last executing test programs:

20.20027404s ago: executing program 1 (id=457):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x2)

20.038765947s ago: executing program 1 (id=459):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
close(0x3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r2, 0x1163, 0xfffffffe, 0x28, 0x0, 0x20)

19.968399883s ago: executing program 1 (id=460):
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x18880, &(0x7f0000000340)={[{}, {@discard}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@errors_continue}, {@zero_size_dir}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@errors_remount}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)

19.768514125s ago: executing program 1 (id=461):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c757365725f78617474722c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303031362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0028f473678e481c01a5166a7bba2191211dbeb315e64c646781d182bb6fc08ed1a9b878f5270212fd44f2e7a4a4114856d260ffcb3200f4f6de3d730463"], 0x1, 0x5505, &(0x7f0000000340)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4)
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
open$dir(&(0x7f00000002c0)='./file4\x00', 0x80000, 0x30)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

18.923890689s ago: executing program 1 (id=476):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

18.345177818s ago: executing program 1 (id=480):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8)

18.138732425s ago: executing program 32 (id=480):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8)

7.553376066s ago: executing program 2 (id=549):
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000440)={[{@quota}, {@noquota}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@noquota}, {@gid}, {@nointegrity}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, 0x0)
getdents(r0, &(0x7f0000000040)=""/61, 0x3d)

6.662797857s ago: executing program 2 (id=557):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f00000002c0)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3.704118618s ago: executing program 2 (id=583):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000b00)={0x48, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x4}, [@nested={0x34, 0x16, 0x0, 0x1, [@nested={0x30, 0xe5, 0x0, 0x1, [@generic="92d1051510cfad3f42cbbdaa4e5544c043b38372d45c4d46bbcd950000007b58ed20cd0d1755ca877fbcdf17"]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

3.590580153s ago: executing program 2 (id=584):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x6a4, &(0x7f0000000cc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

3.516434903s ago: executing program 2 (id=585):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0xbd, 0xf, 0x8, 0xbc3, 0x1, 0x8167, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x94, 0xfc, 0x12}}]}}]}}, 0x0)

3.34155383s ago: executing program 2 (id=588):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)

3.182960583s ago: executing program 33 (id=588):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)

2.93636233s ago: executing program 3 (id=592):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2.872723487s ago: executing program 3 (id=593):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)
ioctl$FICLONE(r0, 0x40049409, r0)

2.372519593s ago: executing program 3 (id=596):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0xfe, "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"})

2.167264318s ago: executing program 3 (id=597):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x0, 0x68309725, &(0x7f0000000080)})

1.003232084s ago: executing program 0 (id=598):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', 0x10, &(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="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"], 0x3, 0x1f9, &(0x7f00000001c0)="$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")
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x8c)

873.535464ms ago: executing program 0 (id=599):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5, 0xd8, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x802, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"}}, 0x80}}, 0x800)
close_range(r0, 0xffffffffffffffff, 0x0)

816.814654ms ago: executing program 0 (id=600):
socket(0x1d, 0x2, 0x6)
syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmmsg(r0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

733.636739ms ago: executing program 0 (id=601):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e"], 0x20}], 0x1}, 0x0)

343.853412ms ago: executing program 0 (id=602):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='7'], 0x20)

343.052953ms ago: executing program 0 (id=603):
r0 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x5, 0x9)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r5, 0x0, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x1000000000fe, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

155.297206ms ago: executing program 3 (id=604):
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000004500)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x2b, 0x80004, 0x48000205, 0x160, 0x2, 0x4, 0x8, 0x0, 0x0, 0x10, 0xfffffffc}}, 0x50)
splice(r0, 0x0, r2, 0x0, 0x50, 0xf)

0s ago: executing program 3 (id=605):
recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0)

kernel console output (not intermixed with test programs):

ink
[   64.817732][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.820800][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.832575][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.840757][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.844103][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.855887][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.861652][ T5854] team0: Port device team_slave_0 added
[   64.876634][ T5854] team0: Port device team_slave_1 added
[   64.878970][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   64.926669][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.929531][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.940140][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.945696][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.948501][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.956929][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.990656][ T5849] hsr_slave_0: entered promiscuous mode
[   64.994570][ T5849] hsr_slave_1: entered promiscuous mode
[   65.044930][ T5854] hsr_slave_0: entered promiscuous mode
[   65.047192][ T5854] hsr_slave_1: entered promiscuous mode
[   65.049311][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   65.051165][ T5854] Cannot create hsr debugfs directory
[   65.135421][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.138509][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.141513][ T5858] bridge_slave_0: entered allmulticast mode
[   65.146189][ T5858] bridge_slave_0: entered promiscuous mode
[   65.170773][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.175721][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.178644][ T5858] bridge_slave_1: entered allmulticast mode
[   65.182431][ T5858] bridge_slave_1: entered promiscuous mode
[   65.260397][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.280986][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.351957][ T5858] team0: Port device team_slave_0 added
[   65.361193][ T5858] team0: Port device team_slave_1 added
[   65.402592][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.405481][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.414389][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.427690][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.430427][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.440235][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.465564][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.486518][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.492217][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.518063][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.528749][ T5858] hsr_slave_0: entered promiscuous mode
[   65.531430][ T5858] hsr_slave_1: entered promiscuous mode
[   65.534821][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   65.536909][ T5858] Cannot create hsr debugfs directory
[   65.594530][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.615989][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.624038][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.630957][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.815778][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.820120][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.835806][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.838212][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.845019][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.852870][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.874891][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   65.896145][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.898522][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.912569][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.915625][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.925530][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   65.956605][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.958910][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.984217][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.987103][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.072472][ T5235] Bluetooth: hci0: command tx timeout
[   66.122807][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.149265][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   66.154082][ T5235] Bluetooth: hci1: command tx timeout
[   66.165900][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.168680][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.182077][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.185076][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.235526][ T5235] Bluetooth: hci2: command tx timeout
[   66.291352][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.308475][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.348937][ T5849] veth0_vlan: entered promiscuous mode
[   66.365116][ T5849] veth1_vlan: entered promiscuous mode
[   66.407610][ T5849] veth0_macvtap: entered promiscuous mode
[   66.420936][ T5849] veth1_macvtap: entered promiscuous mode
[   66.428866][ T5854] veth0_vlan: entered promiscuous mode
[   66.442128][ T5854] veth1_vlan: entered promiscuous mode
[   66.449271][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.462711][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.480574][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.490305][ T5710] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.513077][ T5710] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.517119][ T5710] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.520615][ T5710] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.548456][ T5854] veth0_macvtap: entered promiscuous mode
[   66.564809][ T5854] veth1_macvtap: entered promiscuous mode
[   66.602734][ T5858] veth0_vlan: entered promiscuous mode
[   66.613881][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.619378][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.621967][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.626853][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.638704][ T5858] veth1_vlan: entered promiscuous mode
[   66.651250][ T5889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.656813][ T5889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.669229][ T5889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.676828][ T5889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.682731][ T2170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.685616][ T2170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.736717][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.775226][ T5858] veth0_macvtap: entered promiscuous mode
[   66.812417][ T5858] veth1_macvtap: entered promiscuous mode
[   66.935885][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.938989][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.980904][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.989482][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.032956][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.083283][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.450158][ T5916] loop0: detected capacity change from 0 to 32768
[   67.461928][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.465850][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.473623][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.483766][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.487088][ T5853]  loop0: p9 p11 p16
[   67.502642][ T5916]  loop0: p9 p11 p16
[   67.618836][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.621956][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.757117][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.775350][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.942256][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory
[   67.950445][ T5853] udevd[5853]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory
[   67.961908][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory
[   68.042397][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory
[   68.051449][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory
[   68.086322][ T5853] udevd[5853]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory
[   68.143600][ T5235] Bluetooth: hci0: command tx timeout
[   68.233979][ T5235] Bluetooth: hci1: command tx timeout
[   68.303299][ T5235] Bluetooth: hci2: command tx timeout
[   69.025855][ T5947] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004
[   69.812357][ T5961] loop2: detected capacity change from 0 to 512
[   69.822786][ T5961] =======================================================
[   69.822786][ T5961] WARNING: The mand mount option has been deprecated and
[   69.822786][ T5961]          and is ignored by this kernel. Remove the mand
[   69.822786][ T5961]          option from the mount to silence this warning.
[   69.822786][ T5961] =======================================================
[   69.845657][ T5963] bond0: option ad_select: unable to set because the bond device is up
[   69.862806][ T5961] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   69.867873][ T5961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   69.871500][ T5961] EXT4-fs (loop2): orphan cleanup on readonly fs
[   69.876295][ T5955] loop0: detected capacity change from 0 to 32768
[   69.881660][ T5961] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.21: bg 0: block 361: padding at end of block bitmap is not set
[   69.888964][ T5961] EXT4-fs (loop2): Remounting filesystem read-only
[   69.904772][ T5961] EXT4-fs (loop2): 1 truncate cleaned up
[   69.923331][ T5961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   70.024543][ T5955] JBD2: Ignoring recovery information on journal
[   70.078959][ T5955] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   70.193810][ T5972] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.21: dx entry: limit 0 != root limit 125
[   70.198587][ T5972] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.21: Corrupt directory, running e2fsck is recommended
[   70.206461][ T5972] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.21: dx entry: limit 0 != root limit 125
[   70.211172][ T5972] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.21: Corrupt directory, running e2fsck is recommended
[   70.218308][ T5972] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.21: dx entry: limit 0 != root limit 125
[   70.223318][ T5972] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.21: Corrupt directory, running e2fsck is recommended
[   70.230732][ T5972] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.21: dx entry: limit 0 != root limit 125
[   70.235348][ T5972] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.21: Corrupt directory, running e2fsck is recommended
[   70.275415][ T5235] Bluetooth: hci0: command tx timeout
[   70.313336][ T5235] Bluetooth: hci1: command tx timeout
[   70.392810][ T5974] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   70.397902][ T5235] Bluetooth: hci2: command tx timeout
[   70.459377][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   70.472762][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[   70.656772][ T5980] loop1: detected capacity change from 0 to 256
[   70.659880][ T5980] vfat: Bad value for 'nonumtail'
[   70.694212][ T5982] netlink: 52 bytes leftover after parsing attributes in process `syz.0.25'.
[   70.698055][ T5982] netlink: 52 bytes leftover after parsing attributes in process `syz.0.25'.
[   70.993081][ T5996] netlink: 244 bytes leftover after parsing attributes in process `syz.1.34'.
[   71.072161][ T5998] loop2: detected capacity change from 0 to 256
[   71.080586][ T5998] exfat: Deprecated parameter 'namecase'
[   71.086508][ T5998] exfat: Deprecated parameter 'utf8'
[   71.111084][ T5998] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d)
[   71.124060][  T792] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   71.270527][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.273477][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.285134][  T792] usb 1-1: Using ep0 maxpacket: 8
[   71.305187][  T792] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   71.311693][  T792] usb 1-1: config 179 has no interface number 0
[   71.316812][  T792] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   71.322204][  T792] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   71.328572][  T792] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   71.337213][  T792] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   71.342300][  T792] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   71.347603][  T792] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   71.352137][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.400318][ T5990] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   71.707699][ T5912] usb 1-1: USB disconnect, device number 2
[   71.707704][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   71.713896][    C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[   72.303383][ T5235] Bluetooth: hci0: command tx timeout
[   72.383363][ T5235] Bluetooth: hci1: command tx timeout
[   72.464206][ T5235] Bluetooth: hci2: command tx timeout
[   72.684016][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   72.842767][ T6021] netlink: 'syz.1.43': attribute type 2 has an invalid length.
[   72.859063][   T10] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[   72.862703][   T10] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[   72.877252][   T10] usb 1-1: Product: syz
[   72.878944][   T10] usb 1-1: Manufacturer: syz
[   72.880745][   T10] usb 1-1: SerialNumber: syz
[   72.917030][   T10] usb 1-1: config 0 descriptor??
[   72.928852][   T10] ch341 1-1:0.0: ch341-uart converter detected
[   73.142809][ T6025] loop1: detected capacity change from 0 to 32768
[   73.332946][ T6029] loop2: detected capacity change from 0 to 32768
[   73.344792][ T6029] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.47 (6029)
[   73.370942][ T6029] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   73.375992][ T6029] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   73.379648][ T6029] BTRFS info (device loop2): using free-space-tree
[   73.913581][ T6047] vti0: entered allmulticast mode
[   73.949272][   T10] ch341-uart ttyUSB0: break control not supported, using simulated break
[   73.981226][   T10] usb 1-1: ch341-uart converter now attached to ttyUSB0
[   74.014987][   T10] usb 1-1: USB disconnect, device number 3
[   74.055812][   T10] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[   74.061456][   T10] ch341 1-1:0.0: device disconnected
[   74.344018][ T6053] loop1: detected capacity change from 0 to 4096
[   74.349336][ T6053] EXT4-fs: Ignoring removed mblk_io_submit option
[   74.384896][ T6053] EXT4-fs (loop1): Test dummy encryption mode enabled
[   74.425210][ T6053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.816239][ T6053] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   74.958052][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.185423][ T5854] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   75.224026][ T6064] loop0: detected capacity change from 0 to 8192
[   75.228176][ T6064] msdos: Unknown parameter 'dk'
[   76.119581][ T6085] loop0: detected capacity change from 0 to 32768
[   76.124457][ T6085] btrfs: Deprecated parameter 'usebackuproot'
[   76.127420][ T6085] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   76.146851][ T6085] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.60 (6085)
[   76.166927][ T6085] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   76.171152][ T6085] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   76.392566][   T26] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   76.414512][ T6085] BTRFS error (device loop0): failed to load root extent
[   76.417398][ T6085] BTRFS warning (device loop0): try to load backup roots slot 1
[   76.421327][   T32] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   76.433322][ T6085] BTRFS warning (device loop0): couldn't read tree root
[   76.436218][ T6085] BTRFS warning (device loop0): try to load backup roots slot 2
[   76.440040][   T26] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   76.453534][ T6085] BTRFS warning (device loop0): couldn't read tree root
[   76.456635][ T6085] BTRFS warning (device loop0): try to load backup roots slot 3
[   76.496018][ T6085] BTRFS info (device loop0): rebuilding free space tree
[   76.531303][ T6085] BTRFS info (device loop0): disabling free space tree
[   76.534020][ T6085] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   76.537583][ T6085] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   76.797293][ T5849] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   76.816114][ T6087] loop2: detected capacity change from 0 to 32768
[   76.836741][ T6087] read_mapping_page failed!
[   76.841146][ T6087] diRead: diIAGRead returned -5
[   77.262645][ T6113] netlink: 'syz.1.65': attribute type 1 has an invalid length.
[   77.266018][   T33] audit: type=1326 audit(1755448806.523:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.63" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc964f8ebe9 code=0x0
[   77.290790][ T6113] vlan2: entered allmulticast mode
[   77.292839][ T6113] veth1: entered allmulticast mode
[   77.490383][ T6120] tmpfs: Bad value for 'mpol'
[   77.732051][ T6132] loop2: detected capacity change from 0 to 512
[   77.738841][ T6132] EXT4-fs (loop2): Test dummy encryption mode enabled
[   77.741491][ T6132] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   77.750376][ T6132] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   77.758014][ T6132] EXT4-fs (loop2): SIPHASH is not a valid default hash value
[   77.857438][ T6134] loop2: detected capacity change from 0 to 4096
[   77.860687][ T6126] loop1: detected capacity change from 0 to 32768
[   77.864203][ T6134] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   77.894695][ T6126] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   77.922401][ T5889] (kworker/u8:4,5889,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[   78.065634][ T5858] ocfs2: Unmounting device (7,1) on (node local)
[   78.079937][ T6140] loop0: detected capacity change from 0 to 4096
[   78.093074][ T6140] EXT4-fs (loop0): Test dummy encryption mode enabled
[   78.127894][ T6140] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   78.131342][ T6140] System zones: 0-5
[   78.156411][ T6140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.319348][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.836286][ T6160] loop0: detected capacity change from 0 to 32768
[   79.978387][ T6160] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   80.079756][ T6160] XFS (loop0): Ending clean mount
[   80.098549][ T6160] XFS (loop0): Quotacheck needed: Please wait.
[   80.188262][ T6160] XFS (loop0): Quotacheck: Done.
[   80.430978][ T5849] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   81.186801][ T6194] capability: warning: `syz.2.94' uses deprecated v2 capabilities in a way that may be insecure
[   83.348941][ T6198] loop0: detected capacity change from 0 to 32768
[   83.733418][ T6217] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.770114][ T6198] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=nojournal_transaction_names
[   83.770137][ T6198]   allowing incompatible features above 0.0: (unknown version)
[   83.770147][ T6198]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   83.788905][ T6198] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   83.792430][ T6198] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[   83.796862][ T6198] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[   83.796862][ T6198]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   83.840937][ T6198] bcachefs (loop0): accounting_read... done
[   83.846165][ T6198] bcachefs (loop0): alloc_read... done
[   83.849357][ T6198] bcachefs (loop0): snapshots_read... done
[   83.856038][ T6198] bcachefs (loop0): check_allocations...
[   83.859117][ T6198] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   83.859161][ T6198]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq cddfaeeca0a7d1e5 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[   83.886936][ T6198] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   83.886957][ T6198]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 6f77d90a6678a8d9 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   83.911091][ T6198] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   83.911105][ T6198]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1be24db0106cff76 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   83.928532][ T6198] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   83.928551][ T6198]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 592c28c0a83be2c9 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   83.946842][ T6222] loop1: detected capacity change from 0 to 64
[   83.965185][ T6198] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   83.965204][ T6198]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1a83a7e47ef9f6aa written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   83.970767][   T33] audit: type=1800 audit(1755448813.233:3): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.103" name="file1" dev="loop1" ino=5 res=0 errno=0
[   83.978635][ T6198] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   83.987996][ T6198]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 11da0ed3864cee54 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   84.000957][ T6198]  done
[   84.010625][ T6198] bcachefs (loop0): going read-write
[   84.058963][ T6198] bcachefs (loop0): journal_replay... done
[   84.177539][ T6198] bcachefs (loop0): check_extents_to_backpointers...
[   84.179610][ T6198] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets
[   84.190249][ T6198]  done
[   84.199794][ T6198] bcachefs (loop0): check_inodes... done
[   84.205167][ T6198] bcachefs (loop0): resume_logged_ops... done
[   84.208816][ T6198] bcachefs (loop0): delete_dead_inodes... done
[   84.227492][ T6198] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[   84.231773][ T6198] bcachefs (loop0): check_extents_to_backpointers... done
[   84.238647][ T6198] bcachefs (loop0): check_inodes... done
[   84.242495][ T6198] bcachefs (loop0): resume_logged_ops... done
[   84.258229][ T6198] bcachefs (loop0): delete_dead_inodes... done
[   84.644939][ T6198] bcachefs (loop0): done starting filesystem
[   84.661951][ T6237] netlink: 'syz.2.106': attribute type 4 has an invalid length.
[   84.676788][ T6198] syz.0.95 (6198) used greatest stack depth: 14360 bytes left
[   84.683082][ T5849] bcachefs (loop0): shutting down
[   84.688938][ T5849] bcachefs (loop0): going read-only
[   84.692051][ T5849] bcachefs (loop0): finished waiting for writes to stop
[   84.717822][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 18
[   84.727159][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 18
[   84.740091][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 19
[   84.748703][ T5849] bcachefs (loop0): marking filesystem clean
[   84.799387][ T5849] bcachefs (loop0): shutdown complete
[   85.018876][ T6245] loop2: detected capacity change from 0 to 128
[   85.152843][ T6250] input: syz1 as /devices/virtual/input/input4
[   86.265769][ T6266] Bluetooth: MGMT ver 1.23
[   86.268008][ T6266] Bluetooth: hci0: invalid length 0, exp 2 for type 17
[   86.644561][   T24] cfg80211: failed to load regulatory.db
[   87.018948][ T6272] loop1: detected capacity change from 0 to 512
[   87.032154][ T6274] netlink: 'syz.2.121': attribute type 11 has an invalid length.
[   87.280888][ T6288] loop2: detected capacity change from 0 to 128
[   87.308709][ T6288] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   87.311262][ T6288] System zones: 1-3, 19-19, 35-36
[   87.326639][ T6288] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   87.334503][ T6288] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   87.377202][   T33] audit: type=1800 audit(1755448816.643:4): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.127" name="file0" dev="loop2" ino=12 res=0 errno=0
[   87.383959][   T33] audit: type=1800 audit(1755448816.643:5): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.127" name="file0" dev="loop2" ino=12 res=0 errno=0
[   87.459038][ T5854] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   87.518787][ T6304] netlink: 136 bytes leftover after parsing attributes in process `syz.2.134'.
[   87.730757][ T6300] loop0: detected capacity change from 0 to 32768
[   87.738506][ T6300] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section members_v2: device 0: invalid btree_bitmap_shift 248
[   87.738506][ T6300] members_v2 (size 152):
[   87.738506][ T6300] Device:                        0
[   87.738506][ T6300]   Label:                       (none)
[   87.738506][ T6300]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[   87.738506][ T6300]   Size:                        16777216
[   87.738506][ T6300]   read errors:                 0
[   87.738506][ T6300]   write errors:                0
[   87.738506][ T6300]   checksum errors:             0
[   87.738506][ T6300]   seqread iops:                0
[   87.738506][ T6300]   seqwrite iops:               0
[   87.738506][ T6300]   randread iops:               0
[   87.738506][ T6300]   randwrite iops:              0
[   87.738506][ T6300]   Bucket size:                 131072
[   87.738506][ T6300]   First bucket:                0
[   87.738506][ T6300]   Buckets:                     128
[   87.738506][ T6300]   Last mount:                  1714681267
[   87.738506][ T6300]   Last superblock write:       42
[   87.738506][ T6300]   State:                       rw
[   87.738506][ T6300]   Data allowed:                journal,btree,user
[   87.738506][ T6300]   Has data:                    (none)
[   87.738506][ T6300]   Btree allocated bitmap blocksize:(invalid shift 248)
[   87.738506][ T6300]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[   87.738506][ T6300]  
[   87.738661][ T6300] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[   87.923318][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   87.984056][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   87.987894][ T6314] loop0: detected capacity change from 0 to 1024
[   88.075452][   T24] usb 3-1: Using ep0 maxpacket: 16
[   88.083498][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.095871][   T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   88.096579][ T6316] loop0: detected capacity change from 0 to 256
[   88.099450][   T24] usb 3-1: config 1 has no interface number 1
[   88.103047][ T6316] exfat: Deprecated parameter 'utf8'
[   88.107074][ T6316] exfat: Deprecated parameter 'namecase'
[   88.109493][ T6316] exfat: Bad value for 'namecase'
[   88.118133][   T24] usb 3-1: too many endpoints for config 1 interface 2 altsetting 252: 65, using maximum allowed: 30
[   88.122544][   T24] usb 3-1: config 1 interface 2 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[   88.144601][   T24] usb 3-1: config 1 interface 2 has no altsetting 0
[   88.159609][   T10] usb 2-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00
[   88.165715][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   88.165830][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.169362][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.169387][   T24] usb 3-1: Product: syz
[   88.169400][   T24] usb 3-1: Manufacturer: syz
[   88.169410][   T24] usb 3-1: SerialNumber: syz
[   88.218775][   T10] usb 2-1: config 0 descriptor??
[   88.437775][ T6327] loop0: detected capacity change from 0 to 1024
[   88.442933][ T6327] EXT4-fs: Ignoring removed nobh option
[   88.448361][   T24] usb 3-1: USB disconnect, device number 2
[   88.457060][ T6327] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   88.474510][ T6327] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.145: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   88.482474][ T6327] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.145: couldn't read orphan inode 11 (err -117)
[   88.489913][ T6327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.526968][ T6327] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.145: Invalid block bitmap block 0 in block_group 0
[   88.527202][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   88.536834][ T6327] Quota error (device loop0): write_blk: dquota write failed
[   88.541190][ T6327] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   88.548127][ T6327] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.145: Failed to acquire dquot type 0
[   88.558675][ T6327] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   88.592659][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.648497][   T10] smartjoyplus 0003:0925:8888.0001: item fetching failed at offset 3/5
[   88.652421][   T10] smartjoyplus 0003:0925:8888.0001: parse failed
[   88.668736][   T10] smartjoyplus 0003:0925:8888.0001: probe with driver smartjoyplus failed with error -22
[   88.844781][   T24] usb 2-1: USB disconnect, device number 2
[   88.902022][ T6334] loop0: detected capacity change from 0 to 32768
[   88.915482][ T6334] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   88.926002][ T6334] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   88.991435][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[   89.209147][ T6353] Zero length message leads to an empty skb
[   89.563365][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   89.733353][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   89.744165][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.748224][   T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   89.751561][   T10] usb 1-1: config 1 has no interface number 1
[   89.759411][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[   89.765617][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[   89.775215][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   89.789002][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.791991][   T10] usb 1-1: Product: syz
[   89.794476][   T10] usb 1-1: Manufacturer: syz
[   89.796826][   T10] usb 1-1: SerialNumber: syz
[   89.816796][ T6359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   89.872366][ T6373] loop2: detected capacity change from 0 to 4096
[   89.877757][ T6373] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   89.907140][ T6373] ntfs3(loop2): Failed to load $Extend (-22).
[   89.909640][ T6373] ntfs3(loop2): Failed to initialize $Extend.
[   89.913629][   T24] usb 2-1: Using ep0 maxpacket: 8
[   89.927193][   T24] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[   89.937860][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.944201][   T24] usb 2-1: Product: syz
[   89.947884][   T24] usb 2-1: Manufacturer: syz
[   89.949797][   T24] usb 2-1: SerialNumber: syz
[   89.965007][   T24] usb 2-1: config 0 descriptor??
[   89.975130][   T24] usbtest 2-1:0.0: FX2 device
[   89.977091][   T24] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt)
[   90.046114][   T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[   90.049568][   T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[   90.117406][   T10] usb 1-1: USB disconnect, device number 4
[   90.184555][ T5912] usb 2-1: USB disconnect, device number 3
[   90.192323][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   90.678869][ T6387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.168'.
[   90.759462][ T6393] loop1: detected capacity change from 0 to 128
[   90.782878][ T6393] qnx6: superblock #1 checksum error
[   90.820261][ T6395] loop1: detected capacity change from 0 to 128
[   90.973404][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   91.473838][   T24] usb 3-1: too many configurations: 23, using maximum allowed: 8
[   91.487993][   T24] usb 3-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e
[   91.491290][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19
[   91.497104][   T24] usb 3-1: SerialNumber: syz
[   91.506206][   T24] usb 3-1: config 0 descriptor??
[   91.515810][   T24] usb 3-1: bad CDC descriptors
[   91.714778][   T24] usb 3-1: USB disconnect, device number 3
[   92.240166][ T6411] loop1: detected capacity change from 0 to 1024
[   92.400393][ T6417] netlink: 'syz.1.181': attribute type 10 has an invalid length.
[   92.439538][ T6417] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   92.443615][ T6417] team0: Failed to send options change via netlink (err -105)
[   92.446569][ T6417] team0: Port device netdevsim0 added
[   92.861435][ T6441] loop2: detected capacity change from 0 to 512
[   92.869163][ T6441] EXT4-fs: Ignoring removed i_version option
[   92.885649][ T6441] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.916018][ T6441] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   92.923645][ T6441] EXT4-fs (loop2): 1 truncate cleaned up
[   92.927427][ T6441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.933894][ T5312] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   92.946481][ T6441] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new)
[   92.952425][ T6441] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted
[   92.952964][ T6431] loop0: detected capacity change from 0 to 32768
[   92.971794][ T6431] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.186 (6431)
[   93.009472][ T6431] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   93.014986][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.033308][ T6431] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   93.036353][ T6431] BTRFS info (device loop0): using free-space-tree
[   93.092612][ T5312] usb 2-1: config 1 has an invalid interface number: 35 but max is 0
[   93.095855][ T5312] usb 2-1: config 1 has no interface number 0
[   93.104051][ T5312] usb 2-1: config 1 interface 35 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[   93.120703][   T33] audit: type=1800 audit(1755448822.373:6): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.186" name="file1" dev="loop0" ino=260 res=0 errno=0
[   93.139675][ T5312] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=2d.0a
[   93.163231][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.165787][ T5312] usb 2-1: Product: syz
[   93.167166][ T5312] usb 2-1: Manufacturer: syz
[   93.168672][ T5312] usb 2-1: SerialNumber: syz
[   93.277874][ T5849] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   93.441154][ T5312] snd-usb-audio 2-1:1.35: probe with driver snd-usb-audio failed with error -71
[   93.448981][ T5312] usb 2-1: USB disconnect, device number 4
[   93.586306][ T6474] loop2: detected capacity change from 0 to 2048
[   93.610777][ T6474] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.652766][ T6476] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   93.732741][ T6478] loop0: detected capacity change from 0 to 1024
[   93.881077][ T6486] process 'syz.2.206' launched './file0' with NULL argv: empty string added
[   94.283606][ T5312] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   94.463723][ T5312] usb 2-1: Using ep0 maxpacket: 8
[   94.545494][ T5312] usb 2-1: unable to get BOS descriptor or descriptor too short
[   94.549141][ T5312] usb 2-1: no configurations
[   94.554854][ T5312] usb 2-1: can't read configurations, error -22
[   95.147068][ T6505] loop1: detected capacity change from 0 to 8192
[   95.796244][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'.
[   96.331257][ T6520] loop2: detected capacity change from 0 to 32768
[   96.342421][ T6520] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1)
[   96.342421][ T6520] downgrade (size 640):
[   96.342421][ T6520] version:	0.0: (unknown version)
[   96.342421][ T6520] recovery passes:	
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.0: (unknown version)
[   96.342421][ T6520] recovery passes:	
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.35: (unknown version)
[   96.342421][ T6520] recovery passes:	
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.0: (unknown version)
[   96.342421][ T6520] recovery passes:	
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.47: (unknown version)
[   96.342421][ T6520] recovery passes:	
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.0: (unknown version)
[   96.342421][ T6520] recovery passes:	fs_freespace_init,bucket_gens_init,check_snapshots,check_subvols
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.11: inode_btree_change
[   96.342421][ T6520] recovery passes:	
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.0: (unknown version)
[   96.342421][ T6520] recovery passes:	
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.34: (unknown version)
[   96.342421][ T6520] recovery passes:	
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.0: (unknown version)
[   96.342421][ T6520] recovery passes:	
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.0: (unknown version)
[   96.342421][ T6520] recovery passes:	
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.0: (unknown version)
[   96.342421][ T6520] recovery passes:	fs_freespace_init,check_snapshot_trees
[   96.342421][ T6520] errors:	
[   96.342421][ T6520] version:	0.0: (unknown version)
[   96.342421][ T6520] recover
[   96.342625][ T6520] bcachefs: bch2_fs_get_tree() error: invalid_sb_downgrade
[   96.705974][ T6531] loop1: detected capacity change from 0 to 40427
[   96.722132][ T6531] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[   96.732245][ T6531] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   96.740727][ T6531] F2FS-fs (loop1): build fault injection rate: 17008
[   96.750827][ T6531] F2FS-fs (loop1): build fault injection type: 0x7
[   96.772181][ T6531] F2FS-fs (loop1): invalid crc value
[   96.809041][ T6539] loop0: detected capacity change from 0 to 32768
[   96.829585][ T6539] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   96.898054][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[   96.941912][ T6531] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   96.959631][ T6531] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   96.962582][ T6531] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   97.064980][ T5858] syz-executor: attempt to access beyond end of device
[   97.064980][ T5858] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   97.072282][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   97.072302][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.072310][ T5858] Call Trace:
[   97.072329][ T5858]  <TASK>
[   97.072345][ T5858]  dump_stack_lvl+0x189/0x250
[   97.072398][ T5858]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.072413][ T5858]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   97.072431][ T5858]  ? __pfx_queue_work_on+0x10/0x10
[   97.072446][ T5858]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   97.072462][ T5858]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   97.072489][ T5858]  f2fs_handle_critical_error+0x37c/0x540
[   97.072517][ T5858]  f2fs_write_end_io+0x886/0xb60
[   97.072548][ T5858]  __submit_merged_bio+0x27a/0x6a0
[   97.072573][ T5858]  __submit_merged_write_cond+0x255/0x530
[   97.072598][ T5858]  f2fs_write_data_pages+0x261d/0x3000
[   97.072650][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   97.072714][ T5858]  ? check_path+0x21/0x40
[   97.072728][ T5858]  ? check_noncircular+0xe0/0x160
[   97.072791][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   97.072812][ T5858]  do_writepages+0x32e/0x550
[   97.072843][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[   97.072862][ T5858]  filemap_fdatawrite+0x199/0x240
[   97.072880][ T5858]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   97.072940][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[   97.072961][ T5858]  f2fs_sync_dirty_inodes+0x31f/0x830
[   97.072990][ T5858]  f2fs_write_checkpoint+0x95a/0x1df0
[   97.073027][ T5858]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   97.073087][ T5858]  ? kill_f2fs_super+0x298/0x6c0
[   97.073107][ T5858]  kill_f2fs_super+0x2c3/0x6c0
[   97.073146][ T5858]  ? __pfx_kill_f2fs_super+0x10/0x10
[   97.073158][ T5858]  ? radix_tree_delete_item+0x2b6/0x400
[   97.073183][ T5858]  ? shrinker_free+0x2ce/0x3e0
[   97.073202][ T5858]  deactivate_locked_super+0xbc/0x130
[   97.073227][ T5858]  cleanup_mnt+0x425/0x4c0
[   97.073244][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.073265][ T5858]  task_work_run+0x1d4/0x260
[   97.073287][ T5858]  ? __pfx_task_work_run+0x10/0x10
[   97.073303][ T5858]  ? __x64_sys_umount+0x122/0x160
[   97.073326][ T5858]  ? exit_to_user_mode_loop+0x40/0x110
[   97.073350][ T5858]  exit_to_user_mode_loop+0xec/0x110
[   97.073369][ T5858]  do_syscall_64+0x2bd/0x3b0
[   97.073416][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.073433][ T5858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.073447][ T5858]  ? exc_page_fault+0x9f/0xf0
[   97.073466][ T5858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.073480][ T5858] RIP: 0033:0x7fa568d8ff17
[   97.073494][ T5858] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   97.073505][ T5858] RSP: 002b:00007ffec3cb0c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   97.073519][ T5858] RAX: 0000000000000000 RBX: 00007fa568e11c05 RCX: 00007fa568d8ff17
[   97.073528][ T5858] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec3cb0ce0
[   97.073536][ T5858] RBP: 00007ffec3cb0ce0 R08: 0000000000000000 R09: 0000000000000000
[   97.073544][ T5858] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec3cb1d70
[   97.073552][ T5858] R13: 00007fa568e11c05 R14: 0000000000017a87 R15: 00007ffec3cb1db0
[   97.073578][ T5858]  </TASK>
[   97.204512][ T6541] loop2: detected capacity change from 0 to 32768
[   97.209149][ T6541] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   97.209149][ T6541] clean (size 2912):
[   97.209149][ T6541] flags:          0
[   97.209149][ T6541] journal_seq:    8
[   97.209149][ T6541] usage: type=inodes v=8
[   97.209149][ T6541] usage: type=key_version v=0
[   97.209149][ T6541] usage: type=reserved v=0
[   97.209149][ T6541] usage: type=reserved v=0
[   97.209149][ T6541] usage: type=reserved v=0
[   97.209149][ T6541] usage: type=reserved v=0
[   97.209149][ T6541] data_usage: btree: 1/1 [0]=2816
[   97.209149][ T6541] data_usage: journal: 1/1 [0]=0
[   97.209149][ T6541] btree_keys: btree=extents level=0 u64s 8 type deleted 0:2048:0 len 8 ver 1065151889408: 
[   97.209149][ T6541] btree_keys: btree=extents level=0 u64s 1 type deleted POS_MIN len 224 ver 137438953472: 
[   97.209149][ T6541] btree_keys: btree=extents level=0 u64s 32 type deleted POS_MIN len 0 ver 962072674304: 
[   97.209149][ T6541] clock: read=0
[   97.209149][ T6541] clock: write=1288
[   97.209149][ T6541] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee356 written 16 min_key POS_MIN ptr: 0:6912 gen 0
[   97.209149][ T6541] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq efdd7a26d7396dd5 written 24 min_key POS_MIN ptr: 0:9728 gen 0
[   97.209149][ T6541] btree_root: btree=dirents l
[   97.209307][ T6541] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   97.309969][ T5858] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   97.480476][ T6558] loop0: detected capacity change from 0 to 1024
[   97.500209][ T6558] EXT4-fs: Ignoring removed bh option
[   97.655056][ T6558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   97.688910][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   97.777600][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[   98.705936][ T6572] loop0: detected capacity change from 0 to 40427
[   98.722409][ T6572] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[   98.725750][ T6572] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   98.729683][ T6572] F2FS-fs (loop0): build fault injection type: 0x6
[   98.743975][ T6572] F2FS-fs (loop0): invalid crc value
[   98.795860][ T6572] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   98.800300][ T6572] F2FS-fs (loop0): Start checkpoint disabled!
[   98.809310][ T6572] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   98.812131][ T6572] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   98.987983][   T26] kworker/u9:0: attempt to access beyond end of device
[   98.987983][   T26] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   98.994565][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   98.994587][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.994595][   T26] Workqueue: writeback wb_workfn (flush-7:0)
[   98.994618][   T26] Call Trace:
[   98.994624][   T26]  <TASK>
[   98.994631][   T26]  dump_stack_lvl+0x189/0x250
[   98.994652][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.994667][   T26]  ? __pfx_queue_work_on+0x10/0x10
[   98.994680][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.994698][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   98.994724][   T26]  f2fs_handle_critical_error+0x37c/0x540
[   98.994748][   T26]  f2fs_write_end_io+0x886/0xb60
[   98.994783][   T26]  __submit_merged_bio+0x27a/0x6a0
[   98.994811][   T26]  __submit_merged_write_cond+0x255/0x530
[   98.994834][   T26]  f2fs_write_data_pages+0x261d/0x3000
[   98.994883][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.994915][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   98.994966][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   98.994997][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[   98.995017][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[   98.995039][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   98.995069][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.995090][   T26]  do_writepages+0x32e/0x550
[   98.995113][   T26]  ? reacquire_held_locks+0x127/0x1d0
[   98.995126][   T26]  ? writeback_sb_inodes+0x384/0x1010
[   98.995152][   T26]  __writeback_single_inode+0x145/0xff0
[   98.995169][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[   98.995185][   T26]  writeback_sb_inodes+0x6c7/0x1010
[   98.995254][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   98.995316][   T26]  ? rcu_is_watching+0x15/0xb0
[   98.995331][   T26]  wb_writeback+0x43b/0xaf0
[   98.995344][   T26]  ? queue_io+0x301/0x590
[   98.995356][   T26]  ? __pfx_wb_writeback+0x10/0x10
[   98.995370][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.995382][   T26]  wb_workfn+0x409/0xef0
[   98.995398][   T26]  ? __pfx_wb_workfn+0x10/0x10
[   98.995409][   T26]  ? __lock_acquire+0xab9/0xd20
[   98.995426][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   98.995438][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.995446][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   98.995453][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   98.995461][   T26]  process_scheduled_works+0xae1/0x17b0
[   98.995484][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[   98.995501][   T26]  worker_thread+0x8a0/0xda0
[   98.995531][   T26]  kthread+0x711/0x8a0
[   98.995548][   T26]  ? __pfx_worker_thread+0x10/0x10
[   98.995561][   T26]  ? __pfx_kthread+0x10/0x10
[   98.995576][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.995588][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.995602][   T26]  ? __pfx_kthread+0x10/0x10
[   98.995619][   T26]  ret_from_fork+0x3fc/0x770
[   98.995639][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[   98.995658][   T26]  ? __switch_to_asm+0x39/0x70
[   98.995669][   T26]  ? __switch_to_asm+0x33/0x70
[   98.995677][   T26]  ? __pfx_kthread+0x10/0x10
[   98.995687][   T26]  ret_from_fork_asm+0x1a/0x30
[   98.995705][   T26]  </TASK>
[   98.995710][   T26] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   99.425446][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   99.573279][   T10] usb 2-1: Using ep0 maxpacket: 32
[   99.576580][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.580846][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.587038][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   99.590499][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.598999][   T10] usb 2-1: config 0 descriptor??
[   99.606465][   T10] hub 2-1:0.0: USB hub found
[   99.809018][   T10] hub 2-1:0.0: 1 port detected
[   99.978980][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'.
[   99.989134][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'.
[  100.412220][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'.
[  100.472258][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[  100.476922][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'.
[  100.480721][ T6615] netlink: 'syz.2.258': attribute type 13 has an invalid length.
[  100.560540][   T10] hub 2-1:0.0: activate --> -90
[  100.594891][ T6617] loop2: detected capacity change from 0 to 16
[  100.605252][ T6617] erofs (device loop2): bogus i_mode (6) @ nid 36
[  100.891775][ T6627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.264'.
[  100.968505][   T10] usb 2-1-port1: cannot disable (err = -71)
[  100.970078][ T6621] loop0: detected capacity change from 0 to 32768
[  100.974326][   T10] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  100.975546][ T6621] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.261 (6621)
[  100.989239][   T10] usb 2-1-port1: connect-debounce failed
[  100.991901][ T5912] usb 2-1: USB disconnect, device number 7
[  101.010211][ T6621] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  101.017227][ T6621] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  101.020117][ T6621] BTRFS info (device loop0): using free-space-tree
[  101.123841][ T5849] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  102.349609][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.353704][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.367853][ T6650] loop2: detected capacity change from 0 to 262144
[  102.376854][ T6650] F2FS-fs (loop2): invalid crc value
[  102.427111][ T6650] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.430686][ T6650] F2FS-fs (loop2): Start checkpoint disabled!
[  102.439377][ T6650] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  102.520169][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.530778][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.635598][ T5912] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  102.699433][ T5710] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.704690][ T5710] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.708223][ T5710] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.711546][ T5710] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.769244][ T6663] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  102.780443][ T6663] CIFS mount error: No usable UNC path provided in device string!
[  102.780443][ T6663] 
[  102.784453][ T6663] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  102.795646][ T5912] usb 2-1: Using ep0 maxpacket: 8
[  102.800029][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.814287][ T5912] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  102.817721][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.828543][ T5912] usb 2-1: config 0 descriptor??
[  102.838997][ T5912] gspca_main: vc032x-2.14.0 probing 046d:0892
[  103.226668][ T6670] loop0: detected capacity change from 0 to 32768
[  103.231624][ T6670] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.276 (6670)
[  103.236701][ T5912] gspca_vc032x: reg_w err -71
[  103.238687][ T5912] vc032x 2-1:0.0: probe with driver vc032x failed with error -71
[  103.254632][ T5912] usb 2-1: USB disconnect, device number 8
[  103.261991][ T6670] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.280818][ T6670] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  103.286083][ T6670] BTRFS info (device loop0): using free-space-tree
[  103.349661][ T6681] loop2: detected capacity change from 0 to 2048
[  103.361451][ T6325] udevd[6325]: incorrect nilfs2 checksum on /dev/loop2
[  103.377616][ T6681] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  103.392937][ T6325] udevd[6325]: incorrect nilfs2 checksum on /dev/loop2
[  103.427266][ T6690] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.459401][ T5849] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.665346][ T6698] netlink: 104 bytes leftover after parsing attributes in process `syz.2.280'.
[  104.318076][ T6736] netem: incorrect gi model size
[  104.320576][ T6736] netem: change failed
[  104.323290][ T5312] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  104.496603][   T33] audit: type=1326 audit(2000000000.310:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401bf8ebe9 code=0x7ffc0000
[  104.511318][ T5312] usb 2-1: unable to get BOS descriptor or descriptor too short
[  104.519970][ T5312] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  104.524993][   T33] audit: type=1326 audit(2000000000.320:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401bf8ebe9 code=0x7ffc0000
[  104.533833][   T33] audit: type=1326 audit(2000000000.320:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.301" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f401bf8ebe9 code=0x7ffc0000
[  104.540869][   T33] audit: type=1326 audit(2000000000.320:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401bf8ebe9 code=0x7ffc0000
[  104.543023][ T5312] usb 2-1: config 66 has 1 interface, different from the descriptor's value: 2
[  104.549649][   T33] audit: type=1326 audit(2000000000.320:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401bf8ebe9 code=0x7ffc0000
[  104.561131][ T6746] syz.0.302 uses obsolete (PF_INET,SOCK_PACKET)
[  104.564390][ T5312] usb 2-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0
[  104.566294][   T33] audit: type=1326 audit(2000000000.320:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.301" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f401bf8ebe9 code=0x7ffc0000
[  104.568219][ T5312] usb 2-1: config 66 interface 0 has no altsetting 0
[  104.577032][   T33] audit: type=1326 audit(2000000000.320:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401bf8ebe9 code=0x7ffc0000
[  104.591979][ T5312] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  104.595161][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.598198][ T5312] usb 2-1: Product: syz
[  104.600870][ T5312] usb 2-1: Manufacturer: syz
[  104.600903][   T33] audit: type=1326 audit(2000000000.320:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.301" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f401bf8ebe9 code=0x7ffc0000
[  104.602263][ T5312] usb 2-1: SerialNumber: syz
[  104.611100][   T33] audit: type=1326 audit(2000000000.330:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.2.301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401bf8ebe9 code=0x7ffc0000
[  104.819334][ T6753] loop0: detected capacity change from 0 to 8192
[  104.836161][ T5312] ati_remote2 2-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1
[  104.844013][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  104.851333][ T5312] usb 2-1: USB disconnect, device number 9
[  104.971087][ T6756] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  104.984895][ T6756] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  105.003461][   T24] usb 3-1: Using ep0 maxpacket: 32
[  105.014787][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.022915][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.033289][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  105.052376][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  105.055530][   T24] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  105.058117][   T24] usb 3-1: Product: syz
[  105.059382][   T24] usb 3-1: Manufacturer: syz
[  105.060811][   T24] usb 3-1: SerialNumber: syz
[  105.074435][   T24] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5
[  105.264420][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  105.278213][ T5912] usb 3-1: USB disconnect, device number 4
[  105.298014][ T5912] appletouch 3-1:1.0: input: appletouch disconnected
[  105.414166][    T9] usb 1-1: Using ep0 maxpacket: 16
[  105.420502][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.427807][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.431805][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  105.436761][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8
[  105.440486][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.447874][    T9] usb 1-1: config 0 descriptor??
[  105.776312][ T6765] loop1: detected capacity change from 0 to 32768
[  105.794515][ T6765] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  105.847305][ T6765] XFS (loop1): Ending clean mount
[  105.857272][ T6765] XFS (loop1): Quotacheck needed: Please wait.
[  105.886736][ T6765] XFS (loop1): Quotacheck: Done.
[  105.887410][    T9] hid-generic 0003:045E:FC40.0002: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.0-1/input0
[  106.085997][    T9] usb 1-1: USB disconnect, device number 5
[  106.499978][ T5858] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  106.653756][  T792] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  106.810909][  T792] usb 3-1: Using ep0 maxpacket: 32
[  106.818525][  T792] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  106.821502][  T792] usb 3-1: config 0 has no interface number 0
[  106.824112][  T792] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  106.828175][  T792] usb 3-1: config 0 interface 85 has no altsetting 0
[  106.837178][  T792] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  106.840614][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.846846][  T792] usb 3-1: Product: syz
[  106.848430][  T792] usb 3-1: Manufacturer: syz
[  106.850201][  T792] usb 3-1: SerialNumber: syz
[  106.858429][  T792] usb 3-1: config 0 descriptor??
[  106.865783][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.322'.
[  106.869852][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.322'.
[  106.922892][   T33] kauditd_printk_skb: 56 callbacks suppressed
[  106.922908][   T33] audit: type=1326 audit(2000000002.730:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.0.323" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc964f8ebe9 code=0x0
[  106.935287][ T5312] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  107.093236][ T5312] usb 2-1: Using ep0 maxpacket: 16
[  107.099030][ T5312] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  107.102403][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  107.105663][ T5312] usb 2-1: Manufacturer: syz
[  107.110753][ T5312] usb 2-1: config 0 descriptor??
[  107.319953][ T5312] usb 2-1: Limiting number of CPorts to U8_MAX
[  107.327565][ T5312] usb 2-1: Not enough endpoints found in device, aborting!
[  107.471744][  T792] appletouch 3-1:0.85: Geyser mode initialized.
[  107.476396][  T792] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6
[  107.526978][    T9] usb 2-1: USB disconnect, device number 10
[  107.677962][ T5912] usb 3-1: USB disconnect, device number 5
[  107.696279][ T5912] appletouch 3-1:0.85: input: appletouch disconnected
[  107.789141][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'.
[  108.076132][ T6816] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.328'.
[  108.473485][ T5312] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  108.635050][ T5312] usb 1-1: Using ep0 maxpacket: 32
[  108.646943][ T5312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.660196][ T5312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.673022][ T5312] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[  108.686179][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.695987][ T5312] usb 1-1: config 0 descriptor??
[  108.752652][ T6824] loop2: detected capacity change from 0 to 32768
[  108.787111][ T6824] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.817883][ T6824] XFS (loop2): Ending clean mount
[  108.879475][ T5854] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.903393][ T6833] loop1: detected capacity change from 0 to 32768
[  108.906060][ T6833] btrfs: Deprecated parameter 'usebackuproot'
[  108.908369][ T6833] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  108.913752][ T6833] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.336 (6833)
[  108.924468][ T6833] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  108.929066][ T6833] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  108.931663][ T6833] BTRFS info (device loop1): using free-space-tree
[  109.016893][ T6833] BTRFS info (device loop1): rebuilding free space tree
[  109.101626][ T5858] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.140938][ T5312] hid-alps 0003:044E:1215.0003: collection stack underflow
[  109.153338][ T5312] hid-alps 0003:044E:1215.0003: item 0 2 0 12 parsing failed
[  109.162926][ T5312] hid-alps 0003:044E:1215.0003: parse failed
[  109.183498][ T5312] hid-alps 0003:044E:1215.0003: probe with driver hid-alps failed with error -22
[  109.347595][ T5312] usb 1-1: USB disconnect, device number 6
[  109.521589][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'.
[  109.580525][ T6874] loop2: detected capacity change from 0 to 256
[  110.848019][ T6901] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  110.946792][ T6903] loop0: detected capacity change from 0 to 164
[  111.403299][ T5912] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  111.440160][   T33] audit: type=1800 audit(2000000007.250:73): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.365" name="/" dev="9p" ino=2 res=0 errno=0
[  111.553623][ T5912] usb 2-1: Using ep0 maxpacket: 16
[  111.566024][ T5912] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  111.575476][ T5912] usb 2-1: config 0 has no interface number 0
[  111.606808][ T5912] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  111.613918][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.617090][ T5912] usb 2-1: Product: syz
[  111.618728][ T5912] usb 2-1: Manufacturer: syz
[  111.620725][ T5912] usb 2-1: SerialNumber: syz
[  111.649801][ T6924] warning: `syz.0.367' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  111.651535][ T5912] usb 2-1: config 0 descriptor??
[  111.674604][ T5912] hub 2-1:0.132: bad descriptor, ignoring hub
[  111.677146][ T5912] hub 2-1:0.132: probe with driver hub failed with error -5
[  111.695932][ T5912] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input7
[  112.726232][ T6928] loop0: detected capacity change from 0 to 40427
[  112.739857][ T5912] usb 2-1: USB disconnect, device number 11
[  112.762218][ T6928] F2FS-fs (loop0): invalid crc value
[  112.813428][ T6928] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  112.817915][ T6928] F2FS-fs (loop0): Start checkpoint disabled!
[  112.822079][ T6928] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  113.375640][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'.
[  113.740111][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'.
[  113.902174][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'.
[  114.467696][ T6969] loop1: detected capacity change from 0 to 4096
[  114.471688][ T6969] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  114.487002][ T6969] ntfs3(loop1): ino=19, mi_enum_attr
[  114.489180][ T6969] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  114.504327][ T5912] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  114.508246][ T6969] ntfs3(loop1): failed to convert "c46c" to iso8859-1
[  114.517375][ T6969] ntfs3(loop1): ino=20, mi_enum_attr
[  114.667142][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.674263][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.682815][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  114.686180][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.689738][ T5912] usb 3-1: Product: syz
[  114.692951][ T6980] team0: entered allmulticast mode
[  114.699885][ T5912] usb 3-1: Manufacturer: syz
[  114.702121][ T5912] usb 3-1: SerialNumber: syz
[  114.704018][ T6980] team_slave_0: entered allmulticast mode
[  114.707724][ T6980] team_slave_1: entered allmulticast mode
[  114.710174][ T6980] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  114.724037][ T6980] team0: left allmulticast mode
[  114.729491][ T6980] team_slave_0: left allmulticast mode
[  114.734957][ T6980] team_slave_1: left allmulticast mode
[  114.738811][ T6980] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  114.782075][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'.
[  114.896986][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.396'.
[  114.900346][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.396'.
[  114.940987][ T5912] usb 3-1: 0:2 : does not exist
[  114.960533][ T5912] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  115.007397][ T5912] usb 3-1: USB disconnect, device number 6
[  115.129815][ T6377] udevd[6377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.381561][ T6998] loop1: detected capacity change from 0 to 128
[  115.455524][ T6998] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  115.477576][ T6998] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  115.654256][ T5858] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  116.381082][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.406'.
[  116.448609][ T7018] loop0: detected capacity change from 0 to 256
[  116.453071][ T7018] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.468539][ T7018] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  116.478614][ T7018] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  116.556975][ T7019] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff)
[  116.560078][ T7019] exFAT-fs (loop0): Filesystem has been set read-only
[  116.567003][ T7019] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff)
[  116.570724][ T7019] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff)
[  116.785809][ T7023] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  117.219834][ T7045] Invalid source name
[  117.224148][ T7045] UBIFS error (pid: 7045): cannot open "/dev/sg0", error -22
[  117.471269][ T7060] loop0: detected capacity change from 0 to 2048
[  117.484129][ T7060] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576
[  117.505229][ T7060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.690382][ T7071] overlayfs: maximum fs stacking depth exceeded
[  117.796299][ T7054] loop1: detected capacity change from 0 to 32768
[  117.835150][ T7054] *** Log Is Dirty ! ***
[  117.836784][ T7054] lmLogInit: exit(-22)
[  117.838058][ T7054] lmLogOpen: exit(-22)
[  117.839304][ T7054] jfs_mount_rw failed, return code = -22
[  117.933339][ T7080] nbd0: detected capacity change from 0 to 63
[  117.939059][ T7085] block nbd0: NBD_DISCONNECT
[  117.940986][ T7085] block nbd0: Disconnected due to user request.
[  117.980519][ T7085] block nbd0: shutting down sockets
[  117.997533][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  118.001401][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  118.004702][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  118.008273][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  118.011334][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  118.015626][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  118.018749][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  118.022294][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  118.031167][ T6377] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  118.046355][ T6377] Buffer I/O error on dev nbd0, logical block 0, async page read
[  118.049663][ T6377] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  118.077854][ T6377] Buffer I/O error on dev nbd0, logical block 1, async page read
[  118.087513][ T6377] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  118.090962][ T6377] Buffer I/O error on dev nbd0, logical block 2, async page read
[  118.107375][ T6377] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  118.113953][ T6377] Buffer I/O error on dev nbd0, logical block 3, async page read
[  118.119379][ T6377] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  118.124088][ T6377] Buffer I/O error on dev nbd0, logical block 0, async page read
[  118.126715][ T6377] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  118.130025][ T6377] Buffer I/O error on dev nbd0, logical block 1, async page read
[  118.195422][  T792] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  118.218636][ T7099] capability: warning: `syz.2.440' uses 32-bit capabilities (legacy support in use)
[  118.242568][ T6377] ldm_validate_partition_table(): Disk read failed.
[  118.246963][ T6377] Dev nbd0: unable to read RDB block 0
[  118.250668][ T6377]  nbd0: unable to read partition table
[  118.261894][ T6377] ldm_validate_partition_table(): Disk read failed.
[  118.265139][ T6377] Dev nbd0: unable to read RDB block 0
[  118.268168][ T6377]  nbd0: unable to read partition table
[  118.358807][  T792] usb 1-1: Using ep0 maxpacket: 32
[  118.397660][  T792] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  118.424156][  T792] usb 1-1: config 0 has no interface number 0
[  118.441613][  T792] usb 1-1: config 0 interface 31 has no altsetting 0
[  118.499512][  T792] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=34.16
[  118.503001][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.506720][  T792] usb 1-1: Product: syz
[  118.511694][  T792] usb 1-1: Manufacturer: syz
[  118.518775][  T792] usb 1-1: SerialNumber: syz
[  118.527051][  T792] usb 1-1: config 0 descriptor??
[  118.534072][  T792] port100 1-1:0.31: NFC: Could not find bulk-in or bulk-out endpoint
[  118.740406][ T5897] usb 1-1: USB disconnect, device number 7
[  119.278600][ T7111] loop1: detected capacity change from 0 to 512
[  119.292567][ T7111] EXT4-fs: Ignoring removed oldalloc option
[  119.300211][ T7111] EXT4-fs: Ignoring removed mblk_io_submit option
[  119.304787][ T7111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  119.315600][ T7111] EXT4-fs (loop1): orphan cleanup on readonly fs
[  119.324644][ T7111] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5
[  119.331065][ T7111] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  119.335047][ T7111] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.444: Failed to acquire dquot type 1
[  119.349233][ T7111] EXT4-fs (loop1): 1 truncate cleaned up
[  119.355932][ T7111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  119.370750][ T7111] EXT4-fs: Ignoring removed orlov option
[  119.373607][ T7111] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  119.377103][ T7111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  119.404122][ T7111] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  119.423963][ T7111] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.444: Abort forced by user
[  119.428526][ T7111] EXT4-fs (loop1): Remounting filesystem read-only
[  119.431031][ T7111] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  119.434634][ T7111] ext4 filesystem being remounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  119.459515][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.936374][ T7141] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  119.938575][ T7141] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  119.958874][ T7145] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.986242][ T7145] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.020235][ T7147] loop1: detected capacity change from 0 to 256
[  120.041800][ T7147] exfat: Deprecated parameter 'namecase'
[  120.053805][ T7141] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  120.056490][ T7141] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  120.077340][ T7133] loop2: detected capacity change from 0 to 32768
[  120.079384][ T7147] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[  120.105634][ T7133] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  120.106145][ T7141] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  120.110960][ T7141] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  120.162112][ T7133] XFS (loop2): Ending clean mount
[  120.165901][ T7133] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x20 
[  120.170348][ T7133] XFS (loop2): Unmount and run xfs_repair
[  120.172508][ T7133] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  120.176446][ T7133] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  120.179932][ T7133] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  120.183857][ T7133] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  120.188612][ T7133] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  120.192068][ T7133] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  120.196410][ T7133] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  120.199856][ T7133] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  120.220895][ T7133] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  120.227065][ T7133] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x20 len 8 error 74
[  120.233639][ T7133] XFS (loop2): Failed to initialize disk quotas, err -117.
[  120.279667][ T5854] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  120.285583][ T5854] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  120.514557][ T7166] /dev/nullb0: Can't open blockdev
[  120.688962][ T7157] loop1: detected capacity change from 0 to 40427
[  120.709790][ T7157] F2FS-fs (loop1): build fault injection rate: 14
[  120.712388][ T7157] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  120.712818][ T7177] loop2: detected capacity change from 0 to 512
[  120.727617][ T7177] EXT4-fs: Ignoring removed mblk_io_submit option
[  120.737825][ T7177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  120.752354][ T7157] F2FS-fs (loop1): invalid crc value
[  120.762610][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  120.770568][ T7177] EXT4-fs (loop2): 1 truncate cleaned up
[  120.779161][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  120.781448][ T7177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.794999][ T7183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.472'.
[  120.877604][ T7157] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  120.880633][ T7157] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  120.903400][ T7157] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  120.937997][ T7157] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  120.947436][ T7157] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  120.952421][ T7157] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  120.966888][ T7157] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40
[  120.971291][ T7157] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only
[  120.976196][ T7157] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320
[  120.980082][ T7157] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  120.998732][ T7177] netlink: 'syz.2.470': attribute type 1 has an invalid length.
[  121.008919][ T5858] syz-executor: attempt to access beyond end of device
[  121.008919][ T5858] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  121.038693][ T5858] syz-executor: attempt to access beyond end of device
[  121.038693][ T5858] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  121.054905][ T7177] bond1: entered promiscuous mode
[  121.056731][ T7177] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.077262][ T7190] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.083516][ T7190] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  121.087020][ T7190] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  121.092202][ T7190] bond1: (slave ip6gre1): making interface the new active one
[  121.096427][ T7190] ip6gre1: entered promiscuous mode
[  121.099527][ T7190] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  121.283353][ T5858] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  121.288316][ T5858] F2FS-fs (loop1): inconsistent node block, node_type:0, nid:16, node_footer[nid:16,ino:3,ofs:249659,cpver:0,blkaddr:0]
[  121.298984][ T5858] syz-executor: attempt to access beyond end of device
[  121.298984][ T5858] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  121.316877][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  121.316906][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  121.316914][ T5858] Call Trace:
[  121.316919][ T5858]  <TASK>
[  121.316926][ T5858]  dump_stack_lvl+0x189/0x250
[  121.316950][ T5858]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.316964][ T5858]  ? __pfx_queue_work_on+0x10/0x10
[  121.316977][ T5858]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  121.316995][ T5858]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.317021][ T5858]  f2fs_handle_critical_error+0x37c/0x540
[  121.317046][ T5858]  f2fs_write_end_io+0x886/0xb60
[  121.317077][ T5858]  __submit_merged_bio+0x27a/0x6a0
[  121.317101][ T5858]  __submit_merged_write_cond+0x255/0x530
[  121.317125][ T5858]  f2fs_write_data_pages+0x261d/0x3000
[  121.317206][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  121.317301][ T5858]  ? __lock_acquire+0xab9/0xd20
[  121.317336][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  121.317356][ T5858]  do_writepages+0x32e/0x550
[  121.317384][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[  121.317405][ T5858]  filemap_fdatawrite+0x199/0x240
[  121.317424][ T5858]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  121.317472][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[  121.317490][ T5858]  f2fs_sync_dirty_inodes+0x31f/0x830
[  121.317518][ T5858]  f2fs_write_checkpoint+0x95a/0x1df0
[  121.317553][ T5858]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  121.317612][ T5858]  ? kill_f2fs_super+0x298/0x6c0
[  121.317629][ T5858]  kill_f2fs_super+0x2c3/0x6c0
[  121.317646][ T5858]  ? __pfx_kill_f2fs_super+0x10/0x10
[  121.317656][ T5858]  ? radix_tree_delete_item+0x2b6/0x400
[  121.317678][ T5858]  ? shrinker_free+0x2ce/0x3e0
[  121.317693][ T5858]  deactivate_locked_super+0xbc/0x130
[  121.317711][ T5858]  cleanup_mnt+0x425/0x4c0
[  121.317726][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.317746][ T5858]  task_work_run+0x1d4/0x260
[  121.317766][ T5858]  ? __pfx_task_work_run+0x10/0x10
[  121.317785][ T5858]  ? kmem_cache_free+0x18f/0x400
[  121.317807][ T5858]  do_exit+0x6b5/0x2300
[  121.317827][ T5858]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  121.317845][ T5858]  ? __pfx_do_exit+0x10/0x10
[  121.317913][ T5858]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.317929][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.317947][ T5858]  do_group_exit+0x21c/0x2d0
[  121.317965][ T5858]  __x64_sys_exit_group+0x3f/0x40
[  121.317980][ T5858]  x64_sys_call+0x21f7/0x2200
[  121.317995][ T5858]  do_syscall_64+0xfa/0x3b0
[  121.318011][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.318027][ T5858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.318040][ T5858]  ? exc_page_fault+0x9f/0xf0
[  121.318059][ T5858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.318071][ T5858] RIP: 0033:0x7fa568d8ebe9
[  121.318082][ T5858] Code: Unable to access opcode bytes at 0x7fa568d8ebbf.
[  121.318089][ T5858] RSP: 002b:00007ffec3cafa28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  121.318103][ T5858] RAX: ffffffffffffffda RBX: 00007fa568e11c77 RCX: 00007fa568d8ebe9
[  121.318112][ T5858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  121.318120][ T5858] RBP: 0000000000000010 R08: 00007ffec3cad7c6 R09: 00007ffec3cb0ce0
[  121.318128][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec3cb0ce0
[  121.318135][ T5858] R13: 00007fa568e11c05 R14: 00005555921054a8 R15: 00007ffec3cb1db0
[  121.318184][ T5858]  </TASK>
[  121.321063][ T5858] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  121.505380][ T5710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.601450][ T5710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.696007][ T5710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.765184][ T5710] team0: Port device netdevsim0 removed
[  121.774258][ T5710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.977727][ T5710] bridge_slave_1: left allmulticast mode
[  121.987647][ T5710] bridge_slave_1: left promiscuous mode
[  121.992029][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.009030][ T5710] bridge_slave_0: left allmulticast mode
[  122.013221][ T5710] bridge_slave_0: left promiscuous mode
[  122.017635][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.176132][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.183618][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.187723][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.196428][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.200578][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.242900][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.248091][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.255279][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.260868][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.264634][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.635573][ T5710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.644297][ T5710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.649219][ T5710] bond0 (unregistering): Released all slaves
[  123.168859][ T7222] chnl_net:caif_netlink_parms(): no params data found
[  123.223433][ T5912] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  123.262262][ T5710] hsr_slave_0: left promiscuous mode
[  123.267257][ T5710] hsr_slave_1: left promiscuous mode
[  123.270090][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.273114][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.277586][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.280748][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.312865][ T5710] veth1_macvtap: left promiscuous mode
[  123.316236][ T5710] veth0_macvtap: left promiscuous mode
[  123.318719][ T5710] veth1_vlan: left promiscuous mode
[  123.321062][ T5710] veth0_vlan: left promiscuous mode
[  123.397902][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.401628][ T5912] usb 1-1: config 0 has no interfaces?
[  123.405752][ T5912] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  123.409173][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.415191][ T5912] usb 1-1: config 0 descriptor??
[  123.630709][ T5912] usb 1-1: USB disconnect, device number 8
[  123.749421][ T5710] team0 (unregistering): Port device team_slave_1 removed
[  123.780002][ T5710] team0 (unregistering): Port device team_slave_0 removed
[  123.788066][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.304360][   T54] Bluetooth: hci2: command tx timeout
[  124.377250][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.380402][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.386093][ T7222] bridge_slave_0: entered allmulticast mode
[  124.390457][ T7222] bridge_slave_0: entered promiscuous mode
[  124.396693][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.399593][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.402366][ T7222] bridge_slave_1: entered allmulticast mode
[  124.419088][ T7222] bridge_slave_1: entered promiscuous mode
[  124.422337][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.433590][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.487894][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.500727][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.507156][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.513804][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.557148][ T7222] team0: Port device team_slave_0 added
[  124.562028][ T7222] team0: Port device team_slave_1 added
[  124.637929][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.640467][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.650668][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.659276][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.666692][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.677600][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.713433][ T5912] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  124.781150][ T7222] hsr_slave_0: entered promiscuous mode
[  124.794109][ T7222] hsr_slave_1: entered promiscuous mode
[  124.796594][ T7222] debugfs: 'hsr0' already exists in 'hsr'
[  124.798685][ T7222] Cannot create hsr debugfs directory
[  124.873292][ T5912] usb 1-1: config 0 has an invalid interface number: 147 but max is 0
[  124.888121][ T5912] usb 1-1: config 0 has no interface number 0
[  124.904340][ T5912] usb 1-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  124.917783][ T5912] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03
[  124.921304][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.932031][ T7270] loop2: detected capacity change from 0 to 512
[  124.934751][ T5912] usb 1-1: Product: syz
[  124.936387][ T5912] usb 1-1: Manufacturer: syz
[  124.939289][ T5912] usb 1-1: SerialNumber: syz
[  124.962719][ T5912] usb 1-1: config 0 descriptor??
[  124.978467][ T7257] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  124.998715][ T7270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.003058][ T7270] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.053357][ T5912] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  125.137174][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.223809][   T10] usb 1-1: USB disconnect, device number 9
[  125.225539][   T12] usb 1-1: Failed to submit usb control message: -71
[  125.238086][   T12] usb 1-1: unable to send the bmi data to the device: -71
[  125.241895][   T12] usb 1-1: unable to get target info from device
[  125.247742][ T7222] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  125.250765][   T12] usb 1-1: could not get target info (-71)
[  125.257234][   T12] usb 1-1: could not probe fw (-71)
[  125.262953][ T7222] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  125.281279][ T7222] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  125.307688][ T7222] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  125.417865][ T7292] loop2: detected capacity change from 0 to 128
[  125.449944][ T7292] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  125.459959][ T7292] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  125.470926][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.487321][ T7222] 8021q: adding VLAN 0 to HW filter on device team0
[  125.502265][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.505174][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.530273][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.532554][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.551841][ T5854] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  125.590047][ T7222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.610489][ T7222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.674974][ T7299] loop2: detected capacity change from 0 to 4096
[  125.692409][ T7299] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  125.722978][ T7299] ntfs3(loop2): Failed to load $UpCase (-22).
[  125.816193][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.877218][ T7222] veth0_vlan: entered promiscuous mode
[  125.898222][ T7222] veth1_vlan: entered promiscuous mode
[  125.985953][ T7222] veth0_macvtap: entered promiscuous mode
[  125.991510][ T7222] veth1_macvtap: entered promiscuous mode
[  126.005656][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.017273][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.038604][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.044217][ T5710] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.048169][ T5710] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.052543][ T5710] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.181324][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.184359][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.219098][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.222375][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.355548][ T7312] loop2: detected capacity change from 0 to 32768
[  126.361485][ T7312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.498 (7312)
[  126.377620][ T7323] loop3: detected capacity change from 0 to 512
[  126.391421][ T7312] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  126.397273][   T54] Bluetooth: hci2: command tx timeout
[  126.400835][ T7312] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  126.408383][ T7312] BTRFS info (device loop2): using free-space-tree
[  126.440244][ T7323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.548430][ T7222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.759306][ T5854] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  126.766585][ T7353] netlink: 'syz.3.504': attribute type 1 has an invalid length.
[  126.903012][ T7357] vivid-002: disconnect
[  126.919826][ T7355] vivid-002: reconnect
[  126.959261][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'.
[  127.031011][ T7363] netlink: 116 bytes leftover after parsing attributes in process `syz.3.507'.
[  127.272496][ T7375] loop3: detected capacity change from 0 to 512
[  127.301115][ T7375] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  127.325705][ T7375] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.510: invalid indirect mapped block 2683928664 (level 1)
[  127.363041][ T7375] EXT4-fs (loop3): Remounting filesystem read-only
[  127.372522][ T7375] EXT4-fs (loop3): 1 truncate cleaned up
[  127.387646][ T7375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.487288][ T7222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.509500][ T7384] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  127.534465][ T7384] syz.2.514: attempt to access beyond end of device
[  127.534465][ T7384] loop2: rw=0, sector=0, nr_sectors = 2 limit=0
[  127.659105][ T7390] loop0: detected capacity change from 0 to 4096
[  127.698850][ T7392] binder: 7391:7392 ioctl c018620b 0 returned -14
[  128.212081][ T7405] loop0: detected capacity change from 0 to 40427
[  128.226441][ T7405] F2FS-fs: heap/no_heap options were deprecated
[  128.231292][ T7405] F2FS-fs (loop0): build fault injection rate: 19
[  128.234186][ T7405] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  128.238979][ T7405] F2FS-fs (loop0): invalid crc value
[  128.254628][ T7405] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  128.293543][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  128.301704][ T7405] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  128.309190][ T7405] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.313714][ T7405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  128.384019][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  128.445289][   T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  128.449570][   T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  128.453326][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  128.456946][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.463478][   T54] Bluetooth: hci2: command tx timeout
[  128.465392][ T7415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  128.475743][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  128.543366][   T10] usb 4-1: Using ep0 maxpacket: 32
[  128.551856][   T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  128.559070][   T10] usb 4-1: config 0 has no interface number 0
[  128.566526][   T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  128.570829][   T10] usb 4-1: config 0 interface 85 has no altsetting 0
[  128.586677][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  128.590341][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.603598][   T10] usb 4-1: Product: syz
[  128.608260][   T10] usb 4-1: Manufacturer: syz
[  128.610178][   T10] usb 4-1: SerialNumber: syz
[  128.628738][   T10] usb 4-1: config 0 descriptor??
[  128.639287][ T7426] Unsupported ieee802154 address type: 0
[  128.649979][ T7426] loop0: detected capacity change from 0 to 256
[  128.696395][ T7426] FAT-fs (loop0): Directory bread(block 64) failed
[  128.699298][   T24] usb 3-1: USB disconnect, device number 7
[  128.699419][ T7426] FAT-fs (loop0): Directory bread(block 65) failed
[  128.704551][ T7426] FAT-fs (loop0): Directory bread(block 66) failed
[  128.707377][ T7426] FAT-fs (loop0): Directory bread(block 67) failed
[  128.710164][ T7426] FAT-fs (loop0): Directory bread(block 68) failed
[  128.712871][ T7426] FAT-fs (loop0): Directory bread(block 69) failed
[  128.715706][ T7426] FAT-fs (loop0): Directory bread(block 70) failed
[  128.718433][ T7426] FAT-fs (loop0): Directory bread(block 71) failed
[  128.720967][ T7426] FAT-fs (loop0): Directory bread(block 72) failed
[  128.723078][ T7426] FAT-fs (loop0): Directory bread(block 73) failed
[  128.882674][   T10] appletouch 4-1:0.85: Failed to read mode from device.
[  128.886016][   T10] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[  128.894789][   T10] usb 4-1: USB disconnect, device number 2
[  129.837187][ T7447] random: crng reseeded on system resumption
[  129.951428][ T7445] loop3: detected capacity change from 0 to 32768
[  129.993261][ T5312] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  130.001132][ T7445] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  130.001132][ T7445] 
[  130.015412][ T7445] ERROR: (device loop3): remounting filesystem as read-only
[  130.028132][ T7445] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  130.028132][ T7445] 
[  130.543701][   T54] Bluetooth: hci2: command tx timeout
[  131.171930][ T5312] usb 1-1: Using ep0 maxpacket: 16
[  131.182134][ T5312] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  131.185638][ T5312] usb 1-1: config 0 has no interface number 0
[  131.190341][ T5312] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  131.193391][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.195871][ T5312] usb 1-1: Product: syz
[  131.197479][ T5312] usb 1-1: Manufacturer: syz
[  131.199083][ T5312] usb 1-1: SerialNumber: syz
[  131.202125][ T5312] usb 1-1: config 0 descriptor??
[  131.207109][ T5312] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  131.502820][ T7469] mmap: syz.2.545 (7469) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  131.772443][ T5312] gspca_spca1528: reg_w err -71
[  131.796061][ T5312] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  131.812145][ T5312] usb 1-1: USB disconnect, device number 10
[  132.714468][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.716998][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.808243][  T791] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  132.978620][  T791] usb 1-1: Using ep0 maxpacket: 16
[  132.982746][   T33] audit: type=1326 audit(2000000028.780:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.3.553" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a458ebe9 code=0x7ffc0000
[  132.993421][  T791] usb 1-1: config 0 has an invalid interface number: 49 but max is 0
[  132.996665][  T791] usb 1-1: config 0 has no interface number 0
[  132.999175][  T791] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  133.003015][  T791] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9
[  133.023352][   T33] audit: type=1326 audit(2000000028.780:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.3.553" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a458ebe9 code=0x7ffc0000
[  133.023364][  T791] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  133.033397][   T33] audit: type=1326 audit(2000000028.790:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.3.553" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a458ebe9 code=0x7ffc0000
[  133.051557][   T33] audit: type=1326 audit(2000000028.790:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.3.553" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a458ebe9 code=0x7ffc0000
[  133.071313][  T791] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  133.071377][   T33] audit: type=1326 audit(2000000028.790:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.3.553" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a458ebe9 code=0x7ffc0000
[  133.083833][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.086965][  T791] usb 1-1: Product: syz
[  133.088711][  T791] usb 1-1: Manufacturer: syz
[  133.090580][  T791] usb 1-1: SerialNumber: syz
[  133.097593][   T33] audit: type=1326 audit(2000000028.790:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.3.553" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a458ebe9 code=0x7ffc0000
[  133.106080][   T33] audit: type=1326 audit(2000000028.790:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.3.553" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a458ebe9 code=0x7ffc0000
[  133.106926][  T791] usb 1-1: config 0 descriptor??
[  133.113033][   T33] audit: type=1326 audit(2000000028.790:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.3.553" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a458ebe9 code=0x7ffc0000
[  133.125335][   T33] audit: type=1326 audit(2000000028.790:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.3.553" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a458ebe9 code=0x7ffc0000
[  133.132350][ T7483] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  133.151473][   T33] audit: type=1326 audit(2000000028.790:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.3.553" exe="/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f91a458ebe9 code=0x7ffc0000
[  133.169469][ T7481] loop2: detected capacity change from 0 to 32768
[  133.369427][  T791] usb 1-1: USB disconnect, device number 11
[  133.574099][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'.
[  133.588405][ T7509] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  133.592052][ T7509] macvtap1: entered allmulticast mode
[  133.595067][ T7509] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  133.602325][ T7509] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  133.608864][ T7509] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  133.665742][ T5312] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  133.813256][ T5312] usb 3-1: Using ep0 maxpacket: 16
[  133.820830][ T5312] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  133.826895][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  133.837929][ T5312] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  133.841490][ T5312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.850753][ T5312] usb 3-1: Product: syz
[  133.852479][ T5312] usb 3-1: Manufacturer: syz
[  133.854867][ T5312] usb 3-1: SerialNumber: syz
[  133.859225][ T5312] usb 3-1: config 0 descriptor??
[  133.867512][ T5312] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  133.870886][ T5312] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  133.995965][ T7528] overlayfs: upper fs does not support tmpfile.
[  134.453241][  T791] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  134.472546][ T5312] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  134.477404][ T5312] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  134.480809][ T7537] loop3: detected capacity change from 0 to 32768
[  134.511393][ T7537] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  134.541541][ T7222] ocfs2: Unmounting device (7,3) on (node local)
[  134.603245][  T791] usb 1-1: Using ep0 maxpacket: 8
[  134.611818][  T791] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  134.615278][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.618143][  T791] usb 1-1: Product: syz
[  134.619503][  T791] usb 1-1: Manufacturer: syz
[  134.621030][  T791] usb 1-1: SerialNumber: syz
[  134.625747][  T791] usb 1-1: config 0 descriptor??
[  134.631883][  T791] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  134.902316][   T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  134.922513][   T10] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  135.088059][ T5312] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  135.093493][ T5312] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  135.104222][ T5312] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  135.248604][  T791] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  135.251911][  T791] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  135.264411][  T791] usb 1-1: USB disconnect, device number 12
[  135.563297][  T792] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  135.711192][ T5312] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  135.715595][ T5312] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  135.720400][ T5312] usb 3-1: USB disconnect, device number 8
[  135.734936][  T792] usb 4-1: not running at top speed; connect to a high speed hub
[  135.743922][  T792] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.747845][  T792] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  135.751431][  T792] usb 4-1: config 1 has no interface number 1
[  135.755277][  T792] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  135.760445][  T792] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  135.770276][  T792] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  135.778691][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.781918][  T792] usb 4-1: Product: syz
[  135.788636][ T7554] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  135.790638][  T792] usb 4-1: Manufacturer: syz
[  135.797235][  T792] usb 4-1: SerialNumber: syz
[  136.019451][  T792] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  136.040158][  T792] usb 4-1: USB disconnect, device number 3
[  136.070557][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  136.153392][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  136.267318][ T7562] netlink: 'syz.2.583': attribute type 11 has an invalid length.
[  136.313616][   T10] usb 1-1: Using ep0 maxpacket: 32
[  136.317597][   T10] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  136.320853][   T10] usb 1-1: config 0 has no interface number 0
[  136.339226][ T7564] loop2: detected capacity change from 0 to 1024
[  136.342101][   T10] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=d8.af
[  136.353583][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.361052][   T10] usb 1-1: Product: syz
[  136.365902][   T10] usb 1-1: Manufacturer: syz
[  136.367839][   T10] usb 1-1: SerialNumber: syz
[  136.384647][ T5854] hfsplus: bad catalog entry type
[  136.386570][   T10] usb 1-1: config 0 descriptor??
[  136.420631][ T5854] hfsplus: bad catalog entry type
[  136.448630][   T27] hfsplus: b-tree write err: -5, ino 4
[  136.616000][   T10] usb 1-1: USB disconnect, device number 13
[  136.697945][ T5710] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.779330][ T5710] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.935280][ T5710] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.064227][ T5710] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.106964][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  137.111179][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  137.118731][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  137.123406][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  137.134414][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  137.377360][ T7582] loop3: detected capacity change from 0 to 32768
[  137.380313][ T7582] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.593 (7582)
[  137.394939][ T7582] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  137.398999][ T5710] bridge_slave_1: left allmulticast mode
[  137.401327][ T5710] bridge_slave_1: left promiscuous mode
[  137.404062][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.406997][ T7582] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  137.410025][ T7582] BTRFS info (device loop3): using free-space-tree
[  137.420352][ T5710] bridge_slave_0: left allmulticast mode
[  137.425562][ T5710] bridge_slave_0: left promiscuous mode
[  137.427504][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.541755][ T7222] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  137.558370][ T5710] bond1 (unregistering): (slave ip6gre1): Releasing backup interface
[  137.561189][ T5710] ip6gre1 (unregistering): left promiscuous mode
[  137.563875][ T5312] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  137.721185][ T5312] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  137.724045][ T5312] usb 1-1: config 0 has no interface number 0
[  137.730267][ T5312] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  137.742528][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.747726][ T5312] usb 1-1: Product: syz
[  137.749325][ T5312] usb 1-1: Manufacturer: syz
[  137.751117][ T5312] usb 1-1: SerialNumber: syz
[  137.770137][ T5312] usb 1-1: config 0 descriptor??
[  138.021298][ T5710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.026127][ T5710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.030472][ T5710] bond0 (unregistering): Released all slaves
[  138.136280][ T5710] bond1 (unregistering): Released all slaves
[  138.188680][ T5312] usb 1-1: Firmware: major: 154, minor: 51, hardware type: ATUSB (1)
[  138.289804][ T7584] chnl_net:caif_netlink_parms(): no params data found
[  138.389802][ T5312] usb 1-1: failed to fetch extended address, random address set
[  138.486264][ T5312] usb 1-1: USB disconnect, device number 14
[  138.566777][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.570152][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.574020][ T7584] bridge_slave_0: entered allmulticast mode
[  138.577916][ T7584] bridge_slave_0: entered promiscuous mode
[  138.597419][ T5710] hsr_slave_0: left promiscuous mode
[  138.599722][ T5710] hsr_slave_1: left promiscuous mode
[  138.601970][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.606003][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.620696][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.624210][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.637623][ T5710] veth1_macvtap: left promiscuous mode
[  138.639732][ T5710] veth0_macvtap: left promiscuous mode
[  138.641764][ T5710] veth1_vlan: left promiscuous mode
[  138.644279][ T5710] veth0_vlan: left promiscuous mode
[  138.965786][ T7627] loop0: detected capacity change from 0 to 8
[  139.137134][ T5710] team0 (unregistering): Port device team_slave_1 removed
[  139.181834][ T5710] team0 (unregistering): Port device team_slave_0 removed
[  139.186216][ T5235] Bluetooth: hci1: command tx timeout
[  139.499587][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.505274][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.508596][ T7584] bridge_slave_1: entered allmulticast mode
[  139.512081][ T7584] bridge_slave_1: entered promiscuous mode
[  139.671270][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.708265][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.814826][ T7584] team0: Port device team_slave_0 added
[  139.833971][ T7584] team0: Port device team_slave_1 added
[  139.940663][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.950080][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.962783][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.976060][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.978775][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.990986][ T5710] ==================================================================
[  139.994065][ T5710] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  139.997390][ T5710] Write of size 8 at addr ffff888121d344b0 by task kworker/u8:2/5710
[  140.000873][ T5710] 
[  140.002109][ T5710] CPU: 1 UID: 0 PID: 5710 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  140.002129][ T5710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.002138][ T5710] Workqueue: netns cleanup_net
[  140.002161][ T5710] Call Trace:
[  140.002168][ T5710]  <TASK>
[  140.002174][ T5710]  dump_stack_lvl+0x189/0x250
[  140.002191][ T5710]  ? __kasan_check_byte+0x12/0x40
[  140.002210][ T5710]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.002224][ T5710]  ? lock_release+0x4b/0x3e0
[  140.002242][ T5710]  ? __virt_addr_valid+0x4a5/0x5c0
[  140.002257][ T5710]  print_report+0xca/0x240
[  140.002267][ T5710]  ? __xfrm_state_delete+0x696/0xca0
[  140.002281][ T5710]  kasan_report+0x118/0x150
[  140.002294][ T5710]  ? __xfrm_state_delete+0x696/0xca0
[  140.002310][ T5710]  __xfrm_state_delete+0x696/0xca0
[  140.002326][ T5710]  __xfrm_state_delete+0x87b/0xca0
[  140.002343][ T5710]  xfrm_state_flush+0x45f/0x770
[  140.002359][ T5710]  xfrm6_tunnel_net_exit+0x3f/0x100
[  140.002370][ T5710]  ops_undo_list+0x49a/0x990
[  140.002385][ T5710]  ? __pfx_ops_undo_list+0x10/0x10
[  140.002400][ T5710]  ? do_raw_spin_unlock+0x4d/0x240
[  140.002414][ T5710]  cleanup_net+0x4c5/0x800
[  140.002460][ T5710]  ? __pfx_cleanup_net+0x10/0x10
[  140.002474][ T5710]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.002486][ T5710]  ? process_scheduled_works+0x9ef/0x17b0
[  140.002496][ T5710]  ? process_scheduled_works+0x9ef/0x17b0
[  140.002506][ T5710]  process_scheduled_works+0xae1/0x17b0
[  140.002523][ T5710]  ? __pfx_process_scheduled_works+0x10/0x10
[  140.002536][ T5710]  worker_thread+0x8a0/0xda0
[  140.002547][ T5710]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.002561][ T5710]  ? __kthread_parkme+0x7b/0x200
[  140.002574][ T5710]  kthread+0x711/0x8a0
[  140.002587][ T5710]  ? __pfx_worker_thread+0x10/0x10
[  140.002597][ T5710]  ? __pfx_kthread+0x10/0x10
[  140.002609][ T5710]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.002620][ T5710]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.002633][ T5710]  ? __pfx_kthread+0x10/0x10
[  140.002646][ T5710]  ret_from_fork+0x3fc/0x770
[  140.002658][ T5710]  ? __pfx_ret_from_fork+0x10/0x10
[  140.002669][ T5710]  ? __switch_to_asm+0x39/0x70
[  140.002682][ T5710]  ? __switch_to_asm+0x33/0x70
[  140.002695][ T5710]  ? __pfx_kthread+0x10/0x10
[  140.002707][ T5710]  ret_from_fork_asm+0x1a/0x30
[  140.002723][ T5710]  </TASK>
[  140.002727][ T5710] 
[  140.092495][ T5710] Allocated by task 6307:
[  140.094227][ T5710]  kasan_save_track+0x3e/0x80
[  140.096106][ T5710]  __kasan_slab_alloc+0x6c/0x80
[  140.098091][ T5710]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  140.100162][ T5710]  xfrm_state_alloc+0x24/0x2f0
[  140.101963][ T5710]  __find_acq_core+0x8a7/0x1c00
[  140.103860][ T5710]  xfrm_find_acq+0x78/0xa0
[  140.105661][ T5710]  xfrm_alloc_userspi+0x6b3/0xc90
[  140.107686][ T5710]  xfrm_user_rcv_msg+0x7a3/0xab0
[  140.109685][ T5710]  netlink_rcv_skb+0x208/0x470
[  140.111608][ T5710]  xfrm_netlink_rcv+0x79/0x90
[  140.113490][ T5710]  netlink_unicast+0x82f/0x9e0
[  140.115399][ T5710]  netlink_sendmsg+0x805/0xb30
[  140.117335][ T5710]  __sock_sendmsg+0x21c/0x270
[  140.119222][ T5710]  ____sys_sendmsg+0x505/0x830
[  140.121128][ T5710]  ___sys_sendmsg+0x21f/0x2a0
[  140.122998][ T5710]  __x64_sys_sendmsg+0x19b/0x260
[  140.124935][ T5710]  do_syscall_64+0xfa/0x3b0
[  140.126779][ T5710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.129121][ T5710] 
[  140.130092][ T5710] Freed by task 5312:
[  140.131693][ T5710]  kasan_save_track+0x3e/0x80
[  140.133589][ T5710]  kasan_save_free_info+0x46/0x50
[  140.135607][ T5710]  __kasan_slab_free+0x5b/0x80
[  140.137540][ T5710]  kmem_cache_free+0x18f/0x400
[  140.139434][ T5710]  xfrm_state_gc_task+0x52d/0x6b0
[  140.141488][ T5710]  process_scheduled_works+0xae1/0x17b0
[  140.143702][ T5710]  worker_thread+0x8a0/0xda0
[  140.145580][ T5710]  kthread+0x711/0x8a0
[  140.147166][ T5710]  ret_from_fork+0x3fc/0x770
[  140.148939][ T5710]  ret_from_fork_asm+0x1a/0x30
[  140.150754][ T5710] 
[  140.151684][ T5710] The buggy address belongs to the object at ffff888121d34480
[  140.151684][ T5710]  which belongs to the cache xfrm_state of size 928
[  140.157191][ T5710] The buggy address is located 48 bytes inside of
[  140.157191][ T5710]  freed 928-byte region [ffff888121d34480, ffff888121d34820)
[  140.162550][ T5710] 
[  140.163526][ T5710] The buggy address belongs to the physical page:
[  140.166054][ T5710] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888121d34900 pfn:0x121d34
[  140.170031][ T5710] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  140.173382][ T5710] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  140.176490][ T5710] page_type: f5(slab)
[  140.178085][ T5710] raw: 057ff00000000040 ffff88801abfb140 dead000000000122 0000000000000000
[  140.181389][ T5710] raw: ffff888121d34900 00000000800e000c 00000000f5000000 0000000000000000
[  140.184757][ T5710] head: 057ff00000000040 ffff88801abfb140 dead000000000122 0000000000000000
[  140.188109][ T5710] head: ffff888121d34900 00000000800e000c 00000000f5000000 0000000000000000
[  140.191507][ T5710] head: 057ff00000000002 ffffea0004874d01 00000000ffffffff 00000000ffffffff
[  140.194871][ T5710] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  140.198235][ T5710] page dumped because: kasan: bad access detected
[  140.200785][ T5710] page_owner tracks the page as allocated
[  140.202982][ T5710] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6307, tgid 6305 (syz.2.136), ts 87579013833, free_ts 87546803234
[  140.210121][ T5710]  post_alloc_hook+0x240/0x2a0
[  140.212066][ T5710]  get_page_from_freelist+0x21e4/0x22c0
[  140.214231][ T5710]  __alloc_frozen_pages_noprof+0x181/0x370
[  140.216513][ T5710]  alloc_pages_mpol+0x232/0x4a0
[  140.218483][ T5710]  allocate_slab+0x8a/0x370
[  140.220288][ T5710]  ___slab_alloc+0xbeb/0x1410
[  140.222180][ T5710]  kmem_cache_alloc_noprof+0x283/0x3c0
[  140.224366][ T5710]  xfrm_state_alloc+0x24/0x2f0
[  140.226300][ T5710]  xfrm_state_find+0x37d4/0x5400
[  140.228296][ T5710]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  140.230755][ T5710]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  140.232816][ T5710]  xfrm_lookup_route+0x3c/0x1c0
[  140.234689][ T5710]  ip6_datagram_dst_update+0x75c/0xcb0
[  140.236906][ T5710]  __ip6_datagram_connect+0xbd1/0x1150
[  140.239132][ T5710]  ip6_datagram_connect_v6_only+0x63/0xa0
[  140.241209][ T5710]  __sys_connect+0x316/0x440
[  140.242661][ T5710] page last free pid 5854 tgid 5854 stack trace:
[  140.244601][ T5710]  __free_frozen_pages+0xbc4/0xd30
[  140.246164][ T5710]  __slab_free+0x303/0x3c0
[  140.247650][ T5710]  qlist_free_all+0x97/0x140
[  140.249496][ T5710]  kasan_quarantine_reduce+0x148/0x160
[  140.251582][ T5710]  __kasan_slab_alloc+0x22/0x80
[  140.253222][ T5710]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  140.254905][ T5710]  copy_mm+0xdb/0x4b0
[  140.256161][ T5710]  copy_process+0x1706/0x3c00
[  140.257879][ T5710]  kernel_clone+0x21e/0x840
[  140.259679][ T5710]  __x64_sys_clone+0x18b/0x1e0
[  140.261628][ T5710]  do_syscall_64+0xfa/0x3b0
[  140.263494][ T5710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.265887][ T5710] 
[  140.266835][ T5710] Memory state around the buggy address:
[  140.269025][ T5710]  ffff888121d34380: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  140.272230][ T5710]  ffff888121d34400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  140.275455][ T5710] >ffff888121d34480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  140.278687][ T5710]                                      ^
[  140.280816][ T5710]  ffff888121d34500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  140.283906][ T5710]  ffff888121d34580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  140.287000][ T5710] ==================================================================
[  140.290334][    C1] vkms_vblank_simulate: vblank timer overrun
[  140.292972][ T5710] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  140.295752][ T5710] CPU: 1 UID: 0 PID: 5710 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  140.300737][ T5710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.304812][ T5710] Workqueue: netns cleanup_net
[  140.306772][ T5710] Call Trace:
[  140.308119][ T5710]  <TASK>
[  140.309317][ T5710]  dump_stack_lvl+0x99/0x250
[  140.311168][ T5710]  ? __asan_memcpy+0x40/0x70
[  140.313044][ T5710]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.315083][ T5710]  ? __pfx__printk+0x10/0x10
[  140.316968][ T5710]  vpanic+0x281/0x750
[  140.318539][ T5710]  ? __pfx_vpanic+0x10/0x10
[  140.320318][ T5710]  ? irqentry_exit+0x74/0x90
[  140.322132][ T5710]  panic+0xb9/0xc0
[  140.323673][ T5710]  ? __pfx_panic+0x10/0x10
[  140.325430][ T5710]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  140.327812][ T5710]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  140.330215][ T5710]  ? __xfrm_state_delete+0x696/0xca0
[  140.332414][ T5710]  check_panic_on_warn+0x89/0xb0
[  140.334452][ T5710]  ? __xfrm_state_delete+0x696/0xca0
[  140.336653][ T5710]  end_report+0x78/0x160
[  140.338372][ T5710]  kasan_report+0x129/0x150
[  140.340279][ T5710]  ? __xfrm_state_delete+0x696/0xca0
[  140.342470][ T5710]  __xfrm_state_delete+0x696/0xca0
[  140.344556][ T5710]  __xfrm_state_delete+0x87b/0xca0
[  140.346657][ T5710]  xfrm_state_flush+0x45f/0x770
[  140.348660][ T5710]  xfrm6_tunnel_net_exit+0x3f/0x100
[  140.350805][ T5710]  ops_undo_list+0x49a/0x990
[  140.352681][ T5710]  ? __pfx_ops_undo_list+0x10/0x10
[  140.354805][ T5710]  ? do_raw_spin_unlock+0x4d/0x240
[  140.356890][ T5710]  cleanup_net+0x4c5/0x800
[  140.358739][ T5710]  ? __pfx_cleanup_net+0x10/0x10
[  140.360877][ T5710]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.362951][ T5710]  ? process_scheduled_works+0x9ef/0x17b0
[  140.365283][ T5710]  ? process_scheduled_works+0x9ef/0x17b0
[  140.367668][ T5710]  process_scheduled_works+0xae1/0x17b0
[  140.370009][ T5710]  ? __pfx_process_scheduled_works+0x10/0x10
[  140.372451][ T5710]  worker_thread+0x8a0/0xda0
[  140.374275][ T5710]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.376870][ T5710]  ? __kthread_parkme+0x7b/0x200
[  140.378912][ T5710]  kthread+0x711/0x8a0
[  140.380603][ T5710]  ? __pfx_worker_thread+0x10/0x10
[  140.382729][ T5710]  ? __pfx_kthread+0x10/0x10
[  140.384596][ T5710]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.386719][ T5710]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.388768][ T5710]  ? __pfx_kthread+0x10/0x10
[  140.390748][ T5710]  ret_from_fork+0x3fc/0x770
[  140.392736][ T5710]  ? __pfx_ret_from_fork+0x10/0x10
[  140.394850][ T5710]  ? __switch_to_asm+0x39/0x70
[  140.396876][ T5710]  ? __switch_to_asm+0x33/0x70
[  140.398872][ T5710]  ? __pfx_kthread+0x10/0x10
[  140.400775][ T5710]  ret_from_fork_asm+0x1a/0x30
[  140.402629][ T5710]  </TASK>
[  140.404608][ T5710] Kernel Offset: disabled
[  140.406374][ T5710] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:41:09  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000202 RCX=0000000080000000 RDX=ffffc90006ef7801
RSI=ffffffff8d9ca9f5 RDI=ffffffff8be33400 RBP=dffffc0000000000 RSP=ffffc90006ef7698
R8 =ffffc90006ef7bf0 R9 =0000000000000000 R10=ffffc90006ef7858 R11=fffff52000ddef0d
R12=ffffc90006ef7c00 R13=ffffffff8172c195 R14=ffffffff8e139ee0 R15=ffff888020108000
RIP=ffffffff8b7961b3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555564522500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005559bf860bf8 CR3=0000000106fe4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81660f95 ffffffff81660f4a
XMM02=ffffffff823c70e4 ffffffff81660f4a XMM03=ffffffff823c7c29 ffffffff823c7acd
XMM04=ffffffff8957da59 ffffffff8957d94e XMM05=ffffffff8957d897 ffffffff823c7c29
XMM06=ffffffff823c7acd ffffffff823c70e4 XMM07=ffffffff823c70bd ffffffff823c6e22
XMM08=0000000000000000 00007fc965012ee7 XMM09=0000000000000000 00007fc965012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bdc05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffc90002e8f1f0 RSP=ffffc90002e8f018
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854efea0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dee3e0 R15=0000000000000000
RIP=ffffffff854eff17 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcf84046440 CR3=000000010fbdc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f91a4612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
