last executing test programs:

3m22.511364167s ago: executing program 1 (id=253):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000e80)={"9fb770e8ffb03d8c98369a1833ea4adcc96a12d210f52b30a70a937f11b9", 0xc, 0x8, 0x800, [0x7, 0x1, 0x8, 0x6467, 0x7, 0x0, 0x7, 0x2, 0x6, 0x89b, 0x6, 0xfff, 0x0, 0x6, 0x2, 0x93, 0x9]})

3m22.388163107s ago: executing program 1 (id=255):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800001, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], 0x3, 0xa86, &(0x7f0000000e40)="$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")
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='nilfs2\x00', 0x8008, 0x0)

3m22.191832914s ago: executing program 1 (id=260):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

3m18.581616682s ago: executing program 1 (id=306):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x0, 0x523, &(0x7f00000018c0)="$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")
chroot(&(0x7f00000000c0)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

3m18.444581971s ago: executing program 1 (id=308):
socket(0x2, 0xa, 0x300)
socket$kcm(0x2, 0xa, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m18.144609796s ago: executing program 1 (id=309):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)

3m18.144436086s ago: executing program 32 (id=309):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)

3m1.496828667s ago: executing program 2 (id=464):
syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00')
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x80)
openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0xef})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000000140)={'vlan1\x00', @random="02000000002b"})
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x20000010)
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006)

3m0.582812937s ago: executing program 2 (id=476):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088470000100015"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc004)

3m0.438055834s ago: executing program 2 (id=478):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f00000001c0)=0x13)

3m0.339558855s ago: executing program 2 (id=482):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@umask={'umask', 0x3d, 0x3}}, {@keep_last_dots}, {}, {@umask={'umask', 0x3d, 0x7f}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)

3m0.152949527s ago: executing program 2 (id=484):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x2, 0x4)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="1d10d2", 0x3}], 0x1}}], 0x1, 0x4001c00)

2m59.790889032s ago: executing program 2 (id=489):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0200000001000200000000000400020000000000100001000000000020"], 0x24, 0x3)
lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000002880)=@known='system.posix_acl_default\x00', &(0x7f0000000540)=""/15, 0xf)

2m59.740988158s ago: executing program 33 (id=489):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0200000001000200000000000400020000000000100001000000000020"], 0x24, 0x3)
lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000002880)=@known='system.posix_acl_default\x00', &(0x7f0000000540)=""/15, 0xf)

1m1.642492975s ago: executing program 4 (id=1710):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x42093, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040)

1m1.554274676s ago: executing program 4 (id=1711):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000051401"], 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000)

1m1.502001744s ago: executing program 4 (id=1712):
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0)

1m1.063763396s ago: executing program 4 (id=1716):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x40, &(0x7f00000002c0)={[{@utf8no}, {@shortname_winnt}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@fat=@dos1xfloppy}, {@fat=@discard}, {@uni_xlate}, {@shortname_lower}, {@fat=@fmask={'fmask', 0x3d, 0x800}}, {@fat=@sys_immutable}, {@numtail}, {@shortname_mixed}, {@uni_xlate}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$eJzs3UFr02AYwPFn7dZ2HVt7GIKC+KAXvYStfoIiG4gFZVvFeRAyl2ppbEZTKxVxu3n1E/gBht48Kah32cWbd/Gyi+BlB7WyNLFdF7FVttTt/4ORd++bp3nT9015Etpk+8bTe5WSa5TMusRSKjGRDdkRye6WfCP+MuaVE9JtQy5MfP14enH55pV8oTC3oDqfX7qYU9WpM28ePHp+9l194vrLqddJ2cre2v6S+7R1Yuvk9o+l4NUdEVNXHKdurtiWrpbdiqF6zbZM19Jy1bVqde1qL9nO2lpTzerqZHqtZrmumtWmVqym1h2t15pq3jHLVTUMQyfTvd0/8uIDRxS/J0TyB9IZRGE8rLJWy5vx0Mbi5mF0CgAADJeo8v+7ZVfLrladPfn9/vw/JgPk/yJh+T9+q7i5sGCS/x9xu/l/2j9+9yL/BwAAAAAAAAAAAAAAAAAAAADgf7Ajkmm1WpmdVstbBn9JEUmJSPB/1P3EwQjGnfE/nhaXR8T/4V5KxH7SKDaK7WW7PV+SsthiycyYyDdvPvja5fnLhbkZ9WTlrb3ux683inFJBvGBbHj8bDteu+PXZUzS3dvPSUamw+NzIfGNYkLOn2sl/S1bYkhGPtwWR2xZ9eZ1J/7xrOqlq4We+HFvPQAAAAAAjgJDf9l3/u61GxrcNqSnvV3ZuT4gmc71gbmw6wM959ejcmo0uv0GAAAAAOA4cZsPK6ZtW7U/FVKdmvf9Rw1VIXj+wcDh8ZCm4Bsx0e1Oqt+VR0XEr3k1LGPRTyH2D29vfIBRHts/nxMisqdm+vDn/ItnAxye/RU+3+9/0kb1iQQAAADgoARJ/7F5SCYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEOo35uHBev/zb3HujYXj2YvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOHwMwAA//8VhA3+")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1333404, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1005c48, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

1m0.983823869s ago: executing program 4 (id=1717):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000300)}, 0x20)

1m0.644234003s ago: executing program 4 (id=1721):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4)

1m0.416208338s ago: executing program 34 (id=1721):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4)

3.927892613s ago: executing program 5 (id=2314):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400402e0000405f5f5f0c0003"], 0x30}}, 0x0)

2.980252318s ago: executing program 5 (id=2320):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x2, 0x3, 0x1, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xbef}]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x14000000)

2.910223749s ago: executing program 5 (id=2322):
syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x63, 0x20, 0x54, 0x10, 0x2a39, 0x3fa0, 0xf2d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xf7, 0x0, 0xff, 0x3b, 0x32, 0x97}}]}}]}}, 0x0)

1.879038603s ago: executing program 3 (id=2331):
r0 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
socket(0x10, 0x3, 0xd1f)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffffbc, &(0x7f00000001c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r3, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000})
close_range(r1, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0xc0fb, 0x4000, 0xfffffffe, 0x116}, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

1.558158683s ago: executing program 5 (id=2332):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x8)
syz_mount_image$f2fs(&(0x7f0000000300), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f0000000180)=ANY=[], 0x1, 0x105ad, &(0x7f0000020c00)="$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")

1.16415869s ago: executing program 0 (id=2334):
file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x1700, 0x1000)

866.561646ms ago: executing program 0 (id=2335):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)
signalfd4(r0, &(0x7f0000000080), 0x8, 0x0)

616.852187ms ago: executing program 0 (id=2336):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

613.360116ms ago: executing program 3 (id=2337):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd3f0, 0x2000, 0x8, 0xadeb})
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x0)

498.463145ms ago: executing program 0 (id=2338):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x20004004)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010)

497.876385ms ago: executing program 3 (id=2339):
r0 = socket(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0)

339.15834ms ago: executing program 3 (id=2340):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)

338.781019ms ago: executing program 0 (id=2341):
ioprio_set$pid(0x2, 0x0, 0x4007)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a)
sendfile(r0, r0, 0x0, 0x800000a1e)

250.1922ms ago: executing program 3 (id=2342):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x1, 0x4)

198.643899ms ago: executing program 3 (id=2343):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000003100)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @rand_addr=' \x01\x00', @local, {[@routing={0x84}]}}}}}, 0x0)

188.928763ms ago: executing program 0 (id=2344):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@data_err_ignore}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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")
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')

182.235154ms ago: executing program 5 (id=2345):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000224e0000", 0x58}], 0x1)

0s ago: executing program 5 (id=2346):
r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r0}, &(0x7f0000000240)=""/242, 0xf2, &(0x7f0000000000)={&(0x7f0000000080)={'sha1\x00'}})

kernel console output (not intermixed with test programs):

33] audit: type=1326 audit(1776954568.772:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.4.1313" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df539c819 code=0x0
[  198.940744][ T9305] loop0: detected capacity change from 0 to 512
[  198.955303][ T9305] EXT4-fs (loop0): filesystem is read-only
[  198.957863][ T9305] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  198.967341][ T9305] EXT4-fs (loop0): filesystem is read-only
[  198.971049][ T9305] EXT4-fs (loop0): orphan cleanup on readonly fs
[  198.986600][ T9305] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1316: bg 0: block 64: padding at end of block bitmap is not set
[  198.991918][ T9305] loop0: lost filesystem error report for type 5 error -117
[  198.992653][    C1] EXT4-fs (loop0): initial error at time 1776954568: ext4_validate_block_bitmap:441
[  198.998640][    C1] EXT4-fs (loop0): last error at time 1776954568: ext4_validate_block_bitmap:441
[  199.010638][ T9305] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  199.015019][ T9305] loop0: lost filesystem error report for type 5 error -117
[  199.015658][ T9305] EXT4-fs (loop0): 1 orphan inode deleted
[  199.020848][ T9305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  199.049011][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.302064][ T9308] loop3: detected capacity change from 0 to 40427
[  199.335059][ T9308] F2FS-fs (loop3): build fault injection rate: 174
[  199.338973][ T9308] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  199.353068][ T9308] F2FS-fs (loop3): invalid crc value
[  199.402998][ T9308] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  199.407261][ T9308] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  199.422638][ T5931] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  199.436757][ T9308] syz.3.1317: attempt to access beyond end of device
[  199.436757][ T9308] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  199.480347][ T6561] syz-executor: attempt to access beyond end of device
[  199.480347][ T6561] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  199.487109][ T6561] CPU: 0 UID: 0 PID: 6561 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  199.487127][ T6561] Tainted: [L]=SOFTLOCKUP
[  199.487130][ T6561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.487136][ T6561] Call Trace:
[  199.487140][ T6561]  <TASK>
[  199.487152][ T6561]  dump_stack_lvl+0xe8/0x150
[  199.487173][ T6561]  f2fs_handle_critical_error+0x37c/0x540
[  199.487191][ T6561]  f2fs_write_end_io+0x1273/0x1740
[  199.487211][ T6561]  __submit_merged_bio+0x256/0x6a0
[  199.487227][ T6561]  __submit_merged_write_cond+0x3c9/0x4e0
[  199.487242][ T6561]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  199.487263][ T6561]  f2fs_write_data_pages+0x287e/0x34f0
[  199.487275][ T6561]  ? is_bpf_text_address+0x26/0x2b0
[  199.487302][ T6561]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  199.487319][ T6561]  ? sched_clock+0x3f/0x60
[  199.487344][ T6561]  ? __pfx_hlock_conflict+0x10/0x10
[  199.487353][ T6561]  ? __bfs+0x153/0x290
[  199.487360][ T6561]  ? __pfx_hlock_conflict+0x10/0x10
[  199.487404][ T6561]  ? lockdep_unlock+0x5d/0xd0
[  199.487417][ T6561]  ? __lock_acquire+0x146e/0x2cf0
[  199.487439][ T6561]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  199.487452][ T6561]  do_writepages+0x32e/0x550
[  199.487470][ T6561]  ? do_raw_spin_unlock+0x4d/0x210
[  199.487482][ T6561]  filemap_fdatawrite+0x1e9/0x2f0
[  199.487497][ T6561]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  199.487524][ T6561]  ? preempt_schedule_common+0x82/0xd0
[  199.487539][ T6561]  ? preempt_schedule_thunk+0x16/0x30
[  199.487567][ T6561]  f2fs_sync_dirty_inodes+0x30e/0x830
[  199.487584][ T6561]  f2fs_write_checkpoint+0x9df/0x26a0
[  199.487592][ T6561]  ? __lock_acquire+0x6b5/0x2cf0
[  199.487616][ T6561]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  199.487647][ T6561]  kill_f2fs_super+0x314/0x720
[  199.487659][ T6561]  ? __pfx_kill_f2fs_super+0x10/0x10
[  199.487672][ T6561]  ? lockdep_hardirqs_on+0x7a/0x110
[  199.487686][ T6561]  deactivate_locked_super+0xbc/0x130
[  199.487699][ T6561]  cleanup_mnt+0x437/0x4d0
[  199.487710][ T6561]  ? _raw_spin_unlock_irq+0x23/0x50
[  199.487723][ T6561]  task_work_run+0x1d9/0x270
[  199.487737][ T6561]  ? __pfx_task_work_run+0x10/0x10
[  199.487749][ T6561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.487758][ T6561]  exit_to_user_mode_loop+0xed/0x480
[  199.487771][ T6561]  ? rcu_is_watching+0x15/0xb0
[  199.487781][ T6561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.487790][ T6561]  do_syscall_64+0x33e/0xf80
[  199.487799][ T6561]  ? trace_irq_disable+0x3b/0x140
[  199.487813][ T6561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.487821][ T6561] RIP: 0033:0x7fb9a479da57
[  199.487832][ T6561] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  199.487839][ T6561] RSP: 002b:00007fff6c50f318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  199.487850][ T6561] RAX: 0000000000000000 RBX: 00007fb9a4832048 RCX: 00007fb9a479da57
[  199.487856][ T6561] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6c50f3d0
[  199.487861][ T6561] RBP: 00007fff6c50f3d0 R08: 00007fff6c5103d0 R09: 00000000ffffffff
[  199.487866][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6c510460
[  199.487871][ T6561] R13: 00007fb9a4832048 R14: 0000000000030ab3 R15: 00007fff6c5104a0
[  199.487885][ T6561]  </TASK>
[  199.487966][ T6561] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  199.586596][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.682577][ T5931] usb 1-1: Using ep0 maxpacket: 16
[  199.694782][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.698100][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.701643][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  199.705678][ T5931] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  199.708132][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.718612][ T5931] usb 1-1: config 0 descriptor??
[  199.747655][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  199.751593][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  200.046377][ T9329] netlink: 'syz.4.1326': attribute type 39 has an invalid length.
[  200.136167][ T5931] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[  200.144195][ T5931] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[  200.148477][ T5931] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[  200.154648][ T5931] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[  200.160049][ T5931] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[  200.181516][ T5931] appleir 0003:05AC:8241.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0
[  200.328050][ T9337] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1330'.
[  200.331488][ T9337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1330'.
[  200.362376][ T9337] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1330'.
[  200.456345][ T1283] usb 1-1: USB disconnect, device number 13
[  200.568905][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.583428][ T9345] bridge_slave_0 (unregistering): left allmulticast mode
[  200.585520][ T9345] bridge_slave_0 (unregistering): left promiscuous mode
[  200.587679][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.622809][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.632501][ T5931] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  200.744125][ T9352] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  200.786215][ T5886] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  200.791010][ T5886] Bluetooth: hci1: Injecting HCI hardware error event
[  200.797458][ T5886] Bluetooth: hci1: hardware error 0x00
[  200.798748][ T5931] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  200.810033][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.827224][ T5931] usb 5-1: config 0 descriptor??
[  200.840385][ T5931] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  200.984813][ T9354] loop3: detected capacity change from 0 to 32768
[  200.989967][ T9354] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1338 (9354)
[  201.010540][ T9354] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  201.016856][ T9354] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  201.102965][ T9354] BTRFS info (device loop3): enabling ssd optimizations
[  201.112370][ T9354] BTRFS info (device loop3): turning on flush-on-commit
[  201.114676][ T9354] BTRFS info (device loop3): turning on async discard
[  201.118375][ T9354] BTRFS info (device loop3): enabling free space tree
[  201.126709][ T9354] BTRFS info (device loop3): force zlib compression, level 3
[  201.133403][ T9354] BTRFS info (device loop3): max_inline set to 4096
[  201.187017][ T6561] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  201.660726][ T5931] usb 5-1: USB disconnect, device number 11
[  201.663505][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.667243][ T1283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.988271][ T9393] loop3: detected capacity change from 0 to 32768
[  202.028613][ T9393] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  202.064730][ T9393] XFS (loop3): Ending clean mount
[  202.091440][ T6561] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  202.299745][ T9399] loop0: detected capacity change from 0 to 32768
[  202.400201][ T9399] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  202.407799][ T9412] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1349'.
[  202.430039][ T9399] JBD2: Ignoring recovery information on journal
[  202.451523][ T9414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  202.454482][ T9414] IPv6: NLM_F_CREATE should be set when creating new route
[  202.457266][ T9414] IPv6: NLM_F_CREATE should be set when creating new route
[  202.468690][ T9414] IPv6: NLM_F_CREATE should be set when creating new route
[  202.508292][ T9414] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1351'.
[  202.599660][ T9399] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  202.704080][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.815315][ T5881] ocfs2: Unmounting device (7,0) on (node local)
[  202.873703][ T5886] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  203.130183][ T9443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1362'.
[  203.223835][ T9448] Bluetooth: MGMT ver 1.23
[  203.634738][   T26] net_ratelimit: 3 callbacks suppressed
[  203.634753][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.724503][ T1283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.756649][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.004387][ T9467] loop4: detected capacity change from 0 to 131072
[  205.007664][ T9467] xfs: Deprecated parameter 'ikeep'
[  205.009419][ T9467] XFS: ikeep mount option is deprecated.
[  205.012145][ T1283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.016706][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.077259][ T9467] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  205.112003][ T9467] XFS (loop4): Starting recovery (logdev: internal)
[  205.137393][ T9467] XFS (loop4): Ending recovery (logdev: internal)
[  205.575178][ T7076] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  205.937420][ T9491] loop3: detected capacity change from 0 to 32768
[  205.944782][ T9491] 
[  205.944782][ T9491]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  205.944782][ T9491] 
[  205.976879][ T9491] 
[  205.976879][ T9491]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  205.976879][ T9491] 
[  205.980326][ T9491] 
[  205.980326][ T9491]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  205.980326][ T9491] 
[  206.018272][  T122] 
[  206.018272][  T122]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.018272][  T122] 
[  206.047197][ T7212] 
[  206.047197][ T7212]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.047197][ T7212] 
[  206.061394][ T7212] 
[  206.061394][ T7212]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.061394][ T7212] 
[  206.062512][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.076529][  T122] 
[  206.076529][  T122]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.076529][  T122] 
[  206.086839][ T6561] 
[  206.086839][ T6561]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.086839][ T6561] 
[  206.104076][ T6561] 
[  206.104076][ T6561]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  206.104076][ T6561] 
[  206.144605][ T9495] loop0: detected capacity change from 0 to 128
[  206.153669][ T9495] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed)
[  206.346522][ T9504] loop4: detected capacity change from 0 to 256
[  206.367080][ T9504] FAT-fs (loop4): Directory bread(block 64) failed
[  206.375001][ T9504] FAT-fs (loop4): Directory bread(block 65) failed
[  206.381054][ T9504] FAT-fs (loop4): Directory bread(block 66) failed
[  206.386008][ T9504] FAT-fs (loop4): Directory bread(block 67) failed
[  206.388970][ T9504] FAT-fs (loop4): Directory bread(block 68) failed
[  206.391396][ T9504] FAT-fs (loop4): Directory bread(block 69) failed
[  206.394541][ T9504] FAT-fs (loop4): Directory bread(block 70) failed
[  206.399591][ T9504] FAT-fs (loop4): Directory bread(block 71) failed
[  206.401776][ T9504] FAT-fs (loop4): Directory bread(block 72) failed
[  206.404045][ T9504] FAT-fs (loop4): Directory bread(block 73) failed
[  206.522391][ T1283] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  206.685136][ T1283] usb 1-1: Using ep0 maxpacket: 32
[  206.689054][ T1283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.695973][ T1283] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32
[  206.704589][ T5931] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  206.709936][ T1283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.721166][ T1283] usb 1-1: Product: syz
[  206.725767][ T1283] usb 1-1: Manufacturer: syz
[  206.727804][ T1283] usb 1-1: SerialNumber: syz
[  206.734954][ T1283] usb 1-1: config 0 descriptor??
[  206.895809][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short
[  206.899698][ T5931] usb 4-1: not running at top speed; connect to a high speed hub
[  206.905271][ T5931] usb 4-1: config 1 has an invalid interface number: 116 but max is 0
[  206.908404][ T5931] usb 4-1: config 1 has no interface number 0
[  206.910701][ T5931] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[  206.919163][ T5931] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64
[  206.928752][ T5931] usb 4-1: config 1 interface 116 altsetting 15 has an invalid endpoint descriptor of length 2, skipping
[  206.942539][ T5931] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  206.948686][ T5931] usb 4-1: config 1 interface 116 has no altsetting 0
[  206.956096][ T1283] ljca 1-1:0.0: bulk endpoints not found
[  206.960698][ T5931] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[  206.971200][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.977649][ T5931] usb 4-1: Product: syz
[  206.980448][ T5931] usb 4-1: Manufacturer: syz
[  206.980828][ T9525] erspan0: entered promiscuous mode
[  206.986332][ T1283] usb 1-1: USB disconnect, device number 14
[  206.988139][ T5931] usb 4-1: SerialNumber: syz
[  206.992957][ T9525] macsec1: entered promiscuous mode
[  206.999207][ T9508] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  207.003528][ T9525] erspan0: left promiscuous mode
[  207.102681][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.214275][ T5931] ums-usbat 4-1:1.116: USB Mass Storage device detected
[  207.313305][ T5931] usb 4-1: USB disconnect, device number 15
[  207.542835][ T5917] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  207.695458][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short
[  207.708433][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.718994][ T5917] usb 5-1: string descriptor 0 read error: -22
[  207.722175][ T5917] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  207.726019][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.735649][ T5917] usb 5-1: No union descriptors
[  207.957718][ T5917] usb 5-1: USB disconnect, device number 12
[  208.073145][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.146578][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.480449][ T9564] loop0: detected capacity change from 0 to 32768
[  208.485757][ T9564] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Inode #65 has refcount flag but no i_refcount_loc
[  208.491654][ T9564] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  208.495557][ T9564] OCFS2: File system is now read-only.
[  208.501228][ T9564] (syz.0.1401,9564,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  208.505960][ T9564] (syz.0.1401,9564,0):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  208.508947][ T9564] (syz.0.1401,9564,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  208.512702][ T9564] (syz.0.1401,9564,0):ocfs2_initialize_super:2198 ERROR: status = -30
[  208.515928][ T9564] (syz.0.1401,9564,0):ocfs2_fill_super:1177 ERROR: status = -30
[  208.546991][ T9566] loop4: detected capacity change from 0 to 2048
[  208.587711][ T9566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.620626][ T9566] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  208.665327][ T7076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.895678][ T9579] loop3: detected capacity change from 0 to 4096
[  208.955284][   T33] audit: type=1804 audit(1776954578.862:81): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1408" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=20984 res=1 errno=0
[  208.965679][ T9579] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  208.970039][ T9579] ntfs3(loop3): Failed to load $Extend (-22).
[  208.971969][ T9579] ntfs3(loop3): Failed to initialize $Extend.
[  209.049227][ T6561] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22.
[  209.185369][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.312383][ T5917] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  209.466517][ T5917] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  209.482617][ T5917] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  209.486438][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  209.489778][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  209.495424][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  209.502056][ T5917] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  209.505810][ T9608] netlink: 'syz.0.1419': attribute type 32 has an invalid length.
[  209.511222][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  209.515244][ T5917] usb 5-1: Product: syz
[  209.517435][ T5917] usb 5-1: Manufacturer: syz
[  209.526362][ T5917] cdc_wdm 5-1:1.0: skipping garbage
[  209.532428][ T5917] cdc_wdm 5-1:1.0: skipping garbage
[  209.548861][ T5917] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  209.552773][ T5917] cdc_wdm 5-1:1.0: Unknown control protocol
[  209.940222][ T9623] loop3: detected capacity change from 0 to 512
[  209.947444][ T9623] EXT4-fs: Ignoring removed nomblk_io_submit option
[  209.979947][ T9623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843c198, mo2=0002]
[  209.990312][ T9623] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.1425: corrupted in-inode xattr: e_value size too large
[  210.006142][ T9623] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  210.011089][ T9623] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1425: couldn't read orphan inode 15 (err -117)
[  210.014529][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  210.014552][    C0] EXT4-fs (loop3): initial error at time 1776954579: ext4_iget_extra_inode:5128: inode 15
[  210.014580][    C0] EXT4-fs (loop3): last error at time 1776954579: ext4_iget_extra_inode:5128: inode 15
[  210.051063][ T9623] loop3: lost filesystem error report for type 5 error -117
[  210.060159][ T9623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.124677][ T6561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.233178][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.493836][ T5931] usb 5-1: USB disconnect, device number 13
[  211.217487][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.665313][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.286672][ T9653] loop4: detected capacity change from 0 to 32768
[  212.297570][ T9653] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1435 (9653)
[  212.316850][ T9653] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  212.323073][ T9653] BTRFS info (device loop4): using sha256 checksum algorithm
[  212.648129][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.702868][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.040852][ T9653] BTRFS info (device loop4): rebuilding free space tree
[  213.128341][ T9653] BTRFS info (device loop4): disabling free space tree
[  213.131135][ T9653] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  213.135467][ T9653] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  213.150310][ T9653] BTRFS info (device loop4): checking UUID tree
[  213.155630][ T9653] BTRFS info (device loop4): setting nodatasum
[  213.158143][ T9653] BTRFS info (device loop4): setting nodatacow
[  213.160558][ T9653] BTRFS info (device loop4): turning off barriers
[  213.163282][ T9653] BTRFS info (device loop4): force clearing of disk cache
[  213.805459][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.825056][ T7076] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  214.222953][ T5917] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  214.232798][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.382967][ T5917] usb 1-1: Using ep0 maxpacket: 8
[  214.389991][ T5917] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  214.399186][ T5917] usb 1-1: config 0 has no interface number 0
[  214.411298][ T5917] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  214.451224][ T5917] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  214.476193][ T5917] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  214.491392][ T5917] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  214.515625][ T5917] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  214.528863][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.604408][ T5917] usb 1-1: config 0 descriptor??
[  214.691989][ T5917] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  214.863056][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.894256][ T5917] usb 1-1: USB disconnect, device number 15
[  214.894362][    C1] ldusb 1-1:0.55: usb_submit_urb failed (-19)
[  214.946171][ T5917] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  215.297841][ T9699] loop3: detected capacity change from 0 to 128
[  215.325169][ T9699] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  215.331108][ T9699] ext4 filesystem being mounted at /372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  215.348778][ T9699] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.1444: No space for directory leaf checksum. Please run e2fsck -D.
[  215.353886][ T9699] EXT4-fs error (device loop3): ext4_empty_dir:3085: inode #2: comm syz.3.1444: Directory block failed checksum
[  215.405421][ T6561] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  215.484883][ T9705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.526340][ T9705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.529773][ T9705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.539639][ T9705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.544533][ T9705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.551001][ T9705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.564629][ T9704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.580855][ T9704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.701860][ T9714] Bluetooth: hci0: service_discovery: too big uuid_count value 63764
[  215.742501][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  215.752882][ T9716] loop0: detected capacity change from 0 to 2048
[  215.762905][ T9716] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  215.820579][ T9720] loop4: detected capacity change from 0 to 256
[  215.835381][ T9716] syz.0.1451: attempt to access beyond end of device
[  215.835381][ T9716] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  215.843285][ T9720] exfat: Deprecated parameter 'utf8'
[  215.843308][ T9721] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  215.847313][ T9720] exfat: Deprecated parameter 'utf8'
[  215.862515][ T9720] exfat: Deprecated parameter 'namecase'
[  215.867985][ T9720] exfat: Deprecated parameter 'namecase'
[  215.887373][ T9720] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  215.928193][ T9716] syz.0.1451 (9716) used greatest stack depth: 19000 bytes left
[  215.938132][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'.
[  216.311985][ T9739] loop4: detected capacity change from 0 to 2048
[  216.316692][ T9739] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  216.359226][ T9742] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  216.692176][ T9748] loop4: detected capacity change from 0 to 32768
[  216.696828][ T9748] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1466 (9748)
[  216.707629][ T9748] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  216.712385][ T9748] BTRFS info (device loop4): using crc32c checksum algorithm
[  216.837820][ T9748] BTRFS info (device loop4): enabling ssd optimizations
[  216.840582][ T9748] BTRFS info (device loop4): turning on async discard
[  216.843246][ T9748] BTRFS info (device loop4): enabling free space tree
[  217.234454][ T9781] loop0: detected capacity change from 0 to 128
[  217.275083][ T9781] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  217.280278][ T9781] ext4 filesystem being mounted at /499/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  217.358617][ T5881] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  217.494860][ T9786] loop0: detected capacity change from 0 to 16
[  217.526223][ T9786] erofs (device loop0): mounted with root inode @ nid 36.
[  217.554758][ T9786] syz.0.1476: attempt to access beyond end of device
[  217.554758][ T9786] loop0: rw=0, sector=1936876908, nr_sectors = 1 limit=16
[  217.580351][ T9786] syz.0.1476: attempt to access beyond end of device
[  217.580351][ T9786] loop0: rw=0, sector=3955228672, nr_sectors = 1 limit=16
[  217.590910][ T9786] syz.0.1476: attempt to access beyond end of device
[  217.590910][ T9786] loop0: rw=0, sector=1936876908, nr_sectors = 1 limit=16
[  217.597259][ T9786] syz.0.1476: attempt to access beyond end of device
[  217.597259][ T9786] loop0: rw=0, sector=3955228672, nr_sectors = 1 limit=16
[  218.206847][ T7076] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.252471][ T9791] loop0: detected capacity change from 0 to 32768
[  218.341175][ T9791] JBD2: Ignoring recovery information on journal
[  218.576543][ T9791] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  218.663001][ T9805] loop4: detected capacity change from 0 to 256
[  218.673992][ T9805] FAT-fs (loop4): Directory bread(block 64) failed
[  218.676130][ T9805] FAT-fs (loop4): Directory bread(block 65) failed
[  218.678088][ T9805] FAT-fs (loop4): Directory bread(block 66) failed
[  218.680088][ T9805] FAT-fs (loop4): Directory bread(block 67) failed
[  218.682147][ T9805] FAT-fs (loop4): Directory bread(block 68) failed
[  218.710976][ T9805] FAT-fs (loop4): Directory bread(block 69) failed
[  218.718067][ T9805] FAT-fs (loop4): Directory bread(block 70) failed
[  218.722931][ T9805] FAT-fs (loop4): Directory bread(block 71) failed
[  218.725361][ T9805] FAT-fs (loop4): Directory bread(block 72) failed
[  218.727801][ T9805] FAT-fs (loop4): Directory bread(block 73) failed
[  219.140898][ T5881] ocfs2: Unmounting device (7,0) on (node local)
[  219.680604][   T33] audit: type=1326 audit(1776954588.582:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.3.1500" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a479c819 code=0x7ffc0000
[  219.690471][   T33] audit: type=1326 audit(1776954588.582:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.3.1500" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a479c819 code=0x7ffc0000
[  219.699474][   T33] audit: type=1326 audit(1776954588.582:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.3.1500" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb9a479c819 code=0x7ffc0000
[  219.716549][   T33] audit: type=1326 audit(1776954588.582:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.3.1500" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a479c819 code=0x7ffc0000
[  219.730389][   T33] audit: type=1326 audit(1776954588.582:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.3.1500" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb9a479c819 code=0x7ffc0000
[  219.742010][   T33] audit: type=1326 audit(1776954588.582:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.3.1500" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a479c819 code=0x7ffc0000
[  219.963586][ T9858] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  219.997482][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'.
[  220.034632][ T9864] loop3: detected capacity change from 0 to 64
[  220.068227][ T9864] Trying to free block not in datazone
[  220.143212][ T5917] net_ratelimit: 6 callbacks suppressed
[  220.143227][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.205220][ T9870] exfat: Deprecated parameter 'utf8'
[  220.225051][ T9870] exfat: Deprecated parameter 'namecase'
[  220.229746][ T9870] exfat: Deprecated parameter 'namecase'
[  220.233859][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.235468][ T9870] exfat: Deprecated parameter 'namecase'
[  220.260476][ T9870] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  220.594143][ T9886] set_capacity_and_notify: 1 callbacks suppressed
[  220.594161][ T9886] loop3: detected capacity change from 0 to 512
[  220.626980][ T9886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.631801][ T9886] ext4 filesystem being mounted at /404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  220.650658][ T9886] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 32793 (only 1 groups)
[  220.686527][ T6561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.170243][ T9916] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1534'.
[  221.174011][ T9916] tipc: Invalid UDP bearer configuration
[  221.174056][ T9916] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  221.183522][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.320738][ T9920] loop0: detected capacity change from 0 to 1024
[  221.375421][ T9920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.397714][ T5931] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  221.459630][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.582628][ T5931] usb 4-1: Using ep0 maxpacket: 16
[  221.590515][ T5931] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  221.600897][ T5931] usb 4-1: config 0 has no interface number 0
[  221.603610][ T5931] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  221.609343][ T5931] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  221.618787][ T5931] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  221.622185][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.625221][ T5931] usb 4-1: Product: syz
[  221.627824][ T5931] usb 4-1: Manufacturer: syz
[  221.629845][ T5931] usb 4-1: SerialNumber: syz
[  221.642481][ T5931] usb 4-1: config 0 descriptor??
[  221.657927][ T9913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  221.663858][ T9913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  221.932682][ T9913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  221.938042][ T9913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  222.146533][ T1283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.157006][ T5931] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  222.225354][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.954140][ T9957] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1548'.
[  222.995918][ T5931] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  223.002461][ T5931] asix 4-1:0.34: probe with driver asix failed with error -71
[  223.012045][ T5931] usb 4-1: USB disconnect, device number 16
[  223.265317][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.268952][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.277668][ T9958] gtp0: entered allmulticast mode
[  224.303077][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.396123][ T9999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.404704][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.437843][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'.
[  224.759955][T10020] loop0: detected capacity change from 0 to 1024
[  224.798455][T10020] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  224.856989][T10024] loop3: detected capacity change from 0 to 128
[  224.946773][T10026] loop4: detected capacity change from 0 to 512
[  224.955751][T10026] EXT4-fs: Ignoring removed i_version option
[  224.964513][T10026] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  224.975059][T10026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  224.981175][T10026] System zones: 1-12
[  224.985499][T10026] EXT4-fs (loop4): orphan cleanup on readonly fs
[  225.004017][T10026] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.1577: invalid block
[  225.018982][T10026] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  225.020933][T10027] syz.3.1576: attempt to access beyond end of device
[  225.020933][T10027] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128
[  225.023924][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  225.023939][    C1] EXT4-fs (loop4): initial error at time 1776954593: ext4_get_branch:178: inode 11: block 33619980
[  225.023956][    C1] EXT4-fs (loop4): last error at time 1776954593: ext4_get_branch:178: inode 11: block 33619980
[  225.044920][T10026] EXT4-fs (loop4): Remounting filesystem read-only
[  225.049246][T10026] EXT4-fs (loop4): 1 truncate cleaned up
[  225.052624][T10026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  225.065087][T10027] syz.3.1576: attempt to access beyond end of device
[  225.065087][T10027] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128
[  225.073418][T10026] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1577: error -117 reading directory block
[  225.078714][T10027] Buffer I/O error on dev loop3, logical block 80, lost async page write
[  225.085648][T10027] syz.3.1576: attempt to access beyond end of device
[  225.085648][T10027] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128
[  225.106815][T10027] syz.3.1576: attempt to access beyond end of device
[  225.106815][T10027] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128
[  225.120843][T10027] Buffer I/O error on dev loop3, logical block 84, lost async page write
[  225.128599][T10027] syz.3.1576: attempt to access beyond end of device
[  225.128599][T10027] loop3: rw=2049, sector=186, nr_sectors = 8 limit=128
[  225.136383][ T7076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  225.141394][T10027] syz.3.1576: attempt to access beyond end of device
[  225.141394][T10027] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128
[  225.155096][T10027] Buffer I/O error on dev loop3, logical block 96, lost async page write
[  225.180913][T10027] syz.3.1576: attempt to access beyond end of device
[  225.180913][T10027] loop3: rw=2049, sector=194, nr_sectors = 8 limit=128
[  225.191282][T10024] syz.3.1576: attempt to access beyond end of device
[  225.191282][T10024] loop3: rw=2049, sector=154, nr_sectors = 2 limit=128
[  225.197494][T10027] syz.3.1576: attempt to access beyond end of device
[  225.197494][T10027] loop3: rw=2049, sector=200, nr_sectors = 2 limit=128
[  225.202921][T10024] Buffer I/O error on dev loop3, logical block 77, lost async page write
[  225.208074][T10027] Buffer I/O error on dev loop3, logical block 100, lost async page write
[  225.214698][T10027] syz.3.1576: attempt to access beyond end of device
[  225.214698][T10027] loop3: rw=2049, sector=202, nr_sectors = 2 limit=128
[  225.306040][T10034] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  225.347185][ T7276] net_ratelimit: 11 callbacks suppressed
[  225.347198][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.695619][T10043] loop0: detected capacity change from 0 to 64
[  225.709914][T10043] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  226.302681][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.385198][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.582149][T10056] loop0: detected capacity change from 0 to 2048
[  226.933083][T10056] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  227.432942][ T5214] Bluetooth: hci0: command 0x0406 tx timeout
[  227.434829][ T7276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.582721][ T5917] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  227.697128][T10089] loop4: detected capacity change from 0 to 4096
[  227.715842][T10089] ntfs3(loop4): Failed to load $Volume (-22).
[  227.735187][ T5917] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  227.744811][ T5917] usb 4-1: config 0 has no interface number 0
[  227.750629][ T5917] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  227.768826][ T5917] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  227.778628][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  227.785333][ T5917] usb 4-1: Manufacturer: syz
[  227.790445][ T5917] usb 4-1: SerialNumber: syz
[  227.800945][ T5917] usb 4-1: config 0 descriptor??
[  228.072372][ T5931] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  228.214685][ T5917] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71
[  228.222595][ T5931] usb 5-1: Using ep0 maxpacket: 32
[  228.228356][ T5931] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  228.229323][ T5917] usb 4-1: USB disconnect, device number 17
[  228.231842][ T5931] usb 5-1: config 0 has no interface number 0
[  228.240115][ T5931] usb 5-1: config 0 interface 184 has no altsetting 0
[  228.247129][ T5931] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  228.250791][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.254683][ T5931] usb 5-1: Product: syz
[  228.256463][ T5931] usb 5-1: Manufacturer: syz
[  228.258498][ T5931] usb 5-1: SerialNumber: syz
[  228.263952][ T5931] usb 5-1: config 0 descriptor??
[  228.462904][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.513591][T10098] netlink: 'syz.0.1609': attribute type 1 has an invalid length.
[  228.516089][T10098] netlink: 'syz.0.1609': attribute type 1 has an invalid length.
[  228.639892][T10104] loop0: detected capacity change from 0 to 128
[  228.876597][ T5931] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  228.885483][ T5931] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  229.097463][T10113] loop3: detected capacity change from 0 to 32768
[  229.102124][T10113] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1616 (10113)
[  229.121062][T10113] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  229.128400][T10113] BTRFS info (device loop3): using crc32c checksum algorithm
[  229.174122][T10113] BTRFS info (device loop3): enabling ssd optimizations
[  229.176835][T10113] BTRFS info (device loop3): turning on flush-on-commit
[  229.179735][T10113] BTRFS info (device loop3): enabling free space tree
[  229.183183][T10113] BTRFS info (device loop3): enabling auto defrag
[  229.185831][T10113] BTRFS info (device loop3): use lzo compression, level 1
[  229.188584][T10113] BTRFS info (device loop3): max_inline set to 0
[  229.223689][ T6561] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  229.347584][ T1283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.505720][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.515606][T10134] loop3: detected capacity change from 0 to 64
[  229.717945][ T5931] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  229.721244][ T5931] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  229.728910][ T5931] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  229.732143][ T5931] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  229.737852][ T5931] usb 5-1: USB disconnect, device number 14
[  229.740464][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'.
[  229.753307][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'.
[  230.111381][T10159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.121689][T10159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.126304][T10159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.135330][T10159] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  230.278429][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'.
[  230.425729][T10165] loop4: detected capacity change from 0 to 4096
[  230.430144][T10165] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  230.453287][T10165] ntfs3(loop4): ino=19, mi_enum_attr
[  230.471435][T10165] ntfs3(loop4): failed to convert "c46c" to cp866
[  230.474559][T10165] ntfs3(loop4): ino=20, mi_enum_attr
[  230.827278][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1641'.
[  231.092745][ T5917] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  231.242422][ T5917] usb 1-1: Using ep0 maxpacket: 32
[  231.246531][ T5917] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  231.249635][ T5917] usb 1-1: config 0 has no interface number 0
[  231.254522][ T5917] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  231.261059][ T5917] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  231.264962][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.268023][ T5917] usb 1-1: Product: syz
[  231.269818][ T5917] usb 1-1: Manufacturer: syz
[  231.271675][ T5917] usb 1-1: SerialNumber: syz
[  231.278803][T10188] loop3: detected capacity change from 0 to 40427
[  231.281923][T10188] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  231.284973][T10188] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  231.287411][ T5917] usb 1-1: config 0 descriptor??
[  231.289039][T10188] F2FS-fs (loop3): invalid crc value
[  231.292854][T10181] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  231.350430][T10188] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  231.359014][T10188] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  231.361316][T10188] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  231.517266][T10181] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  231.718522][T10196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1647'.
[  231.730310][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'.
[  231.780698][T10198] loop4: detected capacity change from 0 to 512
[  231.791118][T10198] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  231.794623][T10198] EXT4-fs (loop4): orphan cleanup on readonly fs
[  231.797970][T10198] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  231.803964][ T5931] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  231.808491][T10198] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  231.811770][T10198] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.1648: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  231.818116][T10198] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  231.818589][T10198] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1648: couldn't read orphan inode 13 (err -117)
[  231.826052][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  231.826067][    C0] EXT4-fs (loop4): last error at time 1776954600: ext4_ext_check_inode:521: inode 13
[  231.832435][T10198] loop4: lost filesystem error report for type 5 error -117
[  231.841753][T10198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  231.869185][ T7076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.927842][T10201] loop4: detected capacity change from 0 to 8
[  231.931707][T10201] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  231.971048][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short
[  231.974683][ T5931] usb 4-1: not running at top speed; connect to a high speed hub
[  231.983950][ T5931] usb 4-1: config 13 has an invalid interface number: 102 but max is 0
[  231.991205][ T5931] usb 4-1: config 13 has no interface number 0
[  232.004115][ T5931] usb 4-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb
[  232.010325][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.017228][ T5917] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  232.018604][ T5931] usb 4-1: Product: syz
[  232.024575][ T5917] asix 1-1:0.188: probe with driver asix failed with error -61
[  232.025339][ T5931] usb 4-1: Manufacturer: syz
[  232.028819][ T5931] usb 4-1: SerialNumber: syz
[  232.249633][ T5931] cdc_phonet 4-1:13.102: More than one union descriptor, skipping ...
[  232.253771][ T5931] cdc_phonet 4-1:13.102: probe with driver cdc_phonet failed with error -22
[  232.260922][ T5931] usb 4-1: USB disconnect, device number 18
[  232.323310][ T5917] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  232.474568][ T5917] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  232.478540][ T5917] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  232.482559][ T5917] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  232.485683][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.492201][T10205] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  232.499458][ T5917] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  232.808770][ T5917] usb 5-1: USB disconnect, device number 15
[  232.831503][T10207] loop3: detected capacity change from 0 to 512
[  232.878847][T10207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.887943][T10207] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.951204][ T6561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.400939][T10220] loop3: detected capacity change from 0 to 32768
[  233.406924][T10220] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1657 (10220)
[  233.456697][T10220] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  233.461830][T10220] BTRFS info (device loop3): using blake2b checksum algorithm
[  233.561847][T10220] BTRFS info (device loop3): enabling ssd optimizations
[  233.564923][T10220] BTRFS info (device loop3): turning on async discard
[  233.568219][T10220] BTRFS info (device loop3): enabling free space tree
[  233.573491][T10220] BTRFS info (device loop3): use zstd compression, level 3
[  233.593424][   T33] audit: type=1800 audit(1776954602.502:88): pid=10220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1657" name="file1" dev="loop3" ino=260 res=0 errno=0
[  233.770525][ T6561] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  233.914413][ T1283] usb 1-1: USB disconnect, device number 16
[  234.347724][T10259] loop0: detected capacity change from 0 to 512
[  234.352195][T10259] EXT4-fs: quotafile must be on filesystem root
[  234.610677][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'.
[  234.614427][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'.
[  234.617138][T10263] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  234.689561][T10265] loop0: detected capacity change from 0 to 2048
[  234.702742][T10257] loop3: detected capacity change from 0 to 131072
[  234.706008][T10257] xfs: Deprecated parameter 'ikeep'
[  234.707558][T10257] XFS: ikeep mount option is deprecated.
[  234.714161][T10265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.737451][T10257] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  234.747226][T10265] ext4: Unknown parameter ''
[  234.765225][   T33] audit: type=1800 audit(1776954603.662:89): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1669" name="file1" dev="loop0" ino=15 res=0 errno=0
[  234.788746][T10257] XFS (loop3): Starting recovery (logdev: internal)
[  234.808741][T10257] XFS (loop3): Ending recovery (logdev: internal)
[  234.827808][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.920970][ T6561] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  235.158420][T10284] input: syz1 as /devices/virtual/input/input9
[  235.348037][T10290] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96
[  235.617465][T10303] loop0: detected capacity change from 0 to 4096
[  235.621134][T10303] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  235.715452][T10310] loop3: detected capacity change from 0 to 64
[  235.736436][   T33] audit: type=1800 audit(1776954604.642:90): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1687" name="file1" dev="loop3" ino=5 res=0 errno=0
[  236.359251][T10320] loop3: detected capacity change from 0 to 24
[  236.373884][T10320] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  236.429801][T10320] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  236.753470][T10326] program syz.0.1693 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  237.646653][T10364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1711'.
[  237.869731][T10370] loop3: detected capacity change from 0 to 128
[  237.885103][T10370] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  237.890109][T10370] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.918851][T10370] overlayfs: upper fs needs to support d_type.
[  237.952010][ T6561] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  238.142147][T10376] loop4: detected capacity change from 0 to 128
[  238.148726][T10376] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  238.196707][ T7076] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000)
[  238.209204][ T7076] FAT-fs (loop4): Filesystem has been set read-only
[  238.264763][ T5931] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  238.454394][ T5931] usb 4-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config
[  238.457421][ T5931] usb 4-1: too many endpoints for config 0 interface 0 altsetting 22: 69, using maximum allowed: 30
[  238.460898][ T5931] usb 4-1: config 0 interface 0 altsetting 22 has 0 endpoint descriptors, different from the interface descriptor's value: 69
[  238.465776][ T5931] usb 4-1: config 0 interface 0 has no altsetting 0
[  238.468092][ T5931] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  238.470686][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.480079][ T5931] usb 4-1: config 0 descriptor??
[  238.705485][ T5931] usb 4-1: language id specifier not provided by device, defaulting to English
[  238.828320][T10389] loop0: detected capacity change from 0 to 1024
[  238.914973][ T5931] usb 4-1: USB disconnect, device number 19
[  238.958666][ T5214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.975992][ T5214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.982902][ T5214] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.991263][ T5214] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.994084][ T5214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.231850][T10390] chnl_net:caif_netlink_parms(): no params data found
[  239.372991][T10390] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.375848][T10390] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.378762][T10390] bridge_slave_0: entered allmulticast mode
[  239.382616][T10390] bridge_slave_0: entered promiscuous mode
[  239.387416][T10390] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.390301][T10390] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.394744][T10390] bridge_slave_1: entered allmulticast mode
[  239.398493][T10390] bridge_slave_1: entered promiscuous mode
[  239.433358][T10390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.440262][T10390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.485983][T10390] team0: Port device team_slave_0 added
[  239.490005][T10390] team0: Port device team_slave_1 added
[  239.537823][T10390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.540482][T10390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.549749][T10390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.558886][T10390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.563352][T10390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  239.574130][T10390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.623323][T10390] hsr_slave_0: entered promiscuous mode
[  239.627791][T10390] hsr_slave_1: entered promiscuous mode
[  239.633706][T10390] debugfs: 'hsr0' already exists in 'hsr'
[  239.639270][T10390] Cannot create hsr debugfs directory
[  239.837611][T10390] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  239.844637][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  239.847963][T10390] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  239.857169][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  239.860743][T10390] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  239.870916][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  239.875612][T10390] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  239.883143][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  239.901444][T10421] loop3: detected capacity change from 0 to 8
[  239.910243][T10421] SQUASHFS error: Unable to read inode 0x2000
[  239.993810][T10390] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.018635][T10390] 8021q: adding VLAN 0 to HW filter on device team0
[  240.031327][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.036270][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.049710][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.052689][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.213828][ T5917] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  240.307263][T10390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.378628][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  240.394890][ T5917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217
[  240.399629][ T5917] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  240.401516][T10440] dummy0: entered promiscuous mode
[  240.404816][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.408815][T10440] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  240.417923][ T5917] usb 4-1: config 0 descriptor??
[  240.424055][T10426] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  240.447853][T10440] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  240.451647][T10440] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network
[  240.460721][T10440] hsr1: entered allmulticast mode
[  240.463272][T10440] dummy0: entered allmulticast mode
[  240.465619][T10440] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  240.606789][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1737'.
[  240.610403][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'.
[  240.649312][ T5917] ath6kl: Failed to submit usb control message: -71
[  240.655901][ T5917] ath6kl: unable to send the bmi data to the device: -71
[  240.664540][ T5917] ath6kl: Unable to send get target info: -71
[  240.669707][ T5917] ath6kl: Failed to init ath6kl core: -71
[  240.677892][ T5917] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  240.698912][ T5917] usb 4-1: USB disconnect, device number 20
[  240.733520][T10390] veth0_vlan: entered promiscuous mode
[  240.751236][T10390] veth1_vlan: entered promiscuous mode
[  240.794209][T10390] veth0_macvtap: entered promiscuous mode
[  240.803644][T10390] veth1_macvtap: entered promiscuous mode
[  240.834357][T10390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.849115][T10390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.866229][ T7088] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.877403][ T7088] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.885833][ T7088] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.892369][ T7088] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.999331][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.013728][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.037594][ T5214] Bluetooth: hci2: command tx timeout
[  241.068348][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.071274][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.212506][   T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  241.364836][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  241.376902][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  241.383022][   T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  241.394066][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4
[  241.401699][   T10] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40
[  241.408470][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.418551][   T10] usb 1-1: Product: syz
[  241.420358][   T10] usb 1-1: Manufacturer: syz
[  241.422221][   T10] usb 1-1: SerialNumber: syz
[  241.704527][   T10] usb 1-1: unit 5 not found!
[  241.803790][   T10] usb 1-1: USB disconnect, device number 17
[  241.941609][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  242.692174][T10492] loop3: detected capacity change from 0 to 64
[  242.723300][T10492] syz.3.1756: attempt to access beyond end of device
[  242.723300][T10492] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64
[  242.729783][T10492] Buffer I/O error on dev loop3, logical block 512, async page read
[  242.740806][T10492] syz.3.1756: attempt to access beyond end of device
[  242.740806][T10492] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64
[  242.749178][T10492] Buffer I/O error on dev loop3, logical block 56576, async page read
[  243.102463][ T5214] Bluetooth: hci2: command tx timeout
[  243.226391][T10509] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  243.230496][T10509] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  243.239778][T10509] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  243.243244][T10509] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  243.313557][   T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  243.335425][T10513] tipc: Failed to obtain node identity
[  243.337803][T10513] tipc: Enabling of bearer <ib:wg1> rejected, failed to enable media
[  243.484966][   T10] usb 1-1: Using ep0 maxpacket: 32
[  243.500675][   T10] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  243.511607][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.518407][   T10] usb 1-1: Product: syz
[  243.521672][   T10] usb 1-1: Manufacturer: syz
[  243.525339][   T10] usb 1-1: SerialNumber: syz
[  244.033655][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  244.145714][   T10] usb 1-1: USB disconnect, device number 18
[  244.307924][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.640012][T10542] loop0: detected capacity change from 0 to 128
[  244.668214][T10542] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  244.680887][T10542] ext4 filesystem being mounted at /596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  245.198113][ T5214] Bluetooth: hci2: command tx timeout
[  245.270750][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'.
[  245.276151][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'.
[  245.278891][T10562] loop5: detected capacity change from 0 to 256
[  245.377237][T10565] loop3: detected capacity change from 0 to 1024
[  245.406070][T10565] syz.3.1787: attempt to access beyond end of device
[  245.406070][T10565] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  245.410151][T10565] Buffer I/O error on dev loop3, logical block 2889, async page read
[  245.413556][T10565] syz.3.1787: attempt to access beyond end of device
[  245.413556][T10565] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  245.427930][T10565] Buffer I/O error on dev loop3, logical block 2889, async page read
[  245.430892][   T33] audit: type=1800 audit(1776954614.332:91): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1787" name="file1" dev="loop3" ino=20 res=0 errno=0
[  245.437061][T10565] hfsplus: can't free extent: start 2889, count 1
[  245.441561][   T33] audit: type=1804 audit(1776954614.332:92): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1787" name="/newroot/495/file1/file1" dev="loop3" ino=20 res=1 errno=0
[  245.455195][   T33] audit: type=1800 audit(1776954614.332:93): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1787" name="file1" dev="loop3" ino=20 res=0 errno=0
[  245.583143][ T5881] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  245.827907][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  245.910513][   T33] audit: type=1400 audit(1776954614.812:94): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=10590 comm="syz.3.1799"
[  246.008782][T10599] loop3: detected capacity change from 0 to 128
[  246.013700][T10599] EXT4-fs (loop3): Test dummy encryption mode enabled
[  246.018338][T10599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  246.022796][T10599] System zones: 1-3, 19-19, 35-36
[  246.031947][T10599] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  246.037737][T10599] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.051132][T10599] EXT4-fs (loop3): resizing filesystem from 64 to 2 blocks
[  246.060211][T10599] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  246.122209][ T6561] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  246.237749][T10607] loop5: detected capacity change from 0 to 4096
[  246.262092][T10607] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  246.311271][T10607] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  246.344942][T10607] ntfs3(loop5): ino=1e, mi_enum_attr
[  246.347123][T10607] ntfs3(loop5): ino=1e, mi_enum_attr
[  246.368330][T10607] ntfs3(loop5): ino=1e, "file1" mi_enum_attr
[  246.376868][T10607] ntfs3(loop5): ino=1e, "file1" mi_enum_attr
[  246.385257][T10607] ntfs3(loop5): ino=1e, "file1" mi_enum_attr
[  246.387743][T10607] ntfs3(loop5): ino=1e, "file1" mi_enum_attr
[  246.390446][T10607] ntfs3(loop5): ino=1e, "file1" ni_find_attr
[  246.392882][T10607] ntfs3(loop5): ino=1e, "file1" attr_set_size_ex
[  246.710737][T10617] loop3: detected capacity change from 0 to 4096
[  246.743900][T10620] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  246.789302][T10617] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  247.204606][T10630] loop3: detected capacity change from 0 to 512
[  247.214707][T10630] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  247.233219][T10630] EXT4-fs (loop3): orphan cleanup on readonly fs
[  247.282549][T10630] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  247.285108][ T5214] Bluetooth: hci2: command tx timeout
[  247.288707][T10630] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  247.296649][T10630] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  247.313415][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  247.315899][    C1] EXT4-fs (loop3): initial error at time 1776954616: ext4_mb_generate_buddy:1317
[  247.319222][    C1] EXT4-fs (loop3): last error at time 1776954616: ext4_mb_generate_buddy:1317
[  247.329587][T10630] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.1814: corrupted inode contents
[  247.334311][T10630] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  247.339303][T10630] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #12: comm syz.3.1814: mark_inode_dirty error
[  247.353318][T10630] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  247.368639][T10630] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.1814: corrupted inode contents
[  247.384388][T10630] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  247.386201][T10630] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.1814: mark_inode_dirty error
[  247.393299][T10630] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  247.439763][T10630] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.1814: corrupted inode contents
[  247.462404][T10635] loop0: detected capacity change from 0 to 512
[  247.465120][T10635] EXT4-fs: Ignoring removed bh option
[  247.519309][T10635] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  247.539043][T10635] EXT4-fs (loop0): 1 truncate cleaned up
[  247.542834][T10635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.560085][T10630] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  247.560697][T10630] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  247.579135][T10630] loop3: lost filesystem error report for type 5 error -117
[  247.579743][T10630] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.1814: corrupted inode contents
[  247.587541][T10630] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  247.587999][T10630] EXT4-fs error (device loop3): ext4_truncate:4690: inode #12: comm syz.3.1814: mark_inode_dirty error
[  247.596039][T10630] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  247.596340][T10630] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  247.602946][T10630] loop3: lost filesystem error report for type 5 error -117
[  247.603463][T10630] EXT4-fs (loop3): 1 truncate cleaned up
[  247.610048][T10630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  247.686482][ T6561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.714752][T10639] trusted_key: encrypted_key: master key parameter is missing
[  248.039731][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.107792][T10657] loop0: detected capacity change from 0 to 1024
[  248.158801][T10655] loop9: detected capacity change from 0 to 524287936
[  248.201547][T10657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.387177][T10666] befs: (nullb0): invalid magic header
[  248.559648][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.821289][T10675] loop0: detected capacity change from 0 to 32768
[  248.830066][T10675] 
[  248.830066][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.830066][T10675] 
[  248.854980][T10675] 
[  248.854980][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.854980][T10675] 
[  248.859737][T10675] 
[  248.859737][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.859737][T10675] 
[  248.863404][T10675] 
[  248.863404][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.863404][T10675] 
[  248.867053][T10675] 
[  248.867053][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.867053][T10675] 
[  248.870323][T10675] 
[  248.870323][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.870323][T10675] 
[  248.884798][  T122] 
[  248.884798][  T122]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.884798][  T122] 
[  248.892178][T10675] 
[  248.892178][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.892178][T10675] 
[  248.896221][T10675] 
[  248.896221][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.896221][T10675] 
[  248.899403][T10675] 
[  248.899403][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.899403][T10675] 
[  248.902936][T10675] 
[  248.902936][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.902936][T10675] 
[  248.922197][T10675] 
[  248.922197][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.922197][T10675] 
[  248.973752][T10675] 
[  248.973752][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.973752][T10675] 
[  248.984180][  T122] 
[  248.984180][  T122]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.984180][  T122] 
[  248.993341][T10675] 
[  248.993341][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.993341][T10675] 
[  248.998315][T10675] 
[  248.998315][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  248.998315][T10675] 
[  249.001335][T10675] 
[  249.001335][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  249.001335][T10675] 
[  249.007717][T10675] 
[  249.007717][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  249.007717][T10675] 
[  249.010760][T10675] 
[  249.010760][T10675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  249.010760][T10675] 
[  249.031164][  T122] 
[  249.031164][  T122]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  249.031164][  T122] 
[  249.047996][ T5881] 
[  249.047996][ T5881]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  249.047996][ T5881] 
[  249.052772][ T5881] 
[  249.052772][ T5881]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  249.052772][ T5881] 
[  249.526426][T10701] loop5: detected capacity change from 0 to 4096
[  249.539887][T10701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.794694][T10701] Quota error (device loop5): do_check_range: Getting block 256 out of range 1-5
[  249.799077][T10701] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  249.802006][T10701] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1841: Failed to acquire dquot type 1
[  249.838557][T10390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.813818][ T1283] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  251.985365][ T1283] usb 1-1: Using ep0 maxpacket: 16
[  251.995110][ T1283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  252.003561][T10726] loop5: detected capacity change from 0 to 32768
[  252.003928][ T1283] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  252.009676][ T1283] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  252.010310][T10726] btrfs: Deprecated parameter 'usebackuproot'
[  252.016857][T10726] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  252.017920][ T1283] usb 1-1: Manufacturer: syz
[  252.020250][T10726] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1850 (10726)
[  252.035706][ T1283] usb 1-1: config 0 descriptor??
[  252.101142][T10726] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  252.118561][T10726] BTRFS info (device loop5): using crc32c checksum algorithm
[  252.178435][   T40] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0
[  252.190567][T10726] BTRFS warning (device loop5): couldn't read tree root
[  252.195562][T10726] BTRFS warning (device loop5): try to load backup roots slot 1
[  252.198611][   T52] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0
[  252.203386][T10726] BTRFS warning (device loop5): couldn't read tree root
[  252.205673][T10726] BTRFS warning (device loop5): try to load backup roots slot 2
[  252.208313][   T40] BTRFS warning (device loop5): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1
[  252.214862][T10726] BTRFS warning (device loop5): couldn't read tree root
[  252.217359][T10726] BTRFS warning (device loop5): try to load backup roots slot 3
[  252.232098][T10726] BTRFS info (device loop5): rebuilding free space tree
[  252.280683][ T1283] usb 1-1: USB disconnect, device number 19
[  252.284794][T10726] BTRFS info (device loop5): checking UUID tree
[  252.297119][T10726] BTRFS info (device loop5): enabling ssd optimizations
[  252.301849][T10726] BTRFS info (device loop5): turning off barriers
[  252.310044][T10726] BTRFS info (device loop5): turning on flush-on-commit
[  252.318521][T10726] BTRFS info (device loop5): turning on sync discard
[  252.323486][T10726] BTRFS info (device loop5): enabling free space tree
[  252.325691][T10726] BTRFS info (device loop5): force clearing of disk cache
[  252.331124][T10726] BTRFS info (device loop5): trying to use backup root at mount time
[  252.334931][T10748] loop3: detected capacity change from 0 to 512
[  252.352669][T10748] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1853: invalid indirect mapped block 256 (level 2)
[  252.362450][T10748] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  252.362908][T10748] EXT4-fs (loop3): Remounting filesystem read-only
[  252.372338][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  252.374921][    C1] EXT4-fs (loop3): initial error at time 1776954621: ext4_free_branches:1023: inode 11
[  252.378449][    C1] EXT4-fs (loop3): last error at time 1776954621: ext4_free_branches:1023: inode 11
[  252.386621][T10748] EXT4-fs (loop3): 2 truncates cleaned up
[  252.390411][T10748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.425755][T10390] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  252.440527][ T6561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.224939][T10767] loop0: detected capacity change from 0 to 1764
[  253.451761][T10770] netlink: 'syz.3.1863': attribute type 4 has an invalid length.
[  253.874790][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'.
[  253.878424][T10777] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  254.201066][T10785] loop3: detected capacity change from 0 to 2048
[  254.212201][T10785] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  254.223748][T10785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  254.369533][T10798] loop0: detected capacity change from 0 to 512
[  254.434672][T10798] /dev/loop0: Can't open blockdev
[  254.487359][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'.
[  254.720777][T10821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1888'.
[  254.727642][T10821] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  254.771515][T10825] tipc: Started in network mode
[  254.790240][T10825] tipc: Node identity _, cluster identity 4711
[  255.049772][T10837] loop0: detected capacity change from 0 to 512
[  255.055335][T10837] EXT4-fs: Ignoring removed oldalloc option
[  255.082463][T10837] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1895: bad orphan inode 32
[  255.088057][T10837] loop0: lost filesystem error report for type 5 error -117
[  255.089677][T10837] ext4_test_bit(bit=31, block=4) = 0
[  255.092505][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  255.092521][    C0] EXT4-fs (loop0): initial error at time 1776954623: ext4_orphan_get:1423
[  255.092539][    C0] EXT4-fs (loop0): last error at time 1776954623: ext4_orphan_get:1423
[  255.126685][T10837] EXT4-fs (loop0): 1 truncate cleaned up
[  255.133159][T10837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.163463][   T33] audit: type=1800 audit(1776954624.062:95): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1895" name="file2" dev="loop0" ino=16 res=0 errno=0
[  255.304055][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.325751][T10835] loop5: detected capacity change from 0 to 32768
[  255.350276][T10835] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1893 (10835)
[  255.358730][T10835] BTRFS info (device loop5 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  255.363151][T10835] BTRFS info (device loop5 state S): using crc32c checksum algorithm
[  255.435570][   T40] BTRFS warning (device loop5 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  255.510026][   T52] BTRFS warning (device loop5 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored
[  255.519660][   T40] BTRFS warning (device loop5 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored
[  255.536119][T10835] BTRFS error (device loop5 state ECS): failed to load root free space
[  255.557140][   T40] BTRFS warning (device loop5 state ECS): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored
[  255.572941][T10835] BTRFS info (device loop5 state ECS): enabling ssd optimizations
[  255.580769][T10835] BTRFS info (device loop5 state ECS): enabling free space tree
[  255.588190][T10835] BTRFS info (device loop5 state ECS): ignoring bad roots
[  255.595175][T10835] BTRFS info (device loop5 state ECS): ignoring data csums
[  255.600891][T10835] BTRFS info (device loop5 state ECS): ignoring meta csums
[  255.607383][T10835] BTRFS info (device loop5 state ECS): force zlib compression, level 3
[  255.670429][T10390] BTRFS info (device loop5 state ECS): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  256.166032][T10868] loop0: detected capacity change from 0 to 32768
[  256.301757][T10882] loop5: detected capacity change from 0 to 256
[  256.308192][T10882] exfat: Deprecated parameter 'utf8'
[  256.333648][T10882] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  256.546676][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'.
[  256.552427][T10894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1914'.
[  257.842113][T10916] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1922'.
[  258.442049][T10932] QAT: failed to copy from user cfg_data.
[  258.849548][T10949] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1932'.
[  258.852614][T10949] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1932'.
[  258.855571][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'.
[  258.980089][T10951] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1935'.
[  258.988432][T10951] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  259.249046][T10967] cifs: Bad value for 'source'
[  259.372395][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  259.552564][   T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  259.561751][   T10] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  259.576455][   T10] usb 4-1: Product: syz
[  259.578175][   T10] usb 4-1: SerialNumber: syz
[  259.587552][   T10] usb 4-1: config 0 descriptor??
[  259.621219][T10981] loop5: detected capacity change from 0 to 256
[  259.624714][T10981] exfat: Deprecated parameter 'utf8'
[  259.633027][T10981] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  259.797573][   T10] hso 4-1:0.0: Can't find BULK endpoints
[  260.004830][   T31] usb 4-1: USB disconnect, device number 21
[  260.276545][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'.
[  260.567723][T11007] netlink: 'syz.3.1961': attribute type 4 has an invalid length.
[  260.581826][T11007] netlink: 'syz.3.1961': attribute type 4 has an invalid length.
[  260.764662][T11005] loop0: detected capacity change from 0 to 32768
[  260.769114][T11005] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1960 (11005)
[  260.787583][T11005] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  260.791439][T11005] BTRFS info (device loop0): using sha256 checksum algorithm
[  260.893532][T11005] BTRFS info (device loop0): enabling ssd optimizations
[  260.900586][T11005] BTRFS info (device loop0): turning on async discard
[  260.905056][T11005] BTRFS info (device loop0): enabling free space tree
[  260.910752][T11005] BTRFS info (device loop0): enabling auto defrag
[  260.915754][T11005] BTRFS info (device loop0): max_inline set to 4096
[  261.094230][ T5881] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  261.198398][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  261.201292][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  261.491338][T11035] loop0: detected capacity change from 0 to 8192
[  261.617946][T11037] loop0: detected capacity change from 0 to 4096
[  261.647447][T11038] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  261.649698][T11037] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  261.660514][T11037] NILFS (loop0): mounting fs with errors
[  262.047821][T11054] netlink: 'syz.3.1976': attribute type 1 has an invalid length.
[  262.057444][T11054] netlink: 'syz.3.1976': attribute type 4 has an invalid length.
[  262.066104][T11054] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1976'.
[  262.358141][T11068] loop3: detected capacity change from 0 to 128
[  262.370737][T11068] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  262.375215][T11068] hpfs: filesystem error: improperly stopped
[  262.377137][T11068] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  262.381764][T11068] hpfs: You really don't want any checks? You are crazy...
[  262.384556][T11068] hpfs: Code page index out of array
[  262.386135][T11068] hpfs: code page support is disabled
[  262.390531][T11068] hpfs: hpfs_map_4sectors(): unaligned read
[  262.392821][T11068] hpfs: hpfs_map_4sectors(): unaligned read
[  262.394626][T11068] hpfs: filesystem error: unable to find root dir
[  262.589465][T11074] loop3: detected capacity change from 0 to 2048
[  262.608505][T11074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.697327][  T185] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  262.706041][  T185] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28
[  262.709742][  T185] EXT4-fs (loop3): This should not happen!! Data will be lost
[  262.709742][  T185] 
[  262.713668][  T185] EXT4-fs (loop3): Total free blocks count 0
[  262.715706][  T185] EXT4-fs (loop3): Free/Dirty block details
[  262.718079][  T185] EXT4-fs (loop3): free_blocks=4096
[  262.719714][  T185] EXT4-fs (loop3): dirty_blocks=512
[  262.721283][  T185] EXT4-fs (loop3): Block reservation details
[  262.723746][  T185] EXT4-fs (loop3): i_reserved_data_blocks=32
[  262.737637][ T6561] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  262.745322][ T6561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.879397][T11081] loop3: detected capacity change from 0 to 4096
[  263.270612][T11085] loop0: detected capacity change from 0 to 32768
[  263.482944][T11085] JBD2: Ignoring recovery information on journal
[  263.572601][T11085] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  263.660440][ T5881] ocfs2: Unmounting device (7,0) on (node local)
[  264.094506][T11104] loop3: detected capacity change from 0 to 131072
[  264.098529][T11104] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  264.101113][T11104] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  264.104847][T11104] F2FS-fs (loop3): invalid crc value
[  264.141987][T11104] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  264.149032][T11104] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  264.151267][T11104] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  264.725939][T11138] loop0: detected capacity change from 0 to 4096
[  264.740645][T11138] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  264.798399][T11150] loop3: detected capacity change from 0 to 128
[  264.804733][T11150] EXT4-fs: Ignoring removed i_version option
[  264.805021][T11138] ntfs3(loop0): Failed to initialize $Secure (-22).
[  264.824065][T11150] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  264.829043][T11150] ext4 filesystem being mounted at /579/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  264.829100][T11152] netlink: 203340 bytes leftover after parsing attributes in process `syz.5.2017'.
[  264.885520][ T6561] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  264.958505][T11156] loop5: detected capacity change from 0 to 128
[  264.983253][T11156] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  264.991490][T11156] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  265.569268][T11174] tipc: Started in network mode
[  265.571076][T11174] tipc: Node identity 000000000000003a0000000000000001, cluster identity 4711
[  265.577774][T11174] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  265.610633][T11176] loop3: detected capacity change from 0 to 1024
[  265.613731][T11176] ext4: Unknown parameter 'noacl'
[  265.904317][T10390] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  266.211497][T11188] batadv_slave_0: entered promiscuous mode
[  266.235464][T11188] batman_adv: batadv0: Adding interface: macsec1
[  266.240090][T11188] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  266.263469][T11188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.273355][T11188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.279861][T11188] batman_adv: batadv0: Interface activated: macsec1
[  266.388326][T11194] loop5: detected capacity change from 0 to 512
[  267.601610][T11248] loop5: detected capacity change from 0 to 2048
[  267.693532][T11248] Alternate GPT is invalid, using primary GPT.
[  267.700197][T11248]  loop5: p2 p3 p7
[  267.877742][T11254] loop5: detected capacity change from 0 to 4096
[  267.898654][ T6152] udevd[6152]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[  267.899032][ T6155] udevd[6155]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  267.909743][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  267.939457][T11254] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  267.967169][   T33] audit: type=1800 audit(1776954636.872:96): pid=11254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2061" name="file1" dev="loop5" ino=30 res=0 errno=0
[  268.022689][ T7276] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  268.178210][ T7276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  268.178249][ T7276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.178280][ T7276] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  268.178301][ T7276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.186182][ T7276] usb 4-1: config 0 descriptor??
[  268.368998][T11272] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2071'.
[  268.611388][ T7276] isku 0003:1E7D:319C.0003: unbalanced delimiter at end of report description
[  268.623047][ T7276] isku 0003:1E7D:319C.0003: parse failed
[  268.628299][ T7276] isku 0003:1E7D:319C.0003: probe with driver isku failed with error -22
[  269.097286][ T5945] usb 4-1: USB disconnect, device number 22
[  269.553397][T11295] tap0: tun_chr_ioctl cmd 1074025677
[  269.559878][T11295] tap0: linktype set to 6
[  269.623786][T11301] netlink: 'syz.0.2083': attribute type 4 has an invalid length.
[  270.064832][T11303] loop5: detected capacity change from 0 to 32768
[  270.103791][T11303] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  270.136664][T11303] XFS (loop5): Ending clean mount
[  270.192526][T10390] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  271.057115][T11362] loop5: detected capacity change from 0 to 128
[  271.530897][T11379] loop5: detected capacity change from 0 to 4096
[  271.553332][T11379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.646441][T10390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.313549][T11398] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  273.277038][T11397] loop5: detected capacity change from 0 to 2048
[  273.320757][   T33] audit: type=1326 audit(1776954642.222:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.2122" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9a479c819 code=0x0
[  273.576995][T11400] could not allocate digest TFM handle crc32
[  273.607252][T11407] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  273.763394][T11411] loop5: detected capacity change from 0 to 128
[  273.776014][T11411] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  273.787070][T11411] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  273.797472][T11411] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  273.811991][T10390] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  274.519468][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2133'.
[  274.548498][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2133'.
[  274.558916][T11433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  274.971311][T11443] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2137'.
[  275.031021][T11435] loop3: detected capacity change from 0 to 131072
[  275.035742][T11435] F2FS-fs (loop3): Test dummy encryption mode enabled
[  275.038447][T11435] F2FS-fs (loop3): invalid crc value
[  275.075818][T11435] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  275.081587][T11435] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  275.217262][T11439] loop0: detected capacity change from 0 to 32768
[  275.246785][T11439] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  275.291297][T11439] XFS (loop0): Ending clean mount
[  275.351476][T11439] XFS (loop0): Quotacheck needed: Please wait.
[  275.512725][T11439] XFS (loop0): Quotacheck: Done.
[  275.600338][ T5881] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  276.856802][T11493] netlink: 'syz.5.2153': attribute type 16 has an invalid length.
[  276.869059][T11493] netlink: 'syz.5.2153': attribute type 17 has an invalid length.
[  276.941009][T11493] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.971986][T11493] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.725297][T11499] loop5: detected capacity change from 0 to 32768
[  277.735789][T11499] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2156 (11499)
[  277.772430][T11499] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  277.782562][T11499] BTRFS info (device loop5): using sha256 checksum algorithm
[  277.822608][T11499] BTRFS info (device loop5): enabling ssd optimizations
[  277.830096][T11499] BTRFS info (device loop5): turning on async discard
[  277.840224][T11499] BTRFS info (device loop5): enabling free space tree
[  277.898107][   T33] audit: type=1800 audit(1776954646.802:98): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2156" name="bus" dev="loop5" ino=263 res=0 errno=0
[  278.273525][T10390] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  280.323525][   T33] audit: type=1326 audit(1776954649.222:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.0.2175" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b0bb9c819 code=0x0
[  280.620305][T11567] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  282.099994][T11601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2194'.
[  282.307948][T11613] loop0: detected capacity change from 0 to 512
[  282.330567][T11613] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.2199: corrupted in-inode xattr: invalid ea_ino
[  282.336126][T11613] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  282.340168][ T5214] Bluetooth: hci0: unexpected event for opcode 0x080f
[  282.343649][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  282.343668][    C0] EXT4-fs (loop0): initial error at time 1776954651: ext4_iget_extra_inode:5128: inode 15
[  282.343693][    C0] EXT4-fs (loop0): last error at time 1776954651: ext4_iget_extra_inode:5128: inode 15
[  282.361436][T11613] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2199: couldn't read orphan inode 15 (err -117)
[  282.366337][T11613] loop0: lost filesystem error report for type 5 error -117
[  282.368293][T11613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.439564][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.646570][T11625] loop0: detected capacity change from 0 to 4096
[  282.665950][T11625] ntfs3(loop0): ino=4, mi_enum_attr
[  282.668414][T11625] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  282.673199][T11625] ntfs3(loop0): Failed to load $AttrDef (-22)
[  283.458336][T11648] loop5: detected capacity change from 0 to 1764
[  284.188815][T11656] netlink: 'syz.3.2216': attribute type 4 has an invalid length.
[  284.641860][T11666] loop0: detected capacity change from 0 to 256
[  284.700518][T11666] FAT-fs (loop0): Directory bread(block 64) failed
[  284.708504][T11666] FAT-fs (loop0): Directory bread(block 65) failed
[  284.711311][T11666] FAT-fs (loop0): Directory bread(block 66) failed
[  284.714567][T11666] FAT-fs (loop0): Directory bread(block 67) failed
[  284.717283][T11666] FAT-fs (loop0): Directory bread(block 68) failed
[  284.719840][T11666] FAT-fs (loop0): Directory bread(block 69) failed
[  284.724587][T11666] FAT-fs (loop0): Directory bread(block 70) failed
[  284.727207][T11666] FAT-fs (loop0): Directory bread(block 71) failed
[  284.729754][T11666] FAT-fs (loop0): Directory bread(block 72) failed
[  284.733244][T11666] FAT-fs (loop0): Directory bread(block 73) failed
[  285.409642][T11688] loop3: detected capacity change from 0 to 512
[  285.413534][T11688] EXT4-fs: Ignoring removed bh option
[  285.429887][T11688] EXT4-fs (loop3): orphan cleanup on readonly fs
[  285.449371][T11688] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #11: block 1: comm syz.3.2232: lblock 0 mapped to illegal pblock 1 (length 1)
[  285.453918][T11688] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  285.472307][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  285.476962][    C0] EXT4-fs (loop3): initial error at time 1776954654: ext4_map_blocks:791: inode 11: block 1
[  285.479882][    C0] EXT4-fs (loop3): last error at time 1776954654: ext4_map_blocks:791: inode 11: block 1
[  285.486370][T11688] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  285.491720][T11688] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.2232: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  285.501403][T11688] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  285.504313][T11688] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.2232: ea_inode dec ref err=-117
[  285.516328][T11688] EXT4-fs (loop3): 1 orphan inode deleted
[  285.519234][T11688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  285.528886][T11688] overlay: filesystem on ./file0 is read-only
[  285.567507][ T6561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.719688][T11699] loop0: detected capacity change from 0 to 8192
[  285.756638][T11699]  loop0: p1 < > p2 < > p3 p4 < >
[  285.760237][T11699] loop0: partition table partially beyond EOD, truncated
[  285.764427][T11699] loop0: p1 start 67108864 is beyond EOD, truncated
[  285.774197][T11699] loop0: p3 start 100859904 is beyond EOD, truncated
[  285.777628][T11705] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2239'.
[  285.783059][T11705] netlink: 'syz.3.2239': attribute type 6 has an invalid length.
[  285.934648][ T6155] udevd[6155]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  285.938849][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  285.939629][T11709] nvme_fabrics: missing parameter 'transport=%s'
[  285.951762][T11709] nvme_fabrics: missing parameter 'nqn=%s'
[  286.023435][T11713] loop0: detected capacity change from 0 to 136
[  286.349504][T11720] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  286.388064][ T5886] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  286.393566][ T5214] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  286.406210][ T5214] Bluetooth: hci0: Injecting HCI hardware error event
[  286.411193][ T5214] Bluetooth: hci0: hardware error 0x00
[  286.414969][ T5886] Bluetooth: hci2: Injecting HCI hardware error event
[  286.437514][   T54] Bluetooth: hci2: hardware error 0x00
[  286.782574][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  286.851661][T11728] loop0: detected capacity change from 0 to 736
[  286.991082][T11731] xt_TPROXY: Can be used only with -p tcp or -p udp
[  287.188534][T11733] loop5: detected capacity change from 0 to 4096
[  287.220642][T11733] ntfs3(loop5): ino=0, ni_load_mi_ex
[  287.224774][T11733] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  287.247632][T11733] ntfs3(loop5): volume is dirty and "force" flag is not set!
[  287.450363][T11739] IPv6: NLM_F_REPLACE set, but no existing node found!
[  287.719825][T11741] loop5: detected capacity change from 0 to 32768
[  287.722468][T11741] btrfs: Deprecated parameter 'usebackuproot'
[  287.724244][T11741] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  287.728119][T11741] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2255 (11741)
[  287.741514][T11741] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  287.745474][T11741] BTRFS info (device loop5): using crc32c checksum algorithm
[  287.791746][T11754] loop0: detected capacity change from 0 to 128
[  287.803280][T11754] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  287.825200][T11754] hpfs: filesystem error: improperly stopped
[  287.831535][T11754] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  287.838217][T11754] hpfs: You really don't want any checks? You are crazy...
[  287.843569][   T26] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  287.847189][T11754] hpfs: Code page index out of array
[  287.851550][T11741] BTRFS error (device loop5): failed to load root extent
[  287.852571][T11754] hpfs: code page support is disabled
[  287.853975][T11741] BTRFS warning (device loop5): try to load backup roots slot 1
[  287.858956][ T4580] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  287.863494][T11741] BTRFS warning (device loop5): couldn't read tree root
[  287.865699][T11741] BTRFS warning (device loop5): try to load backup roots slot 2
[  287.868085][T11754] hpfs: hpfs_map_4sectors(): unaligned read
[  287.868361][ T7212] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  287.874054][T11741] BTRFS warning (device loop5): couldn't read tree root
[  287.874880][T11754] hpfs: hpfs_map_4sectors(): unaligned read
[  287.876260][T11741] BTRFS warning (device loop5): try to load backup roots slot 3
[  287.887789][T11754] hpfs: filesystem error: unable to find root dir
[  287.891523][T11741] BTRFS info (device loop5): rebuilding free space tree
[  287.911740][T11760] ALSA: seq fatal error: cannot create timer (-19)
[  287.957077][T11741] BTRFS info (device loop5): checking UUID tree
[  287.961391][T11741] BTRFS info (device loop5): enabling ssd optimizations
[  287.964245][T11741] BTRFS info (device loop5): turning on async discard
[  287.966817][T11741] BTRFS info (device loop5): enabling free space tree
[  287.969314][T11741] BTRFS info (device loop5): force clearing of disk cache
[  287.971897][T11741] BTRFS info (device loop5): enabling auto defrag
[  287.974351][T11741] BTRFS info (device loop5): trying to use backup root at mount time
[  287.977258][T11741] BTRFS info (device loop5): use zstd compression, level 3
[  288.255295][T10390] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  288.302967][   T31] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  288.469440][   T31] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  288.476827][   T31] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  288.489152][   T31] usb 1-1: config 0 interface 0 has no altsetting 0
[  288.512061][   T31] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  288.522419][   T31] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  288.531006][   T31] usb 1-1: Product: syz
[  288.536441][   T31] usb 1-1: Manufacturer: syz
[  288.541682][   T31] usb 1-1: SerialNumber: syz
[  288.558344][ T5214] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  288.580783][   T31] usb 1-1: config 0 descriptor??
[  288.670098][   T31] usb 1-1: selecting invalid altsetting 0
[  288.730974][   T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  288.816190][T11768] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow!
[  288.829781][   T31] usb 1-1: USB disconnect, device number 20
[  288.930907][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  290.342408][   T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  290.495085][   T31] usb 4-1: unable to get BOS descriptor or descriptor too short
[  290.499913][   T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  290.508377][   T31] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  290.517480][   T31] usb 4-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  290.532221][   T31] usb 4-1: config 1 interface 0 has no altsetting 0
[  290.534575][   T31] usb 4-1: config 1 interface 0 has no altsetting 1
[  290.539491][   T31] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  290.545840][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.552351][   T31] usb 4-1: Product: syz
[  290.554879][   T31] usb 4-1: Manufacturer: syz
[  290.562395][   T31] usb 4-1: SerialNumber: syz
[  290.772150][   T31] smsusb:smsusb_probe: board id=8, interface number 0
[  290.780131][   T31] usb 4-1: selecting invalid altsetting 0
[  290.790166][   T31] smsusb:smsusb_probe: usb_set_interface failed, rc -22
[  290.795815][   T31] smsusb 4-1:1.0: probe with driver smsusb failed with error -22
[  290.808611][   T31] usb 4-1: USB disconnect, device number 23
[  291.269637][T11833] team0: entered allmulticast mode
[  291.271739][T11833] team_slave_0: entered allmulticast mode
[  291.276346][T11833] team_slave_1: entered allmulticast mode
[  291.658337][T11840] loop5: detected capacity change from 0 to 1024
[  291.666224][T11840] EXT4-fs: Ignoring removed bh option
[  291.710264][T11840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.317244][T11847] overlayfs: failed to resolve '/ȧՒ': -2
[  292.636452][T10390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.997488][T11852] loop0: detected capacity change from 0 to 32768
[  293.047576][T11852] JBD2: Ignoring recovery information on journal
[  293.146191][T11852] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  293.204568][T11852] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature 
[  293.211242][T11852] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  293.214872][T11852] OCFS2: Returning error to the calling process.
[  293.216737][T11852] (syz.0.2293,11852,1):ocfs2_search_chain:1948 ERROR: status = -5
[  293.221183][T11852] (syz.0.2293,11852,1):ocfs2_search_chain:2036 ERROR: status = -5
[  293.224914][T11852] (syz.0.2293,11852,1):ocfs2_claim_suballoc_bits:2123 ERROR: status = -5
[  293.227825][T11852] (syz.0.2293,11852,1):ocfs2_claim_suballoc_bits:2176 ERROR: status = -5
[  293.230295][T11852] (syz.0.2293,11852,1):ocfs2_claim_new_inode:2417 ERROR: status = -5
[  293.233327][T11852] (syz.0.2293,11852,1):ocfs2_claim_new_inode:2432 ERROR: status = -5
[  293.235873][T11852] (syz.0.2293,11852,1):ocfs2_mknod_locked:642 ERROR: status = -5
[  293.238460][T11852] (syz.0.2293,11852,1):ocfs2_mknod:389 ERROR: status = -5
[  293.241211][T11852] (syz.0.2293,11852,1):ocfs2_mknod:506 ERROR: status = -5
[  293.246423][T11852] (syz.0.2293,11852,1):ocfs2_create:679 ERROR: status = -5
[  293.373792][ T5881] ocfs2: Unmounting device (7,0) on (node local)
[  293.665585][T11860] loop3: detected capacity change from 0 to 131072
[  293.668943][T11860] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  293.671345][T11860] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  293.749902][T11860] F2FS-fs (loop3): invalid crc value
[  293.901446][T11860] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  293.918351][T11860] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  293.922210][T11860] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  294.602155][T11893] loop0: detected capacity change from 0 to 8192
[  294.643668][T11893]  loop0: p3 < > p4
[  294.646883][T11893] loop0: partition table partially beyond EOD, truncated
[  294.660504][T11893] loop0: p4 start 33554432 is beyond EOD, truncated
[  294.899002][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  294.919711][T11891] loop5: detected capacity change from 0 to 40427
[  294.929426][T11891] F2FS-fs (loop5): invalid crc value
[  294.940689][T11891] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  294.999772][T11902] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  295.018445][T11891] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  295.021885][T11891] F2FS-fs (loop5): Start checkpoint disabled!
[  295.096781][T11905] loop3: detected capacity change from 0 to 1024
[  295.107833][T11905] EXT4-fs: Ignoring removed bh option
[  295.148599][T11891] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  295.161051][T11891] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  295.179088][T11905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.208993][T11905] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  295.267037][T11912] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2313'.
[  295.314270][ T6561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.317384][ T7212] kworker/u9:5: attempt to access beyond end of device
[  295.317384][ T7212] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  295.325645][ T7212] CPU: 1 UID: 0 PID: 7212 Comm: kworker/u9:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.325663][ T7212] Tainted: [L]=SOFTLOCKUP
[  295.325667][ T7212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.325674][ T7212] Workqueue: writeback wb_workfn (flush-7:5)
[  295.325699][ T7212] Call Trace:
[  295.325703][ T7212]  <TASK>
[  295.325708][ T7212]  dump_stack_lvl+0xe8/0x150
[  295.325723][ T7212]  f2fs_handle_critical_error+0x37c/0x540
[  295.325739][ T7212]  f2fs_write_end_io+0x1273/0x1740
[  295.325758][ T7212]  __submit_merged_bio+0x256/0x6a0
[  295.325773][ T7212]  __submit_merged_write_cond+0x3c9/0x4e0
[  295.325788][ T7212]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  295.325809][ T7212]  f2fs_write_data_pages+0x287e/0x34f0
[  295.325821][ T7212]  ? f2fs_build_free_nids+0xdc/0x1810
[  295.325845][ T7212]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  295.325863][ T7212]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  295.325885][ T7212]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  295.325904][ T7212]  ? __lock_acquire+0x6b5/0x2cf0
[  295.325924][ T7212]  ? set_shrinker_bit+0x7c/0x350
[  295.325938][ T7212]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  295.325969][ T7212]  do_writepages+0x32e/0x550
[  295.325986][ T7212]  ? reacquire_held_locks+0x104/0x190
[  295.325994][ T7212]  ? writeback_sb_inodes+0x463/0x19d0
[  295.326009][ T7212]  __writeback_single_inode+0x133/0x10e0
[  295.326017][ T7212]  ? do_raw_spin_unlock+0x4d/0x210
[  295.326030][ T7212]  writeback_sb_inodes+0x979/0x19d0
[  295.326042][ T7212]  ? __lock_acquire+0x6b5/0x2cf0
[  295.326067][ T7212]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  295.326084][ T7212]  ? do_raw_spin_lock+0x12b/0x2f0
[  295.326120][ T7212]  ? rcu_is_watching+0x15/0xb0
[  295.326137][ T7212]  wb_writeback+0x445/0xb00
[  295.326150][ T7212]  ? queue_io+0x291/0x470
[  295.326165][ T7212]  ? __pfx_wb_writeback+0x10/0x10
[  295.326175][ T7212]  ? do_raw_spin_lock+0x12b/0x2f0
[  295.326192][ T7212]  wb_workfn+0x3f8/0xf10
[  295.326201][ T7212]  ? __lock_acquire+0x6b5/0x2cf0
[  295.326212][ T7212]  ? look_up_lock_class+0x57/0x110
[  295.326231][ T7212]  ? __pfx_wb_workfn+0x10/0x10
[  295.326242][ T7212]  ? do_raw_spin_lock+0x12b/0x2f0
[  295.326251][ T7212]  ? lock_acquire+0x106/0x350
[  295.326262][ T7212]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  295.326273][ T7212]  ? process_scheduled_works+0xa70/0x1860
[  295.326287][ T7212]  ? process_scheduled_works+0xa70/0x1860
[  295.326301][ T7212]  ? process_scheduled_works+0xa70/0x1860
[  295.326311][ T7212]  ? process_scheduled_works+0xa70/0x1860
[  295.326323][ T7212]  process_scheduled_works+0xb5d/0x1860
[  295.326347][ T7212]  ? __pfx_process_scheduled_works+0x10/0x10
[  295.326361][ T7212]  ? assign_work+0x3d5/0x5e0
[  295.326374][ T7212]  worker_thread+0xa53/0xfc0
[  295.326411][ T7212]  kthread+0x388/0x470
[  295.326423][ T7212]  ? __pfx_worker_thread+0x10/0x10
[  295.326433][ T7212]  ? __pfx_kthread+0x10/0x10
[  295.326442][ T7212]  ret_from_fork+0x514/0xb70
[  295.326457][ T7212]  ? __pfx_ret_from_fork+0x10/0x10
[  295.326467][ T7212]  ? __switch_to+0xc79/0x1410
[  295.326480][ T7212]  ? __pfx_kthread+0x10/0x10
[  295.326489][ T7212]  ret_from_fork_asm+0x1a/0x30
[  295.326506][ T7212]  </TASK>
[  295.373045][ T7212] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  296.174681][T11926] tipc: Started in network mode
[  296.176426][T11926] tipc: Node identity , cluster identity 4711
[  296.487670][T11920] loop3: detected capacity change from 0 to 32768
[  296.500409][T11920] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2317 (11920)
[  296.519010][T11920] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  296.524608][T11920] BTRFS info (device loop3): using sha256 checksum algorithm
[  296.575456][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  296.603375][T11920] BTRFS info (device loop3): enabling ssd optimizations
[  296.606207][T11920] BTRFS info (device loop3): turning on async discard
[  296.608725][T11920] BTRFS info (device loop3): enabling free space tree
[  296.633809][ T6561] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  296.737274][ T5828] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  296.752402][   T10] usb 6-1: Using ep0 maxpacket: 16
[  296.756305][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  296.761420][   T10] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=f2.d7
[  296.766424][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.772864][   T10] usb 6-1: Product: syz
[  296.776219][   T10] usb 6-1: Manufacturer: syz
[  296.781293][   T10] usb 6-1: SerialNumber: syz
[  296.794145][   T10] usb 6-1: config 0 descriptor??
[  296.903010][ T5828] usb 1-1: Using ep0 maxpacket: 32
[  296.914899][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short
[  296.921426][ T5828] usb 1-1: config 1 has an invalid interface number: 224 but max is 0
[  296.925781][ T5828] usb 1-1: config 1 has no interface number 0
[  296.928276][ T5828] usb 1-1: config 1 interface 224 has no altsetting 0
[  296.934916][ T5828] usb 1-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=4e.f0
[  296.945137][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.952809][ T5828] usb 1-1: Product: syz
[  296.954412][ T5828] usb 1-1: Manufacturer: syz
[  296.960551][ T5828] usb 1-1: SerialNumber: syz
[  297.054733][T11961] overlayfs: missing 'lowerdir'
[  297.195123][T11965] loop3: detected capacity change from 0 to 1024
[  297.196202][ T5828] gspca_main: benq-2.14.0 probing 04a5:3035
[  297.198762][T11965] EXT4-fs: Ignoring removed bh option
[  297.229921][ T5828] usb 1-1: USB disconnect, device number 21
[  297.240091][T11965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.258627][   T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  297.280176][   T10] usb 6-1: USB disconnect, device number 2
[  297.320127][ T6155] udevd[6155]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  297.325381][ T6561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.611877][T11982] netlink: 'syz.0.2336': attribute type 3 has an invalid length.
[  298.619016][T11982] netlink: 'syz.0.2336': attribute type 3 has an invalid length.
[  298.627984][T11983] loop3: detected capacity change from 0 to 512
[  298.648872][T11983] EXT4-fs (loop3): 1 truncate cleaned up
[  298.655763][T11983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.729281][ T6561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.916549][T11973] loop5: detected capacity change from 0 to 131072
[  298.923715][T11973] F2FS-fs (loop5): invalid crc value
[  298.945723][   T33] audit: type=1800 audit(1776954667.852:100): pid=11993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2341" name="bus" dev="overlay" ino=4189 res=0 errno=0
[  298.992914][T11973] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  298.998708][T11973] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  299.184808][T12006] loop0: detected capacity change from 0 to 512
[  299.218897][T12006] 
[  299.219880][T12006] ======================================================
[  299.222451][T12006] WARNING: possible circular locking dependency detected
[  299.224956][T12006] syzkaller #0 Tainted: G             L     
[  299.227266][T12006] ------------------------------------------------------
[  299.229851][T12006] syz.0.2344/12006 is trying to acquire lock:
[  299.232062][T12006] ffff8881188fcc18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  299.235632][T12006] 
[  299.235632][T12006] but task is already holding lock:
[  299.238394][T12006] ffff88811d8e67e0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[  299.241966][T12006] 
[  299.241966][T12006] which lock already depends on the new lock.
[  299.241966][T12006] 
[  299.245700][T12006] 
[  299.245700][T12006] the existing dependency chain (in reverse order) is:
[  299.248939][T12006] 
[  299.248939][T12006] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  299.251783][T12006]        down_write+0x96/0x200
[  299.253600][T12006]        ext4_destroy_inline_data+0x28/0xe0
[  299.255814][T12006]        ext4_do_writepages+0x51e/0x4670
[  299.257909][T12006]        ext4_writepages+0x241/0x3b0
[  299.259835][T12006]        do_writepages+0x32e/0x550
[  299.261661][T12006]        file_write_and_wait_range+0x36e/0x440
[  299.263894][T12006]        mmb_fsync_noflush+0x76/0x1c0
[  299.265846][T12006]        ext4_sync_file+0x437/0xd50
[  299.267766][T12006]        ext4_buffered_write_iter+0x2ca/0x3a0
[  299.270050][T12006]        ext4_file_write_iter+0x298/0x1bf0
[  299.272252][T12006]        vfs_write+0x61d/0xb90
[  299.274080][T12006]        __x64_sys_pwrite64+0x199/0x230
[  299.276139][T12006]        do_syscall_64+0x15f/0xf80
[  299.278026][T12006]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.280408][T12006] 
[  299.280408][T12006] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  299.283553][T12006]        __lock_acquire+0x15a5/0x2cf0
[  299.285573][T12006]        lock_acquire+0x106/0x350
[  299.287503][T12006]        percpu_down_read_internal+0x48/0x1c0
[  299.289680][T12006]        ext4_writepages+0x205/0x3b0
[  299.291678][T12006]        do_writepages+0x32e/0x550
[  299.293609][T12006]        __writeback_single_inode+0x133/0x10e0
[  299.295863][T12006]        writeback_single_inode+0x4ac/0xdc0
[  299.298061][T12006]        write_inode_now+0x1c2/0x290
[  299.300028][T12006]        iput+0x8c1/0xe80
[  299.301646][T12006]        ext4_xattr_block_set+0x1fd4/0x2ad0
[  299.303868][T12006]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  299.306349][T12006]        __ext4_expand_extra_isize+0x30d/0x400
[  299.308670][T12006]        __ext4_mark_inode_dirty+0x45c/0x710
[  299.310892][T12006]        ext4_evict_inode+0x986/0x10e0
[  299.312953][T12006]        evict+0x61e/0xb10
[  299.314661][T12006]        ext4_orphan_cleanup+0xc38/0x1470
[  299.316811][T12006]        ext4_fill_super+0x5a19/0x6330
[  299.318858][T12006]        get_tree_bdev_flags+0x431/0x4f0
[  299.320956][T12006]        vfs_get_tree+0x92/0x2a0
[  299.322765][T12006]        do_new_mount+0x341/0xd30
[  299.324657][T12006]        __se_sys_mount+0x31d/0x420
[  299.326716][T12006]        do_syscall_64+0x15f/0xf80
[  299.328603][T12006]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.330974][T12006] 
[  299.330974][T12006] other info that might help us debug this:
[  299.330974][T12006] 
[  299.334731][T12006]  Possible unsafe locking scenario:
[  299.334731][T12006] 
[  299.337473][T12006]        CPU0                    CPU1
[  299.339466][T12006]        ----                    ----
[  299.341361][T12006]   lock(&ei->xattr_sem);
[  299.342985][T12006]                                lock(&sbi->s_writepages_rwsem);
[  299.345887][T12006]                                lock(&ei->xattr_sem);
[  299.348424][T12006]   rlock(&sbi->s_writepages_rwsem);
[  299.350342][T12006] 
[  299.350342][T12006]  *** DEADLOCK ***
[  299.350342][T12006] 
[  299.353193][T12006] 3 locks held by syz.0.2344/12006:
[  299.355134][T12006]  #0: ffff8881188fe0d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0
[  299.358852][T12006]  #1: ffff8881188fe600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10e0
[  299.362369][T12006]  #2: ffff88811d8e67e0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[  299.366176][T12006] 
[  299.366176][T12006] stack backtrace:
[  299.368368][T12006] CPU: 0 UID: 0 PID: 12006 Comm: syz.0.2344 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  299.368390][T12006] Tainted: [L]=SOFTLOCKUP
[  299.368398][T12006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  299.368408][T12006] Call Trace:
[  299.368417][T12006]  <TASK>
[  299.368425][T12006]  dump_stack_lvl+0xe8/0x150
[  299.368454][T12006]  print_circular_bug+0x2e1/0x300
[  299.368474][T12006]  check_noncircular+0x12e/0x150
[  299.368493][T12006]  __lock_acquire+0x15a5/0x2cf0
[  299.368521][T12006]  ? __lock_acquire+0x6b5/0x2cf0
[  299.368545][T12006]  ? ext4_writepages+0x205/0x3b0
[  299.368558][T12006]  lock_acquire+0x106/0x350
[  299.368578][T12006]  ? ext4_writepages+0x205/0x3b0
[  299.368597][T12006]  percpu_down_read_internal+0x48/0x1c0
[  299.368611][T12006]  ? ext4_writepages+0x205/0x3b0
[  299.368625][T12006]  ext4_writepages+0x205/0x3b0
[  299.368638][T12006]  ? __pfx_ext4_writepages+0x10/0x10
[  299.368656][T12006]  ? do_raw_spin_unlock+0x4d/0x210
[  299.368675][T12006]  ? __pfx_ext4_writepages+0x10/0x10
[  299.368689][T12006]  do_writepages+0x32e/0x550
[  299.368713][T12006]  __writeback_single_inode+0x133/0x10e0
[  299.368728][T12006]  ? do_raw_spin_unlock+0x4d/0x210
[  299.368747][T12006]  writeback_single_inode+0x4ac/0xdc0
[  299.368778][T12006]  write_inode_now+0x1c2/0x290
[  299.368799][T12006]  ? __pfx_write_inode_now+0x10/0x10
[  299.368832][T12006]  ? do_raw_spin_unlock+0x4d/0x210
[  299.368851][T12006]  iput+0x8c1/0xe80
[  299.368868][T12006]  ext4_xattr_block_set+0x1fd4/0x2ad0
[  299.368898][T12006]  ? __pfx_check_xattrs+0x10/0x10
[  299.368921][T12006]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  299.368943][T12006]  ? ext4_xattr_block_find+0x2d4/0x350
[  299.368966][T12006]  ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  299.368997][T12006]  __ext4_expand_extra_isize+0x30d/0x400
[  299.369021][T12006]  __ext4_mark_inode_dirty+0x45c/0x710
[  299.369042][T12006]  ext4_evict_inode+0x986/0x10e0
[  299.369062][T12006]  ? __pfx_ext4_evict_inode+0x10/0x10
[  299.369079][T12006]  ? do_raw_spin_unlock+0x4d/0x210
[  299.369096][T12006]  ? __pfx_ext4_evict_inode+0x10/0x10
[  299.369113][T12006]  evict+0x61e/0xb10
[  299.369134][T12006]  ? __pfx_evict+0x10/0x10
[  299.369152][T12006]  ? _raw_spin_unlock+0x28/0x50
[  299.369173][T12006]  ? iput+0xb25/0xe80
[  299.369187][T12006]  ext4_orphan_cleanup+0xc38/0x1470
[  299.369212][T12006]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  299.369231][T12006]  ? ext4_register_li_request+0x259/0x720
[  299.369250][T12006]  ? errseq_check_and_advance+0x66/0x120
[  299.369268][T12006]  ext4_fill_super+0x5a19/0x6330
[  299.369290][T12006]  ? __pfx_ext4_fill_super+0x10/0x10
[  299.369330][T12006]  ? snprintf+0xe8/0x140
[  299.369356][T12006]  ? __pfx_snprintf+0x10/0x10
[  299.369373][T12006]  ? set_blocksize+0x1c9/0x440
[  299.369391][T12006]  ? sb_set_blocksize+0x155/0x240
[  299.369407][T12006]  ? setup_bdev_super+0x4c1/0x5b0
[  299.369426][T12006]  get_tree_bdev_flags+0x431/0x4f0
[  299.369445][T12006]  ? __pfx_ext4_fill_super+0x10/0x10
[  299.369459][T12006]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  299.369481][T12006]  vfs_get_tree+0x92/0x2a0
[  299.369499][T12006]  do_new_mount+0x341/0xd30
[  299.369512][T12006]  ? apparmor_capable+0x126/0x170
[  299.369531][T12006]  ? __pfx_do_new_mount+0x10/0x10
[  299.369542][T12006]  ? ns_capable+0x89/0xe0
[  299.369565][T12006]  ? user_path_at+0xd4/0x160
[  299.369581][T12006]  __se_sys_mount+0x31d/0x420
[  299.369598][T12006]  ? __pfx___se_sys_mount+0x10/0x10
[  299.369611][T12006]  ? __x64_sys_mount+0x20/0xc0
[  299.369624][T12006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.369640][T12006]  do_syscall_64+0x15f/0xf80
[  299.369654][T12006]  ? trace_irq_disable+0x3b/0x140
[  299.369678][T12006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.369693][T12006] RIP: 0033:0x7f1b0bb9da8a
[  299.369711][T12006] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.369727][T12006] RSP: 002b:00007f1b0ca55e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  299.369744][T12006] RAX: ffffffffffffffda RBX: 00007f1b0ca55ee0 RCX: 00007f1b0bb9da8a
[  299.369764][T12006] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f1b0ca55ea0
[  299.369775][T12006] RBP: 0000200000000180 R08: 00007f1b0ca55ee0 R09: 0000000000000000
[  299.369787][T12006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  299.369798][T12006] R13: 00007f1b0ca55ea0 R14: 000000000000047a R15: 000000000000002c
[  299.369814][T12006]  </TASK>
[  299.556038][T12006] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.2344: iget: bad extra_isize 90 (inode size 256)
[  299.560981][T12006] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  299.561353][T12006] EXT4-fs (loop0): Remounting filesystem read-only
[  299.564823][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  299.564838][    C0] EXT4-fs (loop0): initial error at time 1776954668: ext4_xattr_inode_iget:441: inode 11
[  299.564861][    C0] EXT4-fs (loop0): last error at time 1776954668: ext4_xattr_inode_iget:441: inode 11
[  299.578547][T12006] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  299.585171][T12006] EXT4-fs (loop0): 1 orphan inode deleted
[  299.588984][T12006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.612771][ T5881] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
