last executing test programs:

1.542023648s ago: executing program 2 (id=850):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0xd780, 0x3, 0x1, 0x5, &(0x7f0000000000)='6'})

1.439883559s ago: executing program 2 (id=851):
timer_create(0x3, 0x0, &(0x7f00000000c0)=<r0=>0x0)
timer_getoverrun(r0)

1.373531116s ago: executing program 2 (id=852):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c)

1.280980788s ago: executing program 2 (id=853):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x1})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"20e1126470c7623a645ca791f5e2222c", 0x0, 0x0, {0x2, 0x1}, {0x5, 0x8}, 0x8, [0x8, 0x2a7, 0x10, 0xc0, 0x5, 0xb, 0x66, 0x4, 0x9, 0xbc7, 0x6, 0xb98, 0x9, 0x7, 0x5, 0xffff]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)

1.031766817s ago: executing program 0 (id=857):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a3000000000400000001b0a01080000000000000000010000000900030073797a32000000001400048008000240000000000800014000000000090001"], 0xf8}}, 0x0)

881.427918ms ago: executing program 0 (id=858):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x81, 0xc, 0x34524742, 0x8, 0x3, [{0x9, 0x2}, {0x0, 0x9}, {0x1, 0x10}, {0x4, 0xa}, {0x2, 0x9a}, {0x55fe649d, 0x81}, {0x2c1, 0x8}, {0x3, 0x1}], 0x44, 0x56, 0x8, 0x0, 0x7}})

781.91367ms ago: executing program 0 (id=859):
setuid(0xee01)
r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$chown(0x4, r0, 0xee01, 0xee00)

689.127209ms ago: executing program 2 (id=860):
r0 = socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)

688.600709ms ago: executing program 0 (id=861):
bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

532.376148ms ago: executing program 0 (id=863):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x28, r1, 0x601, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xc9e}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40810)

481.182551ms ago: executing program 2 (id=864):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f00000001c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard_size={'discard', 0x3d, 0x3}}, {@discard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10)
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280, 0x2)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

361.756762ms ago: executing program 0 (id=866):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@i_version}, {@quota}, {@nombcache}], [{@obj_user={'obj_user', 0x3d, '/dev/ptmx\x00'}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000200)={0x9, 0x3, 0x800078, 0x2, 0x6, 0x10001, 0x1000, 0xf67, 0x16})
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"})
write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020)
read$usbmon(r4, &(0x7f0000000340)=""/126, 0x7e)

270.011621ms ago: executing program 1 (id=867):
r0 = socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2026179e3f9e94f795c462aef6c3ea5725a79a084ad573851312355a1302", 0xff, 0x3, 0x6, 0x2}, 0x3c)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000080)={@local, @dev={0xac, 0x14, 0x14, 0x28}, 0x1, "a25cfc95e75c9c55d5257a3fc5cf22adcb205d64f04fc93f830b020f52814d58", 0x2, 0xffffffff, 0x5, 0xfff}, 0x3c)

150.227325ms ago: executing program 1 (id=868):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r1, 0xfffffe4d}}, 0x48)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x1000003}, r3, 0x7}}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @rand_addr=0x64010101, @broadcast, @remote}}}}, 0x0)

149.789266ms ago: executing program 1 (id=869):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x80105013, 0x0)

31.351152ms ago: executing program 1 (id=870):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240))

31.149529ms ago: executing program 1 (id=871):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10)
getitimer(0x2, &(0x7f0000000140))

0s ago: executing program 1 (id=872):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="7706137a95ff52ffef94a5c781cf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

kernel console output (not intermixed with test programs):

][ T6170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   79.268670][ T6170] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   79.273054][ T6170] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[   79.311885][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.404582][ T6184] ALSA: mixer_oss: invalid OSS volume ''
[   80.571905][ T6191] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.578190][ T6191] netlink: 'syz.0.101': attribute type 12 has an invalid length.
[   80.581649][ T6191] netlink: 'syz.0.101': attribute type 29 has an invalid length.
[   80.590667][ T6191] netlink: 148 bytes leftover after parsing attributes in process `syz.0.101'.
[   80.598377][ T6191] netlink: 'syz.0.101': attribute type 2 has an invalid length.
[   80.615330][ T6191] netlink: 43 bytes leftover after parsing attributes in process `syz.0.101'.
[   80.681539][ T6195] trusted_key: encrypted_key: insufficient parameters specified
[   80.930428][ T6215] bond0: entered promiscuous mode
[   80.932537][ T6215] bond_slave_0: entered promiscuous mode
[   80.934617][ T6215] bond_slave_1: entered promiscuous mode
[   81.038345][ T6220] loop0: detected capacity change from 0 to 512
[   81.069294][ T6220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.079273][ T6220] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   81.109716][ T6220] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.112: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[   81.128984][ T6220] EXT4-fs (loop0): Remounting filesystem read-only
[   81.741173][ T6239] loop2: detected capacity change from 0 to 8192
[   81.790487][ T5901]  loop2: p1 p2[DM] p4
[   81.794469][ T5901] loop2: partition table partially beyond EOD, truncated
[   81.799543][ T5901] loop2: p1 start 33488896 is beyond EOD, truncated
[   81.804117][ T5901] loop2: p2 start 165742591 is beyond EOD, truncated
[   81.809766][ T5901] loop2: p4 size 50331648 extends beyond EOD, truncated
[   81.822501][ T6241] loop1: detected capacity change from 0 to 32768
[   81.831947][ T6239]  loop2: p1 p2[DM] p4
[   81.832849][ T6241] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   81.833362][ T6239] loop2: partition table partially beyond EOD, 
[   81.843317][ T6241] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   81.844672][ T6239] truncated
[   81.866606][ T6239] loop2: p1 start 33488896 is beyond EOD, truncated
[   81.869382][ T6239] loop2: p2 start 165742591 is beyond EOD, truncated
[   81.871718][ T6239] loop2: p4 size 50331648 extends beyond EOD, truncated
[   81.889420][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.914456][ T5836] ocfs2: Unmounting device (7,1) on (node local)
[   82.004194][ T5901] udevd[5901]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   82.017112][ T5901] udevd[5901]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   82.067010][   T33] audit: type=1326 audit(1753382888.038:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[   82.094987][   T33] audit: type=1326 audit(1753382888.038:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[   82.102813][   T33] audit: type=1326 audit(1753382888.048:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.122" exe="/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[   82.117321][   T33] audit: type=1326 audit(1753382888.048:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[   82.131604][   T33] audit: type=1326 audit(1753382888.048:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[   82.425097][  T974] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   82.574938][  T974] usb 2-1: Using ep0 maxpacket: 32
[   82.581026][  T974] usb 2-1: unable to get BOS descriptor or descriptor too short
[   82.589155][  T974] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[   82.601800][  T974] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   82.606302][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.609595][  T974] usb 2-1: Product: С
[   82.611346][  T974] usb 2-1: Manufacturer: 긨탞鿝ﭘ켛괆勰ǿ㵖鼜뤱Ώ㼛䂨⸓삻䓑⏽﻽煌㈃쏛䙴풰୭鷅䅣퇥
[   82.643964][  T974] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[   82.648217][  T974] cdc_ncm 2-1:1.0: bind() failure
[   82.661535][  T974] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   82.664406][  T974] cdc_ncm 2-1:1.1: bind() failure
[   82.997519][  T974] usb 2-1: USB disconnect, device number 2
[   83.341339][ T6275] loop2: detected capacity change from 0 to 16
[   83.351410][ T6275] erofs (device loop2): mounted with root inode @ nid 36.
[   83.363450][ T6275] erofs (device loop2): read error -117 @ 72 of nid 36
[   83.458036][ T6273] loop0: detected capacity change from 0 to 32768
[   83.524480][ T6273] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.597941][ T6273] XFS (loop0): Ending clean mount
[   83.649472][ T5841] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.804140][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'.
[   83.927153][ T6306] loop0: detected capacity change from 0 to 1024
[   83.992106][ T6306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.009519][ T6306] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #11: comm syz.0.141: directory missing '.'
[   84.069973][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.315676][ T6318] loop2: detected capacity change from 0 to 128
[   84.501557][ T6318] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.514179][ T6318] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.547928][ T6318] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   84.632246][ T5832] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.836835][ T6325] loop0: detected capacity change from 0 to 1024
[   84.898629][ T6325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.013726][ T6327] loop2: detected capacity change from 0 to 8192
[   85.694283][ T6348] netlink: 372 bytes leftover after parsing attributes in process `syz.1.161'.
[   85.794346][ T6354] loop1: detected capacity change from 0 to 1764
[   85.944897][  T974] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   85.981660][ T6362] netlink: 68 bytes leftover after parsing attributes in process `syz.0.167'.
[   86.121830][  T974] usb 3-1: unable to get BOS descriptor or descriptor too short
[   86.141123][  T974] usb 3-1: not running at top speed; connect to a high speed hub
[   86.158808][  T974] usb 3-1: config 8 has an invalid interface number: 59 but max is 0
[   86.175075][  T974] usb 3-1: config 8 has no interface number 0
[   86.184974][  T974] usb 3-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=a9.94
[   86.196701][  T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.200089][  T974] usb 3-1: Product: syz
[   86.201998][  T974] usb 3-1: Manufacturer: syz
[   86.204061][  T974] usb 3-1: SerialNumber: syz
[   86.474986][  T974] gspca_main: etoms-2.14.0 probing 102c:6251
[   86.475033][ T5299] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   86.499880][  T920] cfg80211: failed to load regulatory.db
[   86.592530][  T974] usb 3-1: USB disconnect, device number 3
[   86.635037][ T5299] usb 2-1: Using ep0 maxpacket: 16
[   86.662195][ T5299] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[   86.667799][ T5299] usb 2-1: config 0 has no interface number 0
[   86.670531][ T5299] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   86.676554][ T5299] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   86.698891][ T5299] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   86.712370][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   86.721621][ T5299] usb 2-1: Product: syz
[   86.723450][ T5299] usb 2-1: SerialNumber: syz
[   86.739877][ T5299] usb 2-1: config 0 descriptor??
[   86.772376][ T5299] cm109 2-1:0.8: invalid payload size 0, expected 4
[   86.788518][ T5299] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input4
[   87.012186][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[   87.428219][ T5941] usb 2-1: USB disconnect, device number 3
[   87.445469][ T5941] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   87.466356][ T6371] loop2: detected capacity change from 0 to 32768
[   87.612911][ T6373] loop0: detected capacity change from 0 to 32768
[   87.707476][ T6373] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[   87.707498][ T6373]   allowing incompatible features above 0.0: (unknown version)
[   87.707506][ T6373]   features: atomic_nlink
[   87.719856][ T6373] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   87.723297][ T6373] bcachefs (loop0): initializing new filesystem
[   87.736543][ T6373] bcachefs (loop0): going read-write
[   87.750405][ T6373] bcachefs (loop0): marking superblocks
[   87.764429][ T6373] bcachefs (loop0): initializing freespace
[   87.771926][ T6373] bcachefs (loop0): done initializing freespace
[   87.779511][ T6373] bcachefs (loop0): reading snapshots table
[   87.782330][ T6373] bcachefs (loop0): reading snapshots done
[   87.799674][ T6373] bcachefs (loop0): done starting filesystem
[   87.919865][ T5841] bcachefs (loop0): shutting down
[   87.921803][ T5841] bcachefs (loop0): going read-only
[   87.923642][ T5841] bcachefs (loop0): finished waiting for writes to stop
[   87.934103][ T5841] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[   88.163387][ T5841] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[   88.171637][ T5841] bcachefs (loop0): clean shutdown complete, journal seq 4
[   88.175538][ T5841] bcachefs (loop0): marking filesystem clean
[   88.221438][ T5841] bcachefs (loop0): shutdown complete
[   89.099691][ T6403] loop2: detected capacity change from 0 to 32768
[   89.106424][ T6403] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.180 (6403)
[   89.135010][ T6403] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   89.139265][ T6403] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   89.143087][ T6403] BTRFS info (device loop2): using free-space-tree
[   89.192142][   T33] audit: type=1800 audit(1753382895.158:9): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.180" name="file2" dev="loop2" ino=261 res=0 errno=0
[   89.240121][ T5832] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   89.664949][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   90.614906][   T10] usb 3-1: Using ep0 maxpacket: 16
[   90.620640][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[   90.626243][   T10] usb 3-1: config 9 has an invalid interface number: 111 but max is 0
[   90.629866][   T10] usb 3-1: config 9 has no interface number 0
[   90.633456][   T10] usb 3-1: config 9 interface 111 has no altsetting 0
[   90.640909][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=2536, bcdDevice=e0.5e
[   90.646057][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.649775][   T10] usb 3-1: Product: syz
[   90.652856][   T10] usb 3-1: Manufacturer: syz
[   90.656659][   T10] usb 3-1: SerialNumber: syz
[   90.886455][   T10] usb 3-1: USB disconnect, device number 4
[   90.896980][ T6462] loop1: detected capacity change from 0 to 32768
[   90.924564][ T6462] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   90.991114][ T6462] XFS (loop1): Ending clean mount
[   91.003012][ T6462] XFS (loop1): Quotacheck needed: Please wait.
[   91.036842][ T6462] XFS (loop1): Quotacheck: Done.
[   91.051356][ T6484] loop0: detected capacity change from 0 to 256
[   91.054208][   T33] audit: type=1800 audit(1753382897.008:10): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.185" name="file1" dev="loop1" ino=9286 res=0 errno=0
[   91.072229][ T5836] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   91.077940][   T33] audit: type=1800 audit(1753382897.048:11): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.192" name=F15BBA4E66BB75FBD5 dev="loop0" ino=1048592 res=0 errno=0
[   91.204325][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'.
[   91.817390][ T6499] syz.2.198: attempt to access beyond end of device
[   91.817390][ T6499] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0
[   91.823738][ T6499] qnx6: unable to read the first superblock
[   91.827217][ T6499] syz.2.198: attempt to access beyond end of device
[   91.827217][ T6499] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   91.832631][ T6499] qnx6: unable to read the first superblock
[   91.836058][ T6499] qnx6: unable to read the first superblock
[   91.946237][ T6505] loop2: detected capacity change from 0 to 256
[   91.963864][ T6505] FAT-fs (loop2): Directory bread(block 64) failed
[   91.966448][ T6505] FAT-fs (loop2): Directory bread(block 65) failed
[   91.968661][ T6505] FAT-fs (loop2): Directory bread(block 66) failed
[   91.970830][ T6505] FAT-fs (loop2): Directory bread(block 67) failed
[   91.973304][ T6505] FAT-fs (loop2): Directory bread(block 68) failed
[   91.975842][ T6505] FAT-fs (loop2): Directory bread(block 69) failed
[   91.978228][ T6505] FAT-fs (loop2): Directory bread(block 70) failed
[   91.980373][ T6505] FAT-fs (loop2): Directory bread(block 71) failed
[   91.982578][ T6505] FAT-fs (loop2): Directory bread(block 72) failed
[   91.985475][ T6505] FAT-fs (loop2): Directory bread(block 73) failed
[   92.053135][ T6509] loop2: detected capacity change from 0 to 1024
[   92.138033][ T3588] hfsplus: b-tree write err: -5, ino 4
[   92.188791][ T6513] loop2: detected capacity change from 0 to 1024
[   92.232403][ T6513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.246391][ T6513] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.268426][ T6507] loop0: detected capacity change from 0 to 32768
[   92.294509][ T6507] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   92.314471][ T6507] XFS (loop0): Ending clean mount
[   92.319199][ T6507] XFS (loop0): Quotacheck needed: Please wait.
[   92.324204][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.347186][ T6507] XFS (loop0): Quotacheck: Done.
[   92.397680][ T6528] netlink: 14 bytes leftover after parsing attributes in process `syz.1.208'.
[   92.415195][ T6528] hsr_slave_0: left promiscuous mode
[   92.422918][ T6528] hsr_slave_1: left promiscuous mode
[   92.441455][ T5841] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   92.621192][ T6536] loop2: detected capacity change from 0 to 7
[   92.625894][ T6536] Dev loop2: unable to read RDB block 7
[   92.628102][ T6536]  loop2: unable to read partition table
[   92.631367][ T6536] loop2: partition table beyond EOD, truncated
[   92.633456][ T6536] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5)
[   92.721959][ T6542] bond2: entered promiscuous mode
[   92.760283][ T6545] loop2: detected capacity change from 0 to 128
[   92.780980][ T6545] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   92.787719][ T6545] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   92.794542][ T6545] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:105: comm syz.2.215: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19
[   92.822130][ T5832] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   92.856313][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   92.856394][   T47] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   92.869799][ T6548] loop2: detected capacity change from 0 to 256
[   92.907175][ T6548] FAT-fs (loop2): Directory bread(block 64) failed
[   92.909487][ T6548] FAT-fs (loop2): Directory bread(block 65) failed
[   92.911783][ T6548] FAT-fs (loop2): Directory bread(block 66) failed
[   92.916128][ T6548] FAT-fs (loop2): Directory bread(block 67) failed
[   92.918881][ T6548] FAT-fs (loop2): Directory bread(block 68) failed
[   92.921688][ T6548] FAT-fs (loop2): Directory bread(block 69) failed
[   92.924144][ T6548] FAT-fs (loop2): Directory bread(block 70) failed
[   92.926888][ T6548] FAT-fs (loop2): Directory bread(block 71) failed
[   92.929179][ T6548] FAT-fs (loop2): Directory bread(block 72) failed
[   92.931365][ T6548] FAT-fs (loop2): Directory bread(block 73) failed
[   92.946012][ T6548] overlay: ./file0 is not a directory
[   93.007275][   T47] usb 1-1: Using ep0 maxpacket: 16
[   93.013995][   T47] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   93.022312][   T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.027235][   T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.036818][   T10] usb 2-1: Using ep0 maxpacket: 16
[   93.040441][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.043998][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   93.058118][   T47] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.059445][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   93.061926][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.061944][   T47] usb 1-1: Product: syz
[   93.061954][   T47] usb 1-1: Manufacturer: syz
[   93.061964][   T47] usb 1-1: SerialNumber: syz
[   93.071342][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.078212][   T10] usb 2-1: Product: syz
[   93.079696][   T10] usb 2-1: Manufacturer: syz
[   93.081361][   T10] usb 2-1: SerialNumber: syz
[   93.176384][ T6557] loop2: detected capacity change from 0 to 1024
[   93.201419][ T6557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.211175][ T6557] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #11: block 32: comm syz.2.220: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=65526, size=1024 fake=1
[   93.233991][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.495399][   T47] usb 1-1: 0:2 : does not exist
[   94.148088][ T6571] loop2: detected capacity change from 0 to 128
[   94.172221][   T10] usb 2-1: 0:2 : does not exist
[   94.173984][   T10] usb 2-1: unit 9 not found!
[   94.201487][   T10] usb 2-1: USB disconnect, device number 4
[   94.208073][   T47] usb 1-1: USB disconnect, device number 4
[   94.329127][ T6460] udevd[6460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[   94.336967][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   94.457301][ T6575] No such timeout policy "syz0"
[   94.615043][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   94.776268][   T10] usb 2-1: Using ep0 maxpacket: 16
[   94.782914][   T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   94.790619][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.800509][   T10] usb 2-1: config 0 descriptor??
[   94.807439][   T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   95.015999][   T10] usb 2-1: Detected FT232B
[   95.212857][ T6592] loop2: detected capacity change from 0 to 1024
[   95.218819][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   95.222518][   T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   95.228000][ T6592] EXT4-fs: inline encryption not supported
[   95.229993][ T6592] EXT4-fs: Ignoring removed bh option
[   95.247891][   T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   95.289271][ T6592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.295246][   T10] usb 2-1: USB disconnect, device number 5
[   95.304302][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   95.316841][   T10] ftdi_sio 2-1:0.0: device disconnected
[   95.410844][ T6599] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   95.423786][ T6599] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   95.451162][ T6599] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[   95.471104][ T6599] EXT4-fs (loop2): Remounting filesystem read-only
[   95.535048][   T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   95.708608][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.712729][   T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   95.718170][   T47] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   95.722074][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.731703][   T47] usb 1-1: config 0 descriptor??
[   96.151041][   T47] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0
[   96.160670][   T47] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0
[   96.163411][   T47] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0
[   96.166170][   T47] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0
[   96.171326][   T47] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0
[   96.178264][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.181424][   T47] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0
[   96.557858][   T47] kovaplus 0003:1E7D:2D50.0001: couldn't init struct kovaplus_device
[   96.560932][   T47] kovaplus 0003:1E7D:2D50.0001: couldn't install mouse
[   96.574233][   T47] kovaplus 0003:1E7D:2D50.0001: probe with driver kovaplus failed with error -71
[   96.590712][   T47] usb 1-1: USB disconnect, device number 5
[   96.600582][ T6613] netlink: 'syz.2.243': attribute type 1 has an invalid length.
[   96.605699][ T6613] netlink: 224 bytes leftover after parsing attributes in process `syz.2.243'.
[   96.879852][ T6617] loop1: detected capacity change from 0 to 512
[   96.894951][ T5896] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   96.900409][ T6617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.904405][ T6617] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.919533][ T6617] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   96.926793][ T6617] EXT4-fs (loop1): Remounting filesystem read-only
[   96.941651][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.037824][ T6626] loop1: detected capacity change from 0 to 128
[   97.040336][ T6626] EXT4-fs: Ignoring removed nobh option
[   97.046376][ T6626] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   97.053481][ T6626] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   97.058343][ T5896] usb 3-1: Using ep0 maxpacket: 8
[   97.061870][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.066208][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[   97.070155][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   97.073525][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   97.077481][ T5896] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7
[   97.080507][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.087316][ T5896] usb 3-1: config 0 descriptor??
[   97.094337][ T5896] metro_usb 3-1:0.0: Metrologic USB to Serial converter detected
[   97.102234][ T5896] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0
[   97.133545][ T5836] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.285367][   T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   97.296597][ T5896] usb 3-1: USB disconnect, device number 5
[   97.304495][ T5896] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[   97.308256][ T5896] metro_usb 3-1:0.0: device disconnected
[   97.449218][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   97.452459][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[   97.458755][   T10] usb 1-1: config 14 has an invalid interface number: 90 but max is 0
[   97.461703][   T10] usb 1-1: config 14 has no interface number 0
[   97.463729][   T10] usb 1-1: config 14 interface 90 has no altsetting 0
[   97.469009][   T10] usb 1-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=8c.6a
[   97.471979][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.475112][   T10] usb 1-1: Product: syz
[   97.476509][   T10] usb 1-1: Manufacturer: syz
[   97.478070][   T10] usb 1-1: SerialNumber: syz
[   97.499830][ T6643] loop1: detected capacity change from 0 to 64
[   97.533243][ T6643] Trying to free block not in datazone
[   97.538855][ T6643] Trying to free block not in datazone
[   97.544679][ T6643] Trying to free block not in datazone
[   97.682317][ T6645] loop1: detected capacity change from 0 to 4096
[   97.710697][   T10] gspca_main: spca500-2.14.0 probing 041e:400a
[   97.720109][   T10] usb 1-1: USB disconnect, device number 6
[   97.863944][   T33] audit: type=1326 audit(1753382903.828:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.1.258" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x0
[   98.110097][ T5299] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   98.260243][ T6666] loop0: detected capacity change from 0 to 512
[   98.264416][ T6666] EXT4-fs: Ignoring removed bh option
[   98.269044][ T5299] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[   98.271706][ T5299] usb 3-1: config 0 has no interface number 0
[   98.277692][ T5299] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.282245][ T6666] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   98.286657][ T5299] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.289933][ T5299] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   98.292880][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.309977][ T6666] EXT4-fs (loop0): 1 truncate cleaned up
[   98.312996][ T6666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.320206][ T5299] usb 3-1: config 0 descriptor??
[   98.331399][ T6666] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize
[   98.381861][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.525797][ T6665] loop1: detected capacity change from 0 to 32768
[   98.540287][ T6665] JBD2: Ignoring recovery information on journal
[   98.561444][ T6665] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   98.594524][ T5836] ocfs2: Unmounting device (7,1) on (node local)
[   98.687246][ T6673] loop1: detected capacity change from 0 to 512
[   98.704017][ T6673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.710054][ T6673] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.720520][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   98.733849][ T5299] uclogic 0003:256C:006D.0002: interface is invalid, ignoring
[   98.738347][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.816593][ T6679] loop1: detected capacity change from 0 to 256
[   98.824183][ T6679] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   98.874973][   T10] usb 1-1: Using ep0 maxpacket: 16
[   98.884472][   T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   98.892304][   T10] usb 1-1: config 0 has no interface number 0
[   98.897538][   T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   98.900847][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.903743][   T10] usb 1-1: Product: syz
[   98.910675][   T10] usb 1-1: Manufacturer: syz
[   98.911999][ T6681] loop1: detected capacity change from 0 to 512
[   98.912589][   T10] usb 1-1: SerialNumber: syz
[   98.922378][   T10] usb 1-1: config 0 descriptor??
[   98.930189][ T6681] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   98.934013][    T9] usb 3-1: USB disconnect, device number 6
[   98.950545][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   98.968387][ T6681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.972566][ T6681] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.001873][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.096654][ T6687] loop1: detected capacity change from 0 to 2048
[   99.107357][ T6687] UDF-fs: warning (device loop1): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[   99.304732][ T6693] loop1: detected capacity change from 0 to 1764
[   99.314621][ T6693] iso9660: Corrupted directory entry in block 1 of inode 1920
[   99.563222][   T10] gspca_spca1528: reg_w err -71
[   99.586205][   T10] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[   99.592923][   T10] usb 1-1: USB disconnect, device number 7
[  100.164203][ T6731] loop0: detected capacity change from 0 to 2048
[  100.178244][ T6731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.206813][ T6731] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.360236][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.446777][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'.
[  100.500807][ T6741] loop0: detected capacity change from 0 to 256
[  100.538443][   T33] audit: type=1800 audit(1753382906.508:13): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.292" name="bus" dev="loop0" ino=1048617 res=0 errno=0
[  100.679885][ T6753] loop0: detected capacity change from 0 to 1024
[  100.692682][ T6753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.702608][ T6753] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.718214][ T6753] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.297: Freeing blocks not in datazone - block = 0, count = 16
[  100.744911][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.824353][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  100.880883][ T6759] loop0: detected capacity change from 0 to 1024
[  100.904204][ T6759] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  100.914609][ T6759] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  100.921330][ T6759] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  100.924354][ T6759] EXT4-fs (loop0): orphan cleanup on readonly fs
[  100.927967][ T6759] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.299: Freeing blocks not in datazone - block = 0, count = 4096
[  100.936420][ T6759] EXT4-fs (loop0): Remounting filesystem read-only
[  100.938864][ T6759] EXT4-fs (loop0): 1 orphan inode deleted
[  100.941845][ T6759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  100.982678][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.007504][   T10] usb 2-1: Using ep0 maxpacket: 16
[  101.014076][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.023560][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.035341][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  101.037567][   T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  101.048167][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.068988][   T10] usb 2-1: config 0 descriptor??
[  101.515092][   T47] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  101.618138][ T5896] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  101.674974][   T47] usb 3-1: Using ep0 maxpacket: 16
[  101.679280][   T47] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  101.681460][   T10] usb 2-1: USB disconnect, device number 6
[  101.682040][   T47] usb 3-1: config 0 has no interface number 0
[  101.689181][   T47] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  101.693431][   T47] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  101.698856][   T47] usb 3-1: config 0 interface 41 has no altsetting 0
[  101.706042][   T47] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  101.709437][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.712073][   T47] usb 3-1: Product: syz
[  101.713465][   T47] usb 3-1: Manufacturer: syz
[  101.715609][   T47] usb 3-1: SerialNumber: syz
[  101.720460][   T47] usb 3-1: config 0 descriptor??
[  101.724068][ T6775] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  101.728060][ T6775] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  101.765147][ T5896] usb 1-1: Using ep0 maxpacket: 32
[  101.769256][ T5896] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  101.772829][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.780648][ T5896] usb 1-1: config 0 descriptor??
[  101.787436][ T5896] gspca_main: sunplus-2.14.0 probing 041e:400b
[  101.934094][ T6775] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  101.936935][ T6775] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  102.251777][ T6781] QAT: failed to copy from user cfg_data.
[  102.341539][   T47] Error reading MAC address
[  102.344432][ T6775] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  102.349289][ T6785] loop1: detected capacity change from 0 to 512
[  102.352876][ T6775] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  102.366885][ T6785] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  102.376807][ T6785] EXT4-fs (loop1): 1 truncate cleaned up
[  102.380295][ T6785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.396697][ T6785] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.311: bg 0: block 256: padding at end of block bitmap is not set
[  102.406246][ T6785] EXT4-fs (loop1): Remounting filesystem read-only
[  102.438723][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.563926][   T47] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  102.577298][   T47] usb 3-1: USB disconnect, device number 7
[  102.636317][ T6793] loop1: detected capacity change from 0 to 256
[  102.747167][   T55] Bluetooth: hci1: adv larger than maximum supported
[  102.798369][ T5896] gspca_sunplus: reg_w_riv err -71
[  102.805182][ T5896] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  102.813252][ T5896] usb 1-1: USB disconnect, device number 8
[  103.124529][ T6802] loop2: detected capacity change from 0 to 512
[  103.175355][ T6802] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  103.193951][ T6802] EXT4-fs (loop2): 1 truncate cleaned up
[  103.202174][ T6802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.259486][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.413047][ T6808] loop2: detected capacity change from 0 to 64
[  103.461978][ T6808] minix_free_block (loop2:2): bit already cleared
[  103.465111][ T6808] minix_free_block (loop2:3): bit already cleared
[  103.467267][ T6808] minix_free_block (loop2:4): bit already cleared
[  103.540932][ T6812] loop1: detected capacity change from 0 to 64
[  103.574508][ T6812] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  103.630307][ T6812] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  103.807775][ T6828] loop2: detected capacity change from 0 to 256
[  103.843616][ T6828] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d)
[  103.991250][ T6841] loop1: detected capacity change from 0 to 164
[  104.155735][ T6852] loop0: detected capacity change from 0 to 512
[  104.171360][ T6852] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  104.185314][ T6852] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6842e02c, mo2=0102]
[  104.187972][ T6852] System zones: 1-12
[  104.189553][ T6852] EXT4-fs (loop0): orphan cleanup on readonly fs
[  104.192867][ T6852] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.341: invalid indirect mapped block 12 (level 1)
[  104.210912][ T6852] EXT4-fs (loop0): Remounting filesystem read-only
[  104.213790][ T6852] EXT4-fs (loop0): 1 truncate cleaned up
[  104.319307][ T6852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  104.410794][ T6858] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  104.451651][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  104.557010][ T5281] udevd[5281]: worker [5833] terminated by signal 33 (Unknown signal 33)
[  104.560691][ T5281] udevd[5281]: worker [5833] failed while handling '/devices/virtual/block/loop1'
[  104.842908][ T6868] loop0: detected capacity change from 0 to 32768
[  104.844922][ T5299] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  104.881413][ T6868] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.902599][ T6868] XFS (loop0): Ending clean mount
[  104.929822][ T6868] XFS (loop0): Quotacheck needed: Please wait.
[  104.945935][ T6868] XFS (loop0): Quotacheck: Done.
[  104.961216][    C1] ata1: illegal qc_active transition (00000000->00001000)
[  105.009853][ T5299] usb 2-1: config 252 has an invalid interface number: 107 but max is 0
[  105.013518][ T5299] usb 2-1: config 252 has no interface number 0
[  105.020908][ T5299] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  105.030484][ T5841] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  105.039488][ T5299] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  105.093923][ T5299] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67
[  105.102064][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.106866][ T5299] usb 2-1: Product: syz
[  105.108723][ T5299] usb 2-1: Manufacturer: syz
[  105.111030][ T5299] usb 2-1: SerialNumber: syz
[  105.232816][   T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  105.236792][   T55] Bluetooth: hci0: Injecting HCI hardware error event
[  105.240465][   T55] Bluetooth: hci0: hardware error 0x00
[  105.319506][ T1060] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  105.331363][   T47] usb 2-1: USB disconnect, device number 7
[  105.334395][ T1060] ata1.00: configured for UDMA/100
[  105.505189][ T5299] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  105.668141][ T5299] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  105.672799][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.679360][ T5299] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  105.682371][ T5299] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  105.686655][ T5299] usb 3-1: Manufacturer: syz
[  105.691852][ T5299] usb 3-1: config 0 descriptor??
[  105.719630][ T5299] igorplugusb 3-1:0.0: endpoint incorrect
[  105.907442][ T5896] usb 3-1: USB disconnect, device number 8
[  106.360535][ T6913] loop1: detected capacity change from 0 to 32768
[  106.372352][ T6915] loop0: detected capacity change from 0 to 1024
[  106.379571][ T6913] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.417006][ T6913] XFS (loop1): Ending clean mount
[  106.424508][ T6913] XFS (loop1): Quotacheck needed: Please wait.
[  106.455926][ T6913] XFS (loop1): Quotacheck: Done.
[  106.562012][ T6926] syz.0.363 uses old SIOCAX25GETINFO
[  106.713528][ T5836] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  107.015971][ T6933] loop1: detected capacity change from 0 to 4096
[  107.305127][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  107.375626][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  107.538216][    T9] usb 3-1: Using ep0 maxpacket: 32
[  107.545211][    T9] usb 3-1: config 0 has an invalid interface number: 202 but max is 1
[  107.548204][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.557608][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  107.560865][    T9] usb 3-1: config 0 has no interface number 0
[  107.563130][    T9] usb 3-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30
[  107.569673][    T9] usb 3-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  107.573782][    T9] usb 3-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182
[  107.580557][    T9] usb 3-1: config 0 interface 202 has no altsetting 0
[  107.595954][    T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[  107.599941][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.606319][    T9] usb 3-1: Product: syz
[  107.608216][    T9] usb 3-1: Manufacturer: syz
[  107.610323][    T9] usb 3-1: SerialNumber: syz
[  107.620503][    T9] usb 3-1: config 0 descriptor??
[  107.682300][    T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  107.863149][   T13] usb 3-1: Failed to submit usb control message: -71
[  107.863552][ T5941] usb 3-1: USB disconnect, device number 9
[  107.866084][   T13] usb 3-1: unable to send the bmi data to the device: -71
[  107.872002][   T13] usb 3-1: unable to get target info from device
[  107.874634][   T13] usb 3-1: could not get target info (-71)
[  107.881868][   T13] usb 3-1: could not probe fw (-71)
[  108.887427][ T6957] Driver unsupported XDP return value 0 on prog  (id 32) dev N/A, expect packet loss!
[  109.151857][ T6966] loop1: detected capacity change from 0 to 512
[  109.156279][ T6966] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.168644][ T6966] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.379: corrupted xattr entries
[  109.174689][ T6966] EXT4-fs (loop1): Remounting filesystem read-only
[  109.178007][ T6966] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  109.182551][ T6966] EXT4-fs (loop1): 1 truncate cleaned up
[  109.185508][ T6966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.205982][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.242188][ T6970] capability: warning: `syz.1.380' uses deprecated v2 capabilities in a way that may be insecure
[  109.585660][ T6984] loop1: detected capacity change from 0 to 512
[  109.623686][ T6984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.628040][ T6984] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  109.638742][ T6984] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.386: corrupted inode contents
[  109.648726][ T6984] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.386: mark_inode_dirty error
[  109.654159][ T6984] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.386: corrupted inode contents
[  109.673693][ T6984] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.386: corrupted inode contents
[  109.707137][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.883624][ T6993] evm: overlay not supported
[  110.040935][ T6997] loop2: detected capacity change from 0 to 32768
[  110.116939][ T6997] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  110.116952][ T6997]   allowing incompatible features above 0.0: (unknown version)
[  110.116957][ T6997]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  110.128468][ T6997] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  110.130932][ T6997] bcachefs (loop2): initializing new filesystem
[  110.138686][ T6997] bcachefs (loop2): going read-write
[  110.158832][ T6997] bcachefs (loop2): marking superblocks
[  110.163948][ T6997] bcachefs (loop2): initializing freespace
[  110.167847][ T6997] bcachefs (loop2): done initializing freespace
[  110.171039][ T6997] bcachefs (loop2): reading snapshots table
[  110.173059][ T6997] bcachefs (loop2): reading snapshots done
[  110.192849][ T6997] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[  110.199113][ T6997] bcachefs (loop2): done starting filesystem
[  110.273645][ T5832] bcachefs (loop2): shutting down
[  110.280158][ T5832] bcachefs (loop2): going read-only
[  110.282454][ T5832] bcachefs (loop2): finished waiting for writes to stop
[  110.291705][ T5832] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  110.319407][ T5832] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  110.325568][ T5832] bcachefs (loop2): clean shutdown complete, journal seq 5
[  110.329406][ T5832] bcachefs (loop2): marking filesystem clean
[  110.353739][ T5832] bcachefs (loop2): shutdown complete
[  110.863109][ T7038] loop1: detected capacity change from 0 to 512
[  110.867742][ T7038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  110.890834][ T7038] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.398: invalid indirect mapped block 4294967295 (level 1)
[  110.903877][ T7038] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.398: invalid indirect mapped block 4294967295 (level 1)
[  110.910439][ T7038] EXT4-fs (loop1): 2 truncates cleaned up
[  110.913123][ T7038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.925682][ T7038] EXT4-fs (loop1): shut down requested (2)
[  110.946539][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.180444][ T7047] loop0: detected capacity change from 0 to 1024
[  111.724248][ T7069] loop2: detected capacity change from 0 to 2048
[  111.754182][ T7072] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.779718][ T7071] loop0: detected capacity change from 0 to 4096
[  111.789839][ T7071] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  112.095326][ T7076] loop0: detected capacity change from 0 to 40427
[  112.100618][ T7076] F2FS-fs (loop0): invalid crc value
[  112.142367][ T7076] F2FS-fs (loop0): Start checkpoint disabled!
[  112.154204][ T7076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  112.248931][ T7087] loop1: detected capacity change from 0 to 2048
[  112.264495][ T5901] udevd[5901]: incorrect nilfs2 checksum on /dev/loop1
[  112.269160][ T7087] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  112.281649][ T7088] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.290512][ T7074] loop2: detected capacity change from 0 to 32768
[  112.877273][ T7106] loop2: detected capacity change from 0 to 40427
[  112.889690][ T7106] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  112.891982][ T7106] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  112.900745][ T7106] F2FS-fs (loop2): invalid crc value
[  112.945259][ T7106] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  112.947589][ T7106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  113.256996][ T5281] udevd[5281]: worker [5901] terminated by signal 33 (Unknown signal 33)
[  113.260333][ T5281] udevd[5281]: worker [5901] failed while handling '/devices/virtual/block/loop1'
[  113.386738][ T5832] syz-executor: attempt to access beyond end of device
[  113.386738][ T5832] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  113.394062][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  113.394083][ T5832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.394092][ T5832] Call Trace:
[  113.394099][ T5832]  <TASK>
[  113.394105][ T5832]  dump_stack_lvl+0x189/0x250
[  113.394138][ T5832]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.394150][ T5832]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  113.394163][ T5832]  ? __pfx_queue_work_on+0x10/0x10
[  113.394179][ T5832]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  113.394189][ T5832]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  113.394200][ T5832]  ? f2fs_hw_is_readonly+0x39b/0x470
[  113.394217][ T5832]  f2fs_handle_critical_error+0x37c/0x540
[  113.394234][ T5832]  f2fs_write_end_io+0x495/0x810
[  113.394248][ T5832]  ? blkg_put+0x22/0x240
[  113.394308][ T5832]  __submit_merged_bio+0x27a/0x6a0
[  113.394326][ T5832]  __submit_merged_write_cond+0x255/0x530
[  113.394348][ T5832]  f2fs_write_data_pages+0x261d/0x3000
[  113.394387][ T5832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  113.394433][ T5832]  ? __mod_zone_page_state+0xd7/0x140
[  113.394459][ T5832]  ? folios_put_refs+0x560/0x640
[  113.394478][ T5832]  ? __pfx_folios_put_refs+0x10/0x10
[  113.394487][ T5832]  ? rcu_is_watching+0x15/0xb0
[  113.394508][ T5832]  ? __lock_acquire+0xab9/0xd20
[  113.394532][ T5832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  113.394544][ T5832]  do_writepages+0x32e/0x550
[  113.394569][ T5832]  ? do_raw_spin_unlock+0x4d/0x240
[  113.394589][ T5832]  filemap_fdatawrite+0x191/0x230
[  113.394604][ T5832]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  113.394647][ T5832]  ? do_raw_spin_unlock+0x4d/0x240
[  113.394664][ T5832]  f2fs_sync_dirty_inodes+0x31f/0x830
[  113.394690][ T5832]  f2fs_write_checkpoint+0x94a/0x1de0
[  113.394721][ T5832]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  113.394788][ T5832]  ? kill_f2fs_super+0x298/0x6c0
[  113.394806][ T5832]  kill_f2fs_super+0x2c3/0x6c0
[  113.394823][ T5832]  ? __pfx_kill_f2fs_super+0x10/0x10
[  113.394833][ T5832]  ? radix_tree_delete_item+0x2b6/0x400
[  113.394850][ T5832]  ? shrinker_free+0x2ce/0x3e0
[  113.394864][ T5832]  deactivate_locked_super+0xbc/0x130
[  113.394878][ T5832]  cleanup_mnt+0x425/0x4c0
[  113.394890][ T5832]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.394905][ T5832]  task_work_run+0x1d4/0x260
[  113.394923][ T5832]  ? __pfx_task_work_run+0x10/0x10
[  113.394936][ T5832]  ? __x64_sys_umount+0x122/0x160
[  113.394952][ T5832]  ? exit_to_user_mode_loop+0x40/0x110
[  113.394966][ T5832]  exit_to_user_mode_loop+0xec/0x110
[  113.394976][ T5832]  do_syscall_64+0x2bd/0x3b0
[  113.394988][ T5832]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.394998][ T5832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.395008][ T5832]  ? exc_page_fault+0x9f/0xf0
[  113.395020][ T5832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.395030][ T5832] RIP: 0033:0x7f6d43b8fcd7
[  113.395043][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  113.395052][ T5832] RSP: 002b:00007ffe67015608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  113.395065][ T5832] RAX: 0000000000000000 RBX: 00007f6d43c10b55 RCX: 00007f6d43b8fcd7
[  113.395072][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe670156c0
[  113.395079][ T5832] RBP: 00007ffe670156c0 R08: 0000000000000000 R09: 0000000000000000
[  113.395086][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe67016750
[  113.395093][ T5832] R13: 00007f6d43c10b55 R14: 000000000001ba23 R15: 00007ffe67016790
[  113.395121][ T5832]  </TASK>
[  113.400227][ T7117] loop0: detected capacity change from 0 to 256
[  113.424685][ T5832] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  113.446312][ T7117] FAT-fs (loop0): Directory bread(block 64) failed
[  113.565526][ T7117] FAT-fs (loop0): Directory bread(block 65) failed
[  113.570210][ T7117] FAT-fs (loop0): Directory bread(block 66) failed
[  113.578087][ T7117] FAT-fs (loop0): Directory bread(block 67) failed
[  113.582913][ T7117] FAT-fs (loop0): Directory bread(block 68) failed
[  113.585521][ T7117] FAT-fs (loop0): Directory bread(block 69) failed
[  113.587987][ T7117] FAT-fs (loop0): Directory bread(block 70) failed
[  113.590161][ T7117] FAT-fs (loop0): Directory bread(block 71) failed
[  113.592377][ T7117] FAT-fs (loop0): Directory bread(block 72) failed
[  113.594636][ T7117] FAT-fs (loop0): Directory bread(block 73) failed
[  113.895433][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  114.054920][   T10] usb 1-1: Using ep0 maxpacket: 8
[  114.058836][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3
[  114.063411][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  114.077749][   T10] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  114.081763][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.088910][   T10] usb 1-1: Product: syz
[  114.090708][   T10] usb 1-1: Manufacturer: syz
[  114.092643][   T10] usb 1-1: SerialNumber: syz
[  114.110329][   T10] usb 1-1: config 0 descriptor??
[  114.120529][   T10] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[  114.137482][ T7133] netlink: 'syz.2.436': attribute type 29 has an invalid length.
[  114.141301][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'.
[  114.319584][   T10] usb 1-1: USB disconnect, device number 9
[  114.477865][ T7137] loop2: detected capacity change from 0 to 40427
[  114.501017][ T7137] F2FS-fs (loop2): invalid crc value
[  114.549097][ T7137] F2FS-fs (loop2): Start checkpoint disabled!
[  114.555670][ T7137] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  114.875317][ T7154] capability: warning: `syz.2.445' uses 32-bit capabilities (legacy support in use)
[  115.150240][ T7159] loop2: detected capacity change from 0 to 32768
[  115.214702][ T7159] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  115.214717][ T7159]   allowing incompatible features above 0.0: (unknown version)
[  115.214722][ T7159]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  115.230263][ T7159] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  115.233010][ T7159] bcachefs (loop2): initializing new filesystem
[  115.240516][ T7159] bcachefs (loop2): going read-write
[  115.247254][ T7159] bcachefs (loop2): marking superblocks
[  115.252756][ T7159] bcachefs (loop2): initializing freespace
[  115.257425][ T7159] bcachefs (loop2): done initializing freespace
[  115.260788][ T7159] bcachefs (loop2): reading snapshots table
[  115.262774][ T7159] bcachefs (loop2): reading snapshots done
[  115.283357][ T7159] bcachefs (loop2): done starting filesystem
[  115.839509][ T7159] syz.2.447 (7159) used greatest stack depth: 16584 bytes left
[  115.941550][ T5832] bcachefs (loop2): shutting down
[  115.951201][ T5832] bcachefs (loop2): going read-only
[  115.954106][ T5832] bcachefs (loop2): finished waiting for writes to stop
[  115.962166][ T5832] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  115.966851][ T7179] loop0: detected capacity change from 0 to 32768
[  115.976508][ T7179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.452 (7179)
[  115.989947][ T7179] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  116.128640][ T7179] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm
[  116.171435][ T5832] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  116.187697][ T7179] BTRFS info (device loop0): using free-space-tree
[  116.210226][ T5832] bcachefs (loop2): clean shutdown complete, journal seq 5
[  116.258111][ T5832] bcachefs (loop2): marking filesystem clean
[  116.321767][ T5832] bcachefs (loop2): shutdown complete
[  116.358803][ T7179] BTRFS info (device loop0): rebuilding free space tree
[  116.504168][ T5841] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  118.006102][   T33] audit: type=1326 audit(1753382923.978:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.1.459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  118.026769][   T33] audit: type=1326 audit(1753382923.978:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.1.459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  118.052095][   T33] audit: type=1326 audit(1753382923.988:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.1.459" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  118.070946][   T33] audit: type=1326 audit(1753382923.988:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.1.459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  118.081691][   T33] audit: type=1326 audit(1753382923.988:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.1.459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  118.093796][   T33] audit: type=1326 audit(1753382923.988:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.1.459" exe="/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  118.105334][   T33] audit: type=1326 audit(1753382923.988:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.1.459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  118.115553][   T33] audit: type=1326 audit(1753382923.988:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.1.459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  118.251023][ T7217] loop0: detected capacity change from 0 to 32768
[  118.253944][ T7217] XFS (loop0): stripe width (9) must be a multiple of the stripe unit (38034)
[  118.490627][ T7239] loop2: detected capacity change from 0 to 128
[  118.538850][ T7239] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  118.553555][ T7239] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  118.590787][ T5832] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  118.658891][ T7249] loop2: detected capacity change from 0 to 64
[  118.684641][ T7249] syz.2.471: attempt to access beyond end of device
[  118.684641][ T7249] loop2: rw=0, sector=3072, nr_sectors = 2 limit=64
[  118.793249][ T7244] loop0: detected capacity change from 0 to 32768
[  119.322367][ T7277] loop0: detected capacity change from 0 to 4096
[  119.326508][ T7277] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  120.264963][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  120.455058][   T10] usb 3-1: Using ep0 maxpacket: 8
[  120.468072][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17
[  120.489840][   T10] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  120.493177][   T10] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  120.504938][   T10] usb 3-1: Product: syz
[  120.506355][   T10] usb 3-1: Manufacturer: syz
[  120.508285][   T10] usb 3-1: SerialNumber: syz
[  120.517012][   T10] usb 3-1: config 0 descriptor??
[  120.759844][   T10] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  121.684531][   T10] gspca_sunplus: reg_w_riv err -71
[  121.686880][   T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  121.691071][   T10] usb 3-1: USB disconnect, device number 10
[  121.702760][ T7305] loop1: detected capacity change from 0 to 32768
[  121.858992][ T7311] @: renamed from bond_slave_0 (while UP)
[  122.358803][ T7316] loop0: detected capacity change from 0 to 32768
[  123.352157][ T7331] loop1: detected capacity change from 0 to 32768
[  123.366620][ T7331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.497 (7331)
[  123.385387][ T7331] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.389605][ T7331] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  123.393255][ T7331] BTRFS info (device loop1): disk space caching is enabled
[  123.405463][ T7331] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  123.439568][ T7331] BTRFS info (device loop1): rebuilding free space tree
[  123.456709][ T7331] BTRFS info (device loop1): disabling free space tree
[  123.459633][ T7331] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  123.463455][ T7331] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  123.559041][   T33] audit: type=1800 audit(1753382929.498:22): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.497" name="file1" dev="loop1" ino=260 res=0 errno=0
[  124.282285][ T5836] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.321799][ T7361] loop0: detected capacity change from 0 to 764
[  124.612816][ T7366] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  124.633716][ T7366] batman_adv: batadv0: Adding interface: gretap1
[  124.644827][ T7366] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.664953][ T7366] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  124.930291][ T7384] Malformed UNC in devname
[  124.930291][ T7384] 
[  124.933190][ T7384] CIFS: VFS: Malformed UNC in devname
[  124.978653][ T7387] program syz.0.505 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.021278][ T7389] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  125.024553][ T7389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  125.036416][ T7389] vhci_hcd vhci_hcd.0: Device attached
[  125.053791][ T7389] loop1: detected capacity change from 0 to 1024
[  125.069637][ T7389] EXT4-fs: Ignoring removed nobh option
[  125.071944][ T7389] EXT4-fs: Ignoring removed bh option
[  125.106169][ T7389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.123776][ T7390] vhci_hcd: cannot find a urb of seqnum 7510 max seqnum 0
[  125.136840][   T13] vhci_hcd: stop threads
[  125.142700][   T13] vhci_hcd: release socket
[  125.144733][   T13] vhci_hcd: disconnect device
[  125.708677][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.721972][ T7413] loop0: detected capacity change from 0 to 1024
[  125.745171][   T33] audit: type=1800 audit(1753382931.708:23): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.522" name="file1" dev="loop0" ino=20 res=0 errno=0
[  126.871331][ T7430] loop2: detected capacity change from 0 to 4096
[  126.885202][ T7430] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  126.978046][ T7430] ntfs3(loop2): $Secure::$SDH is corrupted.
[  126.981170][ T7430] ntfs3(loop2): Failed to initialize $Secure (-22).
[  127.294519][ T7434] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  127.388294][ T7432] loop1: detected capacity change from 0 to 32768
[  127.388961][ T7436] loop0: detected capacity change from 0 to 4096
[  127.396914][ T7432] XFS: noikeep mount option is deprecated.
[  127.417474][ T7436] ntfs3(loop0): ino=3, Correct links count -> 2.
[  127.425476][ T7432] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.466219][ T7445] loop2: detected capacity change from 0 to 1024
[  127.477069][ T7436] ntfs3(loop0): ino=1a, mi_enum_attr
[  127.479520][ T7445] hfsplus: bad catalog entry type
[  127.491343][   T26] hfsplus: b-tree write err: -5, ino 4
[  127.494278][ T7436] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  127.512072][ T7432] XFS (loop1): Ending clean mount
[  127.545148][ T7432] XFS (loop1): Quotacheck needed: Please wait.
[  127.605766][ T7432] XFS (loop1): Quotacheck: Done.
[  127.682352][ T5836] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.708081][   T33] audit: type=1326 audit(1753382933.678:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.2.539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d43b8e9a9 code=0x7ffc0000
[  127.739626][   T33] audit: type=1326 audit(1753382933.688:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.2.539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d43b8e9a9 code=0x7ffc0000
[  127.757376][   T33] audit: type=1326 audit(1753382933.698:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.2.539" exe="/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6d43b8e9a9 code=0x7ffc0000
[  127.781756][   T33] audit: type=1326 audit(1753382933.698:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.2.539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d43b8e9a9 code=0x7ffc0000
[  127.803439][   T33] audit: type=1326 audit(1753382933.698:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7455 comm="syz.2.539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d43b8e9a9 code=0x7ffc0000
[  127.935039][ T7466] process 'syz.1.540' launched './file1' with NULL argv: empty string added
[  127.987363][ T7470] loop1: detected capacity change from 0 to 2048
[  127.991000][ T7470] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  127.995025][   T47] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  127.999489][ T7470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.160067][   T47] usb 1-1: Using ep0 maxpacket: 8
[  128.172306][   T47] usb 1-1: unable to get BOS descriptor or descriptor too short
[  128.178311][   T47] usb 1-1: config 3 has an invalid interface number: 182 but max is 0
[  128.185162][   T47] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  128.195002][   T47] usb 1-1: config 3 has no interface number 0
[  128.197017][   T47] usb 1-1: config 3 interface 182 altsetting 8 has an endpoint descriptor with address 0xC1, changing to 0x81
[  128.201027][   T47] usb 1-1: config 3 interface 182 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.204726][   T47] usb 1-1: config 3 interface 182 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.212557][   T47] usb 1-1: config 3 interface 182 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.218008][   T47] usb 1-1: config 3 interface 182 has no altsetting 0
[  128.224065][   T47] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57
[  128.228380][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.232086][   T47] usb 1-1: Product: syz
[  128.234274][   T47] usb 1-1: Manufacturer: syz
[  128.236559][   T47] usb 1-1: SerialNumber: syz
[  128.277857][ T7486] loop1: detected capacity change from 0 to 8192
[  128.329035][ T6456]  loop1: p1 < > p2 < p5 > p4
[  128.339818][ T6456] loop1: p4 size 16776960 extends beyond EOD, truncated
[  128.347596][ T6456] loop1: p5 size 16776960 extends beyond EOD, truncated
[  128.367912][ T7486]  loop1: p1 < > p2 < p5 > p4
[  128.373526][ T7486] loop1: p4 size 16776960 extends beyond EOD, truncated
[  128.382517][ T7486] loop1: p5 size 16776960 extends beyond EOD, truncated
[  128.479877][   T47] usbtest 1-1:3.182: couldn't get endpoints, -71
[  128.482536][   T47] usbtest 1-1:3.182: probe with driver usbtest failed with error -71
[  128.497795][   T47] usb 1-1: USB disconnect, device number 10
[  128.524595][ T6456] udevd[6456]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  128.533131][ T6458] udevd[6458]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  128.542560][ T6455] udevd[6455]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  128.553676][ T6114] udevd[6114]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  128.581845][ T6456] udevd[6456]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  128.588302][ T6458] udevd[6458]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  128.593296][ T6455] udevd[6455]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  128.593897][ T6460] udevd[6460]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  128.665191][ T7488] loop2: detected capacity change from 0 to 32768
[  128.679292][ T7488] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.555 (7488)
[  128.702442][ T7488] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  128.709430][ T7488] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  128.712360][ T7488] BTRFS info (device loop2): using free-space-tree
[  128.919789][ T5832] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  129.314991][   T47] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  129.369883][ T7516] loop1: detected capacity change from 0 to 131072
[  129.373184][ T7516] F2FS-fs (loop1): Test dummy encryption mode enabled
[  129.389455][ T7516] F2FS-fs (loop1): invalid crc value
[  129.431375][ T7516] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  129.491576][   T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.495688][   T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.502078][   T47] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  129.507087][ T7528] loop2: detected capacity change from 0 to 512
[  129.509518][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  129.513162][ T7528] EXT4-fs: Ignoring removed i_version option
[  129.514466][   T47] usb 1-1: SerialNumber: syz
[  129.519975][ T7528] EXT4-fs: inline encryption not supported
[  129.531810][ T7528] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.562: bg 0: block 131: padding at end of block bitmap is not set
[  129.537459][ T7528] EXT4-fs (loop2): Remounting filesystem read-only
[  129.540036][ T7528] EXT4-fs (loop2): 1 truncate cleaned up
[  129.544226][ T7528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.552065][ T7516] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  129.584079][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.739205][   T47] usb 1-1: 0:2 : does not exist
[  129.786305][   T47] usb 1-1: USB disconnect, device number 11
[  129.819083][ T6460] udevd[6460]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.902185][ T7535] loop2: detected capacity change from 0 to 32768
[  129.937474][   T33] audit: type=1800 audit(1753382935.908:29): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.565" name="file1" dev="loop2" ino=4 res=0 errno=0
[  130.149418][ T7535] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[  130.149418][ T7535] 
[  130.160677][ T7544] loop1: detected capacity change from 0 to 128
[  130.162705][ T7535] ERROR: (device loop2): remounting filesystem as read-only
[  130.165678][ T7544] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  130.178364][ T7544] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.990754][ T7560] loop0: detected capacity change from 0 to 16
[  131.017033][ T7560] erofs (device loop0): mounted with root inode @ nid 36.
[  131.232801][ T7560] erofs (device loop0): readahead error at folio 2 @ nid 89
[  131.243568][ T7560] erofs (device loop0): readahead error at folio 0 @ nid 89
[  131.255649][ T7560] erofs (device loop0): read error -117 @ 0 of nid 89
[  131.427299][ T7568] loop0: detected capacity change from 0 to 512
[  131.433794][ T7568] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  131.451990][ T7568] EXT4-fs (loop0): 1 truncate cleaned up
[  131.461716][ T7568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.463143][ T7571] loop1: detected capacity change from 0 to 1024
[  131.503512][ T7571] syz.1.579: attempt to access beyond end of device
[  131.503512][ T7571] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  131.513719][ T7571] Buffer I/O error on dev loop1, logical block 100663296, async page read
[  131.521049][ T7571] hfsplus: unable to mark blocks free: error -5
[  131.525457][ T7571] hfsplus: can't free extent
[  131.548272][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.504980][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  132.577526][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.579662][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.656581][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.660027][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.663076][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  132.672850][   T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  132.677335][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.681458][   T10] usb 2-1: config 0 descriptor??
[  133.060385][ T7624] loop0: detected capacity change from 0 to 256
[  133.136352][   T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  133.276435][ T7632] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  133.439420][ T7628] loop2: detected capacity change from 0 to 40427
[  133.445901][ T7628] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  133.448815][ T7628] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  133.452500][ T7628] F2FS-fs (loop2): build fault injection rate: 17008
[  133.458944][ T7628] F2FS-fs (loop2): build fault injection type: 0x1f8
[  133.463813][ T7628] F2FS-fs (loop2): invalid crc value
[  133.580029][ T7628] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  133.583089][ T7628] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  133.583519][ T7644] loop0: detected capacity change from 0 to 4096
[  133.611787][ T7646] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.652638][ T7628] F2FS-fs (loop2): Stopped filesystem due to reason: 0
[  133.722271][ T7648] loop0: detected capacity change from 0 to 47
[  134.054893][   T47] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  134.128106][ T7656] loop2: detected capacity change from 0 to 2048
[  134.144382][ T7656] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.205831][   T47] usb 1-1: Using ep0 maxpacket: 8
[  134.212980][   T47] usb 1-1: config 5 has an invalid interface number: 72 but max is 0
[  134.225887][   T47] usb 1-1: config 5 has no interface number 0
[  134.229669][   T47] usb 1-1: config 5 interface 72 has no altsetting 0
[  134.245863][   T47] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00
[  134.249578][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.255091][   T47] usb 1-1: Product: syz
[  134.256857][   T47] usb 1-1: Manufacturer: syz
[  134.259029][   T47] usb 1-1: SerialNumber: syz
[  134.477284][   T47] ftdi_sio 1-1:5.72: FTDI USB Serial Device converter detected
[  134.483768][   T47] usb 1-1: Detected FT4232H
[  134.487463][   T47] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  134.493477][   T47] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  134.499182][ T7664] loop2: detected capacity change from 0 to 128
[  134.504654][ T7664] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  134.513542][   T47] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  134.520070][   T47] usb 1-1: USB disconnect, device number 12
[  134.526299][ T7664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.532895][   T47] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  134.539216][   T47] ftdi_sio 1-1:5.72: device disconnected
[  134.965090][ T5299] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  135.116479][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.119691][ T5299] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  135.122528][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.136327][ T5299] usb 3-1: config 0 descriptor??
[  135.580341][ T5299] dragonrise 0003:0079:0006.0005: hidraw1: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0
[  135.604264][ T5299] dragonrise 0003:0079:0006.0005: no inputs found
[  135.623156][ T5299] dragonrise 0003:0079:0006.0005: force feedback init failed
[  135.768448][ T5299] usb 3-1: USB disconnect, device number 11
[  136.061511][ T5896] usb 2-1: USB disconnect, device number 8
[  136.341317][ T7711] loop1: detected capacity change from 0 to 512
[  136.346294][ T7711] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  136.379314][ T7711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  136.390828][ T7711] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.423865][   T33] audit: type=1804 audit(1753382942.388:30): pid=7711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.642" name="/newroot/239/file1/file1" dev="loop1" ino=18 res=1 errno=0
[  136.451350][   T33] audit: type=1804 audit(1753382942.398:31): pid=7711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.642" name="/newroot/239/file1/file1" dev="loop1" ino=18 res=1 errno=0
[  136.453490][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  136.609960][   T33] audit: type=1326 audit(1753382942.578:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.1.647" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  136.622880][   T33] audit: type=1326 audit(1753382942.578:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.1.647" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  136.630174][   T33] audit: type=1326 audit(1753382942.588:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.1.647" exe="/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  136.638487][   T33] audit: type=1326 audit(1753382942.588:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.1.647" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  136.645694][   T33] audit: type=1326 audit(1753382942.588:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.1.647" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb5d8e9a9 code=0x7ffc0000
[  136.747273][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  136.894963][   T10] usb 3-1: Using ep0 maxpacket: 8
[  136.901801][   T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  136.905882][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.909224][   T10] usb 3-1: Product: syz
[  136.910636][   T10] usb 3-1: Manufacturer: syz
[  136.912164][   T10] usb 3-1: SerialNumber: syz
[  136.915720][   T10] usb 3-1: config 0 descriptor??
[  136.923927][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  137.014977][   T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  137.175736][   T47] usb 2-1: Using ep0 maxpacket: 16
[  137.179990][   T47] usb 2-1: config index 0 descriptor too short (expected 1828, got 36)
[  137.183200][   T47] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  137.188335][   T47] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  137.191976][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  137.196133][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  137.200722][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  137.209356][   T47] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  137.213050][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.217832][   T47] usb 2-1: Product: syz
[  137.219532][   T47] usb 2-1: Manufacturer: syz
[  137.221336][   T47] usb 2-1: SerialNumber: syz
[  137.225540][   T47] usb 2-1: config 0 descriptor??
[  137.235497][   T47] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected
[  137.238563][   T47] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87
[  137.241636][   T47] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  137.246487][   T47] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  137.249571][   T47] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  137.252795][   T47] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  137.257514][   T47] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[  137.260576][   T47] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[  137.265135][   T47] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  137.270125][   T47] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83
[  137.273252][   T47] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[  137.278059][   T47] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86
[  137.281271][   T47] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[  137.285942][   T47] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  137.404958][ T5299] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  137.443178][ T5941] usb 2-1: USB disconnect, device number 9
[  137.449052][ T5941] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  137.456976][ T5941] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  137.464495][ T5941] keyspan 2-1:0.0: device disconnected
[  137.554910][ T5299] usb 1-1: Using ep0 maxpacket: 8
[  137.558234][ T5299] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  137.561698][ T5299] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  137.566661][ T5299] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  137.570116][ T5299] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  137.575185][ T5299] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  137.578475][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.789900][ T5299] usb 1-1: usb_control_msg returned -32
[  137.792401][ T5299] usbtmc 1-1:16.0: can't read capabilities
[  137.929281][   T10] gspca_sonixj: reg_w1 err -71
[  137.965148][   T10] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  137.973771][   T10] usb 3-1: USB disconnect, device number 12
[  138.037731][ T7748] loop1: detected capacity change from 0 to 64
[  138.043037][ T7748] BFS-fs: bfs_fill_super(): Impossible last inode number 1183 > 513 on loop1
[  138.149909][ T7752] usbtmc 1-1:16.0: INDICATOR_PULSE returned 0
[  138.231243][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'.
[  138.351761][ T5941] usb 1-1: USB disconnect, device number 13
[  138.515242][ T7766] loop2: detected capacity change from 0 to 128
[  138.537709][ T7766] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  138.544722][ T7766] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  138.657819][ T5832] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  138.673561][ T7762] loop1: detected capacity change from 0 to 40427
[  138.686986][ T7762] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  138.689591][ T7762] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  138.700071][ T7762] F2FS-fs (loop1): invalid crc value
[  138.791318][ T7762] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  138.794380][ T7762] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  138.827461][ T7762] fscrypt (loop1, inode 3): Error -61 getting encryption context
[  138.859096][ T7778] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.862288][ T7778] batadv_slave_0: entered promiscuous mode
[  138.864331][ T7778] batadv_slave_0: entered allmulticast mode
[  139.561086][ T7789] loop2: detected capacity change from 0 to 32768
[  139.700450][ T7789] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  139.700464][ T7789]   allowing incompatible features above 0.0: (unknown version)
[  139.700469][ T7789]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  139.715061][ T7789] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  139.718083][ T7789] bcachefs (loop2): initializing new filesystem
[  139.730521][ T7789] bcachefs (loop2): going read-write
[  139.744180][ T7789] bcachefs (loop2): marking superblocks
[  139.755215][ T7789] bcachefs (loop2): initializing freespace
[  139.762304][ T7789] bcachefs (loop2): done initializing freespace
[  139.768718][ T7789] bcachefs (loop2): reading snapshots table
[  139.771173][ T7789] bcachefs (loop2): reading snapshots done
[  139.807894][ T7789] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[  139.814027][ T7789] bcachefs (loop2): done starting filesystem
[  140.492773][ T7806] syz.2.674 (7806) used greatest stack depth: 15720 bytes left
[  140.499972][ T5832] bcachefs (loop2): shutting down
[  140.501839][ T5832] bcachefs (loop2): going read-only
[  140.507419][ T7812] loop1: detected capacity change from 0 to 8
[  140.510272][ T7812] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  140.515733][ T5832] bcachefs (loop2): finished waiting for writes to stop
[  140.533854][ T5832] bcachefs (loop2): flushing journal and stopping allocators, journal seq 5
[  140.600569][ T5832] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5
[  140.613370][ T5832] bcachefs (loop2): clean shutdown complete, journal seq 6
[  140.616822][ T5832] bcachefs (loop2): marking filesystem clean
[  140.647542][ T5832] bcachefs (loop2): shutdown complete
[  141.052605][ T7838] loop1: detected capacity change from 0 to 4096
[  141.077711][ T7838] ntfs3(loop1): ino=1a, mi_enum_attr
[  141.080003][ T7838] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  141.167364][ T7840] loop1: detected capacity change from 0 to 4096
[  141.195222][ T7840] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  141.198276][ T7840] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  141.217488][   T26] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  141.222000][ T5836] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  141.224731][ T5836] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  141.228878][ T5836] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  141.231718][   T26] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  141.774521][ T7866] loop0: detected capacity change from 0 to 256
[  141.788919][ T7866] exfat: Deprecated parameter 'utf8'
[  141.791220][ T7866] exfat: Deprecated parameter 'utf8'
[  141.801804][ T7866] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[  142.403252][ T7876] loop2: detected capacity change from 0 to 32768
[  142.409312][ T7876] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.711 (7876)
[  142.424137][ T7876] BTRFS info (device loop2 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.433793][ T7876] BTRFS info (device loop2 state S): using crc32c (crc32c-generic) checksum algorithm
[  142.439391][ T7876] BTRFS info (device loop2 state S): using free-space-tree
[  142.481714][   T26] BTRFS warning (device loop2 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x5afefc99 level 0, ignored
[  142.496793][  T303] BTRFS warning (device loop2 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x23b2bbff level 0, ignored
[  142.505463][   T26] BTRFS warning (device loop2 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  142.519195][ T7876] BTRFS error (device loop2 state CS): block group 5242880 len 1638400 mismatch with chunk 5242880 len 3298536521728
[  142.533077][   T53] BTRFS warning (device loop2 state CS): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0xa0eee3fd level 0, ignored
[  142.555888][ T5832] BTRFS info (device loop2 state CS): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.986003][ T7920] loop2: detected capacity change from 0 to 2048
[  142.994198][ T7920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.966183][ T7941] ALSA: mixer_oss: invalid OSS volume ':'
[  143.968678][ T7941] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  143.971166][ T7941] ALSA: mixer_oss: invalid OSS volume '3'
[  143.973415][ T7941] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  143.977729][ T7941] ALSA: mixer_oss: invalid OSS volume '4'
[  143.979809][ T7941] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  143.982739][ T7941] ALSA: mixer_oss: invalid OSS volume '5'
[  144.049178][ T7944] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  144.053825][ T7944] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  144.058011][ T7944] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  144.062142][ T7944] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  144.066013][ T7944] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  144.069825][ T7944] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  144.073686][ T7944] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  144.077513][ T7944] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  144.081335][ T7944] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  144.085190][ T7944] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  144.176963][ T7947] loop2: detected capacity change from 0 to 64
[  144.355899][ T7952] loop1: detected capacity change from 0 to 512
[  144.376102][ T7952] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  144.456906][ T7952] block device autoloading is deprecated and will be removed.
[  144.475453][ T7952] syz.1.733: attempt to access beyond end of device
[  144.475453][ T7952] md0: rw=0, sector=2, nr_sectors = 2 limit=0
[  144.484601][ T7955] loop0: detected capacity change from 0 to 2048
[  144.489509][ T7955] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576
[  144.493937][ T7952] EXT4-fs (loop1): couldn't read superblock of external journal
[  144.504683][ T7955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  144.671392][ T7965] usb usb8: usbfs: process 7965 (syz.1.740) did not claim interface 0 before use
[  144.693753][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'.
[  144.853538][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'.
[  144.904285][ T7981] loop1: detected capacity change from 0 to 2048
[  144.909604][ T7981] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051
[  144.922387][ T7981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.095173][   T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  145.108176][ T7975] loop0: detected capacity change from 0 to 32768
[  145.111894][ T7975] XFS: attr2 mount option is deprecated.
[  145.158540][ T7975] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  145.168278][ T7975] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.205902][ T7975] XFS (loop0): Ending clean mount
[  145.211740][ T7975] XFS (loop0): Quotacheck needed: Please wait.
[  145.246479][ T7975] XFS (loop0): Quotacheck: Done.
[  145.259355][   T47] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.264243][   T47] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.271525][   T47] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  145.279039][   T47] usb 3-1: config 0 interface 0 has no altsetting 0
[  145.281810][   T47] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  145.285930][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.292343][   T47] usb 3-1: config 0 descriptor??
[  145.322239][ T5841] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.628510][ T8004] netlink: 128 bytes leftover after parsing attributes in process `syz.1.754'.
[  145.633814][ T8004] netlink: 56 bytes leftover after parsing attributes in process `syz.1.754'.
[  145.716551][   T47] hid (null): usage index exceeded
[  145.726095][   T47] uclogic 0003:28BD:0042.0006: interface is invalid, ignoring
[  145.958002][   T47] usb 3-1: USB disconnect, device number 13
[  146.223981][ T8010] loop1: detected capacity change from 0 to 32768
[  146.243200][ T8010] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 9 smaller than btree node size 256
[  146.243200][ T8010] members_v2 (size 152):
[  146.243200][ T8010] Device:                        0
[  146.243200][ T8010]   Label:                       (none)
[  146.243200][ T8010]   UUID:                        7af6772b-00de-4159-84cd-1faead05e13e
[  146.243200][ T8010]   Size:                        589824
[  146.243200][ T8010]   read errors:                 0
[  146.243200][ T8010]   write errors:                0
[  146.243200][ T8010]   checksum errors:             0
[  146.243200][ T8010]   seqread iops:                0
[  146.243200][ T8010]   seqwrite iops:               0
[  146.243200][ T8010]   randread iops:               0
[  146.243200][ T8010]   randwrite iops:              0
[  146.243200][ T8010]   Bucket size:                 4608
[  146.243200][ T8010]   First bucket:                0
[  146.243200][ T8010]   Buckets:                     128
[  146.243200][ T8010]   Last mount:                  1714618368
[  146.243200][ T8010]   Last superblock write:       42
[  146.243200][ T8010]   State:                       rw
[  146.243200][ T8010]   Data allowed:                journal,btree,user
[  146.243200][ T8010]   Has data:                    (none)
[  146.243200][ T8010]   Btree allocated bitmap blocksize:1
[  146.243200][ T8010]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  146.243200][ T8010]   Durab
[  146.243508][ T8010] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  147.518827][ T8022] loop2: detected capacity change from 0 to 40427
[  147.539267][ T8022] F2FS-fs (loop2): build fault injection rate: 14
[  147.542106][ T8022] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  147.558742][ T8022] F2FS-fs (loop2): invalid crc value
[  147.589329][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x5eb/0xe70
[  147.603793][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x5eb/0xe70
[  147.608928][ T8032] loop1: detected capacity change from 0 to 32768
[  147.699554][ T8022] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  147.707812][ T8032] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  147.707835][ T8032]   allowing incompatible features above 0.0: (unknown version)
[  147.707843][ T8032]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  147.712422][ T8022] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  147.717933][ T8032] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  147.731619][ T8032] bcachefs (loop1): initializing new filesystem
[  147.739465][ T8032] bcachefs (loop1): going read-write
[  147.745787][ T8022] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  147.746062][ T8032] bcachefs (loop1): marking superblocks
[  147.754485][ T8022] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xa20/0x1b50
[  147.756908][ T8032] bcachefs (loop1): initializing freespace
[  147.763206][ T8032] bcachefs (loop1): done initializing freespace
[  147.763267][ T8022] F2FS-fs (loop2): inconsistent node block, node_type:0, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  147.767308][ T8032] bcachefs (loop1): reading snapshots table
[  147.772790][ T8032] bcachefs (loop1): reading snapshots done
[  147.795057][ T8032] bcachefs (loop1): done starting filesystem
[  147.825279][    C0] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of blk_update_request+0x5eb/0xe70
[  147.828968][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  147.828979][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.828986][    C0] Call Trace:
[  147.828991][    C0]  <TASK>
[  147.828997][    C0]  dump_stack_lvl+0x189/0x250
[  147.829015][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.829028][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  147.829038][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  147.829047][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.829059][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  147.829076][    C0]  f2fs_write_end_io+0x495/0x810
[  147.829088][    C0]  ? blkg_put+0x22/0x240
[  147.829106][    C0]  blk_update_request+0x5eb/0xe70
[  147.829126][    C0]  blk_mq_end_request+0x3e/0x70
[  147.829143][    C0]  blk_done_softirq+0x10a/0x160
[  147.829159][    C0]  handle_softirqs+0x286/0x870
[  147.829170][    C0]  ? schedule+0x165/0x360
[  147.829182][    C0]  ? run_ksoftirqd+0x9b/0x100
[  147.829199][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  147.829212][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  147.829227][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  147.829237][    C0]  run_ksoftirqd+0x9b/0x100
[  147.829250][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  147.829266][    C0]  smpboot_thread_fn+0x542/0xa60
[  147.829278][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  147.829295][    C0]  kthread+0x711/0x8a0
[  147.829313][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  147.829323][    C0]  ? __pfx_kthread+0x10/0x10
[  147.829332][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.829338][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.829345][    C0]  ? __pfx_kthread+0x10/0x10
[  147.829354][    C0]  ret_from_fork+0x3fc/0x770
[  147.829362][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  147.829370][    C0]  ? __switch_to_asm+0x39/0x70
[  147.829378][    C0]  ? __switch_to_asm+0x33/0x70
[  147.829385][    C0]  ? __pfx_kthread+0x10/0x10
[  147.829393][    C0]  ret_from_fork_asm+0x1a/0x30
[  147.829406][    C0]  </TASK>
[  147.829409][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  147.905987][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  147.906006][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.906020][    C0] Call Trace:
[  147.906026][    C0]  <TASK>
[  147.906033][    C0]  dump_stack_lvl+0x189/0x250
[  147.906055][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.906068][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  147.906082][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  147.906097][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.906116][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  147.906140][    C0]  f2fs_write_end_io+0x495/0x810
[  147.906166][    C0]  blk_update_request+0x5eb/0xe70
[  147.906186][    C0]  blk_mq_end_request+0x3e/0x70
[  147.906197][    C0]  blk_done_softirq+0x10a/0x160
[  147.906216][    C0]  handle_softirqs+0x286/0x870
[  147.906230][    C0]  ? schedule+0x165/0x360
[  147.906244][    C0]  ? run_ksoftirqd+0x9b/0x100
[  147.906260][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  147.906275][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  147.906289][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  147.906298][    C0]  run_ksoftirqd+0x9b/0x100
[  147.906310][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  147.906327][    C0]  smpboot_thread_fn+0x542/0xa60
[  147.906341][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  147.906358][    C0]  kthread+0x711/0x8a0
[  147.906378][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  147.906390][    C0]  ? __pfx_kthread+0x10/0x10
[  147.906407][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.906418][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.906430][    C0]  ? __pfx_kthread+0x10/0x10
[  147.906444][    C0]  ret_from_fork+0x3fc/0x770
[  147.906458][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  147.906472][    C0]  ? __switch_to_asm+0x39/0x70
[  147.906483][    C0]  ? __switch_to_asm+0x33/0x70
[  147.906493][    C0]  ? __pfx_kthread+0x10/0x10
[  147.906506][    C0]  ret_from_fork_asm+0x1a/0x30
[  147.906527][    C0]  </TASK>
[  147.906531][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  147.989043][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  147.989062][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.989071][    C0] Call Trace:
[  147.989078][    C0]  <TASK>
[  147.989086][    C0]  dump_stack_lvl+0x189/0x250
[  147.989110][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.989131][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  147.989144][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  147.989157][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  147.989176][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  147.989195][    C0]  f2fs_write_end_io+0x495/0x810
[  147.989221][    C0]  blk_update_request+0x5eb/0xe70
[  147.989243][    C0]  blk_mq_end_request+0x3e/0x70
[  147.989256][    C0]  blk_done_softirq+0x10a/0x160
[  147.989274][    C0]  handle_softirqs+0x286/0x870
[  147.989286][    C0]  ? schedule+0x165/0x360
[  147.989301][    C0]  ? run_ksoftirqd+0x9b/0x100
[  147.989319][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  147.989334][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  147.989349][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  147.989360][    C0]  run_ksoftirqd+0x9b/0x100
[  147.989373][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  147.989391][    C0]  smpboot_thread_fn+0x542/0xa60
[  147.989405][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  147.989423][    C0]  kthread+0x711/0x8a0
[  147.989443][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  147.989455][    C0]  ? __pfx_kthread+0x10/0x10
[  147.989471][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  147.989482][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.989495][    C0]  ? __pfx_kthread+0x10/0x10
[  147.989511][    C0]  ret_from_fork+0x3fc/0x770
[  147.989526][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  147.989571][    C0]  ? __switch_to_asm+0x39/0x70
[  147.989584][    C0]  ? __switch_to_asm+0x33/0x70
[  147.989597][    C0]  ? __pfx_kthread+0x10/0x10
[  147.989612][    C0]  ret_from_fork_asm+0x1a/0x30
[  147.989637][    C0]  </TASK>
[  147.989644][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  148.071309][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  148.071331][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.071339][    C0] Call Trace:
[  148.071348][    C0]  <TASK>
[  148.071356][    C0]  dump_stack_lvl+0x189/0x250
[  148.071378][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.071393][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  148.071406][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.071421][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  148.071439][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  148.071457][    C0]  f2fs_write_end_io+0x495/0x810
[  148.071482][    C0]  blk_update_request+0x5eb/0xe70
[  148.071505][    C0]  blk_mq_end_request+0x3e/0x70
[  148.071516][    C0]  blk_done_softirq+0x10a/0x160
[  148.071559][    C0]  handle_softirqs+0x286/0x870
[  148.071575][    C0]  ? schedule+0x165/0x360
[  148.071588][    C0]  ? run_ksoftirqd+0x9b/0x100
[  148.071606][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  148.071621][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  148.071637][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  148.071649][    C0]  run_ksoftirqd+0x9b/0x100
[  148.071662][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  148.071681][    C0]  smpboot_thread_fn+0x542/0xa60
[  148.071694][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  148.071713][    C0]  kthread+0x711/0x8a0
[  148.071732][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  148.071745][    C0]  ? __pfx_kthread+0x10/0x10
[  148.071762][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.071774][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.071785][    C0]  ? __pfx_kthread+0x10/0x10
[  148.071802][    C0]  ret_from_fork+0x3fc/0x770
[  148.071818][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  148.071834][    C0]  ? __switch_to_asm+0x39/0x70
[  148.071849][    C0]  ? __switch_to_asm+0x33/0x70
[  148.071861][    C0]  ? __pfx_kthread+0x10/0x10
[  148.071877][    C0]  ret_from_fork_asm+0x1a/0x30
[  148.071899][    C0]  </TASK>
[  148.071904][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  148.153612][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  148.153632][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.153642][    C0] Call Trace:
[  148.153652][    C0]  <TASK>
[  148.153660][    C0]  dump_stack_lvl+0x189/0x250
[  148.153686][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.153700][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  148.153714][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.153730][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  148.153749][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  148.153768][    C0]  f2fs_write_end_io+0x495/0x810
[  148.153793][    C0]  blk_update_request+0x5eb/0xe70
[  148.153818][    C0]  blk_mq_end_request+0x3e/0x70
[  148.153832][    C0]  blk_done_softirq+0x10a/0x160
[  148.153850][    C0]  handle_softirqs+0x286/0x870
[  148.153866][    C0]  ? schedule+0x165/0x360
[  148.153881][    C0]  ? run_ksoftirqd+0x9b/0x100
[  148.153899][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  148.153914][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  148.153930][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  148.153943][    C0]  run_ksoftirqd+0x9b/0x100
[  148.153957][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  148.153976][    C0]  smpboot_thread_fn+0x542/0xa60
[  148.153991][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  148.154010][    C0]  kthread+0x711/0x8a0
[  148.154028][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  148.154042][    C0]  ? __pfx_kthread+0x10/0x10
[  148.154066][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.154078][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.154092][    C0]  ? __pfx_kthread+0x10/0x10
[  148.154106][    C0]  ret_from_fork+0x3fc/0x770
[  148.154122][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  148.154139][    C0]  ? __switch_to_asm+0x39/0x70
[  148.154153][    C0]  ? __switch_to_asm+0x33/0x70
[  148.154166][    C0]  ? __pfx_kthread+0x10/0x10
[  148.154182][    C0]  ret_from_fork_asm+0x1a/0x30
[  148.154205][    C0]  </TASK>
[  148.154211][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  148.237417][  T974] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  148.238760][ T5836] bcachefs (loop1): shutting down
[  148.243703][ T5836] bcachefs (loop1): going read-only
[  148.246400][ T5836] bcachefs (loop1): finished waiting for writes to stop
[  148.257232][ T5836] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  148.284238][ T5836] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  148.291733][ T5836] bcachefs (loop1): clean shutdown complete, journal seq 4
[  148.296988][ T5836] bcachefs (loop1): marking filesystem clean
[  148.323001][ T5836] bcachefs (loop1): shutdown complete
[  148.405644][  T974] usb 1-1: too many configurations: 65, using maximum allowed: 8
[  148.430371][  T974] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  148.434066][  T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.438578][  T974] usb 1-1: Product: syz
[  148.440290][  T974] usb 1-1: Manufacturer: syz
[  148.442113][  T974] usb 1-1: SerialNumber: syz
[  148.447458][  T974] usb 1-1: config 0 descriptor??
[  148.549787][ T8055] loop2: detected capacity change from 0 to 47
[  148.661581][   T10] usb 1-1: USB disconnect, device number 14
[  149.247529][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.775'.
[  149.536079][ T8065] netlink: 'syz.0.778': attribute type 1 has an invalid length.
[  150.134838][ T5299] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  150.146714][ T8077] loop1: detected capacity change from 0 to 40427
[  150.153391][ T8077] F2FS-fs (loop1): Invalid log blocks per segment (14)
[  150.165464][ T8077] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  150.173111][ T8077] F2FS-fs (loop1): build fault injection rate: 14
[  150.182657][ T8077] F2FS-fs (loop1): build fault injection type: 0x2
[  150.190419][ T8077] F2FS-fs (loop1): invalid crc value
[  150.205513][ T8077] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x3227/0x49f0
[  150.209626][ T8077] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  150.300451][ T5299] usb 1-1: config 54 has an invalid interface number: 154 but max is 0
[  150.307522][ T5299] usb 1-1: config 54 has no interface number 0
[  150.317302][ T5299] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[  150.328333][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.333109][ T5299] usb 1-1: Product: syz
[  150.335787][ T5299] usb 1-1: Manufacturer: syz
[  150.337752][ T5299] usb 1-1: SerialNumber: syz
[  150.578707][   T13] usb 1-1: Failed to submit usb control message: -71
[  150.583471][ T5299] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  150.596066][   T13] usb 1-1: unable to send the bmi data to the device: -71
[  150.599150][   T13] usb 1-1: unable to get target info from device
[  150.604362][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'.
[  150.606378][ T5299] usb 1-1: USB disconnect, device number 15
[  150.613275][   T13] usb 1-1: could not get target info (-71)
[  150.622609][   T13] usb 1-1: could not probe fw (-71)
[  150.630531][ T8099] netlink: 'syz.1.790': attribute type 21 has an invalid length.
[  151.084966][  T974] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  151.259410][  T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  151.264239][  T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  151.270843][  T974] usb 2-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb
[  151.274084][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.278435][  T974] usb 2-1: Product: syz
[  151.281491][  T974] usb 2-1: Manufacturer: syz
[  151.283568][  T974] usb 2-1: SerialNumber: syz
[  151.576590][  T974] usb 2-1: config 0 descriptor??
[  151.593437][  T974] keyspan 2-1:0.0: Keyspan - (without firmware) converter detected
[  151.801340][  T974] usb 2-1: USB disconnect, device number 10
[  151.804662][  T974] keyspan 2-1:0.0: device disconnected
[  151.884935][ T5941] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  152.055962][ T5941] usb 3-1: Using ep0 maxpacket: 8
[  152.062329][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  152.073374][ T5941] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[  152.084835][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.091736][ T5941] usb 3-1: config 0 descriptor??
[  152.340014][ T8122] loop1: detected capacity change from 0 to 16
[  152.352328][ T8122] erofs (device loop1): mounted with root inode @ nid 36.
[  152.545244][ T5941] corsair 0003:1B1C:1B09.0007: unbalanced delimiter at end of report description
[  152.553317][ T5941] corsair 0003:1B1C:1B09.0007: parse failed
[  152.556254][ T5941] corsair 0003:1B1C:1B09.0007: probe with driver corsair failed with error -22
[  152.733736][   T10] usb 3-1: USB disconnect, device number 14
[  153.751981][ T5836] erofs (device loop1): bogus dirent @ nid 46
[  153.767807][ T5836] erofs (device loop1): invalid de[0].nameoff 0 @ nid 89
[  153.784412][ T5836] erofs (device loop1): invalid de[0].nameoff 0 @ nid 89
[  153.858182][ T8140] loop2: detected capacity change from 0 to 1024
[  153.956798][   T65] hfsplus: b-tree write err: -5, ino 4
[  153.975234][ T8144] dlm: non-version read from control device 36
[  154.748083][ T8173] syz_tun: entered allmulticast mode
[  154.783182][ T8173] syz_tun: left allmulticast mode
[  154.838576][ T8179] vlan0: entered promiscuous mode
[  154.888174][ T8181] loop1: detected capacity change from 0 to 2048
[  154.898496][ T8181] EXT4-fs: Ignoring removed nobh option
[  154.938696][ T8181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.011684][ T8184] loop0: detected capacity change from 0 to 32768
[  155.061180][ T8184] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  155.093068][ T8184] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  155.105488][ T8184] __find_get_block_slow() failed. block=504403158265495552, b_blocknr=0, b_state=0x00000019, b_size=512, device loop0 blocksize: 512
[  155.110644][ T8184] grow_buffers: requested out-of-range block 504403158265495552 for device loop0
[  155.113643][ T8184] (syz.0.825,8184,1):ocfs2_read_blocks:239 ERROR: status = -12
[  155.116470][ T8184] (syz.0.825,8184,1):ocfs2_search_chain:1852 ERROR: status = -12
[  155.119201][ T8184] (syz.0.825,8184,1):ocfs2_search_chain:1940 ERROR: status = -12
[  155.121771][ T8184] (syz.0.825,8184,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12
[  155.124509][ T8184] (syz.0.825,8184,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12
[  155.127848][ T8184] (syz.0.825,8184,1):__ocfs2_claim_clusters:2438 ERROR: status = -12
[  155.129733][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.130503][ T8184] (syz.0.825,8184,1):__ocfs2_claim_clusters:2446 ERROR: status = -12
[  155.136805][ T8184] (syz.0.825,8184,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -12
[  155.139632][ T8184] (syz.0.825,8184,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -12
[  155.142640][ T8184] (syz.0.825,8184,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12
[  155.146212][ T8184] (syz.0.825,8184,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12
[  155.149397][ T8184] (syz.0.825,8184,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12
[  155.152071][ T8184] (syz.0.825,8184,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12
[  155.155108][ T8184] (syz.0.825,8184,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12
[  155.158160][ T8184] (syz.0.825,8184,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12
[  155.161166][ T8184] (syz.0.825,8184,1):ocfs2_mknod:357 ERROR: status = -12
[  155.163896][ T8184] (syz.0.825,8184,1):ocfs2_mknod:502 ERROR: status = -12
[  155.166680][ T8184] (syz.0.825,8184,1):ocfs2_mkdir:658 ERROR: status = -12
[  155.201667][ T5841] ocfs2: Unmounting device (7,0) on (node local)
[  155.280747][ T8192] loop1: detected capacity change from 0 to 256
[  155.299873][ T8192] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  155.360895][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'.
[  155.778342][ T8210] loop1: detected capacity change from 0 to 40427
[  155.791282][ T8210] F2FS-fs (loop1): invalid crc value
[  155.834108][ T8210] F2FS-fs (loop1): Start checkpoint disabled!
[  155.839354][ T8210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  156.032111][ T8221] netlink: 'syz.1.840': attribute type 13 has an invalid length.
[  156.036610][   T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  156.149665][ T8227] loop1: detected capacity change from 0 to 8
[  156.182005][ T8227] SQUASHFS error: lzo decompression failed, data probably corrupt
[  156.194984][ T8227] SQUASHFS error: Failed to read block 0x4ef: -5
[  156.205309][   T10] usb 3-1: Using ep0 maxpacket: 16
[  156.207682][ T8227] SQUASHFS error: Unable to read metadata cache entry [4ed]
[  156.212060][ T8227] SQUASHFS error: Unable to read inode 0x50087
[  156.223145][ T8227] SQUASHFS error: Unable to read metadata cache entry [4ed]
[  156.234410][ T8227] SQUASHFS error: Unable to read inode 0x500a7
[  156.238280][   T10] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  156.242107][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.244653][ T8229] loop0: detected capacity change from 0 to 764
[  156.254911][   T10] usb 3-1: Product: syz
[  156.257159][   T10] usb 3-1: Manufacturer: syz
[  156.259108][   T10] usb 3-1: SerialNumber: syz
[  156.268744][   T10] usb 3-1: config 0 descriptor??
[  156.272829][   T10] hub 3-1:0.0: bad descriptor, ignoring hub
[  156.278255][   T10] hub 3-1:0.0: probe with driver hub failed with error -5
[  156.401633][ T8234] @: renamed from vlan0 (while UP)
[  156.566155][ T5941] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  156.607511][   T10] usb 3-1: USB disconnect, device number 15
[  156.717478][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  156.722096][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.734980][ T5941] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  156.738780][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.752667][ T5941] usb 2-1: config 0 descriptor??
[  157.182024][ T5941] isku 0003:1E7D:319C.0008: unknown main item tag 0x0
[  157.206174][ T5941] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[  157.384975][ T5941] isku 0003:1E7D:319C.0008: couldn't init struct isku_device
[  157.388113][ T5941] isku 0003:1E7D:319C.0008: couldn't install keyboard
[  157.427589][ T5941] isku 0003:1E7D:319C.0008: probe with driver isku failed with error -71
[  157.443732][ T5941] usb 2-1: USB disconnect, device number 11
[  157.599694][ T8248] loop2: detected capacity change from 0 to 32768
[  157.603901][ T8248] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.853 (8248)
[  157.620405][ T8248] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.624225][ T8248] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  157.632200][ T8248] BTRFS info (device loop2): using free-space-tree
[  157.730250][ T8248] BTRFS info (device loop2): rebuilding free space tree
[  157.834560][ T5680] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  157.892126][ T5832] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.043381][ T8284] netlink: 550 bytes leftover after parsing attributes in process `syz.2.860'.
[  158.271688][ T8292] loop0: detected capacity change from 0 to 512
[  158.310218][ T8292] EXT4-fs: Ignoring removed i_version option
[  158.312904][ T8292] ext4: Unknown parameter 'obj_user'
[  158.519048][ T8288] loop2: detected capacity change from 0 to 32768
[  158.560951][ T8288] read_mapping_page failed!
[  158.571911][ T8288] ERROR: (device loop2): txCommit: 
[  158.571911][ T8288] 
[  158.610732][  T116] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  158.614529][  T116] ------------[ cut here ]------------
[  158.616452][  T116] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  158.619486][  T116] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  158.622086][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  158.626070][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.629369][  T116] RIP: 0010:txUnlock+0xdaf/0xdf0
[  158.631073][  T116] Code: e7 fd 90 0f 0b e8 01 0c 80 fe 48 c7 c7 e0 ff c3 8b 48 c7 c6 d9 fb c3 8b ba a3 03 00 00 48 c7 c1 e0 0c c4 8b e8 c2 81 e7 fd 90 <0f> 0b e8 da 0b 80 fe 48 c7 c7 e0 ff c3 8b 48 c7 c6 d9 fb c3 8b ba
[  158.637863][  T116] RSP: 0018:ffffc9000243fbc8 EFLAGS: 00010246
[  158.639908][  T116] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 00ae22a2b075d700
[  158.642604][  T116] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  158.645404][  T116] RBP: ffffc90001fa3c20 R08: ffffc9000243f8e7 R09: 1ffff92000487f1c
[  158.648184][  T116] R10: dffffc0000000000 R11: fffff52000487f1d R12: dffffc0000000000
[  158.650954][  T116] R13: 1ffff11006494f0d R14: ffff8880324a7868 R15: 0000000000000000
[  158.653590][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  158.656580][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  158.658834][  T116] CR2: 00007f583bfeeb24 CR3: 00000001124d4000 CR4: 00000000000006f0
[  158.661496][  T116] Call Trace:
[  158.662880][  T116]  <TASK>
[  158.663957][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.665841][  T116]  jfs_lazycommit+0x584/0xa90
[  158.667477][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  158.669352][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  158.671482][  T116]  ? __kthread_parkme+0x7b/0x200
[  158.673329][  T116]  ? __kthread_parkme+0x1a1/0x200
[  158.675159][  T116]  kthread+0x711/0x8a0
[  158.676614][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  158.678474][  T116]  ? __pfx_kthread+0x10/0x10
[  158.680109][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  158.681982][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.683829][  T116]  ? __pfx_kthread+0x10/0x10
[  158.685485][  T116]  ret_from_fork+0x3fc/0x770
[  158.687172][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  158.688982][  T116]  ? __switch_to_asm+0x39/0x70
[  158.690709][  T116]  ? __switch_to_asm+0x33/0x70
[  158.692539][  T116]  ? __pfx_kthread+0x10/0x10
[  158.694317][  T116]  ret_from_fork_asm+0x1a/0x30
[  158.696050][  T116]  </TASK>
[  158.697146][  T116] Modules linked in:
[  158.699303][  T116] ---[ end trace 0000000000000000 ]---
[  158.703122][  T116] RIP: 0010:txUnlock+0xdaf/0xdf0
[  158.705063][  T116] Code: e7 fd 90 0f 0b e8 01 0c 80 fe 48 c7 c7 e0 ff c3 8b 48 c7 c6 d9 fb c3 8b ba a3 03 00 00 48 c7 c1 e0 0c c4 8b e8 c2 81 e7 fd 90 <0f> 0b e8 da 0b 80 fe 48 c7 c7 e0 ff c3 8b 48 c7 c6 d9 fb c3 8b ba
[  158.711645][  T116] RSP: 0018:ffffc9000243fbc8 EFLAGS: 00010246
[  158.714532][  T116] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 00ae22a2b075d700
[  158.717753][  T116] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  158.722849][  T116] RBP: ffffc90001fa3c20 R08: ffffc9000243f8e7 R09: 1ffff92000487f1c
[  158.725732][  T116] R10: dffffc0000000000 R11: fffff52000487f1d R12: dffffc0000000000
[  158.728504][  T116] R13: 1ffff11006494f0d R14: ffff8880324a7868 R15: 0000000000000000
[  158.731246][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  158.734299][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  158.737289][  T116] CR2: 00007faeb5f802d8 CR3: 0000000111d2c000 CR4: 00000000000006f0
[  158.740283][  T116] Kernel panic - not syncing: Fatal exception
[  158.743352][  T116] Kernel Offset: disabled
[  158.744918][  T116] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:49:24  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff82176b20 RBX=ffffc90002dff4c0 RCX=fdfabd73946c1000 RDX=ffffc90002dff401
RSI=ffffffff82176b20 RDI=ffffc90002dff4c0 RBP=ffffc90002dff490 RSP=ffffc90002dff400
R8 =ffffc90002dff790 R9 =0000000000000000 R10=ffffc90002dff458 R11=ffffffff81acfe40
R12=ffff888023ee3980 R13=ffff88802ff99c00 R14=ffffffff81acfe40 R15=ffffc90002dff408
RIP=ffffffff81acfe40 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f51f7c96c80 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007faeb6ae56c0 CR3=0000000023fc8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000211 000000000000302e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=0000000000000211 000000000000302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000243f2d0
R8 =ffff8880207b0237 R9 =1ffff110040f6046 R10=dffffc0000000000 R11=ffffffff85462e60
R12=dffffc0000000000 R13=ffffffff99af188a R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85462edc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f583bfeeb24 CR3=00000001124d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=b3465490a60affe1 42b2cdb7f74fc21c
XMM02=00007f80d9586478 00007f80d9586450 XMM03=00007f80d9586488 00007f80d9586480
XMM04=00007f80da0ed100 00007f80d9586440 XMM05=00007f80d9586458 00007f80d95864a0
XMM06=00007f80d9586498 00007f80d9586490 XMM07=00007f80d9586488 00007f80d9586480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f80d9411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
