last executing test programs:

1m11.893775541s ago: executing program 0 (id=548):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000280)=""/165, 0xa5, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000340)=""/154, 0xf6, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000400)=""/184, 0xb8, 0x0, 0x3, 0x3}}, 0x48)

1m11.775299112s ago: executing program 0 (id=549):
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)

1m11.726897152s ago: executing program 0 (id=551):
futex(0x0, 0x80, 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0)

1m11.634669797s ago: executing program 0 (id=552):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x2f00, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x6, 0x0, 0x7, 0xf58, 0x6]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0})

1m11.574407157s ago: executing program 0 (id=554):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f55, &(0x7f000000efc0)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1m11.226918096s ago: executing program 0 (id=559):
r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1400000000, 0x100)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000200)={0x5})

56.161295826s ago: executing program 32 (id=559):
r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1400000000, 0x100)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000200)={0x5})

25.42543206s ago: executing program 3 (id=1066):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

25.257246609s ago: executing program 3 (id=1067):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r3, r0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r4, r5, 0x0, 0x20fffe82)

25.127122329s ago: executing program 3 (id=1070):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x68001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4e21, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x40, 0xffffdd86}}}}}}}, 0x3e)

24.900526239s ago: executing program 3 (id=1071):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

24.759960277s ago: executing program 3 (id=1073):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r1 = syz_io_uring_setup(0x8d3, &(0x7f0000000140)={0x0, 0xfb8f, 0x0, 0xfffffffe, 0x8069}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100)

24.184073233s ago: executing program 3 (id=1076):
syz_usb_connect(0x0, 0xdd5, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038f08e140ac051d92bec2010203010902c30d040306104e0904080605035600a609058203", @ANYRESDEC], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})

23.905582147s ago: executing program 33 (id=1076):
syz_usb_connect(0x0, 0xdd5, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038f08e140ac051d92bec2010203010902c30d040306104e0904080605035600a609058203", @ANYRESDEC], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})

10.711488478s ago: executing program 2 (id=1179):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11)

10.620173355s ago: executing program 2 (id=1181):
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0)

10.619574046s ago: executing program 2 (id=1183):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

10.551090462s ago: executing program 2 (id=1184):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff})
r1 = socket(0x2c, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001000)={0x3000a212})

10.550684847s ago: executing program 2 (id=1185):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x101, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800)

10.485868574s ago: executing program 2 (id=1188):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x800400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x4, 0xc24, &(0x7f0000000d00)="$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")
sync()
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00')

3.164422103s ago: executing program 1 (id=1242):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x28, r1, 0x509, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc008080}, 0x48050)

3.09081982s ago: executing program 1 (id=1243):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000ac0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0], [0x0, 0x0, 0x0, 0x7ff], [0x0, 0xd0c, 0x0, 0x8000], [0x0, 0x100000000, 0xffffffffffffffff]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0xf, 0x20203243, 0x3, [0x2, r4], [0x101, 0xfffffeff, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x3], [0xfff]})

3.040689208s ago: executing program 1 (id=1244):
syz_usb_connect(0x5, 0x3d, &(0x7f0000000cc0)={{0x12, 0x1, 0x0, 0xda, 0x4, 0x5, 0x20, 0x5ac, 0x821a, 0xf867, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe1, 0x4, 0x1, 0xfc, 0x21, 0x16, 0x7, [], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x9, 0x4, 0x4, [@generic={0x8, 0xb, "9a61b4d7573d"}, @generic={0x8, 0xb, "bbaedeacdfce"}]}}]}}]}}]}}, 0x0)

1.870756349s ago: executing program 1 (id=1245):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

1.810939878s ago: executing program 1 (id=1246):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

1.710113017s ago: executing program 1 (id=1247):
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

405.561703ms ago: executing program 4 (id=1250):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

288.888885ms ago: executing program 4 (id=1251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

215.869594ms ago: executing program 4 (id=1252):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140))

215.625838ms ago: executing program 4 (id=1253):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x1, 0x1}, 0x0, 0xfffffffe, 0x6c, {0x44, 0x1}, 0x8, 0x803})

70.59211ms ago: executing program 4 (id=1254):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40, 0x0, 0x0, 0xd}, {0x6}]}, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14", 0x3}], 0x1}}], 0x1, 0x20008000)

0s ago: executing program 4 (id=1255):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace(0x10, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r3, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8)

kernel console output (not intermixed with test programs):

ew high-speed USB device number 4 using dummy_hcd
[   87.004556][ T1279] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   87.053510][   T10] usb 3-1: Using ep0 maxpacket: 32
[   87.057627][   T10] usb 3-1: config 8 has an invalid interface number: 203 but max is 0
[   87.060517][   T10] usb 3-1: config 8 has no interface number 0
[   87.062587][   T10] usb 3-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023
[   87.065850][   T10] usb 3-1: config 8 interface 203 has no altsetting 0
[   87.069909][   T10] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[   87.073604][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.076131][   T10] usb 3-1: Product: syz
[   87.077455][   T10] usb 3-1: Manufacturer: syz
[   87.078919][   T10] usb 3-1: SerialNumber: syz
[   87.085072][ T6515] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   87.158207][ T1279] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[   87.161517][ T1279] usb 1-1: config 0 has no interface number 0
[   87.165395][ T1279] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   87.173672][ T1279] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   87.177333][ T1279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.188268][ T1279] usb 1-1: Product: syz
[   87.190014][ T1279] usb 1-1: Manufacturer: syz
[   87.191956][ T1279] usb 1-1: SerialNumber: syz
[   87.208048][ T1279] usb 1-1: config 0 descriptor??
[   87.217778][ T1279] yurex 1-1:0.50: Could not find endpoints
[   87.278639][ T6525] comedi comedi2: s526: I/O port conflict (0x3,64)
[   87.298771][   T10] port100 3-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint
[   87.316189][   T10] usb 3-1: USB disconnect, device number 4
[   87.418324][ T5899] usb 1-1: USB disconnect, device number 5
[   87.653223][   T52] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   87.803078][   T52] usb 2-1: Using ep0 maxpacket: 8
[   87.808547][   T52] usb 2-1: config 0 has an invalid interface number: 145 but max is 0
[   87.811853][   T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   87.825575][   T52] usb 2-1: config 0 has no interface number 0
[   87.828085][   T52] usb 2-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[   87.840256][   T52] usb 2-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21
[   87.846016][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.863264][   T52] usb 2-1: Product: syz
[   87.865003][   T52] usb 2-1: Manufacturer: syz
[   87.866817][   T52] usb 2-1: SerialNumber: syz
[   87.878706][   T52] usb 2-1: config 0 descriptor??
[   87.973679][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'.
[   88.098080][   T52] rndis_host 2-1:0.145: skipping garbage
[   88.100435][   T52] usb 2-1: bad CDC descriptors
[   88.126514][   T52] usb 2-1: USB disconnect, device number 7
[   88.165743][ T6551] input: syz1 as /devices/virtual/input/input5
[   88.179122][ T6551] input: failed to attach handler leds to device input5, error: -6
[   88.270260][ T6557] netlink: 'syz.0.262': attribute type 12 has an invalid length.
[   88.403700][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   88.565491][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.569478][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   88.574510][   T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   88.578061][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   88.581198][   T24] usb 3-1: SerialNumber: syz
[   88.662554][ T6560] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.722534][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'.
[   88.803652][   T24] usb 3-1: 0:2 : does not exist
[   88.817091][   T24] usb 3-1: USB disconnect, device number 5
[   88.861281][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   89.447094][ T6571] loop1: detected capacity change from 0 to 4096
[   89.449720][ T6571] ntfs3: Unknown parameter ''
[   89.473709][ T6570] loop1: detected capacity change from 0 to 512
[   89.493782][ T6570] EXT4-fs (loop1): orphan cleanup on readonly fs
[   89.504762][ T6570] __quota_error: 3 callbacks suppressed
[   89.504777][ T6570] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[   89.510653][ T6570] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   89.513911][ T6570] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.266: Failed to acquire dquot type 1
[   89.521791][ T6570] EXT4-fs (loop1): 1 truncate cleaned up
[   89.525852][ T6570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   89.569719][ T6576] loop0: detected capacity change from 0 to 256
[   89.585231][ T6576] exfat: Deprecated parameter 'utf8'
[   89.607489][ T6576] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   89.636443][ T6578] loop2: detected capacity change from 0 to 1024
[   89.639600][ T6578] EXT4-fs: Ignoring removed nobh option
[   89.642027][ T6578] EXT4-fs: inline encryption not supported
[   89.666625][ T6578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.703823][ T6578] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.270: Allocating blocks 385-513 which overlap fs metadata
[   89.726434][ T6578] EXT4-fs (loop2): pa ffff888103798488: logic 16, phys. 129, len 24
[   89.728981][ T6578] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[   89.745869][ T6578] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   89.753090][ T6578] EXT4-fs (loop2): This should not happen!! Data will be lost
[   89.753090][ T6578] 
[   89.756421][ T6578] EXT4-fs (loop2): Total free blocks count 0
[   89.757379][ T6583] loop0: detected capacity change from 0 to 4096
[   89.758659][ T6578] EXT4-fs (loop2): Free/Dirty block details
[   89.758702][ T6578] EXT4-fs (loop2): free_blocks=128
[   89.767146][ T6583] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   89.777521][ T6578] EXT4-fs (loop2): dirty_blocks=0
[   89.779165][ T6578] EXT4-fs (loop2): Block reservation details
[   89.782350][ T6578] EXT4-fs (loop2): i_reserved_data_blocks=0
[   89.801291][ T6583] ntfs3(loop0): Failed to load $Extend (-22).
[   89.804950][ T6583] ntfs3(loop0): Failed to initialize $Extend.
[   89.965071][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.082439][ T6591] loop2: detected capacity change from 0 to 1024
[   90.124699][ T6591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.143374][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.720261][ T6602] loop2: detected capacity change from 0 to 32768
[   91.240112][ T6607] loop2: detected capacity change from 0 to 32768
[   91.270415][ T6607] jfs_mount: dbMount failed w/rc = -5
[   91.280432][ T6607] Mount JFS Failure: -5
[   91.291506][ T6607] jfs_mount failed w/return code = -5
[   92.018777][ T6623] afs: Unknown parameter 'A~|vN'
[   92.574928][ T6630] loop1: detected capacity change from 0 to 32768
[   92.627817][ T6630] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc64,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,read_only
[   92.627841][ T6630]   allowing incompatible features above 0.0: (unknown version)
[   92.627850][ T6630]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   92.645660][ T6630] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   92.650039][ T6630] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing
[   92.656405][ T6630] bcachefs (loop1): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:10004000b  compress none
[   92.656425][ T6630]   has non ptr field, deleting
[   92.668888][ T6630] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[   92.672293][ T6630] bcachefs (loop1): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete
[   92.672293][ T6630] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive
[   92.672293][ T6630]   running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents
[   92.703611][ T6630] bcachefs (loop1): invalid bkey in btree_node btree=dirents level=0: u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4096 type dir
[   92.703650][ T6630]   dirent points to own directory, deleting
[   92.719820][ T6630] bcachefs (loop1): accounting_read... done
[   92.726058][ T6630] bcachefs (loop1): alloc_read... done
[   92.729451][ T6630] bcachefs (loop1): snapshots_read... done
[   92.732659][ T6630] bcachefs (loop1): check_allocations...
[   92.741819][ T6630] bcachefs (loop1): bucket 0:26 data type btree ptr gen 0 missing in alloc btree
[   92.741855][ T6630]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[   92.759311][ T6630] bcachefs (loop1): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[   92.759326][ T6630]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   92.770569][ T6630] bcachefs (loop1): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[   92.770585][ T6630]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   92.782196][ T6630] bcachefs (loop1): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[   92.782211][ T6630]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   92.797058][ T6630] bcachefs (loop1): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[   92.797073][ T6630]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[   92.805998][ T6635] netlink: 'syz.2.290': attribute type 1 has an invalid length.
[   92.810675][ T6630] bcachefs (loop1): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing
[   92.815155][ T6630] bcachefs (loop1): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   92.820148][ T6635] netlink: 15 bytes leftover after parsing attributes in process `syz.2.290'.
[   92.820947][ T6630] bcachefs (loop1): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing
[   92.827958][ T6630] bcachefs (loop1): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   92.833879][ T6630] bcachefs (loop1): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing
[   92.838095][ T6630] bcachefs (loop1): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   92.843289][ T6630] bcachefs (loop1): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing
[   92.847290][ T6630] bcachefs (loop1): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   92.851477][ T6630] bcachefs (loop1): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing
[   92.855217][ T6630] bcachefs (loop1): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   92.858833][ T6630] bcachefs (loop1): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[   92.862578][ T6630] bcachefs (loop1): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   92.867012][ T6630] bcachefs (loop1): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing
[   92.870446][ T6630] bcachefs (loop1): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   92.874198][ T6630] bcachefs (loop1): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing
[   92.877764][ T6630] bcachefs (loop1): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing
[   92.881753][ T6630] bcachefs (loop1): bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing
[   92.885327][ T6630] bcachefs (loop1): bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   92.890392][ T6630] bcachefs (loop1): bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing
[   92.894978][ T6630] bcachefs (loop1): bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   92.898803][ T6630] bcachefs (loop1): bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing
[   92.898811][ T6630]   Ratelimiting new instances of previous error
[   92.905305][ T6630] bcachefs (loop1): bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[   92.905313][ T6630]   Ratelimiting new instances of previous error
[   92.922714][ T6630]  done
[   92.924270][ T6637] loop2: detected capacity change from 0 to 2048
[   92.928111][ T6630] bcachefs (loop1): going read-write
[   92.932497][ T6637] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   92.961961][ T6642] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   93.077774][ T6630] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[   93.081694][ T6630] bcachefs (loop1): going read-only
[   93.087587][ T6630] bcachefs (loop1): finished waiting for writes to stop
[   93.092329][ T6630] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13
[   93.097138][ T6651] loop2: detected capacity change from 0 to 1024
[   93.099917][ T6630] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13
[   93.105734][ T6630] bcachefs (loop1): unclean shutdown complete, journal seq 14
[   93.110275][ T6630] bcachefs (loop1): done going read-only, filesystem not clean
[   93.112587][ T6630] bcachefs (loop1): done starting filesystem
[   93.134877][ T6651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.150814][ T5845] bcachefs (loop1): shutting down
[   93.168768][ T6651] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.2.292: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[   93.187020][ T6651] EXT4-fs (loop2): Remounting filesystem read-only
[   93.228890][ T5845] bcachefs (loop1): shutdown complete
[   93.255305][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.494176][ T6668] loop0: detected capacity change from 0 to 1024
[   94.377254][ T6681] loop2: detected capacity change from 0 to 2048
[   94.390616][ T6681] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.661875][ T6683] loop2: detected capacity change from 0 to 32768
[   94.764929][ T6683] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   94.775412][ T6683] (syz.2.305,6683,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[   94.780426][ T6683] (syz.2.305,6683,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[   94.785112][ T6683] (syz.2.305,6683,0):ocfs2_mknod:301 ERROR: status = -2
[   94.787803][ T6683] (syz.2.305,6683,0):ocfs2_mknod:505 ERROR: status = -2
[   94.790239][ T6683] (syz.2.305,6683,0):ocfs2_create:678 ERROR: status = -2
[   94.827213][ T5849] ocfs2: Unmounting device (7,2) on (node local)
[   94.990171][ T1279] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   95.049244][ T6693] loop2: detected capacity change from 0 to 1024
[   95.052545][ T6693] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[   95.065771][ T6693] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   95.074252][ T6693] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #32: comm syz.2.309: iget: special inode unallocated
[   95.083206][ T6693] EXT4-fs (loop2): Remounting filesystem read-only
[   95.085325][ T6693] EXT4-fs (loop2): no journal found
[   95.086892][ T6693] EXT4-fs (loop2): can't get journal size
[   95.090341][ T6693] EXT4-fs (loop2): filesystem is read-only
[   95.093939][ T6693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   95.129160][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.145464][ T1279] usb 1-1: Using ep0 maxpacket: 8
[   95.148554][ T1279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.194413][ T1279] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[   95.197926][ T1279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.200722][ T1279] usb 1-1: Product: syz
[   95.202119][ T1279] usb 1-1: Manufacturer: syz
[   95.214008][ T1279] usb 1-1: SerialNumber: syz
[   95.224011][ T1279] usb 1-1: config 0 descriptor??
[   95.235083][ T1279] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22
[   95.577796][   T24] usb 1-1: USB disconnect, device number 6
[   95.789051][ T6705] vxlan0: entered promiscuous mode
[   95.791104][ T6705] vxlan0: entered allmulticast mode
[   95.794374][ T5878] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.797484][ T5878] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.799996][ T5878] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.804310][ T5878] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.845780][ T6707] loop1: detected capacity change from 0 to 512
[   95.857161][ T6707] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   95.861735][ T6707] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   95.871603][ T6707] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   95.875497][ T6707] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   95.878011][ T6707] System zones: 0-2, 18-18, 34-35
[   95.882110][ T6707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.904587][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.354845][ T1279] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   96.845157][ T1279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.848673][ T1279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.852142][ T1279] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   96.860024][ T1279] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[   96.864147][ T1279] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[   96.867261][ T1279] usb 3-1: Product: syz
[   96.872500][ T1279] usb 3-1: config 0 descriptor??
[   96.995811][ T6730] loop0: detected capacity change from 0 to 32768
[   97.005944][ T6730] (syz.0.320,6730,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   97.014496][ T6730] (syz.0.320,6730,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   97.029543][ T6730] JBD2: Ignoring recovery information on journal
[   97.126830][ T6730] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   97.310579][ T5853] ocfs2: Unmounting device (7,0) on (node local)
[   97.318823][ T1279] waltop 0003:172F:0037.0001: unknown main item tag 0x0
[   97.324216][ T1279] waltop 0003:172F:0037.0001: unknown main item tag 0x0
[   97.326867][ T1279] waltop 0003:172F:0037.0001: unknown main item tag 0x0
[   97.341170][ T1279] waltop 0003:172F:0037.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[   97.478956][ T6740] loop0: detected capacity change from 0 to 4096
[   97.505782][  T973] usb 3-1: USB disconnect, device number 6
[   97.509646][ T6740] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[   97.512471][ T6740] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[   97.548766][ T6740] ntfs3(loop0): ino=1c, mi_enum_attr
[   97.551314][ T6740] ntfs3(loop0): ino=1b, "file0" ntfs_readdir
[   97.564145][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   97.574516][   T26] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[   97.577971][ T5853] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[   97.580655][ T5853] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   97.584289][ T5853] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[   97.587515][   T26] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[   97.713385][   T33] audit: type=1326 audit(1755338189.015:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.0.327" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06f258ebe9 code=0x0
[   97.734235][   T24] usb 2-1: Using ep0 maxpacket: 8
[   97.739582][   T24] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[   97.742721][   T24] usb 2-1: config 0 has no interface number 0
[   97.746008][   T24] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   97.750898][   T24] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   97.755887][   T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   97.760366][   T24] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   97.768717][   T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   97.772476][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.778563][   T24] usb 2-1: config 0 descriptor??
[   97.796028][   T24] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   97.997235][   T24] usb 2-1: USB disconnect, device number 8
[   98.003068][   T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[   98.191661][ T6754] input: syz1 as /devices/virtual/input/input6
[   98.834854][ T6769] loop0: detected capacity change from 0 to 64
[   99.727712][ T6778] loop0: detected capacity change from 0 to 32768
[   99.731179][ T6778] XFS: noikeep mount option is deprecated.
[   99.755247][ T6778] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.840832][ T6778] XFS (loop0): Ending clean mount
[   99.860952][ T6778] XFS (loop0): Quotacheck needed: Please wait.
[   99.903713][ T6778] XFS (loop0): Quotacheck: Done.
[   99.983161][ T5853] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  100.380334][ T6803] loop0: detected capacity change from 0 to 512
[  100.403907][ T6803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  100.435499][ T6803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.440337][ T6803] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.475624][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.508163][ T6794] loop1: detected capacity change from 0 to 40427
[  100.538083][ T6794] F2FS-fs (loop1): build fault injection rate: 14
[  100.540897][ T6794] F2FS-fs (loop1): build fault injection type: 0x77fd1
[  100.562072][ T6794] F2FS-fs (loop1): invalid crc value
[  100.566124][ T6794] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4429/0x6ff0
[  100.570087][ T6794] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  100.780974][ T6820] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.803044][ T6820] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.817446][ T6810] loop0: detected capacity change from 0 to 32768
[  100.821661][ T6810] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.350 (6810)
[  100.835373][ T6810] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  100.855146][ T6810] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  100.863607][ T6810] BTRFS info (device loop0): using free-space-tree
[  100.906869][ T6830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.354'.
[  100.970672][   T33] audit: type=1800 audit(1755338192.265:23): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.350" name="file0" dev="loop0" ino=258 res=0 errno=0
[  101.199776][ T6843] lo speed is unknown, defaulting to 1000
[  101.201907][ T6843] lo speed is unknown, defaulting to 1000
[  101.215277][ T6843] lo speed is unknown, defaulting to 1000
[  101.243038][ T6843] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  101.293905][ T6843] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  101.398598][ T6843] lo speed is unknown, defaulting to 1000
[  101.415239][ T6843] lo speed is unknown, defaulting to 1000
[  101.430741][ T6843] lo speed is unknown, defaulting to 1000
[  101.524558][ T5853] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  101.872334][ T6856] loop0: detected capacity change from 0 to 4096
[  101.903337][ T6856] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  103.319251][ T6869] : entered promiscuous mode
[  103.631004][ T6880] loop0: detected capacity change from 0 to 1024
[  103.696845][ T3777] hfsplus: b-tree write err: -5, ino 4
[  103.962985][   T52] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  104.013095][ T1279] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  104.114776][   T52] usb 2-1: config 0 has no interfaces?
[  104.117176][   T52] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  104.121343][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.127439][   T52] usb 2-1: config 0 descriptor??
[  104.163164][ T1279] usb 1-1: Using ep0 maxpacket: 8
[  104.167215][ T1279] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  104.171382][ T1279] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  104.177842][ T1279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.196784][ T1279] hub 1-1:32.0: bad descriptor, ignoring hub
[  104.199124][ T1279] hub 1-1:32.0: probe with driver hub failed with error -5
[  104.335693][ T1279] usb 2-1: USB disconnect, device number 9
[  104.654950][   T52] usb 1-1: reset high-speed USB device number 7 using dummy_hcd
[  105.176518][ T6912] overlayfs: overlapping lowerdir path
[  105.492989][ T5235] Bluetooth: hci1: unexpected cc 0x0c5a length: 1 < 2
[  105.621317][    C0] Unknown status report in ack skb
[  105.708036][ T6920] loop0: detected capacity change from 0 to 4096
[  105.794568][ T1279] usb 1-1: USB disconnect, device number 7
[  105.808335][ T6920] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  105.821757][ T6926] 9pnet_fd: Insufficient options for proto=fd
[  105.892108][ T6920] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  106.126589][ T6947] loop0: detected capacity change from 0 to 16
[  106.140402][ T6947] erofs (device loop0): invalid lz4 cfgs, size=4
[  106.262595][ T6955] tipc: Started in network mode
[  106.268683][ T6955] tipc: Node identity 22e7d6b68c2e, cluster identity 4711
[  106.294672][ T6955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.297709][ T6952] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  106.316477][ T6959] syzkaller0: entered promiscuous mode
[  106.318723][ T6959] syzkaller0: entered allmulticast mode
[  106.368240][ T6955] tipc: Resetting bearer <eth:syzkaller0>
[  106.368759][ T6961] loop0: detected capacity change from 0 to 256
[  106.390206][ T6954] tipc: Resetting bearer <eth:syzkaller0>
[  106.396548][ T6961] FAT-fs (loop0): Directory bread(block 64) failed
[  106.414916][ T6954] tipc: Disabling bearer <eth:syzkaller0>
[  106.415288][ T6961] FAT-fs (loop0): Directory bread(block 65) failed
[  106.421089][ T6961] FAT-fs (loop0): Directory bread(block 66) failed
[  106.425424][ T6961] FAT-fs (loop0): Directory bread(block 67) failed
[  106.430097][ T6961] FAT-fs (loop0): Directory bread(block 68) failed
[  106.432827][ T6961] FAT-fs (loop0): Directory bread(block 69) failed
[  106.437677][ T6961] FAT-fs (loop0): Directory bread(block 70) failed
[  106.440231][ T6961] FAT-fs (loop0): Directory bread(block 71) failed
[  106.442809][ T6961] FAT-fs (loop0): Directory bread(block 72) failed
[  106.445490][ T6961] FAT-fs (loop0): Directory bread(block 73) failed
[  107.273940][ T6978] loop0: detected capacity change from 0 to 512
[  107.292282][ T6978] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  107.366100][ T6978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.371410][ T6978] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.501741][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.778338][ T6993] loop0: detected capacity change from 0 to 128
[  108.143048][ T1279] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  108.183784][ T7001] loop1: detected capacity change from 0 to 32768
[  108.187755][ T7001] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.419 (7001)
[  108.228805][ T7001] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  108.234170][ T7001] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  108.239119][ T7001] BTRFS info (device loop1): using free-space-tree
[  108.305076][ T1279] usb 1-1: config 0 has an invalid interface number: 139 but max is 0
[  108.308247][ T1279] usb 1-1: config 0 has no interface number 0
[  108.314410][ T1279] usb 1-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  108.318675][ T1279] usb 1-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D
[  108.326027][ T1279] usb 1-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64
[  108.329434][ T1279] usb 1-1: config 0 interface 139 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  108.337752][ T1279] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[  108.340975][ T1279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.344002][ T1279] usb 1-1: Product: syz
[  108.345455][ T1279] usb 1-1: Manufacturer: syz
[  108.346937][ T1279] usb 1-1: SerialNumber: syz
[  108.352141][ T1279] usb 1-1: config 0 descriptor??
[  108.354945][ T5845] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  108.359475][ T6997] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  108.361922][ T6997] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  108.426774][   T33] audit: type=1326 audit(1755338199.725:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.1.421" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4246b8ebe9 code=0x0
[  108.571152][ T1279] mct_u232 1-1:0.139: MCT U232 converter detected
[  108.575281][ T1279] mct_u232 ttyUSB0: expected endpoint missing
[  108.583475][ T1279] usb 1-1: USB disconnect, device number 8
[  108.592092][ T1279] mct_u232 1-1:0.139: device disconnected
[  109.342313][ T7029] loop0: detected capacity change from 0 to 32768
[  109.346426][ T7029] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.424 (7029)
[  109.359591][ T7029] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.370851][ T7029] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  109.376456][ T7029] BTRFS info (device loop0): using free-space-tree
[  109.469563][ T5853] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.874602][ T7065] loop0: detected capacity change from 0 to 32768
[  109.880309][ T7065] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.433 (7065)
[  109.901629][ T7065] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  109.905914][ T7065] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  109.909243][ T7065] BTRFS info (device loop0): using free-space-tree
[  110.482014][ T7101] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  110.501657][ T7101] overlayfs: missing 'lowerdir'
[  111.353765][ T5853] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  112.045756][ T7120] loop0: detected capacity change from 0 to 40427
[  112.054298][ T7120] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  112.056918][ T7120] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  112.067763][ T7120] F2FS-fs (loop0): invalid crc value
[  112.152831][ T7120] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.167902][ T7120] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  112.170880][ T7120] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  112.979998][ T7180] capability: warning: `syz.2.474' uses deprecated v2 capabilities in a way that may be insecure
[  113.650074][ T7192] loop1: detected capacity change from 0 to 512
[  113.655413][ T7192] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  113.660845][ T7192] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  113.674942][ T7192] EXT4-fs (loop1): group descriptors corrupted!
[  113.879131][ T7200] loop0: detected capacity change from 0 to 4096
[  114.290990][ T7199] loop1: detected capacity change from 0 to 32768
[  114.383398][ T7213] tun0: tun_chr_ioctl cmd 35108
[  114.693993][ T7225] netlink: 32 bytes leftover after parsing attributes in process `syz.1.493'.
[  114.713283][   T33] audit: type=1326 audit(1755338205.985:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b238ebe9 code=0x7ffc0000
[  114.744079][   T33] audit: type=1326 audit(1755338205.985:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b238ebe9 code=0x7ffc0000
[  114.777176][   T33] audit: type=1326 audit(1755338205.995:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f05b238ebe9 code=0x7ffc0000
[  114.795436][   T33] audit: type=1326 audit(1755338205.995:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b238ebe9 code=0x7ffc0000
[  115.057651][ T7238] loop0: detected capacity change from 0 to 512
[  115.081971][ T7238] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.499: casefold flag without casefold feature
[  115.086892][ T7238] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.499: couldn't read orphan inode 15 (err -117)
[  115.092252][ T7238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.357422][ T7233] loop1: detected capacity change from 0 to 32768
[  115.399050][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.596702][ T7248] loop0: detected capacity change from 0 to 4096
[  115.616054][ T7249] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.435131][ T1279] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  116.583033][ T1279] usb 2-1: Using ep0 maxpacket: 8
[  116.588573][ T1279] usb 2-1: unable to get BOS descriptor or descriptor too short
[  116.592997][ T1279] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  116.596545][ T1279] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  116.600155][ T1279] usb 2-1: config 1 has no interface number 1
[  116.602633][ T1279] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  116.607802][ T1279] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  116.616029][ T1279] usb 2-1: string descriptor 0 read error: -22
[  116.618747][ T1279] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  116.622341][ T1279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.635899][ T1279] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  116.639708][ T1279] usb 2-1: 2:1 : sample bitwidth 141 in over sample bytes 2
[  116.642790][ T1279] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  116.683333][ T5899] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  116.841144][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.860967][ T5899] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  116.881097][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  116.888891][ T1279] usb 2-1: USB disconnect, device number 10
[  116.891580][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  116.907602][ T5899] usb 1-1: SerialNumber: syz
[  116.951380][ T5899] usb 1-1: bad CDC descriptors
[  116.967922][ T5899] usb-storage 1-1:1.0: USB Mass Storage device detected
[  116.991610][ T5899] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  117.158756][  T973] usb 1-1: USB disconnect, device number 9
[  117.653020][  T973] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  117.723637][ T7320] loop0: detected capacity change from 0 to 1024
[  117.806227][  T973] usb 2-1: unable to get BOS descriptor or descriptor too short
[  117.810625][  T973] usb 2-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16
[  117.810846][ T7322] loop0: detected capacity change from 0 to 512
[  117.814995][  T973] usb 2-1: config 66 interface 0 has no altsetting 0
[  117.820884][  T973] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  117.823633][ T7322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  117.829565][  T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.840940][  T973] usb 2-1: Product: syz
[  117.842766][  T973] usb 2-1: Manufacturer: syz
[  117.845666][  T973] usb 2-1: SerialNumber: syz
[  117.846999][ T7322] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.536: invalid indirect mapped block 4294967295 (level 1)
[  117.862056][ T7312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  117.869020][ T7322] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.536: invalid indirect mapped block 4294967295 (level 1)
[  117.878493][ T7322] EXT4-fs (loop0): 2 truncates cleaned up
[  117.883218][ T7322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.922523][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.045019][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'.
[  118.095098][  T973] ati_remote2 2-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint
[  118.114571][  T973] usb 2-1: USB disconnect, device number 11
[  118.469037][ T7337] loop0: detected capacity change from 0 to 32768
[  118.472792][ T7337] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  118.878504][ T7352] loop0: detected capacity change from 0 to 736
[  118.901195][ T7352] rock: directory entry would overflow storage
[  118.904856][ T7352] rock: sig=0x3b10, size=4, remaining=3
[  118.943429][ T5899] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  119.113230][ T5899] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  119.116843][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.134220][ T5899] usb 2-1: config 0 descriptor??
[  119.139666][ T5899] cp210x 2-1:0.0: cp210x converter detected
[  119.321427][ T7362] loop0: detected capacity change from 0 to 32768
[  119.348722][ T7362] ERROR: (device loop0): duplicateIXtree: 
[  119.348722][ T7362] 
[  119.353949][ T7362] ERROR: (device loop0): remounting filesystem as read-only
[  119.359545][ T5899] usb 2-1: cp210x converter now attached to ttyUSB0
[  119.383447][ T7362] ERROR: (device loop0): dtReadFirst: btstack overrun
[  119.383447][ T7362] 
[  119.387199][ T7362] ERROR: (device loop0): remounting filesystem as read-only
[  119.390999][ T7362] btstack dump:
[  119.397920][ T7362] bn = 0, index = 0
[  119.399560][ T7362] bn = 2d, index = 0
[  119.401175][ T7362] bn = 0, index = 0
[  119.402708][ T7362] bn = 2d, index = 0
[  119.404818][ T7362] bn = 0, index = 0
[  119.406357][ T7362] bn = 2d, index = 0
[  119.407812][ T7362] bn = 0, index = 0
[  119.409344][ T7362] bn = 0, index = 0
[  119.413736][ T7362] jfs_readdir: unexpected rc = -5 from dtReadNext
[  119.546528][  T973] usb 2-1: USB disconnect, device number 12
[  119.556039][  T973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  119.564677][  T973] cp210x 2-1:0.0: device disconnected
[  120.129009][ T7374] loop1: detected capacity change from 0 to 512
[  120.181120][ T7374] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  120.187295][ T7379] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  120.193640][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'.
[  120.221743][ T7374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.243542][ T7374] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  120.250991][ T7384] fuse: Bad value for 'fd'
[  120.284941][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.653215][ T5899] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  120.813110][ T5899] usb 2-1: Using ep0 maxpacket: 8
[  120.823886][ T5899] usb 2-1: config 3 has an invalid interface number: 45 but max is 0
[  120.826945][ T5899] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  120.830266][ T5899] usb 2-1: config 3 has no interface number 0
[  120.832533][ T5899] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.837907][ T5899] usb 2-1: config 3 interface 45 has no altsetting 0
[  120.844539][ T5899] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  120.848054][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.851103][ T5899] usb 2-1: Product: syz
[  120.852766][ T5899] usb 2-1: Manufacturer: syz
[  120.855332][ T5899] usb 2-1: SerialNumber: syz
[  121.089787][ T5899] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  121.127242][ T5899] usb 2-1: USB disconnect, device number 13
[  121.194096][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  123.676971][ T7453] loop1: detected capacity change from 0 to 8
[  123.680419][ T7453] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  123.706534][ T7453] cramfs: Error -5 while decompressing!
[  123.708836][ T7453] cramfs: ffffffff99bef628(26)->ffff88803f3b8000(4096)
[  123.716775][ T7453] cramfs: Error -3 while decompressing!
[  123.719318][ T7453] cramfs: ffffffff99bef642(26)->ffff88803f3b7000(4096)
[  123.721979][ T7453] cramfs: Error -3 while decompressing!
[  123.724967][ T7453] cramfs: ffffffff99bef65c(16)->ffff88803f3b6000(4096)
[  123.727928][ T7453] cramfs: Error -5 while decompressing!
[  123.730055][ T7453] cramfs: ffffffff99bef628(26)->ffff88803f3b8000(4096)
[  123.789782][ T7459] loop1: detected capacity change from 0 to 128
[  123.811600][ T7459] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  123.822058][ T7459] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  123.842076][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  123.936037][ T7465] pimreg: entered allmulticast mode
[  123.939698][ T7465] pimreg: left allmulticast mode
[  124.350381][ T7469] loop1: detected capacity change from 0 to 32768
[  125.587126][ T7486] loop1: detected capacity change from 0 to 512
[  125.590528][ T7486] EXT4-fs: Ignoring removed oldalloc option
[  125.609087][ T7486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.621032][ T7486] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.636533][ T7486] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.610: bg 0: block 217: padding at end of block bitmap is not set
[  125.662235][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.815368][ T5235] Bluetooth: hci0: Opcode 0x206a failed: -110
[  126.823106][ T5235] Bluetooth: hci0: command 0x206a tx timeout
[  127.331073][ T7554] loop1: detected capacity change from 0 to 1024
[  127.348286][ T7554] hfsplus: walked past end of dir
[  127.451507][ T7558] tap0: tun_chr_ioctl cmd 1074025677
[  127.453934][ T7558] tap0: linktype set to 0
[  127.943231][ T1279] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  128.093093][ T1279] usb 2-1: Using ep0 maxpacket: 32
[  128.096949][ T1279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.104671][ T1279] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  128.107658][ T1279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.110284][ T1279] usb 2-1: Product: syz
[  128.112001][ T1279] usb 2-1: Manufacturer: syz
[  128.114147][ T1279] usb 2-1: SerialNumber: syz
[  128.118319][ T1279] usb 2-1: config 0 descriptor??
[  128.124414][ T1279] usb 2-1: bad CDC descriptors
[  128.129346][ T1279] usb 2-1: unsupported MDLM descriptors
[  128.334934][   T52] usb 2-1: USB disconnect, device number 14
[  129.097211][ T7599] loop1: detected capacity change from 0 to 40427
[  129.105414][ T7599] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(3584) blocks(512)
[  129.108839][ T7599] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  129.115347][ T7599] F2FS-fs (loop1): invalid crc value
[  129.171978][ T7599] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.180598][ T7599] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  129.183657][ T7599] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  129.217202][ T5845] syz-executor: attempt to access beyond end of device
[  129.217202][ T5845] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  129.226367][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  129.226389][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.226398][ T5845] Call Trace:
[  129.226425][ T5845]  <TASK>
[  129.226472][ T5845]  dump_stack_lvl+0x189/0x250
[  129.226500][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.226517][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  129.226532][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.226552][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.226578][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  129.226606][ T5845]  f2fs_write_end_io+0x886/0xb60
[  129.226637][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  129.226656][ T5845]  ? up_write+0x1c4/0x420
[  129.226678][ T5845]  __submit_merged_write_cond+0x44c/0x530
[  129.226704][ T5845]  f2fs_sync_node_pages+0x1479/0x15e0
[  129.226743][ T5845]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  129.226788][ T5845]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  129.226807][ T5845]  ? up_write+0x1c4/0x420
[  129.226818][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  129.226857][ T5845]  f2fs_write_checkpoint+0xe6f/0x1df0
[  129.226894][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.226952][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[  129.226973][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[  129.226992][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.227003][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[  129.227028][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  129.227048][ T5845]  deactivate_locked_super+0xbc/0x130
[  129.227069][ T5845]  cleanup_mnt+0x425/0x4c0
[  129.227087][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.227108][ T5845]  task_work_run+0x1d4/0x260
[  129.227131][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  129.227147][ T5845]  ? __x64_sys_umount+0x122/0x160
[  129.227170][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[  129.227192][ T5845]  exit_to_user_mode_loop+0xec/0x110
[  129.227211][ T5845]  do_syscall_64+0x2bd/0x3b0
[  129.227229][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.227246][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.227259][ T5845]  ? exc_page_fault+0x9f/0xf0
[  129.227278][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.227291][ T5845] RIP: 0033:0x7f4246b8ff17
[  129.227307][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.227337][ T5845] RSP: 002b:00007ffd6c95cdb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.227378][ T5845] RAX: 0000000000000000 RBX: 00007f4246c11c05 RCX: 00007f4246b8ff17
[  129.227388][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6c95ce70
[  129.227421][ T5845] RBP: 00007ffd6c95ce70 R08: 0000000000000000 R09: 0000000000000000
[  129.227429][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd6c95df00
[  129.227460][ T5845] R13: 00007f4246c11c05 R14: 000000000001f83f R15: 00007ffd6c95df40
[  129.227487][ T5845]  </TASK>
[  129.236758][ T5845] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  129.321340][ T7607] overlayfs: failed to clone upperpath
[  129.329896][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  129.329921][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.329930][ T5845] Call Trace:
[  129.329937][ T5845]  <TASK>
[  129.329944][ T5845]  dump_stack_lvl+0x189/0x250
[  129.329971][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.329988][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  129.330002][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.330021][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.330050][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  129.330084][ T5845]  f2fs_write_end_io+0x886/0xb60
[  129.330116][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  129.330133][ T5845]  ? up_write+0x1c4/0x420
[  129.330154][ T5845]  __submit_merged_write_cond+0x44c/0x530
[  129.330179][ T5845]  f2fs_sync_node_pages+0x1479/0x15e0
[  129.330217][ T5845]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  129.330262][ T5845]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  129.330280][ T5845]  ? up_write+0x1c4/0x420
[  129.330292][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  129.330314][ T5845]  f2fs_write_checkpoint+0xe6f/0x1df0
[  129.330350][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.330410][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[  129.330430][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[  129.330480][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.330491][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[  129.330516][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  129.330535][ T5845]  deactivate_locked_super+0xbc/0x130
[  129.330557][ T5845]  cleanup_mnt+0x425/0x4c0
[  129.330573][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.330595][ T5845]  task_work_run+0x1d4/0x260
[  129.330618][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  129.330634][ T5845]  ? __x64_sys_umount+0x122/0x160
[  129.330657][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[  129.330680][ T5845]  exit_to_user_mode_loop+0xec/0x110
[  129.330699][ T5845]  do_syscall_64+0x2bd/0x3b0
[  129.330716][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.330732][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.330745][ T5845]  ? exc_page_fault+0x9f/0xf0
[  129.330765][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.330777][ T5845] RIP: 0033:0x7f4246b8ff17
[  129.330792][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.330803][ T5845] RSP: 002b:00007ffd6c95cdb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.330818][ T5845] RAX: 0000000000000000 RBX: 00007f4246c11c05 RCX: 00007f4246b8ff17
[  129.330827][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6c95ce70
[  129.330834][ T5845] RBP: 00007ffd6c95ce70 R08: 0000000000000000 R09: 0000000000000000
[  129.330842][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd6c95df00
[  129.330850][ T5845] R13: 00007f4246c11c05 R14: 000000000001f83f R15: 00007ffd6c95df40
[  129.330876][ T5845]  </TASK>
[  129.330882][ T5845] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  129.698819][ T7622] loop1: detected capacity change from 0 to 16
[  129.710254][ T7622] erofs (device loop1): mounted with root inode @ nid 36.
[  129.812762][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.668'.
[  129.818178][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.668'.
[  129.826219][ T7628] ip6gretap0: entered promiscuous mode
[  129.829330][ T7628] syz_tun: entered promiscuous mode
[  129.966499][ T7638] loop1: detected capacity change from 0 to 1024
[  130.008584][ T7638] Process accounting resumed
[  130.011850][ T7638] syz.1.674: attempt to access beyond end of device
[  130.011850][ T7638] loop1: rw=0, sector=8556385938, nr_sectors = 2 limit=1024
[  130.023654][ T1279] kworker/0:2: attempt to access beyond end of device
[  130.023654][ T1279] loop1: rw=0, sector=8556385938, nr_sectors = 2 limit=1024
[  130.097880][ T7642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.155448][ T7643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.213065][ T7642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.404390][ T7669] loop1: detected capacity change from 0 to 2048
[  131.437609][ T7669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.472319][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.657914][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.660764][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.696417][ T7699] loop1: detected capacity change from 0 to 1024
[  132.722603][ T7699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.731798][ T7699] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.749730][ T7699] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.700: lblock 3 mapped to illegal pblock 3 (length 13)
[  132.758000][ T7699] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  132.763670][ T7699] EXT4-fs (loop1): This should not happen!! Data will be lost
[  132.763670][ T7699] 
[  132.771467][ T7699] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.700: lblock 3 mapped to illegal pblock 3 (length 1)
[  132.779640][ T7699] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.700: lblock 3 mapped to illegal pblock 3 (length 1)
[  132.786417][ T7699] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.700: lblock 3 mapped to illegal pblock 3 (length 1)
[  132.792137][ T7699] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.700: lblock 3 mapped to illegal pblock 3 (length 1)
[  132.798045][ T7699] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.700: lblock 3 mapped to illegal pblock 3 (length 1)
[  132.804718][ T7699] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.700: lblock 3 mapped to illegal pblock 3 (length 1)
[  132.810457][ T7699] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.700: lblock 3 mapped to illegal pblock 3 (length 1)
[  132.817248][ T7699] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.700: lblock 3 mapped to illegal pblock 3 (length 1)
[  132.825093][ T7698] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.700: lblock 3 mapped to illegal pblock 3 (length 1)
[  132.877813][ T7704] fuse: Bad value for 'fd'
[  133.572474][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.704953][ T7731] loop1: detected capacity change from 0 to 512
[  134.708582][ T7731] EXT4-fs: Ignoring removed bh option
[  134.718451][ T7731] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  134.735044][ T7731] EXT4-fs (loop1): 1 truncate cleaned up
[  134.739598][ T7731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.797566][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.847355][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  134.852491][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  134.856548][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  134.860275][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  134.864008][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  134.936745][ T7733] lo speed is unknown, defaulting to 1000
[  134.937791][ T7738] loop1: detected capacity change from 0 to 2048
[  135.118012][ T7733] chnl_net:caif_netlink_parms(): no params data found
[  135.124797][ T7738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.143083][ T7738] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  135.150558][ T7738] EXT4-fs (loop1): Remounting filesystem read-only
[  135.477337][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.589609][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.592764][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.596620][ T7733] bridge_slave_0: entered allmulticast mode
[  135.600689][ T7733] bridge_slave_0: entered promiscuous mode
[  135.606392][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.612758][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.618210][ T7733] bridge_slave_1: entered allmulticast mode
[  135.626201][ T7733] bridge_slave_1: entered promiscuous mode
[  135.672673][ T7733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.679682][ T7733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.703332][ T7733] team0: Port device team_slave_0 added
[  135.706767][ T7733] team0: Port device team_slave_1 added
[  135.730119][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.732705][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.742528][ T7733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.749269][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.752117][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.761768][ T7733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.863858][ T7733] hsr_slave_0: entered promiscuous mode
[  135.868480][ T7733] hsr_slave_1: entered promiscuous mode
[  135.876488][ T7733] debugfs: 'hsr0' already exists in 'hsr'
[  135.878910][ T7733] Cannot create hsr debugfs directory
[  135.920047][ T7756] erspan1: entered promiscuous mode
[  135.922284][ T7756] erspan1: entered allmulticast mode
[  135.938323][  T973] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  136.105237][  T973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.109220][  T973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.133726][  T973] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  136.137287][  T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  136.141350][  T973] usb 2-1: SerialNumber: syz
[  136.152832][ T7733] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  136.177739][ T7733] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  136.191795][ T7733] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  136.205666][ T7733] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  136.356419][ T7733] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.378191][ T7733] 8021q: adding VLAN 0 to HW filter on device team0
[  136.380213][  T973] usb 2-1: 0:2 : does not exist
[  136.398942][  T973] usb 2-1: USB disconnect, device number 15
[  136.399078][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.404393][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.434488][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.437376][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.457093][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  136.467938][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.729'.
[  136.662488][ T7733] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.710785][ T7733] veth0_vlan: entered promiscuous mode
[  136.722086][ T7733] veth1_vlan: entered promiscuous mode
[  136.757336][ T7733] veth0_macvtap: entered promiscuous mode
[  136.766278][ T7733] veth1_macvtap: entered promiscuous mode
[  136.781979][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.796801][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.808983][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.828604][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.832086][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.841870][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.893524][ T5235] Bluetooth: hci3: command tx timeout
[  136.931285][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.958348][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.028529][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.032677][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.173197][ T7800] loop3: detected capacity change from 0 to 164
[  137.478442][ T7809] loop3: detected capacity change from 0 to 1024
[  137.496141][ T7809] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  137.615027][ T7804] loop1: detected capacity change from 0 to 32768
[  137.642769][ T7804] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  137.657501][ T7804] XFS (loop1): Ending clean mount
[  137.687197][ T5845] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  137.917458][ T7831] vxcan0: tx address claim with different name
[  138.266354][ T7856] loop1: detected capacity change from 0 to 1024
[  138.274819][ T7856] EXT4-fs (loop1): Test dummy encryption mode enabled
[  138.277717][ T7856] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  138.326737][ T7856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.388012][ T7861] Illegal XDP return value 4294967274 on prog  (id 65) dev syz_tun, expect packet loss!
[  138.750214][ T7856] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  138.848195][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.983061][ T5235] Bluetooth: hci3: command tx timeout
[  139.591417][ T7879] loop1: detected capacity change from 0 to 32768
[  139.630219][ T7879] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  139.658931][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  139.792189][ T7894] netlink: 168 bytes leftover after parsing attributes in process `syz.3.770'.
[  140.013217][ T5826] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  140.054276][ T1279] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  140.164369][ T5826] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  140.167401][ T5826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.171691][ T5826] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  140.175645][ T5826] usb 2-1: config 1 has no interface number 1
[  140.177892][ T5826] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  140.182749][ T5826] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  140.190869][ T5826] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  140.194356][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.197684][ T5826] usb 2-1: Product: syz
[  140.199391][ T5826] usb 2-1: Manufacturer: syz
[  140.201297][ T5826] usb 2-1: SerialNumber: syz
[  140.205609][ T1279] usb 4-1: config 0 interface 0 has no altsetting 0
[  140.207702][ T1279] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  140.210487][ T1279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.216864][ T1279] usb 4-1: config 0 descriptor??
[  140.433583][ T5826] usb 2-1: No endpoint at altset 1, falling back to MIDI 1.0
[  140.436652][ T5826] usb 2-1: MIDIStreaming interface descriptor not found
[  140.484432][ T5826] usb 2-1: USB disconnect, device number 16
[  140.556016][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  140.838354][ T1279] video4linux radio48: keene_cmd_set failed (-71)
[  140.842217][ T1279] radio-keene 4-1:0.0: V4L2 device registered as radio48
[  140.848984][ T1279] usb 4-1: USB disconnect, device number 2
[  141.055690][ T5235] Bluetooth: hci3: command tx timeout
[  141.068844][ T7924] netlink: 'syz.2.783': attribute type 66 has an invalid length.
[  141.170094][ T7931] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  141.176341][ T7931] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  141.579594][ T7944] loop3: detected capacity change from 0 to 2048
[  141.586032][ T7944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.593255][ T5914] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  141.620725][ T7946] fuse: Bad value for 'fd'
[  141.771250][ T5914] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  141.775756][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.779002][ T5914] usb 2-1: Product: syz
[  141.780941][ T5914] usb 2-1: Manufacturer: syz
[  141.791071][ T5914] usb 2-1: SerialNumber: syz
[  141.799752][ T5914] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  141.837141][   T52] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  142.147211][ T5235] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  142.151396][ T5235] CPU: 0 UID: 0 PID: 5235 Comm: kworker/u11:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  142.151419][ T5235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.151428][ T5235] Workqueue: hci1 hci_rx_work
[  142.151456][ T5235] Call Trace:
[  142.151463][ T5235]  <TASK>
[  142.151471][ T5235]  dump_stack_lvl+0x189/0x250
[  142.151497][ T5235]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.151515][ T5235]  ? __pfx__printk+0x10/0x10
[  142.151542][ T5235]  ? kernfs_path_from_node+0x250/0x290
[  142.151558][ T5235]  ? kernfs_path_from_node+0x2f/0x290
[  142.151575][ T5235]  sysfs_create_dir_ns+0x259/0x280
[  142.151622][ T5235]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  142.151639][ T5235]  ? do_raw_spin_unlock+0x4d/0x240
[  142.151662][ T5235]  kobject_add_internal+0x59f/0xb40
[  142.151693][ T5235]  kobject_add+0x155/0x220
[  142.151719][ T5235]  ? __pfx_kobject_add+0x10/0x10
[  142.151741][ T5235]  ? _raw_spin_unlock+0x28/0x50
[  142.151762][ T5235]  ? get_device_parent+0x366/0x3a0
[  142.151782][ T5235]  device_add+0x408/0xb50
[  142.151799][ T5235]  hci_conn_add_sysfs+0xd5/0x1e0
[  142.151820][ T5235]  le_conn_complete_evt+0xc3a/0x1220
[  142.151854][ T5235]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  142.151875][ T5235]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  142.151899][ T5235]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  142.151918][ T5235]  ? skb_pull_data+0xfb/0x200
[  142.151939][ T5235]  hci_le_enh_conn_complete_evt+0x189/0x470
[  142.151959][ T5235]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  142.151981][ T5235]  hci_event_packet+0x78f/0x1200
[  142.152000][ T5235]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  142.152021][ T5235]  ? __pfx_hci_event_packet+0x10/0x10
[  142.152038][ T5235]  ? kcov_remote_start+0x4d3/0x7f0
[  142.152058][ T5235]  ? lockdep_hardirqs_on+0x90/0x150
[  142.152078][ T5235]  ? hci_send_to_monitor+0xe2/0x570
[  142.152101][ T5235]  hci_rx_work+0x46a/0xe80
[  142.152124][ T5235]  ? process_scheduled_works+0x9ef/0x17b0
[  142.152139][ T5235]  process_scheduled_works+0xae1/0x17b0
[  142.152173][ T5235]  ? __pfx_process_scheduled_works+0x10/0x10
[  142.152201][ T5235]  worker_thread+0x8a0/0xda0
[  142.152237][ T5235]  kthread+0x711/0x8a0
[  142.152257][ T5235]  ? __pfx_worker_thread+0x10/0x10
[  142.152271][ T5235]  ? __pfx_kthread+0x10/0x10
[  142.152289][ T5235]  ? _raw_spin_unlock_irq+0x23/0x50
[  142.152315][ T5235]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.152332][ T5235]  ? __pfx_kthread+0x10/0x10
[  142.152350][ T5235]  ret_from_fork+0x3fc/0x770
[  142.152371][ T5235]  ? __pfx_ret_from_fork+0x10/0x10
[  142.152392][ T5235]  ? __switch_to_asm+0x39/0x70
[  142.152409][ T5235]  ? __switch_to_asm+0x33/0x70
[  142.152425][ T5235]  ? __pfx_kthread+0x10/0x10
[  142.152443][ T5235]  ret_from_fork_asm+0x1a/0x30
[  142.152474][ T5235]  </TASK>
[  142.152502][ T5235] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  142.263038][ T5914] usb 2-1: USB disconnect, device number 17
[  142.265933][ T5235] Bluetooth: hci1: failed to register connection device
[  142.565792][ T7974] loop3: detected capacity change from 0 to 764
[  142.576764][ T7974] rock: directory entry would overflow storage
[  142.579814][ T7974] rock: sig=0x4654, size=5, remaining=4
[  142.799248][ T7981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.892981][   T52] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  142.917000][   T52] ath9k_htc: Failed to initialize the device
[  142.932831][ T5914] usb 2-1: ath9k_htc: USB layer deinitialized
[  143.133195][ T5855] Bluetooth: hci3: command tx timeout
[  143.333281][ T5914] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  143.503260][ T5914] usb 2-1: Using ep0 maxpacket: 16
[  143.514886][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.520476][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.528000][ T5914] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  143.531784][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.543287][ T5914] usb 2-1: config 0 descriptor??
[  143.983105][ T5914] gt683r_led 0003:1770:FF00.0002: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0
[  144.167170][ T5899] usb 2-1: USB disconnect, device number 18
[  144.192076][ T1279] gt683r_led 0003:1770:FF00.0002: failed to send set report request: -19
[  144.872009][ T8020] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  144.875504][ T5899] IPVS: starting estimator thread 0...
[  144.973322][ T8026] IPVS: using max 64 ests per chain, 153600 per kthread
[  144.985961][ T8030] loop3: detected capacity change from 0 to 512
[  145.000342][ T8030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  145.027139][ T8030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  145.031807][ T8030] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.050226][ T8030] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  145.065656][ T8030] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  145.069573][ T8030] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.832: Failed to acquire dquot type 0
[  145.100353][ T8018] loop1: detected capacity change from 0 to 32768
[  145.119184][ T7733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  145.129620][   T33] audit: type=1800 audit(1755338236.425:29): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.827" name="file1" dev="loop1" ino=4 res=0 errno=0
[  145.458758][ T8043] loop3: detected capacity change from 0 to 32768
[  145.492809][ T8048] loop1: detected capacity change from 0 to 2048
[  145.570272][ T8048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.582836][ T8048] cifs: Unknown parameter 'norecovery'
[  145.607306][ T8043] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  145.607332][ T8043]   allowing incompatible features above 0.0: (unknown version)
[  145.607342][ T8043]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  145.617098][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.621922][ T8043] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  145.629250][ T8043] bcachefs (loop3): initializing new filesystem
[  145.639037][ T8043] bcachefs (loop3): going read-write
[  145.658942][ T8043] bcachefs (loop3): marking superblocks
[  145.669696][ T8043] bcachefs (loop3): initializing freespace
[  145.673760][ T8043] bcachefs (loop3): done initializing freespace
[  145.677406][ T8043] bcachefs (loop3): reading snapshots table
[  145.679523][ T8043] bcachefs (loop3): reading snapshots done
[  145.705102][ T8043] bcachefs (loop3):  loop3: Superblock write was silently dropped! (seq 0 expected 42)
[  145.709132][ T8043] bcachefs (loop3): done starting filesystem
[  145.993091][   T52] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  145.997457][ T8043] syz.3.838 (8043) used greatest stack depth: 16824 bytes left
[  146.009658][ T7733] bcachefs (loop3): shutting down
[  146.011740][ T7733] bcachefs (loop3): going read-only
[  146.016223][ T7733] bcachefs (loop3): finished waiting for writes to stop
[  146.024716][ T7733] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4
[  146.060111][ T7733] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5
[  146.066145][ T7733] bcachefs (loop3): clean shutdown complete, journal seq 6
[  146.070074][ T7733] bcachefs (loop3): marking filesystem clean
[  146.087051][ T7733] bcachefs (loop3): shutdown complete
[  146.163116][   T52] usb 2-1: Using ep0 maxpacket: 16
[  146.182097][   T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  146.187308][   T52] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  146.191031][   T52] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  146.196749][   T52] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  146.201345][   T52] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  146.206770][   T52] usb 2-1: config 1 interface 0 has no altsetting 0
[  146.209398][   T52] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  146.216562][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.225626][   T52] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  146.366596][   T33] audit: type=1326 audit(1755338237.665:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.2.846" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05b238ebe9 code=0x0
[  146.752633][   T52] scsi host6: usb-storage 2-1:1.0
[  146.763953][   T52] usb 2-1: USB disconnect, device number 19
[  147.327591][ T8091] netlink: 'syz.2.853': attribute type 1 has an invalid length.
[  147.359433][ T8091] 8021q: adding VLAN 0 to HW filter on device bond1
[  147.394218][ T8091] bond1: (slave ip6erspan0): making interface the new active one
[  147.402658][ T8091] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  147.647976][ T8108] loop1: detected capacity change from 0 to 16
[  147.650990][ T8108] erofs (device loop1): mounted with root inode @ nid 36.
[  147.689469][ T8108] erofs (device loop1): readahead error at folio 2 @ nid 89
[  147.719308][   T57] erofs (device loop1): failed to decompress -33 in[4096, 0] out[8192]
[  147.742759][ T8108] erofs (device loop1): failed to decompress -33 in[4096, 0] out[4096]
[  147.763570][ T8108] erofs (device loop1): read error -117 @ 0 of nid 89
[  147.901544][ T8116] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  147.908838][ T8116] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  147.953248][   T33] audit: type=1800 audit(1755338239.065:31): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.860" name="file3" dev="loop1" ino=89 res=0 errno=0
[  148.267732][ T8120] loop1: detected capacity change from 0 to 32768
[  148.295597][ T8120] 
[  148.295597][ T8120]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.295597][ T8120] 
[  148.340927][ T5845] 
[  148.340927][ T5845]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.340927][ T5845] 
[  148.348150][ T5845] 
[  148.348150][ T5845]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  148.348150][ T5845] 
[  148.668109][ T8134] loop1: detected capacity change from 0 to 1024
[  148.691875][ T8134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.768232][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.899774][ T8144] loop3: detected capacity change from 0 to 512
[  148.931690][ T8144] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  148.935106][ T8144] System zones: 1-12
[  148.940674][ T8144] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.874: error while reading EA inode 32 err=-116
[  148.980315][ T8144] EXT4-fs (loop3): Remounting filesystem read-only
[  148.985298][ T8144] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  148.993264][ T8144] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  148.997587][ T8144] EXT4-fs (loop3): 1 orphan inode deleted
[  149.001119][ T8144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.065262][ T8156] loop1: detected capacity change from 0 to 1024
[  149.088278][ T7733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.100199][ T8156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.135363][   T33] audit: type=1800 audit(1755338240.425:32): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.879" name="file2" dev="loop1" ino=16 res=0 errno=0
[  149.215856][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.729775][ T8170] loop1: detected capacity change from 0 to 40427
[  150.156265][ T8190] 9pnet_fd: Insufficient options for proto=fd
[  150.649278][ T8198] loop3: detected capacity change from 0 to 32768
[  150.653774][ T8198] jfs_mount: Mount Failure: superblock is corrupt!
[  150.656254][ T8198] Mount JFS Failure: -22
[  150.657955][ T8198] jfs_mount failed w/return code = -22
[  151.326025][   T33] audit: type=1800 audit(1755338242.625:33): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.903" name="/" dev="9p" ino=2 res=0 errno=0
[  151.793181][ T1279] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  151.933084][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  151.944890][ T1279] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  151.948147][ T1279] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  151.951171][ T1279] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  151.956466][ T1279] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  151.960546][ T1279] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  151.966442][ T1279] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  151.969996][ T1279] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  151.974629][ T1279] usb 2-1: Product: syz
[  151.977537][ T1279] usb 2-1: Manufacturer: syz
[  151.985343][ T1279] cdc_wdm 2-1:1.0: skipping garbage
[  151.987342][ T1279] cdc_wdm 2-1:1.0: skipping garbage
[  151.991472][ T1279] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  151.994176][ T1279] cdc_wdm 2-1:1.0: Unknown control protocol
[  152.084687][   T24] usb 4-1: config 2 has an invalid interface number: 243 but max is 0
[  152.088146][   T24] usb 4-1: config 2 has no interface number 0
[  152.090627][   T24] usb 4-1: config 2 interface 243 has no altsetting 0
[  152.096467][   T24] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=b9.ff
[  152.099624][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.102527][   T24] usb 4-1: Product: syz
[  152.104413][   T24] usb 4-1: Manufacturer: syz
[  152.106061][   T24] usb 4-1: SerialNumber: syz
[  152.204673][   T52] usb 2-1: USB disconnect, device number 20
[  152.322287][   T24] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  152.335261][   T24] usb 4-1: USB disconnect, device number 3
[  152.686456][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'.
[  152.866671][ T8260] loop3: detected capacity change from 0 to 256
[  152.881982][ T8260] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.887575][ T8260] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  152.900942][ T8260] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  153.021016][ T1279] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  153.177655][ T1279] usb 2-1: Using ep0 maxpacket: 16
[  153.187574][ T1279] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  153.193877][ T1279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.197999][ T1279] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  153.219343][ T1279] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  153.222809][ T1279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.233418][ T1279] usb 2-1: Product: syz
[  153.237297][ T1279] usb 2-1: Manufacturer: syz
[  153.239199][ T1279] usb 2-1: SerialNumber: syz
[  153.259440][ T8275] loop3: detected capacity change from 0 to 128
[  153.712302][ T1279] usb 2-1: 0:2 : does not exist
[  153.879408][ T8281] loop3: detected capacity change from 0 to 32768
[  153.906994][ T8281] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  153.938390][ T8281] XFS (loop3): Ending clean mount
[  153.947330][ T8281] XFS (loop3): User initiated shutdown received.
[  153.950374][ T8281] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  153.955788][ T8281] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  153.976518][ T7733] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  154.260142][ T8303] tipc: Failed to remove unknown binding: 66,1,1/0:1258901151/1258901153
[  154.264266][ T8303] tipc: Failed to remove unknown binding: 66,1,1/0:1258901151/1258901153
[  154.337163][ T8307] loop3: detected capacity change from 0 to 16
[  154.354061][ T8307] erofs (device loop3): mounted with root inode @ nid 36.
[  154.526026][ T5914] usb 2-1: USB disconnect, device number 21
[  154.724296][ T8335] loop3: detected capacity change from 0 to 764
[  154.776103][ T8338] warning: `syz.3.955' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  155.027945][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'.
[  156.031470][ T8385] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  156.523048][   T52] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  156.716968][ T8408] loop1: detected capacity change from 0 to 16
[  156.747400][ T8408] erofs (device loop1): mounted with root inode @ nid 36.
[  156.934521][   T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  156.937905][   T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  156.941730][   T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  156.947774][   T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  156.955350][   T52] usb 4-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e
[  156.958265][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.960760][   T52] usb 4-1: Product: syz
[  156.962124][   T52] usb 4-1: Manufacturer: syz
[  156.965294][   T52] usb 4-1: SerialNumber: syz
[  156.969190][   T52] usb 4-1: config 0 descriptor??
[  156.975716][   T52] ti_usb_3410_5052 4-1:0.0: TI USB 3410 1 port adapter converter detected
[  156.986755][   T52] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  157.184637][   T24] usb 4-1: USB disconnect, device number 4
[  157.193156][   T24] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  157.202679][   T24] ti_usb_3410_5052 4-1:0.0: device disconnected
[  157.501156][ T8413] loop1: detected capacity change from 0 to 32768
[  157.520408][ T8413] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  157.561170][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  157.664680][ T8419] loop1: detected capacity change from 0 to 8
[  157.681461][ T8419] SQUASHFS error: zlib decompression failed, data probably corrupt
[  157.686752][ T8419] SQUASHFS error: Failed to read block 0x9b: -5
[  157.689139][ T8419] SQUASHFS error: Unable to read metadata cache entry [99]
[  157.693202][ T8419] SQUASHFS error: Unable to read inode 0x127
[  157.960920][ T8439] loop3: detected capacity change from 0 to 1764
[  157.988181][ T8441] loop1: detected capacity change from 0 to 4096
[  158.000159][ T8439] iso9660: Corrupted directory entry in block 2 of inode 1920
[  158.034902][ T8442] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.274704][ T8444] loop3: detected capacity change from 0 to 32768
[  158.453211][   T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  158.514783][ T8461] loop3: detected capacity change from 0 to 256
[  158.518435][ T8461] exfat: Deprecated parameter 'namecase'
[  158.521051][ T8461] exfat: Deprecated parameter 'utf8'
[  158.532755][ T8461] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  158.538713][ T8461] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 1)
[  158.542165][ T8461] exFAT-fs (loop3): failed to load alloc-bitmap
[  158.544824][ T8461] exFAT-fs (loop3): failed to recognize exfat type
[  158.613411][   T24] usb 2-1: Using ep0 maxpacket: 32
[  158.623297][   T24] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  158.626729][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.631703][   T24] usb 2-1: config 0 descriptor??
[  158.646185][   T24] gspca_main: nw80x-2.14.0 probing 055f:d001
[  160.308771][   T24] usb 2-1: USB disconnect, device number 22
[  160.734401][ T8504] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1027'.
[  161.263018][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  161.413053][   T10] usb 2-1: Using ep0 maxpacket: 8
[  161.417732][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  161.422215][   T10] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8
[  161.426847][   T10] usb 2-1: config 8 interface 0 has no altsetting 0
[  161.432261][   T10] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  161.436472][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.439611][   T10] usb 2-1: Product: syz
[  161.441367][   T10] usb 2-1: Manufacturer: syz
[  161.443405][   T10] usb 2-1: SerialNumber: syz
[  161.454221][ T8516] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  161.681455][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  161.685003][   T10] usb 2-1: selecting invalid altsetting 0
[  161.745787][   T10] usb 2-1: USB disconnect, device number 23
[  161.791097][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.931638][ T8529] loop3: detected capacity change from 0 to 64
[  162.017752][ T8535] tipc: Started in network mode
[  162.022615][ T8535] tipc: Node identity 6, cluster identity 1
[  162.030121][ T8535] tipc: Node number set to 6
[  162.782693][ T8546] loop1: detected capacity change from 0 to 512
[  162.794706][ T8546] EXT4-fs: Ignoring removed oldalloc option
[  162.860374][ T8546] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1044: Parent and EA inode have the same ino 15
[  162.881449][ T8546] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1044: Parent and EA inode have the same ino 15
[  162.969363][ T8546] EXT4-fs (loop1): 1 orphan inode deleted
[  162.987630][ T8546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.058189][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.114437][ T8543] syz.3.1042 (8543): drop_caches: 2
[  163.316004][ T8553] smb3: Unknown parameter 'acl!ῂeL	1bwVM_w9'
[  163.418240][ T8564] loop1: detected capacity change from 0 to 128
[  163.422102][ T8564] EXT4-fs: Ignoring removed nobh option
[  163.425917][ T8564] EXT4-fs (loop1): Invalid log block size: 4294967295
[  163.626412][ T8568] overlayfs: failed to resolve './file0': -2
[  164.007714][ T8571] loop1: detected capacity change from 0 to 512
[  164.015345][ T8571] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  164.038916][ T8571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.089299][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.115777][   T24] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  164.309768][   T24] usb 4-1: config index 0 descriptor too short (expected 539, got 27)
[  164.318903][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4
[  164.328865][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 15692, setting to 1023
[  164.345878][   T24] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  164.349500][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.352544][   T24] usb 4-1: Product: syz
[  164.362396][   T24] usb 4-1: Manufacturer: syz
[  164.365936][   T24] usb 4-1: SerialNumber: syz
[  164.369176][   T24] usb 4-1: config 0 descriptor??
[  164.373843][   T24] hub 4-1:0.0: bad descriptor, ignoring hub
[  164.375812][   T24] hub 4-1:0.0: probe with driver hub failed with error -5
[  164.380081][   T24] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[  164.408179][   T24] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  164.425270][   T24] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -22
[  164.441330][ T8575] loop1: detected capacity change from 0 to 32768
[  164.448217][ T8575] 
[  164.448217][ T8575]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  164.448217][ T8575] 
[  164.491687][ T5845] 
[  164.491687][ T5845]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  164.491687][ T5845] 
[  164.525372][ T5845] 
[  164.525372][ T5845]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  164.525372][ T5845] 
[  164.693517][   T10] usb 4-1: USB disconnect, device number 5
[  165.057166][ T8595] loop1: detected capacity change from 0 to 32768
[  165.075412][ T8595] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  165.122805][ T8595] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  165.137190][ T8595] XFS (loop1): Starting recovery (logdev: internal)
[  165.150945][ T8595] XFS (loop1): Ending recovery (logdev: internal)
[  165.182051][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  165.453967][   T33] audit: type=1804 audit(1755338256.745:34): pid=8614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1067" name="/newroot/94/file1" dev="fuse" ino=1 res=1 errno=0
[  165.473012][   T33] audit: type=1800 audit(1755338256.755:35): pid=8614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1067" name="/" dev="fuse" ino=1 res=0 errno=0
[  165.770300][ T8613] loop1: detected capacity change from 0 to 32768
[  165.787181][ T8620] loop3: detected capacity change from 0 to 2048
[  165.808057][ T8620] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.924290][ T7733] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  165.935474][ T7733] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  166.079783][ T8623] loop1: detected capacity change from 0 to 1024
[  166.147976][   T40] hfsplus: b-tree write err: -5, ino 4
[  166.619433][ T5861] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.919601][ T5861] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.150348][ T5861] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.229189][   T33] audit: type=1326 audit(1755338258.525:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.1.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4246b8ebe9 code=0x7ffc0000
[  167.277662][   T33] audit: type=1326 audit(1755338258.555:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.1.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4246b8ebe9 code=0x7ffc0000
[  167.314829][   T33] audit: type=1326 audit(1755338258.555:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.1.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4246b8ebe9 code=0x7ffc0000
[  167.373344][   T33] audit: type=1326 audit(1755338258.555:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.1.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4246b8ebe9 code=0x7ffc0000
[  167.417290][   T33] audit: type=1326 audit(1755338258.565:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.1.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4246b8ebe9 code=0x7ffc0000
[  167.448649][ T5861] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.475838][   T33] audit: type=1326 audit(1755338258.565:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.1.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4246b8ebe9 code=0x7ffc0000
[  167.517213][   T33] audit: type=1326 audit(1755338258.565:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.1.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4246b8ebe9 code=0x7ffc0000
[  167.537547][   T33] audit: type=1326 audit(1755338258.565:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8634 comm="syz.1.1080" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4246b8ebe9 code=0x7ffc0000
[  167.631799][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  167.644926][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  167.650266][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  167.654352][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  167.657839][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  167.728298][ T8638] lo speed is unknown, defaulting to 1000
[  167.981190][ T5861] bridge_slave_1: left allmulticast mode
[  167.989964][ T5861] bridge_slave_1: left promiscuous mode
[  167.995615][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.036819][ T5861] bridge_slave_0: left allmulticast mode
[  168.049236][ T5861] bridge_slave_0: left promiscuous mode
[  168.052196][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.444383][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810d5c6800: rx timeout, send abort
[  168.450417][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810d5c5400: rx timeout, send abort
[  168.454086][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810d5c6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  168.461389][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810d5c5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  168.747945][ T5861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.761236][ T5861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.770055][ T5861] bond0 (unregistering): Released all slaves
[  168.895911][ T8638] chnl_net:caif_netlink_parms(): no params data found
[  168.961418][ T5861] tipc: Left network mode
[  169.293331][ T8638] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.296274][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.303981][ T8638] bridge_slave_0: entered allmulticast mode
[  169.307516][ T8638] bridge_slave_0: entered promiscuous mode
[  169.343944][ T8638] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.346761][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.349759][ T8638] bridge_slave_1: entered allmulticast mode
[  169.353549][ T8638] bridge_slave_1: entered promiscuous mode
[  169.389503][ T8638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.411373][ T8638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.457927][ T5861] hsr_slave_0: left promiscuous mode
[  169.460745][ T5861] hsr_slave_1: left promiscuous mode
[  169.465812][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.468524][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.472392][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.476353][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.497188][ T5861] veth1_macvtap: left promiscuous mode
[  169.499471][ T5861] veth0_macvtap: left promiscuous mode
[  169.501344][ T5861] veth1_vlan: left promiscuous mode
[  169.503468][ T5861] veth0_vlan: left promiscuous mode
[  169.695731][ T5855] Bluetooth: hci3: command tx timeout
[  170.140327][ T5861] team0 (unregistering): Port device team_slave_1 removed
[  170.197644][ T5861] team0 (unregistering): Port device team_slave_0 removed
[  170.278172][ T5900] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  170.455366][ T5900] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  170.458814][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.486495][ T5900] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  170.489824][ T5900] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  170.492400][ T5900] usb 2-1: Manufacturer: syz
[  170.509912][ T5900] usb 2-1: config 0 descriptor??
[  170.601360][ T5900] rc_core: IR keymap rc-hauppauge not found
[  170.606326][ T5900] Registered IR keymap rc-empty
[  170.610042][ T5900] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  170.615165][ T5900] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8
[  170.727252][    C1] igorplugusb 2-1:0.0: Error: urb status = -32
[  170.731290][ T5900] usb 2-1: USB disconnect, device number 24
[  171.011153][ T8638] team0: Port device team_slave_0 added
[  171.026081][ T8638] team0: Port device team_slave_1 added
[  171.081111][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.086515][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.097227][ T8638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.112287][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.122491][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.131995][ T8638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.267060][ T8638] hsr_slave_0: entered promiscuous mode
[  171.270305][ T8638] hsr_slave_1: entered promiscuous mode
[  171.306267][ T8638] debugfs: 'hsr0' already exists in 'hsr'
[  171.308329][ T8638] Cannot create hsr debugfs directory
[  171.667247][ T5861] IPVS: stop unused estimator thread 0...
[  171.789962][ T5855] Bluetooth: hci3: command 0x041b tx timeout
[  171.866136][ T8638] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  171.888246][ T8638] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  171.898581][ T8638] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  171.907918][ T8638] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  172.221929][ T5853] jfs_flush_journal: synclist not empty
[  172.237296][ T5853] metapage: ffff8880289aa8b8: 00001000 00000000 00003938 00000000
[  172.334029][ T5853] metapage: ffff8880289aa8c8: 289aaab8 ffff8880 19bc4a28 ffff8881
[  172.338882][ T5853] metapage: ffff8880289aa8d8: 00000004 00000000 00000000 00000000
[  172.342035][ T5853] metapage: ffff8880289aa8e8: 069ba000 ffff8881 0000002d 00000000
[  172.353406][ T5853] metapage: ffff8880289aa8f8: 00000000 dead4ead ffffffff 00000000
[  172.356510][ T5853] metapage: ffff8880289aa908: ffffffff ffffffff 99c03760 ffffffff
[  172.372689][ T5853] metapage: ffff8880289aa918: 9350d568 ffffffff 00000000 00000000
[  172.377986][ T5853] metapage: ffff8880289aa928: 8bc40380 ffffffff 00000300 00000000
[  172.383660][ T5853] metapage: ffff8880289aa938: 289aa938 ffff8880 289aa938 ffff8880
[  172.390474][ T5853] metapage: ffff8880289aa948: 041a6e80 ffffea00 0ae0e000 ffff8881
[  172.399397][ T5853] metapage: ffff8880289aa958: 00001000 00003e24 00000000 00000000
[  172.407790][ T5853] metapage: ffff8880289aa968: 19bc4800 ffff8881
[  172.410697][ T5853] page: ffffea00041a6e80: 057ff2000000403c ffffea0004286ec8
[  172.426207][ T5853] page: ffffea00041a6e90: ffffea0004173648 0000000000000000
[  172.429124][ T5853] page: ffffea00041a6ea0: 000000000000002d ffff8880289aa8b8
[  172.438473][ T5853] page: ffffea00041a6eb0: 00000001ffffffff ffff88811ab18000
[  172.441361][ T5853] metapage: ffff8880289aaaa8: 00001000 00000000 00003cb0 00000000
[  172.446827][ T8638] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.452701][ T5853] metapage: ffff8880289aaab8: 289aada0 ffff8880 289aa8c8 ffff8880
[  172.462191][ T5853] metapage: ffff8880289aaac8: 00000004 00000000 00000000 00000000
[  172.466415][ T5853] metapage: ffff8880289aaad8: 0cd8d000 ffff8881 00000030 00000000
[  172.469822][ T5853] metapage: ffff8880289aaae8: 00000000 dead4ead ffffffff 00000000
[  172.474842][ T5853] metapage: ffff8880289aaaf8: ffffffff ffffffff 99c03760 ffffffff
[  172.478372][ T5853] metapage: ffff8880289aab08: 9350d568 ffffffff 00000000 00000000
[  172.481724][ T5853] metapage: ffff8880289aab18: 8bc40380 ffffffff 00000300 00000000
[  172.485998][ T5853] metapage: ffff8880289aab28: 289aab28 ffff8880 289aab28 ffff8880
[  172.489355][ T5853] metapage: ffff8880289aab38: 04336340 ffffea00 0ae0e000 ffff8881
[  172.496941][ T5853] metapage: ffff8880289aab48: 00001000 00003e24 00000000 00000000
[  172.500086][ T5853] metapage: ffff8880289aab58: 19bc4800 ffff8881
[  172.502353][ T5853] page: ffffea0004336340: 057ff2800000403c ffffea000426c988
[  172.505489][ T5853] page: ffffea0004336350: ffffea0004537c08 0000000000000000
[  172.507948][ T5853] page: ffffea0004336360: 0000000000000030 ffff8880289aaaa8
[  172.510871][ T5853] page: ffffea0004336370: 00000001ffffffff ffff88811ab18000
[  172.511666][ T8638] 8021q: adding VLAN 0 to HW filter on device team0
[  172.516873][ T5853] metapage: ffff8880289aad90: 00001000 00000000 00003d58 00000000
[  172.520043][ T5853] metapage: ffff8880289aada0: 19bc4a28 ffff8881 289aaab8 ffff8880
[  172.522820][ T5853] metapage: ffff8880289aadb0: 00000004 00000000 00000000 00000000
[  172.526835][ T5853] metapage: ffff8880289aadc0: 117f5000 ffff8881 0000001c 00000000
[  172.530807][ T5853] metapage: ffff8880289aadd0: 00000000 dead4ead ffffffff 00000000
[  172.534371][ T5853] metapage: ffff8880289aade0: ffffffff ffffffff 99c03760 ffffffff
[  172.537181][ T5853] metapage: ffff8880289aadf0: 9350d568 ffffffff 00000000 00000000
[  172.540494][ T5853] metapage: ffff8880289aae00: 8bc40380 ffffffff 00000300 00000000
[  172.541485][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.544402][ T5853] metapage: ffff8880289aae10: 289aae10 ffff8880 289aae10 ffff8880
[  172.546144][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.548507][ T5853] metapage: ffff8880289aae20: 0445fd40 ffffea00 0ae0e000 ffff8881
[  172.556435][ T5853] metapage: ffff8880289aae30: 00001000 00003e24 00000000 00000000
[  172.560530][ T5853] metapage: ffff8880289aae40: 19bc4800 ffff8881
[  172.565210][ T5853] page: ffffea000445fd40: 057ff2800000403c ffffea000434b248
[  172.576318][ T5853] page: ffffea000445fd50: ffffea000428f288 0000000000000000
[  172.586810][ T5853] page: ffffea000445fd60: 000000000000001c ffff8880289aad90
[  172.590166][ T5853] page: ffffea000445fd70: 00000001ffffffff ffff88811ab18000
[  172.602380][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.605446][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.715071][ T8774] netlink: 'syz.2.1122': attribute type 3 has an invalid length.
[  172.841437][ T8781] capability: warning: `syz.2.1123' uses 32-bit capabilities (legacy support in use)
[  172.996769][ T8638] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.347861][ T8638] veth0_vlan: entered promiscuous mode
[  173.368141][ T8638] veth1_vlan: entered promiscuous mode
[  173.447606][ T8638] veth0_macvtap: entered promiscuous mode
[  173.456254][ T8638] veth1_macvtap: entered promiscuous mode
[  173.486121][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.497445][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.513105][ T8687] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.516066][ T8687] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.519133][ T8687] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.539150][ T8687] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.690263][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.706207][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.762361][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.765754][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.856236][ T5235] Bluetooth: hci3: command 0x041b tx timeout
[  174.090399][ T8828] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1131'.
[  175.287146][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'.
[  175.933035][ T5235] Bluetooth: hci3: command 0x041b tx timeout
[  177.267431][ T8912] openvswitch: netlink: Message has 4 unknown bytes.
[  177.307552][ T8914] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  178.015816][ T5235] Bluetooth: hci3: command 0x041b tx timeout
[  179.148526][  T973] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  179.303434][  T973] usb 2-1: Using ep0 maxpacket: 32
[  179.308106][  T973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.338163][  T973] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  179.347626][  T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.350826][  T973] usb 2-1: Product: syz
[  179.352451][  T973] usb 2-1: Manufacturer: syz
[  179.357506][  T973] usb 2-1: SerialNumber: syz
[  179.365187][  T973] usb 2-1: config 0 descriptor??
[  179.384385][  T973] usb 2-1: bad CDC descriptors
[  179.394171][  T973] usb 2-1: unsupported MDLM descriptors
[  179.582323][  T973] usb 2-1: USB disconnect, device number 25
[  180.502661][ T8999] loop4: detected capacity change from 0 to 8192
[  180.520570][ T8999] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  180.526029][ T8999] ntfs3(loop4): $Volume is corrupted.
[  181.826726][ T9018] loop4: detected capacity change from 0 to 1024
[  181.842821][ T9018] hfsplus: bad catalog entry type
[  181.867084][ T3777] hfsplus: b-tree write err: -5, ino 4
[  181.937773][ T9024] loop4: detected capacity change from 0 to 16
[  181.942668][ T9024] erofs (device loop4): unidentified incompatible feature 1000000, please upgrade kernel
[  182.008606][ T9028] loop4: detected capacity change from 0 to 512
[  182.037245][ T9028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.043182][ T9028] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  182.521310][ T9034] loop1: detected capacity change from 0 to 4096
[  182.574509][ T9034] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  182.609326][ T9034] ntfs3(loop1): ino=19, mi_enum_attr
[  182.611151][ T9034] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  182.625851][ T9034] ntfs3(loop1): failed to convert "c46c" to cp861
[  182.628276][ T9034] ntfs3(loop1): ino=20, mi_enum_attr
[  182.685555][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'.
[  182.694492][ T9037] batadv0: entered promiscuous mode
[  182.698739][ T9037] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  182.702340][ T9037] batadv0: left promiscuous mode
[  182.905929][ T8638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.068644][ T9051] loop4: detected capacity change from 0 to 1024
[  183.125600][   T29] hfsplus: b-tree write err: -5, ino 4
[  183.555131][ T9059] openvswitch: netlink: Message has 8 unknown bytes.
[  183.874766][ T9071] loop4: detected capacity change from 0 to 32768
[  183.891851][ T9071] (syz.4.1215,9071,1):ocfs2_find_slot:468 ERROR: no free slots available!
[  183.902368][ T9071] (syz.4.1215,9071,1):ocfs2_mount_volume:1751 ERROR: status = -22
[  183.917997][ T9071] (syz.4.1215,9071,1):ocfs2_fill_super:1177 ERROR: status = -22
[  184.253833][ T9081] loop4: detected capacity change from 0 to 32768
[  184.263519][ T9081] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 9 smaller than btree node size 256
[  184.263519][ T9081] members_v2 (size 152):
[  184.263519][ T9081] Device:                        0
[  184.263519][ T9081]   Label:                       (none)
[  184.263519][ T9081]   UUID:                        7af6772b-00de-4159-84cd-1faead05e13e
[  184.263519][ T9081]   Size:                        589824
[  184.263519][ T9081]   read errors:                 0
[  184.263519][ T9081]   write errors:                0
[  184.263519][ T9081]   checksum errors:             0
[  184.263519][ T9081]   seqread iops:                0
[  184.263519][ T9081]   seqwrite iops:               0
[  184.263519][ T9081]   randread iops:               0
[  184.263519][ T9081]   randwrite iops:              0
[  184.263519][ T9081]   Bucket size:                 4608
[  184.263519][ T9081]   First bucket:                0
[  184.263519][ T9081]   Buckets:                     128
[  184.263519][ T9081]   Last mount:                  1714618368
[  184.263519][ T9081]   Last superblock write:       42
[  184.263519][ T9081]   State:                       rw
[  184.263519][ T9081]   Data allowed:                journal,btree,user
[  184.263519][ T9081]   Has data:                    (none)
[  184.263519][ T9081]   Btree allocated bitmap blocksize:1
[  184.263519][ T9081]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  184.263519][ T9081]   Durab
[  184.263625][ T9081] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  184.283046][ T5899] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  184.497621][ T5899] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  184.501375][ T5899] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  184.528875][ T5899] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  184.557419][ T5899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  184.570061][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  184.577453][ T5899] usb 2-1: Product: syz
[  184.579247][ T5899] usb 2-1: Manufacturer: syz
[  184.581188][ T5899] usb 2-1: SerialNumber: syz
[  184.861794][ T5899] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  184.919915][ T9103] block device autoloading is deprecated and will be removed.
[  185.078997][ T5899] usb 2-1: USB disconnect, device number 26
[  185.104173][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  185.104240][ T5899] usblp0: removed
[  185.314179][   T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3f.cb
[  185.326000][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.329617][   T24] usb 5-1: Product: syz
[  185.331817][   T24] usb 5-1: Manufacturer: syz
[  185.334116][   T24] usb 5-1: SerialNumber: syz
[  185.369527][   T24] usb 5-1: config 0 descriptor??
[  186.060330][ T9120] loop1: detected capacity change from 0 to 128
[  186.064887][ T9120] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.067044][ T9120] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.069798][ T9120] EXT4-fs (loop1): Test dummy encryption mode enabled
[  186.112094][ T9120] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  186.113336][   T24] usb 5-1: USB disconnect, device number 2
[  186.144353][ T9120] ext4 filesystem being mounted at /352/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  186.229282][ T9120] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  186.265916][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  186.611736][ T9142] loop1: detected capacity change from 0 to 40427
[  186.616095][ T9142] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  186.619178][ T9142] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  186.626064][ T9142] F2FS-fs (loop1): invalid crc value
[  186.668535][ T9142] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  186.673175][ T9142] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  186.675756][ T9142] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  187.292702][ T9175] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  187.369440][ T5235] Bluetooth: Fragment is too long (len 14, expected 2)
[  187.411487][ T9182] netlink: 'syz.4.1240': attribute type 7 has an invalid length.
[  187.744982][ T5900] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  187.833004][   T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  187.895270][ T5900] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  187.898936][ T5900] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  187.904278][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  187.907870][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  187.912370][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  187.919405][ T5900] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  187.923184][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  187.926287][ T5900] usb 5-1: Product: syz
[  187.928125][ T5900] usb 5-1: Manufacturer: syz
[  187.935764][ T5900] cdc_wdm 5-1:1.0: skipping garbage
[  187.938020][ T5900] cdc_wdm 5-1:1.0: skipping garbage
[  187.941842][ T5900] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  187.945525][ T5900] cdc_wdm 5-1:1.0: Unknown control protocol
[  187.983019][   T24] usb 2-1: Using ep0 maxpacket: 32
[  187.987940][   T24] usb 2-1: config 0 has an invalid interface number: 225 but max is 0
[  187.991186][   T24] usb 2-1: config 0 has no interface number 0
[  187.995823][   T24] usb 2-1: config 0 interface 225 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  187.999986][   T24] usb 2-1: config 0 interface 225 has no altsetting 0
[  188.005190][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=821a, bcdDevice=f8.67
[  188.008627][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.011600][   T24] usb 2-1: Product: syz
[  188.014919][   T24] usb 2-1: Manufacturer: syz
[  188.016499][   T24] usb 2-1: SerialNumber: syz
[  188.020607][   T24] usb 2-1: config 0 descriptor??
[  188.022368][   T24] usb 2-1: Interface #225 referenced by multiple IADs
[  188.239423][   T24] usb 2-1: USB disconnect, device number 27
[  188.700825][ T1279] usb 5-1: USB disconnect, device number 3
[  188.778280][ T9196] ip6gre1: entered promiscuous mode
[  189.164215][ T1279] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  189.261263][ T9202] loop4: detected capacity change from 0 to 16
[  189.268701][ T9202] erofs: Unknown parameter './bus'
[  189.315324][ T1279] usb 2-1: Using ep0 maxpacket: 32
[  189.318980][ T1279] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  189.321727][ T1279] usb 2-1: config 0 has no interface number 0
[  189.324584][ T1279] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  189.330376][ T1279] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  189.333895][ T1279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.336790][ T1279] usb 2-1: Product: syz
[  189.338385][ T1279] usb 2-1: Manufacturer: syz
[  189.339871][ T1279] usb 2-1: SerialNumber: syz
[  189.344202][ T1279] usb 2-1: config 0 descriptor??
[  189.351573][ T1279] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  189.356009][ T1279] em28xx 2-1:0.132: Video interface 132 found:
[  189.928181][ T1279] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  190.276938][ T9208] loop4: detected capacity change from 0 to 128
[  190.289914][ T9208] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  190.333835][ T1279] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  190.338191][ T1279] em28xx 2-1:0.132: board has no eeprom
[  190.404641][   T33] kauditd_printk_skb: 12 callbacks suppressed
[  190.404659][   T33] audit: type=1326 audit(1755338281.705:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.4.1252" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1db8ebe9 code=0x7ffc0000
[  190.419514][   T33] audit: type=1326 audit(1755338281.715:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.4.1252" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1db8ebe9 code=0x7ffc0000
[  190.432086][   T33] audit: type=1326 audit(1755338281.715:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.4.1252" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6b1db8ebe9 code=0x7ffc0000
[  190.443134][ T1279] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  190.450001][ T1279] em28xx 2-1:0.132: analog set to bulk mode.
[  190.452296][ T5899] em28xx 2-1:0.132: Registering V4L2 extension
[  190.452360][   T33] audit: type=1326 audit(1755338281.715:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.4.1252" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b1db8ec23 code=0x7ffc0000
[  190.475665][   T33] audit: type=1326 audit(1755338281.715:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.4.1252" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b1db8ec23 code=0x7ffc0000
[  190.493116][   T33] audit: type=1326 audit(1755338281.715:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9211 comm="syz.4.1252" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1db8ebe9 code=0x7ffc0000
[  190.554673][ T5899] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  190.555208][   T24] usb 2-1: USB disconnect, device number 28
[  190.571486][ T5899] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-19)
[  190.571487][   T24] em28xx 2-1:0.132: Disconnecting em28xx
[  190.642770][ T5899] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  190.648780][ T5899] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  190.651833][ T5899] em28xx 2-1:0.132: No AC97 audio processor
[  190.668626][ T5899] usb 2-1: Decoder not found
[  190.670504][ T5899] em28xx 2-1:0.132: failed to create media graph
[  190.678665][ T5899] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  190.840456][ T5899] em28xx 2-1:0.132: Remote control support is not available for this card.
[  190.841306][ T9222] ==================================================================
[  190.846798][ T9222] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430
[  190.849680][ T9222] Read of size 8 at addr ffff88803c804740 by task v4l_id/9222
[  190.852553][ T9222] 
[  190.853590][ T9222] CPU: 1 UID: 0 PID: 9222 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  190.853610][ T9222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.853621][ T9222] Call Trace:
[  190.853628][ T9222]  <TASK>
[  190.853636][ T9222]  dump_stack_lvl+0x189/0x250
[  190.853657][ T9222]  ? rcu_is_watching+0x15/0xb0
[  190.853671][ T9222]  ? __kasan_check_byte+0x12/0x40
[  190.853695][ T9222]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.853710][ T9222]  ? rcu_is_watching+0x15/0xb0
[  190.853722][ T9222]  ? lock_release+0x4b/0x3e0
[  190.853742][ T9222]  ? __virt_addr_valid+0x1c8/0x5c0
[  190.853760][ T9222]  ? __virt_addr_valid+0x4a5/0x5c0
[  190.853776][ T9222]  print_report+0xca/0x240
[  190.853789][ T9222]  ? v4l2_fh_open+0xc7/0x430
[  190.853809][ T9222]  kasan_report+0x118/0x150
[  190.853827][ T9222]  ? v4l2_fh_open+0xc7/0x430
[  190.853846][ T9222]  v4l2_fh_open+0xc7/0x430
[  190.853866][ T9222]  em28xx_v4l2_open+0x157/0x9a0
[  190.853888][ T9222]  v4l2_open+0x20f/0x360
[  190.853909][ T9222]  chrdev_open+0x4cc/0x5e0
[  190.853946][ T9222]  ? __pfx_chrdev_open+0x10/0x10
[  190.853965][ T9222]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  190.853987][ T9222]  ? __pfx_chrdev_open+0x10/0x10
[  190.854005][ T9222]  do_dentry_open+0x953/0x13f0
[  190.854024][ T9222]  vfs_open+0x3b/0x340
[  190.854036][ T9222]  ? path_openat+0x2ecd/0x3830
[  190.854053][ T9222]  path_openat+0x2ee5/0x3830
[  190.854068][ T9222]  ? arch_stack_walk+0xfc/0x150
[  190.854091][ T9222]  ? stack_depot_save_flags+0x40/0x860
[  190.854112][ T9222]  ? __pfx_path_openat+0x10/0x10
[  190.854126][ T9222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.854147][ T9222]  do_filp_open+0x1fa/0x410
[  190.854162][ T9222]  ? __lock_acquire+0xab9/0xd20
[  190.854180][ T9222]  ? __pfx_do_filp_open+0x10/0x10
[  190.854207][ T9222]  ? _raw_spin_unlock+0x28/0x50
[  190.854223][ T9222]  ? alloc_fd+0x64c/0x6c0
[  190.854246][ T9222]  do_sys_openat2+0x121/0x1c0
[  190.854260][ T9222]  ? __pfx_do_sys_openat2+0x10/0x10
[  190.854274][ T9222]  ? exc_page_fault+0x76/0xf0
[  190.854292][ T9222]  ? do_user_addr_fault+0xc8a/0x1390
[  190.854314][ T9222]  __x64_sys_openat+0x138/0x170
[  190.854330][ T9222]  do_syscall_64+0xfa/0x3b0
[  190.854349][ T9222]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.854394][ T9222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.854407][ T9222]  ? exc_page_fault+0x9f/0xf0
[  190.854423][ T9222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.854437][ T9222] RIP: 0033:0x7f33f09169a4
[  190.854452][ T9222] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  190.854465][ T9222] RSP: 002b:00007ffc9e5eb5e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  190.854481][ T9222] RAX: ffffffffffffffda RBX: 00007ffc9e5eb7f8 RCX: 00007f33f09169a4
[  190.854491][ T9222] RDX: 0000000000000000 RSI: 00007ffc9e5ebf1c RDI: 00000000ffffff9c
[  190.854500][ T9222] RBP: 00007ffc9e5ebf1c R08: 0000000000000000 R09: 0000000000000000
[  190.854509][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.854517][ T9222] R13: 00007ffc9e5eb810 R14: 000055f2db205670 R15: 00007f33f0d94a80
[  190.854532][ T9222]  </TASK>
[  190.854537][ T9222] 
[  190.975378][ T9222] Allocated by task 5899:
[  190.977203][ T9222]  kasan_save_track+0x3e/0x80
[  190.979205][ T9222]  __kasan_kmalloc+0x93/0xb0
[  190.980997][ T9222]  __kmalloc_cache_noprof+0x230/0x3d0
[  190.982988][ T9222]  em28xx_v4l2_init+0x10b/0x2e70
[  190.984921][ T9222]  em28xx_init_extension+0x120/0x1c0
[  190.987038][ T9222]  process_scheduled_works+0xae1/0x17b0
[  190.989263][ T9222]  worker_thread+0x8a0/0xda0
[  190.991111][ T9222]  kthread+0x711/0x8a0
[  190.992667][ T9222]  ret_from_fork+0x3fc/0x770
[  190.994464][ T9222]  ret_from_fork_asm+0x1a/0x30
[  190.996308][ T9222] 
[  190.997234][ T9222] Freed by task 5899:
[  190.998785][ T9222]  kasan_save_track+0x3e/0x80
[  191.000634][ T9222]  kasan_save_free_info+0x46/0x50
[  191.002510][ T9222]  __kasan_slab_free+0x5b/0x80
[  191.004312][ T9222]  kfree+0x18e/0x440
[  191.005676][ T9222]  em28xx_v4l2_init+0x1683/0x2e70
[  191.007253][ T9222]  em28xx_init_extension+0x120/0x1c0
[  191.008895][ T9222]  process_scheduled_works+0xae1/0x17b0
[  191.010565][ T9222]  worker_thread+0x8a0/0xda0
[  191.012082][ T9222]  kthread+0x711/0x8a0
[  191.013651][ T9222]  ret_from_fork+0x3fc/0x770
[  191.015500][ T9222]  ret_from_fork_asm+0x1a/0x30
[  191.017224][ T9222] 
[  191.018159][ T9222] The buggy address belongs to the object at ffff88803c804000
[  191.018159][ T9222]  which belongs to the cache kmalloc-8k of size 8192
[  191.023216][ T9222] The buggy address is located 1856 bytes inside of
[  191.023216][ T9222]  freed 8192-byte region [ffff88803c804000, ffff88803c806000)
[  191.028604][ T9222] 
[  191.029639][ T9222] The buggy address belongs to the physical page:
[  191.032074][ T9222] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c800
[  191.035624][ T9222] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  191.038841][ T9222] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  191.041770][ T9222] page_type: f5(slab)
[  191.043515][ T9222] raw: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  191.046790][ T9222] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  191.050045][ T9222] head: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  191.053305][ T9222] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  191.056653][ T9222] head: 00fff00000000003 ffffea0000f20001 00000000ffffffff 00000000ffffffff
[  191.059979][ T9222] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  191.063306][ T9222] page dumped because: kasan: bad access detected
[  191.065770][ T9222] page_owner tracks the page as allocated
[  191.067922][ T9222] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5591, tgid 5591 (dhcpcd), ts 87387337580, free_ts 87387078953
[  191.075693][ T9222]  post_alloc_hook+0x240/0x2a0
[  191.077565][ T9222]  get_page_from_freelist+0x21e4/0x22c0
[  191.079699][ T9222]  __alloc_frozen_pages_noprof+0x181/0x370
[  191.081947][ T9222]  alloc_pages_mpol+0x232/0x4a0
[  191.083945][ T9222]  allocate_slab+0x8a/0x370
[  191.085703][ T9222]  ___slab_alloc+0xbeb/0x1410
[  191.087538][ T9222]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  191.090044][ T9222]  kmalloc_reserve+0x136/0x290
[  191.091921][ T9222]  __alloc_skb+0x142/0x2d0
[  191.093698][ T9222]  netlink_dump+0x167/0xe90
[  191.095477][ T9222]  __netlink_dump_start+0x5cb/0x7e0
[  191.097532][ T9222]  rtnetlink_rcv_msg+0x9eb/0xb70
[  191.099497][ T9222]  netlink_rcv_skb+0x208/0x470
[  191.101373][ T9222]  netlink_unicast+0x82f/0x9e0
[  191.103244][ T9222]  netlink_sendmsg+0x805/0xb30
[  191.105147][ T9222]  __sock_sendmsg+0x21c/0x270
[  191.107054][ T9222] page last free pid 5591 tgid 5591 stack trace:
[  191.109484][ T9222]  __free_frozen_pages+0xbc4/0xd30
[  191.111528][ T9222]  __put_partials+0x156/0x1a0
[  191.113462][ T9222]  put_cpu_partial+0x17c/0x250
[  191.115384][ T9222]  __slab_free+0x2d5/0x3c0
[  191.117090][ T9222]  qlist_free_all+0x97/0x140
[  191.118921][ T9222]  kasan_quarantine_reduce+0x148/0x160
[  191.121030][ T9222]  __kasan_slab_alloc+0x22/0x80
[  191.122948][ T9222]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  191.125253][ T9222]  __alloc_skb+0x112/0x2d0
[  191.127003][ T9222]  netlink_sendmsg+0x5c6/0xb30
[  191.128844][ T9222]  __sock_sendmsg+0x21c/0x270
[  191.130656][ T9222]  __sys_sendto+0x3bd/0x520
[  191.132367][ T9222]  __x64_sys_sendto+0xde/0x100
[  191.134229][ T9222]  do_syscall_64+0xfa/0x3b0
[  191.135973][ T9222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.138281][ T9222] 
[  191.139289][ T9222] Memory state around the buggy address:
[  191.141504][ T9222]  ffff88803c804600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.144625][ T9222]  ffff88803c804680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.147815][ T9222] >ffff88803c804700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.150864][ T9222]                                            ^
[  191.153282][ T9222]  ffff88803c804780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.156479][ T9222]  ffff88803c804800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  191.159622][ T9222] ==================================================================
[  191.162914][    C1] vkms_vblank_simulate: vblank timer overrun
[  191.166131][   T55] Bluetooth: hci0: command 0x206a tx timeout
[  191.170153][ T5235] Bluetooth: hci1: command 0x0406 tx timeout
[  191.487972][   T24] em28xx 2-1:0.132: Closing input extension
[  191.494122][ T9222] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  191.497019][ T9222] CPU: 1 UID: 0 PID: 9222 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  191.501736][ T9222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.505622][ T9222] Call Trace:
[  191.506944][ T9222]  <TASK>
[  191.508110][ T9222]  dump_stack_lvl+0x99/0x250
[  191.509950][ T9222]  ? __asan_memcpy+0x40/0x70
[  191.511794][ T9222]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.513920][ T9222]  ? __pfx__printk+0x10/0x10
[  191.516443][ T9222]  vpanic+0x281/0x750
[  191.518026][ T9222]  ? preempt_schedule+0xae/0xc0
[  191.519973][ T9222]  ? __pfx_vpanic+0x10/0x10
[  191.521673][ T9222]  ? preempt_schedule_common+0x83/0xd0
[  191.523750][ T9222]  ? preempt_schedule+0xae/0xc0
[  191.525685][ T9222]  ? __pfx_preempt_schedule+0x10/0x10
[  191.527815][ T9222]  panic+0xb9/0xc0
[  191.529851][ T9222]  ? __pfx_panic+0x10/0x10
[  191.531652][ T9222]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  191.533894][ T9222]  ? v4l2_fh_open+0xc7/0x430
[  191.535689][ T9222]  check_panic_on_warn+0x89/0xb0
[  191.537631][ T9222]  ? v4l2_fh_open+0xc7/0x430
[  191.539470][ T9222]  end_report+0x78/0x160
[  191.541153][ T9222]  kasan_report+0x129/0x150
[  191.542961][ T9222]  ? v4l2_fh_open+0xc7/0x430
[  191.544752][ T9222]  v4l2_fh_open+0xc7/0x430
[  191.546530][ T9222]  em28xx_v4l2_open+0x157/0x9a0
[  191.548441][ T9222]  v4l2_open+0x20f/0x360
[  191.550109][ T9222]  chrdev_open+0x4cc/0x5e0
[  191.551900][ T9222]  ? __pfx_chrdev_open+0x10/0x10
[  191.554004][ T9222]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  191.556451][ T9222]  ? __pfx_chrdev_open+0x10/0x10
[  191.558348][ T9222]  do_dentry_open+0x953/0x13f0
[  191.560198][ T9222]  vfs_open+0x3b/0x340
[  191.561783][ T9222]  ? path_openat+0x2ecd/0x3830
[  191.563595][ T9222]  path_openat+0x2ee5/0x3830
[  191.565381][ T9222]  ? arch_stack_walk+0xfc/0x150
[  191.567278][ T9222]  ? stack_depot_save_flags+0x40/0x860
[  191.569382][ T9222]  ? __pfx_path_openat+0x10/0x10
[  191.571238][ T9222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.573717][ T9222]  do_filp_open+0x1fa/0x410
[  191.575570][ T9222]  ? __lock_acquire+0xab9/0xd20
[  191.577468][ T9222]  ? __pfx_do_filp_open+0x10/0x10
[  191.579450][ T9222]  ? _raw_spin_unlock+0x28/0x50
[  191.581338][ T9222]  ? alloc_fd+0x64c/0x6c0
[  191.583051][ T9222]  do_sys_openat2+0x121/0x1c0
[  191.584836][ T9222]  ? __pfx_do_sys_openat2+0x10/0x10
[  191.586838][ T9222]  ? exc_page_fault+0x76/0xf0
[  191.588645][ T9222]  ? do_user_addr_fault+0xc8a/0x1390
[  191.590714][ T9222]  __x64_sys_openat+0x138/0x170
[  191.592587][ T9222]  do_syscall_64+0xfa/0x3b0
[  191.594380][ T9222]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.596362][ T9222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.598691][ T9222]  ? exc_page_fault+0x9f/0xf0
[  191.600486][ T9222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.602832][ T9222] RIP: 0033:0x7f33f09169a4
[  191.604611][ T9222] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  191.612210][ T9222] RSP: 002b:00007ffc9e5eb5e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  191.615442][ T9222] RAX: ffffffffffffffda RBX: 00007ffc9e5eb7f8 RCX: 00007f33f09169a4
[  191.618466][ T9222] RDX: 0000000000000000 RSI: 00007ffc9e5ebf1c RDI: 00000000ffffff9c
[  191.621431][ T9222] RBP: 00007ffc9e5ebf1c R08: 0000000000000000 R09: 0000000000000000
[  191.624527][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.627466][ T9222] R13: 00007ffc9e5eb810 R14: 000055f2db205670 R15: 00007f33f0d94a80
[  191.630484][ T9222]  </TASK>
[  191.632452][ T9222] Kernel Offset: disabled
[  191.634147][ T9222] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:58:02  Registers:
info registers vcpu 0

CPU#0
RAX=df69076017fb2600 RBX=ffffffff81968308 RCX=df69076017fb2600 RDX=0000000000000001
RSI=ffffffff8d9b6e07 RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6b1e97bfc8 CR3=0000000105ea4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6b1dd87498 00007f6b1dd87470 XMM03=00007f6b1dd874a8 00007f6b1dd874a0
XMM04=00007f6b1e8ed100 00007f6b1dd87460 XMM05=00007f6b1dd87478 00007f6b1dd874c0
XMM06=00007f6b1dd874b8 00007f6b1dd874b0 XMM07=00007f6b1dd874a8 00007f6b1dd874a0
XMM08=0000000000000000 00007f6b1dc12ee7 XMM09=0000000000000000 00007f6b1dc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002f3ef90
R8 =ffff888107138237 R9 =1ffff11020e27046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af990f R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f33f0cacc80 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3f2840 CR3=000000011a7c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f6b1dc12ee7 XMM09=0000000000000000 00007f6b1dc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
