last executing test programs:

16.06818306s ago: executing program 2 (id=945):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x11e, 0x1d, 0x0, 0x0)

16.067779499s ago: executing program 2 (id=947):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

15.990888094s ago: executing program 2 (id=948):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015001500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)

15.990477509s ago: executing program 2 (id=950):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000340)={0x0, 0x881c, 0x1, 0x2, 0x40000333, 0x0, r0}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/205, 0xcd}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

15.822109005s ago: executing program 2 (id=953):
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[])

15.4570437s ago: executing program 2 (id=960):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000000)=0x1)

15.300073301s ago: executing program 32 (id=960):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000000)=0x1)

3.459705278s ago: executing program 1 (id=1040):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008004)

3.392962519s ago: executing program 1 (id=1041):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000140)={r0, 0x0, 0x42, 0x0, &(0x7f0000000000)="3df7dab2742a1a61f6c362232d1ca21713228ebba21c414bd429d05f93b3b6cd1fcb7f9bbfbb1bc905d11583e1b93b5cd88a4c7d371f222aa269619b660c7d4f6187", 0x0, 0xd, 0x0, 0xa1, 0x0, &(0x7f0000000080)="6cda76a0cb69aa9286472dff66c8ffbd0b0cb7a6d5e68e91e0d6ed6a60fabc09fcb4dd1383593edef59da099eacb822a2749d7f0dc2c487e30da87d739e82a08e123f9b53e1e4b3a4eb01a1f659b8de567c570b02c918227d7e87a25870af1719286c055ad197c32b7104373fe5ea1c91bb58e20bbf4359770e5905ed5a8b4a48138db5835e1ea1b40218c71f5d3a2dccbf596e61e54e0ab32f9bec2c115c4f342", 0x0, 0x2, 0x0, 0x4}, 0x37)

3.288321933s ago: executing program 1 (id=1044):
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

2.180850936s ago: executing program 3 (id=1063):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x48}}, 0x0)

2.07009941s ago: executing program 3 (id=1067):
pipe2(0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x407, 0xa0018ce0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x18, r4, 0x1, 0x1, 0xfffffffd, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x4, &(0x7f0000000300)=ANY=[], 0x4, 0x388, &(0x7f0000000c80)="$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")

1.881372477s ago: executing program 1 (id=1071):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r0], 0x80}}, 0x0)

1.708152133s ago: executing program 1 (id=1072):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340))

1.461546879s ago: executing program 1 (id=1074):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r4, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.123815955s ago: executing program 3 (id=1079):
syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0MFNw0AQBdBvbMvJAaUHKqAIbtygEToA2oALvdABHSCqQAgGbbxEFBApl/cu/p6dnV1tOKnprIfPWk1Jxuyy7Kuv5+0vmcah9z0mz0keWn6ff6oqGT/eDgM3S+23trnzV9WQekpSNXyvCwc1ZMrN1e31rhfaQdt/DfM2y9zz3zU36+el6j65u7g89nsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCn8BgAA//9aEyEt")

720.417693ms ago: executing program 3 (id=1083):
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1)

560.57296ms ago: executing program 0 (id=1089):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000540)={0x0, 0x1, @stop_pts=0x6f})

509.918155ms ago: executing program 3 (id=1090):
prctl$PR_MCE_KILL(0x4e, 0x1, 0x2)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

509.50675ms ago: executing program 0 (id=1091):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000940)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@nonumtail}, {@utf8no}, {@fat=@flush}, {@uni_xlateno}, {@numtail}, {@fat=@tz_utc}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}]}, 0x1, 0x37c, &(0x7f00000005c0)="$eJzs3U+IG1UYAPAvO9kkK+juTRSE6E3Qpe1NL7bIFop7UQn+OYjBblWSVdjgYnvodj0oHgWPevKmoAcP4lEERbx58GoFqYoH7a3Q0ifJZGbSJG23ylYWfz8oeXzvfe+9eTMk0zB5++LR6J1cjFMXL16IVqsW9aOPH41LtViJLArnYlZjTgwAOBgupRR/pdx0XWt+Su02TAsA2Eejz/+XI6IdK3nkrW9u1D759AeAA2/8//+lG7WpvgdoXlvx+r5NCwDYRzPf/z9Qn6xujP6VofrEUwEAwEH19HPPP3FsPeKpdrsVsfnOdme7E49W9cdOxavRj404FMtxJSK/USjuFlI6fmJ97VC73d6JX1eiExEL48ROfqdwLBvlN+NwLMfKOH98t5FSyo5/vr52uD0SEed2RuPHZm378mI5/k93xEZ141F0MnqJOLG+dqQ97qCzWeTvROxWDyoM578ay/HDS2U3KRVPMK6vnT1cTLrK3+4042S5Ctd5EgIAAAAAAAAAAAAAAAAAAAAAAP6h1XZppdw/Jw1f851yVlfn1I/2x8nzx/sD7eb7A6VmipT+fPPhzrtZvk1PsT/Q1P482baNBAEAAAAAAAAAAAAAAAAAAKA0ON2Ibr+/sTU4faY3WdjZGpxeiIhh5LXvPv16KWbb3KRQz4doRpRDtMfDnul1U1Y0TlnEbHo2HLyIfPxFOePJNs3yKOZOo3n9qn7/zvt/+aCK3JcVPV+t2mQx/wCziWk8NtXz5l35lG5locrCkclIc3b08ymlicjbk+lnX5hq3IpB1CLqt37izvQWoowsjde4bJOGhW8vvHJPsfrdr1LuwYeWnzn//ke/97r94ch5VmNrcCX1urWi8R5GH3eXRqegujZqkRdqk1dC/fr9tLq710a62Y9/PHvve9/vbRHSZOSN4fU81SbLD+ez6fRGXhhOc6pqqUpfLJZ1Y3HOxX+zwtQ5vZpSqsc118ZM4e4Pv/wkpZ9/2/MQlYWZt43av3/nAQAAAAAAAAAAAAAAAAAAplU/+i0i4x/7Lt4o65En939mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD7VH//f6Kwey6mInspXN6Zk9Xc2BpENP7rwwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/u7wAAAP//RkdbNw==")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = fanotify_init(0x222, 0x800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x101, 0x8001043, r1, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000240)='./file0\x00')
r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
io_setup(0x200, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}])
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

392.568641ms ago: executing program 3 (id=1092):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})

386.935015ms ago: executing program 0 (id=1093):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0)

209.97957ms ago: executing program 0 (id=1094):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
listen(r2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20)

69.604781ms ago: executing program 0 (id=1095):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x8a0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x88c, 0x1, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x2, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x8, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x10008, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x81, 0xd425, 0x1, 0x10, 0x2a8, 0x6, 0x9, 0x9, 0x1, 0x10001, 0x400, 0x6, 0x10001, 0x5, 0x40, 0x6, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x25fe, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x7ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x1, 0x9, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0xfff, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x5, 0x46, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x800, 0x1ff, 0x0, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0xfffffff0, 0x0, 0x4, 0x4, 0xfffffffc, 0x0, 0x3, 0xfffffc01, 0x0, 0x6, 0x4, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0xfffffff9, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0x1, 0x30, 0x1, 0x7, 0x140000, 0xfffffff8, 0x23, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x40, 0x7, 0x200000, 0x8008, 0x3, 0xc, 0x6, 0x4, 0x9, 0xb99, 0x6, 0x7ff, 0x7fffffff, 0x9, 0xbdd1, 0x1, 0x132c, 0x4, 0x8, 0x0, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x15, 0x2, 0x1, 0x0, 0xac, 0x8, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x80, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x3, 0x9c7, 0x1, 0x6, 0x7, 0x1, 0x8, 0xa, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x3, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x3, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x80, 0x5b2, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9bb247db, 0x8d93, 0x8000, 0x14b, 0x9, 0x7, 0x6, 0xffffff81, 0x6, 0x21, 0x8006, 0x7, 0xfffffffc, 0xffffffff, 0x1, 0x2, 0x7, 0x40, 0x7, 0x0, 0x6, 0xfed, 0x9, 0xffffffff, 0x6, 0x4, 0x3, 0x6186, 0x8, 0x3, 0x3, 0x8fc, 0x3ff, 0xe, 0x7f, 0xfffffffc, 0x9, 0x7, 0x9, 0x2, 0x3, 0x8, 0x5, 0x10001, 0xfffffe65, 0x50b3, 0x4, 0x80, 0xd2840000, 0x25, 0x3, 0xffffff22, 0x7fffffff, 0x7f, 0x7fffffff, 0x3, 0x1ff, 0xffff090f, 0x4, 0x80000001, 0xf62, 0x8, 0x2, 0x100, 0x2, 0x2, 0x9, 0x3, 0xb362, 0xffff, 0xe82d, 0x5, 0x7348, 0x5, 0x2, 0x7fb5, 0x5621, 0x0, 0x9, 0x15bc896a, 0x1, 0x0, 0x100, 0x2, 0x3, 0x80, 0x4, 0x1ff, 0x0, 0x3, 0xf, 0xf3, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x5, 0xb5b7, 0x8, 0x10001, 0x0, 0x3, 0x0, 0x1cf0, 0x101, 0x7, 0x481, 0x9eb, 0x0, 0x0, 0x0, 0x3, 0x13, 0x0, 0xbb1, 0x1000, 0x7ff, 0x8000, 0x6, 0x7f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xb7a, 0xfffffffb, 0x202, 0x5, 0x4, 0x1, 0x3, 0xc7, 0x0, 0x6, 0x7, 0x9, 0x1, 0x7, 0x8, 0x9, 0x2, 0x0, 0x1, 0x10001, 0x54000000, 0x6, 0x400, 0x7, 0x400, 0x400051, 0x80, 0x5, 0xd6, 0x0, 0x1, 0x400, 0x5, 0x17, 0x10000005, 0x5b, 0x5, 0xfffffffe, 0x8000, 0xdeaa, 0x3, 0x1dc8, 0x3, 0x55, 0x9, 0x4, 0x4, 0x1000000a, 0x1, 0xdf4, 0x2, 0xc, 0x4, 0x3c, 0xae, 0x0, 0x0, 0x0, 0x7317, 0x1000, 0x9, 0x3, 0x7, 0x5, 0x5, 0x7fff, 0xe, 0x3, 0xcd, 0x3200, 0xb, 0x5, 0x6, 0x5, 0xffff, 0x3, 0x1537, 0x1, 0x6, 0x0, 0x9, 0x560d, 0x4, 0x2, 0x81, 0xe, 0x5, 0x5, 0x5, 0xd, 0x5, 0x7ff, 0x7, 0xc17, 0xd2bd, 0xb4, 0x5, 0x3, 0x200, 0x9, 0xe, 0x1, 0x9, 0x100, 0x7, 0x0, 0x6, 0x0, 0x4, 0xf1c, 0x80f, 0x7ff, 0x10000, 0x0, 0xd7d, 0x8, 0x7, 0x1, 0x1, 0x7, 0x7, 0x2f7, 0x5, 0xf8be, 0x8001]}]]}, {0x9, 0x6, "2791a64619"}, {0xc}, {0xc}}}]}]}, 0x8a0}}, 0x0)

0s ago: executing program 0 (id=1096):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10)
syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/36, 0x24}], 0x2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50388' (ED25519) to the list of known hosts.
syzkaller login: [   57.476047][ T5830] cgroup: Unknown subsys name 'net'
[   57.633212][ T5830] cgroup: Unknown subsys name 'cpuset'
[   57.638038][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.408997][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.034410][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.036931][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   72.084598][ T5930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.093702][ T5930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.099523][ T5930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.104325][ T5930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.108324][ T5930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.147389][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.151580][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.156813][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.162432][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.170563][ T5936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.173791][ T5936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.177165][ T5936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.180544][ T5936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.203024][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.211386][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.458310][ T5927] chnl_net:caif_netlink_parms(): no params data found
[   72.581729][ T5933] chnl_net:caif_netlink_parms(): no params data found
[   72.602683][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.605722][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.608156][ T5927] bridge_slave_0: entered allmulticast mode
[   72.611137][ T5927] bridge_slave_0: entered promiscuous mode
[   72.650944][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.653392][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.655859][ T5927] bridge_slave_1: entered allmulticast mode
[   72.658819][ T5927] bridge_slave_1: entered promiscuous mode
[   72.705744][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.712542][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.756440][ T5931] chnl_net:caif_netlink_parms(): no params data found
[   72.780752][ T5927] team0: Port device team_slave_0 added
[   72.787906][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.790979][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.794973][ T5933] bridge_slave_0: entered allmulticast mode
[   72.798396][ T5933] bridge_slave_0: entered promiscuous mode
[   72.804744][ T5927] team0: Port device team_slave_1 added
[   72.820933][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.823753][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.826178][ T5933] bridge_slave_1: entered allmulticast mode
[   72.830264][ T5933] bridge_slave_1: entered promiscuous mode
[   72.881004][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.883920][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.894678][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.915264][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.918136][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.928356][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.935181][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.954024][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.978970][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.982926][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.985967][ T5931] bridge_slave_0: entered allmulticast mode
[   72.989845][ T5931] bridge_slave_0: entered promiscuous mode
[   73.002813][ T5933] team0: Port device team_slave_0 added
[   73.006716][ T5933] team0: Port device team_slave_1 added
[   73.008903][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.012717][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.016323][ T5931] bridge_slave_1: entered allmulticast mode
[   73.020386][ T5931] bridge_slave_1: entered promiscuous mode
[   73.062615][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.085767][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.093248][ T5927] hsr_slave_0: entered promiscuous mode
[   73.096322][ T5927] hsr_slave_1: entered promiscuous mode
[   73.100924][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.103175][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.112299][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.137455][ T5931] team0: Port device team_slave_0 added
[   73.140427][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.142949][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.153504][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.160255][ T5931] team0: Port device team_slave_1 added
[   73.240901][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.243702][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.253465][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.259865][ T5933] hsr_slave_0: entered promiscuous mode
[   73.262336][ T5933] hsr_slave_1: entered promiscuous mode
[   73.264506][ T5933] debugfs: 'hsr0' already exists in 'hsr'
[   73.266457][ T5933] Cannot create hsr debugfs directory
[   73.276650][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.279553][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.288690][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.371377][ T5931] hsr_slave_0: entered promiscuous mode
[   73.373648][ T5931] hsr_slave_1: entered promiscuous mode
[   73.375833][ T5931] debugfs: 'hsr0' already exists in 'hsr'
[   73.377920][ T5931] Cannot create hsr debugfs directory
[   73.595499][ T5927] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.611262][ T5927] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.623609][ T5927] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.630079][ T5927] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.657786][ T5933] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.667250][ T5933] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.678013][ T5933] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.684617][ T5933] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.760102][ T5931] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.774687][ T5931] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.781501][ T5931] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.797632][ T5931] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.854824][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.885578][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.916502][ T5927] 8021q: adding VLAN 0 to HW filter on device team0
[   73.931274][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[   73.942238][ T4008] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.945475][ T4008] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.958139][ T4008] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.960792][ T4008] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.964744][ T4008] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.967247][ T4008] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.991835][ T4008] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.994724][ T4008] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.013953][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.058313][ T5931] 8021q: adding VLAN 0 to HW filter on device team0
[   74.081557][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.084707][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.112116][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.115149][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.160999][   T54] Bluetooth: hci0: command tx timeout
[   74.232353][   T54] Bluetooth: hci1: command tx timeout
[   74.235181][   T54] Bluetooth: hci2: command tx timeout
[   74.260778][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.304406][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.337073][ T5927] veth0_vlan: entered promiscuous mode
[   74.368116][ T5927] veth1_vlan: entered promiscuous mode
[   74.384459][ T5933] veth0_vlan: entered promiscuous mode
[   74.395309][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.401549][ T5933] veth1_vlan: entered promiscuous mode
[   74.430456][ T5927] veth0_macvtap: entered promiscuous mode
[   74.443959][ T5927] veth1_macvtap: entered promiscuous mode
[   74.453736][ T5933] veth0_macvtap: entered promiscuous mode
[   74.465638][ T5933] veth1_macvtap: entered promiscuous mode
[   74.474842][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.488437][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.493471][ T5931] veth0_vlan: entered promiscuous mode
[   74.497809][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.507498][ T5940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.513634][ T5940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.517210][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.530756][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.535424][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.540955][ T5931] veth1_vlan: entered promiscuous mode
[   74.562717][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.576029][ T5682] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.581672][ T5682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.585356][ T5682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.666679][ T5931] veth0_macvtap: entered promiscuous mode
[   74.674742][ T4008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.681531][ T4008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.688642][ T5931] veth1_macvtap: entered promiscuous mode
[   74.715297][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.730398][  T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.734109][  T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.736983][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.747047][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.758807][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.763866][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.778705][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.815255][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.818135][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.842717][ T4008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.852023][ T4008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.888617][ T5927] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.895719][  T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.898977][  T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.019382][ T4008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.023786][ T4008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.892600][ T6019] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.218598][ T6039] loop2: detected capacity change from 0 to 128
[   76.231062][ T5930] Bluetooth: hci0: command tx timeout
[   76.261044][ T6039] FAT-fs (loop2): Directory bread(block 32) failed
[   76.264015][ T6039] FAT-fs (loop2): Directory bread(block 33) failed
[   76.270515][ T6039] FAT-fs (loop2): Directory bread(block 34) failed
[   76.274478][ T6039] FAT-fs (loop2): Directory bread(block 35) failed
[   76.292405][ T6039] FAT-fs (loop2): Directory bread(block 36) failed
[   76.295230][ T6039] FAT-fs (loop2): Directory bread(block 37) failed
[   76.298006][ T6039] FAT-fs (loop2): Directory bread(block 38) failed
[   76.312498][ T5930] Bluetooth: hci2: command tx timeout
[   76.314919][ T5930] Bluetooth: hci1: command tx timeout
[   76.326959][ T6039] FAT-fs (loop2): Directory bread(block 39) failed
[   76.332136][ T6039] FAT-fs (loop2): Directory bread(block 40) failed
[   76.335653][ T6039] FAT-fs (loop2): Directory bread(block 41) failed
[   76.352885][ T6045] netlink: 'syz.1.89': attribute type 30 has an invalid length.
[   77.754632][ T6066] netlink: 'syz.2.98': attribute type 3 has an invalid length.
[   77.782947][ T6068] loop1: detected capacity change from 0 to 256
[   77.844319][ T6068] FAT-fs (loop1): Directory bread(block 64) failed
[   77.853303][ T6068] FAT-fs (loop1): Directory bread(block 65) failed
[   77.862610][ T6068] FAT-fs (loop1): Directory bread(block 66) failed
[   77.865538][ T6068] FAT-fs (loop1): Directory bread(block 67) failed
[   77.868459][ T6068] FAT-fs (loop1): Directory bread(block 68) failed
[   77.873955][ T6068] FAT-fs (loop1): Directory bread(block 69) failed
[   77.876932][ T6068] FAT-fs (loop1): Directory bread(block 70) failed
[   77.881337][ T6068] FAT-fs (loop1): Directory bread(block 71) failed
[   77.884234][ T6068] FAT-fs (loop1): Directory bread(block 72) failed
[   77.887062][ T6068] FAT-fs (loop1): Directory bread(block 73) failed
[   78.309404][   T54] Bluetooth: hci0: command tx timeout
[   78.389736][   T54] Bluetooth: hci1: command tx timeout
[   78.392987][   T54] Bluetooth: hci2: command tx timeout
[   78.606422][ T6100] batadv0: entered promiscuous mode
[   78.610123][ T6100] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   79.709871][ T5313] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   79.877860][ T5313] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   79.881829][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.885121][ T5313] usb 1-1: Product: syz
[   79.886907][ T5313] usb 1-1: Manufacturer: syz
[   79.888880][ T5313] usb 1-1: SerialNumber: syz
[   79.903130][ T5313] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   79.936342][ T5992] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   80.345626][ T5958] usb 1-1: USB disconnect, device number 2
[   80.389877][ T5930] Bluetooth: hci0: command tx timeout
[   80.419435][  T973] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   80.469841][   T54] Bluetooth: hci1: command tx timeout
[   80.470805][ T5930] Bluetooth: hci2: command tx timeout
[   80.575127][  T973] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[   80.579228][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.583088][  T973] usb 3-1: Product: syz
[   80.585418][  T973] usb 3-1: Manufacturer: syz
[   80.588073][  T973] usb 3-1: SerialNumber: syz
[   80.595554][  T973] usb 3-1: config 0 descriptor??
[   80.803898][  T973] airspy 3-1:0.0: usb_control_msg() failed -71 request 09
[   80.809468][  T973] airspy 3-1:0.0: Could not detect board
[   80.811932][  T973] airspy 3-1:0.0: probe with driver airspy failed with error -71
[   80.817792][  T973] usb 3-1: USB disconnect, device number 2
[   80.885872][ T6138] loop0: detected capacity change from 0 to 1024
[   80.898843][ T6138] EXT4-fs: Ignoring removed orlov option
[   80.927096][ T6138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.950619][ T5992] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[   80.956208][ T5992] ath9k_htc: Failed to initialize the device
[   80.963373][ T5958] usb 1-1: ath9k_htc: USB layer deinitialized
[   80.977883][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.988411][ T6160] netlink: 44 bytes leftover after parsing attributes in process `syz.0.138'.
[   82.054329][ T6162] syz.0.139 uses obsolete (PF_INET,SOCK_PACKET)
[   82.274095][ T6171] loop0: detected capacity change from 0 to 4096
[   82.305885][ T6171] ntfs3(loop0): Primary boot: invalid bytes per index 2(-1).
[   82.321476][ T6171] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[   82.639488][ T5313] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   82.791098][ T5313] usb 2-1: Using ep0 maxpacket: 32
[   82.794541][ T5313] usb 2-1: config 0 interface 0 has no altsetting 0
[   82.798799][ T5313] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   82.803373][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.806634][ T5313] usb 2-1: Product: syz
[   82.808184][ T5313] usb 2-1: Manufacturer: syz
[   82.809355][  T973] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   82.810746][ T5313] usb 2-1: SerialNumber: syz
[   82.816954][ T5313] usb 2-1: config 0 descriptor??
[   82.962924][  T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.967764][  T973] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   82.971775][  T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.976480][  T973] usb 1-1: config 0 descriptor??
[   83.228393][ T5313] gs_usb 2-1:0.0: Configuring for 84 interfaces
[   83.231162][ T5313] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces
[   83.234305][ T5313] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22
[   83.404189][  T973] cypress 0003:04B4:07B1.0001: unknown main item tag 0x0
[   83.418348][  T973] cypress 0003:04B4:07B1.0001: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.0-1/input0
[   83.450169][ T5313] usb 2-1: USB disconnect, device number 2
[   83.597204][ T5992] usb 1-1: USB disconnect, device number 3
[   83.780449][  T973] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   83.931344][  T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.935830][  T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.939993][  T973] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   83.945290][  T973] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   83.948912][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.954700][  T973] usb 3-1: config 0 descriptor??
[   84.134869][ T6204] loop1: detected capacity change from 0 to 512
[   84.139203][ T6204] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   84.397486][  T973] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   84.410112][  T973] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   84.413305][  T973] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   84.416416][  T973] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   84.419047][  T973] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   84.434047][  T973] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   84.649534][ T5992] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   84.812695][  T973] usb 3-1: USB disconnect, device number 3
[   84.839932][ T5992] usb 1-1: Using ep0 maxpacket: 8
[   84.846014][ T5992] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   84.849888][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.852553][ T5992] usb 1-1: Product: syz
[   84.854105][ T5992] usb 1-1: Manufacturer: syz
[   84.856509][ T5992] usb 1-1: SerialNumber: syz
[   84.860972][ T5992] usb 1-1: config 0 descriptor??
[   85.067950][ T5992] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   85.491282][ T5992] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   85.514055][ T5992] usb 1-1: USB disconnect, device number 4
[   86.394823][    T9] cfg80211: failed to load regulatory.db
[   86.773728][ T6233] fanotify: failed to encode fid (type=0, len=0, err=-2)
[   86.795365][ T6223] loop0: detected capacity change from 0 to 32768
[   86.798830][ T6223] XFS: ikeep mount option is deprecated.
[   86.857887][ T6223] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   86.877878][ T6223] XFS (loop0): Ending clean mount
[   86.908181][ T6223] XFS (loop0): Quotacheck needed: Please wait.
[   86.962883][ T6223] XFS (loop0): Quotacheck: Done.
[   86.990795][ T6251] capability: warning: `syz.2.175' uses deprecated v2 capabilities in a way that may be insecure
[   87.016839][ T6251] 9pnet_rdma: rdma_create_trans (6251): problem binding to privport: 13
[   87.054943][ T5933] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   87.418851][ T6268] bridge_slave_0: default FDB implementation only supports local addresses
[   87.768026][ T6286] loop0: detected capacity change from 0 to 512
[   87.853036][ T6286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.871225][ T6286] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.945936][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.672520][ T6327] loop2: detected capacity change from 0 to 256
[   88.714530][ T6327] FAT-fs (loop2): Directory bread(block 64) failed
[   88.719486][ T6327] FAT-fs (loop2): Directory bread(block 65) failed
[   88.722272][ T6327] FAT-fs (loop2): Directory bread(block 66) failed
[   88.748010][ T6327] FAT-fs (loop2): Directory bread(block 67) failed
[   88.762660][ T6331] loop0: detected capacity change from 0 to 1024
[   88.766610][ T6327] FAT-fs (loop2): Directory bread(block 68) failed
[   88.768680][ T6327] FAT-fs (loop2): Directory bread(block 69) failed
[   88.779029][ T6327] FAT-fs (loop2): Directory bread(block 70) failed
[   88.781627][ T6327] FAT-fs (loop2): Directory bread(block 71) failed
[   88.784066][ T6327] FAT-fs (loop2): Directory bread(block 72) failed
[   88.787236][ T6327] FAT-fs (loop2): Directory bread(block 73) failed
[   88.866211][   T33] audit: type=1800 audit(1755131646.490:2): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.207" name="file1" dev="loop0" ino=20 res=0 errno=0
[   89.250291][ T6354] syz.2.215: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   89.260224][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.2.215 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   89.260237][ T6354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.260242][ T6354] Call Trace:
[   89.260246][ T6354]  <TASK>
[   89.260249][ T6354]  dump_stack_lvl+0x189/0x250
[   89.260264][ T6354]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.260273][ T6354]  ? __pfx__printk+0x10/0x10
[   89.260284][ T6354]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   89.260294][ T6354]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   89.260303][ T6354]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   89.260311][ T6354]  warn_alloc+0x214/0x310
[   89.260324][ T6354]  ? stack_depot_save_flags+0x41b/0x860
[   89.260333][ T6354]  ? __pfx_warn_alloc+0x10/0x10
[   89.260343][ T6354]  ? kasan_save_track+0x4f/0x80
[   89.260351][ T6354]  ? xskq_create+0x56/0x170
[   89.260362][ T6354]  ? xsk_init_queue+0xb0/0x110
[   89.260369][ T6354]  ? xsk_setsockopt+0x4dc/0x8d0
[   89.260375][ T6354]  ? do_sock_setsockopt+0x17c/0x1b0
[   89.260384][ T6354]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   89.260392][ T6354]  ? do_syscall_64+0xfa/0x3b0
[   89.260400][ T6354]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.260411][ T6354]  __vmalloc_node_range_noprof+0x125/0x12f0
[   89.260432][ T6354]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   89.260444][ T6354]  ? __kasan_kmalloc+0x93/0xb0
[   89.260456][ T6354]  vmalloc_user_noprof+0xad/0xf0
[   89.260466][ T6354]  ? xskq_create+0xbf/0x170
[   89.260474][ T6354]  xskq_create+0xbf/0x170
[   89.260484][ T6354]  xsk_init_queue+0xb0/0x110
[   89.260492][ T6354]  xsk_setsockopt+0x4dc/0x8d0
[   89.260499][ T6354]  ? __pfx_xsk_setsockopt+0x10/0x10
[   89.260506][ T6354]  ? __pfx_aa_sk_perm+0x10/0x10
[   89.260516][ T6354]  ? aa_sock_opt_perm+0xff/0x1b0
[   89.260526][ T6354]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   89.260534][ T6354]  ? __pfx_xsk_setsockopt+0x10/0x10
[   89.260541][ T6354]  do_sock_setsockopt+0x17c/0x1b0
[   89.260551][ T6354]  __x64_sys_setsockopt+0x13f/0x1b0
[   89.260562][ T6354]  do_syscall_64+0xfa/0x3b0
[   89.260569][ T6354]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.260576][ T6354]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.260582][ T6354]  ? exc_page_fault+0x9f/0xf0
[   89.260590][ T6354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.260596][ T6354] RIP: 0033:0x7f9abbd8ebe9
[   89.260604][ T6354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.260610][ T6354] RSP: 002b:00007f9abcc85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   89.260619][ T6354] RAX: ffffffffffffffda RBX: 00007f9abbfb6090 RCX: 00007f9abbd8ebe9
[   89.260623][ T6354] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   89.260627][ T6354] RBP: 00007f9abbe11e19 R08: 0000000000000004 R09: 0000000000000000
[   89.260631][ T6354] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.260635][ T6354] R13: 00007f9abbfb6128 R14: 00007f9abbfb6090 R15: 00007ffeb52648a8
[   89.260646][ T6354]  </TASK>
[   89.260649][ T6354] Mem-Info:
[   89.453787][ T6359] Zero length message leads to an empty skb
[   89.493275][ T6354] active_anon:6003 inactive_anon:0 isolated_anon:0
[   89.493275][ T6354]  active_file:1151 inactive_file:38238 isolated_file:0
[   89.493275][ T6354]  unevictable:1768 dirty:300 writeback:0
[   89.493275][ T6354]  slab_reclaimable:9375 slab_unreclaimable:52019
[   89.493275][ T6354]  mapped:18558 shmem:2450 pagetables:1080
[   89.493275][ T6354]  sec_pagetables:0 bounce:0
[   89.493275][ T6354]  kernel_misc_reclaimable:0
[   89.493275][ T6354]  free:298637 free_pcp:19501 free_cma:0
[   89.531357][ T6354] Node 0 active_anon:12828kB inactive_anon:0kB active_file:3276kB inactive_file:22920kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38772kB dirty:736kB writeback:0kB shmem:4724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4304kB pagetables:2460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   89.573387][ T6354] Node 1 active_anon:11148kB inactive_anon:0kB active_file:1384kB inactive_file:130032kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35452kB dirty:496kB writeback:0kB shmem:5012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7484kB pagetables:1788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   89.622887][ T6354] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   89.656393][ T6354] lowmem_reserve[]: 0 811 811 811 811
[   89.668128][ T6354] Node 0 DMA32 free:435332kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12828kB inactive_anon:0kB active_file:3276kB inactive_file:22920kB unevictable:3536kB writepending:736kB present:1556484kB managed:831004kB mlocked:0kB bounce:0kB free_pcp:35412kB local_pcp:16592kB free_cma:0kB
[   89.725355][ T6354] lowmem_reserve[]: 0 0 0 0 0
[   89.731338][ T6354] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   89.764823][ T6354] lowmem_reserve[]: 0 0 854 854 854
[   89.771144][ T6354] Node 1 Normal free:284512kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11148kB inactive_anon:0kB active_file:1384kB inactive_file:130032kB unevictable:3536kB writepending:564kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43152kB local_pcp:17484kB free_cma:0kB
[   89.805595][ T6354] lowmem_reserve[]: 0 0 0 0 0
[   89.807901][ T6354] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   89.826089][ T6354] Node 0 DMA32: 33*4kB (ME) 398*8kB (UME) 283*16kB (UME) 11*32kB (ME) 21*64kB (UME) 27*128kB (UME) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 5*2048kB (UM) 99*4096kB (M) = 434628kB
[   89.839460][ T6354] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   89.859436][ T6354] Node 1 Normal: 230*4kB (UME) 69*8kB (UME) 46*16kB (UME) 186*32kB (UME) 40*64kB (UME) 43*128kB (UME) 14*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 3*2048kB (UM) 62*4096kB (M) = 284512kB
[   89.879719][ T6354] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   89.888035][ T6354] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   89.898218][ T6354] 42041 total pagecache pages
[   89.901186][ T6354] 0 pages in swap cache
[   89.908378][ T6354] Free swap  = 124996kB
[   89.911359][ T6354] Total swap = 124996kB
[   89.914506][ T6354] 786301 pages RAM
[   89.918546][ T6354] 0 pages HighMem/MovableOnly
[   89.926475][ T6354] 241318 pages reserved
[   89.989036][ T6354] 0 pages cma reserved
[   90.240776][ T6366] loop0: detected capacity change from 0 to 32768
[   90.294323][ T6366] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.223 (6366)
[   90.339840][ T6366] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.348956][ T6366] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   90.357361][ T6371] loop2: detected capacity change from 0 to 512
[   90.362089][ T6366] BTRFS info (device loop0): using free-space-tree
[   90.459155][ T6371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   90.465126][ T6371] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.743123][ T5933] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.745992][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   91.280792][ T6401] loop2: detected capacity change from 0 to 16
[   91.314382][ T6401] erofs (device loop2): mounted with root inode @ nid 36.
[   91.492894][ T6405] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.616453][ T6411] netlink: 256 bytes leftover after parsing attributes in process `syz.2.235'.
[   91.625522][ T6411] unsupported nlmsg_type 40
[   92.350100][ T6422] netlink: 'syz.2.241': attribute type 1 has an invalid length.
[   92.661025][ T6430] loop2: detected capacity change from 0 to 1024
[   92.675359][ T6430] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   92.717784][ T6430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.726298][ T6430] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.814012][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.201254][ T6443] loop0: detected capacity change from 0 to 512
[   93.207484][ T6443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   93.237219][ T6443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.242894][ T6443] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.257305][ T6443] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   93.265386][ T6443] EXT4-fs (loop0): Remounting filesystem read-only
[   93.269681][  T973] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   93.296656][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.304148][ T4008] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   93.310187][ T4008] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   93.366661][ T6447] loop0: detected capacity change from 0 to 128
[   93.383678][ T6447] FAT-fs (loop0): Directory bread(block 32) failed
[   93.386612][ T6447] FAT-fs (loop0): Directory bread(block 33) failed
[   93.395738][ T6447] FAT-fs (loop0): Directory bread(block 34) failed
[   93.398509][ T6447] FAT-fs (loop0): Directory bread(block 35) failed
[   93.401835][ T6447] FAT-fs (loop0): Directory bread(block 36) failed
[   93.404124][ T6447] FAT-fs (loop0): Directory bread(block 37) failed
[   93.406455][ T6447] FAT-fs (loop0): Directory bread(block 38) failed
[   93.408707][ T6447] FAT-fs (loop0): Directory bread(block 39) failed
[   93.412937][ T6447] FAT-fs (loop0): Directory bread(block 40) failed
[   93.415604][ T6447] FAT-fs (loop0): Directory bread(block 41) failed
[   93.419818][  T973] usb 3-1: Using ep0 maxpacket: 16
[   93.426753][  T973] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[   93.431740][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.435386][  T973] usb 3-1: Product: syz
[   93.437246][  T973] usb 3-1: Manufacturer: syz
[   93.441728][  T973] usb 3-1: SerialNumber: syz
[   93.446729][  T973] usb 3-1: config 0 descriptor??
[   93.458277][  T973] usb 3-1: Found UVC 0.00 device syz (046d:0721)
[   93.461457][  T973] usb 3-1: No valid video chain found.
[   93.466930][ T6447] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[   93.474472][ T6447] FAT-fs (loop0): Filesystem has been set read-only
[   93.491156][ T6447] syz.0.251: attempt to access beyond end of device
[   93.491156][ T6447] loop0: rw=2049, sector=4184, nr_sectors = 24 limit=128
[   93.495864][ T6447] syz.0.251: attempt to access beyond end of device
[   93.495864][ T6447] loop0: rw=2049, sector=4216, nr_sectors = 4 limit=128
[   93.502200][ T6447] Buffer I/O error on dev loop0, logical block 1054, lost async page write
[   93.505371][ T6447] syz.0.251: attempt to access beyond end of device
[   93.505371][ T6447] loop0: rw=2049, sector=4224, nr_sectors = 4 limit=128
[   93.511010][ T6447] Buffer I/O error on dev loop0, logical block 1056, lost async page write
[   93.514140][ T6447] syz.0.251: attempt to access beyond end of device
[   93.514140][ T6447] loop0: rw=2049, sector=4228, nr_sectors = 4 limit=128
[   93.676390][  T973] usb 3-1: USB disconnect, device number 4
[   93.723790][ T6453] warning: `syz.0.254' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   94.351355][ T6469] ucma_write: process 131 (syz.1.260) changed security contexts after opening file descriptor, this is not allowed.
[   94.380321][ T6472] loop1: detected capacity change from 0 to 64
[   94.405238][ T6471] Trying to free block not in datazone
[   94.452868][ T6474] loop2: detected capacity change from 0 to 256
[   94.503984][ T6474] FAT-fs (loop2): Directory bread(block 64) failed
[   94.506769][ T6474] FAT-fs (loop2): Directory bread(block 65) failed
[   94.511396][ T6474] FAT-fs (loop2): Directory bread(block 66) failed
[   94.514398][ T6474] FAT-fs (loop2): Directory bread(block 67) failed
[   94.517049][ T6474] FAT-fs (loop2): Directory bread(block 68) failed
[   94.521284][ T6474] FAT-fs (loop2): Directory bread(block 69) failed
[   94.524135][ T6474] FAT-fs (loop2): Directory bread(block 70) failed
[   94.527150][ T6474] FAT-fs (loop2): Directory bread(block 71) failed
[   94.531523][ T6474] FAT-fs (loop2): Directory bread(block 72) failed
[   94.534267][ T6474] FAT-fs (loop2): Directory bread(block 73) failed
[   95.019413][  T973] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   95.192365][  T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.196617][  T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.200531][  T973] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   95.204155][  T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.216417][  T973] usb 2-1: config 0 descriptor??
[   95.651773][  T973] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0
[   95.662793][  T973] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0
[   96.064532][    T9] usb 2-1: USB disconnect, device number 3
[   96.224227][ T6489] loop0: detected capacity change from 0 to 40427
[   96.227935][ T6489] F2FS-fs: heap/no_heap options were deprecated
[   96.239587][ T6489] F2FS-fs (loop0): Invalid segment count (1)
[   96.242244][ T6489] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   96.249159][ T6489] F2FS-fs (loop0): invalid crc value
[   96.304389][ T6489] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   96.312001][ T6489] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[   96.315182][ T6489] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   96.349437][ T2380] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   96.519567][ T2380] usb 3-1: Using ep0 maxpacket: 16
[   96.524419][ T2380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.529045][ T2380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.533341][ T2380] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   96.538703][ T2380] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   96.542684][ T2380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.548384][ T2380] usb 3-1: config 0 descriptor??
[   96.769425][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   96.921600][   T24] usb 1-1: Using ep0 maxpacket: 8
[   96.925644][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.929955][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   96.934148][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.937857][   T24] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   96.941484][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.950563][   T24] hub 1-1:1.0: bad descriptor, ignoring hub
[   96.952942][   T24] hub 1-1:1.0: probe with driver hub failed with error -5
[   96.955747][   T24] cdc_wdm 1-1:1.0: skipping garbage
[   96.957940][   T24] cdc_wdm 1-1:1.0: skipping garbage
[   96.962807][   T24] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[   96.965958][ T2380] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input4
[   96.979497][   T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   96.999590][ T2380] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   97.129412][   T47] usb 2-1: Using ep0 maxpacket: 32
[   97.133982][   T47] usb 2-1: config 0 has an invalid interface number: 19 but max is 0
[   97.137419][   T47] usb 2-1: config 0 has no interface number 0
[   97.141024][   T47] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   97.146100][   T47] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16
[   97.158458][   T47] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81
[   97.174238][   T47] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024
[   97.178768][   T47] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[   97.178820][    T9] usb 3-1: USB disconnect, device number 5
[   97.183389][   T47] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   97.197652][   T47] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57
[   97.203100][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.206991][   T47] usb 2-1: Product: syz
[   97.209953][   T47] usb 2-1: Manufacturer: syz
[   97.213595][   T47] usb 2-1: SerialNumber: syz
[   97.220688][   T47] usb 2-1: config 0 descriptor??
[   97.230513][ T6503] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   97.236866][ T6503] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   97.243634][   T47] ipaq 2-1:0.19: PocketPC PDA converter detected
[   97.247023][   T47] usb 2-1: active config #0 != 1 ??
[   97.423852][ T2380] usb 1-1: reset high-speed USB device number 5 using dummy_hcd
[   97.451898][   T47] usb 2-1: USB disconnect, device number 4
[   97.754287][ T6505] loop2: detected capacity change from 0 to 2048
[   97.758512][ T6505] EXT4-fs: inline encryption not supported
[   97.765549][ T6505] EXT4-fs: Ignoring removed oldalloc option
[   97.768353][ T6505] ext4: Unknown parameter 'appraise_type'
[   97.910345][ T2380] usb 1-1: USB disconnect, device number 5
[   98.426343][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'.
[   98.436833][ T6516] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   98.446911][ T6516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.543110][ T6520] loop0: detected capacity change from 0 to 2048
[   98.552894][ T6520] EXT4-fs: Ignoring removed mblk_io_submit option
[   98.563524][ T6520] EXT4-fs: Ignoring removed i_version option
[   98.669813][ T6520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.712210][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.105391][ T6536] sp0: Synchronizing with TNC
[   99.115147][ T6535] [U] 
[   99.638533][ T6555] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  100.496489][ T6567] loop1: detected capacity change from 0 to 32768
[  100.514638][ T6567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.299 (6567)
[  100.782819][ T6567] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  100.787172][ T6567] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  100.800237][ T6567] BTRFS info (device loop1): using free-space-tree
[  101.288475][ T5931] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  101.746921][ T6596] loop0: detected capacity change from 0 to 1024
[  101.756820][ T6596] hfsplus: failed to load catalog file
[  101.770944][ T2380] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  101.850723][ T6600] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.305'.
[  101.930055][ T2380] usb 2-1: Using ep0 maxpacket: 8
[  101.937701][ T2380] usb 2-1: config 2 has an invalid interface number: 206 but max is 0
[  101.941629][ T2380] usb 2-1: config 2 has no interface number 0
[  101.944213][ T2380] usb 2-1: config 2 interface 206 has no altsetting 0
[  101.947097][ T2380] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=b1.2a
[  101.952076][ T2380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.179621][   T24] usb 2-1: USB disconnect, device number 5
[  102.267892][ T6619] loop0: detected capacity change from 0 to 512
[  102.274765][ T6619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  102.287009][ T6619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.294457][ T6619] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.312921][ T6619] EXT4-fs error (device loop0): __ext4_new_inode:1279: comm syz.0.313: failed to insert inode 16: doubly allocated?
[  102.342890][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.750380][ T2380] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  102.914210][ T2380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  102.918776][ T2380] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  102.935654][ T2380] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[  102.940835][ T2380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.955599][ T2380] usb 1-1: config 0 descriptor??
[  102.960249][ T6629] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  103.111125][ T6648] loop1: detected capacity change from 0 to 64
[  103.114629][ T6648] =======================================================
[  103.114629][ T6648] WARNING: The mand mount option has been deprecated and
[  103.114629][ T6648]          and is ignored by this kernel. Remove the mand
[  103.114629][ T6648]          option from the mount to silence this warning.
[  103.114629][ T6648] =======================================================
[  103.186803][ T6648] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1
[  103.395361][ T2380] elecom 0003:056E:00FB.0005: item fetching failed at offset 2/3
[  103.399820][ T2380] elecom 0003:056E:00FB.0005: probe with driver elecom failed with error -22
[  103.600640][  T973] usb 1-1: USB disconnect, device number 6
[  104.232180][ T6671] loop0: detected capacity change from 0 to 256
[  104.523171][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'.
[  104.529133][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'.
[  104.592118][ T6688] loop0: detected capacity change from 0 to 512
[  104.595732][ T6688] EXT4-fs: Ignoring removed bh option
[  104.605508][ T6688] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  104.623188][ T6688] EXT4-fs (loop0): 1 truncate cleaned up
[  104.631514][ T6688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.127580][   T33] audit: type=1800 audit(1755131662.710:3): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.336" name="bus" dev="loop0" ino=18 res=0 errno=0
[  105.267130][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'.
[  105.271950][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'.
[  105.275722][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'.
[  105.330470][ T6709] netlink: 'syz.2.342': attribute type 4 has an invalid length.
[  105.391802][ T6711] IPVS: Error connecting to the multicast addr
[  105.409223][ T6713] mmap: syz.2.345 (6713) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  105.588440][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.614143][ T6717] loop2: detected capacity change from 0 to 4096
[  105.628876][ T6717] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  105.642991][ T6717] ntfs3(loop2): $Volume is corrupted.
[  106.029481][ T6739] netlink: 'syz.2.357': attribute type 1 has an invalid length.
[  106.033392][ T6739] netlink: 224 bytes leftover after parsing attributes in process `syz.2.357'.
[  106.176987][ T6744] loop2: detected capacity change from 0 to 512
[  106.194322][ T6744] EXT4-fs (loop2): Test dummy encryption mode enabled
[  106.197380][ T6744] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  106.226741][ T6744] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.359: bad orphan inode 131083
[  106.248943][ T6744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.325467][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.635646][ T6754] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[  106.643466][ T6754] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[  107.647602][ T6767] loop0: detected capacity change from 0 to 512
[  107.699765][ T6767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.137086][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.485348][ T6783] Bluetooth: MGMT ver 1.23
[  109.557333][ T6787] loop0: detected capacity change from 0 to 4096
[  109.563975][ T6787] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  109.590146][ T6787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.733465][ T6796] loop1: detected capacity change from 0 to 256
[  109.746154][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.858769][ T6785] loop2: detected capacity change from 0 to 32768
[  109.887889][ T6785] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  109.928443][ T6785] XFS (loop2): Ending clean mount
[  109.936562][ T6785] XFS (loop2): Quotacheck needed: Please wait.
[  109.942265][ T6796] FAT-fs (loop1): Directory bread(block 64) failed
[  109.944816][ T6796] FAT-fs (loop1): Directory bread(block 65) failed
[  109.950657][ T6796] FAT-fs (loop1): Directory bread(block 66) failed
[  109.953392][ T6796] FAT-fs (loop1): Directory bread(block 67) failed
[  109.956175][ T6796] FAT-fs (loop1): Directory bread(block 68) failed
[  109.965640][ T6785] XFS (loop2): Quotacheck: Done.
[  109.983097][ T6796] FAT-fs (loop1): Directory bread(block 69) failed
[  109.985968][ T6796] FAT-fs (loop1): Directory bread(block 70) failed
[  110.003651][ T6796] FAT-fs (loop1): Directory bread(block 71) failed
[  110.006406][ T6796] FAT-fs (loop1): Directory bread(block 72) failed
[  110.009230][ T6796] FAT-fs (loop1): Directory bread(block 73) failed
[  110.018963][   T33] audit: type=1804 audit(1755131667.640:4): pid=6785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.374" name="/newroot/95/file0/file1" dev="loop2" ino=9286 res=1 errno=0
[  110.042042][   T33] audit: type=1800 audit(1755131667.670:5): pid=6796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.378" name="bus" dev="loop1" ino=1048653 res=0 errno=0
[  110.054557][ T5927] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.209410][ T6815] syz.1.384 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  110.480257][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  110.484483][ T6824] loop1: detected capacity change from 0 to 40427
[  110.500921][ T6824] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  110.504322][ T6824] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  110.507901][ T6824] F2FS-fs (loop1): build fault injection type: 0x6
[  110.513760][ T6824] F2FS-fs (loop1): invalid crc value
[  110.566543][ T6824] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  110.572304][ T6824] F2FS-fs (loop1): Start checkpoint disabled!
[  110.577314][ T6832] loop2: detected capacity change from 0 to 1024
[  110.585386][ T6824] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  110.588384][ T6824] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  110.644414][   T33] audit: type=1800 audit(1755131668.270:6): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.389" name="file2" dev="loop2" ino=22 res=0 errno=0
[  110.660377][   T10] usb 1-1: Using ep0 maxpacket: 32
[  110.672966][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.694139][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.698597][   T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  110.721568][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.741181][   T10] usb 1-1: config 0 descriptor??
[  110.929058][ T4008] hfsplus: b-tree write err: -5, ino 4
[  111.183363][   T10] ft260 0003:0403:6030.0006: unknown main item tag 0x7
[  111.323736][ T6841] loop2: detected capacity change from 0 to 2048
[  111.347106][ T6841] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  111.356758][ T6841] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  111.368922][ T6841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.390464][   T10] ft260 0003:0403:6030.0006: chip code: 6424 8183
[  111.594469][   T10] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  111.815696][   T10] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup
[  111.823416][   T10] ft260 0003:0403:6030.0006: failed to retrieve status: -32
[  112.079140][   T24] usb 1-1: USB disconnect, device number 7
[  112.471536][ T1090] wlan1: Trigger new scan to find an IBSS to join
[  112.518361][ T6849] loop2: detected capacity change from 0 to 32768
[  112.546615][ T6849] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  112.589127][ T6849] XFS (loop2): Ending clean mount
[  112.610622][ T6849] XFS (loop2): Quotacheck needed: Please wait.
[  112.685812][ T6849] XFS (loop2): Quotacheck: Done.
[  112.769133][ T5927] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  113.062421][ T6874] loop2: detected capacity change from 0 to 16
[  113.084893][ T6874] erofs (device loop2): mounted with root inode @ nid 36.
[  113.186545][ T6884] loop1: detected capacity change from 0 to 4096
[  113.238093][ T6884] ntfs3(loop1): ino=18, mi_enum_attr
[  113.240745][ T6884] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  113.370616][ T6887] loop0: detected capacity change from 0 to 32768
[  113.376459][ T6887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.411 (6887)
[  113.425331][ T6898] loop2: detected capacity change from 0 to 1024
[  113.437465][ T6887] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.442494][ T6887] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  113.446551][ T6887] BTRFS info (device loop0): using free-space-tree
[  113.589653][ T6909] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  113.593662][   T10] IPVS: starting estimator thread 0...
[  113.720318][ T6920] IPVS: using max 79 ests per chain, 189600 per kthread
[  113.750113][ T5933] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.988844][ T6921] process 'syz.2.418' launched './file2' with NULL argv: empty string added
[  114.039487][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  114.210486][ T2380] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  114.213820][   T10] usb 2-1: Using ep0 maxpacket: 16
[  114.220633][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  114.227682][   T10] usb 2-1: config 1 has an invalid interface number: 206 but max is 0
[  114.232400][   T10] usb 2-1: config 1 has no interface number 0
[  114.238668][   T10] usb 2-1: string descriptor 0 read error: -22
[  114.245929][   T10] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a
[  114.250575][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.273705][   T10] uvcvideo 2-1:1.206: probe with driver uvcvideo failed with error -22
[  114.359835][ T2380] usb 1-1: Using ep0 maxpacket: 8
[  114.373821][ T2380] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.379772][ T2380] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  114.384490][ T2380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  114.389155][ T2380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  114.396448][ T2380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  114.409832][ T2380] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.451426][ T2380] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  114.455295][ T2380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.458618][ T2380] usb 1-1: Product: syz
[  114.462323][ T2380] usb 1-1: Manufacturer: syz
[  114.465640][ T2380] usb 1-1: SerialNumber: syz
[  114.484101][  T973] usb 2-1: USB disconnect, device number 6
[  114.491493][ T2380] usb 1-1: config 0 descriptor??
[  114.509871][ T6928] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  114.515593][ T2380] ati_remote 1-1:0.0: ati_remote_probe: Unexpected endpoint_out
[  114.696135][ T6942] tipc: Failed to remove unknown binding: 66,1,1/0:2915150428/2915150430
[  114.699764][ T6942] tipc: Failed to remove unknown binding: 66,1,1/0:2915150428/2915150430
[  114.739798][ T5992] usb 1-1: USB disconnect, device number 8
[  114.999387][ T2380] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  115.136104][ T6954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.433'.
[  115.141929][ T6954] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  115.159432][ T2380] usb 3-1: Using ep0 maxpacket: 8
[  115.171001][ T2380] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  115.178206][ T2380] usb 3-1: config 0 interface 0 has no altsetting 0
[  115.187603][ T2380] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  115.193349][ T2380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.196803][ T2380] usb 3-1: Product: syz
[  115.198492][ T2380] usb 3-1: Manufacturer: syz
[  115.203049][ T2380] usb 3-1: SerialNumber: syz
[  115.207382][ T6956] loop1: detected capacity change from 0 to 4096
[  115.210852][ T2380] usb 3-1: config 0 descriptor??
[  115.217320][ T2380] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found
[  115.239190][ T6956] ntfs3(loop1): failed to convert "0080" to koi8-r
[  115.243632][ T6956] ntfs3(loop1): failed to convert name for inode 1e.
[  115.249533][ T6956] ntfs3(loop1): ino=1f, mi_enum_attr
[  115.251248][ T6956] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  115.445581][ T2380] snd_usb_toneport 3-1:0.0: cannot get proper max packet size
[  115.470241][ T2380] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected
[  115.486528][ T2380] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  115.509426][  T142] wlan1: Trigger new scan to find an IBSS to join
[  115.669946][  T973] usb 3-1: USB disconnect, device number 6
[  115.705355][ T6969] loop1: detected capacity change from 0 to 512
[  115.710589][ T6969] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  115.778050][ T6969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.783429][ T6969] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  115.837348][ T5931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.714529][ T6984] loop2: detected capacity change from 0 to 256
[  116.931627][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'.
[  117.449743][ T7005] loop0: detected capacity change from 0 to 32768
[  117.459605][ T7005] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.455 (7005)
[  117.476792][ T7005] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.481916][ T7005] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  117.486202][ T7005] BTRFS info (device loop0): using free-space-tree
[  117.624461][ T5933] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.631025][ T2380] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  117.783042][ T7033] loop1: detected capacity change from 0 to 2048
[  117.785570][ T2380] usb 3-1: config 0 has an invalid interface number: 25 but max is 0
[  117.788713][ T2380] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.792776][ T2380] usb 3-1: config 0 has no interface number 0
[  117.795219][ T2380] usb 3-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  117.821632][ T7033] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  117.833520][ T2380] usb 3-1: config 0 interface 25 has no altsetting 0
[  117.853478][ T2380] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee
[  117.857073][ T2380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.866171][ T2380] usb 3-1: Product: syz
[  117.867973][ T2380] usb 3-1: Manufacturer: syz
[  117.875364][ T7036] Invalid source name
[  117.877121][ T7036] UBIFS error (pid: 7036): cannot open "/dev/sg0", error -22
[  117.878735][ T2380] usb 3-1: SerialNumber: syz
[  117.888625][ T7037] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.898624][ T2380] usb 3-1: config 0 descriptor??
[  117.910016][ T7036] loop0: detected capacity change from 0 to 64
[  118.036353][ T7043] pimreg: entered allmulticast mode
[  118.067278][ T7043] pimreg: left allmulticast mode
[  118.114727][ T2380] usb 3-1: Found UVC 0.00 device syz (1b3b:2951)
[  118.121333][ T2380] usb 3-1: No valid video chain found.
[  118.135723][ T2380] usb 3-1: USB disconnect, device number 7
[  118.355615][   T33] audit: type=1326 audit(1755131675.980:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  118.372817][   T33] audit: type=1326 audit(1755131675.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  118.382191][   T33] audit: type=1326 audit(1755131675.990:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  118.394720][   T33] audit: type=1326 audit(1755131675.990:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  118.402316][   T33] audit: type=1326 audit(1755131675.990:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  118.419333][   T33] audit: type=1326 audit(1755131675.990:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  118.432172][   T33] audit: type=1326 audit(1755131675.990:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.0.471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  118.549680][   T28] wlan1: Trigger new scan to find an IBSS to join
[  118.669784][ T5958] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  118.882220][ T5958] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.906972][ T5958] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  119.192195][ T5958] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  119.196359][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  119.200879][ T5958] usb 1-1: SerialNumber: syz
[  119.475146][ T5958] usb 1-1: 0:2 : does not exist
[  119.619954][ T5958] usb 1-1: USB disconnect, device number 9
[  119.620455][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.253056][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'.
[  120.268968][    C0] vcan0: j1939_session_tx_dat: 0xffff88802daf4000: queue data error: -100
[  120.307096][ T7071] loop2: detected capacity change from 0 to 32768
[  120.311273][ T7071] BTRFS warning: excessive commit interval 2147483647, use with care
[  120.314722][ T7071] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.474 (7071)
[  120.327353][ T7071] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.333352][ T7071] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  120.337228][ T7071] BTRFS info (device loop2): disk space caching is enabled
[  120.341075][ T7071] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  120.387321][ T7071] BTRFS info (device loop2): rebuilding free space tree
[  120.407692][ T7071] BTRFS info (device loop2): disabling free space tree
[  120.414049][ T7071] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  120.417957][ T7071] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  120.466779][ T5927] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.678359][ T7099] loop2: detected capacity change from 0 to 4096
[  120.682413][ T7099] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  120.698366][ T7099] ntfs3(loop2): ino=19, mi_enum_attr
[  120.700632][ T7099] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  120.712168][ T7099] ntfs3(loop2): failed to convert "c46c" to iso8859-14
[  120.721282][ T7099] ntfs3(loop2): ino=20, mi_enum_attr
[  120.999372][ T5958] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  121.150821][ T5958] usb 3-1: Using ep0 maxpacket: 32
[  121.154841][ T5958] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[  121.158499][ T5958] usb 3-1: config 4 has no interface number 0
[  121.161977][ T5958] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.166530][ T5958] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.173230][ T5958] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  121.177168][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.190385][ T5958] hub 3-1:4.128: USB hub found
[  121.355166][ T7111] loop0: detected capacity change from 0 to 4096
[  121.373439][ T7112] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.390856][ T5958] hub 3-1:4.128: 2 ports detected
[  121.393193][ T5958] hub 3-1:4.128: Using single TT (err -22)
[  121.543131][ T7109] Invalid ELF header magic: != ELF
[  121.595417][ T5958] hub 3-1:4.128: hub_hub_status failed (err = -71)
[  121.604983][ T5958] hub 3-1:4.128: config failed, can't get hub status (err -71)
[  121.616039][ T7118] loop0: detected capacity change from 0 to 256
[  121.651360][ T5958] usb 3-1: USB disconnect, device number 8
[  121.725142][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  122.257578][ T7142] loop2: detected capacity change from 0 to 16
[  122.264568][ T7142] erofs (device loop2): mounted with root inode @ nid 36.
[  122.270804][ T7142] erofs (device loop2): bogus dirent @ nid 36
[  122.274995][ T7142] erofs (device loop2): bogus dirent @ nid 36
[  122.286627][ T7144] loop0: detected capacity change from 0 to 512
[  122.289815][ T7144] EXT4-fs: inline encryption not supported
[  122.295884][ T7144] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  122.309102][ T7144] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 65280
[  122.801685][ T7161] loop1: detected capacity change from 0 to 1024
[  122.806068][ T7161] EXT4-fs: Ignoring removed bh option
[  122.880240][ T7161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.905851][ T7161] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.506: inode #6: comm syz.1.506: iget: illegal inode #
[  122.913726][ T7161] EXT4-fs (loop1): Remounting filesystem read-only
[  122.916616][ T7161] EXT4-fs warning (device loop1): ext4_xattr_block_set:2190: inode #19: comm syz.1.506: dec ref error=-30
[  123.047941][ T5931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.237271][ T7183] bridge0: entered allmulticast mode
[  123.246652][ T7183] pim6reg: entered allmulticast mode
[  123.249153][ T7180] loop0: detected capacity change from 0 to 1024
[  123.250176][ T7183] pim6reg: left allmulticast mode
[  123.254221][ T7183] bridge0: left allmulticast mode
[  123.270089][ T7180] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 64
[  123.689876][ T7200] trusted_key: encrypted_key: key user:syz not found
[  123.722663][ T7202] capability: warning: `syz.1.519' uses 32-bit capabilities (legacy support in use)
[  123.801641][ T5958] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  123.926521][ T7211] loop1: detected capacity change from 0 to 2048
[  123.936277][ T7211] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  123.948410][ T7211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.959446][ T5958] usb 3-1: Using ep0 maxpacket: 32
[  123.962648][ T5958] usb 3-1: config 192 has an invalid interface number: 204 but max is 0
[  123.965807][ T5958] usb 3-1: config 192 contains an unexpected descriptor of type 0x2, skipping
[  123.968865][ T5958] usb 3-1: config 192 has no interface number 0
[  123.979336][ T5958] usb 3-1: config 192 interface 204 altsetting 9 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  123.983185][ T5958] usb 3-1: config 192 interface 204 has no altsetting 0
[  123.986635][ T7211] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  123.992103][ T5958] usb 3-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=38.91
[  123.999556][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.002930][ T5958] usb 3-1: Product: syz
[  124.004606][ T5958] usb 3-1: Manufacturer: syz
[  124.006213][ T5958] usb 3-1: SerialNumber: syz
[  124.098438][ T7213] loop1: detected capacity change from 0 to 2048
[  124.107433][ T7213] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.240447][ T5958] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  124.264109][ T5958] snd-usb-audio 3-1:192.204: probe with driver snd-usb-audio failed with error -2
[  124.281264][ T5958] usb 3-1: USB disconnect, device number 9
[  124.314473][ T6305] udevd[6305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:192.204/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  125.165503][ T7232] loop1: detected capacity change from 0 to 512
[  125.205234][ T7232] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  125.254265][ T7232] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.532: iget: bad i_size value: -6917529027641081756
[  125.281115][ T7232] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.532: couldn't read orphan inode 17 (err -117)
[  125.288265][ T7232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.368529][ T5931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.479518][  T973] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  125.655656][  T973] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  125.664737][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.672610][  T973] usb 1-1: Product: syz
[  125.675658][  T973] usb 1-1: Manufacturer: syz
[  125.682319][  T973] usb 1-1: SerialNumber: syz
[  125.697731][  T973] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  125.722598][   T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  126.640426][  T973] usb 1-1: USB disconnect, device number 10
[  126.789383][   T24] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  126.792192][   T24] ath9k_htc: Failed to initialize the device
[  126.804307][  T973] usb 1-1: ath9k_htc: USB layer deinitialized
[  126.917244][    T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  127.313071][ T7302] loop0: detected capacity change from 0 to 1024
[  127.390769][ T1089] hfsplus: b-tree write err: -5, ino 8
[  127.411010][    T9] usb 3-1: config 0 has no interfaces?
[  127.415137][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  127.418949][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.426756][    T9] usb 3-1: config 0 descriptor??
[  127.545761][ T7308] PM: Enabling pm_trace changes system date and time during resume.
[  127.545761][ T7308] PM: Correct system time has to be restored manually after resume.
[  127.635967][    T9] usb 3-1: USB disconnect, device number 10
[  127.672669][ T7314] loop0: detected capacity change from 0 to 16
[  127.690114][ T7314] erofs (device loop0): mounted with root inode @ nid 36.
[  127.848999][ T7320] loop1: detected capacity change from 0 to 4096
[  127.874285][ T7320] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  127.877222][ T7320] ntfs3(loop1): Failed to load $Extend (-22).
[  127.880377][ T7320] ntfs3(loop1): Failed to initialize $Extend.
[  128.117579][ T5682] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  128.456661][ T7359] loop2: detected capacity change from 0 to 16
[  128.476246][ T7359] erofs (device loop2): mounted with root inode @ nid 36.
[  128.593039][ T7363] netlink: 72 bytes leftover after parsing attributes in process `syz.2.589'.
[  128.620132][ T7366] loop0: detected capacity change from 0 to 16
[  128.641296][ T7366] erofs (device loop0): rootino(nid 36) is not a directory(i_mode 142735)
[  128.815433][ T7374] hfsplus: unable to find HFS+ superblock
[  128.927337][ T7381] loop0: detected capacity change from 0 to 256
[  128.973013][ T7381] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  129.118703][ T7385] loop1: detected capacity change from 0 to 40427
[  129.133658][ T7385] F2FS-fs (loop1): invalid crc value
[  129.161670][ T7385] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  129.165618][ T7385] F2FS-fs (loop1): Start checkpoint disabled!
[  129.169437][ T7385] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  129.243290][  T185] kworker/u9:3: attempt to access beyond end of device
[  129.243290][  T185] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  129.348152][ T7383] loop2: detected capacity change from 0 to 32768
[  129.351233][  T185] CPU: 0 UID: 0 PID: 185 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  129.351249][  T185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.351257][  T185] Workqueue: writeback wb_workfn (flush-7:1)
[  129.351278][  T185] Call Trace:
[  129.351283][  T185]  <TASK>
[  129.351289][  T185]  dump_stack_lvl+0x189/0x250
[  129.351307][  T185]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.351320][  T185]  ? __pfx_queue_work_on+0x10/0x10
[  129.351330][  T185]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.351366][  T185]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.351385][  T185]  f2fs_handle_critical_error+0x37c/0x540
[  129.351405][  T185]  f2fs_write_end_io+0x886/0xb60
[  129.351430][  T185]  __submit_merged_bio+0x27a/0x6a0
[  129.351446][  T185]  __submit_merged_write_cond+0x255/0x530
[  129.351464][  T185]  f2fs_write_data_pages+0x261d/0x3000
[  129.351496][  T185]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.351520][  T185]  ? unwind_next_frame+0xa5/0x2390
[  129.351549][  T185]  ? ret_from_fork_asm+0x1a/0x30
[  129.351565][  T185]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  129.351591][  T185]  ? __lock_acquire+0xab9/0xd20
[  129.351610][  T185]  ? __update_page_owner_handle+0x5a/0x570
[  129.351635][  T185]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.351649][  T185]  do_writepages+0x32e/0x550
[  129.351667][  T185]  ? reacquire_held_locks+0x127/0x1d0
[  129.351677][  T185]  ? writeback_sb_inodes+0x384/0x1010
[  129.351696][  T185]  __writeback_single_inode+0x145/0xff0
[  129.351709][  T185]  ? do_raw_spin_unlock+0x4d/0x240
[  129.351724][  T185]  writeback_sb_inodes+0x6c7/0x1010
[  129.351736][  T185]  ? __lock_acquire+0xab9/0xd20
[  129.351765][  T185]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  129.351803][  T185]  ? rcu_is_watching+0x15/0xb0
[  129.351822][  T185]  wb_writeback+0x43b/0xaf0
[  129.351839][  T185]  ? queue_io+0x301/0x590
[  129.351860][  T185]  ? __pfx_wb_writeback+0x10/0x10
[  129.351909][  T185]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.351925][  T185]  wb_workfn+0x409/0xef0
[  129.351946][  T185]  ? __pfx_wb_workfn+0x10/0x10
[  129.351960][  T185]  ? __lock_acquire+0xab9/0xd20
[  129.351981][  T185]  ? process_scheduled_works+0x9ef/0x17b0
[  129.351994][  T185]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.352004][  T185]  ? process_scheduled_works+0x9ef/0x17b0
[  129.352012][  T185]  ? process_scheduled_works+0x9ef/0x17b0
[  129.352023][  T185]  process_scheduled_works+0xae1/0x17b0
[  129.352052][  T185]  ? __pfx_process_scheduled_works+0x10/0x10
[  129.352073][  T185]  worker_thread+0x8a0/0xda0
[  129.352086][  T185]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.352102][  T185]  ? __kthread_parkme+0x7b/0x200
[  129.352120][  T185]  kthread+0x711/0x8a0
[  129.352134][  T185]  ? __pfx_worker_thread+0x10/0x10
[  129.352144][  T185]  ? __pfx_kthread+0x10/0x10
[  129.352158][  T185]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.352168][  T185]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.352179][  T185]  ? __pfx_kthread+0x10/0x10
[  129.352192][  T185]  ret_from_fork+0x3fc/0x770
[  129.352204][  T185]  ? __pfx_ret_from_fork+0x10/0x10
[  129.352217][  T185]  ? __switch_to_asm+0x39/0x70
[  129.352229][  T185]  ? __switch_to_asm+0x33/0x70
[  129.352241][  T185]  ? __pfx_kthread+0x10/0x10
[  129.352254][  T185]  ret_from_fork_asm+0x1a/0x30
[  129.352279][  T185]  </TASK>
[  129.359462][  T185] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  129.455697][ T7393] netlink: 'syz.0.603': attribute type 1 has an invalid length.
[  129.509667][ T7393] netlink: 216 bytes leftover after parsing attributes in process `syz.0.603'.
[  129.608937][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'.
[  129.680526][ T7383] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  129.680545][ T7383]   allowing incompatible features above 0.0: (unknown version)
[  129.680553][ T7383]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  129.716302][ T7383] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  129.720177][ T7383] bcachefs (loop2): initializing new filesystem
[  129.736331][ T7383] bcachefs (loop2): going read-write
[  129.751038][ T7383] bcachefs (loop2): marking superblocks
[  129.773953][ T7383] bcachefs (loop2): initializing freespace
[  129.815749][ T7383] bcachefs (loop2): done initializing freespace
[  129.822758][ T7383] bcachefs (loop2): reading snapshots table
[  129.825251][ T7383] bcachefs (loop2): reading snapshots done
[  129.858978][ T7383] bcachefs (loop2): done starting filesystem

syzkaller
syzkaller login: [  129.975339][ T7383] bcachefs (loop2): going read-only
[  129.978064][ T7383] bcachefs (loop2): finished waiting for writes to stop
[  129.982294][    T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  130.043729][ T7383] bcachefs (loop2): flushing journal and stopping allocators, journal seq 6
[  130.131931][    T9] usb 1-1: Using ep0 maxpacket: 16
[  130.165789][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.264804][ T7383] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 9
[  130.269638][    T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=14.47
[  130.273660][    T9] usb 1-1: New USB device strings: Mfr=55, Product=172, SerialNumber=120
[  130.277435][    T9] usb 1-1: Product: syz
[  130.282476][ T7383] bcachefs (loop2): clean shutdown complete, journal seq 10
[  130.282598][    T9] usb 1-1: Manufacturer: syz
[  130.285357][ T7383] bcachefs (loop2): marking filesystem clean
[  130.287042][    T9] usb 1-1: SerialNumber: syz
[  130.296283][    T9] usb 1-1: config 0 descriptor??
[  130.301205][    T9] mcba_usb 1-1:0.0: Can't find endpoints
[  130.341966][ T7383] syz.2.598 (7383) used greatest stack depth: 16200 bytes left
[  130.361414][ T5927] bcachefs (loop2): shutting down
[  130.376526][ T5927] bcachefs (loop2): shutdown complete
[  130.515959][   T24] usb 1-1: USB disconnect, device number 11
[  130.896894][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.609'.
[  131.118842][ T7429] loop0: detected capacity change from 0 to 2048
[  131.161646][ T7429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.315656][ T7441] loop0: detected capacity change from 0 to 16
[  131.324262][ T7441] erofs (device loop0): mounted with root inode @ nid 36.
[  131.418668][    C1] vkms_vblank_simulate: vblank timer overrun
[  131.989376][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  132.482942][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.488192][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.115017][ T7467] loop2: detected capacity change from 0 to 256
[  133.130100][ T7467] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.160916][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.176224][ T7467] FAT-fs (loop2): Filesystem has been set read-only
[  133.184666][ T7469] loop0: detected capacity change from 0 to 4096
[  133.197027][ T7469] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  133.202117][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.205567][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.209168][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.213302][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.217151][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.227813][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.235201][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[  133.238535][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.243815][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.249150][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.254614][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.258239][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.263415][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.267502][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.272595][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.276252][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.283286][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.286830][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.295809][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.305452][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.312935][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.316401][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.321282][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.324952][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.330209][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.333619][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.336508][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.340261][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.343096][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.347576][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.352742][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.355941][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.367670][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.373595][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.377324][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.382675][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.386354][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.398575][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.403631][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.407469][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.413121][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.416932][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.421875][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.422937][ T7480] loop0: detected capacity change from 0 to 2048
[  133.425910][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.432399][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.436319][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.443031][ T7480] nilfs2: Bad value for 'cp'
[  133.450141][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.460639][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.467364][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.476109][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.494399][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.497750][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.521494][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.524514][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.527727][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.531927][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.539965][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.549748][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.553251][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.556905][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.565537][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.569205][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.574056][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.590090][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.593777][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.597486][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.605246][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.619499][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.623237][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.630007][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.634678][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.638372][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.646998][ T7490] loop1: detected capacity change from 0 to 1024
[  133.651045][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.654684][ T7467] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  133.660765][   T33] audit: type=1800 audit(1755131691.280:14): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.627" name="file1" dev="loop2" ino=1048657 res=0 errno=0
[  133.684780][ T7490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  133.697662][ T7490] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.712269][   T33] audit: type=1800 audit(1755131691.340:15): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.636" name="file1" dev="loop1" ino=15 res=0 errno=0
[  133.714699][ T7490] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.636: lblock 0 mapped to illegal pblock 0 (length 1)
[  133.753687][ T7499] loop0: detected capacity change from 0 to 256
[  133.765273][ T7499] exfat: Deprecated parameter 'namecase'
[  133.773737][   T33] audit: type=1804 audit(1755131691.380:16): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.636" name="/newroot/223/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  133.806020][ T7499] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  133.817767][   T33] audit: type=1800 audit(1755131691.410:17): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.636" name="file1" dev="loop1" ino=15 res=0 errno=0
[  133.852388][ T5931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  133.877525][ T7501] loop2: detected capacity change from 0 to 256
[  133.905074][ T7501] FAT-fs (loop2): Directory bread(block 64) failed
[  133.907951][ T7501] FAT-fs (loop2): Directory bread(block 65) failed
[  133.927546][ T7501] FAT-fs (loop2): Directory bread(block 66) failed
[  133.939581][ T7501] FAT-fs (loop2): Directory bread(block 67) failed
[  133.962433][ T7501] FAT-fs (loop2): Directory bread(block 68) failed
[  133.970009][ T7501] FAT-fs (loop2): Directory bread(block 69) failed
[  133.980542][ T7501] FAT-fs (loop2): Directory bread(block 70) failed
[  133.986612][ T7501] FAT-fs (loop2): Directory bread(block 71) failed
[  134.006697][ T7501] FAT-fs (loop2): Directory bread(block 72) failed
[  134.011025][ T7501] FAT-fs (loop2): Directory bread(block 73) failed
[  134.030975][ T7509] loop0: detected capacity change from 0 to 256
[  134.597485][ T7511] loop1: detected capacity change from 0 to 32768
[  134.604936][ T7511] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.645 (7511)
[  134.669595][ T7516] random: crng reseeded on system resumption
[  134.847201][ T7519] loop2: detected capacity change from 0 to 512
[  134.927328][ T7511] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.962399][ T7511] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  134.977557][ T7511] BTRFS info (device loop1): using free-space-tree
[  135.016165][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.648'.
[  135.021565][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.648'.
[  135.292991][ T7543] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  135.300410][ T7511] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.554982][ T7538] loop0: detected capacity change from 0 to 40427
[  135.612510][ T7538] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  135.624258][ T7538] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  135.636523][ T7538] F2FS-fs (loop0): invalid crc value
[  135.711959][ T7538] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  135.719799][ T7563] syz_tun: entered allmulticast mode
[  135.724653][ T7538] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  135.735413][ T7562] syz_tun: left allmulticast mode
[  135.738210][ T7538] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  138.770202][ T7621] loop0: detected capacity change from 0 to 16
[  138.776469][ T7621] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  138.790610][ T7621] erofs (device loop0): mounted with root inode @ nid 36.
[  138.994513][ T7634] loop2: detected capacity change from 0 to 512
[  139.027344][ T7634] EXT4-fs (loop2): 1 truncate cleaned up
[  139.035293][ T7634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.054606][ T7634] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.689: invalid indirect mapped block 234881024 (level 0)
[  139.101432][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.287525][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[  139.399551][   T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  139.564737][   T24] usb 2-1: config 2 has an invalid interface number: 211 but max is 0
[  139.568303][   T24] usb 2-1: config 2 has no interface number 0
[  139.571183][   T24] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  139.575712][   T24] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  139.584583][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95
[  139.588600][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.592978][   T24] usb 2-1: Product: syz
[  139.594891][   T24] usb 2-1: Manufacturer: syz
[  139.597804][   T24] usb 2-1: SerialNumber: syz
[  139.616798][ T7645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  139.649086][   T24] em28xx 2-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211)
[  139.654650][   T24] em28xx 2-1:2.211: Device initialization failed.
[  139.657463][   T24] em28xx 2-1:2.211: Device must be connected to a high-speed USB 2.0 port.
[  139.852257][   T47] usb 2-1: USB disconnect, device number 7
[  140.149673][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  140.485996][ T7674] netlink: 830 bytes leftover after parsing attributes in process `syz.1.705'.
[  140.489689][ T7674] bond_slave_0: entered promiscuous mode
[  140.491848][ T7674] bond_slave_1: entered promiscuous mode
[  141.040009][ T7694] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  141.040009][ T7694] The task syz.2.714 (7694) triggered the difference, watch for misbehavior.
[  141.139789][ T7690] loop1: detected capacity change from 0 to 32768
[  141.151702][ T7690] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.174906][ T7690] XFS (loop1): Ending clean mount
[  141.213923][ T5931] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.953230][ T7728] loop2: detected capacity change from 0 to 128
[  141.974832][ T7728] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  141.981208][ T7728] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  141.991858][ T7728] fscrypt (loop2, inode 12): Unsupported encryption flags (0xea)
[  142.008556][ T5927] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  142.135728][ T7735] loop2: detected capacity change from 0 to 64
[  142.464944][ T7751] netlink: 132 bytes leftover after parsing attributes in process `syz.0.737'.
[  142.674345][ T7749] loop1: detected capacity change from 0 to 32768
[  142.683360][ T7749] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal: journal bucket at sector 0
[  142.683360][ T7749] journal (size 2912):
[  142.683360][ T7749] Buckets:  0 10 21474902017 8 21474967553 0 21474836481 0 21491613697 0 21508390913 0 21525168129 0 25769803778 2816 65795 25769803778 0 65794 25769803778 16 65796 34359738401 0 0 0 83 0 0 25 6152 248 8 2048 0 11 2816 0 1 16 240 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 30064771074 0 0 30064771074 1 1280 4294967307 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 14322110933576210885 16 0 0 110593 4295032843 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 8469488994664696954 24 0 0 155649 4295098379 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 11142619451731364831 24 0 0 167937 4295163915 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 2487609100058934834 16 0 0 126977 4295229451 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 12421512847996478049 24 
[  142.683517][ T7749] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  142.739399][  T973] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  142.806594][ T7761] loop2: detected capacity change from 0 to 512
[  142.815384][ T7761] EXT4-fs (loop2): Test dummy encryption mode enabled
[  142.836303][ T7761] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.848741][ T7761] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.742: Directory hole found for htree leaf block 0
[  142.868151][ T7761] EXT4-fs (loop2): Remounting filesystem read-only
[  142.896061][ T5927] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  142.909653][  T973] usb 1-1: Using ep0 maxpacket: 8
[  142.913538][  T973] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  142.917013][  T973] usb 1-1: config 179 has no interface number 0
[  142.922968][  T973] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  142.928642][  T973] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  142.935939][  T973] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  142.943331][  T973] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  142.949020][  T973] usb 1-1: config 179 interface 65 has no altsetting 0
[  142.959200][  T973] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  142.965341][  T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.017050][ T7770] sctp: [Deprecated]: syz.2.746 (pid 7770) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.017050][ T7770] Use struct sctp_sack_info instead
[  143.169437][   T47] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  143.185734][ T2380] usb 1-1: USB disconnect, device number 12
[  143.226286][ T7778] loop2: detected capacity change from 0 to 1024
[  143.231838][ T7778] EXT4-fs: Ignoring removed nomblk_io_submit option
[  143.245051][ T7778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.282154][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.325298][   T47] usb 2-1: config 2 has an invalid interface number: 227 but max is 0
[  143.328667][   T47] usb 2-1: config 2 has no interface number 0
[  143.339448][   T47] usb 2-1: config 2 interface 227 has no altsetting 0
[  143.342435][   T47] usb 2-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=b3.c2
[  143.348424][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.736521][ T2380] usb 2-1: USB disconnect, device number 8
[  144.527259][ T7803] loop0: detected capacity change from 0 to 32768
[  144.533078][ T7803] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.759 (7803)
[  144.558448][ T7819] loop1: detected capacity change from 0 to 2048
[  144.569056][ T7803] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  144.575683][ T7803] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  144.582662][ T7803] BTRFS info (device loop0): using free-space-tree
[  144.593605][ T6293]  loop1: p1 < > p4 < >
[  144.595571][ T6293] loop1: partition table partially beyond EOD, truncated
[  144.601677][ T7821] cgroup: Need name or subsystem set
[  144.617387][ T6293] loop1: p4 start 42180 is beyond EOD, truncated
[  144.658604][ T7819]  loop1: p1 < > p4 < >
[  144.660832][ T7819] loop1: partition table partially beyond EOD, truncated
[  144.681495][ T7819] loop1: p4 start 42180 is beyond EOD, truncated
[  144.728636][ T7803] BTRFS info (device loop0): rebuilding free space tree
[  144.977536][ T6293] udevd[6293]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  145.085512][ T6293] udevd[6293]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  145.224481][ T5933] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  145.294539][ T7842] loop1: detected capacity change from 0 to 1764
[  145.375303][ T7842] iso9660: Corrupted directory entry in block 1 of inode 1920
[  145.969426][   T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  146.139827][   T47] usb 2-1: Using ep0 maxpacket: 8
[  146.140304][ T7851] loop0: detected capacity change from 0 to 32768
[  146.144077][   T47] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 201, changing to 11
[  146.147634][   T47] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  146.154113][   T47] usb 2-1: config 1 interface 0 has no altsetting 0
[  146.163337][   T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.40
[  146.166324][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.169008][   T47] usb 2-1: Product: syz
[  146.174686][   T47] usb 2-1: Manufacturer: syz
[  146.176772][   T47] usb 2-1: SerialNumber: syz
[  146.185628][ T7851] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  146.185628][ T7851] 
[  146.204503][   T26] read_mapping_page failed!
[  146.206540][   T26] ERROR: (device loop0): txCommit: 
[  146.206540][   T26] 
[  146.210581][   T26] jfs_write_inode: jfs_commit_inode failed!
[  146.269815][ T7857] sctp: [Deprecated]: syz.2.778 (pid 7857) Use of int in max_burst socket option deprecated.
[  146.269815][ T7857] Use struct sctp_assoc_value instead
[  146.335870][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'.
[  146.468474][   T47] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5
[  146.532009][   T47] usb 2-1: USB disconnect, device number 9
[  147.245604][ T7880] loop1: detected capacity change from 0 to 2048
[  147.283856][ T7880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.375874][ T7880] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.786: bg 0: block 234: padding at end of block bitmap is not set
[  147.388172][ T7880] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 386 with error 28
[  147.392654][ T7880] EXT4-fs (loop1): This should not happen!! Data will be lost
[  147.392654][ T7880] 
[  147.397957][ T7880] EXT4-fs (loop1): Total free blocks count 0
[  147.402372][ T7880] EXT4-fs (loop1): Free/Dirty block details
[  147.404713][ T7880] EXT4-fs (loop1): free_blocks=0
[  147.406481][ T7880] EXT4-fs (loop1): dirty_blocks=400
[  147.408412][ T7880] EXT4-fs (loop1): Block reservation details
[  147.411381][ T7880] EXT4-fs (loop1): i_reserved_data_blocks=25
[  147.698352][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.789'.
[  147.989496][   T47] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  148.066762][ T5931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.139481][   T47] usb 3-1: Using ep0 maxpacket: 8
[  148.145944][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[  148.154929][   T47] usb 3-1: config 7 has an invalid interface number: 142 but max is 0
[  148.158673][   T47] usb 3-1: config 7 has no interface number 0
[  148.164391][   T47] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[  148.168116][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.179353][   T47] usb 3-1: Product: syz
[  148.181195][   T47] usb 3-1: Manufacturer: syz
[  148.183334][   T47] usb 3-1: SerialNumber: syz
[  148.303589][ T7910] loop0: detected capacity change from 0 to 256
[  148.443414][   T47] usb 3-1: USB disconnect, device number 11
[  148.779424][  T973] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  148.929501][  T973] usb 1-1: Using ep0 maxpacket: 32
[  148.935860][  T973] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  148.941079][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.944594][  T973] usb 1-1: Product: syz
[  148.953110][  T973] usb 1-1: Manufacturer: syz
[  148.955119][  T973] usb 1-1: SerialNumber: syz
[  148.959236][  T973] usb 1-1: config 0 descriptor??
[  149.081244][ T2380] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  149.242432][ T2380] usb 2-1: unable to get BOS descriptor or descriptor too short
[  149.257933][ T2380] usb 2-1: not running at top speed; connect to a high speed hub
[  149.263189][ T2380] usb 2-1: config 14 has an invalid interface number: 90 but max is 0
[  149.266855][ T2380] usb 2-1: config 14 has no interface number 0
[  149.279417][ T2380] usb 2-1: config 14 interface 90 has no altsetting 0
[  149.284824][ T2380] usb 2-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=8c.6a
[  149.288735][ T2380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.292402][ T2380] usb 2-1: Product: syz
[  149.294253][ T2380] usb 2-1: Manufacturer: syz
[  149.296282][ T2380] usb 2-1: SerialNumber: syz
[  149.330101][ T7923] loop2: detected capacity change from 0 to 40427
[  149.335224][ T7923] F2FS-fs: inline encryption not supported
[  149.338456][ T7923] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  149.342397][ T7923] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  149.345996][ T7923] F2FS-fs (loop2): build fault injection rate: 17008
[  149.350269][ T7923] F2FS-fs (loop2): build fault injection type: 0x427
[  149.358601][ T7923] F2FS-fs (loop2): invalid crc value
[  149.374860][  T973] airspy 1-1:0.0: Board ID: 00
[  149.376879][  T973] airspy 1-1:0.0: Firmware version: 
[  149.438721][ T7923] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  149.446176][ T7923] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  149.449199][ T7923] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  149.505480][ T5927] syz-executor: attempt to access beyond end of device
[  149.505480][ T5927] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  149.516326][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  149.516349][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.516356][ T5927] Call Trace:
[  149.516362][ T5927]  <TASK>
[  149.516368][ T5927]  dump_stack_lvl+0x189/0x250
[  149.516413][ T5927]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.516427][ T5927]  ? __pfx_queue_work_on+0x10/0x10
[  149.516439][ T5927]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  149.516453][ T5927]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.516474][ T5927]  f2fs_handle_critical_error+0x37c/0x540
[  149.516496][ T5927]  f2fs_write_end_io+0x886/0xb60
[  149.516535][ T5927]  __submit_merged_bio+0x27a/0x6a0
[  149.516555][ T5927]  __submit_merged_write_cond+0x255/0x530
[  149.516574][ T5927]  f2fs_write_data_pages+0x261d/0x3000
[  149.516614][ T5927]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  149.516669][ T5927]  ? folios_put_refs+0x559/0x640
[  149.516692][ T5927]  ? __lock_acquire+0xab9/0xd20
[  149.516716][ T5927]  ? do_raw_spin_lock+0x121/0x290
[  149.516738][ T5927]  ? do_raw_spin_unlock+0x4d/0x240
[  149.516751][ T5927]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  149.516794][ T5927]  do_writepages+0x32e/0x550
[  149.516819][ T5927]  ? do_raw_spin_unlock+0x4d/0x240
[  149.516835][ T5927]  filemap_fdatawrite+0x199/0x240
[  149.516852][ T5927]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  149.516901][ T5927]  ? do_raw_spin_unlock+0x4d/0x240
[  149.516918][ T5927]  f2fs_sync_dirty_inodes+0x31f/0x830
[  149.516946][ T5927]  f2fs_write_checkpoint+0x95a/0x1df0
[  149.516979][ T5927]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  149.517029][ T5927]  ? kill_f2fs_super+0x298/0x6c0
[  149.517049][ T5927]  kill_f2fs_super+0x2c3/0x6c0
[  149.517070][ T5927]  ? __pfx_kill_f2fs_super+0x10/0x10
[  149.517084][ T5927]  ? radix_tree_delete_item+0x2b6/0x400
[  149.517103][ T5927]  ? shrinker_free+0x2ce/0x3e0
[  149.517118][ T5927]  deactivate_locked_super+0xbc/0x130
[  149.517135][ T5927]  cleanup_mnt+0x425/0x4c0
[  149.517148][ T5927]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.517164][ T5927]  task_work_run+0x1d4/0x260
[  149.517181][ T5927]  ? __pfx_task_work_run+0x10/0x10
[  149.517194][ T5927]  ? __x64_sys_umount+0x122/0x160
[  149.517213][ T5927]  ? exit_to_user_mode_loop+0x40/0x110
[  149.517233][ T5927]  exit_to_user_mode_loop+0xec/0x110
[  149.517249][ T5927]  do_syscall_64+0x2bd/0x3b0
[  149.517261][ T5927]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.517274][ T5927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.517285][ T5927]  ? exc_page_fault+0x9f/0xf0
[  149.517299][ T5927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.517310][ T5927] RIP: 0033:0x7f9abbd8ff17
[  149.517322][ T5927] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  149.517332][ T5927] RSP: 002b:00007ffeb5263b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  149.517346][ T5927] RAX: 0000000000000000 RBX: 00007f9abbe11c05 RCX: 00007f9abbd8ff17
[  149.517353][ T5927] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb5263bf0
[  149.517360][ T5927] RBP: 00007ffeb5263bf0 R08: 0000000000000000 R09: 0000000000000000
[  149.517366][ T5927] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb5264c80
[  149.517373][ T5927] R13: 00007f9abbe11c05 R14: 0000000000024774 R15: 00007ffeb5264cc0
[  149.517394][ T5927]  </TASK>
[  149.517463][ T5927] F2FS-fs (loop2): Remounting filesystem read-only
[  149.670885][ T2380] gspca_main: spca500-2.14.0 probing 041e:400a
[  149.682399][ T2380] usb 2-1: USB disconnect, device number 10
[  150.191671][  T973] airspy 1-1:0.0: usb_control_msg() failed -71 request 0f
[  150.197431][  T973] airspy 1-1:0.0: Registered as swradio24
[  150.200382][  T973] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  150.205013][  T973] usb 1-1: USB disconnect, device number 13
[  150.309389][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  150.469532][   T10] usb 2-1: Using ep0 maxpacket: 8
[  150.473459][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.477354][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  150.481206][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.486499][   T10] usb 2-1: config 0 descriptor??
[  150.492663][   T10] gspca_main: vc032x-2.14.0 probing 046d:0892
[  151.317329][ T7957] loop2: detected capacity change from 0 to 256
[  151.545525][   T10] gspca_vc032x: reg_r err -71
[  151.553081][   T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -71
[  151.561319][   T10] usb 2-1: USB disconnect, device number 11
[  152.191404][ T7976] tipc: Started in network mode
[  152.194141][ T7976] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  152.197609][ T7976] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  152.246722][ T7978] program syz.2.822 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  152.389809][ T5930] Bluetooth: hci2: command tx timeout
[  152.599778][   T47] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  152.749805][   T47] usb 2-1: Using ep0 maxpacket: 8
[  152.763021][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.772281][   T47] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  152.781837][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.800789][   T47] usb 2-1: config 0 descriptor??
[  153.214064][ T2380] tipc: Node number set to 9480874
[  153.286110][   T47] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0
[  153.424294][ T2380] usb 2-1: USB disconnect, device number 12
[  153.677381][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.834'.
[  153.972544][ T8010] loop1: detected capacity change from 0 to 256
[  154.044176][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'.
[  155.188329][ T8043] loop0: detected capacity change from 0 to 1764
[  155.511287][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  155.514186][ T8049] [U] Y
[  155.653319][ T8053] loop1: detected capacity change from 0 to 8
[  155.738302][ T8053] SQUASHFS error: Failed to read block 0xdfa: -5
[  155.747190][ T8053] SQUASHFS error: Unable to read metadata cache entry [dfa]
[  156.804704][ T8059] loop2: detected capacity change from 0 to 32768
[  157.193361][ T8059] (syz.2.858,8059,0):ocfs2_journal_init:961 ERROR: Journal file size (0) is too small!
[  157.203419][ T8059] (syz.2.858,8059,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  157.207623][ T8059] (syz.2.858,8059,0):ocfs2_check_volume:2432 ERROR: status = -22
[  157.219544][ T8059] (syz.2.858,8059,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  157.233327][ T8059] (syz.2.858,8059,0):ocfs2_fill_super:1177 ERROR: status = -22
[  157.248214][ T8068] netlink: 140 bytes leftover after parsing attributes in process `syz.0.861'.
[  157.595367][ T8084] loop1: detected capacity change from 0 to 2048
[  157.602517][ T8086] loop0: detected capacity change from 0 to 512
[  157.605541][ T8086] EXT4-fs: Ignoring removed mblk_io_submit option
[  157.615300][ T8086] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  157.636277][ T8086] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  157.642599][ T8084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.648008][ T8086] EXT4-fs (loop0): orphan cleanup on readonly fs
[  157.665509][ T8086] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.871: Invalid block bitmap block 0 in block_group 0
[  157.675754][ T8084] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  157.687779][ T8086] EXT4-fs (loop0): Remounting filesystem read-only
[  157.693099][ T8086] Quota error (device loop0): write_blk: dquota write failed
[  157.697213][ T8086] Quota error (device loop0): write_blk: dquota write failed
[  157.701144][ T8084] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  157.708116][ T8086] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  157.711146][ T8084] EXT4-fs (loop1): This should not happen!! Data will be lost
[  157.711146][ T8084] 
[  157.712810][ T8086] EXT4-fs (loop0): 1 orphan inode deleted
[  157.721890][ T8084] EXT4-fs (loop1): Total free blocks count 0
[  157.726411][ T8084] EXT4-fs (loop1): Free/Dirty block details
[  157.731257][ T8086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  157.737751][ T8084] EXT4-fs (loop1): free_blocks=66060288
[  157.742315][ T8084] EXT4-fs (loop1): dirty_blocks=48
[  157.744525][ T8084] EXT4-fs (loop1): Block reservation details
[  157.747502][ T8084] EXT4-fs (loop1): i_reserved_data_blocks=3
[  157.770975][ T8093] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  157.830658][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.029527][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  158.179475][   T10] usb 3-1: Using ep0 maxpacket: 16
[  158.186024][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.191788][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  158.200993][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  158.205431][   T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  158.209008][   T10] usb 3-1: Manufacturer: syz
[  158.217068][   T10] usb 3-1: config 0 descriptor??
[  158.703071][   T47] usb 3-1: USB disconnect, device number 12
[  158.990970][ T8114] loop1: detected capacity change from 0 to 32768
[  159.034746][ T8114] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  159.045094][ T8114] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  159.065400][   T33] audit: type=1800 audit(1755131716.690:18): pid=8114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.880" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  159.085441][   T33] audit: type=1804 audit(1755131716.700:19): pid=8114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.880" name="/newroot/291/bus/file1" dev="loop1" ino=17058 res=1 errno=0
[  159.333153][   T47] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  159.499424][   T47] usb 1-1: Using ep0 maxpacket: 16
[  159.511005][   T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  159.520940][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  159.528054][   T47] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  159.531540][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.534468][   T47] usb 1-1: Product: syz
[  159.535977][   T47] usb 1-1: Manufacturer: syz
[  159.537895][   T47] usb 1-1: SerialNumber: syz
[  159.546963][   T47] usb 1-1: config 0 descriptor??
[  159.732240][ T8121] loop2: detected capacity change from 0 to 32768
[  159.746358][ T8121] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.882 (8121)
[  159.778225][ T8121] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  159.784014][ T5930] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  159.789929][ T8121] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  159.794405][   T47] appledisplay 1-1:0.0: Error while getting initial brightness: -71
[  159.822337][ T8121] BTRFS info (device loop2): using free-space-tree
[  159.834405][   T47] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -71
[  159.894963][   T47] usb 1-1: USB disconnect, device number 14
[  160.027079][ T8121] BTRFS info (device loop2): rebuilding free space tree
[  160.377842][ T5927] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  160.807364][ T8145] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  160.837142][ T5931] ocfs2: Unmounting device (7,1) on (node local)
[  161.699446][ T2380] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  161.749897][ T8164] loop2: detected capacity change from 0 to 32768
[  161.776274][ T8164] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  161.824359][ T8164] XFS (loop2): Ending clean mount
[  161.859227][ T2380] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  161.863608][ T2380] usb 2-1: config 0 has no interface number 0
[  161.866305][ T2380] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  161.881999][ T5927] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  161.906460][ T2380] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  161.929414][ T2380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.932598][ T2380] usb 2-1: Product: syz
[  161.934291][ T2380] usb 2-1: Manufacturer: syz
[  161.936158][ T2380] usb 2-1: SerialNumber: syz
[  161.943201][ T2380] usb 2-1: config 0 descriptor??
[  162.193200][ T2380] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  162.196367][ T2380] keyspan 2-1:0.133: unsupported endpoint type 0
[  162.220601][ T2380] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  162.223820][ T2380] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  162.227090][ T2380] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  162.232962][ T8181] loop0: detected capacity change from 0 to 8192
[  162.258006][ T2380] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  162.279571][ T6293]  loop0: p1[EZD] p2 p3 p4
[  162.285160][ T2380] usb 2-1: USB disconnect, device number 13
[  162.297591][ T2380] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  162.304234][ T2380] keyspan 2-1:0.133: device disconnected
[  162.304661][ T6293] loop0: p3 start 117772289 is beyond EOD, truncated
[  162.313157][ T6293] loop0: p4 size 262144 extends beyond EOD, truncated
[  162.343992][ T8181]  loop0: p1[EZD] p2 p3 p4
[  162.360176][ T8181] loop0: p3 start 117772289 is beyond EOD, truncated
[  162.363163][ T8181] loop0: p4 size 262144 extends beyond EOD, truncated
[  162.545657][ T6305] udevd[6305]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  162.555615][ T6178] udevd[6178]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  162.561106][ T6293] udevd[6293]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  162.567983][ T8183] loop2: detected capacity change from 0 to 32768
[  162.573331][ T8183] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.898 (8183)
[  162.590942][ T8183] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.595312][ T8183] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  162.604276][ T6305] udevd[6305]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  162.606314][ T6178] udevd[6178]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  162.612791][ T8183] BTRFS info (device loop2): using free-space-tree
[  162.639555][ T6305] udevd[6305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  162.681971][ T8183] BTRFS info (device loop2): rebuilding free space tree
[  162.725402][ T2380] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  162.776814][ T8203] loop1: detected capacity change from 0 to 4096
[  162.801662][ T8203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.822317][ T5927] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.926640][ T2380] usb 1-1: config 2 has an invalid interface number: 183 but max is 0
[  162.929640][ T2380] usb 1-1: config 2 has no interface number 0
[  162.931731][ T2380] usb 1-1: config 2 interface 183 has no altsetting 0
[  162.940995][ T2380] usb 1-1: New USB device found, idVendor=0d49, idProduct=7310, bcdDevice=58.ae
[  162.944093][ T2380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.946777][ T2380] usb 1-1: Product: syz
[  162.948164][ T2380] usb 1-1: Manufacturer: syz
[  162.955087][ T2380] usb 1-1: SerialNumber: syz
[  163.270730][ T2380] usb-storage 1-1:2.183: USB Mass Storage device detected
[  163.374090][ T2380] usb-storage 1-1:2.183: Quirks match for vid 0d49 pid 7310: 8000
[  163.429027][ T8216] Bluetooth: (null): Invalid header checksum
[  163.452003][ T2380] usb 1-1: USB disconnect, device number 15
[  163.645096][ T5931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.761376][ T8222] loop2: detected capacity change from 0 to 32768
[  163.772614][ T8222] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.905 (8222)
[  163.788611][ T8222] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  163.802069][ T8222] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  163.805864][ T8222] BTRFS info (device loop2): using free-space-tree
[  164.154471][ T5927] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  164.243956][ T8260] loop1: detected capacity change from 0 to 1024
[  164.278392][ T8260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.285115][ T8260] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.315649][ T8260] EXT4-fs (loop1): shut down requested (1)
[  164.343270][ T5931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.811050][ T8293] loop2: detected capacity change from 0 to 8
[  165.846780][ T8293] SQUASHFS error: lzo decompression failed, data probably corrupt
[  165.853237][ T8293] SQUASHFS error: Failed to read block 0x0: -5
[  165.856187][ T8293] SQUASHFS error: lzo decompression failed, data probably corrupt
[  165.859934][ T8293] SQUASHFS error: Failed to read block 0x0: -5
[  165.862609][   T33] audit: type=1800 audit(1755131723.490:20): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.929" name="file2" dev="loop2" ino=3 res=0 errno=0
[  165.957011][ T8287] loop0: detected capacity change from 0 to 32768
[  166.032058][ T8287] JBD2: Ignoring recovery information on journal
[  166.124719][ T8287] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  166.266047][ T5933] ocfs2: Unmounting device (7,0) on (node local)
[  166.383725][ T8314] loop2: detected capacity change from 0 to 1024
[  166.390794][ T8314] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  166.409893][ T8314] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  166.413798][ T8314] EXT4-fs (loop2): orphan cleanup on readonly fs
[  166.419779][ T8314] Quota error (device loop2): v2_read_file_info: Can't read info structure
[  166.429740][ T8314] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  166.435848][ T8314] EXT4-fs (loop2): Cannot turn on quotas: error -5
[  166.461627][ T8314] EXT4-fs (loop2): 1 truncate cleaned up
[  166.464860][ T8314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  166.518309][ T5927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.131485][ T8341] loop2: detected capacity change from 0 to 1024
[  167.150370][ T8341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.165266][   T33] audit: type=1800 audit(1755131724.790:21): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.950" name="file1" dev="loop2" ino=15 res=0 errno=0
[  167.302589][ T8350] loop1: detected capacity change from 0 to 1024
[  167.308024][ T8350] EXT4-fs: inline encryption not supported
[  167.314698][ T8350] EXT4-fs: Ignoring removed bh option
[  167.433302][ T8350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.446402][  T973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.561191][ T8350] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  167.582900][ T8350] EXT4-fs (loop1): Remounting filesystem read-only
[  167.651054][ T5931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.675014][ T8362] netlink: 'syz.0.958': attribute type 8 has an invalid length.
[  167.764606][ T5940] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.902570][ T5940] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.981916][ T5940] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.013002][ T8377] loop0: detected capacity change from 0 to 1024
[  168.016029][ T8377] EXT4-fs: Ignoring removed mblk_io_submit option
[  168.018639][ T8377] EXT4-fs: Ignoring removed mblk_io_submit option
[  168.020843][ T8377] EXT4-fs: Ignoring removed bh option
[  168.048835][ T8377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.110845][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.115095][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.118849][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.123992][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.126864][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  168.143150][ T5940] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.498704][ T5940] bridge_slave_1: left allmulticast mode
[  168.501368][ T5940] bridge_slave_1: left promiscuous mode
[  168.504610][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.515930][ T5940] bridge_slave_0: left allmulticast mode
[  168.518088][ T5940] bridge_slave_0: left promiscuous mode
[  168.522530][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.937239][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.039090][ T8398] loop1: detected capacity change from 0 to 1024
[  169.051820][ T8398] EXT4-fs: Ignoring removed nomblk_io_submit option
[  169.075097][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.086024][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.087111][ T8398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.095052][ T5940] bond0 (unregistering): Released all slaves
[  169.170176][ T8382] chnl_net:caif_netlink_parms(): no params data found
[  169.176494][ T5931] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.793218][ T8409] loop1: detected capacity change from 0 to 32768
[  169.879627][ T8409] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  169.879678][ T8409]   allowing incompatible features above 0.0: (unknown version)
[  169.879687][ T8409]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  169.898613][ T8409] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  169.903821][ T8409] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  169.910059][ T8409] bcachefs (loop1): Version upgrade required:
[  169.910059][ T8409] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  169.910059][ T8409] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  169.910059][ T8409]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  169.943541][ T8409] bcachefs (loop1): dropping and reconstructing all alloc info
[  169.963271][ T8409] bcachefs (loop1): accounting_read... done
[  170.014121][ T8409] bcachefs (loop1): alloc_read... done
[  170.016798][ T8409] bcachefs (loop1): snapshots_read... done
[  170.019928][ T8409] bcachefs (loop1): check_allocations... done
[  170.054817][ T8409] bcachefs (loop1): going read-write
[  170.071103][ T8409] bcachefs (loop1): done starting filesystem
[  170.162127][ T5930] Bluetooth: hci0: command tx timeout
[  170.180137][   T33] audit: type=1800 audit(1755131727.770:22): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.975" name="file1" dev="loop1" ino=536870912 res=0 errno=0
[  170.205882][   T26] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  170.205924][   T26]   u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing
[  170.231624][ T5931] bcachefs (loop1): shutting down
[  170.231678][ T5931] bcachefs (loop1): going read-only
[  170.231695][ T5931] bcachefs (loop1): finished waiting for writes to stop
[  170.252528][ T5931] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11
[  170.254174][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.254260][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.254452][ T8382] bridge_slave_0: entered allmulticast mode
[  170.255805][ T8382] bridge_slave_0: entered promiscuous mode
[  170.263450][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.266622][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.266779][ T8382] bridge_slave_1: entered allmulticast mode
[  170.268292][ T8382] bridge_slave_1: entered promiscuous mode
[  170.286706][ T8432] loop0: detected capacity change from 0 to 4096
[  170.313254][ T8432] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  170.326446][   T26] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  170.326461][   T26]   u64s 5 type deleted 0:36:0 len 0 ver 0, , continuing
[  170.334912][   T26] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  170.334924][   T26]   u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing
[  170.353214][ T5940] hsr_slave_0: left promiscuous mode
[  170.357481][   T40] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  170.357495][   T40]   u64s 5 type deleted 0:46:0 len 0 ver 0, , continuing
[  170.359939][ T5940] hsr_slave_1: left promiscuous mode
[  170.370358][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.373546][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.375221][ T5931] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11
[  170.377458][ T8432] ntfs3(loop0): Failed to load $Extend (-22).
[  170.383841][ T8432] ntfs3(loop0): Failed to initialize $Extend.
[  170.384953][ T5931] bcachefs (loop1): unclean shutdown complete, journal seq 12
[  170.391233][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.394225][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.395008][ T5931] bcachefs (loop1): done going read-only, filesystem not clean
[  170.427304][ T5931] bcachefs (loop1): shutdown complete
[  170.430968][   T33] audit: type=1800 audit(1755131728.050:23): pid=8432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.977" name="file1" dev="loop0" ino=30 res=0 errno=0
[  170.444315][ T5940] veth1_macvtap: left promiscuous mode
[  170.456097][ T5940] veth0_macvtap: left promiscuous mode
[  170.458541][ T5940] veth1_vlan: left promiscuous mode
[  170.463129][ T5940] veth0_vlan: left promiscuous mode
[  170.839749][ T2380] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  170.894048][ T5940] team0 (unregistering): Port device team_slave_1 removed
[  170.923379][ T5940] team0 (unregistering): Port device team_slave_0 removed
[  170.992454][ T2380] usb 1-1: Using ep0 maxpacket: 8
[  170.998753][ T2380] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  171.011610][ T2380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.014712][ T2380] usb 1-1: Product: syz
[  171.016461][ T2380] usb 1-1: Manufacturer: syz
[  171.018076][ T2380] usb 1-1: SerialNumber: syz
[  171.023693][ T2380] usb 1-1: config 0 descriptor??
[  171.032904][ T2380] gspca_main: se401-2.14.0 probing 047d:5003
[  171.374065][ T8382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.383003][ T8382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.406020][ T8382] team0: Port device team_slave_0 added
[  171.413741][ T8382] team0: Port device team_slave_1 added
[  171.451878][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.454977][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.480664][ T8382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.494204][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.507678][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.518815][ T8382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.667715][ T2380] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[  171.681805][ T8382] hsr_slave_0: entered promiscuous mode
[  171.696454][ T8382] hsr_slave_1: entered promiscuous mode
[  171.857374][ T2380] usb 1-1: USB disconnect, device number 16
[  172.172586][ T8382] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  172.179728][ T8382] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  172.189188][ T8382] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  172.203283][ T8382] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  172.230069][ T5930] Bluetooth: hci0: command tx timeout
[  172.260307][    T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  172.327328][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.347670][ T8382] 8021q: adding VLAN 0 to HW filter on device team0
[  172.362925][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.365421][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.373115][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.375549][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.446406][    T9] usb 2-1: config 0 has no interfaces?
[  172.451888][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  172.455056][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  172.457921][    T9] usb 2-1: SerialNumber: syz
[  172.491078][ T8468] tipc: Started in network mode
[  172.492988][    T9] usb 2-1: config 0 descriptor??
[  172.493233][ T8468] tipc: Node identity 26e79c5080f8, cluster identity 4711
[  172.498572][ T8468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.508730][ T8468] syzkaller0: entered promiscuous mode
[  172.512161][ T8468] syzkaller0: entered allmulticast mode
[  172.520456][ T8468] tipc: Resetting bearer <eth:syzkaller0>
[  172.549882][ T8468] tipc: Disabling bearer <eth:syzkaller0>
[  172.628100][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'.
[  172.655373][ T8382] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.712303][ T8451] IPVS: length: 24 != 3277873272
[  172.716965][    T9] usb 2-1: USB disconnect, device number 14
[  172.746950][ T8382] veth0_vlan: entered promiscuous mode
[  172.756868][ T8382] veth1_vlan: entered promiscuous mode
[  172.803323][ T8382] veth0_macvtap: entered promiscuous mode
[  172.816802][ T8382] veth1_macvtap: entered promiscuous mode
[  172.841368][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.855859][ T8382] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.865831][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.884211][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.888868][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.914412][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.219595][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.224678][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.422338][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.427239][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.626759][   T33] audit: type=1326 audit(1755131731.250:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.3.961" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ac58ebe9 code=0x7ffc0000
[  173.667922][   T33] audit: type=1326 audit(1755131731.260:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.3.961" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ac58ebe9 code=0x7ffc0000
[  173.715056][   T33] audit: type=1326 audit(1755131731.260:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.3.961" exe="/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f76ac58ebe9 code=0x7ffc0000
[  173.734506][   T33] audit: type=1326 audit(1755131731.260:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.3.961" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ac58ebe9 code=0x7ffc0000
[  173.768858][   T33] audit: type=1326 audit(1755131731.260:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8497 comm="syz.3.961" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ac58ebe9 code=0x7ffc0000
[  174.330446][ T5930] Bluetooth: hci0: command tx timeout
[  174.996509][ T8507] loop1: detected capacity change from 0 to 40427
[  175.022787][ T8507] F2FS-fs (loop1): invalid crc value
[  175.147003][ T8507] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  175.155160][ T8507] F2FS-fs (loop1): Start checkpoint disabled!
[  175.164303][ T8507] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  175.184675][ T8529] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  175.374687][ T8539] loop3: detected capacity change from 0 to 8
[  175.539604][ T2380] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  175.696143][ T8549] SQUASHFS error: Failed to read block 0x2fc: -5
[  175.699004][ T8549] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  175.702293][ T8549] SQUASHFS error: Unable to read directory block [247:26]
[  175.707735][ T8549] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  175.711013][ T8549] SQUASHFS error: Unable to read directory block [247:26]
[  175.716699][ T8549] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  175.719876][ T8549] SQUASHFS error: Unable to read directory block [247:26]
[  175.755974][ T2380] usb 1-1: Using ep0 maxpacket: 16
[  175.812762][ T2380] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.828116][ T2380] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.834997][ T2380] usb 1-1: New USB device found, idVendor=1d6b, idProduct=1301, bcdDevice= 1.40
[  175.838827][ T2380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.859510][ T2380] usb 1-1: Product: syz
[  175.861307][ T2380] usb 1-1: Manufacturer: syz
[  175.868578][ T2380] usb 1-1: SerialNumber: syz
[  176.084647][ T8553] loop1: detected capacity change from 0 to 32768
[  176.097547][ T2380] usb 1-1: 0:2 : does not exist
[  176.107529][ T8553] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  176.117047][ T2380] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  176.130866][ T2380] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  176.140370][ T2380] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  176.157336][ T5931] ocfs2: Unmounting device (7,1) on (node local)
[  176.168499][ T2380] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5)
[  176.194828][ T2380] usb 1-1: USB disconnect, device number 17
[  176.400404][ T5930] Bluetooth: hci0: command tx timeout
[  176.589502][ T5958] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  176.651548][ T5990] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  176.749544][ T5958] usb 2-1: Using ep0 maxpacket: 16
[  176.753201][ T5958] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  176.757841][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  176.764769][ T5958] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  176.767703][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.770683][ T5958] usb 2-1: Product: syz
[  176.772079][ T5958] usb 2-1: Manufacturer: syz
[  176.773670][ T5958] usb 2-1: SerialNumber: syz
[  176.776955][ T5958] usb 2-1: config 0 descriptor??
[  176.781668][ T5958] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  176.784734][ T5958] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  176.799399][ T5990] usb 4-1: Using ep0 maxpacket: 32
[  176.803857][ T5990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.811764][ T5990] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  176.815101][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.817902][ T5990] usb 4-1: Product: syz
[  176.820151][ T5990] usb 4-1: Manufacturer: syz
[  176.821798][ T5990] usb 4-1: SerialNumber: syz
[  176.825403][ T5990] usb 4-1: config 0 descriptor??
[  176.829150][ T5990] usb 4-1: bad CDC descriptors
[  176.832784][ T5990] usb 4-1: unsupported MDLM descriptors
[  176.929436][ T2380] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  177.036794][ T5990] usb 4-1: USB disconnect, device number 2
[  177.082215][ T2380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  177.085879][ T2380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  177.091873][ T2380] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  177.095160][ T2380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.098853][ T2380] usb 1-1: Product: syz
[  177.100461][ T2380] usb 1-1: Manufacturer: syz
[  177.102300][ T2380] usb 1-1: SerialNumber: syz
[  177.108554][ T2380] usb 1-1: config 0 descriptor??
[  177.114280][ T2380] iguanair 1-1:0.0: probe with driver iguanair failed with error -12
[  177.326805][ T5990] usb 1-1: USB disconnect, device number 18
[  177.384656][ T5958] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  177.387132][ T5958] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  177.573396][ T8581] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.1010'.
[  177.593912][ T5958] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  177.596983][ T5958] em28xx 2-1:0.0: No AC97 audio processor
[  177.606134][ T5958] usb 2-1: USB disconnect, device number 15
[  177.625626][ T5958] em28xx 2-1:0.0: Disconnecting em28xx
[  177.633403][ T5958] em28xx 2-1:0.0: Freeing device
[  178.155130][ T8589] loop0: detected capacity change from 0 to 40427
[  178.161356][ T8589] F2FS-fs (loop0): journaled quota format not specified
[  178.349342][ T8593] loop0: detected capacity change from 0 to 32768
[  178.359872][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  178.372031][ T8593] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.384970][ T8593] XFS (loop0): totally zeroed log
[  178.387321][ T8593] XFS (loop0): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  178.394751][ T8593] XFS (loop0): log mount/recovery failed: error -22
[  178.406143][ T8593] XFS (loop0): log mount failed
[  178.536430][    T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  178.540831][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.544291][    T9] usb 2-1: Product: syz
[  178.546085][    T9] usb 2-1: Manufacturer: syz
[  178.548138][    T9] usb 2-1: SerialNumber: syz
[  178.554818][    T9] usb 2-1: config 0 descriptor??
[  178.782235][    T9] hso 2-1:0.0: Failed to find BULK IN ep
[  178.809677][    T9] usb-storage 2-1:0.0: USB Mass Storage device detected
[  178.899132][ T8619] 9pnet: p9_errstr2errno: server reported unknown error 000
[  178.991027][    T9] usb 2-1: USB disconnect, device number 16
[  179.165573][ T8633] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  179.184842][ T8633] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  179.352851][ T8641] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  179.358035][ T8641] bond0: (slave lo): Error: Device can not be enslaved while up
[  179.523912][ T8647] loop3: detected capacity change from 0 to 4096
[  179.674315][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'.
[  179.879190][   T33] audit: type=1326 audit(1755131737.500:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  179.919487][   T33] audit: type=1326 audit(1755131737.500:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  179.927264][   T33] audit: type=1326 audit(1755131737.500:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  179.945651][   T33] audit: type=1326 audit(1755131737.500:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  179.953806][   T33] audit: type=1326 audit(1755131737.500:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  179.961113][ T8671] loop0: detected capacity change from 0 to 512
[  179.961452][   T33] audit: type=1326 audit(1755131737.500:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  179.967235][ T8671] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  179.975989][ T8673] loop3: detected capacity change from 0 to 512
[  179.978355][   T33] audit: type=1326 audit(1755131737.500:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  179.993546][ T8671] EXT4-fs (loop0): 1 truncate cleaned up
[  179.997189][ T8673] EXT4-fs: Ignoring removed oldalloc option
[  179.998119][   T33] audit: type=1326 audit(1755131737.500:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  180.011161][ T8673] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1047: Parent and EA inode have the same ino 15
[  180.019102][ T8673] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  180.025466][ T8671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.028065][ T8673] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1047: Parent and EA inode have the same ino 15
[  180.040283][   T33] audit: type=1326 audit(1755131737.500:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8668 comm="syz.0.1045" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8358ebe9 code=0x7ffc0000
[  180.056003][ T8673] EXT4-fs (loop3): 1 orphan inode deleted
[  180.061487][ T8673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.101221][ T8673] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.1047: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  180.101693][ T5933] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.122685][ T2380] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  180.169057][ T8382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.175445][ T8678] loop0: detected capacity change from 0 to 16
[  180.178861][ T8678] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615000000000000000000000x000000000000000018446744073709551615$'
[  180.279348][ T2380] usb 2-1: Using ep0 maxpacket: 32
[  180.293332][ T2380] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  180.322073][ T2380] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  180.325573][ T2380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.328432][ T2380] usb 2-1: Product: syz
[  180.330390][ T2380] usb 2-1: Manufacturer: syz
[  180.332144][ T2380] usb 2-1: SerialNumber: syz
[  180.342439][ T2380] usb 2-1: config 0 descriptor??
[  180.345447][ T8664] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  180.352524][ T2380] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9
[  180.515011][ T8689] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  180.517826][ T8689] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  180.547012][ T8690] loop3: detected capacity change from 0 to 1024
[  180.599774][ T5958] usb 2-1: USB disconnect, device number 17
[  180.599922][    C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  180.674098][  T185] hfsplus: b-tree write err: -5, ino 4
[  180.823793][   T33] audit: type=1326 audit(1755131738.450:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.3.1060" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ac58ebe9 code=0x7ffc0000
[  181.335104][ T8731] IPv6: NLM_F_REPLACE set, but no existing node found!
[  181.354616][ T8731] loop3: detected capacity change from 0 to 128
[  181.364539][ T8731] FAT-fs (loop3): bogus number of FAT sectors
[  181.366776][ T8731] FAT-fs (loop3): Can't find a valid FAT filesystem
[  182.213862][ T8758] loop3: detected capacity change from 0 to 8192
[  182.262212][ T6305] Dev loop3: unable to read partition block 24912959864832
[  182.267260][ T6305]  loop3: RDSK (150994944) unable to read partition table
[  182.278475][ T6305] loop3: partition table beyond EOD, truncated
[  182.286807][ T8758] Dev loop3: unable to read partition block 24912959864832
[  182.290767][ T8758]  loop3: RDSK (150994944) unable to read partition table
[  182.294418][ T8758] loop3: partition table beyond EOD, truncated
[  182.298781][ T8758] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  182.618757][ T8787] loop0: detected capacity change from 0 to 256
[  182.622097][ T8787] vfat: Unknown parameter 'nnonumtail'
[  182.804176][ T8794] netlink: 'syz.0.1093': attribute type 33 has an invalid length.
[  182.812546][ T8794] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
Connection to localhost closed by remote host.
[  183.607927][ T8807] loop0: detected capacity change from 0 to 2048
[  183.623798][ T8807] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  183.668915][ T8807] NILFS (loop0): error -4 creating segctord thread
[  184.714309][ T5682] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.854760][ T5682] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.910590][ T5682] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.978072][ T5682] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.088669][ T5682] bridge_slave_1: left allmulticast mode
[  185.091444][ T5682] bridge_slave_1: left promiscuous mode
[  185.093897][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.102166][ T5682] bridge_slave_0: left allmulticast mode
[  185.104707][ T5682] bridge_slave_0: left promiscuous mode
[  185.107023][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.473531][ T5682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.479462][ T5682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.483532][ T5682] bond0 (unregistering): Released all slaves
[  185.677255][ T5682] hsr_slave_0: left promiscuous mode
[  185.680734][ T5682] hsr_slave_1: left promiscuous mode
[  185.682918][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.685364][ T5682] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.688454][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.696368][ T5682] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.712274][ T5682] veth1_macvtap: left promiscuous mode
[  185.714751][ T5682] veth0_macvtap: left promiscuous mode
[  185.717244][ T5682] veth1_vlan: left promiscuous mode
[  185.722238][ T5682] veth0_vlan: left promiscuous mode
[  186.051844][ T5682] team0 (unregistering): Port device team_slave_1 removed
[  186.083135][ T5682] team0 (unregistering): Port device team_slave_0 removed
[  186.879425][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  193.918830][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.921050][ T1363] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
00:35:51  Registers:
info registers vcpu 0

CPU#0
RAX=a4d5edcab55c7e00 RBX=ffffffff81968338 RCX=a4d5edcab55c7e00 RDX=0000000000000001
RSI=ffffffff8d9b443e RDI=ffffffff8be32600 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe836b7568 CR3=00000000277f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000ab40dcc 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=00000000ff000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1e3e10bebbfca700 RBX=ffffffff81968338 RCX=1e3e10bebbfca700 RDX=0000000000000001
RSI=ffffffff8d9b443e RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff3140240e8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff 00000000ffffffff
XMM02=00000000ff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0032313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
