last executing test programs:

2.380402697s ago: executing program 2 (id=596):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
listen(r0, 0xd)

2.377923311s ago: executing program 0 (id=597):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setreuid(0xee01, 0xee01)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)

2.260118263s ago: executing program 0 (id=599):
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x36, 0x3c, 0x67, 0x0, 0x1, 0x84, 0x0, @remote, @broadcast}, "c2c1541ed8440387890dc65907a0ee14adb0f8c0727abed1d97b69f5cb9078ae53b14c7de80b7b94"}}}}, 0x0)

2.199972408s ago: executing program 0 (id=600):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
close(r0)

2.079865278s ago: executing program 0 (id=601):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@discard_size={'discard', 0x3d, 0x3}}, {@gid}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x6261, &(0x7f0000007fc0)="$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")
mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, 0x0)

1.839654069s ago: executing program 0 (id=604):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES8], 0x43, 0xc18, &(0x7f0000001940)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x1bfc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105442, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0)
write$FUSE_LK(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, {{0x9, 0x1000001, 0x2}}}, 0x28)

1.780138092s ago: executing program 1 (id=605):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x1, r2})
close_range(r0, 0xffffffffffffffff, 0x0)

1.709928177s ago: executing program 1 (id=606):
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x0, 0x0})

1.659306731s ago: executing program 1 (id=607):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x1, 0x85}]}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)

1.588208291s ago: executing program 0 (id=608):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_usb_ep_write(r0, 0x8d, 0xe, &(0x7f0000000340)="d0be166e5e8b26a5e6b39aa93e00")

1.587977975s ago: executing program 1 (id=609):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setgroups(0x0, 0x0)
getgroups(0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
setgroups(0x1, &(0x7f00000000c0)=[0x0])
setregid(0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5e)

1.2189513s ago: executing program 2 (id=610):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10)
stat(0x0, 0x0)

1.009874223s ago: executing program 2 (id=611):
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0)

847.519565ms ago: executing program 2 (id=612):
r0 = syz_open_dev$video(&(0x7f00000000c0), 0x10000a7, 0x440)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xe, 0x32315659, 0x0, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x0, 0x2, 0x2}})

649.491417ms ago: executing program 2 (id=613):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x1, 0x44f, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)

388.164666ms ago: executing program 2 (id=614):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb703000000000000b703000000000000850000000400000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

90.222947ms ago: executing program 1 (id=615):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

0s ago: executing program 1 (id=616):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48583' (ED25519) to the list of known hosts.
syzkaller login: [   48.039589][ T5806] cgroup: Unknown subsys name 'net'
[   48.100546][ T5806] cgroup: Unknown subsys name 'cpuset'
[   48.104633][ T5806] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.453619][ T5806] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.739834][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.743510][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.746840][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.750179][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.753966][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.757554][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.760450][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.763841][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.764261][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.766857][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.773057][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.776260][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.779491][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.783390][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.787467][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.115187][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   54.166838][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   54.172493][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   54.254734][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.259600][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.262875][ T5852] bridge_slave_0: entered allmulticast mode
[   54.266590][ T5852] bridge_slave_0: entered promiscuous mode
[   54.290276][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.293211][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.296159][ T5852] bridge_slave_1: entered allmulticast mode
[   54.300714][ T5852] bridge_slave_1: entered promiscuous mode
[   54.361436][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.364549][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.367960][ T5843] bridge_slave_0: entered allmulticast mode
[   54.371541][ T5843] bridge_slave_0: entered promiscuous mode
[   54.389894][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.392267][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.394713][ T5845] bridge_slave_0: entered allmulticast mode
[   54.397567][ T5845] bridge_slave_0: entered promiscuous mode
[   54.401016][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.404041][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.407449][ T5843] bridge_slave_1: entered allmulticast mode
[   54.411138][ T5843] bridge_slave_1: entered promiscuous mode
[   54.429072][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.432889][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.435446][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.438689][ T5845] bridge_slave_1: entered allmulticast mode
[   54.441637][ T5845] bridge_slave_1: entered promiscuous mode
[   54.462877][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.467973][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.484809][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.528091][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.541819][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.546772][ T5843] team0: Port device team_slave_0 added
[   54.550457][ T5852] team0: Port device team_slave_0 added
[   54.553786][ T5843] team0: Port device team_slave_1 added
[   54.579756][ T5852] team0: Port device team_slave_1 added
[   54.630794][ T5845] team0: Port device team_slave_0 added
[   54.634022][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.636865][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.646190][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.650828][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.653797][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.664945][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.672258][ T5845] team0: Port device team_slave_1 added
[   54.675332][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.679151][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.689452][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.694308][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.697479][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.708576][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.778295][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.781041][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.790932][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.806018][ T5843] hsr_slave_0: entered promiscuous mode
[   54.809144][ T5843] hsr_slave_1: entered promiscuous mode
[   54.811971][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.814560][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.823330][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.831034][ T5852] hsr_slave_0: entered promiscuous mode
[   54.833376][ T5852] hsr_slave_1: entered promiscuous mode
[   54.835575][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   54.838204][ T5852] Cannot create hsr debugfs directory
[   54.898526][ T5845] hsr_slave_0: entered promiscuous mode
[   54.900887][ T5845] hsr_slave_1: entered promiscuous mode
[   54.903040][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   54.904936][ T5845] Cannot create hsr debugfs directory
[   55.119401][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.127594][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.132977][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.146574][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.181593][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.190943][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.204819][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.210864][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.276630][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.283493][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.291079][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.296372][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.341740][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.379057][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   55.392392][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.394676][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.403625][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.405934][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.429606][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.469029][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.477950][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   55.493588][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   55.509732][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.511994][ T4635] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.515762][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.518766][ T4635] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.528437][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.531379][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.552739][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.556142][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.672128][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.729102][ T5843] veth0_vlan: entered promiscuous mode
[   55.736166][ T5843] veth1_vlan: entered promiscuous mode
[   55.792467][ T5843] veth0_macvtap: entered promiscuous mode
[   55.808392][ T5843] veth1_macvtap: entered promiscuous mode
[   55.835744][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.848167][ T5236] Bluetooth: hci1: command tx timeout
[   55.848538][ T5851] Bluetooth: hci0: command tx timeout
[   55.850511][ T5850] Bluetooth: hci2: command tx timeout
[   55.856180][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.863005][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.882000][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.886953][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.892286][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.900644][ T5878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.916992][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.982086][ T5845] veth0_vlan: entered promiscuous mode
[   55.996456][ T5845] veth1_vlan: entered promiscuous mode
[   56.006207][ T5852] veth0_vlan: entered promiscuous mode
[   56.008489][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.015636][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.044655][ T4635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.045437][ T5852] veth1_vlan: entered promiscuous mode
[   56.049226][ T4635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.079719][ T5845] veth0_macvtap: entered promiscuous mode
[   56.099032][ T5845] veth1_macvtap: entered promiscuous mode
[   56.112007][ T5852] veth0_macvtap: entered promiscuous mode
[   56.114403][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.119119][ T5852] veth1_macvtap: entered promiscuous mode
[   56.144408][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.173220][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.181076][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.192509][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.208685][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.223160][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.231592][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.235316][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.243552][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.272137][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.290048][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.321835][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.388372][  T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.391507][  T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.439365][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.442652][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.473579][  T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.476924][  T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.481516][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.492984][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.592577][ T5929] loop0: detected capacity change from 0 to 512
[   56.596783][ T5929] EXT4-fs: Ignoring removed nomblk_io_submit option
[   56.601789][ T5929] EXT4-fs: Ignoring removed bh option
[   56.608255][ T5929] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   56.639489][ T5929] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[   56.661264][ T5929] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.1: corrupted inode contents
[   56.668259][ T5929] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #11: comm syz.0.1: mark_inode_dirty error
[   56.673835][ T5929] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1: invalid indirect mapped block 1 (level 1)
[   56.682952][ T5929] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.1: corrupted inode contents
[   56.690764][ T5929] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   56.694712][ T5929] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.1: corrupted inode contents
[   56.704232][ T5929] EXT4-fs error (device loop0): ext4_truncate:4666: inode #11: comm syz.0.1: mark_inode_dirty error
[   56.710484][ T5929] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   56.714707][ T5929] EXT4-fs (loop0): 1 truncate cleaned up
[   56.721233][ T5929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.751127][ T5929] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.1: path /0/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[   56.794430][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.028253][ T5899] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   57.180906][ T5899] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[   57.183676][ T5899] usb 2-1: config 179 has no interface number 0
[   57.190813][ T5899] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[   57.194393][ T5899] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[   57.202126][ T5899] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   57.206040][ T5899] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64
[   57.210155][ T5899] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   57.215050][ T5899] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   57.224642][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.238255][ T5939] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   57.257303][ T5939] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   57.351421][ T5969] loop0: detected capacity change from 0 to 256
[   57.365295][ T5969] FAT-fs (loop0): Directory bread(block 64) failed
[   57.377474][ T5967] loop2: detected capacity change from 0 to 1024
[   57.381082][ T5969] FAT-fs (loop0): Directory bread(block 65) failed
[   57.384586][ T5969] FAT-fs (loop0): Directory bread(block 66) failed
[   57.386746][ T5969] FAT-fs (loop0): Directory bread(block 67) failed
[   57.400260][ T5969] FAT-fs (loop0): Directory bread(block 68) failed
[   57.402490][ T5969] FAT-fs (loop0): Directory bread(block 69) failed
[   57.404679][ T5969] FAT-fs (loop0): Directory bread(block 70) failed
[   57.418251][ T5969] FAT-fs (loop0): Directory bread(block 71) failed
[   57.421338][ T5969] FAT-fs (loop0): Directory bread(block 72) failed
[   57.427824][  T148] hfsplus: b-tree write err: -5, ino 4
[   57.435988][ T5969] FAT-fs (loop0): Directory bread(block 73) failed
[   57.510261][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   57.510757][ T5973] /dev/loop0: Can't open blockdev
[   57.513861][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   57.519410][ T5886] usb 2-1: USB disconnect, device number 2
[   57.699463][ T5986] loop0: detected capacity change from 0 to 2048
[   57.705602][ T5986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   57.857197][ T5899] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   57.927613][ T5850] Bluetooth: hci0: command tx timeout
[   57.929326][ T5851] Bluetooth: hci2: command tx timeout
[   57.930266][ T5236] Bluetooth: hci1: command tx timeout
[   58.027435][ T5899] usb 3-1: Using ep0 maxpacket: 8
[   58.031944][ T5899] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[   58.036128][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   58.042190][ T5899] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   58.046211][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   58.051325][ T5899] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   58.055059][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.062055][ T5899] usb 3-1: config 0 descriptor??
[   58.081508][ T5979] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   58.087347][ T5924] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   58.100957][ T5992] loop1: detected capacity change from 0 to 2048
[   58.133973][ T5857] udevd[5857]: incorrect nilfs2 checksum on /dev/loop1
[   58.135696][ T5992] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   58.141590][ T5992] NILFS (loop1): mounting unchecked fs
[   58.144476][ T5992] NILFS (loop1): recovery required for readonly filesystem
[   58.152142][ T5992] NILFS (loop1): write access will be enabled during recovery
[   58.152524][ T5857] udevd[5857]: incorrect nilfs2 checksum on /dev/loop1
[   58.162572][ T5992] NILFS (loop1): norecovery option specified, skipping roll-forward recovery
[   58.182767][ T5992] NILFS (loop1): couldn't remount because the filesystem is in an incomplete recovery state
[   58.251028][ T5924] usb 1-1: config 0 has an invalid interface number: 110 but max is 0
[   58.252082][ T5994] loop1: detected capacity change from 0 to 128
[   58.254150][ T5924] usb 1-1: config 0 has no interface number 0
[   58.261194][ T5924] usb 1-1: config 0 interface 110 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[   58.274997][ T5994] FAT-fs (loop1): invalid media value (0x00)
[   58.277568][ T5924] usb 1-1: config 0 interface 110 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10
[   58.277597][ T5924] usb 1-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   58.277612][ T5924] usb 1-1: config 0 interface 110 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   58.277646][ T5924] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=17.65
[   58.277662][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.304481][ T5924] usb 1-1: config 0 descriptor??
[   58.307937][ T5236] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[   58.307976][ T5886] usb 3-1: USB disconnect, device number 2
[   58.322204][ T5994] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   58.322556][ T5990] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   58.326065][ T5994] FAT-fs (loop1): Can't find a valid FAT filesystem
[   58.351427][ T5924] adutux 1-1:0.110: interrupt endpoints not found
[   58.638788][ T5924] usb 1-1: USB disconnect, device number 2
[   58.965436][ T5999] vlan2: entered allmulticast mode
[   58.969149][ T5999] dummy0: entered allmulticast mode
[   59.045179][ T5999] Zero length message leads to an empty skb
[   59.171993][ T6001] loop2: detected capacity change from 0 to 512
[   59.191599][ T6001] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   59.208814][ T6001] EXT4-fs (loop2): 1 truncate cleaned up
[   59.230091][ T6001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.253495][ T6001] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 5 (only 1 groups)
[   59.342919][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.464788][ T6010] loop2: detected capacity change from 0 to 128
[   59.481291][ T6010] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   59.496883][ T6010] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   59.583884][ T6015] loop0: detected capacity change from 0 to 128
[   59.604668][ T6015] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   59.612490][ T6015] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   59.632264][   T33] audit: type=1800 audit(1755283403.417:2): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.43" name="file1" dev="loop0" ino=12 res=0 errno=0
[   59.643600][ T5843] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   59.672967][ T6018] Unsupported ieee802154 address type: 0
[   59.710709][ T5845] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   59.740910][ T6020] loop2: detected capacity change from 0 to 1024
[   59.746772][ T6020] =======================================================
[   59.746772][ T6020] WARNING: The mand mount option has been deprecated and
[   59.746772][ T6020]          and is ignored by this kernel. Remove the mand
[   59.746772][ T6020]          option from the mount to silence this warning.
[   59.746772][ T6020] =======================================================
[   59.780845][ T6020] EXT4-fs: Ignoring removed oldalloc option
[   59.788401][ T6020] EXT4-fs: Ignoring removed orlov option
[   59.792049][ T6020] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   59.814580][ T6020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.906687][ T6028] [U] +H
[   59.964896][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.007789][ T5236] Bluetooth: hci1: command tx timeout
[   60.010135][ T5236] Bluetooth: hci0: command tx timeout
[   60.017251][ T5236] Bluetooth: hci2: command tx timeout
[   60.144783][ T6035] input: syz0 as /devices/virtual/input/input4
[   60.320165][ T6039] loop2: detected capacity change from 0 to 4096
[   60.336045][ T6039] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   60.392475][ T6039] ntfs3(loop2): ino=1d, mi_enum_attr
[   60.394478][ T6039] ntfs3(loop2): ino=1d, mi_enum_attr
[   60.427010][ T6039] ntfs3(loop2): ino=1d, mi_enum_attr
[   60.439118][ T6039] ntfs3(loop2): ino=1b, "file0" ntfs_readdir
[   60.595452][   T33] audit: type=1326 audit(1755283404.377:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.55" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0445d8ebe9 code=0x7ffc0000
[   60.619162][   T33] audit: type=1326 audit(1755283404.387:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.55" exe="/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f0445d8ebe9 code=0x7ffc0000
[   60.647875][   T33] audit: type=1326 audit(1755283404.387:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.55" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0445d8ebe9 code=0x7ffc0000
[   60.872958][ T6052] loop2: detected capacity change from 0 to 256
[   60.877265][ T5259] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   60.923867][ T6052] FAT-fs (loop2): Directory bread(block 64) failed
[   60.926618][ T6052] FAT-fs (loop2): Directory bread(block 65) failed
[   60.930161][ T6052] FAT-fs (loop2): Directory bread(block 66) failed
[   60.933068][ T6052] FAT-fs (loop2): Directory bread(block 67) failed
[   60.936039][ T6052] FAT-fs (loop2): Directory bread(block 68) failed
[   60.939891][ T6052] FAT-fs (loop2): Directory bread(block 69) failed
[   60.942223][ T6052] FAT-fs (loop2): Directory bread(block 70) failed
[   60.944526][ T6052] FAT-fs (loop2): Directory bread(block 71) failed
[   60.946805][ T6052] FAT-fs (loop2): Directory bread(block 72) failed
[   60.950059][ T6052] FAT-fs (loop2): Directory bread(block 73) failed
[   60.979661][   T33] audit: type=1800 audit(1755283404.767:6): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.58" name="file1" dev="loop2" ino=1048606 res=0 errno=0
[   61.054728][ T5259] usb 2-1: Using ep0 maxpacket: 16
[   61.074531][ T5259] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   61.079275][ T5259] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3
[   61.083022][ T5259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   61.086830][ T5259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   61.092947][ T5259] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   61.093107][ T6060] loop2: detected capacity change from 0 to 8
[   61.096211][ T5259] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   61.099471][ T5259] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   61.106212][ T5259] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   61.111229][ T5259] usb 2-1: Manufacturer: syz
[   61.114998][ T5259] usb 2-1: config 0 descriptor??
[   61.142877][ T6060] unable to read fragment index table
[   61.341485][ T5886] usb 2-1: USB disconnect, device number 3
[   61.386609][ T6065] loop0: detected capacity change from 0 to 2048
[   61.394509][ T6065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   61.467604][ T5259] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   61.688822][ T5259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   61.692884][ T5259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[   61.696694][ T5259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   61.755114][ T5259] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[   61.758935][ T5259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.762530][ T5259] usb 3-1: Product: syz
[   61.764405][ T5259] usb 3-1: Manufacturer: syz
[   61.766450][ T5259] usb 3-1: SerialNumber: syz
[   61.791563][ T5259] usb 3-1: config 0 descriptor??
[   62.081117][ T5879] usb 3-1: USB disconnect, device number 3
[   62.087983][ T5850] Bluetooth: hci0: command tx timeout
[   62.088006][ T5851] Bluetooth: hci1: command tx timeout
[   62.089801][ T5236] Bluetooth: hci2: command tx timeout
[   62.257314][ T5259] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   62.417221][ T5259] usb 2-1: Using ep0 maxpacket: 32
[   62.424906][ T5259] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[   62.428675][ T5259] usb 2-1: config 0 has no interface number 0
[   62.439616][ T5259] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[   62.447261][ T5259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.457165][ T5259] usb 2-1: Product: syz
[   62.458848][ T5259] usb 2-1: Manufacturer: syz
[   62.460731][ T5259] usb 2-1: SerialNumber: syz
[   62.464424][ T5259] usb 2-1: config 0 descriptor??
[   62.580804][ T6079] loop0: detected capacity change from 0 to 32768
[   62.597681][ T6079] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.70 (6079)
[   62.625169][ T6079] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   62.629071][ T6079] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   62.632248][ T6079] BTRFS info (device loop0): using free-space-tree
[   62.671816][ T5259] radio-si470x 2-1:0.35: this is not a si470x device.
[   62.698292][ T5259] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[   62.720488][ T6079] BTRFS info (device loop0): rebuilding free space tree
[   62.726345][ T5259] usb 2-1: USB disconnect, device number 4
[   62.742162][ T6079] BTRFS info (device loop0): checking UUID tree
[   62.780277][   T33] audit: type=1804 audit(1755283406.567:7): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.70" name="/newroot/31/bus/bus" dev="loop0" ino=263 res=1 errno=0
[   63.263517][ T6117] capability: warning: `syz.1.79' uses deprecated v2 capabilities in a way that may be insecure
[   63.308373][ T6079] syz.0.70 (6079) used greatest stack depth: 19224 bytes left
[   63.351167][ T5845] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   63.443671][ T6119] loop1: detected capacity change from 0 to 32768
[   63.496859][ T6121] netlink: 96 bytes leftover after parsing attributes in process `syz.0.81'.
[   63.674104][ T6132] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.678324][   T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   64.086760][   T24] usb 3-1: unable to read config index 0 descriptor/start: -71
[   64.093634][   T24] usb 3-1: can't read configurations, error -71
[   64.123674][ T6134] loop1: detected capacity change from 0 to 32768
[   64.145478][ T6134] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   64.166508][ T6134] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   64.242223][ T5852] ocfs2: Unmounting device (7,1) on (node local)
[   64.633191][ T6153] loop1: detected capacity change from 0 to 512
[   64.643506][ T6153] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   64.655329][ T6153] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   64.665663][ T6153] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   64.673568][ T6153] EXT4-fs (loop1): 1 truncate cleaned up
[   64.678285][ T6153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.711097][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.803618][ T6161] loop0: detected capacity change from 0 to 2048
[   64.822329][ T5857] udevd[5857]: incorrect nilfs2 checksum on /dev/loop0
[   64.836880][ T6161] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   64.933214][ T6170] batadv_slave_1: entered promiscuous mode
[   64.936933][ T6169] batadv_slave_1: left promiscuous mode
[   65.144428][   T24] kernel write not supported for file /stat (pid: 24 comm: kworker/1:0)
[   65.308127][ T6192] loop1: detected capacity change from 0 to 128
[   65.319735][ T6192] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   65.324903][ T6192] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   65.358921][ T5852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   65.598711][ T6201] loop2: detected capacity change from 0 to 1024
[   65.624889][ T6201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.630441][ T6201] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.637466][  T975] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   65.658084][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.807412][  T975] usb 2-1: Using ep0 maxpacket: 8
[   65.812970][ T6211] loop2: detected capacity change from 0 to 2048
[   65.815661][  T975] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   65.827533][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.831640][  T975] usb 2-1: Product: syz
[   65.833334][  T975] usb 2-1: Manufacturer: syz
[   65.835205][  T975] usb 2-1: SerialNumber: syz
[   65.841409][  T975] usb 2-1: config 0 descriptor??
[   65.846330][  T975] gspca_main: se401-2.14.0 probing 047d:5003
[   65.855362][ T6211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.863442][ T6211] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.891219][ T6211] overlayfs: failed to verify upper (/file0, ino=19, err=-28)
[   65.894726][ T6211] overlayfs: failed to verify index dir 'upper' xattr
[   65.897759][ T6211] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[   65.923644][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.151492][ T6222] loop2: detected capacity change from 0 to 8192
[   66.236889][ T6226] loop2: detected capacity change from 0 to 1024
[   66.254520][ T6226] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   66.256926][  T975] gspca_se401: Wrong descriptor type
[   66.456737][ T5879] usb 2-1: USB disconnect, device number 5
[   66.503056][ T6224] loop0: detected capacity change from 0 to 32768
[   66.714625][ T6238] hub 6-0:1.0: USB hub found
[   66.718271][ T6238] hub 6-0:1.0: 1 port detected
[   67.200002][ T6243] syz.1.132 uses obsolete (PF_INET,SOCK_PACKET)
[   67.497387][ T6241] loop0: detected capacity change from 0 to 32768
[   67.503937][ T6241] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.131 (6241)
[   67.529757][ T6241] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   67.534221][ T6241] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   67.546394][ T6241] BTRFS info (device loop0): using free-space-tree
[   67.959234][ T6264] loop1: detected capacity change from 0 to 256
[   67.965083][ T6264] exfat: Deprecated parameter 'namecase'
[   67.975048][ T6264] exfat: Deprecated parameter 'namecase'
[   68.028984][ T6264] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   68.050498][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   68.470062][ T6266] loop2: detected capacity change from 0 to 32768
[   68.509680][ T6278] loop0: detected capacity change from 0 to 40427
[   68.511201][ T6266] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   68.523219][ T6278] F2FS-fs (loop0): invalid crc value
[   68.552947][ T6266] XFS (loop2): Ending clean mount
[   68.559685][ T6278] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   68.566455][ T6278] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   68.606787][ T5845] syz-executor: attempt to access beyond end of device
[   68.606787][ T5845] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   68.608844][ T5843] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   68.625838][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   68.625851][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   68.625856][ T5845] Call Trace:
[   68.625860][ T5845]  <TASK>
[   68.625864][ T5845]  dump_stack_lvl+0x189/0x250
[   68.625879][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[   68.625888][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[   68.625895][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   68.625905][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   68.625919][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[   68.625933][ T5845]  f2fs_write_end_io+0x886/0xb60
[   68.625949][ T5845]  __submit_merged_bio+0x27a/0x6a0
[   68.625962][ T5845]  __submit_merged_write_cond+0x255/0x530
[   68.625975][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[   68.626001][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   68.626043][ T5845]  ? __lock_acquire+0xab9/0xd20
[   68.626058][ T5845]  ? do_raw_spin_lock+0x121/0x290
[   68.626071][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   68.626080][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   68.626091][ T5845]  do_writepages+0x32e/0x550
[   68.626106][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   68.626116][ T5845]  filemap_fdatawrite+0x199/0x240
[   68.626128][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   68.626158][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[   68.626168][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[   68.626182][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[   68.626200][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   68.626228][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[   68.626238][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[   68.626248][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[   68.626254][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[   68.626267][ T5845]  ? shrinker_free+0x2ce/0x3e0
[   68.626276][ T5845]  deactivate_locked_super+0xbc/0x130
[   68.626286][ T5845]  cleanup_mnt+0x425/0x4c0
[   68.626294][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[   68.626305][ T5845]  task_work_run+0x1d4/0x260
[   68.626317][ T5845]  ? __pfx_task_work_run+0x10/0x10
[   68.626325][ T5845]  ? __x64_sys_umount+0x122/0x160
[   68.626337][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[   68.626349][ T5845]  exit_to_user_mode_loop+0xec/0x110
[   68.626359][ T5845]  do_syscall_64+0x2bd/0x3b0
[   68.626368][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[   68.626377][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.626384][ T5845]  ? exc_page_fault+0x9f/0xf0
[   68.626395][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.626401][ T5845] RIP: 0033:0x7fbb21b8ff17
[   68.626409][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   68.626415][ T5845] RSP: 002b:00007ffdb72402a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   68.626424][ T5845] RAX: 0000000000000000 RBX: 00007fbb21c11c05 RCX: 00007fbb21b8ff17
[   68.626429][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb7240360
[   68.626433][ T5845] RBP: 00007ffdb7240360 R08: 0000000000000000 R09: 0000000000000000
[   68.626438][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb72413f0
[   68.626442][ T5845] R13: 00007fbb21c11c05 R14: 0000000000010b7b R15: 00007ffdb7241430
[   68.626455][ T5845]  </TASK>
[   68.626459][ T5845] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   68.747206][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   68.832497][ T6298] loop2: detected capacity change from 0 to 2048
[   68.840755][ T6298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   68.917176][   T24] usb 2-1: Using ep0 maxpacket: 8
[   68.921662][   T24] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[   68.924271][   T24] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[   68.926897][   T24] usb 2-1: config 0 has no interface number 0
[   68.929150][   T24] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   68.933200][   T24] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   68.937627][ T6300] loop2: detected capacity change from 0 to 4096
[   68.943024][   T24] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   68.946828][ T6300] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   68.955057][   T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[   68.959226][   T24] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[   68.962128][   T24] usb 2-1: Product: syz
[   68.967793][   T24] usb 2-1: config 0 descriptor??
[   68.971256][ T6284] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   69.026553][ T6300] ntfs3(loop2): ino=1b, "file0" indx_read
[   69.034904][ T6302] loop0: detected capacity change from 0 to 256
[   69.044058][ T6302] FAT-fs (loop0): bogus logical sector size 65535
[   69.047203][ T6302] FAT-fs (loop0): Can't find a valid FAT filesystem
[   69.349793][ T6317] loop0: detected capacity change from 0 to 32768
[   69.380730][   T24] usb 2-1: USB disconnect, device number 6
[   69.401234][ T6318] [U] ^C
[   69.417702][  T975] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   69.440101][ T6321] syz_tun: entered promiscuous mode
[   69.444284][ T6321] syz_tun: left promiscuous mode
[   69.548869][ T6323] tmpfs: Bad value for 'mpol'
[   69.552567][ T6323] tmpfs: Bad value for 'mpol'
[   69.567576][  T975] usb 3-1: Using ep0 maxpacket: 32
[   69.580152][  T975] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   69.583509][  T975] usb 3-1: config 0 has no interface number 0
[   69.603279][  T975] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.39
[   69.606977][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.622024][  T975] usb 3-1: Product: syz
[   69.623822][  T975] usb 3-1: Manufacturer: syz
[   69.625739][  T975] usb 3-1: SerialNumber: syz
[   69.638368][  T975] usb 3-1: config 0 descriptor??
[   69.646530][  T975] smsc95xx v2.0.0
[   69.755846][ T6333] loop0: detected capacity change from 0 to 2048
[   69.768358][ T6333] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.919144][ T6337] loop0: detected capacity change from 0 to 8192
[   69.927563][ T6337] FAT-fs (loop0): bogus logical sector size 155
[   69.938861][ T6337] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   69.942665][ T6337] FAT-fs (loop0): Can't find a valid FAT filesystem
[   70.045302][  T975] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   70.052036][  T975] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   70.548960][ T6365] loop0: detected capacity change from 0 to 256
[   70.551582][ T6365] exfat: Deprecated parameter 'utf8'
[   70.659778][  T975] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[   70.677197][  T975] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   70.688342][  T975] usb 3-1: USB disconnect, device number 6
[   70.866065][ T6375] loop1: detected capacity change from 0 to 256
[   70.873274][ T6375] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[   70.931966][ T6379] loop1: detected capacity change from 0 to 1024
[   70.945501][ T6379] hfsplus: bad catalog entry used to create inode
[   70.970267][ T1090] hfsplus: b-tree write err: -5, ino 4
[   71.018130][ T5259] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   71.036219][ T6383] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[   71.051042][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.054192][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.077670][ T6385] loop1: detected capacity change from 0 to 1024
[   71.080434][ T6385] EXT4-fs: Ignoring removed nobh option
[   71.082442][ T6385] EXT4-fs: inline encryption not supported
[   71.091061][ T6385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.117374][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.167571][ T5259] usb 1-1: Using ep0 maxpacket: 8
[   71.171071][ T5259] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[   71.174614][ T5259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.180145][ T5259] usb 1-1: config 0 descriptor??
[   71.216105][ T6392] loop2: detected capacity change from 0 to 8
[   71.387581][ T5259] usb 1-1: string descriptor 0 read error: -71
[   71.394056][ T5259] usb 1-1: Found UVC 0.00 device <unnamed> (2833:0201)
[   71.398553][ T5259] usb 1-1: No valid video chain found.
[   71.404272][ T5259] usb 1-1: USB disconnect, device number 3
[   71.449332][ T6390] loop1: detected capacity change from 0 to 32768
[   71.454783][ T6390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.184 (6390)
[   71.476205][ T6390] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.479984][ T6390] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   71.483169][ T6390] BTRFS info (device loop1): using free-space-tree
[   71.560204][ T5852] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.787233][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   71.887773][   T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   71.947324][   T24] usb 3-1: Using ep0 maxpacket: 16
[   71.960798][   T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   71.964879][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.974373][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   71.982038][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   71.985676][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.995566][   T24] usb 3-1: Product: syz
[   71.997605][   T24] usb 3-1: Manufacturer: syz
[   71.999467][   T24] usb 3-1: SerialNumber: syz
[   72.043551][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   72.054053][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   72.067165][   T10] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[   72.071047][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.077833][   T10] usb 2-1: config 0 descriptor??
[   72.081348][ T6423] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   72.179330][ T6425] loop0: detected capacity change from 0 to 40427
[   72.183520][ T6425] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   72.186118][ T6425] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   72.212210][ T6425] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   72.271535][ T6425] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   72.278499][ T6425] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   72.281039][ T6425] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   72.413312][   T24] usb 3-1: 0:2 : does not exist
[   72.497928][   T10] hid (null): report_id 57294 is invalid
[   72.507861][   T10] asus 0003:0B05:18C6.0001: collection stack underflow
[   72.510234][   T10] asus 0003:0B05:18C6.0001: item 0 1 0 12 parsing failed
[   72.512857][   T10] asus 0003:0B05:18C6.0001: Asus hid parse failed: -22
[   72.515156][   T10] asus 0003:0B05:18C6.0001: probe with driver asus failed with error -22
[   72.543764][ T6431] loop0: detected capacity change from 0 to 4096
[   72.561802][ T6432] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   72.589166][   T33] audit: type=1804 audit(1755283416.377:8): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.194" name="/newroot/76/file0/file1" dev="loop0" ino=15 res=1 errno=0
[   72.656159][ T6431] syz.0.194 (6431) used greatest stack depth: 18744 bytes left
[   72.712335][ T6434] loop0: detected capacity change from 0 to 128
[   72.715705][ T5259] usb 2-1: USB disconnect, device number 7
[   72.727930][ T6434] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   72.734181][ T6434] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   72.762603][ T5845] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   73.215190][ T6442] ptrace attach of "/syz-executor exec"[5845] was attempted by "/syz-executor exec"[6442]
[   73.426602][   T24] usb 3-1: USB disconnect, device number 7
[   73.805702][ T6457] loop0: detected capacity change from 0 to 1764
[   73.833423][ T6459] loop1: detected capacity change from 0 to 1024
[   73.834030][ T6457] iso9660: Corrupted directory entry in block 2 of inode 1920
[   73.845134][ T6459] EXT4-fs (loop1): Test dummy encryption mode enabled
[   73.854497][ T6459] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled
[   73.873913][ T6459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.908997][ T6462] loop0: detected capacity change from 0 to 2048
[   73.921395][ T6462] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   73.924592][ T6462] NILFS (loop0): mounting unchecked fs
[   73.928926][ T5857] udevd[5857]: incorrect nilfs2 checksum on /dev/loop0
[   73.937752][ T6459] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   73.937795][ T5857] udevd[5857]: incorrect nilfs2 checksum on /dev/loop0
[   73.946688][ T6462] NILFS (loop0): recovery complete
[   73.953113][ T6466] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   73.985538][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.125591][ T6468] loop2: detected capacity change from 0 to 32768
[   74.134370][ T6468] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.207 (6468)
[   74.163382][ T6468] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   74.177227][ T6468] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   74.180374][ T6468] BTRFS info (device loop2): using free-space-tree
[   74.285837][ T5843] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   74.287133][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   74.438022][   T10] usb 1-1: Using ep0 maxpacket: 32
[   74.443582][   T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[   74.446904][   T10] usb 1-1: config 0 has no interface number 0
[   74.450458][   T10] usb 1-1: config 0 interface 196 has no altsetting 0
[   74.454961][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[   74.459019][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.461993][   T10] usb 1-1: Product: syz
[   74.463417][   T10] usb 1-1: Manufacturer: syz
[   74.465054][   T10] usb 1-1: SerialNumber: syz
[   74.472010][   T10] usb 1-1: config 0 descriptor??
[   74.679530][   T10] ipheth 1-1:0.196: Unable to find endpoints
[   74.687013][   T10] usb 1-1: USB disconnect, device number 4
[   74.747195][ T5924] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   74.897267][ T5924] usb 3-1: Using ep0 maxpacket: 16
[   74.909256][ T5924] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[   74.912857][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.915718][ T5924] usb 3-1: Product: syz
[   74.927167][ T5924] usb 3-1: Manufacturer: syz
[   74.929177][ T5924] usb 3-1: SerialNumber: syz
[   74.933691][ T5924] usb 3-1: config 0 descriptor??
[   74.939376][ T5924] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[   75.148732][ T6507] netlink: 'syz.1.216': attribute type 10 has an invalid length.
[   75.149836][ T5924] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71
[   75.165426][ T5924] usb 3-1: USB disconnect, device number 8
[   75.192080][ T6507] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   75.339448][ T6518] loop1: detected capacity change from 0 to 16
[   75.342744][ T6518] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   76.684123][ T6554] loop2: detected capacity change from 0 to 128
[   76.727195][ T6554] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   77.116239][ T6558] loop2: detected capacity change from 0 to 1024
[   77.414190][ T6566] loop1: detected capacity change from 0 to 32768
[   77.420483][ T6566] XFS: noikeep mount option is deprecated.
[   77.484620][ T6566] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   77.503287][ T6566] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   77.515294][ T6566] XFS (loop1): Starting recovery (logdev: internal)
[   77.531207][ T6566] XFS (loop1): Ending recovery (logdev: internal)
[   77.573853][ T5852] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   77.708631][ T6570] loop0: detected capacity change from 0 to 131072
[   77.717601][ T6570] F2FS-fs (loop0): invalid crc value
[   77.751852][ T6570] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   77.758225][ T6570] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   77.782640][   T33] audit: type=1800 audit(1755283421.567:9): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.243" name="file1" dev="loop0" ino=7 res=0 errno=0
[   78.233339][ T6593] comedi comedi0: Minor 5 could not be opened
[   78.272796][ T6591] loop2: detected capacity change from 0 to 32768
[   78.276836][ T6591] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.248 (6591)
[   78.290009][ T6591] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   78.294163][ T6591] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   78.299463][ T6591] BTRFS info (device loop2): using free-space-tree
[   78.326639][ T6599] loop0: detected capacity change from 0 to 512
[   78.330279][ T6599] EXT4-fs: Ignoring removed i_version option
[   78.333548][ T6599] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   78.373718][ T6599] EXT4-fs (loop0): 1 truncate cleaned up
[   78.378145][ T6599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.706513][ T5843] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   79.006095][ T6620] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   79.008380][ T6620] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   79.012134][ T6620] vhci_hcd vhci_hcd.0: Device attached
[   79.018887][ T6621] vhci_hcd: connection closed
[   79.020883][ T5878] vhci_hcd: stop threads
[   79.027557][ T5878] vhci_hcd: release socket
[   79.029158][ T5878] vhci_hcd: disconnect device
[   79.624733][ T6624] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[   79.653284][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.676539][ T6626] loop1: detected capacity change from 0 to 256
[   79.785931][ T6633] Bluetooth: MGMT ver 1.23
[   79.988871][ T6630] loop2: detected capacity change from 0 to 32768
[   80.002226][ T6630] ERROR: (device loop2): xtTruncate_pmap: xt_getpage: xtree page corrupt
[   80.002226][ T6630] 
[   80.010976][ T6630] ERROR: (device loop2): remounting filesystem as read-only
[   80.014282][ T6630] ERROR: (device loop2): jfs_rename: 
[   80.014282][ T6630] 
[   80.025384][ T6635] loop0: detected capacity change from 0 to 40427
[   80.035983][ T5843] ERROR: (device loop2): xtTruncate: xt_getpage: xtree page corrupt
[   80.035983][ T5843] 
[   80.073562][ T6635] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   80.076802][ T6635] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   80.082484][ T6635] F2FS-fs (loop0): invalid crc value
[   80.148971][ T6635] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   80.155283][ T6635] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   80.160114][ T6635] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   80.167166][ T5259] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   80.201359][ T6646] fuse: root generation should be zero
[   80.323566][ T5259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.338504][ T5259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.343112][ T5259] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   80.350503][ T5259] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   80.359146][ T5259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.368217][ T5259] usb 2-1: config 0 descriptor??
[   80.499380][ T6662] @: renamed from bond_slave_0 (while UP)
[   80.751832][ T6680] loop0: detected capacity change from 0 to 4096
[   80.755971][ T6680] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   80.781094][ T6680] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[   80.789269][ T5259] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   80.791806][ T5259] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   80.794246][ T5259] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   80.805394][ T5259] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   80.809205][ T5259] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   80.841263][ T5259] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   80.880076][ T6684] binder: 6683:6684 ioctl 4018620d 0 returned -22
[   80.939007][ T6685] binder: 6683:6685 ioctl c0306201 200000000540 returned -14
[   81.072067][ T5924] usb 2-1: USB disconnect, device number 8
[   81.308707][   T47] cfg80211: failed to load regulatory.db
[   81.707286][ T5259] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   81.858919][ T5259] usb 3-1: Using ep0 maxpacket: 8
[   81.913056][ T5259] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   81.916256][ T5259] usb 3-1: config 179 has no interface number 0
[   81.932089][ T5259] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   81.938143][ T5259] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   81.942017][ T5259] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   81.945791][ T5259] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   81.952504][ T5259] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   81.958282][ T5259] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   81.961357][ T5259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.978610][ T6687] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   82.222533][ T6687] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[   82.225334][ T6687] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   82.266143][ T6687] vhci_hcd vhci_hcd.0: Device attached
[   82.279923][ T6700] vhci_hcd: connection closed
[   82.280295][ T5878] vhci_hcd: stop threads
[   82.280764][   T47] usb 3-1: USB disconnect, device number 9
[   82.282365][ T5878] vhci_hcd: release socket
[   82.282385][ T5878] vhci_hcd: disconnect device
[   82.282404][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   82.282424][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   82.394055][ T6706] loop0: detected capacity change from 0 to 512
[   82.431957][ T6706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.437543][ T6706] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.485704][ T6703] loop1: detected capacity change from 0 to 32768
[   82.490434][ T6703] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.280 (6703)
[   82.526064][ T6703] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   82.530501][ T6703] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   82.533390][ T6703] BTRFS info (device loop1): using free-space-tree
[   82.600923][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.688301][ T6703] BTRFS warning (device loop1): can't clear the compat:0,compat:1 feature bits while mounted
[   82.736925][ T5852] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   82.743909][ T6725] loop0: detected capacity change from 0 to 2048
[   82.752387][ T6725] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only
[   82.953591][ T6737] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   82.976638][ T6737] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   83.040307][ T6740] loop1: detected capacity change from 0 to 1024
[   83.043436][ T6740] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   83.051573][ T5851] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   83.055249][ T5851] Bluetooth: hci0: Injecting HCI hardware error event
[   83.060090][ T5851] Bluetooth: hci0: hardware error 0x00
[   83.073438][ T6740] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.283: bg 0: block 10: padding at end of block bitmap is not set
[   83.100741][ T6740] Quota error (device loop1): write_blk: dquota write failed
[   83.111144][ T6740] Quota error (device loop1): find_free_dqentry: Can't write quota data block 2
[   83.119215][ T6740] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   83.126893][ T6740] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.283: Failed to acquire dquot type 0
[   83.139007][ T6740] Quota error (device loop1): write_blk: dquota write failed
[   83.141674][ T6740] Quota error (device loop1): find_free_dqentry: Can't write quota data block 2
[   83.145216][ T6740] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   83.150824][ T6740] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.283: Failed to acquire dquot type 0
[   83.156460][ T6740] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.283: Freeing blocks not in datazone - block = 0, count = 4096
[   83.169297][ T6740] Quota error (device loop1): write_blk: dquota write failed
[   83.173325][ T6740] Quota error (device loop1): find_free_dqentry: Can't write quota data block 2
[   83.178008][ T6740] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   83.182192][ T6740] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.283: Failed to acquire dquot type 0
[   83.192512][ T6740] EXT4-fs (loop1): 1 orphan inode deleted
[   83.196310][ T6740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.210016][ T6740] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.283: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[   83.859276][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.859436][ T6745] loop0: detected capacity change from 0 to 128
[   84.159544][ T6751] loop0: detected capacity change from 0 to 32768
[   84.167500][ T6751] JBD2: Ignoring recovery information on journal
[   84.177206][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   84.203130][ T6751] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   84.266247][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[   84.327564][   T10] usb 2-1: Using ep0 maxpacket: 32
[   84.348944][   T10] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[   84.363061][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.366220][   T10] usb 2-1: Product: syz
[   84.372762][   T10] usb 2-1: Manufacturer: syz
[   84.374781][   T10] usb 2-1: SerialNumber: syz
[   84.389092][   T10] usb 2-1: config 0 descriptor??
[   84.605053][   T10] mdc800 2-1:0.0: probe fails -> wrong Number of Configuration
[   84.614906][   T10] usb 2-1: USB disconnect, device number 9
[   84.637816][ T6779] input: syz0 as /devices/virtual/input/input6
[   84.658187][ T6782] tap0: tun_chr_ioctl cmd 1074025675
[   84.665141][ T6782] tap0: persist enabled
[   84.669909][ T6782] tap0: tun_chr_ioctl cmd 1074025675
[   84.672681][ T6782] tap0: persist enabled
[   84.734201][ T6784] use of bytesused == 0 is deprecated and will be removed in the future,
[   84.746384][ T6784] use the actual size instead.
[   85.282196][ T6789] loop0: detected capacity change from 0 to 32768
[   85.285535][ T6789] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.308 (6789)
[   85.296542][ T6789] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   85.301118][ T6789] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   85.303959][ T6789] BTRFS info (device loop0): disk space caching is enabled
[   85.306419][ T6789] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   85.366111][ T6789] BTRFS info (device loop0): rebuilding free space tree
[   85.399630][ T6789] BTRFS info (device loop0): disabling free space tree
[   85.401951][ T6789] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   85.405103][ T6789] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   85.490082][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   85.737226][ T6819] loop0: detected capacity change from 0 to 1024
[   85.745613][ T6819] EXT4-fs: Ignoring removed nobh option
[   85.751702][ T6819] EXT4-fs: Ignoring removed bh option
[   85.762969][ T6812] loop1: detected capacity change from 0 to 32768
[   85.788515][ T6812] (syz.1.311,6812,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb6731743. Applying ECC.
[   85.802297][ T6819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.809104][ T6812] (syz.1.311,6812,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   85.842295][ T6812] (syz.1.311,6812,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   85.865422][ T6812] (syz.1.311,6812,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xa7efa3e4. Applying ECC.
[   85.895700][ T6812] (syz.1.311,6812,1):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device.
[   85.911088][ T6812] (syz.1.311,6812,1):ocfs2_fill_super:1177 ERROR: status = -22
[   85.924228][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.927243][ T5851] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   86.042936][ T6831] loop0: detected capacity change from 0 to 2048
[   86.055567][ T6831] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   86.060288][ T6831] UDF-fs: Scanning with blocksize 512 failed
[   86.070772][ T6831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.368195][ T6841] loop0: detected capacity change from 0 to 32768
[   86.372766][ T6841] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.323 (6841)
[   86.390370][ T6841] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   86.394687][ T6841] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   86.404861][ T6841] BTRFS info (device loop0): using free-space-tree
[   86.534204][   T12] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[   86.572855][ T5845] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   87.202804][ T6885] loop2: detected capacity change from 0 to 2048
[   87.259195][ T6885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.277024][ T6885] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.336: inline data xattr refers to an external xattr inode
[   87.288264][ T6885] EXT4-fs (loop2): Remounting filesystem read-only
[   87.354864][ T6877] loop1: detected capacity change from 0 to 32768
[   87.363882][ T6877] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.331 (6877)
[   87.415912][ T6877] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   87.424177][ T6877] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   87.433736][ T6877] BTRFS info (device loop1): using free-space-tree
[   87.505830][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.652692][ T5852] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   88.037265][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   88.052547][ T6922] loop0: detected capacity change from 0 to 512
[   88.059351][ T6922] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   88.069760][ T6922] EXT4-fs (loop0): 1 truncate cleaned up
[   88.072819][ T6922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.094679][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.107133][   T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   88.189699][   T10] usb 2-1: config 3 has an invalid interface number: 71 but max is 0
[   88.192619][   T10] usb 2-1: config 3 has no interface number 0
[   88.199845][   T10] usb 2-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   88.203291][   T10] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac
[   88.206438][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.219812][   T10] ati_remote 2-1:3.71: ati_remote_probe: Unexpected endpoint_in
[   88.288268][   T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   88.293280][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   88.305409][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   88.309875][   T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   88.315639][   T47] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   88.319959][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.334621][   T47] usb 3-1: config 0 descriptor??
[   88.426686][   T10] usb 2-1: USB disconnect, device number 10
[   88.607188][   T24] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   88.748527][   T47] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max
[   88.756521][   T47] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   88.768143][   T24] usb 1-1: not running at top speed; connect to a high speed hub
[   88.771842][   T24] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   88.776915][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[   88.781205][   T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40
[   88.784469][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.787351][   T24] usb 1-1: Product: syz
[   88.788840][   T24] usb 1-1: Manufacturer: syz
[   88.790315][   T24] usb 1-1: SerialNumber: syz
[   88.966251][ T6938] loop1: detected capacity change from 0 to 64
[   89.016305][   T24] usbhid 1-1:1.0: can't add hid device: -71
[   89.018569][   T24] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   89.028903][   T24] usb 1-1: USB disconnect, device number 5
[   89.039403][ T6940] loop1: detected capacity change from 0 to 512
[   89.059622][ T6940] EXT4-fs (loop1): Test dummy encryption mode enabled
[   89.062933][ T6940] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   89.079136][ T6940] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.352: bad orphan inode 131083
[   89.085211][ T6940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.153025][ T6940] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   89.175064][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.258220][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'.
[   89.262624][    C1] vcan0: j1939_session_tx_dat: 0xffff88810e66b000: queue data error: -100
[   89.265462][    C1] vcan0: j1939_xtp_rx_dpo: no connection found
[   89.267745][    C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[   89.270294][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.272889][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.275613][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.278334][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.281146][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.283682][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.286221][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.288851][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.291597][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.294151][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.296763][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.299484][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.302108][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.304656][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.307343][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.309897][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.312477][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.315023][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.317715][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.320250][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.322843][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.325401][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.328082][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.330653][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.333223][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.335776][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.338452][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.340982][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.343685][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.346838][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.350123][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.353286][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.356489][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.359739][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.362946][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.366094][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.369402][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.372140][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.374730][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.377418][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.380617][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.383529][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.386111][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.388735][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.391810][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.394984][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.397857][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.400456][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.403088][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.405717][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.408445][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.411020][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.413619][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.416438][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.419224][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.421854][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.424477][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.427592][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.430531][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.433149][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.435784][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.438435][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.441192][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.444370][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.447662][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.450219][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.452821][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.455368][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.458017][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.460558][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.463288][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.465936][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.469227][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.472370][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.475121][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.477831][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.480477][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.483128][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.485761][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.488213][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.490851][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.493446][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.496688][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.499530][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.502166][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.504932][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.507935][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.510566][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.513573][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.516117][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.518777][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.521295][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.523743][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.526645][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.529978][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.533134][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.536123][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.539187][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.542334][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.545149][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.548186][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.551265][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.554179][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.557016][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.560419][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.563645][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.566478][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.569809][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.572926][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.575513][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.578881][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.581802][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.584679][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.587681][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.590208][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.592879][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.596151][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.599453][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.602603][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.605247][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.684981][ T6958] loop0: detected capacity change from 0 to 256
[   89.909045][ T6963] netlink: 240 bytes leftover after parsing attributes in process `syz.0.358'.
[   90.467164][ T5879] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[   90.547803][ T6975] could not allocate digest TFM handle sm3
[   90.627822][ T5879] usb 2-1: config 201 has an invalid interface number: 249 but max is 0
[   90.634684][ T5879] usb 2-1: config 201 has no interface number 0
[   90.639968][ T5879] usb 2-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[   90.645947][ T5879] usb 2-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[   90.651688][ T5879] usb 2-1: config 201 interface 249 has no altsetting 0
[   90.657829][ T5879] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[   90.662615][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.665466][ T5879] usb 2-1: Product: syz
[   90.666939][ T5879] usb 2-1: Manufacturer: syz
[   90.669076][ T5879] usb 2-1: SerialNumber: syz
[   90.888633][ T5879] ath6kl: Failed to submit usb control message: -71
[   90.892325][ T5879] ath6kl: unable to send the bmi data to the device: -71
[   90.895180][ T5879] ath6kl: Unable to send get target info: -71
[   90.898439][ T6988] loop0: detected capacity change from 0 to 2048
[   90.903255][ T5879] ath6kl: Failed to init ath6kl core: -71
[   90.913332][ T5879] ath6kl_usb 2-1:201.249: probe with driver ath6kl_usb failed with error -71
[   90.929395][ T6988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.930127][ T5879] usb 2-1: USB disconnect, device number 11
[   90.959570][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.018713][   T47] usb 3-1: reset high-speed USB device number 10 using dummy_hcd
[   91.026765][   T47] usb 3-1: device reset changed ep0 maxpacket size!
[   91.035610][   T24] usb 3-1: USB disconnect, device number 10
[   91.105912][ T6998] syz_tun: entered allmulticast mode
[   91.113848][ T6997] syz_tun: left allmulticast mode
[   91.177204][   T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   91.327193][   T24] usb 3-1: Using ep0 maxpacket: 8
[   91.332757][   T24] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   91.335764][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.338914][   T24] usb 3-1: Product: syz
[   91.340646][   T24] usb 3-1: Manufacturer: syz
[   91.342228][   T24] usb 3-1: SerialNumber: syz
[   91.348029][   T24] usb 3-1: config 0 descriptor??
[   91.352135][   T24] gspca_main: se401-2.14.0 probing 047d:5003
[   91.477234][ T5879] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   91.637164][ T5879] usb 1-1: Using ep0 maxpacket: 32
[   91.642328][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.646983][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.651321][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   91.656678][ T5879] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[   91.660546][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.667345][ T5924] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   91.667460][ T5879] usb 1-1: config 0 descriptor??
[   91.752733][   T24] gspca_se401: ExtraFeatures: 117
[   91.754899][   T24] gspca_se401: Too many frame sizes
[   91.818858][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.822962][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   91.828190][ T5924] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   91.831920][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   91.835121][ T5924] usb 2-1: SerialNumber: syz
[   91.958115][   T10] usb 3-1: USB disconnect, device number 11
[   92.061343][ T5924] usb 2-1: 0:2 : does not exist
[   92.072243][ T5924] usb 2-1: USB disconnect, device number 12
[   92.090304][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   92.111982][ T5879] input: HID 0458:501a as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:501A.0004/input/input7
[   92.180849][ T5879] input: HID 0458:501a as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:501A.0004/input/input8
[   92.201833][ T5879] kye 0003:0458:501A.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:501a] on usb-dummy_hcd.0-1/input0
[   92.304673][ T5879] usb 1-1: USB disconnect, device number 6
[   92.616115][ T7016] loop1: detected capacity change from 0 to 128
[   92.629198][ T7016] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[   92.640648][ T7016] hpfs: filesystem error: improperly stopped
[   92.642691][ T7016] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   92.645769][ T7016] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[   92.652152][ T7016] hpfs: You really don't want any checks? You are crazy...
[   92.656119][ T7016] hpfs: hpfs_map_sector(): read error
[   92.660340][ T7016] hpfs: code page support is disabled
[   92.664073][ T7016] hpfs: hpfs_map_sector(): read error
[   92.666451][ T7016] hpfs: hpfs_map_sector(): read error
[   92.668772][ T7016] hpfs: filesystem error: unable to find root dir
[   92.701244][ T7020] loop2: detected capacity change from 0 to 256
[   92.731217][ T7020] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[   94.113777][ T7058] loop0: detected capacity change from 0 to 64
[   94.135084][ T7056] loop1: detected capacity change from 0 to 4096
[   94.139815][ T7056] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   94.145689][ T7056] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   94.171676][ T7056] ntfs3(loop1): volume is dirty and "force" flag is not set!
[   94.209793][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'.
[   95.788049][   T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   95.961224][   T47] usb 3-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[   95.969657][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.984708][   T47] usb 3-1: config 0 descriptor??
[   95.989283][   T47] usb-storage 3-1:0.0: USB Mass Storage device detected
[   96.012169][   T47] usb-storage 3-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty)
[   96.012169][   T47]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   96.191113][ T7128] loop0: detected capacity change from 0 to 128
[   96.197875][   T47] usb 3-1: USB disconnect, device number 12
[   96.247307][ T5879] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   96.404254][ T5879] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   96.417200][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.429060][ T7140] veth0_to_bridge: entered promiscuous mode
[   96.432051][ T5879] usb 2-1: config 0 descriptor??
[   96.435263][ T7139] veth0_to_bridge: left promiscuous mode
[   96.449720][ T5879] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   96.527012][ T7142] loop0: detected capacity change from 0 to 2048
[   96.545374][ T7142] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[   96.553067][ T7142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.645969][ T7146] binder: 7145:7146 unknown command 0
[   96.650001][ T7146] binder: 7145:7146 ioctl c0306201 200000000080 returned -22
[   96.714404][ T7151] loop0: detected capacity change from 0 to 512
[   96.745747][ T7151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.757285][ T7151] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.853012][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.026858][ T7172] loop0: detected capacity change from 0 to 512
[   97.042147][ T7172] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.445: corrupted in-inode xattr: invalid ea_ino
[   97.049483][ T7172] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.445: couldn't read orphan inode 15 (err -117)
[   97.055304][ T7172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.076536][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.097203][ T6501] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[   97.265683][ T5879] usb 2-1: USB disconnect, device number 13
[   97.273331][ T7177] syz.0.447(7177): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[   97.325391][ T6501] usb 3-1: unable to get BOS descriptor or descriptor too short
[   97.330831][ T6501] usb 3-1: unable to read config index 0 descriptor/start: -71
[   97.333962][ T6501] usb 3-1: can't read configurations, error -71
[   97.448059][ T5851] Bluetooth: hci2: command tx timeout
[   97.650222][   T33] audit: type=1326 audit(1755283441.437:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.454" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb21b8ebe9 code=0x0
[   97.810054][ T7198] loop1: detected capacity change from 0 to 1024
[   97.823643][ T7198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.856850][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.986497][ T7207] loop1: detected capacity change from 0 to 1764
[   98.815876][ T7223] loop1: detected capacity change from 0 to 32768
[   98.823647][ T7226] loop0: detected capacity change from 0 to 32768
[   98.838573][ T7223] ialloc: diAlloc returned -5!
[   99.101339][ T7238] dvmrp0: tun_chr_ioctl cmd 1074025677
[   99.103804][ T7240] loop0: detected capacity change from 0 to 8
[   99.103947][ T7238] dvmrp0: linktype set to 768
[   99.122872][ T7240] SQUASHFS error: zlib decompression failed, data probably corrupt
[   99.125642][ T7240] SQUASHFS error: Failed to read block 0x4e8: -5
[   99.133635][ T7240] SQUASHFS error: zlib decompression failed, data probably corrupt
[   99.136262][ T7240] SQUASHFS error: Failed to read block 0x4ee: -5
[   99.142517][ T7240] SQUASHFS error: zlib decompression failed, data probably corrupt
[   99.145146][ T7240] SQUASHFS error: Failed to read block 0x4ef: -5
[   99.149112][   T33] audit: type=1800 audit(1755283442.937:11): pid=7240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.474" name="file1" dev="loop0" ino=5 res=0 errno=0
[   99.167298][ T5924] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   99.317165][ T5924] usb 2-1: Using ep0 maxpacket: 16
[   99.324148][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.337885][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   99.342735][ T5924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   99.345959][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.355932][ T5924] usb 2-1: Product: syz
[   99.362219][ T5924] usb 2-1: Manufacturer: syz
[   99.363838][ T5924] usb 2-1: SerialNumber: syz
[   99.374682][ T7254] loop2: detected capacity change from 0 to 256
[   99.444001][ T7256] loop2: detected capacity change from 0 to 256
[   99.559265][ T7260] loop2: detected capacity change from 0 to 1024
[   99.566025][ T7260] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[   99.577534][ T5924] usb 2-1: 0:2 : does not exist
[   99.580589][ T7260] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   99.588982][ T5924] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   99.595923][ T7260] EXT4-fs (loop2): invalid journal inode
[   99.598610][ T7260] EXT4-fs (loop2): can't get journal size
[   99.609479][ T5924] usb 2-1: USB disconnect, device number 14
[   99.612023][ T7260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   99.652958][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.668742][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.695659][ T7252] loop0: detected capacity change from 0 to 32768
[   99.713706][ T7252] (syz.0.479,7252,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.721861][ T7252] (syz.0.479,7252,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.755536][ T7252] (syz.0.479,7252,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0xb6b5285. Applying ECC.
[   99.761223][ T7252] (syz.0.479,7252,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xcde76f4d, computed 0x2b8ee4d5
[   99.772726][ T7252] (syz.0.479,7252,0):ocfs2_validate_inode_block:1455 ERROR: Checksum failed for dinode 21
[   99.776474][ T7252] (syz.0.479,7252,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[   99.783710][ T7252] (syz.0.479,7252,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5
[   99.790525][ T7252] (syz.0.479,7252,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[   99.794393][ T7252] (syz.0.479,7252,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[   99.794450][ T7252] (syz.0.479,7252,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[   99.803207][ T7252] (syz.0.479,7252,0):ocfs2_initialize_super:2198 ERROR: status = -22
[   99.806165][ T7252] (syz.0.479,7252,0):ocfs2_fill_super:1177 ERROR: status = -22
[   99.870823][ T7267] loop2: detected capacity change from 0 to 2048
[   99.874596][ T7267] UDF-fs: warning (device loop2): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount.
[   99.955801][ T7271] loop0: detected capacity change from 0 to 2048
[   99.985468][ T7271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.999272][ T7271] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.489: pblk 256 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4)
[  100.013097][ T7271] EXT4-fs (loop0): Remounting filesystem read-only
[  100.033375][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.077005][ T7277] loop2: detected capacity change from 0 to 1764
[  100.166355][ T7282] loop1: detected capacity change from 0 to 64
[  100.762280][ T7316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10
[  101.226284][ T5924] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  101.379010][ T5924] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  101.382295][ T5924] usb 2-1: config 0 has no interface number 0
[  101.386960][ T5924] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  101.390814][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.394003][ T5924] usb 2-1: Product: syz
[  101.395711][ T5924] usb 2-1: Manufacturer: syz
[  101.397783][ T5924] usb 2-1: SerialNumber: syz
[  101.401701][ T5924] usb 2-1: config 0 descriptor??
[  101.487365][ T5259] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  101.612399][ T5924] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  101.618182][ T5924] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  101.622771][ T5924] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  101.626249][ T5924] usb 2-1: media controller created
[  101.637188][ T5259] usb 3-1: Using ep0 maxpacket: 32
[  101.640993][ T5259] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  101.643678][ T5259] usb 3-1: config 0 has no interface number 0
[  101.645814][ T5259] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  101.650004][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  101.651907][ T5259] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  101.656642][ T5259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.660076][ T5259] usb 3-1: Product: syz
[  101.661479][ T5259] usb 3-1: Manufacturer: syz
[  101.663656][ T5259] usb 3-1: SerialNumber: syz
[  101.666822][ T5259] usb 3-1: config 0 descriptor??
[  101.674863][ T5259] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  101.678375][ T5259] em28xx 3-1:0.132: Video interface 132 found:
[  101.787154][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  101.826560][ T5924] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  101.845926][ T5924] usb 2-1: USB disconnect, device number 15
[  101.947207][    T9] usb 1-1: Using ep0 maxpacket: 16
[  101.953089][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.957248][    T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  101.961006][    T9] usb 1-1: config 1 has no interface number 1
[  101.963617][    T9] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  101.967624][    T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  101.972618][    T9] usb 1-1: config 1 interface 2 has no altsetting 0
[  101.978245][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  101.982077][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.985462][    T9] usb 1-1: Product: syz
[  101.988078][    T9] usb 1-1: Manufacturer: syz
[  101.990085][    T9] usb 1-1: SerialNumber: syz
[  102.072627][ T5259] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  102.203342][    T9] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  102.206469][    T9] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  102.211223][    T9] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes
[  102.214304][    T9] usb 1-1: selecting invalid altsetting 0
[  102.222545][    T9] usb 1-1: USB disconnect, device number 7
[  102.238163][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  102.279994][ T5259] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  102.283211][ T5259] em28xx 3-1:0.132: board has no eeprom
[  102.344001][ T5259] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  102.346713][ T5259] em28xx 3-1:0.132: analog set to bulk mode.
[  102.357309][   T47] em28xx 3-1:0.132: Registering V4L2 extension
[  102.363864][ T5259] usb 3-1: USB disconnect, device number 15
[  102.371235][ T5259] em28xx 3-1:0.132: Disconnecting em28xx
[  102.406527][ T7354] loop1: detected capacity change from 0 to 128
[  102.416066][ T7354] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  102.422376][ T7354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.436569][   T47] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  102.442497][   T47] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  102.444964][   T47] em28xx 3-1:0.132: No AC97 audio processor
[  102.455191][   T47] usb 3-1: Decoder not found
[  102.459193][   T47] em28xx 3-1:0.132: failed to create media graph
[  102.461347][   T47] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  102.467578][   T47] em28xx 3-1:0.132: Remote control support is not available for this card.
[  102.471297][ T5259] em28xx 3-1:0.132: Closing input extension
[  102.487283][ T5259] em28xx 3-1:0.132: Freeing device
[  102.550493][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'.
[  102.592934][ T7364] program syz.1.529 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.638350][ T7366] netlink: 'syz.1.530': attribute type 11 has an invalid length.
[  102.708821][ T7368] loop1: detected capacity change from 0 to 256
[  102.711333][ T7368] exfat: Unknown parameter ''
[  102.950583][ T7377] process 'syz.1.531' launched './file0' with NULL argv: empty string added
[  103.224189][ T7375] loop0: detected capacity change from 0 to 1024
[  103.280793][  T137] hfsplus: b-tree write err: -5, ino 4
[  103.466657][ T7393] loop2: detected capacity change from 0 to 512
[  103.496229][ T7393] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  103.519755][ T7393] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.542: attempt to clear invalid blocks 1024 len 1
[  103.539578][ T7393] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.542: invalid indirect mapped block 1819239214 (level 0)
[  103.572085][ T7393] EXT4-fs (loop2): 1 truncate cleaned up
[  103.575766][ T7393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.595243][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'.
[  103.620850][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.690728][ T7408] loop0: detected capacity change from 0 to 512
[  103.711999][ T7408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.716074][ T7408] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  103.809548][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.953792][ T7415] loop1: detected capacity change from 0 to 32768
[  103.994518][ T7415] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.015690][ T7415] XFS (loop1): Ending clean mount
[  104.022316][ T7434] loop2: detected capacity change from 0 to 512
[  104.066577][ T5852] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.086731][ T7434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.102885][ T7434] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.143555][ T7434] EXT4-fs: can't change dax mount option while remounting
[  104.184026][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.305114][ T7451] netlink: 'syz.2.562': attribute type 3 has an invalid length.
[  104.308848][ T7451] netlink: 'syz.2.562': attribute type 1 has an invalid length.
[  104.311267][ T7451] netlink: 220 bytes leftover after parsing attributes in process `syz.2.562'.
[  104.339146][ T7455] loop2: detected capacity change from 0 to 164
[  104.343279][ T7455] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  104.354895][ T7455] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  104.360746][ T7455] rock: directory entry would overflow storage
[  104.363195][ T7455] rock: sig=0x4f50, size=4, remaining=3
[  104.365209][ T7455] iso9660: Corrupted directory entry in block 4 of inode 1792
[  104.492109][ T7464] loop1: detected capacity change from 0 to 128
[  104.545788][ T7467] loop2: detected capacity change from 0 to 512
[  104.563283][ T7467] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  104.582118][ T7467] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.570: iget: bogus i_mode (5)
[  104.593686][ T7470] loop1: detected capacity change from 0 to 512
[  104.600587][ T7467] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.570: couldn't read orphan inode 15 (err -117)
[  104.610550][ T7467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.615452][ T7467] ext2 filesystem being mounted at /178/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.620735][ T7470] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.571: corrupted in-inode xattr: invalid ea_ino
[  104.626554][ T7470] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.571: couldn't read orphan inode 15 (err -117)
[  104.636472][ T7470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.651905][ T7470] EXT4-fs error (device loop1): ext4_add_entry:2417: inode #2: comm syz.1.571: Directory hole found for htree leaf block 0
[  104.662203][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.689840][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.765198][ T7453] loop0: detected capacity change from 0 to 131072
[  104.768825][ T7453] F2FS-fs (loop0): Invalid log sectors per block(570425347) log sectorsize(9)
[  104.772215][ T7453] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  104.795731][ T7453] F2FS-fs (loop0): invalid crc value
[  104.845130][ T7453] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix.
[  104.853241][ T7453] F2FS-fs (loop0): Bad quota inode 2:50331648
[  104.855245][ T7453] F2FS-fs (loop0): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[  104.858734][ T7453] F2FS-fs (loop0): Cannot turn on quotas: error -22
[  104.861158][ T7453] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  104.869156][ T7453] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  104.871571][ T7453] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[  104.966356][ T7481] loop2: detected capacity change from 0 to 128
[  104.981042][ T7483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'.
[  104.984760][ T7483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.576'.
[  104.992767][ T7481] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  105.026757][ T7481] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  105.861726][ T7509] loop0: detected capacity change from 0 to 512
[  105.884875][ T7509] EXT4-fs (loop0): 1 orphan inode deleted
[  105.889037][ T7509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.893101][ T7509] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.904542][ T7509] EXT4-fs (loop0): resizing filesystem from 64 to 1 blocks
[  105.906748][ T7509] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  105.923625][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.122006][ T7518] loop0: detected capacity change from 0 to 1024
[  106.134618][ T7518] EXT4-fs (loop0): Test dummy encryption mode enabled
[  106.156553][ T7518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.230683][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.274131][ T7521] loop2: detected capacity change from 0 to 512
[  106.289213][ T7521] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  106.293270][ T7521] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  106.296658][ T7521] FAT-fs (loop2): Filesystem has been set read-only
[  106.564504][ T7523] loop1: detected capacity change from 0 to 4096
[  107.104298][ T5259] IPVS: starting estimator thread 0...
[  107.217488][ T7530] IPVS: using max 39 ests per chain, 93600 per kthread
[  107.361435][ T7533] loop2: detected capacity change from 0 to 32768
[  107.450899][ T7534] loop1: detected capacity change from 0 to 32768
[  107.492738][ T7534] 
[  107.492738][ T7534]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.492738][ T7534] 
[  107.516612][ T7534] 
[  107.516612][ T7534]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.516612][ T7534] 
[  107.524105][ T7534] 
[  107.524105][ T7534]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.524105][ T7534] 
[  107.534058][ T7534] 
[  107.534058][ T7534]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.534058][ T7534] 
[  107.539186][ T7534] 
[  107.539186][ T7534]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.539186][ T7534] 
[  107.543320][ T7534] 
[  107.543320][ T7534]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.543320][ T7534] 
[  107.549419][ T7534] 
[  107.549419][ T7534]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.549419][ T7534] 
[  107.561622][  T115] 
[  107.561622][  T115]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.561622][  T115] 
[  107.610515][ T5852] 
[  107.610515][ T5852]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.610515][ T5852] 
[  107.627708][ T5852] 
[  107.627708][ T5852]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.627708][ T5852] 
[  107.952227][ T7552] loop1: detected capacity change from 0 to 4096
[  107.963126][ T7552] NILFS (loop1): mounting unchecked fs
[  107.975865][ T7552] NILFS (loop1): invalid segment: Checksum error in segment payload
[  107.986037][ T7552] NILFS (loop1): trying rollback from an earlier position
[  107.998257][ T7552] NILFS (loop1): recovery cancelled because norecovery option was specified for a read/write mount
[  108.034609][ T7549] loop0: detected capacity change from 0 to 32768
[  108.274929][ T7562] loop0: detected capacity change from 0 to 2048
[  108.291612][ T7562] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.306064][   T33] audit: type=1800 audit(1755283452.087:12): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.604" name="file1" dev="loop0" ino=1415 res=0 errno=0
[  108.332153][   T33] audit: type=1800 audit(1755283452.097:13): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.604" name="file1" dev="loop0" ino=1415 res=0 errno=0
[  109.369903][ T7578] loop2: detected capacity change from 0 to 512
[  109.374769][ T7578] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  109.490173][ T7578] EXT4-fs (loop2): 1 truncate cleaned up
[  109.490565][ T5924] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  109.492955][ T7578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.538484][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.860444][ T7582] loop1: detected capacity change from 0 to 512
[  109.865499][ T7582] EXT4-fs: Ignoring removed oldalloc option
[  109.892369][ T7582] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.615: Parent and EA inode have the same ino 15
[  109.900142][ T7582] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.615: Parent and EA inode have the same ino 15
[  109.904607][ T7582] EXT4-fs (loop1): 1 orphan inode deleted
[  109.907979][ T7582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.926101][ T5852] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  109.936583][ T5852] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15
[  109.942832][ T5852] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15
[  110.023732][ T7318] ==================================================================
[  110.027146][ T7318] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fc/0x1360
[  110.029990][ T7318] Read of size 8 at addr ffff888107f440a0 by task khidpd_15c25886/7318
[  110.033600][ T7318] 
[  110.034441][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: khidpd_15c25886 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  110.034452][ T7318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.034457][ T7318] Call Trace:
[  110.034462][ T7318]  <TASK>
[  110.034467][ T7318]  dump_stack_lvl+0x189/0x250
[  110.034480][ T7318]  ? __kasan_check_byte+0x12/0x40
[  110.034491][ T7318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.034499][ T7318]  ? lock_release+0x4b/0x3e0
[  110.034510][ T7318]  ? __virt_addr_valid+0x4a5/0x5c0
[  110.034520][ T7318]  print_report+0xca/0x240
[  110.034527][ T7318]  ? __mutex_lock+0x7fc/0x1360
[  110.034537][ T7318]  kasan_report+0x118/0x150
[  110.034547][ T7318]  ? __mutex_lock+0x7fc/0x1360
[  110.034558][ T7318]  __mutex_lock+0x7fc/0x1360
[  110.034568][ T7318]  ? __mutex_lock+0x5b6/0x1360
[  110.034578][ T7318]  ? l2cap_unregister_user+0x6a/0x1b0
[  110.034587][ T7318]  ? __pfx___mutex_lock+0x10/0x10
[  110.034597][ T7318]  ? __pfx___timer_delete_sync+0x10/0x10
[  110.034609][ T7318]  l2cap_unregister_user+0x6a/0x1b0
[  110.034617][ T7318]  hidp_session_thread+0x3c9/0x410
[  110.034627][ T7318]  ? __pfx_hidp_session_thread+0x10/0x10
[  110.034635][ T7318]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  110.034643][ T7318]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  110.034652][ T7318]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  110.034660][ T7318]  ? __kthread_parkme+0x7b/0x200
[  110.034668][ T7318]  ? __kthread_parkme+0x1a1/0x200
[  110.034676][ T7318]  kthread+0x711/0x8a0
[  110.034685][ T7318]  ? __pfx_hidp_session_thread+0x10/0x10
[  110.034693][ T7318]  ? __pfx_kthread+0x10/0x10
[  110.034702][ T7318]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.034710][ T7318]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.034719][ T7318]  ? __pfx_kthread+0x10/0x10
[  110.034727][ T7318]  ret_from_fork+0x3fc/0x770
[  110.034735][ T7318]  ? __pfx_ret_from_fork+0x10/0x10
[  110.034743][ T7318]  ? __switch_to_asm+0x39/0x70
[  110.034751][ T7318]  ? __switch_to_asm+0x33/0x70
[  110.034759][ T7318]  ? __pfx_kthread+0x10/0x10
[  110.034768][ T7318]  ret_from_fork_asm+0x1a/0x30
[  110.034779][ T7318]  </TASK>
[  110.034781][ T7318] 
[  110.108652][ T7318] Allocated by task 5852:
[  110.110058][ T7318]  kasan_save_track+0x3e/0x80
[  110.111630][ T7318]  __kasan_kmalloc+0x93/0xb0
[  110.113142][ T7318]  __kmalloc_noprof+0x27a/0x4f0
[  110.114736][ T7318]  hci_alloc_dev_priv+0x28/0x2060
[  110.116381][ T7318]  vhci_create_device+0x120/0x6e0
[  110.118030][ T7318]  vhci_write+0x3ce/0x4a0
[  110.119460][ T7318]  vfs_write+0x5c9/0xb30
[  110.120858][ T7318]  ksys_write+0x145/0x250
[  110.122281][ T7318]  do_syscall_64+0xfa/0x3b0
[  110.123792][ T7318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.125725][ T7318] 
[  110.126527][ T7318] Freed by task 7570:
[  110.127861][ T7318]  kasan_save_track+0x3e/0x80
[  110.129424][ T7318]  kasan_save_free_info+0x46/0x50
[  110.130995][ T7318]  __kasan_slab_free+0x5b/0x80
[  110.132534][ T7318]  kfree+0x18e/0x440
[  110.133827][ T7318]  bt_host_release+0x82/0x90
[  110.135358][ T7318]  device_release+0x9c/0x1c0
[  110.136880][ T7318]  kobject_put+0x22b/0x480
[  110.138362][ T7318]  vhci_release+0x88/0xd0
[  110.139782][ T7318]  __fput+0x44c/0xa70
[  110.141079][ T7318]  task_work_run+0x1d4/0x260
[  110.142530][ T7318]  do_exit+0x6b5/0x2300
[  110.143969][ T7318]  do_group_exit+0x21c/0x2d0
[  110.145515][ T7318]  get_signal+0x1286/0x1340
[  110.147058][ T7318]  arch_do_signal_or_restart+0x9a/0x750
[  110.149119][ T7318]  irqentry_exit_to_user_mode+0x81/0x120
[  110.150936][ T7318]  exc_page_fault+0x9f/0xf0
[  110.152514][ T7318]  asm_exc_page_fault+0x26/0x30
[  110.154189][ T7318] 
[  110.155100][ T7318] Last potentially related work creation:
[  110.157344][ T7318]  kasan_save_stack+0x3e/0x60
[  110.159094][ T7318]  kasan_record_aux_stack+0xbd/0xd0
[  110.160843][ T7318]  insert_work+0x3d/0x330
[  110.162353][ T7318]  __queue_work+0xcd2/0xfb0
[  110.163922][ T7318]  queue_work_on+0x181/0x270
[  110.165495][ T7318]  hci_recv_frame+0x5c9/0x720
[  110.167155][ T7318]  vhci_write+0x358/0x4a0
[  110.168661][ T7318]  vfs_write+0x5c9/0xb30
[  110.170089][ T7318]  ksys_write+0x145/0x250
[  110.171577][ T7318]  do_syscall_64+0xfa/0x3b0
[  110.173149][ T7318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.175341][ T7318] 
[  110.176396][ T7318] Second to last potentially related work creation:
[  110.179121][ T7318]  kasan_save_stack+0x3e/0x60
[  110.180745][ T7318]  kasan_record_aux_stack+0xbd/0xd0
[  110.182508][ T7318]  insert_work+0x3d/0x330
[  110.184017][ T7318]  __queue_work+0xbaf/0xfb0
[  110.185603][ T7318]  queue_work_on+0x181/0x270
[  110.187193][ T7318]  process_scheduled_works+0xae1/0x17b0
[  110.189348][ T7318]  worker_thread+0x8a0/0xda0
[  110.191306][ T7318]  kthread+0x711/0x8a0
[  110.193110][ T7318]  ret_from_fork+0x3fc/0x770
[  110.194731][ T7318]  ret_from_fork_asm+0x1a/0x30
[  110.196555][ T7318] 
[  110.197477][ T7318] The buggy address belongs to the object at ffff888107f44000
[  110.197477][ T7318]  which belongs to the cache kmalloc-8k of size 8192
[  110.202470][ T7318] The buggy address is located 160 bytes inside of
[  110.202470][ T7318]  freed 8192-byte region [ffff888107f44000, ffff888107f46000)
[  110.207666][ T7318] 
[  110.208643][ T7318] The buggy address belongs to the physical page:
[  110.210787][ T7318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107f40
[  110.213764][ T7318] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  110.216865][ T7318] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  110.219512][ T7318] page_type: f5(slab)
[  110.220843][ T7318] raw: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  110.223767][ T7318] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  110.227129][ T7318] head: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  110.229934][ T7318] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  110.232736][ T7318] head: 057ff00000000003 ffffea00041fd001 00000000ffffffff 00000000ffffffff
[  110.235885][ T7318] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  110.238982][ T7318] page dumped because: kasan: bad access detected
[  110.241135][ T7318] page_owner tracks the page as allocated
[  110.243050][ T7318] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5588, tgid 5588 (rcS), ts 31717963045, free_ts 31432005371
[  110.249607][ T7318]  post_alloc_hook+0x240/0x2a0
[  110.251208][ T7318]  get_page_from_freelist+0x21e4/0x22c0
[  110.253097][ T7318]  __alloc_frozen_pages_noprof+0x181/0x370
[  110.255087][ T7318]  alloc_pages_mpol+0x232/0x4a0
[  110.256702][ T7318]  allocate_slab+0x8a/0x370
[  110.258230][ T7318]  ___slab_alloc+0xbeb/0x1410
[  110.259852][ T7318]  __kmalloc_cache_noprof+0x296/0x3d0
[  110.261813][ T7318]  tomoyo_init_log+0x111f/0x1f70
[  110.263500][ T7318]  tomoyo_supervisor+0x340/0x1480
[  110.265348][ T7318]  tomoyo_env_perm+0x149/0x1e0
[  110.267263][ T7318]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  110.269110][ T7318]  tomoyo_bprm_check_security+0x11c/0x180
[  110.271020][ T7318]  security_bprm_check+0x89/0x270
[  110.272780][ T7318]  bprm_execve+0x8ee/0x1450
[  110.274405][ T7318]  do_execveat_common+0x510/0x6a0
[  110.276481][ T7318]  __x64_sys_execve+0x94/0xb0
[  110.278248][ T7318] page last free pid 5578 tgid 5578 stack trace:
[  110.280401][ T7318]  __free_frozen_pages+0xbc4/0xd30
[  110.282147][ T7318]  __slab_free+0x303/0x3c0
[  110.283653][ T7318]  qlist_free_all+0x97/0x140
[  110.285335][ T7318]  kasan_quarantine_reduce+0x148/0x160
[  110.287148][ T7318]  __kasan_slab_alloc+0x22/0x80
[  110.288838][ T7318]  __kmalloc_noprof+0x224/0x4f0
[  110.290480][ T7318]  tomoyo_supervisor+0xbd5/0x1480
[  110.292172][ T7318]  tomoyo_env_perm+0x149/0x1e0
[  110.293768][ T7318]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  110.295860][ T7318]  tomoyo_bprm_check_security+0x11c/0x180
[  110.298063][ T7318]  security_bprm_check+0x89/0x270
[  110.300101][ T7318]  bprm_execve+0x8ee/0x1450
[  110.301863][ T7318]  do_execveat_common+0x510/0x6a0
[  110.303915][ T7318]  __x64_sys_execve+0x94/0xb0
[  110.305822][ T7318]  do_syscall_64+0xfa/0x3b0
[  110.307691][ T7318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.310076][ T7318] 
[  110.311053][ T7318] Memory state around the buggy address:
[  110.313232][ T7318]  ffff888107f43f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  110.316302][ T7318]  ffff888107f44000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.319196][ T7318] >ffff888107f44080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.321823][ T7318]                                ^
[  110.323557][ T7318]  ffff888107f44100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.326192][ T7318]  ffff888107f44180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.329221][ T7318] ==================================================================
[  110.333004][ T7318] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  110.335625][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: khidpd_15c25886 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  110.340529][ T7318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.343891][ T7318] Call Trace:
[  110.345024][ T7318]  <TASK>
[  110.346019][ T7318]  dump_stack_lvl+0x99/0x250
[  110.347730][ T7318]  ? __asan_memcpy+0x40/0x70
[  110.349432][ T7318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.351138][ T7318]  ? __pfx__printk+0x10/0x10
[  110.352681][ T7318]  vpanic+0x281/0x750
[  110.354005][ T7318]  ? __pfx_vpanic+0x10/0x10
[  110.355505][ T7318]  ? irqentry_exit+0x74/0x90
[  110.357032][ T7318]  panic+0xb9/0xc0
[  110.358286][ T7318]  ? __pfx_panic+0x10/0x10
[  110.359763][ T7318]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  110.361701][ T7318]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  110.363631][ T7318]  ? __mutex_lock+0x7fc/0x1360
[  110.365238][ T7318]  check_panic_on_warn+0x89/0xb0
[  110.367059][ T7318]  ? __mutex_lock+0x7fc/0x1360
[  110.368724][ T7318]  end_report+0x78/0x160
[  110.370151][ T7318]  kasan_report+0x129/0x150
[  110.371668][ T7318]  ? __mutex_lock+0x7fc/0x1360
[  110.373254][ T7318]  __mutex_lock+0x7fc/0x1360
[  110.374830][ T7318]  ? __mutex_lock+0x5b6/0x1360
[  110.376703][ T7318]  ? l2cap_unregister_user+0x6a/0x1b0
[  110.378871][ T7318]  ? __pfx___mutex_lock+0x10/0x10
[  110.380642][ T7318]  ? __pfx___timer_delete_sync+0x10/0x10
[  110.382571][ T7318]  l2cap_unregister_user+0x6a/0x1b0
[  110.384330][ T7318]  hidp_session_thread+0x3c9/0x410
[  110.386125][ T7318]  ? __pfx_hidp_session_thread+0x10/0x10
[  110.388422][ T7318]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  110.390828][ T7318]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  110.393369][ T7318]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  110.395671][ T7318]  ? __kthread_parkme+0x7b/0x200
[  110.397390][ T7318]  ? __kthread_parkme+0x1a1/0x200
[  110.399060][ T7318]  kthread+0x711/0x8a0
[  110.400444][ T7318]  ? __pfx_hidp_session_thread+0x10/0x10
[  110.402303][ T7318]  ? __pfx_kthread+0x10/0x10
[  110.403858][ T7318]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.405834][ T7318]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.407589][ T7318]  ? __pfx_kthread+0x10/0x10
[  110.409133][ T7318]  ret_from_fork+0x3fc/0x770
[  110.410690][ T7318]  ? __pfx_ret_from_fork+0x10/0x10
[  110.412404][ T7318]  ? __switch_to_asm+0x39/0x70
[  110.414163][ T7318]  ? __switch_to_asm+0x33/0x70
[  110.415985][ T7318]  ? __pfx_kthread+0x10/0x10
[  110.417889][ T7318]  ret_from_fork_asm+0x1a/0x30
[  110.419499][ T7318]  </TASK>
[  110.421267][ T7318] Kernel Offset: disabled
[  110.422722][ T7318] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:44:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000068 RBX=0000000000000068 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008397370
R8 =ffff88801fcd8237 R9 =1ffff11003f9b046 R10=dffffc0000000000 R11=ffffffff854f0370
R12=dffffc0000000000 R13=ffffffff99af9909 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f03ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055da995526b8 CR3=000000001f00e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=000000000000003a 000000002f316963
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=706e692f3030323a 326963682f326963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000002601 RBX=0000000000000736 RCX=0000000000002601 RDX=ffffffff93640338
RSI=0000000000000003 RDI=0000000000011894 RBP=ffffffff93a807b0 RSP=ffffc90000067bc0
R8 =0000000000000000 R9 =ffffffff81aa82b8 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=00000000000601a8 R13=0000000000000000 R14=ffffffff92a94f76 R15=0000000000002633
RIP=ffffffff819dd47d RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32223ffc CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0445f87498 00007f0445f87470 XMM03=00007f0445f874a8 00007f0445f874a0
XMM04=00007f0446aed100 00007f0445f87460 XMM05=00007f0445f87478 00007f0445f874c0
XMM06=00007f0445f874b8 00007f0445f874b0 XMM07=00007f0445f874a8 00007f0445f874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0445e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
