last executing test programs:

4.107290927s ago: executing program 0 (id=569):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file2\x00', 0x8, &(0x7f0000000240)={[{@autodefrag}, {@autodefrag}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@space_cache_v2}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000640)={0x0, 0x3, 0x7})

3.415160659s ago: executing program 0 (id=577):
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0)

3.208169217s ago: executing program 0 (id=579):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000004c0)={[{@datacow}, {@nodatasum}, {@compress_force}, {@nossd_spread}, {@ssd}, {}, {@datacow}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101080, 0x88)
truncate(&(0x7f0000000100)='./file0\x00', 0x8000000)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000b00)={{r0}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x3})

2.182122827s ago: executing program 0 (id=584):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028000000000006"], 0x0)

2.12877193s ago: executing program 2 (id=585):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x4}}], 0x1, 0x0, 0x0)

2.128482161s ago: executing program 2 (id=586):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x2, 0xfff, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @broadcast}}}})

2.029307839s ago: executing program 2 (id=587):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0x6c, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1d58, 0x401, 0x3, 0x8002, 0x8, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xd, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0x9, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x2, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x5, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x7, 0x3, 0x8, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x4, 0x7f, 0x0, {0x6, 0x0, 0x6, 0x7ff, 0x6e6, 0xd74}, {0x8, 0x0, 0xffff, 0x8, 0x7f, 0x7fff}, 0x0, 0x8000, 0xbab2}}]}]}}]}, 0x87c}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.859800178s ago: executing program 2 (id=588):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x79, 0x1, 0x401}}}, 0x7)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [0x2], [0x80ffff]})

1.301517309s ago: executing program 0 (id=589):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

1.071519783s ago: executing program 0 (id=592):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xf6, 0x44000000, 0x6, 0xd06, 0x4, 0xe5, 0x0, 0x0, 0x8, 0xfffffc00}}, 0x50)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
truncate(&(0x7f0000000000)='./file1\x00', 0x800088c)

1.000316126s ago: executing program 2 (id=593):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x8, 0x88}, 0x0)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

889.16238ms ago: executing program 2 (id=594):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x9132, 0xffffffffffffffff, 0x9aa9b000)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
read$FUSE(r3, &(0x7f0000001780)={0x2020}, 0x2020)

577.888656ms ago: executing program 1 (id=597):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x43938, 0x23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x205}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x1f}]}}}]}, 0x44}}, 0x4008000)

508.293589ms ago: executing program 1 (id=598):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003680), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000036c0)={0x20, r1, 0x101, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x86}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048010}, 0x800)

399.415244ms ago: executing program 1 (id=599):
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48)

290.127717ms ago: executing program 1 (id=600):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}})

66.641107ms ago: executing program 1 (id=601):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)

0s ago: executing program 1 (id=602):
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38573' (ED25519) to the list of known hosts.
syzkaller login: [   48.658807][ T5779] cgroup: Unknown subsys name 'net'
[   48.728244][ T5779] cgroup: Unknown subsys name 'cpuset'
[   48.734653][ T5779] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.101763][ T5779] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.444193][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.448171][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.451730][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.457316][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.464251][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.508278][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.519320][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.523625][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.528087][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.532035][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.595252][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.601354][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.604772][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.611927][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.616303][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.735327][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   56.829420][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.833080][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.836008][ T5847] bridge_slave_0: entered allmulticast mode
[   56.839439][ T5847] bridge_slave_0: entered promiscuous mode
[   56.852740][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.855530][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.858327][ T5847] bridge_slave_1: entered allmulticast mode
[   56.862033][ T5847] bridge_slave_1: entered promiscuous mode
[   56.949264][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.955098][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.019574][ T5847] team0: Port device team_slave_0 added
[   57.023407][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   57.034426][ T5847] team0: Port device team_slave_1 added
[   57.062905][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   57.071786][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.074379][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.084251][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.114051][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.116444][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.125835][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.205842][ T5847] hsr_slave_0: entered promiscuous mode
[   57.208282][ T5847] hsr_slave_1: entered promiscuous mode
[   57.252266][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.255144][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.258220][ T5851] bridge_slave_0: entered allmulticast mode
[   57.263176][ T5851] bridge_slave_0: entered promiscuous mode
[   57.295819][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.298997][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.302502][ T5851] bridge_slave_1: entered allmulticast mode
[   57.306344][ T5851] bridge_slave_1: entered promiscuous mode
[   57.358721][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.364228][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.367318][ T5858] bridge_slave_0: entered allmulticast mode
[   57.371803][ T5858] bridge_slave_0: entered promiscuous mode
[   57.413759][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.417952][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.421165][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.424085][ T5858] bridge_slave_1: entered allmulticast mode
[   57.427957][ T5858] bridge_slave_1: entered promiscuous mode
[   57.454697][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.515372][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.542037][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.547273][ T5851] team0: Port device team_slave_0 added
[   57.571618][ T5851] team0: Port device team_slave_1 added
[   57.589062][ T5858] team0: Port device team_slave_0 added
[   57.614009][ T5858] team0: Port device team_slave_1 added
[   57.660039][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.663265][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.672512][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.676795][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.679423][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.688521][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.702607][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.705271][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.717516][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.724365][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.726979][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.735858][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.798051][ T5851] hsr_slave_0: entered promiscuous mode
[   57.801495][ T5851] hsr_slave_1: entered promiscuous mode
[   57.804191][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   57.806656][ T5851] Cannot create hsr debugfs directory
[   57.860040][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.871806][ T5858] hsr_slave_0: entered promiscuous mode
[   57.875035][ T5858] hsr_slave_1: entered promiscuous mode
[   57.878016][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   57.880418][ T5858] Cannot create hsr debugfs directory
[   57.918292][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.938229][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.967684][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.175117][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.187887][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.198370][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.207723][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.266753][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.269723][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.291150][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.302746][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.308754][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.342789][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   58.371190][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.374153][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.400316][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.403588][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.481765][ T5853] Bluetooth: hci0: command tx timeout
[   58.487034][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.543307][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   58.555186][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.561435][ T5853] Bluetooth: hci1: command tx timeout
[   58.573558][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.576457][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.584651][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.587627][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.614067][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   58.630338][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.633432][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.640985][ T5853] Bluetooth: hci2: command tx timeout
[   58.670238][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.673225][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.764151][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.864081][ T5847] veth0_vlan: entered promiscuous mode
[   58.887596][ T5847] veth1_vlan: entered promiscuous mode
[   58.909931][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.949013][ T5847] veth0_macvtap: entered promiscuous mode
[   58.955063][ T5847] veth1_macvtap: entered promiscuous mode
[   58.993785][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.004597][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.012294][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.027613][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.033295][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.042323][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.052316][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.059659][ T5851] veth0_vlan: entered promiscuous mode
[   59.097698][ T5851] veth1_vlan: entered promiscuous mode
[   59.161255][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.166729][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.185221][ T5858] veth0_vlan: entered promiscuous mode
[   59.187848][ T5851] veth0_macvtap: entered promiscuous mode
[   59.206330][ T5851] veth1_macvtap: entered promiscuous mode
[   59.217329][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.219311][ T5858] veth1_vlan: entered promiscuous mode
[   59.220269][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.246126][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.254092][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.270978][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.273997][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.277069][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.280351][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.302803][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.311267][ T5858] veth0_macvtap: entered promiscuous mode
[   59.322043][ T5858] veth1_macvtap: entered promiscuous mode
[   59.360313][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.393141][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.413463][ T5718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.421656][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.424225][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.439066][ T5718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.456158][ T5718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.476950][ T5718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.502271][ T3678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.507842][ T3678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.572247][ T3678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.574772][ T3678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.654723][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.657813][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.959805][ T5928] loop0: detected capacity change from 0 to 8192
[   59.997804][ T5928] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   60.180285][ T5938] loop0: detected capacity change from 0 to 128
[   60.290293][ T5943] trusted_key: syz.0.15 sent an empty control message without MSG_MORE.
[   60.291284][ T2304] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   60.452002][ T2304] usb 3-1: Using ep0 maxpacket: 32
[   60.456474][ T2304] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[   60.465788][ T2304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   60.469104][ T2304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   60.487623][ T2304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[   60.493293][ T2304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[   60.505053][ T2304] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   60.521261][ T2304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.525810][ T2304] usb 3-1: Product: syz
[   60.527657][ T2304] usb 3-1: Manufacturer: syz
[   60.532134][ T2304] usb 3-1: SerialNumber: syz
[   60.541825][ T2304] usb 3-1: config 0 descriptor??
[   60.561680][ T5853] Bluetooth: hci0: command tx timeout
[   60.641438][ T5853] Bluetooth: hci1: command tx timeout
[   60.720975][ T5853] Bluetooth: hci2: command tx timeout
[   60.758096][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -32
[   60.965048][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   60.970881][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   60.978617][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   60.981637][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   60.986422][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   60.989485][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   60.999687][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.010641][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.014118][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.020590][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.031099][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.042276][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.045057][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.050467][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.060028][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.078198][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.086203][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.095035][ T2304] iforce 3-1:0.0: usb_submit_urb failed: -71
[   61.103546][ T2304] input input4: Timeout waiting for response from device.
[   61.128403][ T2304] usb 3-1: USB disconnect, device number 2
[   61.311990][ T5912] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   61.431451][ T5977] loop0: detected capacity change from 0 to 16
[   61.460253][ T5977] erofs (device loop0): mounted with root inode @ nid 36.
[   61.461634][ T5912] usb 2-1: Using ep0 maxpacket: 16
[   61.466996][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   61.479144][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   61.487329][ T5912] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   61.498752][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.509839][ T5912] usb 2-1: Product: syz
[   61.515094][ T5912] usb 2-1: Manufacturer: syz
[   61.517039][ T5912] usb 2-1: SerialNumber: syz
[   61.541592][ T5912] usb 2-1: config 0 descriptor??
[   61.550225][ T5912] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   61.554765][ T5912] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[   61.735593][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'.
[   61.799716][ T5998] loop0: detected capacity change from 0 to 256
[   61.821454][ T5998] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   61.839399][ T5998] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   61.847506][ T5998] FAT-fs (loop0): Filesystem has been set read-only
[   62.155801][ T5912] em28xx 2-1:0.0: unknown em28xx chip ID (246)
[   62.359743][ T5912] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[   62.550847][  T793] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   62.651158][ T5853] Bluetooth: hci0: command tx timeout
[   62.720879][ T5853] Bluetooth: hci1: command tx timeout
[   62.723635][  T793] usb 1-1: Using ep0 maxpacket: 16
[   62.742854][  T793] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[   62.746377][  T793] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   62.749053][  T793] usb 1-1: Product: syz
[   62.750452][  T793] usb 1-1: Manufacturer: syz
[   62.754048][  T793] usb 1-1: SerialNumber: syz
[   62.767324][  T793] usb 1-1: config 0 descriptor??
[   62.774739][ T5912] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[   62.790789][ T5912] em28xx 2-1:0.0: No AC97 audio processor
[   62.800901][ T5853] Bluetooth: hci2: command tx timeout
[   62.826035][ T5912] usb 2-1: USB disconnect, device number 2
[   62.829550][ T5912] em28xx 2-1:0.0: Disconnecting em28xx
[   62.865950][ T5912] em28xx 2-1:0.0: Freeing device
[   63.017420][  T793] usb 1-1: USB disconnect, device number 2
[   63.135645][ T6015] loop2: detected capacity change from 0 to 4096
[   63.160462][ T6016] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   63.408310][ T6022] netlink: 'syz.1.46': attribute type 3 has an invalid length.
[   63.414992][ T6022] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.46'.
[   63.492641][ T6024] loop1: detected capacity change from 0 to 64
[   63.566139][ T6020] loop2: detected capacity change from 0 to 32768
[   63.569584][ T6020] =======================================================
[   63.569584][ T6020] WARNING: The mand mount option has been deprecated and
[   63.569584][ T6020]          and is ignored by this kernel. Remove the mand
[   63.569584][ T6020]          option from the mount to silence this warning.
[   63.569584][ T6020] =======================================================
[   63.656068][ T6020] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   63.699800][ T6020] XFS (loop2): Ending clean mount
[   63.732278][ T5858] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   63.851970][  T793] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   64.131838][ T6041] loop2: detected capacity change from 0 to 40427
[   64.138131][ T6041] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[   64.141415][ T6041] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   64.143933][ T6041] F2FS-fs (loop2): build fault injection type: 0x6
[   64.151535][ T6041] F2FS-fs (loop2): invalid crc value
[   64.198917][ T6041] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   64.204848][ T6041] F2FS-fs (loop2): Start checkpoint disabled!
[   64.210860][ T1887] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   64.217249][ T6041] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   64.220168][ T6041] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   64.232381][  T793] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   64.235125][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.241441][  T793] usb 2-1: config 0 descriptor??
[   64.406805][ T1887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   64.416483][ T1887] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b
[   64.419545][ T1887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.423069][ T1887] usb 1-1: Product: syz
[   64.424564][ T1887] usb 1-1: Manufacturer: syz
[   64.426396][ T1887] usb 1-1: SerialNumber: syz
[   64.443968][ T1887] usb 1-1: config 0 descriptor??
[   64.456627][  T793] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[   64.529031][  T793] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[   64.531800][  T793] [drm] Initialized udl on minor 3
[   64.670891][  T793] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[   64.684882][  T793] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[   64.720945][ T5853] Bluetooth: hci0: command tx timeout
[   64.800800][ T5853] Bluetooth: hci1: command tx timeout
[   64.890836][ T5853] Bluetooth: hci2: command tx timeout
[   64.898982][   T47] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   64.899332][    T9] usb 2-1: USB disconnect, device number 3
[   64.907001][   T47] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[   65.419283][ T1887] usb 1-1: USB disconnect, device number 3
[   65.446147][ T3584] kworker/u9:4: attempt to access beyond end of device
[   65.446147][ T3584] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   65.458987][ T3584] CPU: 0 UID: 0 PID: 3584 Comm: kworker/u9:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   65.459009][ T3584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   65.459018][ T3584] Workqueue: writeback wb_workfn (flush-7:2)
[   65.459040][ T3584] Call Trace:
[   65.459055][ T3584]  <TASK>
[   65.459067][ T3584]  dump_stack_lvl+0x189/0x250
[   65.459084][ T3584]  ? preempt_schedule_thunk+0x16/0x30
[   65.459105][ T3584]  ? __pfx_dump_stack_lvl+0x10/0x10
[   65.459120][ T3584]  ? __pfx_queue_work_on+0x10/0x10
[   65.459133][ T3584]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   65.459150][ T3584]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   65.459175][ T3584]  f2fs_handle_critical_error+0x37c/0x540
[   65.459200][ T3584]  f2fs_write_end_io+0x886/0xb60
[   65.459228][ T3584]  __submit_merged_bio+0x27a/0x6a0
[   65.459252][ T3584]  __submit_merged_write_cond+0x255/0x530
[   65.459274][ T3584]  f2fs_write_data_pages+0x261d/0x3000
[   65.459322][ T3584]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   65.459353][ T3584]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   65.459365][ T3584]  ? stack_trace_save+0x9c/0xe0
[   65.459410][ T3584]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   65.459439][ T3584]  ? trace_f2fs_writepages+0x7f/0x200
[   65.459457][ T3584]  ? f2fs_write_node_pages+0x478/0x6e0
[   65.459479][ T3584]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   65.459509][ T3584]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   65.459533][ T3584]  do_writepages+0x32e/0x550
[   65.459555][ T3584]  ? reacquire_held_locks+0x127/0x1d0
[   65.459568][ T3584]  ? writeback_sb_inodes+0x384/0x1010
[   65.459592][ T3584]  __writeback_single_inode+0x145/0xff0
[   65.459608][ T3584]  ? do_raw_spin_unlock+0x4d/0x240
[   65.459628][ T3584]  writeback_sb_inodes+0x6c7/0x1010
[   65.459668][ T3584]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   65.459721][ T3584]  ? rcu_is_watching+0x15/0xb0
[   65.459743][ T3584]  wb_writeback+0x43b/0xaf0
[   65.459766][ T3584]  ? queue_io+0x341/0x590
[   65.459785][ T3584]  ? __pfx_wb_writeback+0x10/0x10
[   65.459809][ T3584]  ? _raw_spin_unlock_irq+0x23/0x50
[   65.459860][ T3584]  wb_workfn+0x409/0xef0
[   65.459888][ T3584]  ? __pfx_wb_workfn+0x10/0x10
[   65.459906][ T3584]  ? __lock_acquire+0xab9/0xd20
[   65.459933][ T3584]  ? process_scheduled_works+0x9ef/0x17b0
[   65.459952][ T3584]  ? _raw_spin_unlock_irq+0x23/0x50
[   65.459965][ T3584]  ? process_scheduled_works+0x9ef/0x17b0
[   65.459976][ T3584]  ? process_scheduled_works+0x9ef/0x17b0
[   65.459990][ T3584]  process_scheduled_works+0xae1/0x17b0
[   65.460029][ T3584]  ? __pfx_process_scheduled_works+0x10/0x10
[   65.460057][ T3584]  worker_thread+0x8a0/0xda0
[   65.460094][ T3584]  kthread+0x711/0x8a0
[   65.460113][ T3584]  ? __pfx_worker_thread+0x10/0x10
[   65.460125][ T3584]  ? __pfx_kthread+0x10/0x10
[   65.460142][ T3584]  ? _raw_spin_unlock_irq+0x23/0x50
[   65.460156][ T3584]  ? lockdep_hardirqs_on+0x9c/0x150
[   65.460171][ T3584]  ? __pfx_kthread+0x10/0x10
[   65.460187][ T3584]  ret_from_fork+0x3fc/0x770
[   65.460203][ T3584]  ? __pfx_ret_from_fork+0x10/0x10
[   65.460221][ T3584]  ? __switch_to_asm+0x39/0x70
[   65.460235][ T3584]  ? __switch_to_asm+0x33/0x70
[   65.460249][ T3584]  ? __pfx_kthread+0x10/0x10
[   65.460265][ T3584]  ret_from_fork_asm+0x1a/0x30
[   65.460295][ T3584]  </TASK>
[   65.460301][ T3584] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   66.262674][ T6050] loop0: detected capacity change from 0 to 32768
[   66.506095][ T6050] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   67.393503][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[   67.627978][ T6088] loop1: detected capacity change from 0 to 512
[   67.662508][ T6088] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   67.685091][ T6088] EXT4-fs (loop1): 1 truncate cleaned up
[   67.688739][ T6088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.731881][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.782106][ T6098] loop1: detected capacity change from 0 to 128
[   67.788499][ T6099] loop0: detected capacity change from 0 to 1024
[   67.809478][ T6098] syz.1.68: attempt to access beyond end of device
[   67.809478][ T6098] loop1: rw=2049, sector=145, nr_sectors = 3 limit=128
[   67.814927][  T792] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   67.838938][ T6099] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[   67.841497][ T6099] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[   67.866745][ T3678] hfsplus: b-tree write err: -5, ino 4
[   67.913104][ T6098] syz.1.68: attempt to access beyond end of device
[   67.913104][ T6098] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128
[   67.919144][ T6098] syz.1.68: attempt to access beyond end of device
[   67.919144][ T6098] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128
[   67.926380][ T6098] syz.1.68: attempt to access beyond end of device
[   67.926380][ T6098] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128
[   67.931036][ T6098] syz.1.68: attempt to access beyond end of device
[   67.931036][ T6098] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128
[   67.936324][ T6098] syz.1.68: attempt to access beyond end of device
[   67.936324][ T6098] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128
[   67.944049][ T6098] syz.1.68: attempt to access beyond end of device
[   67.944049][ T6098] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128
[   67.954132][ T6098] syz.1.68: attempt to access beyond end of device
[   67.954132][ T6098] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128
[   67.958485][ T6098] syz.1.68: attempt to access beyond end of device
[   67.958485][ T6098] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128
[   67.979881][  T792] usb 3-1: unable to get BOS descriptor or descriptor too short
[   67.985937][  T792] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   67.989325][  T792] usb 3-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config
[   67.993413][  T792] usb 3-1: config 1 interface 1 has no altsetting 0
[   68.012621][  T792] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   68.016153][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.019329][  T792] usb 3-1: Product: syz
[   68.031525][  T792] usb 3-1: Manufacturer: syz
[   68.034351][  T792] usb 3-1: SerialNumber: syz
[   68.258432][  T792] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[   68.263823][  T792] usb 3-1: found format II with max.bitrate = 2418, frame size=7
[   68.267176][  T792] usb 3-1: 2:1: All rates were zero
[   68.287708][  T792] usb 3-1: USB disconnect, device number 3
[   68.309735][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   68.420798][   T47] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   68.572503][   T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   68.576466][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   68.580566][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   68.584872][   T47] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   68.593624][   T47] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   68.596794][   T47] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   68.599756][   T47] usb 2-1: Manufacturer: syz
[   68.604114][   T47] usb 2-1: config 0 descriptor??
[   68.883233][   T47] rc_core: IR keymap rc-hauppauge not found
[   68.885864][   T47] Registered IR keymap rc-empty
[   68.888304][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.924413][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.954218][   T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   68.961862][   T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5
[   68.976171][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   68.986918][ T6123] process 'syz.2.79' launched './file2' with NULL argv: empty string added
[   69.000981][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   69.041197][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   69.072325][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   69.101650][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   69.130970][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   69.152762][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   69.188273][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   69.220935][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   69.254616][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   69.283938][   T47] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[   69.302966][   T47] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   69.317681][   T47] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   69.353247][   T47] usb 2-1: USB disconnect, device number 4
[   69.404372][ T6135] loop0: detected capacity change from 0 to 16
[   69.421993][ T6135] erofs (device loop0): mounted with root inode @ nid 36.
[   69.449514][ T6129] loop2: detected capacity change from 0 to 32768
[   69.454033][ T6129] (syz.2.81,6129,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len is smaller than minimal - offset=88, inode=69, rec_len=8, name_len=8
[   69.459650][ T6129] (syz.2.81,6129,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[   69.463342][ T6129] (syz.2.81,6129,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[   69.463359][ T6129] (syz.2.81,6129,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[   69.470202][ T6129] (syz.2.81,6129,1):ocfs2_initialize_super:2198 ERROR: status = -22
[   69.473147][ T6129] (syz.2.81,6129,1):ocfs2_fill_super:1177 ERROR: status = -22
[   70.069312][ T6153] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   70.623767][ T6171] warning: `syz.0.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.687957][ T6173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.101'.
[   70.742241][ T6177] netlink: 45 bytes leftover after parsing attributes in process `syz.1.103'.
[   71.074500][    T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   71.111550][ T1887] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   71.135437][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.141092][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.167112][ T6194] netlink: 'syz.2.111': attribute type 11 has an invalid length.
[   71.170309][ T6194] netlink: 244 bytes leftover after parsing attributes in process `syz.2.111'.
[   71.233044][    T9] usb 1-1: config 2 has an invalid interface number: 1 but max is 0
[   71.236478][    T9] usb 1-1: config 2 has no interface number 0
[   71.238950][    T9] usb 1-1: config 2 interface 1 has no altsetting 0
[   71.245395][    T9] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78
[   71.249021][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.253507][    T9] usb 1-1: Product: syz
[   71.255194][    T9] usb 1-1: Manufacturer: syz
[   71.257082][    T9] usb 1-1: SerialNumber: syz
[   71.275527][ T1887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.280228][ T1887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.284781][ T1887] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   71.288601][ T1887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.295916][ T1887] usb 2-1: config 0 descriptor??
[   71.495970][    T9] snd-usb-audio 1-1:2.1: probe with driver snd-usb-audio failed with error -22
[   71.501511][    T9] snd-usb-us122l 1-1:2.1: usb_set_interface error
[   71.504663][    T9] snd-usb-us122l 1-1:2.1: probe with driver snd-usb-us122l failed with error -22
[   71.511826][    T9] usb 1-1: USB disconnect, device number 4
[   71.516349][   T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   71.536670][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   71.674463][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.678918][   T47] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   71.688553][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.696068][   T47] usb 3-1: config 0 descriptor??
[   71.708672][ T1887] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[   71.770923][ T1887] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected
[   71.789430][ T1887] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[   72.032174][ T6198] loop0: detected capacity change from 0 to 128
[   72.050006][ T6198] EXT4-fs (loop0): Test dummy encryption mode enabled
[   72.058599][ T6198] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   72.065132][ T6198] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   72.139928][   T47] lenovo 0003:17EF:6047.0003: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0
[   72.309414][   T47] lenovo 0003:17EF:6047.0003: Failed to switch F7/9/11 mode: -71
[   72.314073][   T47] lenovo 0003:17EF:6047.0003: Failed to switch middle button: -71
[   72.318800][   T47] lenovo 0003:17EF:6047.0003: Fn-lock setting failed: -71
[   72.325436][   T47] lenovo 0003:17EF:6047.0003: Sensitivity setting failed: -71
[   72.348234][   T47] usb 3-1: USB disconnect, device number 4
[   72.545683][ T6201] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   73.222034][ T6214] loop2: detected capacity change from 0 to 128
[   73.248141][ T6214] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   73.254683][ T6214] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   73.433585][ T5847] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   73.482256][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.116'.
[   73.485714][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.116'.
[   73.525386][ T5858] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   73.584577][ T5884] usb 2-1: USB disconnect, device number 5
[   73.620533][ T5884] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected
[   73.970833][ T5884] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   73.970940][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   74.120880][ T5884] usb 2-1: Using ep0 maxpacket: 32
[   74.125689][ T5884] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[   74.129368][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.135262][ T5884] usb 2-1: config 0 descriptor??
[   74.146086][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.146373][ T5884] gspca_main: nw80x-2.14.0 probing 055f:d001
[   74.150272][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.150313][    T9] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[   74.150330][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.154828][    T9] usb 1-1: config 0 descriptor??
[   74.361142][ T5884] gspca_nw80x: reg_w err -71
[   74.363105][ T5884] nw80x 2-1:0.0: probe with driver nw80x failed with error -71
[   74.372802][ T5884] usb 2-1: USB disconnect, device number 6
[   74.587916][    T9] samsung 0003:0419:0600.0004: collection stack underflow
[   74.591878][    T9] samsung 0003:0419:0600.0004: item 0 0 0 12 parsing failed
[   74.598026][    T9] samsung 0003:0419:0600.0004: parse failed
[   74.600414][    T9] samsung 0003:0419:0600.0004: probe with driver samsung failed with error -22
[   74.935750][    T9] usb 1-1: USB disconnect, device number 5
[   75.348433][ T6254] loop1: detected capacity change from 0 to 1764
[   75.377437][ T6254] iso9660: Corrupted directory entry in block 2 of inode 1920
[   75.659889][ T6262] loop0: detected capacity change from 0 to 32768
[   75.669418][ T6262] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1)
[   75.669418][ T6262] downgrade (size 2912):
[   75.669418][ T6262] version:	0.0: (unknown version)
[   75.669418][ T6262] recovery passes:	
[   75.669418][ T6262] errors:	sb_clean_missing
[   75.669418][ T6262] version:	0.0: (unknown version)
[   75.669418][ T6262] recovery passes:	snapshots_read,set_may_go_rw,check_alloc_info,check_lrus,check_extents_to_backpointers,check_snapshot_trees,check_snapshots,fs_upgrade_for_subvolumes
[   75.669418][ T6262] errors:	clean_but_journal_not_empty
[   75.669418][ T6262] version:	0.0: (unknown version)
[   75.669418][ T6262] recovery passes:	fs_freespace_init
[   75.669418][ T6262] errors:	
[   75.669418][ T6262] version:	0.1: (unknown version)
[   75.669418][ T6262] recovery passes:	set_may_go_rw,fs_freespace_init,check_snapshot_trees
[   75.669418][ T6262] errors:	sb_clean_missing,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,dirty_but_no_journal_entries,(unknown error 768),sb_clean_missing,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_
[   75.670032][ T6262] bcachefs: bch2_fs_get_tree() error: invalid_sb_downgrade
[   75.721238][    C1] vkms_vblank_simulate: vblank timer overrun
[   75.730403][ T5884] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   75.992466][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.996830][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.000503][ T5884] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   76.010943][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.032428][ T5884] usb 2-1: config 0 descriptor??
[   76.585489][ T5884] hid (null): report_id 0 is invalid
[   76.598051][ T5884] hid-steam 0003:28DE:1142.0005: report_id 0 is invalid
[   76.602152][ T5884] hid-steam 0003:28DE:1142.0005: item 0 0 1 8 parsing failed
[   76.606935][ T5884] hid-steam 0003:28DE:1142.0005: steam_probe:parse of hid interface failed
[   76.610393][ T5884] hid-steam 0003:28DE:1142.0005: probe with driver hid-steam failed with error -22
[   76.799291][ T5884] usb 2-1: USB disconnect, device number 7
[   77.330803][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   77.417620][ T6290] loop2: detected capacity change from 0 to 40427
[   77.425005][ T6290] F2FS-fs (loop2): build fault injection rate: 19
[   77.427650][ T6290] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[   77.435510][ T6292] syzkaller0: entered promiscuous mode
[   77.437278][ T6292] syzkaller0: entered allmulticast mode
[   77.441621][ T6290] F2FS-fs (loop2): invalid crc value
[   77.452632][ T6290] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[   77.482399][    T9] usb 1-1: Using ep0 maxpacket: 32
[   77.500029][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.504496][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.508355][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   77.516744][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.532776][    T9] usb 1-1: config 0 descriptor??
[   77.542371][    T9] hub 1-1:0.0: USB hub found
[   77.542996][ T6290] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[   77.559736][ T6290] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   77.571937][ T6290] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   77.613525][ T6290] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   77.643784][ T6290] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[   77.649125][ T6290] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[   77.713660][ T5858] bio_check_eod: 48 callbacks suppressed
[   77.713681][ T5858] syz-executor: attempt to access beyond end of device
[   77.713681][ T5858] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   77.728721][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   77.728742][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.728749][ T5858] Call Trace:
[   77.728756][ T5858]  <TASK>
[   77.728761][ T5858]  dump_stack_lvl+0x189/0x250
[   77.728783][ T5858]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.728798][ T5858]  ? __pfx_queue_work_on+0x10/0x10
[   77.728810][ T5858]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   77.728826][ T5858]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   77.728850][ T5858]  f2fs_handle_critical_error+0x37c/0x540
[   77.728872][ T5858]  f2fs_write_end_io+0x886/0xb60
[   77.728897][ T5858]  __submit_merged_bio+0x27a/0x6a0
[   77.728918][ T5858]  __submit_merged_write_cond+0x255/0x530
[   77.728940][ T5858]  f2fs_write_data_pages+0x261d/0x3000
[   77.728982][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   77.729051][ T5858]  ? __lock_acquire+0xab9/0xd20
[   77.729074][ T5858]  ? do_raw_spin_lock+0x121/0x290
[   77.729097][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[   77.729111][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   77.729130][ T5858]  do_writepages+0x32e/0x550
[   77.729154][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[   77.729172][ T5858]  filemap_fdatawrite+0x199/0x240
[   77.729189][ T5858]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   77.729239][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[   77.729257][ T5858]  f2fs_sync_dirty_inodes+0x31f/0x830
[   77.729280][ T5858]  f2fs_write_checkpoint+0x95a/0x1df0
[   77.729310][ T5858]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   77.729356][ T5858]  ? kill_f2fs_super+0x298/0x6c0
[   77.729377][ T5858]  kill_f2fs_super+0x2c3/0x6c0
[   77.729394][ T5858]  ? __pfx_kill_f2fs_super+0x10/0x10
[   77.729404][ T5858]  ? radix_tree_delete_item+0x2b6/0x400
[   77.729425][ T5858]  ? shrinker_free+0x2ce/0x3e0
[   77.729440][ T5858]  deactivate_locked_super+0xbc/0x130
[   77.729457][ T5858]  cleanup_mnt+0x425/0x4c0
[   77.729471][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.729489][ T5858]  task_work_run+0x1d4/0x260
[   77.729508][ T5858]  ? __pfx_task_work_run+0x10/0x10
[   77.729522][ T5858]  ? __x64_sys_umount+0x122/0x160
[   77.729542][ T5858]  ? exit_to_user_mode_loop+0x40/0x110
[   77.729561][ T5858]  exit_to_user_mode_loop+0xec/0x110
[   77.729578][ T5858]  do_syscall_64+0x2bd/0x3b0
[   77.729594][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.729609][ T5858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.729621][ T5858]  ? exc_page_fault+0x9f/0xf0
[   77.729665][ T5858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.729677][ T5858] RIP: 0033:0x7f1b7378ff17
[   77.729689][ T5858] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   77.729699][ T5858] RSP: 002b:00007ffec8467ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   77.729713][ T5858] RAX: 0000000000000000 RBX: 00007f1b73811c05 RCX: 00007f1b7378ff17
[   77.729721][ T5858] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec84680b0
[   77.729728][ T5858] RBP: 00007ffec84680b0 R08: 0000000000000000 R09: 0000000000000000
[   77.729735][ T5858] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec8469140
[   77.729743][ T5858] R13: 00007f1b73811c05 R14: 0000000000012f0b R15: 00007ffec8469180
[   77.729763][ T5858]  </TASK>
[   77.729769][ T5858] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   77.750209][    T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[   78.124105][ T6297] Bluetooth: MGMT ver 1.23
[   78.134334][    T9] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0
[   78.431094][    T9] usb 1-1: USB disconnect, device number 6
[   79.120993][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   79.162768][ T6315] loop2: detected capacity change from 0 to 256
[   79.199968][ T6315] FAT-fs (loop2): Directory bread(block 64) failed
[   79.205716][ T6315] FAT-fs (loop2): Directory bread(block 65) failed
[   79.213323][ T6315] FAT-fs (loop2): Directory bread(block 66) failed
[   79.215789][ T6315] FAT-fs (loop2): Directory bread(block 67) failed
[   79.218111][ T6315] FAT-fs (loop2): Directory bread(block 68) failed
[   79.230538][ T6315] FAT-fs (loop2): Directory bread(block 69) failed
[   79.234639][ T6315] FAT-fs (loop2): Directory bread(block 70) failed
[   79.236983][ T6315] FAT-fs (loop2): Directory bread(block 71) failed
[   79.242475][ T6315] FAT-fs (loop2): Directory bread(block 72) failed
[   79.245088][ T6315] FAT-fs (loop2): Directory bread(block 73) failed
[   79.617523][ T6317] loop2: detected capacity change from 0 to 40427
[   79.623281][ T6317] F2FS-fs: heap/no_heap options were deprecated
[   79.629941][ T6317] F2FS-fs (loop2): build fault injection rate: 19
[   79.632607][ T6317] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[   79.637082][ T6317] F2FS-fs (loop2): invalid crc value
[   79.654992][ T6317] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[   79.682956][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.688134][    T9] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[   79.691329][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.695639][    T9] usb 1-1: config 0 descriptor??
[   79.698419][ T6317] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[   79.706453][ T6317] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   79.712192][ T6317] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   79.720277][ T6317] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   79.727235][ T6317] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xab0
[   79.747745][ T5858] syz-executor: attempt to access beyond end of device
[   79.747745][ T5858] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   79.755668][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   79.755688][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.755695][ T5858] Call Trace:
[   79.755701][ T5858]  <TASK>
[   79.755707][ T5858]  dump_stack_lvl+0x189/0x250
[   79.755728][ T5858]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.755743][ T5858]  ? __pfx_queue_work_on+0x10/0x10
[   79.755755][ T5858]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   79.755772][ T5858]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.755795][ T5858]  f2fs_handle_critical_error+0x37c/0x540
[   79.755818][ T5858]  f2fs_write_end_io+0x886/0xb60
[   79.755843][ T5858]  __submit_merged_bio+0x27a/0x6a0
[   79.755864][ T5858]  __submit_merged_write_cond+0x255/0x530
[   79.755885][ T5858]  f2fs_write_data_pages+0x261d/0x3000
[   79.755927][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.755976][ T5858]  ? __mod_zone_page_state+0xd7/0x140
[   79.755999][ T5858]  ? folios_put_refs+0x560/0x640
[   79.756020][ T5858]  ? __pfx_folios_put_refs+0x10/0x10
[   79.756032][ T5858]  ? rcu_is_watching+0x15/0xb0
[   79.756051][ T5858]  ? __lock_acquire+0xab9/0xd20
[   79.756079][ T5858]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.756098][ T5858]  do_writepages+0x32e/0x550
[   79.756126][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[   79.756145][ T5858]  filemap_fdatawrite+0x199/0x240
[   79.756162][ T5858]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   79.756212][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[   79.756230][ T5858]  f2fs_sync_dirty_inodes+0x31f/0x830
[   79.756253][ T5858]  f2fs_write_checkpoint+0x95a/0x1df0
[   79.756283][ T5858]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   79.756329][ T5858]  ? kill_f2fs_super+0x298/0x6c0
[   79.756345][ T5858]  kill_f2fs_super+0x2c3/0x6c0
[   79.756362][ T5858]  ? __pfx_kill_f2fs_super+0x10/0x10
[   79.756372][ T5858]  ? radix_tree_delete_item+0x2b6/0x400
[   79.756394][ T5858]  ? shrinker_free+0x2ce/0x3e0
[   79.756409][ T5858]  deactivate_locked_super+0xbc/0x130
[   79.756425][ T5858]  cleanup_mnt+0x425/0x4c0
[   79.756465][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.756484][ T5858]  task_work_run+0x1d4/0x260
[   79.756502][ T5858]  ? __pfx_task_work_run+0x10/0x10
[   79.756516][ T5858]  ? __x64_sys_umount+0x122/0x160
[   79.756536][ T5858]  ? exit_to_user_mode_loop+0x40/0x110
[   79.756556][ T5858]  exit_to_user_mode_loop+0xec/0x110
[   79.756573][ T5858]  do_syscall_64+0x2bd/0x3b0
[   79.756589][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.756604][ T5858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.756616][ T5858]  ? exc_page_fault+0x9f/0xf0
[   79.756633][ T5858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.756645][ T5858] RIP: 0033:0x7f1b7378ff17
[   79.756657][ T5858] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   79.756666][ T5858] RSP: 002b:00007ffec8467ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   79.756696][ T5858] RAX: 0000000000000000 RBX: 00007f1b73811c05 RCX: 00007f1b7378ff17
[   79.756704][ T5858] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec84680b0
[   79.756711][ T5858] RBP: 00007ffec84680b0 R08: 0000000000000000 R09: 0000000000000000
[   79.756718][ T5858] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec8469140
[   79.756726][ T5858] R13: 00007f1b73811c05 R14: 0000000000013706 R15: 00007ffec8469180
[   79.756747][ T5858]  </TASK>
[   79.756795][ T5858] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   80.068190][ T6325] loop2: detected capacity change from 0 to 512
[   80.072245][ T6325] EXT4-fs (loop2): Test dummy encryption mode enabled
[   80.084214][ T6325] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.159: corrupted in-inode xattr: invalid ea_ino
[   80.101534][ T6325] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.159: couldn't read orphan inode 15 (err -117)
[   80.108250][    T9] hid (null): usage index exceeded
[   80.120631][    T9] hid (null): usage index exceeded
[   80.129147][ T6325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.135363][    T9] itetech 0003:258A:6A88.0007: ignoring exceeding usage max
[   80.142691][    T9] itetech 0003:258A:6A88.0007: usage index exceeded
[   80.145476][    T9] itetech 0003:258A:6A88.0007: item 0 4 2 0 parsing failed
[   80.146089][ T6323] loop1: detected capacity change from 0 to 32768
[   80.148786][    T9] itetech 0003:258A:6A88.0007: probe with driver itetech failed with error -22
[   80.154455][ T6323] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.160 (6323)
[   80.168119][ T6325] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.159: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   80.203912][ T6323] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   80.207246][ T6323] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   80.210186][ T6323] BTRFS info (device loop1): using free-space-tree
[   80.243513][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.270635][ T6323] BTRFS info (device loop1): rebuilding free space tree
[   80.313417][  T793] usb 1-1: USB disconnect, device number 7
[   80.462234][ T5851] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   80.556107][ T6347] loop2: detected capacity change from 0 to 1024
[   80.637025][ T6347] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[   80.642210][ T6347] hfsplus: xattr search failed
[   80.944767][ T6363] loop0: detected capacity change from 0 to 512
[   80.951499][ T6363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   81.278380][ T6363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.283462][ T6363] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.298033][ T6363] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   81.325317][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.363442][   T24] cfg80211: failed to load regulatory.db
[   81.523775][ T6372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.749503][  T793] IPVS: starting estimator thread 0...
[   81.764853][ T6378] loop1: detected capacity change from 0 to 2048
[   81.788051][ T6378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   81.880460][ T6379] IPVS: using max 58 ests per chain, 139200 per kthread
[   82.398759][ T6387] binder: 6386:6387 ioctl c0306201 2000000001c0 returned -22
[   82.429786][ T6374] loop0: detected capacity change from 0 to 32768
[   83.039765][ T5884] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   83.080169][ T6405] loop1: detected capacity change from 0 to 32768
[   83.093985][ T6405] (syz.1.186,6405,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   83.105429][ T6405] (syz.1.186,6405,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   83.135175][ T6405] JBD2: Ignoring recovery information on journal
[   83.187718][ T6405] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   83.193990][ T5884] usb 1-1: config 5 has an invalid interface number: 123 but max is 0
[   83.197455][ T5884] usb 1-1: config 5 has no interface number 0
[   83.202298][ T5884] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0x6B, changing to 0xB
[   83.206583][ T5884] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[   83.306125][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[   83.400942][ T5884] usb 1-1: config 5 interface 123 has no altsetting 0
[   83.437577][ T5884] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[   83.442137][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.445265][ T5884] usb 1-1: Product: syz
[   83.446980][ T5884] usb 1-1: Manufacturer: syz
[   83.448989][ T5884] usb 1-1: SerialNumber: syz
[   83.680035][ T5884] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device.
[   83.694076][ T5884] usb 1-1: USB disconnect, device number 8
[   83.832558][ T6413] loop1: detected capacity change from 0 to 32768
[   83.835283][ T6413] XFS: noikeep mount option is deprecated.
[   83.874556][ T6413] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.896876][ T6413] XFS (loop1): Ending clean mount
[   83.904595][ T6413] XFS (loop1): Quotacheck needed: Please wait.
[   83.938094][ T6413] XFS (loop1): Quotacheck: Done.
[   83.992790][ T5851] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   84.238264][ T6433] loop1: detected capacity change from 0 to 1024
[   84.250138][ T6433] hfsplus: Unknown parameter ''
[   84.463311][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'.
[   85.178286][ T6454] loop1: detected capacity change from 0 to 32768
[   85.246220][ T6454] syz.1.204: attempt to access beyond end of device
[   85.246220][ T6454] loop1: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[   85.256780][ T6466] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.271238][  T115] blkno = 8ed2c, nblocks = 1
[   85.272672][  T115] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[   85.272672][  T115] 
[   85.291466][  T115] ERROR: (device loop1): remounting filesystem as read-only
[   85.517104][ T6474] loop2: detected capacity change from 0 to 32768
[   85.531229][ T6474] JBD2: Ignoring recovery information on journal
[   85.558251][ T6474] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   85.597717][ T5858] ocfs2: Unmounting device (7,2) on (node local)
[   85.698002][ T6480] loop2: detected capacity change from 0 to 8
[   85.714961][ T6480] SQUASHFS error: Unable to read inode 0xe3
[   85.919927][ T6486] loop2: detected capacity change from 0 to 256
[   85.923893][ T6486] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   86.298120][ T1887] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   86.338150][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   86.448017][ T1887] usb 2-1: Using ep0 maxpacket: 16
[   86.452207][ T1887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   86.459012][ T1887] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   86.462337][ T1887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.465251][ T1887] usb 2-1: Product: syz
[   86.466807][ T1887] usb 2-1: Manufacturer: syz
[   86.468741][ T1887] usb 2-1: SerialNumber: syz
[   86.472657][ T1887] usb 2-1: config 0 descriptor??
[   86.478252][ T1887] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   86.481870][ T1887] em28xx 2-1:0.0: DVB interface 0 found: bulk
[   86.489948][   T24] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[   86.493429][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.507282][   T24] usb 3-1: config 0 descriptor??
[   86.727512][   T24] kaweth 3-1:0.0: Firmware present in device.
[   86.921183][   T24] kaweth 3-1:0.0: Statistics collection: 0
[   86.923405][   T24] kaweth 3-1:0.0: Multicast filter limit: 0
[   86.925595][   T24] kaweth 3-1:0.0: MTU: 0
[   86.927192][   T24] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00
[   87.084390][ T1887] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[   87.345051][   T24] kaweth 3-1:0.0: Error setting SOFS wait
[   87.353882][   T24] kaweth 3-1:0.0: probe with driver kaweth failed with error -5
[   87.365825][   T24] usb 3-1: USB disconnect, device number 5
[   87.861190][ T1887] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   87.864445][ T1887] em28xx 2-1:0.0: board has no eeprom
[   88.147314][ T1887] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   88.152274][ T1887] em28xx 2-1:0.0: dvb set to bulk mode.
[   88.181701][ T5884] em28xx 2-1:0.0: Binding DVB extension
[   88.277844][ T6519] loop0: detected capacity change from 0 to 1024
[   88.340293][  T719] hfsplus: b-tree write err: -5, ino 4
[   88.344228][  T792] usb 2-1: USB disconnect, device number 8
[   88.344812][ T6492] em28xx 2-1:0.0: writing to i2c device at 0x0 failed (error=-19)
[   88.354410][  T792] em28xx 2-1:0.0: Disconnecting em28xx
[   88.400729][ T5884] em28xx 2-1:0.0: Registering input extension
[   88.413473][  T792] em28xx 2-1:0.0: Closing input extension
[   88.509772][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'.
[   88.559630][  T792] em28xx 2-1:0.0: Freeing device
[   88.566831][ T6528] loop2: detected capacity change from 0 to 8
[   88.614542][ T6528] SQUASHFS error: Unable to read inode 0x11f
[   88.796525][ T6543] tmpfs: Cannot enable quota on remount
[   88.891349][ T6539] loop2: detected capacity change from 0 to 32768
[   89.012042][ T6539] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[   89.012061][ T6539]   allowing incompatible features above 0.0: (unknown version)
[   89.012070][ T6539]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   89.026279][ T6539] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   89.029729][ T6539] bcachefs (loop2): initializing new filesystem
[   89.046465][ T6539] bcachefs (loop2): going read-write
[   89.075075][ T6539] bcachefs (loop2): marking superblocks
[   89.089084][ T6539] bcachefs (loop2): initializing freespace
[   89.095778][ T6539] bcachefs (loop2): done initializing freespace
[   89.101192][ T6539] bcachefs (loop2): reading snapshots table
[   89.103793][ T6539] bcachefs (loop2): reading snapshots done
[   89.130867][ T6539] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[   89.134633][ T6539] bcachefs (loop2): done starting filesystem
[   89.242825][ T6539] syz.2.240 (6539) used greatest stack depth: 16760 bytes left
[   89.273142][ T5858] bcachefs (loop2): shutting down
[   89.275359][ T5858] bcachefs (loop2): going read-only
[   89.279410][ T5858] bcachefs (loop2): finished waiting for writes to stop
[   89.288288][ T5858] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[   89.320786][ T5858] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[   89.326445][ T5858] bcachefs (loop2): clean shutdown complete, journal seq 4
[   89.330917][ T5858] bcachefs (loop2): marking filesystem clean
[   89.376211][ T5858] bcachefs (loop2): shutdown complete
[   89.384831][ T6578] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136)
[   89.388812][ T6578] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   89.417677][  T792] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   89.472890][ T6582] loop0: detected capacity change from 0 to 512
[   89.501594][ T6582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.505461][ T6582] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   89.528561][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.584828][  T792] usb 2-1: config 0 has an invalid interface number: 227 but max is 0
[   89.588349][  T792] usb 2-1: config 0 has no interface number 0
[   89.590992][  T792] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=ab.24
[   89.594532][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.609212][  T792] usb 2-1: config 0 descriptor??
[   89.700943][ T6591] loop0: detected capacity change from 0 to 1024
[   89.704630][ T6591] EXT4-fs: Ignoring removed orlov option
[   89.721915][ T6591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.761785][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.819407][  T792] snd-usb-audio 2-1:0.227: probe with driver snd-usb-audio failed with error -71
[   89.825640][  T792] usb 2-1: USB disconnect, device number 9
[   90.046284][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   90.196398][    T9] usb 1-1: Using ep0 maxpacket: 16
[   90.212809][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[   90.219804][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[   90.222886][    T9] usb 1-1: can't read configurations, error -71
[   90.364024][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'.
[   90.562189][ T6604] smc: net device bond0 applied user defined pnetid SYZ2
[   90.674620][ T6610] netlink: 'syz.1.267': attribute type 7 has an invalid length.
[   90.759791][ T6611] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.266'.
[   91.192531][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'.
[   91.295649][ T1887] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   91.446428][ T1887] usb 2-1: Using ep0 maxpacket: 8
[   91.454767][ T1887] usb 2-1: unable to get BOS descriptor or descriptor too short
[   91.467410][ T1887] usb 2-1: config 2 has an invalid interface number: 179 but max is 0
[   91.470288][ T1887] usb 2-1: config 2 has no interface number 0
[   91.472854][ T1887] usb 2-1: config 2 interface 179 has no altsetting 0
[   91.482885][ T1887] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b5.a8
[   91.486230][ T1887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.489802][ T1887] usb 2-1: Product: syz
[   91.491585][ T1887] usb 2-1: Manufacturer: syz
[   91.493524][ T1887] usb 2-1: SerialNumber: syz
[   91.685513][ T5884] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   91.734149][ T1887] cypress_cy7c63 2-1:2.179: Cypress CY7C63xxx device now attached
[   91.748727][ T1887] usb 2-1: USB disconnect, device number 10
[   91.775555][ T1887] cypress_cy7c63 2-1:2.179: Cypress CY7C63xxx device now disconnected
[   91.848663][ T5884] usb 1-1: Using ep0 maxpacket: 32
[   91.864773][ T5884] usb 1-1: config 0 has an invalid interface number: 197 but max is 0
[   91.868688][ T5884] usb 1-1: config 0 has no interface number 0
[   91.871384][ T5884] usb 1-1: config 0 interface 197 has no altsetting 0
[   91.876870][ T5884] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=32.65
[   91.880793][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.883980][ T5884] usb 1-1: Product: syz
[   91.885794][ T5884] usb 1-1: Manufacturer: syz
[   91.887796][ T5884] usb 1-1: SerialNumber: syz
[   91.892054][ T5884] usb 1-1: config 0 descriptor??
[   91.900065][ T5884] gspca_main: etoms-2.14.0 probing 102c:6151
[   92.149568][ T5884] usb 1-1: USB disconnect, device number 11
[   92.862492][ T6636] netlink: 'syz.0.277': attribute type 12 has an invalid length.
[   92.908450][ T6639] cgroup: none used incorrectly
[   92.979212][ T6644] loop2: detected capacity change from 0 to 1024
[   93.001031][ T6644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.016736][ T6644] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.075240][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.136786][ T6654] loop0: detected capacity change from 0 to 256
[   93.149861][ T6654] FAT-fs (loop0): Directory bread(block 64) failed
[   93.152308][ T6654] FAT-fs (loop0): Directory bread(block 65) failed
[   93.156675][ T6654] FAT-fs (loop0): Directory bread(block 66) failed
[   93.159408][ T6654] FAT-fs (loop0): Directory bread(block 67) failed
[   93.161921][ T6654] FAT-fs (loop0): Directory bread(block 68) failed
[   93.164017][ T6654] FAT-fs (loop0): Directory bread(block 69) failed
[   93.166999][ T6654] FAT-fs (loop0): Directory bread(block 70) failed
[   93.168990][ T6654] FAT-fs (loop0): Directory bread(block 71) failed
[   93.171157][ T6654] FAT-fs (loop0): Directory bread(block 72) failed
[   93.173362][ T6654] FAT-fs (loop0): Directory bread(block 73) failed
[   93.709792][ T6683] loop2: detected capacity change from 0 to 128
[   93.850440][ T6693] sctp: [Deprecated]: syz.2.304 (pid 6693) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.850440][ T6693] Use struct sctp_sack_info instead
[   94.237365][ T6709] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   94.916564][ T6725] loop1: detected capacity change from 0 to 512
[   94.919085][ T6725] EXT4-fs: Ignoring removed i_version option
[   94.921292][ T6725] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   94.938301][ T6725] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   94.952117][ T6725] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   94.958318][ T6725] EXT4-fs (loop1): 1 truncate cleaned up
[   94.960988][ T6725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.974573][ T6725] EXT4-fs warning (device loop1): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new)
[   94.979053][ T6725] EXT4-fs warning (device loop1): ext4_group_extend:1891: can't read last block, resize aborted
[   95.007918][ T6731] loop2: detected capacity change from 0 to 1024
[   95.013853][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.100864][ T6731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.150681][ T6739] netlink: 'syz.0.322': attribute type 2 has an invalid length.
[   95.181091][ T6739] : entered promiscuous mode
[   95.200789][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.206124][ T6741] loop1: detected capacity change from 0 to 1024
[   95.255748][   T28] hfsplus: b-tree write err: -5, ino 4
[   95.623419][ T6752] loop1: detected capacity change from 0 to 1764
[   95.654115][ T6752] iso9660: Corrupted directory entry in block 14 of inode 1920
[   95.663879][ T5884] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   95.838795][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short
[   95.846787][ T5884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.858647][ T5884] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   95.862391][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.866585][ T5884] usb 1-1: Product: syz
[   95.868308][ T5884] usb 1-1: Manufacturer: syz
[   95.870179][ T5884] usb 1-1: SerialNumber: syz
[   96.062034][ T6759] loop1: detected capacity change from 0 to 2048
[   96.119694][ T6760] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.244924][ T5884] usb 1-1: USB disconnect, device number 12
[   96.389707][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.199862][ T6787] capability: warning: `syz.1.338' uses deprecated v2 capabilities in a way that may be insecure
[   97.873878][ T6814] Zero length message leads to an empty skb
[   98.208550][ T6818] loop2: detected capacity change from 0 to 8
[   98.211740][ T6818] Major/Minor mismatch, older Squashfs 1.0 filesystems are unsupported
[   98.384033][ T6826] loop2: detected capacity change from 0 to 128
[   98.403526][ T6827] delete_channel: no stack
[   98.432674][ T6826] ubifs: Bad value for 'compr'
[   98.462421][ T6830] syz.2.356 uses obsolete (PF_INET,SOCK_PACKET)
[   98.736029][ T6844] loop1: detected capacity change from 0 to 2048
[   98.760364][ T6846] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.021046][ T6847] loop0: detected capacity change from 0 to 32768
[   99.029946][ T6847] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.363 (6847)
[   99.050713][ T6847] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   99.054547][ T6847] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   99.057886][ T6847] BTRFS info (device loop0): using free-space-tree
[   99.091684][ T2304] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   99.173828][ T5847] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   99.246274][ T2304] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[   99.250905][ T2304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.263106][ T2304] usb 2-1: Product: syz
[   99.264787][ T2304] usb 2-1: Manufacturer: syz
[   99.266691][ T2304] usb 2-1: SerialNumber: syz
[   99.285655][ T2304] usb 2-1: config 0 descriptor??
[   99.350552][ T6872] loop0: detected capacity change from 0 to 4096
[   99.395349][ T6872] ntfs3(loop0): $Secure::$SDH is corrupted.
[   99.397619][ T6872] ntfs3(loop0): Failed to initialize $Secure (-22).
[   99.517871][ T6875] loop2: detected capacity change from 0 to 1024
[   99.531285][ T6875] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   99.545717][ T6876] netlink: 'syz.0.367': attribute type 10 has an invalid length.
[   99.553232][ T6875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.562212][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.569073][ T6876] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   99.632990][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'.
[   99.804278][ T6884] loop0: detected capacity change from 0 to 128
[   99.810241][ T6884] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   99.872713][ T6884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.908134][ T2304] mos7840 2-1:0.0: required endpoints missing
[   99.908463][ T6884] overlayfs: upper fs needs to support d_type.
[   99.914846][ T6884] overlayfs: upper fs does not support tmpfile.
[   99.930813][ T2304] usb 2-1: USB disconnect, device number 11
[  100.945185][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.235600][ T6907] capability: warning: `syz.0.379' uses 32-bit capabilities (legacy support in use)
[  101.501241][ T6914] loop1: detected capacity change from 0 to 8192
[  101.620847][ T6923] loop0: detected capacity change from 0 to 128
[  101.634268][ T6923] syz.0.386: attempt to access beyond end of device
[  101.634268][ T6923] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128
[  101.699023][ T6926] syz.0.386: attempt to access beyond end of device
[  101.699023][ T6926] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128
[  101.705203][ T6926] syz.0.386: attempt to access beyond end of device
[  101.705203][ T6926] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  101.713687][ T6926] syz.0.386: attempt to access beyond end of device
[  101.713687][ T6926] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  101.720718][ T6926] syz.0.386: attempt to access beyond end of device
[  101.720718][ T6926] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  101.725692][ T6926] syz.0.386: attempt to access beyond end of device
[  101.725692][ T6926] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  101.733569][ T6926] syz.0.386: attempt to access beyond end of device
[  101.733569][ T6926] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  101.738851][ T6926] syz.0.386: attempt to access beyond end of device
[  101.738851][ T6926] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  101.747906][ T6926] syz.0.386: attempt to access beyond end of device
[  101.747906][ T6926] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  101.754689][ T6926] syz.0.386: attempt to access beyond end of device
[  101.754689][ T6926] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  101.929753][ T6934] loop0: detected capacity change from 0 to 1024
[  101.937429][ T6934] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  101.947325][ T6934] EXT4-fs (loop0): group descriptors corrupted!
[  101.970390][    T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  101.975955][ T6934] tmpfs: Bad value for 'mpol'
[  102.027459][ T6936] bond1: entered allmulticast mode
[  102.122922][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 64
[  102.139610][    T9] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  102.147642][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.150555][    T9] usb 2-1: Product: syz
[  102.151764][    T9] usb 2-1: Manufacturer: syz
[  102.153442][    T9] usb 2-1: SerialNumber: syz
[  102.162100][    T9] usb 2-1: config 0 descriptor??
[  102.165568][ T6928] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  102.175306][    T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -71
[  102.298489][ T6943] loop0: detected capacity change from 0 to 32768
[  102.348006][ T6943] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  102.348020][ T6943]   allowing incompatible features above 0.0: (unknown version)
[  102.348025][ T6943]   features: 
[  102.363832][ T6943] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  102.366501][ T6943] bcachefs (loop0): initializing new filesystem
[  102.375771][    T9] usb 2-1: USB disconnect, device number 12
[  102.377224][ T6943] bcachefs (loop0): going read-write
[  102.385678][ T6943] bcachefs (loop0): marking superblocks
[  102.393199][ T5853] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  102.395991][ T5853] Bluetooth: hci0: Injecting HCI hardware error event
[  102.398971][ T5853] Bluetooth: hci0: hardware error 0x00
[  102.413355][ T6943] bcachefs (loop0): initializing freespace
[  102.425295][ T6943] bcachefs (loop0): done initializing freespace
[  102.431349][ T6943] bcachefs (loop0): reading snapshots table
[  102.433326][ T6943] bcachefs (loop0): reading snapshots done
[  102.450168][ T6943] bcachefs (loop0): done starting filesystem
[  102.496353][   T33] audit: type=1800 audit(1755393838.464:2): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.395" name="file1" dev="loop0" ino=4098 res=0 errno=0
[  102.505304][   T33] audit: type=1800 audit(1755393838.474:3): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.395" name="file1" dev="loop0" ino=4098 res=0 errno=0
[  102.540634][  T793] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  102.690094][  T793] usb 3-1: Using ep0 maxpacket: 16
[  102.698555][  T793] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  102.704649][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  102.716859][  T793] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  102.721057][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.724545][  T793] usb 3-1: Product: syz
[  102.726393][  T793] usb 3-1: Manufacturer: syz
[  102.728475][  T793] usb 3-1: SerialNumber: syz
[  102.736757][  T793] usb 3-1: config 0 descriptor??
[  102.746881][  T793] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  102.751631][  T793] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  103.125113][ T6965] syz.0.395 (6965) used greatest stack depth: 16264 bytes left
[  103.172721][ T6943] syz.0.395 (6943) used greatest stack depth: 15384 bytes left
[  103.201138][ T5847] bcachefs (loop0): shutting down
[  103.202741][ T5847] bcachefs (loop0): going read-only
[  103.212092][ T5847] bcachefs (loop0): finished waiting for writes to stop
[  103.216679][ T5847] bcachefs (loop0): flushing journal and stopping allocators, journal seq 9
[  103.256858][ T5847] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 9
[  103.260937][ T5847] bcachefs (loop0): clean shutdown complete, journal seq 10
[  103.264577][ T5847] bcachefs (loop0): marking filesystem clean
[  103.281391][ T5847] bcachefs (loop0): shutdown complete
[  103.348183][ T6979] loop1: detected capacity change from 0 to 512
[  103.383782][ T6979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.389253][ T6979] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  103.403089][  T793] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  103.404980][ T6979] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.407: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  103.413332][  T793] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  103.415066][ T6979] EXT4-fs (loop1): Remounting filesystem read-only
[  104.023932][  T793] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  104.183573][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.469110][ T5853] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  104.636482][  T793] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  104.639408][ T5884] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  104.644979][  T793] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  104.648004][  T793] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  104.653262][  T793] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  104.661234][  T793] usb 3-1: USB disconnect, device number 6
[  104.805546][ T5884] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  104.809686][ T5884] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  104.817786][ T5884] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  104.825608][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.830373][ T5884] usb 2-1: Product: syz
[  104.832030][ T5884] usb 2-1: Manufacturer: syz
[  104.833941][ T5884] usb 2-1: SerialNumber: syz
[  104.838137][ T5884] usb 2-1: config 0 descriptor??
[  104.845520][ T6996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  104.848363][ T6996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  104.849335][   T33] audit: type=1326 audit(1755393840.805:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.0.422" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff79658ebe9 code=0x0
[  105.064158][ T6996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  105.067110][ T6996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  105.705275][ T7032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.824269][ T7038] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  105.846805][ T7040] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  105.904665][ T7042] netlink: 'syz.2.435': attribute type 79 has an invalid length.
[  106.101941][ T5884] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  106.149440][ T5884] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00
[  106.166584][ T5884] usb 2-1: USB disconnect, device number 13
[  106.180044][ T5884] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet
[  106.548104][    T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  106.675510][ T7058] mmap: syz.0.442 (7058) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  107.039499][    T9] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[  107.048354][    T9] usb 3-1: config 0 has no interface number 0
[  107.055501][    T9] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  107.087550][    T9] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  107.094130][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.097132][    T9] usb 3-1: Product: syz
[  107.098896][    T9] usb 3-1: Manufacturer: syz
[  107.101332][    T9] usb 3-1: SerialNumber: syz
[  107.108001][    T9] usb 3-1: config 0 descriptor??
[  107.658281][  T793] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  107.754018][    T9] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71
[  107.768398][    T9] usb 3-1: USB disconnect, device number 7
[  107.801402][ T7069] loop0: detected capacity change from 0 to 32768
[  107.815547][ T7069] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  107.818624][  T793] usb 2-1: Using ep0 maxpacket: 16
[  107.834307][  T793] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  107.840047][  T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  107.845751][  T793] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  107.850891][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.854072][  T793] usb 2-1: Product: syz
[  107.855722][  T793] usb 2-1: Manufacturer: syz
[  107.863878][  T793] usb 2-1: SerialNumber: syz
[  107.871305][  T793] usb 2-1: config 0 descriptor??
[  107.925937][ T7069] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = 
[  107.931490][ T7069] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  107.935071][ T7069] OCFS2: File system is now read-only.
[  107.937069][ T7069] (syz.0.447,7069,0):ocfs2_find_entry_id:407 ERROR: status = -30
[  107.940517][ T7069] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = 
[  107.945714][ T7069] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  107.949916][ T7069] (syz.0.447,7069,0):ocfs2_assign_bh:2417 ERROR: status = -30
[  107.952598][ T7069] (syz.0.447,7069,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -30
[  107.955816][ T7069] (syz.0.447,7069,0):ocfs2_mknod:275 ERROR: status = -30
[  107.958675][ T7069] (syz.0.447,7069,0):ocfs2_create:678 ERROR: status = -30
[  107.983659][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  108.132483][ T7075] netlink: 216 bytes leftover after parsing attributes in process `syz.0.449'.
[  108.135992][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.449'.
[  108.139726][ T7075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.449'.
[  108.157832][  T793] appledisplay 2-1:0.0: Error while getting initial brightness: -110
[  108.165993][  T793] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110
[  108.296003][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'.
[  108.781363][  T793] usb 2-1: USB disconnect, device number 14
[  109.027955][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  110.541204][   T33] audit: type=1326 audit(1755393846.508:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.0.463" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff79658ebe9 code=0x0
[  110.601521][ T7174] loop1: detected capacity change from 0 to 2048
[  111.035311][ T7187] loop2: detected capacity change from 0 to 1024
[  111.065920][ T7187] hfsplus: invalid extent max_key_len 1280
[  111.068909][ T7187] hfsplus: failed to load extents file
[  111.157702][ T7185] loop1: detected capacity change from 0 to 32768
[  111.163301][ T7185] XFS: noikeep mount option is deprecated.
[  111.221753][ T7185] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  111.426325][ T7185] XFS (loop1): Ending clean mount
[  111.456777][ T7185] XFS (loop1): Quotacheck needed: Please wait.
[  111.566625][ T7185] XFS (loop1): Quotacheck: Done.
[  111.708037][ T5851] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  112.285347][ T2304] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  112.338233][ T7202] loop0: detected capacity change from 0 to 32768
[  112.380740][ T7202] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  112.424569][ T7202] XFS (loop0): Ending clean mount
[  112.429779][ T7202] XFS (loop0): Quotacheck needed: Please wait.
[  112.438843][ T2304] usb 2-1: config 1 interface 0 altsetting 165 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.450617][ T2304] usb 2-1: config 1 interface 0 has no altsetting 0
[  112.474596][ T7202] XFS (loop0): Quotacheck: Done.
[  112.479016][ T2304] usb 2-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.40
[  112.487595][ T2304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.490680][ T2304] usb 2-1: Product: syz
[  112.492356][ T2304] usb 2-1: Manufacturer: syz
[  112.515182][ T2304] usb 2-1: SerialNumber: syz
[  112.550171][ T5847] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  112.758652][ T2304] usbhid 2-1:1.0: can't add hid device: -71
[  112.761088][ T2304] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  112.781824][ T2304] usb 2-1: USB disconnect, device number 15
[  112.964197][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'.
[  113.655768][ T7230] loop1: detected capacity change from 0 to 512
[  113.659340][ T7230] ext4: Unknown parameter 'fsuuid'
[  113.662971][ T7230] tmpfs: Bad value for 'mpol'
[  113.799074][ T7236] Illegal XDP return value 2211697163 on prog  (id 36) dev N/A, expect packet loss!
[  114.949173][ T7256] loop1: detected capacity change from 0 to 4096
[  115.041724][ T7256] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  115.072992][ T7256] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  115.381187][ T7260] loop2: detected capacity change from 0 to 32768
[  115.633512][  T792] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  115.783448][  T792] usb 2-1: Using ep0 maxpacket: 16
[  115.787395][  T792] usb 2-1: config 2 has an invalid interface number: 142 but max is 0
[  115.790815][  T792] usb 2-1: config 2 has no interface number 0
[  115.795399][  T792] usb 2-1: config 2 interface 142 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16
[  115.801313][  T792] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e
[  115.805429][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.808571][  T792] usb 2-1: Product: syz
[  115.810178][  T792] usb 2-1: Manufacturer: syz
[  115.812056][  T792] usb 2-1: SerialNumber: syz
[  115.820953][ T7268] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  115.834770][  T792] usb 2-1: NFC: intf ffff888038a9f000 id ffffffff8eb53ba0
[  115.942130][ T7282] loop2: detected capacity change from 0 to 32768
[  115.950146][ T7282] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.506 (7282)
[  115.970126][ T7282] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  115.977185][ T7282] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  115.980261][ T7282] BTRFS info (device loop2): using free-space-tree
[  116.043613][  T793] usb 2-1: USB disconnect, device number 16
[  116.196011][ T5858] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  116.528096][ T7304] netlink: 'syz.2.507': attribute type 10 has an invalid length.
[  116.561628][ T7304] veth0_vlan: left promiscuous mode
[  116.568319][ T7304] veth0_vlan: entered promiscuous mode
[  116.591565][ T7304] team0: Device veth0_vlan failed to register rx_handler
[  117.541663][ T7309] loop1: detected capacity change from 0 to 4096
[  117.559819][ T7310] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.584183][ T7309] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  117.591273][ T7309] Remounting filesystem read-only
[  117.611597][ T5851] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  117.696097][ T7314] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  118.210150][ T7347] loop1: detected capacity change from 0 to 512
[  118.218590][ T7347] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  118.434318][ T7362] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  118.571487][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'.
[  118.575111][ T7373] loop1: detected capacity change from 0 to 64
[  118.825217][ T7379] loop1: detected capacity change from 0 to 32768
[  118.880255][ T7379] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=nojournal_transaction_names
[  118.880268][ T7379]   allowing incompatible features above 0.0: (unknown version)
[  118.880273][ T7379]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  118.891832][ T7379] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  118.894487][ T7379] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  118.897744][ T7379] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  118.897744][ T7379]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  118.920440][ T7379] bcachefs (loop1): accounting_read... done
[  118.924972][ T7379] bcachefs (loop1): alloc_read... done
[  118.927905][ T7379] bcachefs (loop1): snapshots_read... done
[  118.930781][ T7379] bcachefs (loop1): check_allocations...
[  118.933372][ T7379] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  118.933404][ T7379]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq cddfaeeca0a7d1e5 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  118.947796][ T7379] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  118.947807][ T7379]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 6f77d90a6678a8d9 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  118.958400][ T7379] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  118.958411][ T7379]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1be24db0106cff76 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  118.966740][ T7379] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  118.966749][ T7379]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 592c28c0a83be2c9 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  118.976495][ T7379] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  118.976505][ T7379]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1a83a7e47ef9f6aa written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  118.986898][ T7379] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[  118.986909][ T7379]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 11da0ed3864cee54 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  118.999410][ T7379]  done
[  119.003903][ T7379] bcachefs (loop1): going read-write
[  119.010262][ T7379] bcachefs (loop1): journal_replay... done
[  119.049804][ T7379] bcachefs (loop1): check_extents_to_backpointers...
[  119.051090][ T7379] bcachefs (loop1): scanning for missing backpointers in 6/128 buckets
[  119.061572][ T7379]  done
[  119.064407][ T7379] bcachefs (loop1): check_inodes... done
[  119.068961][ T7379] bcachefs (loop1): resume_logged_ops... done
[  119.073053][ T7379] bcachefs (loop1): delete_dead_inodes... done
[  119.080234][ T7379] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  119.084643][ T7379] bcachefs (loop1): check_extents_to_backpointers... done
[  119.089711][ T7379] bcachefs (loop1): check_inodes... done
[  119.093404][ T7379] bcachefs (loop1): resume_logged_ops... done
[  119.096825][ T7379] bcachefs (loop1): delete_dead_inodes... done
[  119.102002][ T7379] bcachefs (loop1): done starting filesystem
[  119.117940][   T33] audit: type=1800 audit(1755393855.093:6): pid=7379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.543" name="file2" dev="loop1" ino=1073741828 res=0 errno=0
[  119.141374][ T7379] syz.1.543 (7379) used greatest stack depth: 15112 bytes left
[  119.145839][ T5851] bcachefs (loop1): shutting down
[  119.147985][ T5851] bcachefs (loop1): going read-only
[  119.150190][ T5851] bcachefs (loop1): finished waiting for writes to stop
[  119.156831][ T5851] bcachefs (loop1): flushing journal and stopping allocators, journal seq 18
[  119.160863][ T5851] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 18
[  119.167894][ T5851] bcachefs (loop1): clean shutdown complete, journal seq 19
[  119.175049][ T5851] bcachefs (loop1): marking filesystem clean
[  119.199091][ T5851] bcachefs (loop1): shutdown complete
[  119.419635][   T33] audit: type=1326 audit(1755393855.393:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.545" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b7378ebe9 code=0x0
[  120.315401][ T7407] loop2: detected capacity change from 0 to 1024
[  120.598052][ T7420] loop1: detected capacity change from 0 to 64
[  120.850990][ T7436] program syz.2.563 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.988123][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  121.052814][ T7445] netlink: 'syz.2.566': attribute type 11 has an invalid length.
[  121.056085][ T7445] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.566'.
[  121.116102][ T7444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.262508][ T7451] loop2: detected capacity change from 0 to 4096
[  121.524556][ T7450] loop0: detected capacity change from 0 to 32768
[  121.537202][ T7450] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.569 (7450)
[  121.565472][ T7450] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  121.575172][ T7450] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  121.582884][ T7450] BTRFS info (device loop0): using free-space-tree
[  121.672443][ T7450] BTRFS info (device loop0): rebuilding free space tree
[  121.818213][ T7481] loop2: detected capacity change from 0 to 512
[  121.834619][ T7481] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  121.859899][ T7481] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  121.870356][ T7481] FAT-fs (loop2): Filesystem has been set read-only
[  121.881849][ T7481] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  121.887684][ T5847] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  122.322817][ T7488] loop0: detected capacity change from 0 to 32768
[  122.328169][ T7488] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.579 (7488)
[  122.337915][ T7488] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.344871][ T7488] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  122.348350][ T7488] BTRFS info (device loop0): using free-space-tree
[  123.006522][ T7488] fs-verity (loop0, inode 260): Error -4 building Merkle tree
[  123.091029][ T7488] BTRFS: error (device loop0) in rollback_verity:470: errno=-4 unknown (failed to drop verity items in rollback 260)
[  123.096180][ T7488] BTRFS info (device loop0 state E): forced readonly
[  123.099120][ T7488] BTRFS error (device loop0 state E): failed to rollback verity items: -4
[  123.533322][ T5853] Bluetooth: hci2: unexpected event for opcode 0x0401
[  123.549014][ T5847] BTRFS info (device loop0 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.088301][ T7527] batman_adv: batadv0: Adding interface: dummy0
[  124.092576][ T7527] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.103038][ T7527] batman_adv: batadv0: Interface activated: dummy0
[  124.117476][ T7529] loop1: detected capacity change from 0 to 128
[  124.137732][ T7529] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  124.141692][ T7527] batadv0: mtu less than device minimum
[  124.143517][ T7529] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  124.149406][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.154396][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.159788][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.164908][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.169283][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.173367][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.177833][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.182392][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.233958][ T5851] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.487216][ T7541] loop1: detected capacity change from 0 to 128
[  125.113352][ T7552] bridge0: port 3(veth0_to_bridge) entered blocking state
[  125.116009][ T7552] bridge0: port 3(veth0_to_bridge) entered disabled state
[  125.118358][ T7552] veth0_to_bridge: entered allmulticast mode
[  125.123140][ T7552] veth0_to_bridge: entered promiscuous mode
[  125.125297][ T7552] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  125.130627][ T7552] bridge0: port 3(veth0_to_bridge) entered blocking state
[  125.134908][ T7552] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  125.145284][ T7533] loop0: detected capacity change from 0 to 32768
[  125.191037][ T7533] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  125.341122][ T7557] 
[  125.342182][ T7557] ======================================================
[  125.345028][ T7557] WARNING: possible circular locking dependency detected
[  125.348045][ T7557] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  125.352648][ T7557] ------------------------------------------------------
[  125.355482][ T7557] syz.0.592/7557 is trying to acquire lock:
[  125.357902][ T7557] ffff88803a0b31e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320
[  125.362071][ T7557] 
[  125.362071][ T7557] but task is already holding lock:
[  125.364685][ T7557] ffff88803a0b3278 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  125.368909][ T7557] 
[  125.368909][ T7557] which lock already depends on the new lock.
[  125.368909][ T7557] 
[  125.373233][ T7557] 
[  125.373233][ T7557] the existing dependency chain (in reverse order) is:
[  125.376462][ T7557] 
[  125.376462][ T7557] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  125.379316][ T7557]        lock_acquire+0x120/0x360
[  125.381299][ T7557]        down_read+0x46/0x2e0
[  125.383222][ T7557]        ocfs2_init_acl+0x2f9/0x720
[  125.385166][ T7557]        ocfs2_mknod+0x1321/0x2050
[  125.387091][ T7557]        ocfs2_mkdir+0x191/0x440
[  125.388921][ T7557]        vfs_mkdir+0x306/0x510
[  125.390803][ T7557]        do_mkdirat+0x247/0x590
[  125.392678][ T7557]        __x64_sys_mkdirat+0x87/0xa0
[  125.394762][ T7557]        do_syscall_64+0xfa/0x3b0
[  125.396711][ T7557]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.399225][ T7557] 
[  125.399225][ T7557] -> #3 (jbd2_handle){++++}-{0:0}:
[  125.402017][ T7557]        lock_acquire+0x120/0x360
[  125.403944][ T7557]        start_this_handle+0x1fa7/0x21c0
[  125.406120][ T7557]        jbd2__journal_start+0x2c1/0x5b0
[  125.408248][ T7557]        jbd2_journal_start+0x2a/0x40
[  125.410371][ T7557]        ocfs2_start_trans+0x376/0x6d0
[  125.412479][ T7557]        ocfs2_reserve_suballoc_bits+0x711/0x4640
[  125.414984][ T7557]        ocfs2_reserve_new_inode+0x4f4/0xcc0
[  125.417337][ T7557]        ocfs2_mknod+0x83c/0x2050
[  125.419320][ T7557]        ocfs2_mkdir+0x191/0x440
[  125.421271][ T7557]        vfs_mkdir+0x306/0x510
[  125.423153][ T7557]        do_mkdirat+0x247/0x590
[  125.425019][ T7557]        __x64_sys_mkdirat+0x87/0xa0
[  125.427039][ T7557]        do_syscall_64+0xfa/0x3b0
[  125.428977][ T7557]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.431488][ T7557] 
[  125.431488][ T7557] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  125.434918][ T7557]        lock_acquire+0x120/0x360
[  125.437016][ T7557]        down_read+0x46/0x2e0
[  125.438947][ T7557]        ocfs2_start_trans+0x36a/0x6d0
[  125.441119][ T7557]        ocfs2_reserve_suballoc_bits+0x711/0x4640
[  125.443595][ T7557]        ocfs2_reserve_new_inode+0x4f4/0xcc0
[  125.446020][ T7557]        ocfs2_mknod+0x83c/0x2050
[  125.448025][ T7557]        ocfs2_mkdir+0x191/0x440
[  125.449940][ T7557]        vfs_mkdir+0x306/0x510
[  125.451875][ T7557]        do_mkdirat+0x247/0x590
[  125.453808][ T7557]        __x64_sys_mkdirat+0x87/0xa0
[  125.455889][ T7557]        do_syscall_64+0xfa/0x3b0
[  125.457935][ T7557]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.460449][ T7557] 
[  125.460449][ T7557] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  125.463426][ T7557]        lock_acquire+0x120/0x360
[  125.465486][ T7557]        ocfs2_start_trans+0x26b/0x6d0
[  125.467616][ T7557]        ocfs2_truncate_file+0x643/0x1420
[  125.469844][ T7557]        ocfs2_setattr+0x1520/0x1b40
[  125.471933][ T7557]        notify_change+0xb36/0xe40
[  125.473963][ T7557]        do_truncate+0x1a4/0x220
[  125.475951][ T7557]        path_openat+0x306c/0x3830
[  125.477903][ T7557]        do_filp_open+0x1fa/0x410
[  125.479846][ T7557]        do_sys_openat2+0x121/0x1c0
[  125.481924][ T7557]        __x64_sys_open+0x11e/0x150
[  125.484045][ T7557]        do_syscall_64+0xfa/0x3b0
[  125.486087][ T7557]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.488416][ T7557] 
[  125.488416][ T7557] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  125.491479][ T7557]        validate_chain+0xb9b/0x2140
[  125.493244][ T7557]        __lock_acquire+0xab9/0xd20
[  125.494935][ T7557]        lock_acquire+0x120/0x360
[  125.496519][ T7557]        down_write+0x96/0x1f0
[  125.498463][ T7557]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  125.501117][ T7557]        ocfs2_truncate_file+0xda0/0x1420
[  125.503432][ T7557]        ocfs2_setattr+0x1520/0x1b40
[  125.505604][ T7557]        notify_change+0xb36/0xe40
[  125.507679][ T7557]        do_truncate+0x1a4/0x220
[  125.509666][ T7557]        path_openat+0x306c/0x3830
[  125.511740][ T7557]        do_filp_open+0x1fa/0x410
[  125.513763][ T7557]        do_sys_openat2+0x121/0x1c0
[  125.515820][ T7557]        __x64_sys_open+0x11e/0x150
[  125.517540][ T7557]        do_syscall_64+0xfa/0x3b0
[  125.519079][ T7557]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.521536][ T7557] 
[  125.521536][ T7557] other info that might help us debug this:
[  125.521536][ T7557] 
[  125.525575][ T7557] Chain exists of:
[  125.525575][ T7557]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  125.525575][ T7557] 
[  125.531029][ T7557]  Possible unsafe locking scenario:
[  125.531029][ T7557] 
[  125.533907][ T7557]        CPU0                    CPU1
[  125.536013][ T7557]        ----                    ----
[  125.538112][ T7557]   lock(&oi->ip_xattr_sem);
[  125.539913][ T7557]                                lock(jbd2_handle);
[  125.542497][ T7557]                                lock(&oi->ip_xattr_sem);
[  125.545262][ T7557]   lock(&ocfs2_file_ip_alloc_sem_key);
[  125.547386][ T7557] 
[  125.547386][ T7557]  *** DEADLOCK ***
[  125.547386][ T7557] 
[  125.550616][ T7557] 3 locks held by syz.0.592/7557:
[  125.552663][ T7557]  #0: ffff88810a958428 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  125.556385][ T7557]  #1: ffff88803a0b3540 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: do_truncate+0x171/0x220
[  125.560461][ T7557]  #2: ffff88803a0b3278 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  125.564617][ T7557] 
[  125.564617][ T7557] stack backtrace:
[  125.566433][ T7557] CPU: 0 UID: 0 PID: 7557 Comm: syz.0.592 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  125.566445][ T7557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.566451][ T7557] Call Trace:
[  125.566456][ T7557]  <TASK>
[  125.566461][ T7557]  dump_stack_lvl+0x189/0x250
[  125.566474][ T7557]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.566483][ T7557]  ? __pfx__printk+0x10/0x10
[  125.566495][ T7557]  ? print_lock_name+0xde/0x100
[  125.566506][ T7557]  print_circular_bug+0x2ee/0x310
[  125.566516][ T7557]  check_noncircular+0x134/0x160
[  125.566525][ T7557]  validate_chain+0xb9b/0x2140
[  125.566536][ T7557]  __lock_acquire+0xab9/0xd20
[  125.566548][ T7557]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  125.566557][ T7557]  lock_acquire+0x120/0x360
[  125.566567][ T7557]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  125.566576][ T7557]  ? lock_acquire+0x175/0x360
[  125.566586][ T7557]  down_write+0x96/0x1f0
[  125.566594][ T7557]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  125.566602][ T7557]  ? __pfx_down_write+0x10/0x10
[  125.566616][ T7557]  ocfs2_try_remove_refcount_tree+0xb6/0x320
[  125.566626][ T7557]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  125.566635][ T7557]  ? up_write+0x1c4/0x420
[  125.566644][ T7557]  ocfs2_truncate_file+0xda0/0x1420
[  125.566659][ T7557]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  125.566669][ T7557]  ? do_raw_spin_unlock+0x4d/0x240
[  125.566678][ T7557]  ? _raw_spin_unlock+0x28/0x50
[  125.566686][ T7557]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  125.566696][ T7557]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  125.566703][ T7557]  ? ocfs2_rw_lock+0x13a/0x240
[  125.566709][ T7557]  ? __pfx___dquot_initialize+0x10/0x10
[  125.566717][ T7557]  ? __pfx_ocfs2_rw_lock+0x10/0x10
[  125.566723][ T7557]  ? setattr_prepare+0x1e7/0xac0
[  125.566733][ T7557]  ? inode_newsize_ok+0x11b/0x1c0
[  125.566747][ T7557]  ocfs2_setattr+0x1520/0x1b40
[  125.566759][ T7557]  ? __pfx_ocfs2_setattr+0x10/0x10
[  125.566769][ T7557]  ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0
[  125.566780][ T7557]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  125.566792][ T7557]  ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0
[  125.566803][ T7557]  ? current_time+0x222/0x370
[  125.566811][ T7557]  ? evm_inode_setattr+0x1b6/0x7d0
[  125.566820][ T7557]  ? __pfx_current_time+0x10/0x10
[  125.566828][ T7557]  ? try_break_deleg+0x79/0x130
[  125.566836][ T7557]  ? __pfx_ocfs2_setattr+0x10/0x10
[  125.566846][ T7557]  notify_change+0xb36/0xe40
[  125.566857][ T7557]  do_truncate+0x1a4/0x220
[  125.566867][ T7557]  ? __pfx_do_truncate+0x10/0x10
[  125.566876][ T7557]  ? apparmor_file_truncate+0x23e/0x2d0
[  125.566889][ T7557]  path_openat+0x306c/0x3830
[  125.566898][ T7557]  ? arch_stack_walk+0xfc/0x150
[  125.566912][ T7557]  ? __pfx_path_openat+0x10/0x10
[  125.566920][ T7557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.566931][ T7557]  do_filp_open+0x1fa/0x410
[  125.566939][ T7557]  ? __lock_acquire+0xab9/0xd20
[  125.566949][ T7557]  ? __pfx_do_filp_open+0x10/0x10
[  125.566961][ T7557]  ? _raw_spin_unlock+0x28/0x50
[  125.566970][ T7557]  ? alloc_fd+0x64c/0x6c0
[  125.567007][ T7557]  do_sys_openat2+0x121/0x1c0
[  125.567016][ T7557]  ? __se_sys_futex+0x36f/0x400
[  125.567026][ T7557]  ? __pfx_do_sys_openat2+0x10/0x10
[  125.567034][ T7557]  ? ksys_write+0x11e/0x250
[  125.567045][ T7557]  ? rcu_is_watching+0x15/0xb0
[  125.567053][ T7557]  __x64_sys_open+0x11e/0x150
[  125.567063][ T7557]  do_syscall_64+0xfa/0x3b0
[  125.567074][ T7557]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.567083][ T7557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.567090][ T7557]  ? exc_page_fault+0x9f/0xf0
[  125.567099][ T7557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.567106][ T7557] RIP: 0033:0x7ff79658ebe9
[  125.567116][ T7557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.567124][ T7557] RSP: 002b:00007ff7973d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  125.567132][ T7557] RAX: ffffffffffffffda RBX: 00007ff7967b6090 RCX: 00007ff79658ebe9
[  125.567138][ T7557] RDX: 0000000000000020 RSI: 000000000014927e RDI: 00002000000001c0
[  125.567144][ T7557] RBP: 00007ff796611e19 R08: 0000000000000000 R09: 0000000000000000
[  125.567149][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.567154][ T7557] R13: 00007ff7967b6128 R14: 00007ff7967b6090 R15: 00007ffc73456808
[  125.567162][ T7557]  </TASK>
[  125.567284][    C0] vkms_vblank_simulate: vblank timer overrun
[  125.713195][    C0] vkms_vblank_simulate: vblank timer overrun
[  125.765420][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  132.536326][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.538266][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  135.093967][  T792] net_ratelimit: 13 callbacks suppressed
[  135.093985][  T792] TC_ACT_REPEAT abuse ?

VM DIAGNOSIS:
01:19:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001f7b RDI=0000000000001f7c RBP=00000000000003f8 RSP=ffffc90002cce850
R8 =ffff88801f718237 R9 =1ffff11003ee3046 R10=dffffc0000000000 R11=ffffffff854f0b30
R12=dffffc0000000000 R13=ffffffff99af98ee R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f0bac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff7973d16c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc01c3a0f9d CR3=0000000111044000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc01c212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000ffffff01 RBX=ffffffffffffffff RCX=ffffffff819e0041 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc90002e7f900 RBP=ffffc90002e7f978 RSP=ffffc90002e7f888
R8 =ffffc90002e7f903 R9 =fffff520005cff20 R10=dffffc0000000000 R11=fffff520005cff20
R12=fffff520005cff20 R13=ffff888114bf5c08 R14=fffff520005cff21 R15=1ffff920005cff20
RIP=ffffffff8222fee7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32619ff8 CR3=00000000291fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=00005555806583fc 0000555580658350 XMM03=000055558065a0a4 000055558065a0a0
XMM04=0000000000000000 0000555580657490 XMM05=0000000000000000 0000555580657678
XMM06=0000000000000000 000055558065dcf8 XMM07=0300080015f80308 080015f003020800
XMM08=15e80301080015e0 0300080015d80300 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
