0
[  154.097836][ T5910] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  154.101315][ T5910] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.105252][ T5910] usb 4-1: config 0 interface 52 has no altsetting 0
[  154.112262][ T5910] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  154.115194][ T5910] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  154.117813][ T5910] usb 4-1: Manufacturer: syz
[  154.132629][ T5910] usb 4-1: config 0 descriptor??
[  154.136074][ T5910] hub 4-1:0.52: bad descriptor, ignoring hub
[  154.138024][ T5910] hub 4-1:0.52: probe with driver hub failed with error -5
[  154.141430][ T5896] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS
[  154.143473][ T5896] cdc_ncm 5-1:1.1: bind() failure
[  154.150744][ T5896] usb 5-1: USB disconnect, device number 5
[  154.194995][   T33] audit: type=1326 audit(1755078527.722:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.846" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  154.203719][   T33] audit: type=1326 audit(1755078527.722:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.846" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  154.213515][   T33] audit: type=1326 audit(1755078527.722:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.846" exe="/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  154.220603][   T33] audit: type=1326 audit(1755078527.722:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.846" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  154.227679][   T33] audit: type=1326 audit(1755078527.722:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.846" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  154.343352][ T5910] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input10
[  154.648681][    T9] usb 4-1: USB disconnect, device number 8
[  154.700143][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'.
[  154.703582][ T8147] netlink: 'syz.4.850': attribute type 3 has an invalid length.
[  155.058427][ T5910] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  155.197709][ T8158] loop3: detected capacity change from 0 to 4096
[  155.215167][ T8159] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.219634][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  155.225636][ T5910] usb 5-1: config 252 has an invalid interface number: 15 but max is 0
[  155.229651][ T5910] usb 5-1: config 252 has no interface number 0
[  155.232271][ T5910] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  155.247605][ T5910] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  155.252468][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.258712][ T5910] usb 5-1: Product: syz
[  155.260470][ T5910] usb 5-1: Manufacturer: syz
[  155.262805][ T5910] usb 5-1: SerialNumber: syz
[  155.277970][ T5910] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  155.477769][   T13] usb 5-1: Failed to submit usb control message: -71
[  155.483325][    T9] usb 5-1: USB disconnect, device number 6
[  155.486812][   T13] usb 5-1: unable to send the bmi data to the device: -71
[  155.491153][   T13] usb 5-1: unable to get target info from device
[  155.493510][   T13] usb 5-1: could not get target info (-71)
[  155.495950][   T13] usb 5-1: could not probe fw (-71)
[  155.582027][ T8176] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  157.071831][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'.
[  157.102787][ T8211] 9p: Unknown access argument (: -22
[  157.766966][   T33] audit: type=1326 audit(1755078531.292:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.0.887" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  157.781305][   T33] audit: type=1326 audit(1755078531.292:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.0.887" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  157.793344][   T33] audit: type=1326 audit(1755078531.292:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.0.887" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  157.803636][   T33] audit: type=1326 audit(1755078531.292:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.0.887" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75e438ebe9 code=0x7ffc0000
[  158.180433][ T8264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.900'.
[  158.565646][ T8277] loop4: detected capacity change from 0 to 32768
[  158.572150][ T8277] lmLogInit: exit(-22)
[  158.581297][ T8277] lmLogOpen: exit(-22)
[  158.691194][   T55] Bluetooth: hci1: unexpected event for opcode 0x203d
[  158.740143][ T8309] loop3: detected capacity change from 0 to 2048
[  158.745607][ T8309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  158.885619][ T8327] loop4: detected capacity change from 0 to 256
[  158.915361][ T8327] FAT-fs (loop4): Directory bread(block 64) failed
[  158.918745][ T8327] FAT-fs (loop4): Directory bread(block 65) failed
[  158.921401][ T8327] FAT-fs (loop4): Directory bread(block 66) failed
[  158.921891][ T8329] loop0: detected capacity change from 0 to 1024
[  158.923981][ T8327] FAT-fs (loop4): Directory bread(block 67) failed
[  158.929464][ T8327] FAT-fs (loop4): Directory bread(block 68) failed
[  158.932090][ T8327] FAT-fs (loop4): Directory bread(block 69) failed
[  158.934736][ T8327] FAT-fs (loop4): Directory bread(block 70) failed
[  158.937347][ T8327] FAT-fs (loop4): Directory bread(block 71) failed
[  158.940786][ T8327] FAT-fs (loop4): Directory bread(block 72) failed
[  158.943398][ T8327] FAT-fs (loop4): Directory bread(block 73) failed
[  158.963072][ T8329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  158.969127][ T8329] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.996455][ T8329] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.924: lblock 3 mapped to illegal pblock 3 (length 3)
[  159.028349][ T8329] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  159.033086][ T8329] EXT4-fs (loop0): This should not happen!! Data will be lost
[  159.033086][ T8329] 
[  159.042206][ T8321] loop3: detected capacity change from 0 to 40427
[  159.044800][ T8321] F2FS-fs: heap/no_heap options were deprecated
[  159.049756][ T8321] F2FS-fs (loop3): build fault injection rate: 19
[  159.051935][ T8321] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  159.056326][ T8321] F2FS-fs (loop3): invalid crc value
[  159.074258][ T8321] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  159.081992][ T1092] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  159.088156][ T1092] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28
[  159.094936][ T1092] EXT4-fs (loop0): This should not happen!! Data will be lost
[  159.094936][ T1092] 
[  159.097955][ T1092] EXT4-fs (loop0): Total free blocks count 0
[  159.102006][ T1092] EXT4-fs (loop0): Free/Dirty block details
[  159.104373][ T1092] EXT4-fs (loop0): free_blocks=4293918720
[  159.106161][ T1092] EXT4-fs (loop0): dirty_blocks=48
[  159.107789][ T1092] EXT4-fs (loop0): Block reservation details
[  159.136597][ T8339] loop4: detected capacity change from 0 to 1024
[  159.144652][ T8339] hfsplus: failed to load root directory
[  159.152954][ T8321] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  159.161880][ T8321] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  159.171780][ T8321] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  159.241792][ T8344] loop0: detected capacity change from 0 to 2048
[  159.250322][ T8344] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.259212][ T8344] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  159.395589][ T8350] loop3: detected capacity change from 0 to 4096
[  159.399926][ T8350] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  159.449283][ T8350] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  159.451623][ T8350] ntfs3(loop3): Failed to initialize $Secure::$SDH (-22).
[  159.454434][ T8350] ntfs3(loop3): Failed to initialize $Secure (-22).
[  159.456722][ T8350] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  159.580739][  T793] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  159.771005][  T793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.776461][  T793] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  159.780647][  T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.783757][  T793] usb 5-1: Product: syz
[  159.785527][  T793] usb 5-1: Manufacturer: syz
[  159.787825][  T793] usb 5-1: SerialNumber: syz
[  159.791982][  T793] usb 5-1: config 0 descriptor??
[  159.869740][ T8358] loop3: detected capacity change from 0 to 1024
[  159.875904][ T8358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.005275][  T793] usb 5-1: USB disconnect, device number 7
[  160.035452][ T8364] IPv6: addrconf: prefix option has invalid lifetime
[  160.113901][ T8370] loop3: detected capacity change from 0 to 256
[  160.125114][ T8370] FAT-fs (loop3): Directory bread(block 64) failed
[  160.127192][ T8370] FAT-fs (loop3): Directory bread(block 65) failed
[  160.130474][ T8370] FAT-fs (loop3): Directory bread(block 66) failed
[  160.132523][ T8370] FAT-fs (loop3): Directory bread(block 67) failed
[  160.134479][ T8370] FAT-fs (loop3): Directory bread(block 68) failed
[  160.136426][ T8370] FAT-fs (loop3): Directory bread(block 69) failed
[  160.138677][ T8370] FAT-fs (loop3): Directory bread(block 70) failed
[  160.140806][ T8370] FAT-fs (loop3): Directory bread(block 71) failed
[  160.142901][ T8370] FAT-fs (loop3): Directory bread(block 72) failed
[  160.144891][ T8370] FAT-fs (loop3): Directory bread(block 73) failed
[  160.178422][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  160.178432][   T33] audit: type=1800 audit(1755078533.712:37): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.941" name="file2" dev="loop3" ino=1048609 res=0 errno=0
[  160.329132][ T8382] netlink: 6 bytes leftover after parsing attributes in process `syz.0.947'.
[  160.362836][ T8384] loop3: detected capacity change from 0 to 1024
[  160.379724][ T8384] hfsplus: bad catalog entry type
[  160.399568][ T1090] hfsplus: b-tree write err: -5, ino 4
[  160.423533][ T8388] loop0: detected capacity change from 0 to 128
[  160.427393][ T8388] EXT4-fs (loop0): Test dummy encryption mode enabled
[  160.446934][ T8388] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  160.454625][ T8388] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  160.473903][ T8393] IPv6: Can't replace route, no match found
[  160.484997][ T5846] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  160.666620][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.958'.
[  160.667937][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'.
[  160.676656][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'.
[  160.680903][ T8407] netlink: 'syz.3.959': attribute type 14 has an invalid length.
[  160.683589][ T8407] netlink: 'syz.3.959': attribute type 11 has an invalid length.
[  160.747123][ T8409] loop4: detected capacity change from 0 to 4096
[  160.752463][ T8409] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  160.770558][ T8409] ntfs3(loop4): failed to convert "c46c" to macturkish
[  160.773075][ T8409] ntfs3(loop4): ino=20, mi_enum_attr
[  160.775165][ T8409] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  160.958531][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  161.109105][    T9] usb 4-1: Using ep0 maxpacket: 8
[  161.137940][    T9] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  161.146307][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.150143][    T9] usb 4-1: Product: syz
[  161.151785][    T9] usb 4-1: Manufacturer: syz
[  161.153974][    T9] usb 4-1: SerialNumber: syz
[  161.169938][    T9] usb 4-1: config 0 descriptor??
[  161.429284][    T9] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  162.483679][    T9] gspca_sunplus: reg_w_riv err -71
[  162.485553][    T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  162.490075][    T9] usb 4-1: USB disconnect, device number 9
[  162.847477][ T8436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.972'.
[  162.888012][ T8438] bridge0: entered promiscuous mode
[  162.890812][ T8438] macvlan2: entered promiscuous mode
[  163.181117][ T8462] input: syz0 as /devices/virtual/input/input11
[  163.250036][   T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  163.375864][ T8475] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  163.399229][   T24] usb 5-1: Using ep0 maxpacket: 16
[  163.413462][   T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  163.416359][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.420105][   T24] usb 5-1: config 0 has no interface number 0
[  163.422150][   T24] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  163.427740][   T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  163.430834][   T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  163.433654][ T8477] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  163.435976][   T24] usb 5-1: Product: syz
[  163.437368][   T24] usb 5-1: SerialNumber: syz
[  163.441514][   T24] usb 5-1: config 0 descriptor??
[  163.445341][   T24] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  163.653835][ T5896] usb 5-1: USB disconnect, device number 8
[  163.913954][ T8502] loop3: detected capacity change from 0 to 256
[  164.003426][ T8506] ip6tnl1: entered promiscuous mode
[  165.237097][ T8522] loop4: detected capacity change from 0 to 32768
[  165.709541][ T8530] netlink: 'syz.4.1015': attribute type 10 has an invalid length.
[  165.714354][ T8530] veth0_macvtap: left promiscuous mode
[  165.752835][ T8530] batman_adv: batadv0: Adding interface: macvtap0
[  165.755417][ T8530] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.766007][ T8530] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  166.041280][ T8536] syz_tun: entered allmulticast mode
[  166.232899][ T8547] loop0: detected capacity change from 0 to 512
[  166.301119][ T8547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.325851][ T8547] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.354020][ T8547] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1023: corrupted inode contents
[  166.375555][ T8547] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1023: mark_inode_dirty error
[  166.392057][ T8547] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1023: corrupted inode contents
[  166.420216][ T8557] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1023: corrupted inode contents
[  166.454618][ T8557] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1023: mark_inode_dirty error
[  166.464245][ T8557] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1023: corrupted inode contents
[  166.478909][ T8557] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1023: mark_inode_dirty error
[  166.487481][ T8557] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1023: corrupted inode contents
[  166.500769][ T8557] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1023: mark_inode_dirty error
[  166.577151][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.937034][ T8564] loop0: detected capacity change from 0 to 8192
[  167.201731][ T8587] xt_socket: unknown flags 0xd0
[  167.468417][    T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  167.527344][ T8597] loop0: detected capacity change from 0 to 32768
[  167.531504][ T8597] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1044 (8597)
[  167.542053][ T8597] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  167.546182][ T8597] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  167.550413][ T8597] BTRFS info (device loop0): using free-space-tree
[  167.594072][   T33] audit: type=1800 audit(1755078541.122:38): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1044" name="file1" dev="loop0" ino=260 res=0 errno=0
[  167.620843][    T9] usb 4-1: config 150 has an invalid interface number: 204 but max is 1
[  167.624216][    T9] usb 4-1: config 150 has no interface number 1
[  167.627524][    T9] usb 4-1: config 150 interface 204 has no altsetting 0
[  167.634431][    T9] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=c7.eb
[  167.638103][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.644868][    T9] usb 4-1: Product: syz
[  167.646723][    T9] usb 4-1: Manufacturer: syz
[  167.652619][    T9] usb 4-1: SerialNumber: syz
[  167.717328][ T5846] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  167.870899][    T9] gspca_main: spca501-2.14.0 probing 0000:0000
[  167.873885][    T9] gspca_spca501: reg write: error -71
[  167.877688][    T9] spca501 4-1:150.0: Reg write failed for 0x02,0x0f,0x05
[  167.881705][    T9] spca501 4-1:150.0: probe with driver spca501 failed with error -22
[  167.886835][    T9] usb 4-1: USB disconnect, device number 10
[  169.019016][ T8663] loop3: detected capacity change from 0 to 1024
[  169.031847][ T8663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.035904][ T8663] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.051300][ T8663] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.1067: lblock 1 mapped to illegal pblock 1 (length 3)
[  169.055785][ T8663] EXT4-fs (loop3): Remounting filesystem read-only
[  169.073053][ T6720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.171398][ T8659] loop0: detected capacity change from 0 to 32768
[  169.196025][ T8659] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  169.244176][ T8659] (syz.0.1065,8659,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  169.253771][ T8659] (syz.0.1065,8659,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  169.263947][ T8659] (syz.0.1065,8659,0):ocfs2_link:764 ERROR: status = -2
[  169.266670][ T8659] (syz.0.1065,8659,0):ocfs2_link:842 ERROR: status = -2
[  169.339885][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[  169.665523][ T8700] loop0: detected capacity change from 0 to 1024
[  169.690790][ T8700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.908285][    T9] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  170.083127][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  170.110844][    T9] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  170.145513][    T9] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt
[  170.152532][    T9] usb 4-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  170.158116][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  170.179482][    T9] usb 4-1: string descriptor 0 read error: -22
[  170.198959][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  170.207212][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.237511][ T8702] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  170.242733][ T8702] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  170.246264][ T8702] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  170.365787][    T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  170.497404][    T9] usb 4-1: USB disconnect, device number 11
[  171.106853][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.122303][ T8711] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1086'.
[  171.133336][ T8713] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  171.318543][  T976] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  171.489525][  T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  171.493811][  T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.508768][  T976] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  171.512325][  T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.526761][  T976] usb 5-1: config 0 descriptor??
[  171.591062][ T8724] loop0: detected capacity change from 0 to 40427
[  171.628786][ T8724] F2FS-fs (loop0): build fault injection rate: 16
[  171.631359][ T8724] F2FS-fs (loop0): build fault injection type: 0x3bfe8e
[  171.638815][ T8724] F2FS-fs (loop0): invalid crc value
[  171.644881][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  171.649066][ T8724] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-5)
[  171.858322][    T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  171.940476][  T976] steelseries 0003:1038:1410.0003: unknown main item tag 0x0
[  171.943782][  T976] steelseries 0003:1038:1410.0003: unknown main item tag 0x0
[  171.946817][  T976] steelseries 0003:1038:1410.0003: item fetching failed at offset 2/7
[  171.950909][  T976] steelseries 0003:1038:1410.0003: parse failed
[  171.953516][  T976] steelseries 0003:1038:1410.0003: probe with driver steelseries failed with error -22
[  172.113309][    T9] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  172.119011][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  172.221808][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40
[  172.225947][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.230385][    T9] usb 4-1: Product: syz
[  172.232372][    T9] usb 4-1: Manufacturer: syz
[  172.234415][    T9] usb 4-1: SerialNumber: syz
[  172.242446][ T5987] IPVS: starting estimator thread 0...
[  172.283598][  T976] usb 5-1: USB disconnect, device number 9
[  172.358274][ T8738] IPVS: using max 42 ests per chain, 100800 per kthread
[  172.518383][    T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input12
[  172.527003][ T5277] bcm5974 4-1:1.0: could not read from device
[  172.534045][ T5277] bcm5974 4-1:1.0: could not read from device
[  172.534717][    T9] usb 4-1: USB disconnect, device number 12
[  172.946011][ T8748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.205705][ T8744] loop0: detected capacity change from 0 to 32768
[  173.236720][    T9] kernel write not supported for file /register (pid: 9 comm: kworker/0:0)
[  173.251119][ T8744] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.317882][ T8744] XFS (loop0): Ending clean mount
[  173.327656][ T8744] XFS (loop0): Quotacheck needed: Please wait.
[  173.364688][ T8744] XFS (loop0): Quotacheck: Done.
[  173.495335][ T8774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.500922][ T5846] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.830604][ T8785] loop4: detected capacity change from 0 to 8
[  173.860064][ T8785] SQUASHFS error: Unable to read directory block [631:26]
[  173.901697][ T8778] loop3: detected capacity change from 0 to 32768
[  173.918532][ T8788] Illegal XDP return value 161626496 on prog  (id 86) dev N/A, expect packet loss!
[  174.141653][ T8800] loop0: detected capacity change from 0 to 64
[  174.401537][ T8820] loop4: detected capacity change from 0 to 128
[  174.406068][ T8820] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  174.414557][ T8820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.628478][ T8825] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1130'.
[  175.430431][ T8832] loop3: detected capacity change from 0 to 2048
[  175.468378][ T8832]  loop3: p3 < > p4 < >
[  175.470343][ T8832] loop3: partition table partially beyond EOD, truncated
[  175.473307][ T8832] loop3: p3 start 4284289 is beyond EOD, truncated
[  175.601426][ T8839] loop3: detected capacity change from 0 to 512
[  175.636891][ T8839] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  175.651194][ T8839] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1139: Invalid block bitmap block 0 in block_group 0
[  175.657537][ T8839] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  175.661609][ T8839] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.1139: attempt to clear invalid blocks 983261 len 1
[  175.667493][ T8839] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.1139: Invalid inode table block 0 in block_group 0
[  175.676427][ T8839] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  175.681403][ T8839] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  175.685081][ T8839] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.1139: Invalid inode table block 0 in block_group 0
[  175.690360][ T8839] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  175.694922][ T8839] EXT4-fs error (device loop3): ext4_truncate:4666: inode #11: comm syz.3.1139: mark_inode_dirty error
[  175.702334][ T8839] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  175.708454][ T8839] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.1139: Invalid inode table block 0 in block_group 0
[  175.715877][ T8839] EXT4-fs (loop3): 1 truncate cleaned up
[  175.741781][ T8839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.073344][ T6720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.908046][ T8853] loop4: detected capacity change from 0 to 8
[  177.315228][ T8871] loop3: detected capacity change from 0 to 128
[  177.451846][   T33] audit: type=1326 audit(1755078550.982:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.3.1155" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4edb38ebe9 code=0x0
[  177.460518][  T976] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  177.543304][ T8885] loop0: detected capacity change from 0 to 512
[  177.545939][ T8885] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  177.610307][  T976] usb 5-1: Using ep0 maxpacket: 32
[  177.622887][  T976] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.627180][  T976] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.634629][  T976] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  177.638125][  T976] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  177.642034][  T976] usb 5-1: Product: syz
[  177.643947][  T976] usb 5-1: Manufacturer: syz
[  177.654817][  T976] hub 5-1:4.0: USB hub found
[  177.860938][  T976] hub 5-1:4.0: 2 ports detected
[  178.035667][ T8908] loop0: detected capacity change from 0 to 8
[  178.039053][ T8908] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  178.328166][ T8910] cramfs: Error -3 while decompressing!
[  178.330501][ T8910] cramfs: ffffffff99be7628(26)->ffff888027210000(4096)
[  178.332874][ T8910] cramfs: Error -3 while decompressing!
[  178.334698][ T8910] cramfs: ffffffff99be7642(26)->ffff888027211000(4096)
[  178.336847][ T8910] cramfs: Error -3 while decompressing!
[  178.338621][ T8910] cramfs: ffffffff99be765c(16)->ffff88802ac86000(4096)
[  178.340842][ T8910] cramfs: Error -3 while decompressing!
[  178.342667][ T8910] cramfs: ffffffff99be7628(26)->ffff888027210000(4096)
[  178.645271][  T976] hub 5-1:4.0: set hub depth failed
[  178.649828][  T976] usb 5-1: USB disconnect, device number 10
[  178.818506][ T5987] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  179.018324][ T5987] usb 4-1: Using ep0 maxpacket: 32
[  179.031096][ T5987] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  179.034103][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.036712][ T5987] usb 4-1: Product: syz
[  179.042877][ T5987] usb 4-1: Manufacturer: syz
[  179.044539][ T5987] usb 4-1: SerialNumber: syz
[  179.050899][ T5987] usb 4-1: config 0 descriptor??
[  179.051909][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'.
[  179.124936][ T5310] IPVS: starting estimator thread 0...
[  179.328579][ T8925] IPVS: using max 36 ests per chain, 86400 per kthread
[  179.603302][ T5987] airspy 4-1:0.0: Board ID: 00
[  179.604853][ T5987] airspy 4-1:0.0: Firmware version: 
[  179.721302][ T8929] loop0: detected capacity change from 0 to 32768
[  179.736965][   T33] audit: type=1800 audit(1755078553.262:40): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1178" name="file1" dev="loop0" ino=4 res=0 errno=0
[  180.316255][ T5987] airspy 4-1:0.0: usb_control_msg() failed -71 request 0f
[  180.324301][ T5987] airspy 4-1:0.0: Registered as swradio24
[  180.326812][ T5987] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  180.332801][ T5987] usb 4-1: USB disconnect, device number 13
[  180.634645][  T976] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  180.790447][  T976] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  180.794063][  T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.801339][  T976] usb 5-1: config 0 descriptor??
[  180.922538][ T8959] loop3: detected capacity change from 0 to 4096
[  180.926956][ T8959] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  180.952694][ T8959] ntfs3(loop3): ino=19, mi_enum_attr
[  180.955068][ T8959] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  180.973144][ T8959] ntfs3(loop3): failed to convert "c46c" to macromanian
[  180.979945][ T8959] ntfs3(loop3): ino=20, mi_enum_attr
[  181.021486][  T976] kaweth 5-1:0.0: Firmware present in device.
[  181.209774][  T976] kaweth 5-1:0.0: Statistics collection: 0
[  181.212201][  T976] kaweth 5-1:0.0: Multicast filter limit: 0
[  181.214517][  T976] kaweth 5-1:0.0: MTU: 0
[  181.216339][  T976] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00
[  181.430361][ T5896] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  181.485213][ T8967] loop0: detected capacity change from 0 to 4096
[  181.503460][ T8967] NILFS (loop0): invalid segment: Checksum error in segment payload
[  181.506871][ T8967] NILFS (loop0): trying rollback from an earlier position
[  181.523086][ T8967] NILFS (loop0): recovery complete
[  181.530001][ T8968] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.612144][  T976] kaweth 5-1:0.0: Error setting SOFS wait
[  181.614728][  T976] kaweth 5-1:0.0: probe with driver kaweth failed with error -5
[  181.618456][ T5896] usb 4-1: Using ep0 maxpacket: 16
[  181.626855][  T976] usb 5-1: USB disconnect, device number 11
[  181.636700][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.643001][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.646875][ T5896] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  181.654566][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.661002][ T5896] usb 4-1: config 0 descriptor??
[  181.667956][ T8970] loop0: detected capacity change from 0 to 512
[  181.672133][ T8970] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  181.682401][ T8970] EXT4-fs (loop0): 1 truncate cleaned up
[  181.685814][ T8970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.725176][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.074553][ T5896] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[  182.184523][ T8990] loop4: detected capacity change from 0 to 512
[  182.187519][ T8990] EXT4-fs: Ignoring removed oldalloc option
[  182.190541][ T8990] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  182.200872][ T8990] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  182.205572][ T8990] EXT4-fs (loop4): 1 truncate cleaned up
[  182.208719][ T8990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.235984][ T7737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.271340][ T5310] usb 4-1: USB disconnect, device number 14
[  182.518403][  T976] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  182.670523][  T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.674748][  T976] usb 5-1: config 0 interface 0 has no altsetting 0
[  182.680794][  T976] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  182.684642][  T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.688107][  T976] usb 5-1: Product: syz
[  182.690328][  T976] usb 5-1: Manufacturer: syz
[  182.692268][  T976] usb 5-1: SerialNumber: syz
[  182.696609][  T976] usb 5-1: config 0 descriptor??
[  182.702139][  T976] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  182.712961][  T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  182.717825][  T976] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  182.721873][  T976] usb 5-1: media controller created
[  182.744491][  T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.797347][  T976] DVB: Unable to find symbol tda10046_attach()
[  182.800025][  T976] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  182.803489][  T976] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  183.037473][ T9004] loop3: detected capacity change from 0 to 1024
[  183.041607][ T9004] EXT4-fs: Ignoring removed bh option
[  183.044783][ T9004] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  183.062732][ T9004] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  183.066271][ T9004] EXT4-fs (loop3): orphan cleanup on readonly fs
[  183.071307][ T9004] EXT4-fs error (device loop3): ext4_quota_enable:7124: comm syz.3.1211: inode #2304: comm syz.3.1211: iget: illegal inode #
[  183.077275][ T9004] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1211: Bad quota inode: 2304, type: 2
[  183.082808][ T9004] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  183.090070][ T9004] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  183.094072][ T9004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  183.118147][ T6720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.482724][ T9021] binder: BC_ACQUIRE_RESULT not supported
[  183.485130][ T9021] binder: 9020:9021 ioctl c0306201 200000000480 returned -22
[  183.603047][    C0] vkms_vblank_simulate: vblank timer overrun
[  183.682809][ T9026] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  183.920241][  T976] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  183.935210][  T976] usb 5-1: USB disconnect, device number 12
[  185.309151][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1228'.
[  185.640753][   T33] audit: type=1326 audit(1755078559.172:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9038 comm="syz.4.1227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d98ebe9 code=0x7fc00000
[  185.908333][   T33] audit: type=1326 audit(1755078559.432:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9038 comm="syz.4.1227" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd51d98ebe9 code=0x7fc00000
[  185.948298][   T33] audit: type=1326 audit(1755078559.472:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9038 comm="syz.4.1227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d98ebe9 code=0x7fc00000
[  185.956514][   T33] audit: type=1326 audit(1755078559.472:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9038 comm="syz.4.1227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d98ebe9 code=0x7fc00000
[  185.978626][   T33] audit: type=1326 audit(1755078559.472:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9038 comm="syz.4.1227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d98ebe9 code=0x7fc00000
[  186.018331][   T33] audit: type=1326 audit(1755078559.472:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9038 comm="syz.4.1227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d98ebe9 code=0x7fc00000
[  186.026679][   T33] audit: type=1326 audit(1755078559.472:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9038 comm="syz.4.1227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d98ebe9 code=0x7fc00000
[  186.048603][   T33] audit: type=1326 audit(1755078559.472:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9038 comm="syz.4.1227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d98ebe9 code=0x7fc00000
[  186.057643][   T33] audit: type=1326 audit(1755078559.472:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9038 comm="syz.4.1227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d98ebe9 code=0x7fc00000
[  186.088444][   T33] audit: type=1326 audit(1755078559.472:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9038 comm="syz.4.1227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d98ebe9 code=0x7fc00000
[  186.377262][ T9067] loop3: detected capacity change from 0 to 512
[  186.380821][ T9067] journal_path: Lookup failure for './file0/../file0'
[  186.388432][ T9067] EXT4-fs: error: could not find journal device path
[  186.601450][ T9082] loop4: detected capacity change from 0 to 164
[  187.763678][ T5987] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  187.932384][ T5987] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.942102][ T5987] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.952580][ T5987] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  187.956149][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  187.966452][ T5987] usb 4-1: SerialNumber: syz
[  187.984945][ T5987] usb 4-1: 0:2 : does not exist
[  187.992202][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'.
[  188.268318][  T976] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  188.385214][ T9129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1267'.
[  188.387815][   T24] usb 4-1: USB disconnect, device number 15
[  188.421243][  T976] usb 5-1: config index 0 descriptor too short (expected 8192, got 36)
[  188.424496][  T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.432867][  T976] usb 5-1: config 0 has no interfaces?
[  188.435047][  T976] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  188.439345][  T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.444795][  T976] usb 5-1: config 0 descriptor??
[  188.533097][ T9135] loop0: detected capacity change from 0 to 2048
[  188.537185][ T9135] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  188.549989][ T9136] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  188.554123][ T9135] syz.0.1270: attempt to access beyond end of device
[  188.554123][ T9135] loop0: rw=524288, sector=65534, nr_sectors = 2 limit=2048
[  188.652310][   T24] usb 5-1: USB disconnect, device number 13
[  188.811338][ T9138] loop0: detected capacity change from 0 to 32768
[  188.822424][ T9138] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  188.891417][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[  189.038822][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1275'.
[  189.487952][ T9178] loop4: detected capacity change from 0 to 256
[  189.495519][ T9180] loop3: detected capacity change from 0 to 256
[  190.060195][ T9191] loop4: detected capacity change from 0 to 32768
[  190.587243][ T9198] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  190.790399][ T9208] loop3: detected capacity change from 0 to 2048
[  190.809839][ T9209] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.876729][ T9209] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  190.880324][ T9209] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  190.886181][ T9209] Remounting filesystem read-only
[  190.888953][ T6720] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  190.917608][ T9215] loop4: detected capacity change from 0 to 256
[  190.922590][ T9215] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  191.122486][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'.
[  191.123564][ T9221] loop3: detected capacity change from 0 to 32768
[  191.132895][ T9221] JBD2: Ignoring recovery information on journal
[  191.169943][ T9221] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  191.237099][ T6720] ocfs2: Unmounting device (7,3) on (node local)
[  191.420732][ T9237] loop4: detected capacity change from 0 to 32768
[  191.437442][ T9237] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  191.477030][ T7737] (syz-executor,7737,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  191.484765][ T7737] ocfs2: Unmounting device (7,4) on (node local)
[  191.600042][ T9247] loop4: detected capacity change from 0 to 1024
[  191.650701][ T5310] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  191.667204][ T9249] loop4: detected capacity change from 0 to 512
[  191.676269][ T9249] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1321: casefold flag without casefold feature
[  191.683752][ T9249] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1321: couldn't read orphan inode 15 (err -117)
[  191.690312][ T9249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.721612][ T7737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.798600][ T5310] usb 4-1: Using ep0 maxpacket: 16
[  191.805100][ T5310] usb 4-1: config 0 has an invalid interface number: 49 but max is 0
[  191.814402][ T5310] usb 4-1: config 0 has no interface number 0
[  191.817140][ T5310] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  191.825456][ T5310] usb 4-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  191.830461][ T5310] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  191.834601][ T5310] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0
[  191.848798][ T5310] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  191.852398][ T5310] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3
[  191.855514][ T5310] usb 4-1: Product: syz
[  191.857418][ T5310] usb 4-1: Manufacturer: syz
[  191.860754][ T5310] usb 4-1: SerialNumber: syz
[  191.865659][ T5310] usb 4-1: config 0 descriptor??
[  191.870053][ T9241] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  191.988456][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  192.085217][ T5310] usb 4-1: USB disconnect, device number 16
[  192.148361][   T24] usb 5-1: Using ep0 maxpacket: 16
[  192.151988][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.156735][   T24] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  192.160497][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.169359][   T24] usb 5-1: config 0 descriptor??
[  192.582561][   T24] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0005/input/input13
[  192.617688][ T9259] loop3: detected capacity change from 0 to 512
[  192.674010][   T24] creative-sb0540 0003:041E:3100.0005: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0
[  192.801379][ T5310] usb 5-1: USB disconnect, device number 14
[  193.036180][ T9287] loop0: detected capacity change from 0 to 128
[  193.043084][ T9287] Invalid source name
[  193.048298][ T9287] UBIFS error (pid: 9287): cannot open "/dev/loop0", error -22
[  193.171438][ T9298] loop0: detected capacity change from 0 to 512
[  193.177701][ T9298] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  193.182785][ T9298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=800ec018, mo2=0082]
[  193.186532][ T9298] EXT4-fs (loop0): 1 truncate cleaned up
[  193.190585][ T9298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.213231][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.640154][ T9311] loop3: detected capacity change from 0 to 4096
[  193.643597][ T9311] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  193.647771][ T9311] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  193.652305][ T9311] NILFS (loop3): mounting unchecked fs
[  193.655777][ T9311] NILFS (loop3): invalid segment: Checksum error in segment payload
[  193.659353][ T9311] NILFS (loop3): unable to fall back to spare super block
[  193.661591][ T9311] NILFS (loop3): error -22 while searching super root
[  193.933997][ T9326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1355'.
[  194.178299][ T9332] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1358'.
[  194.241370][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  194.252599][ T9336] dns_resolver: Unsupported content type (218)
[  194.281715][ T9338] loop0: detected capacity change from 0 to 256
[  194.293120][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.298972][ T9338] FAT-fs (loop0): Directory bread(block 64) failed
[  194.301262][ T9338] FAT-fs (loop0): Directory bread(block 65) failed
[  194.303266][ T9338] FAT-fs (loop0): Directory bread(block 66) failed
[  194.305256][ T9338] FAT-fs (loop0): Directory bread(block 67) failed
[  194.307706][ T9338] FAT-fs (loop0): Directory bread(block 68) failed
[  194.310716][ T9338] FAT-fs (loop0): Directory bread(block 69) failed
[  194.313231][ T9338] FAT-fs (loop0): Directory bread(block 70) failed
[  194.315405][ T9338] FAT-fs (loop0): Directory bread(block 71) failed
[  194.317538][ T9338] FAT-fs (loop0): Directory bread(block 72) failed
[  194.319847][ T9338] FAT-fs (loop0): Directory bread(block 73) failed
[  194.388553][    T9] usb 5-1: Using ep0 maxpacket: 8
[  194.394124][    T9] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  194.397599][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.401596][    T9] usb 5-1: Product: syz
[  194.403232][    T9] usb 5-1: Manufacturer: syz
[  194.404777][    T9] usb 5-1: SerialNumber: syz
[  194.407870][    T9] usb 5-1: config 0 descriptor??
[  194.411613][    T9] gspca_main: sq930x-2.14.0 probing 2770:930c
[  194.698635][ T9345] loop0: detected capacity change from 0 to 32768
[  194.704797][ T9345] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1364 (9345)
[  194.713071][ T9345] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  194.716183][ T9345] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  194.719260][ T9345] BTRFS info (device loop0): using free-space-tree
[  194.734131][ T9345] BTRFS info (device loop0): rebuilding free space tree
[  194.754632][ T9345] BTRFS error: failed to open device for path  with flags 0x1: -2
[  194.770086][ T5846] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  194.824678][    T9] gspca_sq930x: ucbus_write failed -71
[  194.826632][    T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  194.830817][    T9] usb 5-1: USB disconnect, device number 15
[  195.185084][ T9362] loop3: detected capacity change from 0 to 32768
[  195.442376][ T9379] netem: incorrect ge model size
[  195.444849][ T9379] netem: change failed
[  195.568128][ T9362] JBD2: Ignoring recovery information on journal
[  195.607620][ T9362] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  195.749906][ T6720] ocfs2: Unmounting device (7,3) on (node local)
[  196.185567][ T9405] loop0: detected capacity change from 0 to 256
[  196.201402][ T9405] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[  196.293769][ T9410] loop3: detected capacity change from 0 to 4096
[  196.311381][ T9410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.339924][ T9410] __quota_error: 297 callbacks suppressed
[  196.339939][ T9410] Quota error (device loop3): do_check_range: Getting block 7 out of range 1-5
[  196.347395][ T9410] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  196.353197][ T9410] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1387: Failed to acquire dquot type 1
[  196.396931][ T6720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.577458][ T9430] netlink: 'syz.4.1396': attribute type 8 has an invalid length.
[  196.808586][  T976] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  197.209841][  T976] usb 4-1: Using ep0 maxpacket: 8
[  197.215791][  T976] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  197.218718][  T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.222641][  T976] usb 4-1: Product: syz
[  197.224251][  T976] usb 4-1: Manufacturer: syz
[  197.225713][  T976] usb 4-1: SerialNumber: syz
[  197.232055][  T976] usb 4-1: config 0 descriptor??
[  197.241849][  T976] gspca_main: sq905-2.14.0 probing 2770:9120
[  197.349485][ T9449] loop4: detected capacity change from 0 to 512
[  197.389190][ T9449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.399943][ T9449] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.435621][ T7737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.239077][  T976] gspca_sq905: sq905_command: usb_control_msg failed (-110)
[  198.242141][  T976] sq905 4-1:0.0: probe with driver sq905 failed with error -110
[  198.470625][  T976] usb 4-1: USB disconnect, device number 17
[  198.829719][ T9497] loop3: detected capacity change from 0 to 256
[  198.877209][ T9497] FAT-fs (loop3): Directory bread(block 64) failed
[  198.884258][ T9497] FAT-fs (loop3): Directory bread(block 65) failed
[  198.887130][ T9497] FAT-fs (loop3): Directory bread(block 66) failed
[  198.909975][ T9497] FAT-fs (loop3): Directory bread(block 67) failed
[  198.920962][ T9497] FAT-fs (loop3): Directory bread(block 68) failed
[  198.923777][ T9497] FAT-fs (loop3): Directory bread(block 69) failed
[  198.926432][ T9497] FAT-fs (loop3): Directory bread(block 70) failed
[  198.928705][ T9497] FAT-fs (loop3): Directory bread(block 71) failed
[  198.930846][ T9497] FAT-fs (loop3): Directory bread(block 72) failed
[  198.941529][ T9497] FAT-fs (loop3): Directory bread(block 73) failed
[  198.948660][ T9503] netlink: 'syz.4.1428': attribute type 4 has an invalid length.
[  198.952473][ T9495] loop0: detected capacity change from 0 to 32768
[  198.958045][ T9495] (syz.0.1424,9495,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  198.963633][ T9495] (syz.0.1424,9495,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  198.978403][ T9495] JBD2: Ignoring recovery information on journal
[  198.984554][ T9503] netlink: 'syz.4.1428': attribute type 4 has an invalid length.
[  199.020466][ T9495] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  199.047602][ T9495] ocfs2: Unmounting device (7,0) on (node local)
[  199.906671][ T9524] loop4: detected capacity change from 0 to 1024
[  199.981045][ T9524] hfsplus: bad catalog entry type
[  200.272124][   T27] hfsplus: b-tree write err: -5, ino 4
[  200.987695][ T9554] Bluetooth: MGMT ver 1.23
[  201.194251][ T9566] loop3: detected capacity change from 0 to 2048
[  201.199721][ T9566] EXT4-fs (loop3): unsupported descriptor size 3
[  201.902399][ T9572] loop0: detected capacity change from 0 to 1024
[  201.908175][ T9564] loop4: detected capacity change from 0 to 131072
[  201.919232][ T9564] F2FS-fs (loop4): invalid crc value
[  201.982561][ T9564] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  201.987487][ T9564] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  202.114355][ T9584] netlink: 'syz.0.1464': attribute type 10 has an invalid length.
[  202.142516][ T9584] team0: Cannot enslave team device to itself
[  202.394276][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'.
[  202.582987][ T9606] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  202.696595][ T9608] geneve2: entered allmulticast mode
[  202.874737][ T9614] loop4: detected capacity change from 0 to 512
[  202.881235][ T9614] EXT4-fs (loop4): invalid first ino: 0
[  203.045212][ T9616] loop3: detected capacity change from 0 to 32768
[  203.050636][ T9616] bcachefs (/dev/loop3): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-45ca-8231-f2ffffffffff)
[  203.066829][ T9616] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  203.066829][ T9616] members_v2 (size 96):
[  203.066829][ T9616] member_bytes 0
[  203.076821][ T9616] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  203.369294][ T9630] loop3: detected capacity change from 0 to 8
[  203.381773][ T9630] SQUASHFS error: Failed to read block 0x260685: -5
[  203.387596][ T9630] SQUASHFS error: Unable to read metadata cache entry [260685]
[  203.390636][ T9630] SQUASHFS error: Unable to read directory block [260685:0]
[  203.484885][  T976] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  203.647880][  T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  203.652451][  T976] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  203.657730][  T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  203.664432][  T976] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  203.668836][  T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.672261][  T976] usb 5-1: Product: syz
[  203.674110][  T976] usb 5-1: Manufacturer: syz
[  203.676149][  T976] usb 5-1: SerialNumber: syz
[  203.680731][  T976] usb 5-1: config 0 descriptor??
[  203.686162][ T9622] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  203.690407][  T976] usb 5-1: ucan: probing device on interface #0
[  203.693025][  T976] usb 5-1: ucan: invalid endpoint configuration
[  203.695524][  T976] usb 5-1: ucan: probe failed; try to update the device firmware
[  203.917760][ T5310] usb 5-1: USB disconnect, device number 16
[  204.407267][ T9637] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  205.062305][ T9655] loop4: detected capacity change from 0 to 32768
[  205.068723][ T9655] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1495 (9655)
[  205.083882][ T9655] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  205.091375][ T9655] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  205.095144][ T9655] BTRFS info (device loop4): disk space caching is enabled
[  205.098462][ T9655] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  205.121838][ T9666] loop3: detected capacity change from 0 to 2048
[  205.127104][ T9666] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  205.134074][ T9666] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  205.136223][ T9655] BTRFS info (device loop4): rebuilding free space tree
[  205.137615][ T9666] UDF-fs: Scanning with blocksize 512 failed
[  205.149860][ T9666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  205.156500][ T9655] BTRFS info (device loop4): disabling free space tree
[  205.161242][ T9655] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  205.165759][ T9655] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  205.218841][ T9655] BTRFS info (device loop4): balance: start -d -m
[  205.234367][ T9655] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  205.274858][ T9655] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata
[  205.288019][ T9686] bridge1: entered allmulticast mode
[  205.365778][ T9688] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1504'.
[  205.385182][ T9655] BTRFS info (device loop4): found 9 extents, stage: move data extents
[  205.404292][ T9688] hsr_slave_0: left promiscuous mode
[  205.408199][ T9688] hsr_slave_1: left promiscuous mode
[  205.450301][ T9655] BTRFS info (device loop4): found 1 extents, stage: update data pointers
[  205.470289][ T9655] BTRFS info (device loop4): balance: ended with status: 0
[  205.563050][ T7737] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  205.619722][ T9692] loop0: detected capacity change from 0 to 4096
[  205.644469][ T9692] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  205.670217][ T9692] ntfs3(loop0): Failed to load $Extend (-22).
[  205.674632][ T9692] ntfs3(loop0): Failed to initialize $Extend.
[  205.897258][ T9702] loop0: detected capacity change from 0 to 4096
[  205.916246][ T9702] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  205.929410][ T9702] ntfs3(loop0): Failed to load $Extend (-22).
[  205.932279][ T9702] ntfs3(loop0): Failed to initialize $Extend.
[  206.025528][ T9712] netlink: 'syz.0.1516': attribute type 24 has an invalid length.
[  206.171985][ T5310] kernel read not supported for file /dsp (pid: 5310 comm: kworker/0:3)
[  206.277432][ T9723] netlink: 'syz.4.1515': attribute type 9 has an invalid length.
[  206.281303][ T9723] netlink: 'syz.4.1515': attribute type 7 has an invalid length.
[  206.284132][ T9723] netlink: 'syz.4.1515': attribute type 8 has an invalid length.
[  206.539819][ T9730] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  206.539819][ T9730]    program syz.3.1524 not setting count and/or reply_len properly
[  206.556478][ T9732] binder: 9731:9732 ioctl 400c620e 9999999999999999 returned -14
[  206.586172][   T33] audit: type=1326 audit(1755078579.390:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.3.1526" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edb38ebe9 code=0x7ffc0000
[  206.600515][   T33] audit: type=1326 audit(1755078579.390:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.3.1526" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edb38ebe9 code=0x7ffc0000
[  206.608967][   T33] audit: type=1326 audit(1755078579.390:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.3.1526" exe="/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f4edb38ebe9 code=0x7ffc0000
[  206.627249][   T33] audit: type=1326 audit(1755078579.390:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.3.1526" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edb38ebe9 code=0x7ffc0000
[  206.644805][ T9738] 8021q: adding VLAN 0 to HW filter on device bond1
[  206.646386][   T33] audit: type=1326 audit(1755078579.390:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.3.1526" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edb38ebe9 code=0x7ffc0000
[  206.683001][ T9741] loop0: detected capacity change from 0 to 256
[  206.693772][ T9741] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  206.993903][   T55] Bluetooth: hci1: unexpected event for opcode 0x1804
[  207.906906][ T9766] netlink: 'syz.4.1539': attribute type 10 has an invalid length.
[  207.910727][ T9766] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1539'.
[  208.356906][ T9785] loop0: detected capacity change from 0 to 4096
[  208.361743][ T9785] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  208.385120][ T9785] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  208.387658][ T9785] ntfs3(loop0): Failed to load $Extend (-22).
[  208.389578][ T9785] ntfs3(loop0): Failed to initialize $Extend.
[  208.411350][ T9785] [syz.0.1548/9785] FS: loop0 File: /file0/hugetlb.2MB.usage_in_bytes would truncate fibmap result
[  208.444775][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  208.538676][ T9795] loop0: detected capacity change from 0 to 128
[  208.541917][ T9795] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  208.546933][ T9795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.566937][ T9795] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only
[  208.570349][ T9795] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null.
[  208.612494][ T9789] loop4: detected capacity change from 0 to 32768
[  208.628823][    T9] usb 4-1: Using ep0 maxpacket: 8
[  208.640234][ T9789] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  208.644444][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.648877][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.658520][    T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  208.671417][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.696258][    T9] usb 4-1: config 0 descriptor??
[  208.703267][ T9789] XFS (loop4): Ending clean mount
[  208.718982][ T9789] XFS (loop4): Quotacheck needed: Please wait.
[  208.768390][ T9789] XFS (loop4): Quotacheck: Done.
[  208.824098][ T9789] XFS (loop4): User initiated shutdown received.
[  208.828850][ T9789] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  208.833943][ T9789] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  208.864936][ T7737] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  208.960566][ T9809] overlay: Unknown parameter '/'
[  208.988945][ T9809] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  209.672120][ T5910] usb 4-1: USB disconnect, device number 18
[  209.728260][ T9811] loop4: detected capacity change from 0 to 32768
[  209.745966][ T9811] JBD2: Invalid start block of journal: 2147483648
[  209.748557][ T9811] (syz.4.1556,9811,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  209.755336][ T9811] (syz.4.1556,9811,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  209.760110][ T9811] (syz.4.1556,9811,1):ocfs2_check_volume:2432 ERROR: status = -22
[  209.763090][ T9811] (syz.4.1556,9811,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  209.774006][ T9811] (syz.4.1556,9811,1):ocfs2_fill_super:1177 ERROR: status = -22
[  210.545017][ T9824] loop4: detected capacity change from 0 to 32768
[  210.547970][ T9824] jfs: Unknown parameter ''
[  211.383834][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  211.386817][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  211.390288][   T55] Bluetooth: hci1: hardware error 0x00
[  212.045548][ T9854] loop4: detected capacity change from 0 to 256
[  212.476002][ T9857] loop3: detected capacity change from 0 to 128
[  212.497791][ T9857] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  212.502867][ T9857] ext4 filesystem being mounted at /467/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  212.541398][ T6720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  212.722030][ T9865] loop3: detected capacity change from 0 to 1024
[  212.729236][ T9865] EXT4-fs: Ignoring removed bh option
[  212.731521][ T9865] EXT4-fs: inline encryption not supported
[  212.740648][ T9865] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  212.757481][ T9865] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1578: lblock 2 mapped to illegal pblock 2 (length 1)
[  212.764977][ T9865] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  212.772083][ T9865] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1578: lblock 0 mapped to illegal pblock 48 (length 1)
[  212.778351][ T9865] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  212.785353][ T9865] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1578: Failed to acquire dquot type 0
[  212.790840][ T9865] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  212.798136][ T9865] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1578: mark_inode_dirty error
[  212.803887][ T9865] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  212.807977][ T9865] EXT4-fs (loop3): 1 orphan inode deleted
[  212.815759][ T9865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.822017][   T53] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  212.839861][   T53] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  212.845154][ T9865] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.1578: Invalid inode table block 1 in block_group 0
[  212.850735][ T9865] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  212.853754][   T53] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u9:2: Failed to release dquot type 0
[  212.882663][ T6720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.887010][ T1090] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  212.892948][ T1090] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  212.896431][ T1090] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u10:5: Failed to release dquot type 0
[  212.902133][ T6720] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  212.914238][ T6720] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  212.918312][ T6720] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  213.262526][ T9876] loop0: detected capacity change from 0 to 736
[  213.556217][ T9893] ==================================================================
[  213.558988][ T9893] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  213.561453][ T9893] Read of size 2 at addr ffff8881102bca42 by task syz.4.1589/9893
[  213.564234][ T9893] 
[  213.565657][ T9893] CPU: 0 UID: 0 PID: 9893 Comm: syz.4.1589 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  213.565677][ T9893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.565689][ T9893] Call Trace:
[  213.565697][ T9893]  <TASK>
[  213.565704][ T9893]  dump_stack_lvl+0x189/0x250
[  213.565728][ T9893]  ? __kasan_check_byte+0x12/0x40
[  213.565747][ T9893]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.565763][ T9893]  ? lock_release+0x4b/0x3e0
[  213.565788][ T9893]  ? __virt_addr_valid+0x4a5/0x5c0
[  213.565806][ T9893]  print_report+0xca/0x240
[  213.565821][ T9893]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  213.565840][ T9893]  kasan_report+0x118/0x150
[  213.565860][ T9893]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  213.565874][ T9893]  __xfrm_state_lookup+0x6ad/0x8d0
[  213.565895][ T9893]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  213.565915][ T9893]  ? xfrm_state_lookup+0x45/0x1e0
[  213.565966][ T9893]  xfrm_state_lookup+0x11e/0x1e0
[  213.565989][ T9893]  xfrm_user_state_lookup+0x231/0x370
[  213.566006][ T9893]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  213.566025][ T9893]  xfrm_del_sa+0xf1/0x3e0
[  213.566038][ T9893]  ? __pfx_xfrm_del_sa+0x10/0x10
[  213.566050][ T9893]  ? apparmor_capable+0x137/0x1b0
[  213.566067][ T9893]  ? __nla_parse+0x40/0x60
[  213.566083][ T9893]  xfrm_user_rcv_msg+0x7a3/0xab0
[  213.566094][ T9893]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  213.566118][ T9893]  ? __pfx___mutex_trylock_common+0x10/0x10
[  213.566135][ T9893]  ? rcu_is_watching+0x15/0xb0
[  213.566149][ T9893]  ? trace_contention_end+0x39/0x120
[  213.566164][ T9893]  ? __mutex_lock+0x335/0x1360
[  213.566183][ T9893]  netlink_rcv_skb+0x208/0x470
[  213.566195][ T9893]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  213.566208][ T9893]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  213.566230][ T9893]  ? netlink_deliver_tap+0x2e/0x1b0
[  213.566247][ T9893]  ? netlink_deliver_tap+0x2e/0x1b0
[  213.566265][ T9893]  xfrm_netlink_rcv+0x79/0x90
[  213.566277][ T9893]  netlink_unicast+0x82f/0x9e0
[  213.566299][ T9893]  ? __pfx_netlink_unicast+0x10/0x10
[  213.566314][ T9893]  ? netlink_sendmsg+0x642/0xb30
[  213.566330][ T9893]  ? skb_put+0x11b/0x210
[  213.566345][ T9893]  netlink_sendmsg+0x805/0xb30
[  213.566365][ T9893]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.566383][ T9893]  ? aa_sock_msg_perm+0xf1/0x1d0
[  213.566403][ T9893]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  213.566419][ T9893]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.566432][ T9893]  __sock_sendmsg+0x21c/0x270
[  213.566444][ T9893]  ____sys_sendmsg+0x505/0x830
[  213.566465][ T9893]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.566487][ T9893]  ? import_iovec+0x74/0xa0
[  213.566502][ T9893]  ___sys_sendmsg+0x21f/0x2a0
[  213.566521][ T9893]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.566546][ T9893]  ? __fget_files+0x2a/0x420
[  213.566568][ T9893]  ? __fget_files+0x3a0/0x420
[  213.566592][ T9893]  __x64_sys_sendmsg+0x19b/0x260
[  213.566611][ T9893]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  213.566628][ T9893]  ? rcu_is_watching+0x15/0xb0
[  213.566651][ T9893]  ? do_syscall_64+0xbe/0x3b0
[  213.566674][ T9893]  do_syscall_64+0xfa/0x3b0
[  213.566692][ T9893]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.566705][ T9893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.566718][ T9893]  ? exc_page_fault+0x9f/0xf0
[  213.566735][ T9893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.566750][ T9893] RIP: 0033:0x7fd51d98ebe9
[  213.566766][ T9893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.566781][ T9893] RSP: 002b:00007fd51e7dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.566795][ T9893] RAX: ffffffffffffffda RBX: 00007fd51dbb5fa0 RCX: 00007fd51d98ebe9
[  213.566804][ T9893] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  213.566814][ T9893] RBP: 00007fd51da11e19 R08: 0000000000000000 R09: 0000000000000000
[  213.566824][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.566834][ T9893] R13: 00007fd51dbb6038 R14: 00007fd51dbb5fa0 R15: 00007ffc4e81b1b8
[  213.566851][ T9893]  </TASK>
[  213.566857][ T9893] 
[  213.709248][ T9893] Allocated by task 8916:
[  213.711000][ T9893]  kasan_save_track+0x3e/0x80
[  213.712856][ T9893]  __kasan_slab_alloc+0x6c/0x80
[  213.714788][ T9893]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  213.717028][ T9893]  xfrm_state_alloc+0x24/0x2f0
[  213.718960][ T9893]  __find_acq_core+0x8a7/0x1c00
[  213.720900][ T9893]  xfrm_find_acq+0x78/0xa0
[  213.722707][ T9893]  xfrm_alloc_userspi+0x6b3/0xc90
[  213.724718][ T9893]  xfrm_user_rcv_msg+0x7a3/0xab0
[  213.726692][ T9893]  netlink_rcv_skb+0x208/0x470
[  213.728581][ T9893]  xfrm_netlink_rcv+0x79/0x90
[  213.730365][ T9893]  netlink_unicast+0x82f/0x9e0
[  213.732275][ T9893]  netlink_sendmsg+0x805/0xb30
[  213.734208][ T9893]  __sock_sendmsg+0x21c/0x270
[  213.736060][ T9893]  ____sys_sendmsg+0x505/0x830
[  213.737956][ T9893]  ___sys_sendmsg+0x21f/0x2a0
[  213.739860][ T9893]  __x64_sys_sendmsg+0x19b/0x260
[  213.741820][ T9893]  do_syscall_64+0xfa/0x3b0
[  213.743661][ T9893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.746049][ T9893] 
[  213.747020][ T9893] Freed by task 5910:
[  213.748590][ T9893]  kasan_save_track+0x3e/0x80
[  213.750477][ T9893]  kasan_save_free_info+0x46/0x50
[  213.752476][ T9893]  __kasan_slab_free+0x5b/0x80
[  213.754431][ T9893]  kmem_cache_free+0x18f/0x400
[  213.756336][ T9893]  xfrm_state_gc_task+0x52d/0x6b0
[  213.758338][ T9893]  process_scheduled_works+0xae1/0x17b0
[  213.760475][ T9893]  worker_thread+0x8a0/0xda0
[  213.762313][ T9893]  kthread+0x711/0x8a0
[  213.763948][ T9893]  ret_from_fork+0x3fc/0x770
[  213.765781][ T9893]  ret_from_fork_asm+0x1a/0x30
[  213.767690][ T9893] 
[  213.768665][ T9893] The buggy address belongs to the object at ffff8881102bc900
[  213.768665][ T9893]  which belongs to the cache xfrm_state of size 928
[  213.773048][ T9893] The buggy address is located 322 bytes inside of
[  213.773048][ T9893]  freed 928-byte region [ffff8881102bc900, ffff8881102bcca0)
[  213.778334][ T9893] 
[  213.779288][ T9893] The buggy address belongs to the physical page:
[  213.781803][ T9893] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1102bc
[  213.785289][ T9893] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  213.788563][ T9893] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  213.791558][ T9893] page_type: f5(slab)
[  213.793175][ T9893] raw: 057ff00000000040 ffff88801beec780 dead000000000122 0000000000000000
[  213.796515][ T9893] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  213.799823][ T9893] head: 057ff00000000040 ffff88801beec780 dead000000000122 0000000000000000
[  213.802993][ T9893] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  213.806349][ T9893] head: 057ff00000000002 ffffea000440af01 00000000ffffffff 00000000ffffffff
[  213.809607][ T9893] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  213.812882][ T9893] page dumped because: kasan: bad access detected
[  213.815314][ T9893] page_owner tracks the page as allocated
[  213.817492][ T9893] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6376, tgid 6375 (syz.2.193), ts 87602796573, free_ts 70676528240
[  213.824708][ T9893]  post_alloc_hook+0x240/0x2a0
[  213.826538][ T9893]  get_page_from_freelist+0x21e4/0x22c0
[  213.828626][ T9893]  __alloc_frozen_pages_noprof+0x181/0x370
[  213.830897][ T9893]  alloc_pages_mpol+0x232/0x4a0
[  213.832816][ T9893]  allocate_slab+0x8a/0x370
[  213.834650][ T9893]  ___slab_alloc+0xbeb/0x1410
[  213.836541][ T9893]  kmem_cache_alloc_noprof+0x283/0x3c0
[  213.838671][ T9893]  xfrm_state_alloc+0x24/0x2f0
[  213.840514][ T9893]  __find_acq_core+0x8a7/0x1c00
[  213.842408][ T9893]  xfrm_find_acq+0x78/0xa0
[  213.844223][ T9893]  xfrm_alloc_userspi+0x6b3/0xc90
[  213.846234][ T9893]  xfrm_user_rcv_msg+0x7a3/0xab0
[  213.848229][ T9893]  netlink_rcv_skb+0x208/0x470
[  213.850143][ T9893]  xfrm_netlink_rcv+0x79/0x90
[  213.852018][ T9893]  netlink_unicast+0x82f/0x9e0
[  213.853899][ T9893]  netlink_sendmsg+0x805/0xb30
[  213.855806][ T9893] page last free pid 5854 tgid 5854 stack trace:
[  213.858315][ T9893]  __free_frozen_pages+0xbc4/0xd30
[  213.860381][ T9893]  __slab_free+0x303/0x3c0
[  213.862188][ T9893]  qlist_free_all+0x97/0x140
[  213.864058][ T9893]  kasan_quarantine_reduce+0x148/0x160
[  213.866227][ T9893]  __kasan_slab_alloc+0x22/0x80
[  213.868165][ T9893]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  213.870326][ T9893]  getname_flags+0xb8/0x540
[  213.872131][ T9893]  do_sys_openat2+0xbc/0x1c0
[  213.873964][ T9893]  __x64_sys_openat+0x138/0x170
[  213.875782][ T9893]  do_syscall_64+0xfa/0x3b0
[  213.877557][ T9893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.879956][ T9893] 
[  213.880936][ T9893] Memory state around the buggy address:
[  213.882792][ T9893]  ffff8881102bc900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.885877][ T9893]  ffff8881102bc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.889054][ T9893] >ffff8881102bca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.892207][ T9893]                                            ^
[  213.894620][ T9893]  ffff8881102bca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.897797][ T9893]  ffff8881102bcb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.900889][ T9893] ==================================================================
[  213.905492][   T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  213.905998][ T9893] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  213.906015][ T9893] CPU: 0 UID: 0 PID: 9893 Comm: syz.4.1589 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  213.906036][ T9893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.906048][ T9893] Call Trace:
[  213.906055][ T9893]  <TASK>
[  213.906063][ T9893]  dump_stack_lvl+0x99/0x250
[  213.906089][ T9893]  ? __asan_memcpy+0x40/0x70
[  213.906108][ T9893]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.906126][ T9893]  ? __pfx__printk+0x10/0x10
[  213.906151][ T9893]  vpanic+0x281/0x750
[  213.906167][ T9893]  ? preempt_schedule+0xae/0xc0
[  213.906184][ T9893]  ? __pfx_vpanic+0x10/0x10
[  213.906198][ T9893]  ? preempt_schedule_common+0x83/0xd0
[  213.906214][ T9893]  ? preempt_schedule+0xae/0xc0
[  213.906227][ T9893]  ? __pfx_preempt_schedule+0x10/0x10
[  213.906246][ T9893]  panic+0xb9/0xc0
[  213.906263][ T9893]  ? __pfx_panic+0x10/0x10
[  213.906279][ T9893]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  213.906302][ T9893]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  213.906323][ T9893]  check_panic_on_warn+0x89/0xb0
[  213.906345][ T9893]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  213.906364][ T9893]  end_report+0x78/0x160
[  213.906383][ T9893]  kasan_report+0x129/0x150
[  213.906403][ T9893]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  213.906424][ T9893]  __xfrm_state_lookup+0x6ad/0x8d0
[  213.906446][ T9893]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  213.906467][ T9893]  ? xfrm_state_lookup+0x45/0x1e0
[  213.906488][ T9893]  xfrm_state_lookup+0x11e/0x1e0
[  213.906511][ T9893]  xfrm_user_state_lookup+0x231/0x370
[  213.906528][ T9893]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  213.906547][ T9893]  xfrm_del_sa+0xf1/0x3e0
[  213.906562][ T9893]  ? __pfx_xfrm_del_sa+0x10/0x10
[  213.906574][ T9893]  ? apparmor_capable+0x137/0x1b0
[  213.906591][ T9893]  ? __nla_parse+0x40/0x60
[  213.906616][ T9893]  xfrm_user_rcv_msg+0x7a3/0xab0
[  213.906634][ T9893]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  213.906660][ T9893]  ? __pfx___mutex_trylock_common+0x10/0x10
[  213.906680][ T9893]  ? rcu_is_watching+0x15/0xb0
[  213.906696][ T9893]  ? trace_contention_end+0x39/0x120
[  213.906711][ T9893]  ? __mutex_lock+0x335/0x1360
[  213.906730][ T9893]  netlink_rcv_skb+0x208/0x470
[  213.906749][ T9893]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  213.906763][ T9893]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  213.906784][ T9893]  ? netlink_deliver_tap+0x2e/0x1b0
[  213.906802][ T9893]  ? netlink_deliver_tap+0x2e/0x1b0
[  213.906818][ T9893]  xfrm_netlink_rcv+0x79/0x90
[  213.906830][ T9893]  netlink_unicast+0x82f/0x9e0
[  213.906847][ T9893]  ? __pfx_netlink_unicast+0x10/0x10
[  213.906862][ T9893]  ? netlink_sendmsg+0x642/0xb30
[  213.906878][ T9893]  ? skb_put+0x11b/0x210
[  213.906898][ T9893]  netlink_sendmsg+0x805/0xb30
[  213.906949][ T9893]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.906967][ T9893]  ? aa_sock_msg_perm+0xf1/0x1d0
[  213.906988][ T9893]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  213.907004][ T9893]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.907020][ T9893]  __sock_sendmsg+0x21c/0x270
[  213.907035][ T9893]  ____sys_sendmsg+0x505/0x830
[  213.907055][ T9893]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.907076][ T9893]  ? import_iovec+0x74/0xa0
[  213.907088][ T9893]  ___sys_sendmsg+0x21f/0x2a0
[  213.907105][ T9893]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.907133][ T9893]  ? __fget_files+0x2a/0x420
[  213.907153][ T9893]  ? __fget_files+0x3a0/0x420
[  213.907175][ T9893]  __x64_sys_sendmsg+0x19b/0x260
[  213.907194][ T9893]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  213.907217][ T9893]  ? rcu_is_watching+0x15/0xb0
[  213.907231][ T9893]  ? do_syscall_64+0xbe/0x3b0
[  213.907250][ T9893]  do_syscall_64+0xfa/0x3b0
[  213.907271][ T9893]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.907289][ T9893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.907304][ T9893]  ? exc_page_fault+0x9f/0xf0
[  213.907321][ T9893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.907336][ T9893] RIP: 0033:0x7fd51d98ebe9
[  213.907352][ T9893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.907368][ T9893] RSP: 002b:00007fd51e7dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.907387][ T9893] RAX: ffffffffffffffda RBX: 00007fd51dbb5fa0 RCX: 00007fd51d98ebe9
[  213.907401][ T9893] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  213.907411][ T9893] RBP: 00007fd51da11e19 R08: 0000000000000000 R09: 0000000000000000
[  213.907422][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.907432][ T9893] R13: 00007fd51dbb6038 R14: 00007fd51dbb5fa0 R15: 00007ffc4e81b1b8
[  213.907448][ T9893]  </TASK>
[  213.908823][ T9893] Kernel Offset: disabled

VM DIAGNOSIS:
09:49:47  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bcc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000001505 RDI=0000000000001506 RBP=ffffffff99de6770 RSP=ffffc9000310e910
R8 =ffff88801f878237 R9 =1ffff11003f0f046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e7247 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd51e7dc6c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd51e7dbfc8 CR3=0000000011a20000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd51db87498 00007fd51db87470 XMM03=00007fd51db874a8 00007fd51db874a0
XMM04=00007fd51e6ed100 00007fd51db87460 XMM05=00007fd51db87478 00007fd51db874c0
XMM06=00007fd51db874b8 00007fd51db874b0 XMM07=00007fd51db874a8 00007fd51db874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fd51da12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff822e5b0a RCX=826b40f564247800 RDX=0000000000000000
RSI=ffffffff8be325e0 RDI=ffffffff8be325a0 RBP=0000000000000001 RSP=ffffc90002bef258
R8 =0000000000000000 R9 =ffffffff822e5b0a R10=dffffc0000000000 R11=fffff940008a78f1
R12=dffffc0000000000 R13=ffffffff822e5b0a R14=ffffffff8e139fa0 R15=ffff88805fffa840
RIP=ffffffff8b78b190 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f75e51306c0 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000180 CR3=0000000011a20000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000000000001b 00000000010000e0
XMM02=15000c00ff000ad5 0400000000000000 XMM03=00001b0000000001 0000e025dfdbfb00
XMM04=00007fd51e6ed100 00007fd51db87460 XMM05=00007fd51db87478 00007fd51db874c0
XMM06=00007fd51db874b8 00007fd51db874b0 XMM07=00007fd51db874a8 00007fd51db874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fd51da12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
