last executing test programs:

3.91963368s ago: executing program 1 (id=559):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000000)=""/48, 0x30}], 0x2}, 0x0)

3.919385968s ago: executing program 1 (id=560):
syz_usb_connect(0x2, 0x26, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xba, 0x3e, 0x5e, 0x10, 0x1410, 0x9010, 0x23c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14, 0x1, 0x6, 0x75, 0x80, 0x0, [{{0x9, 0x4, 0xd0, 0xfd, 0x0, 0x2, 0x6, 0x0, 0x21, [@generic={0x2, 0x9}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x96, 0x0})

2.609712616s ago: executing program 1 (id=562):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
close_range(r1, r0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
socket$xdp(0x2c, 0x3, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000780)=""/182, &(0x7f0000000040)=0xb6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x3, 0x2b0, &(0x7f0000000440)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000009000000040000000000000401000000060000000200000604000000010000400001000006000000000000"], 0x0, 0x49}, 0x28)
listen(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

1.42479535s ago: executing program 2 (id=567):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffc41, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @local}, {0x12, 0xfc, 0x0, @remote}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

1.221015586s ago: executing program 2 (id=568):
futex(&(0x7f0000000080)=0x2, 0x7, 0x1, 0x0, 0x0, 0x1)

1.216183615s ago: executing program 1 (id=569):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}]}}]}, 0x3c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080007"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.147157938s ago: executing program 2 (id=570):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10007, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x3, @sliced={0x5, [0x2, 0x6, 0x7, 0x2, 0x1ff, 0x7fff, 0x7f, 0x1ff, 0x2e60, 0x6, 0x7d3c, 0x0, 0x2, 0xfff8, 0x5, 0x9, 0x6, 0x7, 0x5, 0xe9d, 0x2, 0x1ff, 0x8001, 0x9, 0x4, 0x3, 0x925, 0x2b3, 0x8, 0x2, 0xb, 0xbd8, 0x2, 0x4, 0x200, 0xff01, 0x2, 0x401, 0x0, 0x1, 0x1, 0x7, 0x1, 0x0, 0x5, 0x2, 0x0, 0x9], 0x3}})

1.146921292s ago: executing program 1 (id=571):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ppoll(&(0x7f0000000440)=[{r0, 0x8004}], 0x1, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

1.141981755s ago: executing program 2 (id=572):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000085100000020000008500000094000000950000000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)

1.079891532s ago: executing program 1 (id=573):
syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e03"], 0x0)

1.079499476s ago: executing program 2 (id=574):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}})
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}})
poll(&(0x7f0000000080)=[{r0, 0x1100}], 0x1, 0x1)

211.001909ms ago: executing program 0 (id=586):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x86, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000002fd010000000008000100ac14140008000500ac1e0101100016800c0001000000000000000005060015"], 0x44}}, 0x0)

210.528358ms ago: executing program 2 (id=587):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

140.121524ms ago: executing program 0 (id=588):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

139.721211ms ago: executing program 0 (id=589):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
write$sndseq(r0, 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

58.796294ms ago: executing program 0 (id=590):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
unshare(0x22020600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0]}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1, 0x0, 0x8000000}, 0x27)

58.474053ms ago: executing program 0 (id=591):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65)
write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0x4)

0s ago: executing program 0 (id=592):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53430' (ED25519) to the list of known hosts.
syzkaller login: [   50.133284][ T5782] cgroup: Unknown subsys name 'net'
[   50.286803][ T5782] cgroup: Unknown subsys name 'cpuset'
[   50.293263][ T5782] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.532373][ T5782] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.155545][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.158865][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.161820][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.166326][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.172521][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.210562][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.213861][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.216512][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.223414][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.228412][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.241748][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.244554][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.247159][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.261753][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.264445][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.513488][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   58.703472][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   58.749613][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.754877][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.757898][ T5851] bridge_slave_0: entered allmulticast mode
[   58.763641][ T5851] bridge_slave_0: entered promiscuous mode
[   58.769383][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.772553][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.775690][ T5851] bridge_slave_1: entered allmulticast mode
[   58.779559][ T5851] bridge_slave_1: entered promiscuous mode
[   58.823075][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   58.847713][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.866187][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.970971][ T5851] team0: Port device team_slave_0 added
[   58.976295][ T5851] team0: Port device team_slave_1 added
[   59.009497][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.014498][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.017420][ T5856] bridge_slave_0: entered allmulticast mode
[   59.021337][ T5856] bridge_slave_0: entered promiscuous mode
[   59.039705][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.042657][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.052769][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.073398][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.076356][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.079171][ T5856] bridge_slave_1: entered allmulticast mode
[   59.085190][ T5856] bridge_slave_1: entered promiscuous mode
[   59.112504][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.115284][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.126460][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.185053][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.190692][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.193917][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.196759][ T5858] bridge_slave_0: entered allmulticast mode
[   59.200446][ T5858] bridge_slave_0: entered promiscuous mode
[   59.205030][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.207924][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.210735][ T5858] bridge_slave_1: entered allmulticast mode
[   59.214724][ T5858] bridge_slave_1: entered promiscuous mode
[   59.220523][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.300414][ T5856] team0: Port device team_slave_0 added
[   59.305448][ T5856] team0: Port device team_slave_1 added
[   59.327893][ T5851] hsr_slave_0: entered promiscuous mode
[   59.331130][ T5851] hsr_slave_1: entered promiscuous mode
[   59.337329][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.375781][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.384979][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.387809][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.398332][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.405186][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.407881][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.418400][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.456627][ T5858] team0: Port device team_slave_0 added
[   59.489330][ T5858] team0: Port device team_slave_1 added
[   59.523146][ T5856] hsr_slave_0: entered promiscuous mode
[   59.526227][ T5856] hsr_slave_1: entered promiscuous mode
[   59.528928][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   59.531252][ T5856] Cannot create hsr debugfs directory
[   59.548563][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.551346][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.562526][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.574190][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.576834][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.586524][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.719786][ T5858] hsr_slave_0: entered promiscuous mode
[   59.722867][ T5858] hsr_slave_1: entered promiscuous mode
[   59.725499][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   59.727748][ T5858] Cannot create hsr debugfs directory
[   59.888309][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.914605][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.937777][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.955024][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.008286][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.022301][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.039013][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.050713][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.092615][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.099911][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.107176][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.123816][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.233751][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.261976][ T5854] Bluetooth: hci0: command tx timeout
[   60.265245][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.272017][ T5854] Bluetooth: hci1: command tx timeout
[   60.285449][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.290287][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   60.305680][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.308800][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.328608][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.331448][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.342781][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   60.351220][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   60.351902][ T5854] Bluetooth: hci2: command tx timeout
[   60.372145][   T89] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.374966][   T89] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.380851][   T89] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.383962][   T89] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.403746][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.406629][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.411168][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.414121][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.708045][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.729812][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.787591][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.818249][ T5851] veth0_vlan: entered promiscuous mode
[   60.837353][ T5856] veth0_vlan: entered promiscuous mode
[   60.847897][ T5856] veth1_vlan: entered promiscuous mode
[   60.854310][ T5851] veth1_vlan: entered promiscuous mode
[   60.917559][ T5858] veth0_vlan: entered promiscuous mode
[   60.928176][ T5856] veth0_macvtap: entered promiscuous mode
[   60.936446][ T5851] veth0_macvtap: entered promiscuous mode
[   60.941361][ T5856] veth1_macvtap: entered promiscuous mode
[   60.948829][ T5851] veth1_macvtap: entered promiscuous mode
[   60.956210][ T5858] veth1_vlan: entered promiscuous mode
[   60.983806][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.006413][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.015793][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.036796][ T5885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.041921][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.050035][ T5885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.054179][ T5885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.057197][ T5885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.070127][ T5885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.075184][ T5885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.084950][ T5858] veth0_macvtap: entered promiscuous mode
[   61.090810][ T5858] veth1_macvtap: entered promiscuous mode
[   61.095272][ T5885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.098776][ T5885] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.205731][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.245376][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.250969][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.260935][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.282795][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.287092][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.299581][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.308645][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.325331][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.346224][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.357635][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.359732][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.361794][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.369343][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.430446][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.439740][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.461255][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.469981][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.473039][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.605025][ T5927] Zero length message leads to an empty skb
[   62.353032][ T5854] Bluetooth: hci1: command tx timeout
[   62.355885][ T5854] Bluetooth: hci0: command tx timeout
[   62.383612][ T5929] loop0: detected capacity change from 0 to 32768
[   62.422498][ T5234] Bluetooth: hci2: command tx timeout
[   62.492862][ T5929] ERROR: (device loop0): duplicateIXtree: 
[   62.492862][ T5929] 
[   62.530655][ T5929] ERROR: (device loop0): remounting filesystem as read-only
[   62.561240][ T5939] netlink: 'syz.2.5': attribute type 2 has an invalid length.
[   62.691340][ T5944] loop2: detected capacity change from 0 to 64
[   63.439582][ T5234] Bluetooth: hci0: Unable to find connection with handle 0x0000
[   63.736570][ T5941] loop1: detected capacity change from 0 to 65536
[   63.798844][ T5941] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   63.857612][ T5941] XFS (loop1): Ending clean mount
[   63.882192][ T5941] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   64.269682][ T5965] loop0: detected capacity change from 0 to 4096
[   64.276822][ T5965] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.306898][ T5965] EXT4-fs (loop0): Test dummy encryption mode enabled
[   64.331204][ T5965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.418128][ T5969] futex_wake_op: syz.0.12 tries to shift op by -1; fix this program
[   64.424395][ T5234] Bluetooth: hci0: command tx timeout
[   64.425646][ T5854] Bluetooth: hci1: command tx timeout
[   64.463442][ T5965] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   64.501795][ T5854] Bluetooth: hci2: command tx timeout
[   64.835484][ T5981] loop1: detected capacity change from 0 to 2048
[   64.845057][ T5981] EXT4-fs (loop1): bad block size 8192
[   64.948016][ T5983] loop1: detected capacity change from 0 to 256
[   64.956051][ T5983] =======================================================
[   64.956051][ T5983] WARNING: The mand mount option has been deprecated and
[   64.956051][ T5983]          and is ignored by this kernel. Remove the mand
[   64.956051][ T5983]          option from the mount to silence this warning.
[   64.956051][ T5983] =======================================================
[   64.988550][ T5983] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   64.997163][ T5983] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   65.008435][ T5983] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   65.042707][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.160683][ T5987] input: syz0 as /devices/virtual/input/input4
[   65.311255][ T5991] loop0: detected capacity change from 0 to 2048
[   65.361936][ T5994] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   65.708054][ T5859] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   65.737189][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.28'.
[   65.765118][ T6004] netlink: 'syz.2.28': attribute type 8 has an invalid length.
[   65.767628][ T6004] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   65.790432][ T6006] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET)
[   65.901648][ T5859] usb 2-1: Using ep0 maxpacket: 8
[   66.368083][ T5859] usb 2-1: unable to get BOS descriptor or descriptor too short
[   66.432605][ T5919] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[   66.501968][ T5854] Bluetooth: hci1: command tx timeout
[   66.503769][ T5854] Bluetooth: hci0: command tx timeout
[   66.582901][ T5854] Bluetooth: hci2: command tx timeout
[   66.586078][ T5919] usb 3-1: No LPM exit latency info found, disabling LPM.
[   66.592655][ T5919] usb 3-1: config 1 interface 0 altsetting 253 endpoint 0x1 is Bulk; changing to Interrupt
[   66.596909][ T5919] usb 3-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   66.606294][ T5919] usb 3-1: config 1 interface 0 has no altsetting 0
[   66.612667][ T5919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   66.616333][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.619575][ T5919] usb 3-1: Product: ࠒ
[   66.621329][ T5919] usb 3-1: Manufacturer: ꚻቮ܌⠧셺
[   66.626181][ T5919] usb 3-1: SerialNumber: ఉ
[   66.640004][ T6017] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   66.650160][ T6017] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   67.130061][ T5859] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.152044][ T5859] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   67.155781][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.158804][ T5859] usb 2-1: Product: syz
[   67.160654][ T5859] usb 2-1: Manufacturer: syz
[   67.162758][ T5859] usb 2-1: SerialNumber: syz
[   67.386185][ T5859] cdc_mbim 2-1:1.0: MBIM functional descriptor missing
[   67.388763][ T5859] cdc_mbim 2-1:1.0: bind() failure
[   67.415721][ T5859] usb 2-1: USB disconnect, device number 2
[   67.509201][ T6039] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[   67.514871][ T6039] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[   67.538538][ T6039] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.547040][ T6048] loop1: detected capacity change from 0 to 512
[   68.573845][ T6048] EXT4-fs (loop1): orphan cleanup on readonly fs
[   68.594648][ T6048] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.47: bad orphan inode 13
[   68.611353][ T6048] ext4_test_bit(bit=12, block=18) = 1
[   68.616877][ T6048] is_bad_inode(inode)=0
[   68.618609][ T6048] NEXT_ORPHAN(inode)=2130706432
[   68.621188][ T6048] max_ino=32
[   68.624293][ T6048] i_nlink=1
[   68.631371][ T6048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   68.648070][ T6048] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   68.675439][ T6048] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   68.692488][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.828358][ T6053] loop0: detected capacity change from 0 to 32768
[   68.844321][ T6053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.49 (6053)
[   68.869424][ T6063] loop1: detected capacity change from 0 to 1024
[   68.877922][ T6063] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   68.911849][ T6063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.922752][ T6063] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.927494][ T6053] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   68.940745][ T6053] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   68.954913][ T6053] BTRFS info (device loop0): using free-space-tree
[   68.966759][ T5919] usb 3-1: USB disconnect, device number 2
[   69.039514][ T6063] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[   69.103093][ T6053] BTRFS error (device loop0): balance: invalid convert data profile single
[   69.156673][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.195973][ T5851] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   69.286567][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.55'.
[   69.671635][ T6072] loop2: detected capacity change from 0 to 40427
[   69.686444][ T6072] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   69.689735][ T6072] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   69.714100][ T6094] loop1: detected capacity change from 0 to 256
[   69.715291][ T6072] F2FS-fs (loop2): invalid crc value
[   69.717740][ T6094] exfat: Deprecated parameter 'namecase'
[   69.734620][ T6094] exfat: Deprecated parameter 'namecase'
[   69.789677][ T6094] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbc51571d, utbl_chksum : 0xe619d30d)
[   69.901133][ T6072] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   69.919562][ T6072] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   69.927498][ T6072] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   70.043601][ T5858] syz-executor: attempt to access beyond end of device
[   70.043601][ T5858] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   70.066691][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   70.066707][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.066713][ T5858] Call Trace:
[   70.066726][ T5858]  <TASK>
[   70.066738][ T5858]  dump_stack_lvl+0x189/0x250
[   70.066755][ T5858]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.066764][ T5858]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   70.066776][ T5858]  ? __pfx_queue_work_on+0x10/0x10
[   70.066785][ T5858]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   70.066794][ T5858]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   70.066808][ T5858]  f2fs_handle_critical_error+0x37c/0x540
[   70.066824][ T5858]  f2fs_write_end_io+0x886/0xb60
[   70.066839][ T5858]  __submit_merged_bio+0x27a/0x6a0
[   70.066859][ T5858]  __submit_merged_write_cond+0x255/0x530
[   70.066872][ T5858]  f2fs_write_data_pages+0x261d/0x3000
[   70.066898][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   70.066943][ T5858]  ? irqentry_exit+0x74/0x90
[   70.066955][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.066968][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   70.066981][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   70.066992][ T5858]  do_writepages+0x32e/0x550
[   70.067009][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[   70.067023][ T5858]  filemap_fdatawrite+0x199/0x240
[   70.067036][ T5858]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   70.067066][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[   70.067077][ T5858]  f2fs_sync_dirty_inodes+0x31f/0x830
[   70.067091][ T5858]  f2fs_write_checkpoint+0x95a/0x1df0
[   70.067109][ T5858]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   70.067137][ T5858]  ? kill_f2fs_super+0x298/0x6c0
[   70.067149][ T5858]  kill_f2fs_super+0x2c3/0x6c0
[   70.067159][ T5858]  ? __pfx_kill_f2fs_super+0x10/0x10
[   70.067165][ T5858]  ? radix_tree_delete_item+0x2b6/0x400
[   70.067178][ T5858]  ? shrinker_free+0x2ce/0x3e0
[   70.067189][ T5858]  deactivate_locked_super+0xbc/0x130
[   70.067201][ T5858]  cleanup_mnt+0x425/0x4c0
[   70.067212][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.067222][ T5858]  task_work_run+0x1d4/0x260
[   70.067235][ T5858]  ? __pfx_task_work_run+0x10/0x10
[   70.067244][ T5858]  ? __x64_sys_umount+0x122/0x160
[   70.067257][ T5858]  ? exit_to_user_mode_loop+0x40/0x110
[   70.067270][ T5858]  exit_to_user_mode_loop+0xec/0x110
[   70.067281][ T5858]  do_syscall_64+0x2bd/0x3b0
[   70.067292][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.067301][ T5858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.067308][ T5858]  ? exc_page_fault+0x9f/0xf0
[   70.067319][ T5858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.067326][ T5858] RIP: 0033:0x7f27c3d8ff17
[   70.067336][ T5858] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   70.067343][ T5858] RSP: 002b:00007ffef082e4d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   70.067352][ T5858] RAX: 0000000000000000 RBX: 00007f27c3e11c05 RCX: 00007f27c3d8ff17
[   70.067357][ T5858] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef082e590
[   70.067362][ T5858] RBP: 00007ffef082e590 R08: 0000000000000000 R09: 0000000000000000
[   70.067367][ T5858] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef082f620
[   70.067391][ T5858] R13: 00007f27c3e11c05 R14: 00000000000110ef R15: 00007ffef082f660
[   70.067405][ T5858]  </TASK>
[   70.067462][ T5858] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   70.969748][ T6123] loop2: detected capacity change from 0 to 256
[   70.993828][ T6123] MINIX-fs: mounting file system with errors, running fsck is recommended
[   71.022264][ T6123] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[   71.031984][ T6123] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[   71.148950][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.152098][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.166511][ T6136] netlink: 'syz.1.74': attribute type 4 has an invalid length.
[   71.176425][ T6136] netlink: 'syz.1.74': attribute type 4 has an invalid length.
[   71.277224][ T6141] Falling back ldisc for ptm0.
[   71.324836][ T6133] loop2: detected capacity change from 0 to 32768
[   71.329934][ T6133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.73 (6133)
[   71.363162][ T6133] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.367871][ T6133] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   71.373921][ T6133] BTRFS info (device loop2): using free-space-tree
[   71.522114][   T13] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   71.573305][ T5858] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.711576][ T5920] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   71.861591][ T5920] usb 2-1: Using ep0 maxpacket: 16
[   71.865610][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.869553][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   71.875539][ T5920] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   71.878975][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.882080][ T5920] usb 2-1: Product: syz
[   71.883771][ T5920] usb 2-1: Manufacturer: syz
[   71.885637][ T5920] usb 2-1: SerialNumber: syz
[   71.911801][ T5892] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   72.005583][ T6168] netlink: 76 bytes leftover after parsing attributes in process `syz.0.81'.
[   72.071761][ T5892] usb 3-1: Using ep0 maxpacket: 8
[   72.075696][ T5892] usb 3-1: config 8 has an invalid interface number: 161 but max is 0
[   72.078901][ T5892] usb 3-1: config 8 has no interface number 0
[   72.081459][ T5892] usb 3-1: config 8 interface 161 has no altsetting 0
[   72.096666][ T5892] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=60.da
[   72.098684][ T5920] usb 2-1: 0:2 : does not exist
[   72.107259][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.110386][ T5892] usb 3-1: Product: syz
[   72.118358][ T5892] usb 3-1: Manufacturer: syz
[   72.119857][ T5920] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   72.120218][ T5892] usb 3-1: SerialNumber: syz
[   72.162675][ T5920] usb 2-1: USB disconnect, device number 3
[   72.227471][ T6069] udevd[6069]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   72.413309][ T5892] net1080 3-1:8.161: probe with driver net1080 failed with error -22
[   72.437454][ T5892] usb 3-1: USB disconnect, device number 3
[   73.790547][ T6208] loop0: detected capacity change from 0 to 2048
[   73.816693][ T6208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.097983][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'.
[   74.525150][ T6210] loop2: detected capacity change from 0 to 32768
[   74.530642][ T6210] XFS: attr2 mount option is deprecated.
[   74.559356][ T6210] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   74.659443][ T6210] XFS (loop2): Ending clean mount
[   74.669640][ T6210] XFS (loop2): Quotacheck needed: Please wait.
[   74.699610][ T6210] XFS (loop2): Quotacheck: Done.
[   74.756267][ T5858] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   74.956533][ T6229] loop2: detected capacity change from 0 to 1024
[   74.968537][ T6229] EXT4-fs: Ignoring removed orlov option
[   74.978757][ T6229] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   75.027105][ T6229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.040766][ T6229] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.97: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[   75.050442][ T6229] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   75.086866][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.932088][  T791] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   75.950539][ T6242] loop2: detected capacity change from 0 to 16
[   75.964030][ T6242] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 127766)
[   76.058302][ T6227] loop1: detected capacity change from 0 to 262144
[   76.063150][ T6227] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.98 (6227)
[   76.073907][ T6227] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   76.077811][ T6227] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   76.081319][ T6227] BTRFS info (device loop1): using free-space-tree
[   76.115674][  T791] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82
[   76.124283][  T791] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   76.137690][  T791] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   76.155010][  T791] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06
[   76.165481][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[   76.168586][  T791] usb 1-1: SerialNumber: syz
[   76.275999][ T6262] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.106'.
[   76.318248][ T6227] BTRFS info (device loop1): balance: start -d -mprofiles= -sprofiles=
[   76.328152][ T6227] BTRFS info (device loop1): relocating block group 22020096 flags system|dup
[   76.358510][ T6227] BTRFS info (device loop1): relocating block group 13631488 flags data
[   76.386494][ T6227] BTRFS info (device loop1): found 1 extents, stage: move data extents
[   76.406699][ T6227] BTRFS info (device loop1): found 1 extents, stage: update data pointers
[   76.423619][ T6227] BTRFS info (device loop1): balance: ended with status: 0
[   76.454267][  T791] yealink 1-1:36.0: invalid payload size 0, expected 16
[   76.458933][  T791] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input5
[   76.483666][    C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[   76.486455][    C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[   76.489197][    C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[   76.492616][    C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[   76.495297][    C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[   76.497962][    C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[   76.500653][    C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[   76.503381][    C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71
[   76.505855][    C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[   76.535370][ T5856] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   76.543376][  T791] usb 1-1: USB disconnect, device number 2
[   77.320212][ T6280] loop1: detected capacity change from 0 to 40427
[   77.355777][ T6280] F2FS-fs (loop1): invalid crc value
[   77.405202][ T6282] loop2: detected capacity change from 0 to 32768
[   77.440306][ T6295] program syz.0.119 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.465456][ T6280] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   77.470112][ T6280] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   77.471292][ T6282] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   77.486348][ T6280] syz.1.113: attempt to access beyond end of device
[   77.486348][ T6280] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   77.495567][ T6280] syz.1.113: attempt to access beyond end of device
[   77.495567][ T6280] loop1: rw=0, sector=77888, nr_sectors = 8 limit=40427
[   77.504478][ T6280] syz.1.113: attempt to access beyond end of device
[   77.504478][ T6280] loop1: rw=0, sector=77944, nr_sectors = 8 limit=40427
[   77.513655][ T6280] syz.1.113: attempt to access beyond end of device
[   77.513655][ T6280] loop1: rw=0, sector=77952, nr_sectors = 8 limit=40427
[   77.518463][ T6282] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   77.555158][ T5885] (kworker/u8:4,5885,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[   77.570469][ T5856] syz-executor: attempt to access beyond end of device
[   77.570469][ T5856] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   77.599581][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   77.599602][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.599609][ T5856] Call Trace:
[   77.599615][ T5856]  <TASK>
[   77.599621][ T5856]  dump_stack_lvl+0x189/0x250
[   77.599645][ T5856]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.599661][ T5856]  ? __pfx_queue_work_on+0x10/0x10
[   77.599674][ T5856]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   77.599691][ T5856]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   77.599716][ T5856]  f2fs_handle_critical_error+0x37c/0x540
[   77.599739][ T5856]  f2fs_write_end_io+0x886/0xb60
[   77.599764][ T5856]  __submit_merged_bio+0x27a/0x6a0
[   77.599787][ T5856]  __submit_merged_write_cond+0x255/0x530
[   77.599810][ T5856]  f2fs_write_data_pages+0x261d/0x3000
[   77.599827][ T5856]  ? __pfx_hlock_conflict+0x10/0x10
[   77.599891][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   77.599940][ T5856]  ? __mod_zone_page_state+0xd7/0x140
[   77.599964][ T5856]  ? folios_put_refs+0x560/0x640
[   77.599984][ T5856]  ? __pfx_folios_put_refs+0x10/0x10
[   77.599995][ T5856]  ? rcu_is_watching+0x15/0xb0
[   77.600014][ T5856]  ? __lock_acquire+0xab9/0xd20
[   77.600041][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   77.600059][ T5856]  do_writepages+0x32e/0x550
[   77.600100][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[   77.600133][ T5856]  filemap_fdatawrite+0x199/0x240
[   77.600150][ T5856]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   77.600196][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[   77.600210][ T5856]  f2fs_sync_dirty_inodes+0x31f/0x830
[   77.600234][ T5856]  f2fs_write_checkpoint+0x95a/0x1df0
[   77.600273][ T5856]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   77.600315][ T5856]  ? kill_f2fs_super+0x298/0x6c0
[   77.600331][ T5856]  kill_f2fs_super+0x2c3/0x6c0
[   77.600351][ T5856]  ? __pfx_kill_f2fs_super+0x10/0x10
[   77.600361][ T5856]  ? radix_tree_delete_item+0x2b6/0x400
[   77.600385][ T5856]  ? shrinker_free+0x2ce/0x3e0
[   77.600402][ T5856]  deactivate_locked_super+0xbc/0x130
[   77.600421][ T5856]  cleanup_mnt+0x425/0x4c0
[   77.600437][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.600457][ T5856]  task_work_run+0x1d4/0x260
[   77.600478][ T5856]  ? __pfx_task_work_run+0x10/0x10
[   77.600494][ T5856]  ? __x64_sys_umount+0x122/0x160
[   77.600513][ T5856]  ? exit_to_user_mode_loop+0x40/0x110
[   77.600535][ T5856]  exit_to_user_mode_loop+0xec/0x110
[   77.600553][ T5856]  do_syscall_64+0x2bd/0x3b0
[   77.600571][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.600587][ T5856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.600601][ T5856]  ? exc_page_fault+0x9f/0xf0
[   77.600617][ T5856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.600631][ T5856] RIP: 0033:0x7f8be718ff17
[   77.600644][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   77.600655][ T5856] RSP: 002b:00007ffecf3119a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   77.600670][ T5856] RAX: 0000000000000000 RBX: 00007f8be7211c05 RCX: 00007f8be718ff17
[   77.600677][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecf311a60
[   77.600686][ T5856] RBP: 00007ffecf311a60 R08: 0000000000000000 R09: 0000000000000000
[   77.600693][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffecf312af0
[   77.600701][ T5856] R13: 00007f8be7211c05 R14: 0000000000012e4f R15: 00007ffecf312b30
[   77.600722][ T5856]  </TASK>
[   77.633368][ T6282] (syz.2.114,6282,0):ocfs2_find_entry:1094 ERROR: status = -117
[   77.737350][ T5856] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   77.821603][ T6282] (syz.2.114,6282,1):ocfs2_orphan_del:2396 ERROR: status = -117
[   77.824132][ T6282] (syz.2.114,6282,1):ocfs2_orphan_del:2418 ERROR: status = -117
[   77.830193][ T6282] (syz.2.114,6282,1):ocfs2_remove_inode:752 ERROR: status = -117
[   77.851040][ T6282] (syz.2.114,6282,1):ocfs2_wipe_inode:897 ERROR: status = -117
[   77.862347][ T6282] (syz.2.114,6282,0):ocfs2_delete_inode:1158 ERROR: status = -117
[   78.188919][ T5858] ocfs2: Unmounting device (7,2) on (node local)
[   78.597695][ T6305] loop1: detected capacity change from 0 to 32768
[   78.605202][ T6306] loop2: detected capacity change from 0 to 65536
[   78.631619][ T6306] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   78.659542][ T6306] XFS (loop2): Ending clean mount
[   78.678710][   T33] audit: type=1800 audit(1755549522.443:2): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.122" name="file2" dev="loop2" ino=42 res=0 errno=0
[   78.689813][ T6305] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   78.718582][ T6305] XFS (loop1): Ending clean mount
[   78.728641][ T6305] XFS (loop1): Quotacheck needed: Please wait.
[   78.777122][ T6305] XFS (loop1): Quotacheck: Done.
[   78.868206][ T6332] bfs: Unknown parameter 'ip6_vti0'
[   78.882082][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'.
[   78.934139][ T5856] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   78.995149][ T6333] veth3: entered promiscuous mode
[   79.359588][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'.
[   79.515208][ T5858] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   79.727778][ T6349] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   79.735174][ T6337] loop0: detected capacity change from 0 to 40427
[   79.742542][ T6337] F2FS-fs (loop0): invalid crc value
[   79.808153][ T6337] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   79.813113][ T6337] F2FS-fs (loop0): Start checkpoint disabled!
[   79.820834][ T6337] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   79.839166][ T1088] kworker/u9:5: attempt to access beyond end of device
[   79.839166][ T1088] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   79.847872][ T1088] CPU: 0 UID: 0 PID: 1088 Comm: kworker/u9:5 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   79.847892][ T1088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.847900][ T1088] Workqueue: writeback wb_workfn (flush-7:0)
[   79.847921][ T1088] Call Trace:
[   79.847928][ T1088]  <TASK>
[   79.847958][ T1088]  dump_stack_lvl+0x189/0x250
[   79.847980][ T1088]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.847996][ T1088]  ? __pfx_queue_work_on+0x10/0x10
[   79.848008][ T1088]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   79.848026][ T1088]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.848052][ T1088]  f2fs_handle_critical_error+0x37c/0x540
[   79.848076][ T1088]  f2fs_write_end_io+0x886/0xb60
[   79.848104][ T1088]  __submit_merged_bio+0x27a/0x6a0
[   79.848126][ T1088]  __submit_merged_write_cond+0x255/0x530
[   79.848150][ T1088]  f2fs_write_data_pages+0x261d/0x3000
[   79.848201][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.848233][ T1088]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   79.848279][ T1088]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   79.848296][ T1088]  ? look_up_lock_class+0x74/0x170
[   79.848323][ T1088]  ? trace_f2fs_writepages+0x7f/0x200
[   79.848339][ T1088]  ? f2fs_write_node_pages+0x478/0x6e0
[   79.848375][ T1088]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   79.848406][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.848425][ T1088]  do_writepages+0x32e/0x550
[   79.848448][ T1088]  ? reacquire_held_locks+0x127/0x1d0
[   79.848462][ T1088]  ? writeback_sb_inodes+0x384/0x1010
[   79.848494][ T1088]  __writeback_single_inode+0x145/0xff0
[   79.848511][ T1088]  ? do_raw_spin_unlock+0x4d/0x240
[   79.848531][ T1088]  writeback_sb_inodes+0x6c7/0x1010
[   79.848571][ T1088]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   79.848621][ T1088]  ? rcu_is_watching+0x15/0xb0
[   79.848645][ T1088]  wb_writeback+0x43b/0xaf0
[   79.848668][ T1088]  ? queue_io+0x3b1/0x590
[   79.848688][ T1088]  ? __pfx_wb_writeback+0x10/0x10
[   79.848744][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.848768][ T1088]  wb_workfn+0x409/0xef0
[   79.848796][ T1088]  ? __pfx_wb_workfn+0x10/0x10
[   79.848815][ T1088]  ? __lock_acquire+0xab9/0xd20
[   79.848842][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[   79.848860][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.848874][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[   79.848885][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[   79.848900][ T1088]  process_scheduled_works+0xae1/0x17b0
[   79.848939][ T1088]  ? __pfx_process_scheduled_works+0x10/0x10
[   79.848968][ T1088]  worker_thread+0x8a0/0xda0
[   79.849003][ T1088]  kthread+0x711/0x8a0
[   79.849024][ T1088]  ? __pfx_worker_thread+0x10/0x10
[   79.849037][ T1088]  ? __pfx_kthread+0x10/0x10
[   79.849055][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.849070][ T1088]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.849085][ T1088]  ? __pfx_kthread+0x10/0x10
[   79.849103][ T1088]  ret_from_fork+0x3fc/0x770
[   79.849120][ T1088]  ? __pfx_ret_from_fork+0x10/0x10
[   79.849139][ T1088]  ? __switch_to_asm+0x39/0x70
[   79.849156][ T1088]  ? __switch_to_asm+0x33/0x70
[   79.849170][ T1088]  ? __pfx_kthread+0x10/0x10
[   79.849187][ T1088]  ret_from_fork_asm+0x1a/0x30
[   79.849216][ T1088]  </TASK>
[   79.850148][ T1088] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   79.964357][ T5920] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   80.122663][ T5920] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[   80.131951][ T5920] usb 2-1: config 0 has no interface number 0
[   80.144905][ T5920] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   80.148417][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.161582][ T5920] usb 2-1: Product: syz
[   80.163391][ T5920] usb 2-1: Manufacturer: syz
[   80.165181][ T5920] usb 2-1: SerialNumber: syz
[   80.174584][ T5920] usb 2-1: config 0 descriptor??
[   80.589116][ T5920] usb 2-1: Firmware: major: 0, minor: 43, hardware type: ATUSB (0)
[   80.609205][ T6367] loop2: detected capacity change from 0 to 32768
[   80.621018][ T6367] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.143 (6367)
[   80.632336][ T6367] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   80.636326][ T6367] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   80.639630][ T6367] BTRFS info (device loop2): using free-space-tree
[   80.758134][   T33] audit: type=1800 audit(1755549524.523:3): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.143" name="bus" dev="loop2" ino=263 res=0 errno=0
[   80.797674][ T5920] usb 2-1: failed to fetch extended address, random address set
[   80.864879][ T5920] usb 2-1: USB disconnect, device number 4
[   80.870541][ T5858] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   80.981792][ T5919] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   81.134922][ T5919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.138135][ T5919] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   81.144681][ T5919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   81.147547][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.149940][ T5919] usb 1-1: Product: syz
[   81.151205][ T5919] usb 1-1: Manufacturer: syz
[   81.153972][ T5919] usb 1-1: SerialNumber: syz
[   81.368327][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.378520][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.393742][ T3151] cfg80211: failed to load regulatory.db
[   81.422726][ T5919] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[   81.445110][ T5919] usb 1-1: USB disconnect, device number 3
[   81.707982][ T6415] loop1: detected capacity change from 0 to 4096
[   81.729798][ T6415] NILFS (loop1): mounting unchecked fs
[   81.736108][ T6415] NILFS (loop1): recovery required for readonly filesystem
[   81.738277][ T6415] NILFS (loop1): write access will be enabled during recovery
[   81.745430][ T6415] NILFS (loop1): invalid segment: Checksum error in segment payload
[   81.748471][ T6415] NILFS (loop1): trying rollback from an earlier position
[   81.755721][ T6415] NILFS (loop1): norecovery option specified, skipping roll-forward recovery
[   81.759875][ T6415] NILFS (loop1): The specified checkpoint is not a snapshot (checkpoint number=2)
[   81.933234][ T5919] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   82.094776][ T5919] usb 1-1: Using ep0 maxpacket: 8
[   82.101650][ T5919] usb 1-1: config index 0 descriptor too short (expected 301, got 72)
[   82.104736][ T5919] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   82.108521][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   82.114591][  T791] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   82.145423][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   82.149457][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   82.154093][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.158376][ T5919] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   82.165405][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.299192][  T791] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f
[   82.303706][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.307240][  T791] usb 3-1: Product: syz
[   82.309024][  T791] usb 3-1: Manufacturer: syz
[   82.310991][  T791] usb 3-1: SerialNumber: syz
[   82.327760][  T791] usb 3-1: config 0 descriptor??
[   82.340420][  T791] gspca_main: touptek-2.14.0 probing 0547:6801
[   82.401226][ T5919] usb 1-1: usb_control_msg returned -71
[   82.413723][ T5919] usbtmc 1-1:16.0: can't read capabilities
[   82.459272][ T5919] usb 1-1: USB disconnect, device number 4
[   82.564383][  T791] usb 3-1: USB disconnect, device number 4
[   83.240353][ T6435] delete_channel: no stack
[   83.487518][ T6441] loop0: detected capacity change from 0 to 128
[   83.724788][ T6451] sctp: [Deprecated]: syz.0.172 (pid 6451) Use of int in maxseg socket option.
[   83.724788][ T6451] Use struct sctp_assoc_value instead
[   83.794306][ T6456] loop0: detected capacity change from 0 to 512
[   83.834117][ T6456] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   83.841754][ T6456] EXT4-fs (loop0): orphan cleanup on readonly fs
[   83.844763][ T6456] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[   83.863627][ T6456] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   83.880513][ T6456] EXT4-fs (loop0): Cannot turn on quotas: error -117
[   83.887133][ T6456] EXT4-fs (loop0): 1 truncate cleaned up
[   83.889659][ T6456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   83.890584][ T6460] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   83.901326][ T6460] macvtap1: entered allmulticast mode
[   83.904797][ T6460] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   83.908705][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.916905][ T6460] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   83.925366][ T6460] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[   84.935936][ T6470] loop2: detected capacity change from 0 to 32768
[   84.989462][ T6470] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   85.242697][ T6470] XFS (loop2): Ending clean mount
[   85.259878][ T6470] XFS (loop2): Quotacheck needed: Please wait.
[   85.310148][ T6470] XFS (loop2): Quotacheck: Done.
[   85.446685][ T5858] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   86.739556][ T6503] loop2: detected capacity change from 0 to 32768
[   86.750146][ T6503] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 0 smaller than block size 8
[   86.750146][ T6503] members_v2 (size 152):
[   86.750146][ T6503] Device:                        0
[   86.750146][ T6503]   Label:                       (none)
[   86.750146][ T6503]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[   86.750146][ T6503]   Size:                        0
[   86.750146][ T6503]   read errors:                 0
[   86.750146][ T6503]   write errors:                0
[   86.750146][ T6503]   checksum errors:             0
[   86.750146][ T6503]   seqread iops:                0
[   86.750146][ T6503]   seqwrite iops:               1048320
[   86.750146][ T6503]   randread iops:               0
[   86.750146][ T6503]   randwrite iops:              0
[   86.750146][ T6503]   Bucket size:                 0
[   86.750146][ T6503]   First bucket:                0
[   86.750146][ T6503]   Buckets:                     128
[   86.750146][ T6503]   Last mount:                  9223372038569457075
[   86.750146][ T6503]   Last superblock write:       42
[   86.750146][ T6503]   State:                       unknown
[   86.750146][ T6503]   Data allowed:                (none)
[   86.750146][ T6503]   Has data:                    (none)
[   86.750146][ T6503]   Btree allocated bitmap blocksize:256
[   86.750146][ T6503]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[   86.750146][ T6503]   Durability
[   86.750275][ T6503] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[   86.858472][  T791] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   86.929949][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'.
[   87.013535][  T791] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   87.016271][  T791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.019552][  T791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[   87.029925][  T791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.030140][ T6524] netlink: 'syz.0.198': attribute type 6 has an invalid length.
[   87.033565][  T791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.034651][ T6522] loop2: detected capacity change from 0 to 4096
[   87.043082][  T791] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   87.045927][  T791] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   87.048371][  T791] usb 2-1: Product: syz
[   87.049658][  T791] usb 2-1: Manufacturer: syz
[   87.068792][ T6525] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   87.068894][ T6522] NILFS (loop2): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0
[   87.076298][  T791] cdc_wdm 2-1:1.0: skipping garbage
[   87.078052][  T791] cdc_wdm 2-1:1.0: skipping garbage
[   87.086032][  T791] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   87.088042][  T791] cdc_wdm 2-1:1.0: Unknown control protocol
[   87.090022][ T6522] NILFS (loop2): error -5 getting root inode
[   87.307969][ T6501] cdc_wdm 2-1:1.0: Error submitting int urb - -90
[   87.313516][ T6537] sctp: [Deprecated]: syz.2.204 (pid 6537) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.313516][ T6537] Use struct sctp_sack_info instead
[   87.314981][   T24] usb 2-1: USB disconnect, device number 5
[   87.544454][ T6539] loop2: detected capacity change from 0 to 32768
[   87.569995][ T6539] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   87.586959][ T6539] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature 
[   87.593920][ T6539] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   87.597607][ T6539] OCFS2: File system is now read-only.
[   87.599748][ T6539] (syz.2.205,6539,0):ocfs2_search_chain:1852 ERROR: status = -30
[   87.603009][ T6539] (syz.2.205,6539,0):ocfs2_search_chain:1940 ERROR: status = -30
[   87.605881][ T6539] (syz.2.205,6539,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[   87.608352][ T6539] (syz.2.205,6539,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[   87.610887][ T6539] (syz.2.205,6539,0):__ocfs2_claim_clusters:2438 ERROR: status = -30
[   87.613424][ T6539] (syz.2.205,6539,0):__ocfs2_claim_clusters:2446 ERROR: status = -30
[   87.615929][ T6539] (syz.2.205,6539,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -30
[   87.618751][ T6539] (syz.2.205,6539,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -30
[   87.621391][ T6539] (syz.2.205,6539,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30
[   87.624458][ T6539] (syz.2.205,6539,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[   87.627726][ T6539] (syz.2.205,6539,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[   87.630781][ T6539] (syz.2.205,6539,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[   87.633700][ T6539] (syz.2.205,6539,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[   87.636710][ T6539] (syz.2.205,6539,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[   87.639636][ T6539] (syz.2.205,6539,0):ocfs2_expand_inline_dir:2864 ERROR: status = -30
[   87.642219][ T6539] (syz.2.205,6539,0):ocfs2_extend_dir:3211 ERROR: status = -30
[   87.645082][ T6539] (syz.2.205,6539,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30
[   87.647873][ T6539] (syz.2.205,6539,0):ocfs2_symlink:1879 ERROR: status = -30
[   87.650060][ T6539] (syz.2.205,6539,0):ocfs2_symlink:2080 ERROR: status = -30
[   87.669125][ T5858] (syz-executor,5858,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[   87.680844][ T5858] ocfs2: Unmounting device (7,2) on (node local)
[   87.833929][ T6544] loop0: detected capacity change from 0 to 32768
[   87.842771][ T6544] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.206 (6544)
[   87.854211][ T6544] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   87.858419][ T6544] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   87.864476][ T6544] BTRFS info (device loop0): using free-space-tree
[   87.964538][ T6570] netlink: 96 bytes leftover after parsing attributes in process `syz.1.211'.
[   88.037564][ T6565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.061118][   T33] audit: type=1800 audit(1755549531.823:4): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.206" name="file1" dev="loop0" ino=260 res=0 errno=0
[   88.226957][ T5851] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   88.430355][ T6586] loop0: detected capacity change from 0 to 128
[   88.449337][ T6586] syz.0.216: attempt to access beyond end of device
[   88.449337][ T6586] loop0: rw=2051, sector=128, nr_sectors = 913 limit=128
[   88.917468][ T6579] loop2: detected capacity change from 0 to 32768
[   88.976371][ T6588] loop1: detected capacity change from 0 to 131072
[   88.984730][ T6588] F2FS-fs (loop1): invalid crc value
[   89.008536][ T6069]  loop2: p9 p11 p16
[   89.029989][ T6588] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   89.034017][ T6588] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   89.158113][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory
[   89.159701][ T5863] udevd[5863]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory
[   89.182324][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory
[   89.340962][ T6609] netlink: 'syz.0.224': attribute type 1 has an invalid length.
[   89.494810][ T6609] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.556327][ T6611] bond2: (slave veth5): Enslaving as an active interface with a down link
[   89.691570][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   89.865612][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.872998][   T24] usb 3-1: config 0 has no interfaces?
[   89.877654][   T24] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   89.892079][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.900455][   T24] usb 3-1: config 0 descriptor??
[   90.058298][ T6623] loop1: detected capacity change from 0 to 2048
[   90.088350][ T6623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.107385][ T6623] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   90.124849][ T5892] usb 3-1: USB disconnect, device number 5
[   90.144778][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.481689][  T791] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   90.631680][  T791] usb 2-1: Using ep0 maxpacket: 8
[   90.636953][  T791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[   90.642033][  T791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 166, setting to 64
[   90.648883][  T791] usb 2-1: config 0 interface 0 has no altsetting 0
[   90.664739][  T791] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[   90.668297][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.671361][  T791] usb 2-1: Product: syz
[   90.681123][  T791] usb 2-1: Manufacturer: syz
[   90.683521][  T791] usb 2-1: SerialNumber: syz
[   90.693612][  T791] usb 2-1: config 0 descriptor??
[   90.704945][  T791] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[   90.708438][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'.
[   90.793439][ T6658] loop0: detected capacity change from 0 to 512
[   90.805503][ T6658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   90.845281][ T6658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.852721][ T6658] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.873546][ T6658] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   90.906056][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.924383][  T791] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[   90.929792][  T791] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22
[   91.125150][   T24] usb 2-1: USB disconnect, device number 6
[   91.243827][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'.
[   91.293699][ T6677] netlink: 6 bytes leftover after parsing attributes in process `syz.0.252'.
[   91.626269][ T5919] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   91.709548][ T6685] sctp: [Deprecated]: syz.1.256 (pid 6685) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.709548][ T6685] Use struct sctp_sack_info instead
[   91.712979][ T6683] loop2: detected capacity change from 0 to 32768
[   91.776342][ T5919] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[   91.779421][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.786673][ T5919] usb 1-1: config 0 has no interface number 0
[   91.789113][ T5919] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[   91.795545][ T5919] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[   91.799502][ T5919] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   91.805379][ T5919] usb 1-1: config 0 interface 52 has no altsetting 0
[   91.809799][ T5919] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[   91.817428][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[   91.832075][ T5919] usb 1-1: SerialNumber: syz
[   91.835228][ T5919] usb 1-1: config 0 descriptor??
[   91.846234][ T6683] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   91.846247][ T6683]   allowing incompatible features above 0.0: (unknown version)
[   91.846252][ T6683]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   91.863096][ T6683] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   91.867458][ T6683] bcachefs (loop2): initializing new filesystem
[   91.882803][ T6683] bcachefs (loop2): going read-write
[   91.893857][ T6683] bcachefs (loop2): marking superblocks
[   91.923849][ T6683] bcachefs (loop2): initializing freespace
[   91.933667][ T6683] bcachefs (loop2): done initializing freespace
[   91.944998][ T6683] bcachefs (loop2): reading snapshots table
[   91.947235][ T6683] bcachefs (loop2): reading snapshots done
[   91.976995][ T6683] bcachefs (loop2): done starting filesystem
[   92.010738][ T6683] syz.2.255 (6683) used greatest stack depth: 17448 bytes left
[   92.033764][ T5858] bcachefs (loop2): shutting down
[   92.035810][ T5858] bcachefs (loop2): going read-only
[   92.038712][ T5858] bcachefs (loop2): finished waiting for writes to stop
[   92.043533][ T5919] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[   92.047868][ T5858] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[   92.047997][ T5919] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5
[   92.053925][ T5920] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   92.085098][ T5858] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[   92.090181][ T5858] bcachefs (loop2): clean shutdown complete, journal seq 4
[   92.093774][ T5858] bcachefs (loop2): marking filesystem clean
[   92.129250][ T5858] bcachefs (loop2): shutdown complete
[   92.201639][ T5920] usb 2-1: Using ep0 maxpacket: 16
[   92.206668][ T5920] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[   92.209832][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.214031][ T5920] usb 2-1: config 0 has no interface number 0
[   92.219029][ T5920] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[   92.222721][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.225799][ T5920] usb 2-1: Product: syz
[   92.227624][ T5920] usb 2-1: Manufacturer: syz
[   92.229501][ T5920] usb 2-1: SerialNumber: syz
[   92.236060][ T5920] usb 2-1: config 0 descriptor??
[   92.241859][ T5920] usb 2-1: Found UVC 0.00 device syz (046c:14e8)
[   92.247906][ T5919] usb 1-1: USB disconnect, device number 5
[   92.252995][ T5920] usb 2-1: No valid video chain found.
[   92.446003][ T5892] usb 2-1: USB disconnect, device number 7
[   93.007134][ T6706] loop0: detected capacity change from 0 to 4096
[   93.055614][ T6706] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   93.068476][ T6706] ntfs3(loop0): Failed to load $Extend (-22).
[   93.070875][ T6706] ntfs3(loop0): Failed to initialize $Extend.
[   93.230209][ T6713] sp0: Synchronizing with TNC
[   93.281780][ T5919] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   93.329893][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'.
[   93.441606][ T5919] usb 2-1: Using ep0 maxpacket: 16
[   93.446262][ T5919] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   93.449499][ T5919] usb 2-1: config 0 has no interface number 0
[   93.455563][ T5919] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   93.456895][ T6721] loop0: detected capacity change from 0 to 256
[   93.461170][ T5919] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   93.469494][ T5919] usb 2-1: config 0 interface 41 has no altsetting 0
[   93.479141][ T5919] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   93.481068][ T6721] FAT-fs (loop0): Directory bread(block 64) failed
[   93.486338][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.487760][ T6721] FAT-fs (loop0): Directory bread(block 65) failed
[   93.493658][ T6721] FAT-fs (loop0): Directory bread(block 66) failed
[   93.494202][ T5919] usb 2-1: Product: syz
[   93.496025][ T6721] FAT-fs (loop0): Directory bread(block 67) failed
[   93.498678][ T5919] usb 2-1: Manufacturer: syz
[   93.499982][ T6721] FAT-fs (loop0): Directory bread(block 68) failed
[   93.503372][ T5919] usb 2-1: SerialNumber: syz
[   93.506933][ T6721] FAT-fs (loop0): Directory bread(block 69) failed
[   93.509473][ T6721] FAT-fs (loop0): Directory bread(block 70) failed
[   93.510364][ T5919] usb 2-1: config 0 descriptor??
[   93.511797][ T6721] FAT-fs (loop0): Directory bread(block 71) failed
[   93.511853][ T6721] FAT-fs (loop0): Directory bread(block 72) failed
[   93.511864][ T6721] FAT-fs (loop0): Directory bread(block 73) failed
[   93.522019][ T6708] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   93.524300][ T6708] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   93.534943][   T33] audit: type=1800 audit(1755549537.303:5): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.267" name="file1" dev="loop0" ino=1048595 res=0 errno=0
[   93.545207][ T6721] syz.0.267: attempt to access beyond end of device
[   93.545207][ T6721] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256
[   93.588913][ T6723] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.606522][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'.
[   93.638303][ T6723] bond0: (slave bond_slave_1): Releasing backup interface
[   93.716018][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'.
[   93.739874][ T6708] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   93.749136][ T6708] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   93.914789][ T6731] loop0: detected capacity change from 0 to 4096
[   93.955090][ T6732] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.125948][ T6736] loop0: detected capacity change from 0 to 4096
[   94.144772][ T6736] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   94.369327][ T5919] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   94.777622][ T5919] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[   94.782559][ T5919] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[   94.787935][ T5919] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[   94.800456][ T5919] usb 2-1: USB disconnect, device number 8
[   95.097507][ T6755] loop2: detected capacity change from 0 to 256
[   96.057038][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'.
[   96.071152][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[   96.073899][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[   96.076193][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[   96.078188][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[   96.080206][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[   96.082512][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[   96.084686][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   96.087302][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   96.089732][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   96.092336][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   96.095137][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   96.098252][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   96.101400][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   96.104213][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   96.106800][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   96.109740][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   96.112502][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   96.115364][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   96.118153][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   96.120955][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   96.123671][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   96.126571][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   96.129311][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   96.132370][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   96.135042][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   96.137231][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   96.139782][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   96.142590][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   96.567756][ T6777] loop2: detected capacity change from 0 to 32768
[   96.595522][ T6777] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   96.653752][ T6777] XFS (loop2): Ending clean mount
[   96.683861][ T6777] XFS (loop2): Quotacheck needed: Please wait.
[   96.760767][ T6777] XFS (loop2): Quotacheck: Done.
[   96.771017][ T6777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   96.847144][ T6788] loop0: detected capacity change from 0 to 4096
[   96.859992][ T6788] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   96.875859][ T6788] ntfs3(loop0): Failed to load $Extend (-22).
[   96.878061][ T6788] ntfs3(loop0): Failed to initialize $Extend.
[   97.403726][ T6804] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[   98.126353][ T6812] loop1: detected capacity change from 0 to 512
[   98.165521][ T6812] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   98.171116][ T6812] EXT4-fs (loop1): invalid journal inode
[   98.193888][ T6801] loop0: detected capacity change from 0 to 40427
[   98.197687][ T6812] EXT4-fs (loop1): can't get journal size
[   98.240895][ T6815] loop2: detected capacity change from 0 to 64
[   98.259002][ T6801] F2FS-fs (loop0): invalid crc value
[   98.274000][ T6812] EXT4-fs (loop1): 1 truncate cleaned up
[   98.277938][ T6812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.414706][ T6801] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   98.419799][ T6801] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   98.445582][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.991931][ T6853] loop2: detected capacity change from 0 to 512
[  100.035594][ T6853] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  100.101444][ T6853] block device autoloading is deprecated and will be removed.
[  100.106986][ T6853] syz.2.319: attempt to access beyond end of device
[  100.106986][ T6853] md185: rw=0, sector=2, nr_sectors = 2 limit=0
[  100.114416][ T6853] EXT4-fs (loop2): couldn't read superblock of external journal
[  101.084222][ T6866] loop1: detected capacity change from 0 to 32768
[  101.103652][ T6866] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.324 (6866)
[  101.183917][ T6866] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  101.187942][ T6866] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  101.222676][ T6866] BTRFS info (device loop1): using free-space-tree
[  101.841314][ T5856] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  101.857686][ T6893] loop2: detected capacity change from 0 to 32768
[  101.892643][ T6893] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  101.985367][ T6893] XFS (loop2): Ending clean mount
[  102.009552][ T6893] XFS (loop2): Quotacheck needed: Please wait.
[  102.046234][ T6893] XFS (loop2): Quotacheck: Done.
[  102.079106][ T5858] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  102.316101][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'.
[  102.319931][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'.
[  102.331886][ T6911] netlink: 'syz.1.334': attribute type 20 has an invalid length.
[  102.350312][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'.
[  102.354012][ T5885] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.357785][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'.
[  102.360344][ T5885] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.361577][ T6911] netlink: 'syz.1.334': attribute type 20 has an invalid length.
[  102.383479][ T5885] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.386204][ T5885] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.395555][ T6915] loop2: detected capacity change from 0 to 256
[  102.406002][    C0] vcan0: j1939_tp_rxtimer: 0xffff888024c44c00: rx timeout, send abort
[  102.410744][    C0] vcan0: j1939_tp_rxtimer: 0xffff888024c47000: rx timeout, send abort
[  102.416327][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024c44c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  102.422129][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024c47000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  102.461588][ T6915] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  102.465875][ T6915] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  102.480234][ T6915] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  102.517588][ T6918] loop1: detected capacity change from 0 to 512
[  102.531898][ T6918] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  102.539109][ T6918] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002]
[  102.549679][ T6918] System zones: 0-1, 15-15, 18-18, 34-34
[  102.553538][ T6918] EXT4-fs (loop1): orphan cleanup on readonly fs
[  102.559002][ T6918] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #16: comm syz.1.338: casefold flag without casefold feature
[  102.566454][ T6918] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.338: couldn't read orphan inode 16 (err -117)
[  102.576282][ T6918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  102.590292][ T6918] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  102.593844][ T6918] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002]
[  102.623099][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.031037][ T6923] loop2: detected capacity change from 0 to 32768
[  103.050339][ T6923] ialloc: diAlloc returned -5!
[  103.181610][ T5919] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  103.251780][ T6939] loop2: detected capacity change from 0 to 4096
[  103.262704][ T6939] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  103.273661][ T6939] ntfs3(loop2): ino=b, mi_enum_attr
[  103.276220][ T6939] ntfs3(loop2): Failed to load $Extend (-22).
[  103.280373][ T6939] ntfs3(loop2): Failed to initialize $Extend.
[  103.377005][ T5919] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  103.380696][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.400521][ T5919] usb 2-1: config 0 descriptor??
[  103.405700][ T5919] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  103.613134][ T5919] gspca_sn9c2028: read1 error -32
[  103.616155][ T5919] gspca_sn9c2028: read1 error -32
[  103.707320][ T6945] loop0: detected capacity change from 0 to 32768
[  103.721685][ T6945] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  103.754946][   T33] audit: type=1800 audit(1755549547.523:6): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.350" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  103.776160][ T6945] (syz.0.350,6945,0):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = -14
[  103.776687][   T33] audit: type=1800 audit(1755549547.543:7): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.350" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  103.818248][ T6941] loop2: detected capacity change from 0 to 40427
[  103.829807][ T5920] usb 2-1: USB disconnect, device number 9
[  103.842784][ T6941] F2FS-fs: heap/no_heap options were deprecated
[  103.867621][ T6941] F2FS-fs (loop2): build fault injection rate: 19
[  103.869857][ T6941] F2FS-fs (loop2): build fault injection type: 0x3bfeb9
[  103.883737][ T6941] F2FS-fs (loop2): invalid crc value
[  103.893831][ T6941] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x30ed/0x49f0
[  103.898391][ T6941] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[  104.415661][ T6954] loop2: detected capacity change from 0 to 32768
[  104.419669][ T6954] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.351 (6954)
[  104.420423][ T6956] netlink: 52 bytes leftover after parsing attributes in process `syz.1.352'.
[  104.439346][ T6954] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  104.446133][ T5851] ocfs2: Unmounting device (7,0) on (node local)
[  104.457942][ T6954] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  104.471206][ T6954] BTRFS info (device loop2): using free-space-tree
[  104.626635][   T33] audit: type=1800 audit(1755549548.393:8): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.351" name="file1" dev="loop2" ino=260 res=0 errno=0
[  105.148806][ T5858] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  106.361321][ T5920] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  106.546939][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.550298][ T5920] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  106.555971][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.566763][ T5920] usb 3-1: config 0 descriptor??
[  106.732493][ T6999] loop1: detected capacity change from 0 to 32768
[  106.740125][ T6999] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  106.746713][ T6999] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  106.763507][ T6999] XFS (loop1): Ending clean mount
[  106.768371][ T6999] XFS (loop1): Quotacheck needed: Please wait.
[  106.794522][ T6999] XFS (loop1): Quotacheck: Done.
[  106.849541][ T5856] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  106.979401][ T5920] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[  107.014602][ T5920] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input7
[  107.137076][ T7013] overlayfs: failed to clone upperpath
[  107.146703][ T5920] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  107.238050][ T7011] loop1: detected capacity change from 0 to 4096
[  107.321388][ T7011] ntfs3(loop1): Inode r=90 is not in use!
[  107.324752][ T7011] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  107.432250][ T7021] warning: `syz.1.368' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.526221][ T5920] usb 3-1: USB disconnect, device number 6
[  107.620625][ T7031] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[  107.721449][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88802e436800: rx timeout, send abort
[  108.221708][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88802e435800: rx timeout, send abort
[  108.225159][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88802e436800: abort rx timeout. Force session deactivation
[  108.419266][ T7063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.725154][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88802e435800: abort rx timeout. Force session deactivation
[  109.421727][   T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  109.545375][ T7091] loop2: detected capacity change from 0 to 32768
[  109.552512][ T7091] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.402 (7091)
[  109.565346][ T7091] BTRFS info (device loop2 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.568864][ T7091] BTRFS info (device loop2 state S): using crc32c (crc32c-lib) checksum algorithm
[  109.583889][   T10] usb 2-1: config 255 has an invalid interface number: 91 but max is 0
[  109.586463][   T10] usb 2-1: config 255 has no interface number 0
[  109.588398][   T10] usb 2-1: config 255 interface 91 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  109.595700][   T10] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice=a8.6a
[  109.598619][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.601174][   T10] usb 2-1: Product: syz
[  109.602700][   T10] usb 2-1: Manufacturer: syz
[  109.604845][   T10] usb 2-1: SerialNumber: syz
[  109.615204][   T10] usbtouchscreen 2-1:255.91: probe with driver usbtouchscreen failed with error -12
[  109.624489][ T1088] BTRFS warning (device loop2 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  109.635576][   T28] BTRFS warning (device loop2 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  109.644952][ T1088] BTRFS warning (device loop2 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  109.651559][   T28] BTRFS warning (device loop2 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[  109.659739][ T7091] BTRFS error (device loop2 state S): logical 6881280 len 1638400 found bg but no related chunk
[  109.695431][ T5858] BTRFS info (device loop2 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.844896][   T10] usb 2-1: USB disconnect, device number 10
[  110.122541][ T7124] loop2: detected capacity change from 0 to 4096
[  110.158791][ T7125] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.512504][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  110.530343][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.414'.
[  110.589716][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'.
[  110.593369][ T7147] netlink: 'syz.0.419': attribute type 30 has an invalid length.
[  110.604015][ T5885] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.606843][ T5885] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.614584][ T5885] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.617648][ T5885] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.661599][   T10] usb 3-1: Using ep0 maxpacket: 32
[  110.666146][   T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  110.669749][   T10] usb 3-1: config 0 has no interface number 0
[  110.678479][   T10] usb 3-1: config 0 interface 12 has no altsetting 0
[  110.690548][   T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  110.697938][   T10] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  110.706372][   T10] usb 3-1: Product: syz
[  110.708067][   T10] usb 3-1: Manufacturer: syz
[  110.709930][   T10] usb 3-1: SerialNumber: syz
[  110.722492][   T10] usb 3-1: config 0 descriptor??
[  111.001800][ T5919] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  111.153333][ T5919] usb 2-1: config 0 has an invalid interface number: 103 but max is 0
[  111.156795][ T5919] usb 2-1: config 0 has no interface number 0
[  111.163773][ T5919] usb 2-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00
[  111.166661][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.169167][ T5919] usb 2-1: Product: syz
[  111.170738][ T5919] usb 2-1: Manufacturer: syz
[  111.172799][ T5919] usb 2-1: SerialNumber: syz
[  111.177904][ T5919] usb 2-1: config 0 descriptor??
[  111.388643][ T5919] usb-storage 2-1:0.103: USB Mass Storage device detected
[  111.395879][ T5919] usb-storage 2-1:0.103: Quirks match for vid 0781 pid 0001: 1
[  111.452679][ T5919] usb 2-1: USB disconnect, device number 11
[  111.992411][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'.
[  112.125838][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'.
[  112.159610][ T7190] netlink: 'syz.1.438': attribute type 15 has an invalid length.
[  112.162303][ T7190] netlink: 666 bytes leftover after parsing attributes in process `syz.1.438'.
[  112.214023][ T7192] syzkaller1: entered promiscuous mode
[  112.216530][ T7192] syzkaller1: entered allmulticast mode
[  112.601619][ T5919] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  112.661810][ T5854] Bluetooth: hci2: command tx timeout
[  112.746245][ T7215] tmpfs: Bad value for 'nr_blocks'
[  112.765093][ T5919] usb 2-1: config 0 has an invalid interface number: 176 but max is 2
[  112.768566][ T5919] usb 2-1: config 0 has an invalid interface number: 3 but max is 2
[  112.771295][ T5919] usb 2-1: config 0 has no interface number 0
[  112.774286][ T5919] usb 2-1: config 0 has no interface number 1
[  112.776770][ T5919] usb 2-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30
[  112.780187][ T5919] usb 2-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  112.786338][ T5919] usb 2-1: config 0 interface 3 has no altsetting 0
[  112.789586][ T5919] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  112.801604][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.806250][ T5919] usb 2-1: config 0 descriptor??
[  113.017602][ T5919] usb 2-1: Could not set interface, error -71
[  113.030689][ T5919] usb 2-1: selecting invalid altsetting 0
[  113.032944][ T5919] usb 2-1: Could not set interface, error -22
[  113.042603][ T5919] usb 2-1: USB disconnect, device number 12
[  113.180422][   T10] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: f8 failed: -71
[  113.185915][   T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  113.188490][   T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  113.190860][   T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  113.196354][   T10] usb 3-1: USB disconnect, device number 7
[  113.787904][ T7248] batadv0: entered promiscuous mode
[  113.796477][ T7248] batadv0: left promiscuous mode
[  113.953301][ T7258] loop1: detected capacity change from 0 to 8
[  113.969997][ T7258] SQUASHFS error: zlib decompression failed, data probably corrupt
[  113.979960][ T7258] SQUASHFS error: Failed to read block 0x4e8: -5
[  113.985149][ T7258] SQUASHFS error: zlib decompression failed, data probably corrupt
[  113.987667][ T7258] SQUASHFS error: Failed to read block 0x4ee: -5
[  113.989963][ T7258] SQUASHFS error: zlib decompression failed, data probably corrupt
[  113.994734][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  113.999007][ T7258] SQUASHFS error: Failed to read block 0x4ef: -5
[  114.003791][   T33] audit: type=1800 audit(1755549557.773:9): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.469" name="file1" dev="loop1" ino=5 res=0 errno=0
[  114.152670][   T10] usb 3-1: Using ep0 maxpacket: 8
[  114.161697][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.174070][   T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  114.178491][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.181004][   T10] usb 3-1: Product: syz
[  114.191769][   T10] usb 3-1: Manufacturer: syz
[  114.193622][   T10] usb 3-1: SerialNumber: syz
[  114.210802][   T10] usb 3-1: config 0 descriptor??
[  114.218135][   T10] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  114.264585][ T7280] capability: warning: `syz.1.480' uses deprecated v2 capabilities in a way that may be insecure
[  114.417835][   T47] usb 3-1: USB disconnect, device number 8
[  114.438967][ T7282] loop1: detected capacity change from 0 to 32768
[  114.477701][ T7282] (syz.1.481,7282,0):ocfs2_check_set_options:1252 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[  114.484236][ T7282] (syz.1.481,7282,0):ocfs2_fill_super:1177 ERROR: status = -22
[  114.576532][ T7282] syz.1.481: attempt to access beyond end of device
[  114.576532][ T7282] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  115.641620][   T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  115.660535][ T7313] netlink: 'syz.0.495': attribute type 5 has an invalid length.
[  115.801716][   T47] usb 3-1: Using ep0 maxpacket: 8
[  115.810543][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[  115.816003][   T47] usb 3-1: config 7 has an invalid interface number: 67 but max is 0
[  115.819082][   T47] usb 3-1: config 7 has no interface number 0
[  115.841676][   T47] usb 3-1: string descriptor 0 read error: -22
[  115.844279][   T47] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  115.847846][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.066281][ T7333] netlink: 'syz.0.504': attribute type 1 has an invalid length.
[  116.067472][ T5859] usb 3-1: USB disconnect, device number 9
[  116.069296][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'.
[  116.251674][   T47] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  116.411926][   T47] usb 2-1: Using ep0 maxpacket: 32
[  116.464829][   T47] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  116.468080][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.471142][   T47] usb 2-1: Product: syz
[  116.473659][   T47] usb 2-1: Manufacturer: syz
[  116.475312][   T47] usb 2-1: SerialNumber: syz
[  116.478737][   T47] usb 2-1: config 0 descriptor??
[  116.693561][   T47] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device:
[  116.696380][   T47] eb 9a 47 80 9b f8 7a f0 
[  116.697862][   T47] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  116.895895][   T10] usb 2-1: USB disconnect, device number 13
[  117.000329][ T7343] loop2: detected capacity change from 0 to 32768
[  117.014992][ T7343] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  117.027786][ T7343] XFS (loop2): Ending clean mount
[  117.042586][   T33] audit: type=1800 audit(1755549560.813:10): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.508" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  117.063094][ T5858] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  117.215769][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'.
[  117.236200][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'.
[  117.429546][ T7369] loop2: detected capacity change from 0 to 4096
[  117.435316][ T7369] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  117.464471][ T7369] ntfs3(loop2): ino=1f, "file2" failed to open parent directory r=5 to update
[  117.482550][   T28] ntfs3(loop2): ino=1f, failed to open parent directory r=5 to update
[  117.549557][ T7376] loop2: detected capacity change from 0 to 2048
[  117.556988][ T7376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.737903][ T7374] loop1: detected capacity change from 0 to 32768
[  117.749164][ T7374] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  117.775982][   T33] audit: type=1800 audit(1755549561.543:11): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.518" name="bus" dev="loop1" ino=17058 res=0 errno=0
[  117.870206][ T7378] loop2: detected capacity change from 0 to 32768
[  118.241843][ T7378] bcachefs (loop2): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,compression=lz4
[  118.241856][ T7378]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  118.252658][ T7378] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  118.255897][ T7378] bcachefs (loop2): recovering from clean shutdown, journal seq 8
[  118.258994][ T7378] bcachefs (loop2): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  118.258994][ T7378]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  118.310963][ T7378] bcachefs (loop2): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[  118.317125][ T7378] bcachefs (loop2): check_topology... done
[  118.324838][ T7378] bcachefs (loop2): accounting_read... done
[  118.330215][ T7378] bcachefs (loop2): alloc_read... done
[  118.334326][ T7378] bcachefs (loop2): snapshots_read... done
[  118.338050][ T7378] bcachefs (loop2): check_allocations...
[  118.356303][ T7378] bcachefs (loop2): bucket 0:79 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  118.364277][ T7378] bcachefs (loop2): bucket 0:79 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing
[  118.386614][ T7378]  done
[  118.406978][ T7378] bcachefs (loop2): going read-write
[  118.421843][ T7378] bcachefs (loop2): journal_replay... done
[  118.550778][ T7378] bcachefs (loop2): check_lrus... done
[  118.556447][ T7378] bcachefs (loop2): check_backpointers_to_extents... done
[  118.578111][ T7378] bcachefs (loop2): check_extents_to_backpointers... done
[  118.591222][ T7378] bcachefs (loop2): check_inodes... done
[  118.598820][ T7378] bcachefs (loop2): resume_logged_ops... done
[  118.611369][ T7378] bcachefs (loop2): delete_dead_inodes... done
[  118.625519][ T7378] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[  118.632620][ T7378] bcachefs (loop2): check_extents_to_backpointers...
[  118.645557][ T7378] bcachefs (loop2): scanning for missing backpointers in 1/512 buckets
[  118.668333][ T7378]  done
[  118.679971][ T7378] bcachefs (loop2): check_inodes... done
[  118.699495][ T7378] bcachefs (loop2): resume_logged_ops... done
[  118.706801][ T7378] bcachefs (loop2): delete_dead_inodes... done
[  118.720937][ T7378] bcachefs (loop2): done starting filesystem
[  118.846560][   T33] audit: type=1800 audit(1755549562.613:12): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.521" name="file1" dev="loop2" ino=4101 res=0 errno=0
[  118.848935][ T7378] syz.2.521 (7378) used greatest stack depth: 12824 bytes left
[  118.910386][ T5858] bcachefs (loop2): shutting down
[  118.913139][ T5858] bcachefs (loop2): going read-only
[  118.914957][ T5858] bcachefs (loop2): finished waiting for writes to stop
[  118.918506][ T5858] bcachefs (loop2): flushing journal and stopping allocators, journal seq 18
[  118.945275][ T5858] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 19
[  118.950151][ T5858] bcachefs (loop2): clean shutdown complete, journal seq 20
[  118.957493][ T5858] bcachefs (loop2): marking filesystem clean
[  119.049014][ T5858] bcachefs (loop2): shutdown complete
[  119.589361][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'.
[  119.622430][ T7426] autofs: Bad value for 'fd'
[  119.705927][ T5856] ocfs2: Unmounting device (7,1) on (node local)
[  120.079242][ T7443] loop1: detected capacity change from 0 to 32768
[  120.224087][ T7443] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  120.224100][ T7443]   allowing incompatible features above 0.0: (unknown version)
[  120.224106][ T7443]   features: 
[  120.235299][ T7443] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  120.238440][ T7443] bcachefs (loop1): initializing new filesystem
[  120.248382][ T7443] bcachefs (loop1): going read-write
[  120.264859][ T7443] bcachefs (loop1): marking superblocks
[  120.277923][ T7443] bcachefs (loop1): initializing freespace
[  120.284432][ T7443] bcachefs (loop1): done initializing freespace
[  120.289358][ T7443] bcachefs (loop1): reading snapshots table
[  120.291901][ T7443] bcachefs (loop1): reading snapshots done
[  120.323241][ T7443] bcachefs (loop1): done starting filesystem
[  120.410258][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'.
[  120.456128][ T5856] bcachefs (loop1): shutting down
[  120.458223][ T5856] bcachefs (loop1): going read-only
[  120.460521][ T5856] bcachefs (loop1): finished waiting for writes to stop
[  120.471913][ T5856] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  120.882457][ T5856] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  120.890949][ T5856] bcachefs (loop1): clean shutdown complete, journal seq 4
[  120.895626][ T5856] bcachefs (loop1): marking filesystem clean
[  121.236682][ T5856] bcachefs (loop1): shutdown complete
[  121.653934][ T7476] fuse: Bad value for 'fd'
[  122.752694][   T33] audit: type=1326 audit(1755549566.523:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7484 comm="syz.2.558" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27c3d8ebe9 code=0x0
[  123.091719][   T47] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  123.254383][   T47] usb 2-1: unable to get BOS descriptor or descriptor too short
[  123.257491][   T47] usb 2-1: not running at top speed; connect to a high speed hub
[  123.261247][   T47] usb 2-1: config 6 has an invalid interface number: 208 but max is 0
[  123.265065][   T47] usb 2-1: config 6 has no interface number 0
[  123.266976][   T47] usb 2-1: config 6 interface 208 has no altsetting 0
[  123.271207][   T47] usb 2-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=23.c2
[  123.274692][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.277882][   T47] usb 2-1: Product: syz
[  123.279539][   T47] usb 2-1: Manufacturer: syz
[  123.281406][   T47] usb 2-1: SerialNumber: syz
[  123.499332][   T47] qmi_wwan 2-1:6.208: invalid descriptor buffer length
[  123.502119][   T47] qmi_wwan 2-1:6.208: probe with driver qmi_wwan failed with error -22
[  123.508652][   T47] usb 2-1: USB disconnect, device number 14
[  124.220539][ T7499] loop1: detected capacity change from 0 to 128
[  124.228193][ T7499] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  124.238116][ T7499] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  124.366899][ T7500] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400)
[  124.372700][ T7500] FAT-fs (loop1): Filesystem has been set read-only
[  125.566495][ T7514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.881603][ T5919] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  126.032910][ T5919] usb 2-1: Using ep0 maxpacket: 16
[  126.036191][ T5919] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  126.038906][ T5919] usb 2-1: config 0 has no interface number 0
[  126.040975][ T5919] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  126.046461][ T5919] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  126.052908][ T5919] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  126.055967][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.059149][ T5919] usb 2-1: Product: syz
[  126.063827][ T5919] usb 2-1: Manufacturer: syz
[  126.065306][ T5919] usb 2-1: SerialNumber: syz
[  126.073777][ T5919] usb 2-1: config 0 descriptor??
[  126.077607][ T5919] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected
[  126.293310][ T5919] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[  126.300290][ T5919] usb 2-1: USB disconnect, device number 15
[  126.308299][ T5919] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[  126.313939][ T5919] cypress_m8 2-1:0.35: device disconnected
[  126.513716][ T7552] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  126.516607][ T7552] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  126.519409][ T7552] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  126.525159][ T7552] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  126.527987][ T7552] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  126.530814][ T7552] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  126.534774][ T7552] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  126.537549][ T7552] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  126.540332][ T7552] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  126.550041][ T7552] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[  126.635446][ T7558] 9pnet_fd: Insufficient options for proto=fd
[  126.716394][ T7564] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  126.729449][ T7554] loop2: detected capacity change from 0 to 32768
[  126.730652][ T7564] CIFS mount error: No usable UNC path provided in device string!
[  126.730652][ T7564] 
[  126.744874][ T7564] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  126.756861][ T7554] read_mapping_page failed!
[  126.758951][ T7554] ERROR: (device loop2): txCommit: 
[  126.758951][ T7554] 
[  126.787432][  T115] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  126.793232][  T115] ------------[ cut here ]------------
[  126.795342][  T115] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  126.799773][  T115] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  126.803305][  T115] CPU: 0 UID: 0 PID: 115 Comm: jfsCommit Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  126.807990][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.811821][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  126.813766][  T115] Code: e5 fd 90 0f 0b e8 51 39 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba a3 03 00 00 48 c7 c1 60 28 c4 8b e8 42 2d e5 fd 90 <0f> 0b e8 2a 39 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba
[  126.821030][  T115] RSP: 0018:ffffc90001c7fbc8 EFLAGS: 00010246
[  126.823437][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 1be866a1dde6ea00
[  126.826449][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  126.829431][  T115] RBP: ffffc90001f720d8 R08: ffffc90001c7f8e7 R09: 1ffff9200038ff1c
[  126.832444][  T115] R10: dffffc0000000000 R11: fffff5200038ff1d R12: dffffc0000000000
[  126.835428][  T115] R13: 1ffff11022856a34 R14: ffff8881142b51a0 R15: 0000000000000000
[  126.838461][  T115] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  126.841917][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  126.844443][  T115] CR2: 00007ffef082dd28 CR3: 000000012355e000 CR4: 00000000000006f0
[  126.847567][  T115] Call Trace:
[  126.848873][  T115]  <TASK>
[  126.850031][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.852056][  T115]  jfs_lazycommit+0x584/0xa90
[  126.853865][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  126.855878][  T115]  ? __pfx_default_wake_function+0x10/0x10
[  126.858130][  T115]  ? __kthread_parkme+0x7b/0x200
[  126.860022][  T115]  ? __kthread_parkme+0x1a1/0x200
[  126.861960][  T115]  kthread+0x711/0x8a0
[  126.863501][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  126.865531][  T115]  ? __pfx_kthread+0x10/0x10
[  126.867289][  T115]  ? _raw_spin_unlock_irq+0x23/0x50
[  126.869313][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.871301][  T115]  ? __pfx_kthread+0x10/0x10
[  126.873119][  T115]  ret_from_fork+0x3fc/0x770
[  126.874938][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[  126.876942][  T115]  ? __switch_to_asm+0x39/0x70
[  126.878799][  T115]  ? __switch_to_asm+0x33/0x70
[  126.880623][  T115]  ? __pfx_kthread+0x10/0x10
[  126.882390][  T115]  ret_from_fork_asm+0x1a/0x30
[  126.884234][  T115]  </TASK>
[  126.885327][  T115] Modules linked in:
[  126.887741][  T115] ---[ end trace 0000000000000000 ]---
[  126.894583][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  126.896482][  T115] Code: e5 fd 90 0f 0b e8 51 39 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba a3 03 00 00 48 c7 c1 60 28 c4 8b e8 42 2d e5 fd 90 <0f> 0b e8 2a 39 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba
[  126.915438][  T115] RSP: 0018:ffffc90001c7fbc8 EFLAGS: 00010246
[  126.917671][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 1be866a1dde6ea00
[  126.920425][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  126.924695][  T115] RBP: ffffc90001f720d8 R08: ffffc90001c7f8e7 R09: 1ffff9200038ff1c
[  126.927582][  T115] R10: dffffc0000000000 R11: fffff5200038ff1d R12: dffffc0000000000
[  126.930379][  T115] R13: 1ffff11022856a34 R14: ffff8881142b51a0 R15: 0000000000000000
[  126.933903][  T115] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  126.937095][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  126.939205][  T115] CR2: 000055556566f5c8 CR3: 00000000285c8000 CR4: 00000000000006f0
[  126.942126][  T115] Kernel panic - not syncing: Fatal exception
[  126.944607][  T115] Kernel Offset: disabled
[  126.946352][  T115] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:39:30  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000004f RBX=000000000000004f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90001c7f310
R8 =ffff888020c70237 R9 =1ffff1100418e046 R10=dffffc0000000000 R11=ffffffff854f00f0
R12=dffffc0000000000 R13=ffffffff99af98d8 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f016c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffef082dd28 CR3=000000012355e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=fff1aff00019eaff b9c2b7cffddad57f
XMM02=cd80040e0174e074 88f7a2ffff000005 XMM03=10000202000e8004 22a010000180040f
XMM04=ffffffffef082480 031f9d80040fccea XMM05=0106100002800404 0176e00031656c69
XMM06=662f2e01ffffffff ffffffffef080280 XMM07=0305fcf210002480 04040176e0003165
XMM08=6c69662f2e01ffff ffffffffffffef08 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d4b RBX=1ffff11009608341 RCX=ffff8881012b8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900006ef7e0 RSP=ffffc900006ef658
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81bfabc7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f290c4e56c0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f290b812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
