last executing test programs:

3m29.481428922s ago: executing program 2 (id=395):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48)

3m29.3872097s ago: executing program 2 (id=397):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x300)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, 0x0)

3m29.336365226s ago: executing program 2 (id=399):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x7ffffffe, 0x0, 0x0)

3m29.273966675s ago: executing program 2 (id=401):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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")
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x48400, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x5, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]})
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0x1001, 0x8b}])

3m28.867501993s ago: executing program 2 (id=406):
creat(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap'])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
pwritev2(r3, &(0x7f0000000200)=[{&(0x7f00000004c0)="c7491e963d4fbf15fa65f07976dd0d470c483574356a6cd1a650ad98a7848500e907960e471984de5447808cd476aa5449c789b3ca62eda670af4104766ffc35f6b91a7fc04e38b988e9dd7a651e7dbd", 0x50}, {&(0x7f0000001540)="218ece53c22dc21742e549fb2d518dc353cf919f59d36661554f82a491c3487d090361b05ed83785bcdba09cdf7db4b7bef75407b190962690dd82ab6312cb92758d310fff4e36523e99e544d972b4d94b837b8570fee5640e8145bd80ebe36bf54e769576624edd22489a1a98d53daeec29df017ebefdb695b6ebca9e1b2cc14a14b563e29759", 0x87}, {&(0x7f0000000540)="a8198520f4ddceee8a577dc106cc44fcd9e6822a5a313608dc36ee5cef871d1ff15a39e9dac36e297e2212bfbf9628d87f6216a2e5ce80b177b25e180b659d1d75c4f4cbe5ea42f889eb0f3e2797ba722babb75ca44f8b3cd969d06de26ecb802a919b325223f4ab0a10a02e293a2eb03e08ed095c332cb856ead1301644a2b51a8af393b9a29fe8537f610621a61e0248d7f988880893c03086114fd4502cc17c44a3dc46e941130cd39f66d9ff655c81429dc41b2176db78f018079e586b79a4311d9334a7", 0xc6}, {&(0x7f0000000640)="28c9d348bd3fc2ebeaf9e22eea95ff627029f34c559d2ef52f22f2a90e79c633907d1237e52de25867e39d105f58439173dd57bd25bb01eee0256d4304fb4ad51fefae70d850a3028761f1237731004fd182e93f24cd73ccd9401a8e", 0x5c}, {&(0x7f00000006c0)="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", 0xe00}], 0x5, 0x8, 0x9, 0x3)

3m28.605241992s ago: executing program 2 (id=408):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000002ea19e7000900010073797a30000000003c000000bc0a01"], 0xd0}}, 0x0)

3m28.464528114s ago: executing program 32 (id=408):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000002ea19e7000900010073797a30000000003c000000bc0a01"], 0xd0}}, 0x0)

2.878385421s ago: executing program 3 (id=2504):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)

2.877546048s ago: executing program 3 (id=2506):
r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2)
read(r0, &(0x7f0000000080)=""/77, 0xffffff0f)
read(r0, &(0x7f0000000280)=""/96, 0x60)

2.806937074s ago: executing program 1 (id=2507):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @printk]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="410c5bbca14ce79f33de0163e557", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

2.806693368s ago: executing program 3 (id=2508):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$eJzs3c9rHFUcAPDvTHaT/k4qClZRAx5aEPPLgj9QaMGjiKCevDQkaSnd/qCJYEOEFrEnjwXBiwiCF2+KF0FKT4p46UX6H0ilSBBaxUNkprPJttlNds1upnU/H5jkvXm7+95k+c6bHy/zAuhbo9mPNOJARFxMIoaL9UlEVPNUJeLI3dfdWV6a+Wt5aSaJlZW3/0jy19xeXpqJhvdkdhdv2xER168l8cjA+nrnLyyemq7V5s4X+fGF0+fG5y8sPn/y9PSJuRNzZ6ampl6eOjz54sRU17b1o6d+/uafy29+/Om+G1d+v/7dviSOxJ6irHE7umU0Rlf/Jo0qEfF6tysryUCxPWnDuqRSYoPoSNrwHT4ewzEQa1/ecFz7ttTGAQA9sZItAECfSfT/ANBn6tcBbi8vzdSXcq9IANvl1tHIb9RncX+nWO6WVOJI/ntHPg5g159JNN7WTepjB7Yo+4yv36t+ni3Ro/vwQHMXL+U3/pv0/0ke/yP5KJ718T8QUewftub+fYj4h+2zlfh/qwv1i38AAAAAAADonqtHI+KlZvf/0tXxP9Hk/t9QREx0of7N7/+lN7tQDdDEraMRrxbP9rl3/N/qE11GBorc3oh4LKrJ8ZO1uSz290XEoagOZfnJ5h+f7zLevTz5Q6v6G8f/ZUtWf30sYNGOm5Whe98zO70wvdXtBiJuXYp4otIs/pPV/j9pMf73WJt1fL/01dOtyjaPf6BXVr6IONi0/197cl2y8fP5xvPjgfH6UcF6i8de+7BV/W3F/9q/KQFdlPX/uzaO/5Gk8Xmd853X8cntic9alf3X4//B5J38qaKDxboPphcWzk9GDCZvrF/fvUeIwkOtHg/1eMni/9Czzc//Nzr+r0bEuTbr/PLH6q+tykbzSHX8D2XI4n+2o/6/88TfvzzZclfRXv9/OO/TDxVrXP+DjbUboGW3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuimNiD2RpGOr6TQdG4vYHRGPxq60dnZ+4bnjZ98/M5uVRYxENT1+sjY3ERHDd/NJlp/M02v5qfvyL0TE/oi4MrQzz4/NnK3Nlr3xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDY3WL+/8xvQ2W3DgDomR1lNwAA2Hb6fwDoP/p/AOg/Hff/P+3tTUMAgG3j/B8A+o/+HwAAAAAAAAAAAAAAAAAAAAAAAAB6av8zV28kEXHxlZ35khksyqqltgzotbTsBgClGSi7AUBpKu28KElWzwmA/w/n+ECySXnrKUJcQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH8cPNDu/P9tzRQKPETM3gf9y/z/0L8c1UP/Mv8/YP5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY3PyFxVPTtdrceYluJyoPRjMehMRQRDwAzZDoIFH2ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfBvwEAAP//snoPXw==")
mkdir(0x0, 0x0)
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')

2.702774527s ago: executing program 1 (id=2509):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_FLUSHABLE(r0, 0x12, 0x8, 0x0, &(0x7f00000001c0))

2.602887299s ago: executing program 1 (id=2510):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0)

2.601930314s ago: executing program 3 (id=2511):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB=' B\a'], 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffd)

1.008776107s ago: executing program 1 (id=2515):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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")
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e", 0x3}], 0x1}}], 0x1, 0x4c0c0)
mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
syz_open_dev$loop(&(0x7f0000000100), 0x760, 0x103382)

1.008362322s ago: executing program 3 (id=2516):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x0)

919.300458ms ago: executing program 0 (id=2517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20001}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}, @FRA_DST={0x14, 0x7, @loopback}]}, 0x38}}, 0x0)

857.36464ms ago: executing program 0 (id=2518):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd2b, 0xffffffff, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x4, 0x0, 0x0, 0x82, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010100, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

856.913568ms ago: executing program 1 (id=2519):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3001000000080004400000000a080009400000000308000340000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0)

799.478792ms ago: executing program 0 (id=2520):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='oom_score_adj\x00')
write$khugepaged_scan(r0, &(0x7f0000000000), 0x8)

641.214654ms ago: executing program 1 (id=2521):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000a00)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000100)=[{0x3137, 0x2000, 0x0, 0x0}], 0x1})

640.903707ms ago: executing program 0 (id=2522):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x40})
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r2=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, r2, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000})

359.301088ms ago: executing program 0 (id=2523):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f0000000000)={[{@norecovery}, {@order_relaxed}, {}, {@order_relaxed}, {@discard}, {@errors_continue}, {@nobarrier}, {@order_relaxed}], [], 0x2c}, 0x3, 0xeec, &(0x7f0000000f40)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fsync(r0)

199.058486ms ago: executing program 0 (id=2524):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9)

0s ago: executing program 3 (id=2525):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
fallocate(r0, 0x0, 0xffffffff, 0x8009)

kernel console output (not intermixed with test programs):

ibute type 1 has an invalid length.
[  207.071474][ T9589] loop3: detected capacity change from 0 to 512
[  207.075875][ T9589] EXT4-fs: Ignoring removed orlov option
[  207.078895][ T9589] EXT4-fs (loop3): Test dummy encryption mode enabled
[  207.089960][ T9589] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.109273][ T9589] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.1453: Directory hole found for htree leaf block 0
[  207.116058][ T9589] EXT4-fs (loop3): Remounting filesystem read-only
[  207.140518][ T6945] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  207.312265][   T47] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  207.333810][ T9598] loop3: detected capacity change from 0 to 136
[  207.485067][   T47] usb 2-1: config 1 interface 0 altsetting 105 bulk endpoint 0x82 has invalid maxpacket 1023
[  207.489040][   T47] usb 2-1: config 1 interface 0 altsetting 105 bulk endpoint 0x3 has invalid maxpacket 64
[  207.493053][   T47] usb 2-1: config 1 interface 0 has no altsetting 0
[  207.498878][   T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  207.502303][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.505406][   T47] usb 2-1: Product: syz
[  207.507262][   T47] usb 2-1: Manufacturer: syz
[  207.509017][   T47] usb 2-1: SerialNumber: syz
[  207.517026][ T9585] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  207.519929][ T9585] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  207.642686][ T5899] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  207.731847][   T47] usb 2-1: bad CDC descriptors
[  207.738891][   T47] usb 2-1: USB disconnect, device number 20
[  207.795576][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short
[  207.800433][ T5899] usb 1-1: not running at top speed; connect to a high speed hub
[  207.806809][ T5899] usb 1-1: config 4 has an invalid interface number: 156 but max is 0
[  207.810177][ T5899] usb 1-1: config 4 has no interface number 0
[  207.813710][ T5899] usb 1-1: config 4 interface 156 has no altsetting 0
[  207.819252][ T5899] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  207.823140][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.826401][ T5899] usb 1-1: Product: syz
[  207.832668][ T5899] usb 1-1: Manufacturer: syz
[  207.834677][ T5899] usb 1-1: SerialNumber: syz
[  208.055009][ T5899] usb 1-1: USB disconnect, device number 20
[  208.510418][ T9613] netlink: 'syz.1.1463': attribute type 39 has an invalid length.
[  209.345208][ T9619] loop1: detected capacity change from 0 to 32768
[  209.349841][ T9619] (syz.1.1465,9619,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  209.367812][ T9619] (syz.1.1465,9619,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  209.397175][ T9619] JBD2: Ignoring recovery information on journal
[  209.451935][ T9619] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  209.498326][ T9619] syz.1.1465: attempt to access beyond end of device
[  209.498326][ T9619] loop1: rw=2051, sector=28680, nr_sectors = 28664 limit=32768
[  209.504408][   T33] audit: type=1400 audit(1759293154.802:328): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9635 comm="syz.0.1472"
[  209.511967][ T9619] (syz.1.1465,9619,0):ocfs2_trim_group:7529 ERROR: status = -5
[  209.515564][ T9619] (syz.1.1465,9619,0):ocfs2_trim_mainbm:7640 ERROR: status = -5
[  209.567237][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[  209.687497][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1473'.
[  210.175872][ T9661] loop1: detected capacity change from 0 to 64
[  210.216354][ T9661] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  210.226796][ T9661] BFS-fs: bfs_fill_super(): Last block not available on loop1: 4139327
[  210.783482][   T47] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  210.794682][ T9680] loop0: detected capacity change from 0 to 40427
[  210.840522][ T9680] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  210.845975][ T9680] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  210.935730][   T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.939870][   T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  210.943867][   T47] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  210.947543][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  210.950788][   T47] usb 4-1: SerialNumber: syz
[  210.963238][ T5897] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  211.113942][ T5897] usb 2-1: Using ep0 maxpacket: 32
[  211.119454][ T5897] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46
[  211.123751][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.132020][ T5897] usb 2-1: config 0 descriptor??
[  211.187007][   T47] usb 4-1: 0:2 : does not exist
[  211.234387][   T47] usb 4-1: USB disconnect, device number 16
[  211.256770][ T7019] udevd[7019]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  211.351891][ T5899] usb 2-1: USB disconnect, device number 21
[  211.466968][ T9701] pimreg: tun_chr_ioctl cmd 21531
[  211.523555][ T9703] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address
[  211.528048][ T9703] bond0: (slave virt_wifi0): Error -95 calling set_mac_address
[  211.567594][ T9705] loop0: detected capacity change from 0 to 512
[  211.611593][ T9705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.616845][ T9705] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.627585][ T9705] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1503: corrupted xattr block 33: invalid header
[  211.639393][ T9705] fscrypt (loop0, inode 15): Error -117 getting encryption context
[  211.663301][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.876102][ T9721] loop0: detected capacity change from 0 to 1024
[  211.890588][ T9721] EXT4-fs: Ignoring removed orlov option
[  211.892930][ T9721] EXT4-fs: Ignoring removed oldalloc option
[  211.899931][ T9721] EXT4-fs: Ignoring removed bh option
[  211.907298][ T9721] EXT4-fs (loop0): inodes count not valid: 262176 vs 32
[  211.965095][ T9725] netlink: 'syz.1.1510': attribute type 4 has an invalid length.
[  212.180948][ T9728] loop0: detected capacity change from 0 to 2048
[  212.216394][ T9728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.299488][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.534827][ T9740] loop1: detected capacity change from 0 to 1024
[  212.541023][ T9740] EXT4-fs: Ignoring removed nomblk_io_submit option
[  212.549422][ T9740] EXT4-fs: Ignoring removed bh option
[  212.570621][ T9740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.457333][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.671299][ T9752] loop0: detected capacity change from 0 to 32768
[  213.721891][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'.
[  214.306963][ T9774] loop1: detected capacity change from 0 to 32768
[  214.350558][ T9774] XFS (loop1): Metadata CRC error detected at xfs_sb_read_verify+0x2ec/0x400, xfs_sb block 0x0 
[  214.355766][ T9774] XFS (loop1): Unmount and run xfs_repair
[  214.357585][ T9774] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  214.359986][ T9774] 00000000: 58 46 53 42 00 00 00 00 00 00 00 00 00 00 10 00  XFSB............
[  214.362762][ T9774] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  214.367159][ T9774] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  214.369876][ T9774] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 11 40  ...............@
[  214.373623][ T9774] 00000040: 00 00 00 00 00 00 11 41 00 00 00 00 00 00 11 42  .......A.......B
[  214.376699][ T9774] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  214.379417][ T9774] 00000060: 00 00 04 3e b4 b5 02 00 04 00 00 04 00 00 00 00  ...>............
[  214.382103][ T9774] 00000070: 00 00 00 00 00 00 00 00 0c 09 0a 02 0c 00 00 0a  ................
[  214.385243][ T9774] XFS (loop1): SB validate failed with error -74.
[  214.433570][ T5899] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  214.509380][ T9790] loop3: detected capacity change from 0 to 32768
[  214.535930][   T33] audit: type=1800 audit(1759293159.831:329): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1539" name="file1" dev="loop3" ino=4 res=0 errno=0
[  214.620073][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.628170][ T5899] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  214.633014][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.646125][ T5899] usb 1-1: config 0 descriptor??
[  214.933505][ T9804] loop3: detected capacity change from 0 to 32768
[  214.939375][ T9804] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1543 (9804)
[  214.970193][ T9804] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.975854][ T9804] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  215.061579][ T5899] hid (null): global environment stack underflow
[  215.082473][ T5899] itetech 0003:258A:6A88.000A: global environment stack underflow
[  215.086089][ T5899] itetech 0003:258A:6A88.000A: item 0 4 1 11 parsing failed
[  215.089868][ T5899] itetech 0003:258A:6A88.000A: probe with driver itetech failed with error -22
[  215.124834][ T9804] BTRFS info (device loop3): enabling ssd optimizations
[  215.127668][ T9804] BTRFS info (device loop3): enabling free space tree
[  215.191531][ T6945] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.282571][ T5899] usb 1-1: USB disconnect, device number 21
[  215.637066][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'.
[  215.640371][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'.
[  215.917346][ T9843] x_tables: ip_tables: DSCP.0 target: invalid size 8 (kernel) != (user) 16
[  216.617221][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1567'.
[  216.622435][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1567'.
[  216.818782][ T9881] loop1: detected capacity change from 0 to 1024
[  216.866462][ T9881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.878586][ T9881] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.1571: reserved inode found cleared - inode=2
[  216.885096][ T9881] EXT4-fs (loop1): Remounting filesystem read-only
[  216.910345][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.953746][ T5897] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  217.129557][ T5897] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  217.133113][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.142222][ T5897] usb 1-1: config 0 descriptor??
[  217.147964][ T5897] gspca_main: spca508-2.14.0 probing 8086:0110
[  217.749320][ T5897] gspca_spca508: reg_read err -32
[  217.753247][ T5897] gspca_spca508: reg_read err -32
[  217.959822][ T9901] [U] 
[  218.076120][ T5897] gspca_spca508: reg_read err -71
[  218.085119][ T5897] gspca_spca508: reg_read err -71
[  218.087298][ T5897] gspca_spca508: reg write: error -71
[  218.089619][ T5897] spca508 1-1:0.0: probe with driver spca508 failed with error -71
[  218.108262][ T5897] usb 1-1: USB disconnect, device number 22
[  218.120573][ T9917] loop1: detected capacity change from 0 to 16
[  218.132297][ T9917] erofs (device loop1): mounted with root inode @ nid 36.
[  218.274053][ T9920] erofs (device loop1): corrupted dir block 8200 @ nid 36
[  218.282745][ T9920] erofs (device loop1): corrupted dir block 8200 @ nid 36
[  218.286793][ T9920] erofs (device loop1): corrupted dir block 8200 @ nid 36
[  221.400054][ T9957] loop1: detected capacity change from 0 to 512
[  221.408033][ T9957] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  221.444656][ T9957] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1591: bg 0: block 104: invalid block bitmap
[  221.456436][ T9957] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  221.459489][ T9957] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1591: invalid indirect mapped block 1 (level 1)
[  221.468229][ T9957] EXT4-fs (loop1): 1 truncate cleaned up
[  221.471199][ T9957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.513900][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.681421][ T9969] loop1: detected capacity change from 0 to 1024
[  221.690807][ T9969] EXT4-fs: Ignoring removed orlov option
[  221.697037][ T9969] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  221.739815][ T9969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.799083][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.889625][ T9962] loop0: detected capacity change from 0 to 32768
[  221.952399][ T9962] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.009877][ T9962] XFS (loop0): Ending clean mount
[  222.025088][ T9962] XFS (loop0): Quotacheck needed: Please wait.
[  222.101181][ T9962] XFS (loop0): Quotacheck: Done.
[  222.327951][ T5847] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.656215][   T33] audit: type=1326 audit(1759293167.941:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.1.1601" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21eb98ec29 code=0x0
[  223.235718][ T5899] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  223.459914][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.478437][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.482045][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  223.488508][ T5899] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  223.491554][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.865382][ T5899] usb 1-1: config 0 descriptor??
[  224.345277][ T5899] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  224.603819][T10050] random: crng reseeded on system resumption
[  224.650078][T10052] loop1: detected capacity change from 0 to 256
[  224.662151][T10052] exfat: Deprecated parameter 'namecase'
[  224.673192][T10052] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  225.133483][T10062] loop1: detected capacity change from 0 to 32768
[  225.146958][T10062] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  225.154876][T10062] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  225.195683][T10062] XFS (loop1): Ending clean mount
[  225.257578][ T5851] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  225.531250][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'.
[  225.704082][ T5911] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  225.737541][T10096] loop1: detected capacity change from 0 to 512
[  225.740882][T10096] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  225.750619][T10096] EXT4-fs (loop1): 1 truncate cleaned up
[  225.756449][T10096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.788348][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.890681][ T5911] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  225.893954][ T5911] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  225.908235][ T5911] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  225.912053][ T5911] usb 4-1: config 220 has no interface number 2
[  225.914512][ T5911] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  225.939403][ T5911] usb 4-1: config 220 interface 0 has no altsetting 0
[  225.942968][ T5911] usb 4-1: config 220 interface 76 has no altsetting 0
[  225.945882][ T5911] usb 4-1: config 220 interface 1 has no altsetting 0
[  225.950953][ T5911] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  225.954531][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.959519][ T5911] usb 4-1: Product: syz
[  225.960980][ T5911] usb 4-1: Manufacturer: syz
[  225.965463][ T5911] usb 4-1: SerialNumber: syz
[  226.188340][ T5911] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  226.190831][ T5911] uvcvideo 4-1:220.0: No valid video chain found.
[  226.192986][ T5911] usb 4-1: selecting invalid altsetting 0
[  226.216285][ T5911] usb 4-1: selecting invalid altsetting 0
[  226.218490][ T5911] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  226.222821][ T5911] usb 4-1: USB disconnect, device number 17
[  226.762835][   T24] usb 1-1: USB disconnect, device number 23
[  227.396307][T10127] loop3: detected capacity change from 0 to 1024
[  228.040481][T10127] hfsplus: xattr searching failed
[  228.158345][T10134] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15)
[  228.446049][ T6021] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  228.462247][T10138] loop1: detected capacity change from 0 to 40427
[  228.471875][T10138] F2FS-fs (loop1): invalid crc value
[  228.527386][T10138] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  228.531377][T10138] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  228.554051][   T33] audit: type=1804 audit(1759293173.840:331): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1653" name="/newroot/546/file1/file1" dev="loop1" ino=10 res=1 errno=0
[  228.591526][ T5851] syz-executor: attempt to access beyond end of device
[  228.591526][ T5851] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  228.597392][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  228.597413][ T5851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  228.597422][ T5851] Call Trace:
[  228.597429][ T5851]  <TASK>
[  228.597436][ T5851]  dump_stack_lvl+0x189/0x250
[  228.597462][ T5851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  228.597477][ T5851]  ? __pfx_queue_work_on+0x10/0x10
[  228.597489][ T5851]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  228.597506][ T5851]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  228.597532][ T5851]  f2fs_handle_critical_error+0x37c/0x540
[  228.597554][ T5851]  f2fs_write_end_io+0x886/0xb60
[  228.597587][ T5851]  __submit_merged_bio+0x27a/0x6a0
[  228.597606][ T5851]  __submit_merged_write_cond+0x255/0x530
[  228.597632][ T5851]  f2fs_write_data_pages+0x261d/0x3000
[  228.597679][ T5851]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  228.597732][ T5851]  ? __mod_zone_page_state+0xd7/0x140
[  228.597759][ T5851]  ? folios_put_refs+0x58b/0x670
[  228.597790][ T5851]  ? __lock_acquire+0xab9/0xd20
[  228.597817][ T5851]  ? do_raw_spin_lock+0x121/0x290
[  228.597843][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  228.597859][ T5851]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  228.597874][ T5851]  do_writepages+0x32e/0x550
[  228.597899][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  228.597917][ T5851]  filemap_fdatawrite+0x199/0x240
[  228.597932][ T5851]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  228.598012][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  228.598032][ T5851]  f2fs_sync_dirty_inodes+0x31f/0x830
[  228.598063][ T5851]  f2fs_write_checkpoint+0x93e/0x2440
[  228.598079][ T5851]  ? __lock_acquire+0xab9/0xd20
[  228.598121][ T5851]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  228.598189][ T5851]  kill_f2fs_super+0x2cc/0x6d0
[  228.598214][ T5851]  ? __pfx_kill_f2fs_super+0x10/0x10
[  228.598252][ T5851]  ? shrinker_free+0x2ce/0x3e0
[  228.598275][ T5851]  deactivate_locked_super+0xbc/0x130
[  228.598299][ T5851]  cleanup_mnt+0x425/0x4c0
[  228.598319][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.598338][ T5851]  task_work_run+0x1d4/0x260
[  228.598358][ T5851]  ? __pfx_task_work_run+0x10/0x10
[  228.598372][ T5851]  ? __x64_sys_umount+0x122/0x160
[  228.598389][ T5851]  ? exit_to_user_mode_loop+0x40/0x130
[  228.598412][ T5851]  exit_to_user_mode_loop+0xe9/0x130
[  228.598430][ T5851]  do_syscall_64+0x2bd/0xfa0
[  228.598445][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.598460][ T5851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.598473][ T5851]  ? exc_page_fault+0xab/0x100
[  228.598491][ T5851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.598504][ T5851] RIP: 0033:0x7f21eb98ff57
[  228.598518][ T5851] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  228.598529][ T5851] RSP: 002b:00007ffc1ea2c088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  228.598546][ T5851] RAX: 0000000000000000 RBX: 00007f21eba11c2d RCX: 00007f21eb98ff57
[  228.598555][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1ea2c140
[  228.598563][ T5851] RBP: 00007ffc1ea2c140 R08: 0000000000000000 R09: 0000000000000000
[  228.598571][ T5851] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1ea2d1d0
[  228.598580][ T5851] R13: 00007f21eba11c2d R14: 0000000000037c52 R15: 00007ffc1ea2d210
[  228.598607][ T5851]  </TASK>
[  228.598614][ T5851] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  228.625139][ T6021] usb 4-1: Using ep0 maxpacket: 32
[  228.726890][ T6021] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  228.732823][ T6021] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  228.736110][ T6021] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  228.738725][ T6021] usb 4-1: Product: syz
[  228.740181][ T6021] usb 4-1: Manufacturer: syz
[  228.741820][ T6021] usb 4-1: SerialNumber: syz
[  228.745323][ T6021] usb 4-1: config 0 descriptor??
[  228.747993][T10136] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  228.754698][ T6021] hub 4-1:0.0: bad descriptor, ignoring hub
[  228.757379][ T6021] hub 4-1:0.0: probe with driver hub failed with error -5
[  229.065362][ T6021] usb 4-1: USB disconnect, device number 18
[  229.404386][T10154] loop1: detected capacity change from 0 to 32768
[  229.429167][T10154] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  229.438686][T10154] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  229.473470][T10154] XFS (loop1): Ending clean mount
[  229.540498][ T5851] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  230.508995][T10197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1671'.
[  230.559895][T10199] loop3: detected capacity change from 0 to 128
[  230.601188][T10199] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  230.616385][T10199] hpfs: filesystem error: improperly stopped
[  230.625538][T10199] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  230.636602][T10199] hpfs: You really don't want any checks? You are crazy...
[  230.642620][T10199] hpfs: hpfs_map_sector(): read error
[  230.644367][T10199] hpfs: code page support is disabled
[  230.667030][T10199] hpfs: hpfs_map_4sectors(): unaligned read
[  230.669750][T10199] hpfs: hpfs_map_4sectors(): unaligned read
[  230.688210][T10199] hpfs: filesystem error: unable to find root dir
[  231.285418][   T47] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  231.495534][   T47] usb 1-1: Using ep0 maxpacket: 32
[  231.508263][   T47] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  231.530287][   T47] usb 1-1: config 0 has no interface number 0
[  231.566601][   T47] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  231.602066][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.622987][   T47] usb 1-1: Product: syz
[  231.647866][   T47] usb 1-1: Manufacturer: syz
[  231.661851][   T47] usb 1-1: SerialNumber: syz
[  231.704489][   T47] usb 1-1: config 0 descriptor??
[  231.724035][   T47] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  231.799270][T10268] input: syz1 as /devices/virtual/input/input10
[  231.938007][   T47] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  232.058000][   T47] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  232.159649][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  232.199489][   T33] audit: type=1326 audit(1759293177.489:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.1684" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60fa98ec29 code=0x0
[  232.211777][T10280] loop1: detected capacity change from 0 to 2048
[  232.218228][T10280] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  232.233009][ T7019] udevd[7019]: incorrect nilfs2 checksum on /dev/loop1
[  232.237894][T10283] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  232.284309][T10285] program syz.3.1685 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.341375][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  232.344555][   T47] usb 1-1: USB disconnect, device number 24
[  232.358962][   T47] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  232.377642][   T47] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  232.383136][   T47] quatech2 1-1:0.51: device disconnected
[  232.452597][T10291] sp0: Synchronizing with TNC
[  232.926736][T10260] Bluetooth: hci3: Frame reassembly failed (-84)
[  232.931771][T10315] Bluetooth: hci3: Frame reassembly failed (-84)
[  233.088836][T10313] loop1: detected capacity change from 0 to 40427
[  233.093850][T10313] F2FS-fs (loop1): invalid crc value
[  233.134025][T10313] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  233.146458][T10313] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  233.174057][T10313] syz.1.1699: attempt to access beyond end of device
[  233.174057][T10313] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  234.956321][ T5853] Bluetooth: hci3: command 0x1003 tx timeout
[  234.956601][ T5850] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  236.000809][T10373] loop3: detected capacity change from 0 to 512
[  236.033213][T10373] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  236.080475][T10373] EXT4-fs (loop3): 1 truncate cleaned up
[  236.102299][T10373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.180753][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.268206][T10391] loop3: detected capacity change from 0 to 1024
[  236.282113][T10391] hfsplus: failed to load catalog file
[  236.416240][   T47] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  236.426234][T10402] bridge: RTM_NEWNEIGH with invalid ether address
[  236.479523][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'.
[  236.566724][   T47] usb 2-1: Using ep0 maxpacket: 32
[  236.570101][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.574591][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.584769][   T47] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  236.588527][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.595495][   T47] usb 2-1: config 0 descriptor??
[  236.626132][ T5897] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  236.778876][ T5897] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  236.782811][ T5897] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[  236.789718][ T5897] usb 4-1: config 220 interface 0 has no altsetting 0
[  236.803622][ T5897] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  236.806903][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.810116][ T5897] usb 4-1: Product: syz
[  236.811922][ T5897] usb 4-1: Manufacturer: syz
[  236.813883][ T5897] usb 4-1: SerialNumber: syz
[  236.980783][T10421] loop0: detected capacity change from 0 to 40427
[  237.005027][T10421] F2FS-fs (loop0): invalid crc value
[  237.027125][   T47] elecom 0003:056E:010D.000C: unknown main item tag 0x7
[  237.043465][   T33] audit: type=1326 audit(1759293182.329:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10395 comm="syz.3.1730" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fa98ec29 code=0x7ffc0000
[  237.063137][   T33] audit: type=1326 audit(1759293182.349:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10395 comm="syz.3.1730" exe="/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f60fa98ec29 code=0x7ffc0000
[  237.073227][   T33] audit: type=1326 audit(1759293182.349:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10395 comm="syz.3.1730" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fa98ec29 code=0x7ffc0000
[  237.075346][   T47] elecom 0003:056E:010D.000C: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.1-1/input0
[  237.080698][   T33] audit: type=1326 audit(1759293182.359:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10395 comm="syz.3.1730" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fa98ec29 code=0x7ffc0000
[  237.099011][ T5897] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22
[  237.107181][ T5897] usb 4-1: USB disconnect, device number 19
[  237.154597][T10421] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  237.159262][T10421] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  237.199061][ T5847] syz-executor: attempt to access beyond end of device
[  237.199061][ T5847] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  237.211846][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  237.211859][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.211865][ T5847] Call Trace:
[  237.211869][ T5847]  <TASK>
[  237.211874][ T5847]  dump_stack_lvl+0x189/0x250
[  237.211893][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.211902][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[  237.211910][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  237.211922][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  237.211936][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[  237.211955][ T5847]  f2fs_write_end_io+0x886/0xb60
[  237.211983][ T5847]  __submit_merged_bio+0x27a/0x6a0
[  237.212002][ T5847]  __submit_merged_write_cond+0x255/0x530
[  237.212027][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[  237.212065][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  237.212092][ T5847]  ? kernel_text_address+0xa5/0xe0
[  237.212119][ T5847]  ? stack_depot_save_flags+0x40/0x860
[  237.212147][ T5847]  ? __lock_acquire+0xab9/0xd20
[  237.212164][ T5847]  ? do_raw_spin_lock+0x121/0x290
[  237.212180][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  237.212189][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  237.212199][ T5847]  do_writepages+0x32e/0x550
[  237.212214][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  237.212225][ T5847]  filemap_fdatawrite+0x199/0x240
[  237.212235][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  237.212266][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[  237.212277][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[  237.212295][ T5847]  f2fs_write_checkpoint+0x93e/0x2440
[  237.212305][ T5847]  ? __lock_acquire+0xab9/0xd20
[  237.212330][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  237.212399][ T5847]  kill_f2fs_super+0x2cc/0x6d0
[  237.212416][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[  237.212434][ T5847]  ? shrinker_free+0x2ce/0x3e0
[  237.212449][ T5847]  deactivate_locked_super+0xbc/0x130
[  237.212464][ T5847]  cleanup_mnt+0x425/0x4c0
[  237.212477][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.212488][ T5847]  task_work_run+0x1d4/0x260
[  237.212500][ T5847]  ? __pfx_task_work_run+0x10/0x10
[  237.212508][ T5847]  ? __x64_sys_umount+0x122/0x160
[  237.212519][ T5847]  ? exit_to_user_mode_loop+0x40/0x130
[  237.212532][ T5847]  exit_to_user_mode_loop+0xe9/0x130
[  237.212543][ T5847]  do_syscall_64+0x2bd/0xfa0
[  237.212559][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.212568][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.212576][ T5847]  ? exc_page_fault+0xab/0x100
[  237.212587][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.212594][ T5847] RIP: 0033:0x7f2caab8ff57
[  237.212603][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  237.212610][ T5847] RSP: 002b:00007fff8dedfc28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  237.212620][ T5847] RAX: 0000000000000000 RBX: 00007f2caac11c2d RCX: 00007f2caab8ff57
[  237.212626][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8dedfce0
[  237.212631][ T5847] RBP: 00007fff8dedfce0 R08: 0000000000000000 R09: 0000000000000000
[  237.212636][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8dee0d70
[  237.212641][ T5847] R13: 00007f2caac11c2d R14: 0000000000039e02 R15: 00007fff8dee0db0
[  237.212656][ T5847]  </TASK>
[  237.212660][ T5847] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  237.238576][ T6021] usb 2-1: USB disconnect, device number 22
[  238.406081][T10469] netlink: 'syz.0.1748': attribute type 1 has an invalid length.
[  238.713085][T10486] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1755'.
[  238.946389][ T5897] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  239.110018][ T5897] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  239.113172][ T5897] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  239.126484][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0
[  239.135120][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  239.141386][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  239.144603][ T5897] usb 4-1: Product: syz
[  239.154324][ T5897] usb 4-1: Manufacturer: syz
[  239.156884][ T5897] usb 4-1: SerialNumber: syz
[  239.163307][ T5897] usb 4-1: config 0 descriptor??
[  239.168057][ T5897] hub 4-1:0.0: bad descriptor, ignoring hub
[  239.170394][ T5897] hub 4-1:0.0: probe with driver hub failed with error -5
[  239.200757][ T5897] usb 4-1: selecting invalid altsetting 0
[  239.500157][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'.
[  239.509703][   T47] usb 4-1: USB disconnect, device number 20
[  239.580502][T10528] loop0: detected capacity change from 0 to 256
[  239.591742][T10528] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x44702e96, utbl_chksum : 0xe619d30d)
[  239.727065][T10532] netlink: 'syz.0.1777': attribute type 21 has an invalid length.
[  239.730258][T10532] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1777'.
[  239.733918][T10532] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1777'.
[  240.145527][T10550] loop3: detected capacity change from 0 to 512
[  240.178509][T10550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  240.183035][T10550] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.287653][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  240.336711][ T5897] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  240.366702][T10561] netlink: 'syz.1.1790': attribute type 10 has an invalid length.
[  240.378368][T10560] netlink: 'syz.3.1789': attribute type 83 has an invalid length.
[  240.379401][T10561] team0: Device veth1_macvtap failed to register rx_handler
[  240.496519][ T5897] usb 1-1: Using ep0 maxpacket: 32
[  240.505750][ T5897] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  240.510556][ T5897] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  240.513504][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  240.520608][ T5897] usb 1-1: config 1 has no interface number 0
[  240.525881][ T5897] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  240.538842][ T5897] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  240.544429][ T5897] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  240.548483][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.579987][ T5897] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  240.791506][ T5897] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  241.480606][   T10] usb 1-1: USB disconnect, device number 25
[  241.528497][   T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  242.348371][T10593] comedi comedi3: board detection failed
[  242.425954][T10588] loop1: detected capacity change from 0 to 32768
[  242.436729][T10588] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1801 (10588)
[  242.446418][ T6021] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  242.455124][T10588] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  242.459668][T10588] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  242.545108][T10588] BTRFS info (device loop1): enabling ssd optimizations
[  242.548623][T10588] BTRFS info (device loop1): enabling free space tree
[  242.617063][ T6021] usb 4-1: Using ep0 maxpacket: 32
[  242.622843][ T6021] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  242.625734][ T6021] usb 4-1: config 0 has no interface number 0
[  242.633756][T10614] delete_channel: no stack
[  242.639737][ T6021] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  242.642684][ T6021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.645094][ T6021] usb 4-1: Product: syz
[  242.655462][ T6021] usb 4-1: Manufacturer: syz
[  242.662228][ T6021] usb 4-1: SerialNumber: syz
[  242.673905][ T6021] usb 4-1: config 0 descriptor??
[  242.688118][ T6021] quatech2 4-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected
[  242.739243][ T5851] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  242.853825][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'.
[  242.887593][ T6021] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  242.893916][ T6021] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  243.368830][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  243.369422][ T5897] usb 4-1: USB disconnect, device number 21
[  243.670448][ T5897] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  243.679285][T10630] loop0: detected capacity change from 0 to 32768
[  243.690257][ T5897] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  243.696920][T10630] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  243.707265][ T5897] quatech2 4-1:0.1: device disconnected
[  243.731875][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  244.061203][T10640] random: crng reseeded on system resumption
[  244.563436][T10663] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type
[  244.839698][T10669] loop1: detected capacity change from 0 to 8
[  244.845103][T10669] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  245.032162][T10671] loop0: detected capacity change from 0 to 4096
[  245.478646][T10687] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[  245.488255][T10687] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[  245.621447][T10689] binder: 10688:10689 unknown command 0
[  245.623924][T10689] binder: 10688:10689 ioctl c0306201 200000000080 returned -22
[  245.719936][T10691] loop3: detected capacity change from 0 to 4096
[  245.730583][T10691] EXT4-fs (loop3): Test dummy encryption mode enabled
[  245.735266][T10691] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 2304
[  246.160373][T10699] loop3: detected capacity change from 0 to 32768
[  246.189425][T10699] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  246.214607][T10699] XFS (loop3): Ending clean mount
[  246.224642][T10699] XFS (loop3): Quotacheck needed: Please wait.
[  246.273216][T10699] XFS (loop3): Quotacheck: Done.
[  246.305446][ T6945] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  246.615940][   T47] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  246.765969][   T47] usb 1-1: Using ep0 maxpacket: 8
[  246.769996][   T47] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  246.775851][   T47] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  246.779616][   T47] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  246.783426][   T47] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  246.805835][   T47] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  246.811200][   T47] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  246.814871][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.928391][T10719] loop3: detected capacity change from 0 to 32768
[  246.943546][T10719] 
[  246.943546][T10719]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  246.943546][T10719] 
[  246.960833][T10719] ERROR: (device loop3): dtSearch: stack overrun!
[  246.960833][T10719] 
[  246.968319][T10719] btstack dump:
[  246.969780][T10719] bn = 0, index = 0
[  246.972151][T10719] bn = 0, index = 0
[  246.973556][T10719] bn = 0, index = 0
[  246.974929][T10719] bn = 0, index = 0
[  246.977454][T10719] bn = 0, index = 0
[  246.978900][T10719] bn = 0, index = 0
[  246.980100][T10719] bn = 0, index = 0
[  246.981296][T10719] bn = 0, index = 0
[  246.982605][T10719] jfs_rename did not expect dtDelete to return rc = -5
[  246.984714][T10719] ERROR: (device loop3): jfs_rename: 
[  246.984714][T10719] 
[  246.989199][   T33] audit: type=1800 audit(1759293192.279:337): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1843" name="file1" dev="loop3" ino=4 res=0 errno=0
[  247.007596][T10719] 
[  247.007596][T10719]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.007596][T10719] 
[  247.012019][T10719] 
[  247.012019][T10719]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.012019][T10719] 
[  247.016219][T10719] 
[  247.016219][T10719]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.016219][T10719] 
[  247.030576][   T47] usb 1-1: usb_control_msg returned -32
[  247.032272][T10719] 
[  247.032272][T10719]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.032272][T10719] 
[  247.033014][   T47] usbtmc 1-1:16.0: can't read capabilities
[  247.079805][T10721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1844'.
[  247.084457][T10721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1844'.
[  247.094239][T10260] ERROR: (device loop3): diWrite: ixpxd invalid
[  247.094239][T10260] 
[  247.103544][T10260] ERROR: (device loop3): txCommit: 
[  247.103544][T10260] 
[  247.106842][T10260] jfs_write_inode: jfs_commit_inode failed!
[  247.108934][ T6945] 
[  247.108934][ T6945]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.108934][ T6945] 
[  247.127132][ T6945] 
[  247.127132][ T6945]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.127132][ T6945] 
[  247.598578][ T5911] usb 1-1: USB disconnect, device number 26
[  248.403364][T10747] loop3: detected capacity change from 0 to 4096
[  248.408338][T10749] No control pipe specified
[  248.472882][T10747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.589341][T10747] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  248.746478][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.001370][T10762] loop3: detected capacity change from 0 to 1024
[  249.533439][T10766] loop0: detected capacity change from 0 to 32768
[  249.566072][T10766] JBD2: Ignoring recovery information on journal
[  249.606371][T10777] loop1: detected capacity change from 0 to 32768
[  249.614345][T10777] (syz.1.1868,10777,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  249.619964][T10777] (syz.1.1868,10777,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  249.638924][T10777] (syz.1.1868,10777,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  249.651754][T10766] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  249.687079][T10777] JBD2: Ignoring recovery information on journal
[  249.736625][T10788] loop3: detected capacity change from 0 to 512
[  249.748649][T10777] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  249.752898][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  249.753762][T10788] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.1872: inode #0: comm syz.3.1872: iget: illegal inode #
[  249.799834][T10788] EXT4-fs (loop3): get orphan inode failed
[  249.803041][T10788] EXT4-fs (loop3): mount failed
[  249.872830][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[  249.993077][T10794] loop0: detected capacity change from 0 to 512
[  250.008770][T10794] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  250.026746][T10794] EXT4-fs (loop0): 1 orphan inode deleted
[  250.028831][T10794] EXT4-fs (loop0): 1 truncate cleaned up
[  250.031647][T10794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.061974][T10799] loop3: detected capacity change from 0 to 256
[  250.068990][T10794] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.0.1873: path /621/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  250.100458][T10794] EXT4-fs (loop0): Remounting filesystem read-only
[  250.143610][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.317985][T10809] ata1.00: invalid cdb length 6
[  250.918433][ T6021] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  251.044587][T10821] loop0: detected capacity change from 0 to 16
[  251.083224][ T6021] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.096518][T10821] erofs (device loop0): mounted with root inode @ nid 36.
[  251.101729][ T6021] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  251.129872][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.155613][ T6021] usb 2-1: config 0 descriptor??
[  251.168181][ T6021] pwc: Askey VC010 type 2 USB webcam detected.
[  251.437283][T10823] loop0: detected capacity change from 0 to 512
[  251.476407][T10823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  251.480029][T10823] System zones: 1-12
[  251.492722][T10823] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1887: invalid indirect mapped block 8 (level 2)
[  251.516177][T10823] EXT4-fs (loop0): 1 truncate cleaned up
[  251.519699][T10823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.563382][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.620090][ T6021] pwc: recv_control_msg error -32 req 02 val 2b00
[  251.627274][ T6021] pwc: recv_control_msg error -32 req 02 val 2700
[  251.633211][ T6021] pwc: recv_control_msg error -32 req 02 val 2c00
[  251.646808][ T6021] pwc: recv_control_msg error -32 req 04 val 1000
[  251.655949][ T6021] pwc: recv_control_msg error -32 req 04 val 1300
[  251.671933][ T6021] pwc: recv_control_msg error -32 req 04 val 1400
[  251.675716][ T6021] pwc: recv_control_msg error -32 req 02 val 2000
[  251.681140][ T6021] pwc: recv_control_msg error -32 req 02 val 2100
[  251.687959][ T6021] pwc: recv_control_msg error -32 req 04 val 1500
[  251.897418][ T6021] pwc: recv_control_msg error -71 req 02 val 2400
[  251.900080][ T6021] pwc: recv_control_msg error -71 req 02 val 2600
[  251.908172][ T6021] pwc: recv_control_msg error -71 req 02 val 2900
[  251.911509][ T6021] pwc: recv_control_msg error -71 req 02 val 2800
[  251.917586][ T6021] pwc: recv_control_msg error -71 req 04 val 1100
[  251.920781][ T6021] pwc: recv_control_msg error -71 req 04 val 1200
[  251.931412][ T6021] pwc: Registered as video103.
[  251.934217][ T6021] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11
[  251.943445][ T6021] usb 2-1: USB disconnect, device number 23
[  252.815126][ T5911] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  253.010704][ T5911] usb 2-1: config 0 has an invalid interface number: 194 but max is 0
[  253.014339][ T5911] usb 2-1: config 0 has no interface number 0
[  253.024074][ T5911] usb 2-1: too many endpoints for config 0 interface 194 altsetting 233: 59, using maximum allowed: 30
[  253.037256][ T5911] usb 2-1: config 0 interface 194 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 59
[  253.054383][ T5911] usb 2-1: config 0 interface 194 has no altsetting 0
[  253.067385][ T5911] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  253.070544][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.082424][ T5911] usb 2-1: Product: syz
[  253.083787][ T5911] usb 2-1: Manufacturer: syz
[  253.091067][ T5911] usb 2-1: SerialNumber: syz
[  253.117457][ T5911] usb 2-1: config 0 descriptor??
[  253.333238][ T5911] peak_usb 2-1:0.194: probe with driver peak_usb failed with error 194
[  253.336632][   T47] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[  253.347697][ T5911] usb 2-1: USB disconnect, device number 24
[  253.497375][   T47] usb 4-1: unable to get BOS descriptor or descriptor too short
[  253.503771][   T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.510500][   T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  253.519231][   T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.523807][   T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  253.532785][   T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.539289][   T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  253.550450][   T47] usb 4-1: string descriptor 0 read error: -22
[  253.553067][   T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  253.562124][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.794761][   T47] usb 4-1: USB disconnect, device number 22
[  254.362046][T10876] loop3: detected capacity change from 0 to 16
[  254.368918][T10876] erofs (device loop3): mounted with root inode @ nid 36.
[  254.753646][T10881] 9pnet_fd: p9_fd_create_tcp (10881): problem connecting socket to 127.0.0.1
[  255.084818][   T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  255.238867][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  255.242276][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  255.249081][   T10] usb 1-1: config 56 interface 0 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64
[  255.252841][   T10] usb 1-1: config 56 interface 0 has no altsetting 0
[  255.259387][   T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=96.21
[  255.262392][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.267980][   T10] usb 1-1: Product: syz
[  255.269369][   T10] usb 1-1: Manufacturer: syz
[  255.270831][   T10] usb 1-1: SerialNumber: syz
[  255.284265][T10885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  255.713081][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.719694][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.729127][   T10] adutux 1-1:56.0: interrupt endpoints not found
[  255.742237][   T10] usb 1-1: USB disconnect, device number 27
[  255.830622][T10903] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1920'.
[  256.014173][T10907] loop3: detected capacity change from 0 to 1024
[  256.040478][T10907] hfsplus: bad catalog entry type
[  256.053017][  T536] hfsplus: b-tree write err: -5, ino 4
[  256.549001][T10938] loop3: detected capacity change from 0 to 512
[  257.213850][T10951] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1941'.
[  257.567444][T10955] loop1: detected capacity change from 0 to 32768
[  257.576443][T10955] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1943 (10955)
[  257.637445][T10955] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  257.641542][T10955] BTRFS error (device loop1): unsupported checksum algorithm: 5
[  257.647066][T10955] BTRFS error (device loop1): open_ctree failed: -22
[  258.474639][   T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  258.759412][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.764824][   T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  258.770567][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.953710][   T24] usb 2-1: config 0 descriptor??
[  259.065308][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  259.428780][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  259.432234][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  259.435618][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  259.438767][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  259.441888][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  259.450085][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  259.567939][T11002] loop3: detected capacity change from 0 to 512
[  259.572770][T11002] EXT4-fs: old and new quota format mixing
[  259.674306][   T24] pwc: recv_control_msg error -71 req 02 val 2100
[  259.677255][   T24] pwc: recv_control_msg error -71 req 04 val 1500
[  259.683786][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  259.689759][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  259.697637][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  259.700559][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  259.705620][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  259.715344][   T47] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  259.718527][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  259.725969][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  259.739005][   T24] pwc: Registered as video103.
[  259.743639][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  259.763951][   T24] usb 2-1: USB disconnect, device number 25
[  259.876454][   T47] usb 1-1: unable to get BOS descriptor or descriptor too short
[  259.880205][   T47] usb 1-1: config 0 has an invalid interface number: 238 but max is 0
[  259.883466][   T47] usb 1-1: config 0 has no interface number 0
[  259.886419][   T47] usb 1-1: config 0 interface 238 has no altsetting 0
[  259.890815][   T47] usb 1-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d
[  259.895550][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.898878][   T47] usb 1-1: Product: syz
[  259.900458][   T47] usb 1-1: Manufacturer: syz
[  259.902264][   T47] usb 1-1: SerialNumber: syz
[  259.907284][   T47] usb 1-1: config 0 descriptor??
[  260.004875][T11008] loop3: detected capacity change from 0 to 32768
[  260.028481][T11008] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.079960][T11008] XFS (loop3): Ending clean mount
[  260.115497][ T6945] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  260.132640][   T47] gspca_main: spca501-2.14.0 probing 1776:501c
[  260.136262][   T47] gspca_spca501: reg write: error -71
[  260.138761][   T47] spca501 1-1:0.238: Reg write failed for 0x02,0x07,0x05
[  260.141611][   T47] spca501 1-1:0.238: probe with driver spca501 failed with error -22
[  260.149387][   T47] usb 1-1: USB disconnect, device number 28
[  260.357445][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1963'.
[  260.473441][T11030] loop3: detected capacity change from 0 to 2048
[  260.515890][T10865]  loop3: p1 < > p4
[  260.515890][T10865]  p4: <solaris:  cannot handle version 793669 vtoc>
[  260.521340][T10865] loop3: p4 size 722688 extends beyond EOD, truncated
[  260.537362][T11030]  loop3: p1 < > p4
[  260.537362][T11030]  p4: <solaris:  cannot handle version 793669 vtoc>
[  260.543790][T11030] loop3: p4 size 722688 extends beyond EOD, truncated
[  260.634358][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  260.657787][T10865] udevd[10865]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  260.667217][ T7019] udevd[7019]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  260.754480][ T5911] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  260.796358][T11041] netlink: 'syz.0.1974': attribute type 8 has an invalid length.
[  260.920070][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  260.932987][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  260.939262][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.946126][ T5911] usb 2-1: Product: syz
[  260.948960][ T5911] usb 2-1: Manufacturer: syz
[  260.951019][ T5911] usb 2-1: SerialNumber: syz
[  260.973111][ T5911] usb 2-1: config 0 descriptor??
[  260.981157][ T5911] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  261.005065][T11053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1977'.
[  261.097803][T11057] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  261.193152][ T5911] pwc: Warning: more than 1 configuration available.
[  261.208656][ T5911] pwc: Failed to set LED on/off time (-71)
[  261.211838][ T5911] pwc: send_video_command error -71
[  261.214553][ T5911] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  261.217587][ T5911] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  261.225779][ T5911] usb 2-1: USB disconnect, device number 26
[  261.262893][T11062] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1981'.
[  262.553955][ T5899] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  262.583901][ T6021] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  262.714085][ T5899] usb 4-1: Using ep0 maxpacket: 32
[  262.725118][ T5899] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  262.728267][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  262.732206][ T5899] usb 4-1: config 0 has no interface number 0
[  262.736835][ T5899] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  262.740826][ T5899] usb 4-1: config 0 interface 255 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  262.745655][ T5899] usb 4-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  262.753184][ T5899] usb 4-1: New USB device found, idVendor=0499, idProduct=152e, bcdDevice=b4.9a
[  262.757561][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.760875][ T5899] usb 4-1: Product: syz
[  262.762588][ T5899] usb 4-1: Manufacturer: syz
[  262.764745][ T5899] usb 4-1: SerialNumber: syz
[  262.775554][ T6021] usb 1-1: config 160 has an invalid interface number: 200 but max is 0
[  262.778900][ T6021] usb 1-1: config 160 has no interface number 0
[  262.781355][ T6021] usb 1-1: config 160 interface 200 has no altsetting 0
[  262.785227][ T5899] usb 4-1: config 0 descriptor??
[  262.793537][ T6021] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  262.797660][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.807728][ T6021] usb 1-1: Product: syz
[  262.809513][ T6021] usb 1-1: Manufacturer: syz
[  262.810637][T11093] loop1: detected capacity change from 0 to 512
[  262.811436][ T6021] usb 1-1: SerialNumber: syz
[  262.879292][T11095] tipc: Started in network mode
[  262.881384][T11095] tipc: Node identity ac1414aa, cluster identity 4711
[  262.887504][T11095] tipc: Enabled bearer <udp:s>, priority 10
[  262.928177][T11097] loop1: detected capacity change from 0 to 128
[  263.034137][ T5899] usb 4-1: USB disconnect, device number 23
[  263.051191][T10865] udevd[10865]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  263.068941][ T6021] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  263.071678][ T6021] usb 1-1: MIDIStreaming interface descriptor not found
[  263.108664][ T6021] usb 1-1: USB disconnect, device number 29
[  263.130397][T10864] udevd[10864]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  263.370830][T11105] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  263.443936][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  263.567701][T11115] loop3: detected capacity change from 0 to 128
[  263.583807][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  263.600749][T11115] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  263.603364][T11115] System zones: 1-3, 19-19, 35-36
[  263.637915][T11115] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  263.642399][T11115] ext4 filesystem being mounted at /547/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  263.714944][ T6945] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  263.723774][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  263.863720][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  264.006124][ T5911] tipc: Node number set to 2886997162
[  264.143714][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  264.413657][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  264.943601][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  264.963256][T11159] loop0: detected capacity change from 0 to 512
[  264.987012][T11159] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  265.006820][T11161] loop1: detected capacity change from 0 to 128
[  265.010481][T11161] EXT4-fs: Ignoring removed nobh option
[  265.037442][T11161] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  265.054427][T11161] ext4 filesystem being mounted at /676/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  265.098980][T11161] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x0e)
[  265.163280][ T5851] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  265.345310][ T5899] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  265.347228][T11176] loop1: detected capacity change from 0 to 128
[  265.387723][T11176] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  265.405016][T11176] ext4 filesystem being mounted at /679/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  265.514113][ T5899] usb 4-1: Using ep0 maxpacket: 32
[  265.528594][ T5899] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 140, changing to 11
[  265.532072][ T5899] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  265.536308][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0
[  265.538656][ T5899] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[  265.541777][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.548971][ T5899] usb 4-1: config 0 descriptor??
[  265.649301][ T5851] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  265.967827][ T5899] corsair 0003:1B1C:1B09.000D: hidraw0: USB HID v0.02 Device [HID 1b1c:1b09] on usb-dummy_hcd.3-1/input0
[  265.993450][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  266.490519][   T47] usb 4-1: USB disconnect, device number 24
[  267.033311][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  267.168624][T11197] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2035'.
[  267.552410][T11216] netlink: 'syz.0.2044': attribute type 7 has an invalid length.
[  267.556447][T11218] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2045'.
[  267.573500][T11216] netlink: 'syz.0.2044': attribute type 8 has an invalid length.
[  267.653799][T11222] loop0: detected capacity change from 0 to 1764
[  267.695933][T11202] loop1: detected capacity change from 0 to 32768
[  267.732884][T11202] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  267.777044][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'.
[  267.787668][T11202] XFS (loop1): Ending clean mount
[  267.801647][T11202] XFS (loop1): Quotacheck needed: Please wait.
[  267.852789][T11202] XFS (loop1): Quotacheck: Done.
[  267.870711][T11238] loop0: detected capacity change from 0 to 512
[  267.887490][T11238] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2051: casefold flag without casefold feature
[  267.897350][T11238] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2051: couldn't read orphan inode 15 (err -117)
[  267.904459][T11238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.950172][ T5851] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  268.052277][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.228442][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'.
[  268.233461][   T24] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  268.385547][   T24] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[  268.388826][   T24] usb 4-1: config 6 has no interface number 0
[  268.395548][   T24] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  268.402243][   T24] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  268.410722][   T24] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  268.419876][   T24] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  268.432596][   T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  268.436401][   T24] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  268.439641][   T24] usb 4-1: Product: syz
[  268.444654][   T24] usb 4-1: Manufacturer: syz
[  268.451680][   T24] usb 4-1: SerialNumber: syz
[  268.471505][   T24] hso 4-1:6.2: Failed to find BULK IN ep
[  268.974125][   T24] usb 4-1: USB disconnect, device number 25
[  269.113132][    C1] net_ratelimit: 2 callbacks suppressed
[  269.113149][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  269.203224][ T6021] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  269.304232][T11269] loop0: detected capacity change from 0 to 2048
[  269.318077][T11269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.374139][ T6021] usb 2-1: Using ep0 maxpacket: 8
[  269.379329][T11271] loop0: detected capacity change from 0 to 47
[  269.381590][ T6021] usb 2-1: config 0 has an invalid interface number: 130 but max is 0
[  269.386921][ T6021] usb 2-1: config 0 has no interface number 0
[  269.396598][ T6021] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56
[  269.400106][ T6021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.412398][ T6021] usb 2-1: Product: syz
[  269.414379][ T6021] usb 2-1: Manufacturer: syz
[  269.416430][ T6021] usb 2-1: SerialNumber: syz
[  269.436475][ T6021] usb 2-1: config 0 descriptor??
[  269.458170][ T6021] as10x_usb: device has been detected
[  269.461157][ T6021] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[  269.486239][ T6021] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))...
[  269.526368][ T6021] as10x_usb: error during firmware upload part1
[  269.529318][ T6021] Registered device PCTV Systems picoStick (74e)
[  269.688349][ T6021] usb 2-1: USB disconnect, device number 27
[  269.766870][ T6021] Unregistered device PCTV Systems picoStick (74e)
[  269.775068][ T6021] as10x_usb: device has been disconnected
[  269.862045][T11282] loop3: detected capacity change from 0 to 256
[  269.870030][T11282] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  269.884490][T11282] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  269.901738][T11282] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  269.911086][T11282] exFAT-fs (loop3): failed to load alloc-bitmap
[  269.914988][T11282] exFAT-fs (loop3): failed to recognize exfat type
[  270.152892][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  270.286750][T11284] sch_tbf: burst 19360 is lower than device lo mtu (65550) !
[  270.672068][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'.
[  270.678564][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'.
[  270.724274][T11294] loop3: detected capacity change from 0 to 32768
[  270.730694][T11294] jfs_mount: dbMount failed w/rc = -22
[  270.733849][T11294] Mount JFS Failure: -22
[  270.735607][T11294] jfs_mount failed w/return code = -22
[  270.911610][T11308] loop1: detected capacity change from 0 to 2048
[  270.924462][T11308] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  270.935832][T11308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  271.121902][T11326] loop1: detected capacity change from 0 to 2048
[  271.147567][T11329] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2090'.
[  271.188044][T10865]  loop1: p1 < > p3
[  271.192870][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  271.193321][T10865] loop1: p3 size 134217728 extends beyond EOD, truncated
[  271.218430][T11326]  loop1: p1 < > p3
[  271.220526][T11326] loop1: p3 size 134217728 extends beyond EOD, truncated
[  271.239940][T11333] zonefs (nullb0) ERROR: Not a zoned block device
[  271.262641][T10865] udevd[10865]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  271.268693][ T7019] udevd[7019]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  271.307284][T10865] udevd[10865]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  271.313752][ T7019] udevd[7019]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  271.525160][T11352] loop3: detected capacity change from 0 to 164
[  272.232694][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  273.007189][T11382] loop1: detected capacity change from 0 to 512
[  273.010146][T11382] EXT4-fs: Ignoring removed orlov option
[  273.014836][T11382] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  273.023759][T11382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  273.031488][T11382] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2112: corrupted in-inode xattr: e_value size too large
[  273.055764][T11382] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2112: couldn't read orphan inode 15 (err -117)
[  273.077854][T11386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2113'.
[  273.086806][T11382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.148164][T11390] loop0: detected capacity change from 0 to 2048
[  273.164791][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.205872][T11390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.272568][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  273.387901][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2121'.
[  274.058950][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.313350][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  274.918985][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'.
[  274.928781][T11425] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.964500][T11427] loop3: detected capacity change from 0 to 1024
[  274.989985][T11427] EXT4-fs: Ignoring removed nobh option
[  274.998609][T11427] EXT4-fs: inline encryption not supported
[  275.054161][T11427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.100550][T11427] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2128: Allocating blocks 481-513 which overlap fs metadata
[  275.139379][T11437] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  275.144006][T11437] block device autoloading is deprecated and will be removed.
[  275.165489][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.240177][T11441] loop3: detected capacity change from 0 to 64
[  275.298292][   T33] audit: type=1800 audit(1759293220.593:338): pid=11441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2134" name="file1" dev="loop3" ino=5 res=0 errno=0
[  275.311955][T11444] loop0: detected capacity change from 0 to 4096
[  275.332620][T11445] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  275.336694][T11444] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  275.345335][T11444] NILFS (loop0): mounting fs with errors
[  275.352284][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  275.358335][ T6021] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  275.532324][ T6021] usb 2-1: Using ep0 maxpacket: 16
[  275.537417][ T6021] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.546382][ T6021] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.550164][ T6021] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  275.555403][ T6021] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  275.558887][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.570254][ T6021] usb 2-1: config 0 descriptor??
[  275.761605][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2137'.
[  275.989576][ T6021] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max
[  275.997719][ T6021] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max
[  276.002898][   T47] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  276.003152][ T6021] microsoft 0003:045E:07DA.000E: usage index exceeded
[  276.010094][ T6021] microsoft 0003:045E:07DA.000E: item 0 0 2 2 parsing failed
[  276.014114][ T6021] microsoft 0003:045E:07DA.000E: parse failed
[  276.017024][ T6021] microsoft 0003:045E:07DA.000E: probe with driver microsoft failed with error -22
[  276.164366][   T47] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  276.167790][   T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.171925][   T47] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  276.178439][   T47] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  276.181601][   T47] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  276.184679][   T47] usb 4-1: Manufacturer: syz
[  276.189405][   T24] usb 2-1: USB disconnect, device number 28
[  276.195509][   T47] usb 4-1: config 0 descriptor??
[  276.205979][   T47] igorplugusb 4-1:0.0: incorrect number of endpoints
[  276.320607][T11453] loop0: detected capacity change from 0 to 2048
[  276.324038][T11453] EXT4-fs: Ignoring removed nomblk_io_submit option
[  276.340992][T11453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.381852][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.396220][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  276.419132][T11447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.426556][T11447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.667026][T11468] cgroup: No subsys list or none specified
[  277.061561][T11472] loop1: detected capacity change from 0 to 32768
[  277.119016][T11472] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  277.151499][T11472] (syz.1.2147,11472,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  277.159638][T11472] (syz.1.2147,11472,1):__ocfs2_delete_entry:1170 ERROR: status = -5
[  277.163349][T11472] (syz.1.2147,11472,1):ocfs2_unlink:993 ERROR: status = -5
[  277.166527][T11472] (syz.1.2147,11472,1):ocfs2_unlink:1046 ERROR: status = -5
[  277.197784][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[  277.432168][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  277.474153][T11480] loop1: detected capacity change from 0 to 1024
[  277.509441][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2149'.
[  278.007494][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'.
[  278.472102][ T5899] usb 4-1: USB disconnect, device number 26
[  278.482070][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  279.269594][T11507] loop1: detected capacity change from 0 to 256
[  279.274923][T11507] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  279.284403][T11507] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  279.311308][T11507] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  279.317231][T11507] exFAT-fs (loop1): failed to load alloc-bitmap
[  279.317413][T11503] loop0: detected capacity change from 0 to 32768
[  279.319917][T11507] exFAT-fs (loop1): failed to recognize exfat type
[  279.336204][T11503] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2160 (11503)
[  279.354696][T11503] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  279.362353][T11503] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm
[  279.480290][  T149] BTRFS warning (device loop0 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x752e265ca9724eb47c3236b0e85f876d1222941063a0a0afe40232d9dc9ca6dd level 0, ignored
[  279.516751][  T149] BTRFS warning (device loop0 state CS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored
[  279.521797][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  279.558935][  T149] BTRFS error (device loop0 state CS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1
[  279.614033][T11503] BTRFS info (device loop0 state CS): allowing degraded mounts
[  279.617134][T11503] BTRFS info (device loop0 state CS): enabling ssd optimizations
[  279.641626][T11503] BTRFS info (device loop0 state CS): using spread ssd allocation scheme
[  279.648309][T11503] BTRFS info (device loop0 state CS): disabling log replay at mount time
[  279.659577][T11503] BTRFS info (device loop0 state CS): enabling free space tree
[  279.669780][T11503] BTRFS info (device loop0 state CS): ignoring bad roots
[  279.685740][T11503] BTRFS info (device loop0 state CS): ignoring data csums
[  279.697648][T11503] BTRFS info (device loop0 state CS): ignoring meta csums
[  279.713033][T11503] BTRFS info (device loop0 state CS): ignoring unknown super block flags
[  279.725129][T11503] BTRFS info (device loop0 state CS): force zlib compression, level 3
[  279.730904][T11529] loop3: detected capacity change from 0 to 512
[  279.772599][T11529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.777113][T11529] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.817776][T11529] EXT4-fs (loop3): shut down requested (0)
[  279.846349][ T5847] BTRFS info (device loop0 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  279.986345][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.157053][T11539] loop0: detected capacity change from 0 to 128
[  280.369976][T11542] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  280.379581][T11542] block device autoloading is deprecated and will be removed.
[  280.379772][T11539] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  280.392093][T11539] block device autoloading is deprecated and will be removed.
[  280.462411][ T5847] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  280.471362][ T5847] FAT-fs (loop0): Filesystem has been set read-only
[  280.551698][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  280.642981][T11556] loop0: detected capacity change from 0 to 128
[  280.661753][T11556] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4635: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  280.676403][T11556] EXT4-fs (loop0): Encoding requested by superblock is unknown
[  280.766470][T11559] loop1: detected capacity change from 0 to 2048
[  280.791078][T11561] loop3: detected capacity change from 0 to 256
[  280.815329][T11561] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  280.884914][T11559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.043828][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2180'.
[  281.601557][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  281.827948][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.372265][T11586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2184'.
[  282.555769][T11592] loop3: detected capacity change from 0 to 2048
[  282.564463][T11594] loop1: detected capacity change from 0 to 512
[  282.578928][T11592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.586210][T11592] ext4 filesystem being mounted at /602/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.595397][T11594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.615032][T11594] ext4 filesystem being mounted at /715/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.618319][T11592] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.2187: bit already cleared for inode 15
[  282.634443][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  282.648959][T11594] EXT4-fs (loop1): shut down requested (0)
[  282.681881][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.716362][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.581407][   T24] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  283.671368][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  283.733840][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  283.737607][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[  283.743013][   T24] usb 2-1: config 1 interface 0 altsetting 90 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  283.747235][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[  283.756275][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40
[  283.759833][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.763549][   T24] usb 2-1: Product: syz
[  283.765256][   T24] usb 2-1: Manufacturer: syz
[  283.767118][   T24] usb 2-1: SerialNumber: syz
[  283.774054][T11618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  284.070374][   T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input13
[  284.106636][ T5282] bcm5974 2-1:1.0: could not read from device
[  284.131928][ T5282] bcm5974 2-1:1.0: could not read from device
[  284.174227][T11637] loop3: detected capacity change from 0 to 164
[  284.204645][T11637] iso9660: Corrupted directory entry in block 2 of inode 1920
[  284.244991][T11638] nvme_fabrics: missing parameter 'transport=%s'
[  284.248399][T11638] nvme_fabrics: missing parameter 'nqn=%s'
[  284.258773][T11640] loop6: detected capacity change from 0 to 63
[  284.280089][T11635] buffer_io_error: 46 callbacks suppressed
[  284.280102][T11635] Buffer I/O error on dev loop6, logical block 2, async page read
[  284.286184][T11635] Buffer I/O error on dev loop6, logical block 2, async page read
[  284.290115][T11638] Buffer I/O error on dev loop6, logical block 1, async page read
[  284.303920][   T24] usb 2-1: USB disconnect, device number 29
[  284.306146][T11638] Buffer I/O error on dev loop6, logical block 1, async page read
[  284.309394][T11638] Buffer I/O error on dev loop6, logical block 1, async page read
[  284.320256][T10866] Buffer I/O error on dev loop6, logical block 0, async page read
[  284.325809][T10866] Buffer I/O error on dev loop6, logical block 0, async page read
[  284.337323][T10866] Buffer I/O error on dev loop6, logical block 0, async page read
[  284.340095][T10866] Buffer I/O error on dev loop6, logical block 0, async page read
[  284.344166][T10866] Buffer I/O error on dev loop6, logical block 0, async page read
[  284.383256][ T6002] udevd[6002]: Error opening device "/dev/input/event3": No such file or directory
[  284.385298][T11642] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  284.387085][ T6002] udevd[6002]: Unable to EVIOCGABS device "/dev/input/event3"
[  284.403568][ T6002] udevd[6002]: Unable to EVIOCGABS device "/dev/input/event3"
[  284.406229][ T6002] udevd[6002]: Unable to EVIOCGABS device "/dev/input/event3"
[  284.408786][ T6002] udevd[6002]: Unable to EVIOCGABS device "/dev/input/event3"
[  284.433541][T11642] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.459235][T11642] bridge_slave_1: left allmulticast mode
[  284.463830][T11642] bridge_slave_1: left promiscuous mode
[  284.466170][T11642] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.493145][T11642] bond0: (slave bond_slave_0): Releasing backup interface
[  284.510918][T11642] bond0: (slave bond_slave_1): Releasing backup interface
[  284.552345][T11642] team0: Port device team_slave_0 removed
[  284.573007][T11642] team0: Port device team_slave_1 removed
[  284.576130][T11642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  284.578658][T11642] batman_adv: batadv0: Removing interface: batadv_slave_0
[  284.587004][T11642] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  284.589419][T11642] batman_adv: batadv0: Removing interface: batadv_slave_1
[  284.620796][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'.
[  284.623138][T11642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  284.625158][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'.
[  284.655120][T11652] sctp: Trying to GSO but underlying device doesn't support it.
[  284.711538][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  284.845807][T11663] loop1: detected capacity change from 0 to 512
[  284.892156][T11663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.902620][T11663] ext4 filesystem being mounted at /723/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  285.088775][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.710224][T11683] loop3: detected capacity change from 0 to 4096
[  285.751160][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  285.826589][T11687] loop1: detected capacity change from 0 to 1024
[  285.842946][T11687] EXT4-fs (loop1): Can't support bigalloc feature without extents feature
[  285.842946][T11687] 
[  285.847143][T11687] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  286.420779][T11691] loop1: detected capacity change from 0 to 512
[  286.437957][T11691] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent
[  286.800952][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  287.103916][T11711] loop0: detected capacity change from 0 to 4096
[  287.110714][T11711] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  287.140317][T11711] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  287.314851][T11716] netlink: 'syz.0.2235': attribute type 11 has an invalid length.
[  287.318125][T11716] netlink: 'syz.0.2235': attribute type 4 has an invalid length.
[  287.322296][T11716] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2235'.
[  287.362769][T11718] loop0: detected capacity change from 0 to 256
[  287.689064][T11728] loop0: detected capacity change from 0 to 1024
[  287.830773][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  287.840969][T11731] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  288.250758][ T5911] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  288.400830][ T5911] usb 4-1: Using ep0 maxpacket: 8
[  288.405326][ T5911] usb 4-1: config 0 has no interfaces?
[  288.410061][ T5911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  288.414158][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.417403][ T5911] usb 4-1: Product: syz
[  288.419274][ T5911] usb 4-1: Manufacturer: syz
[  288.422325][ T5911] usb 4-1: SerialNumber: syz
[  288.430461][ T5911] usb 4-1: config 0 descriptor??
[  288.551123][   T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  288.648527][ T5911] usb 4-1: USB disconnect, device number 27
[  288.681227][T11736] loop1: detected capacity change from 0 to 131072
[  288.693602][T11736] F2FS-fs (loop1): invalid crc value
[  288.734905][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.743472][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.747586][T11736] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  288.754797][T11736] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  288.757020][   T24] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  288.774098][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.787708][   T24] usb 1-1: config 0 descriptor??
[  288.880699][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  289.208940][   T24] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0
[  289.214450][   T24] hid-steam 0003:28DE:1142.000F: unbalanced collection at end of report description
[  289.218740][   T24] hid-steam 0003:28DE:1142.000F: steam_probe:parse of hid interface failed
[  289.222360][   T24] hid-steam 0003:28DE:1142.000F: probe with driver hid-steam failed with error -22
[  289.406083][   T24] usb 1-1: USB disconnect, device number 30
[  289.910598][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  290.161243][   T24] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  290.278935][T11774] loop1: detected capacity change from 0 to 512
[  290.329546][T11774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.335060][T11774] ext4 filesystem being mounted at /734/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.343270][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  290.346905][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[  290.359477][   T24] usb 4-1: config 4 has an invalid interface number: 32 but max is 0
[  290.367085][   T24] usb 4-1: config 4 has no interface number 0
[  290.394061][   T24] usb 4-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  290.400739][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.403944][   T24] usb 4-1: Product: syz
[  290.411725][   T24] usb 4-1: Manufacturer: syz
[  290.413598][   T24] usb 4-1: SerialNumber: syz
[  290.453547][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.552812][T11789] loop1: detected capacity change from 0 to 8
[  290.559042][T11789] SQUASHFS error: lzo decompression failed, data probably corrupt
[  290.562781][T11789] SQUASHFS error: Failed to read block 0x144: -5
[  290.565620][T11789] SQUASHFS error: Unable to read metadata cache entry [142]
[  290.568645][T11789] SQUASHFS error: Unable to read inode 0x11f
[  290.670617][   T24] uvcvideo 4-1:4.32: Found UVC 0.02 device syz (17dc:0202)
[  290.674765][   T24] uvcvideo 4-1:4.32: No valid video chain found.
[  290.682139][   T24] usb 4-1: USB disconnect, device number 28
[  290.692683][T11791] veth1_macvtap: left promiscuous mode
[  290.694971][T11791] macsec0: entered allmulticast mode
[  290.717440][T11791] veth1_macvtap: entered promiscuous mode
[  290.725332][T11791] veth1_macvtap: entered allmulticast mode
[  290.728957][T11791] macsec0: left allmulticast mode
[  290.733559][T11791] veth1_macvtap: left allmulticast mode
[  290.816026][T11796] loop0: detected capacity change from 0 to 128
[  290.874186][T11796] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  290.877824][T11796] FAT-fs (loop0): Filesystem has been set read-only
[  290.885619][   T33] audit: type=1800 audit(1759293236.154:339): pid=11796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2268" name="file2" dev="loop0" ino=1048649 res=0 errno=0
[  290.895350][T11796] syz.0.2268: attempt to access beyond end of device
[  290.895350][T11796] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128
[  290.950452][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  291.651226][T11805] loop1: detected capacity change from 0 to 8
[  291.654576][T11805] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  291.780681][T11803] loop3: detected capacity change from 0 to 32768
[  291.790653][T11803] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2270 (11803)
[  291.803890][T11803] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  291.807878][T11803] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  291.971823][T11803] BTRFS info (device loop3): enabling ssd optimizations
[  291.974737][T11803] BTRFS info (device loop3): enabling free space tree
[  291.990324][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  292.176465][ T6945] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  292.791648][T11837] loop1: detected capacity change from 0 to 131072
[  292.798891][T11837] F2FS-fs (loop1): invalid crc value
[  292.849775][T11837] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  292.854656][T11837] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  292.923089][T11837] F2FS-fs (loop1): lookup inode (7) has corrupted xattr
[  293.030198][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  293.222710][T11851] gfs2: path_lookup on tmpfs returned error -2
[  293.501658][T11859] loop0: detected capacity change from 0 to 2048
[  293.515983][T11859] NILFS (loop0): couldn't find nilfs on the device
[  293.626962][T11853] loop3: detected capacity change from 0 to 32768
[  293.667315][T11853] 
[  293.667315][T11853]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  293.667315][T11853] 
[  293.715119][ T6945] 
[  293.715119][ T6945]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  293.715119][ T6945] 
[  293.734547][ T6945] 
[  293.734547][ T6945]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  293.734547][ T6945] 
[  293.876442][   T33] audit: type=1326 audit(1759293239.175:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11870 comm="syz.1.2294" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21eb98ec29 code=0x0
[  293.975860][T11882] loop0: detected capacity change from 0 to 128
[  293.981744][T11882] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  293.988413][T11882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  294.042422][T11884] loop1: detected capacity change from 0 to 1024
[  294.046978][T11884] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  294.051681][T11884] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  294.057059][T11884] JBD2: no valid journal superblock found
[  294.059426][T11884] EXT4-fs (loop1): Could not load journal inode
[  294.070312][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  294.253071][T11892] loop1: detected capacity change from 0 to 8192
[  294.731122][ T6021] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  294.776447][T11901] veth0: entered promiscuous mode
[  294.779543][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2307'.
[  294.882625][ T6021] usb 2-1: config 0 has an invalid interface number: 212 but max is 0
[  294.885906][ T6021] usb 2-1: config 0 has no interface number 0
[  294.888404][ T6021] usb 2-1: config 0 interface 212 has no altsetting 0
[  294.897413][ T6021] usb 2-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6
[  294.904727][ T6021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.910955][ T6021] usb 2-1: Product: syz
[  294.913172][ T6021] usb 2-1: Manufacturer: syz
[  294.917518][ T6021] usb 2-1: SerialNumber: syz
[  294.928866][ T6021] usb 2-1: config 0 descriptor??
[  294.941810][ T6021] HFC-S_USB 2-1:0.212: probe with driver HFC-S_USB failed with error -5
[  295.061590][T11907] loop3: detected capacity change from 0 to 1024
[  295.078174][T11907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.083295][T11907] ext4 filesystem being mounted at /629/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.109903][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  295.150977][ T6021] usb 2-1: USB disconnect, device number 30
[  295.279146][T10256] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u10:14: bg 0: block 393: padding at end of block bitmap is not set
[  295.302970][T10256] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117
[  295.307849][T10256] EXT4-fs (loop3): This should not happen!! Data will be lost
[  295.307849][T10256] 
[  295.349605][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.454787][T11920] /dev/nullb0: Can't open blockdev
[  295.556695][T11924] loop0: detected capacity change from 0 to 512
[  295.585601][T11924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.591724][T11924] ext4 filesystem being mounted at /797/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  295.633846][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.722540][T11930] loop1: detected capacity change from 0 to 512
[  295.731130][T11930] EXT4-fs (loop1): Test dummy encryption mode enabled
[  295.736559][T11930] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  295.740686][T11932] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2316'.
[  295.746879][T11930] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  295.752374][T11930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.774996][T11930] EXT4-fs: Ignoring removed orlov option
[  295.777674][T11930] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  295.782944][T11930] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  295.804541][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.006124][T11938] netlink: 'syz.1.2320': attribute type 1 has an invalid length.
[  296.008735][T11938] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2320'.
[  296.159793][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  296.324547][T11948] IPv6: NLM_F_CREATE should be specified when creating new route
[  296.331877][T11948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  296.334276][T11948] IPv6: NLM_F_CREATE should be set when creating new route
[  296.336523][T11948] IPv6: NLM_F_CREATE should be set when creating new route
[  296.351994][T11948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  296.432615][T11956] loop1: detected capacity change from 0 to 512
[  296.436078][T11956] EXT4-fs: Ignoring removed bh option
[  296.438776][T11956] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  296.442306][T11956] EXT4-fs (loop1): invalid inodes per group: 1
[  296.442306][T11956] 
[  296.669836][ T5911] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  296.758795][T11958] loop1: detected capacity change from 0 to 32768
[  296.805902][T11958] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.830737][T11958] XFS (loop1): Ending clean mount
[  296.834789][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  296.839247][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  296.854493][ T5851] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.859559][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  296.865361][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  296.874096][ T5911] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  296.877631][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.897152][ T5911] usb 4-1: config 0 descriptor??
[  297.001979][T11983] loop0: detected capacity change from 0 to 16
[  297.011703][T11983] erofs (device loop0): mounted with root inode @ nid 36.
[  297.185353][T11991] netlink: 'syz.0.2342': attribute type 13 has an invalid length.
[  297.199931][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  297.255040][T11991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  297.314634][ T5911] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max
[  297.326922][ T5911] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  297.333815][T11990] loop1: detected capacity change from 0 to 32768
[  297.353694][T11990] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  297.367233][T11990] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  297.400660][T11994] loop0: detected capacity change from 0 to 4096
[  297.413374][T11994] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  297.418147][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[  297.441771][T11994] ntfs3(loop0): ino=5, "/" ntfs_readdir
[  297.443733][T11994] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  297.654117][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2347'.
[  297.659248][T12005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2347'.
[  297.695245][T12007] loop1: detected capacity change from 0 to 512
[  297.735384][T12007] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2348: corrupted in-inode xattr: invalid ea_ino
[  297.742421][T12007] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2348: couldn't read orphan inode 15 (err -117)
[  297.747545][T12007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.774036][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.824702][T12010] tipc: Enabled bearer <eth:ipvlan0>, priority 19
[  298.229525][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  298.855449][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'.
[  298.859087][T12016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2351'.
[  299.269516][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  299.297063][T12028] loop1: detected capacity change from 0 to 40427
[  299.317382][T12028] F2FS-fs (loop1): build fault injection rate: 690
[  299.333095][T12028] F2FS-fs (loop1): invalid crc value
[  299.428397][T12028] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  299.448972][T12028] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  299.511107][   T24] usb 4-1: USB disconnect, device number 29
[  299.556459][T12045] erofs (device nullb0): cannot find valid erofs superblock
[  299.589490][ T5853] Bluetooth: hci3: command 0x1003 tx timeout
[  299.592505][ T5850] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  300.184725][T12068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  300.309370][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  300.734797][T12081] loop3: detected capacity change from 0 to 512
[  300.762022][T12081] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2378: casefold flag without casefold feature
[  300.770566][T12081] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2378: couldn't read orphan inode 15 (err -117)
[  300.781685][T12081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.810999][T12087] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  300.829981][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.910662][T12091] random: crng reseeded on system resumption
[  301.126298][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'.
[  301.349172][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  301.862752][T12117] : renamed from wg2 (while UP)
[  302.399086][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  302.707325][T12137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2402'.
[  302.819126][   T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  303.000352][   T24] usb 2-1: Using ep0 maxpacket: 8
[  303.006548][   T24] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  303.010198][   T24] usb 2-1: config 0 has no interface number 0
[  303.012982][   T24] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  303.017067][   T24] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  303.028696][   T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  303.044343][   T24] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  303.061965][   T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  303.071558][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.096566][   T24] usb 2-1: config 0 descriptor??
[  303.128050][   T24] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  303.428925][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  303.431963][   T24] usb 2-1: USB disconnect, device number 31
[  303.511031][   T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  303.641610][T12155] loop0: detected capacity change from 0 to 1024
[  303.644840][T12155] EXT4-fs: Ignoring removed nomblk_io_submit option
[  303.672861][T12155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.722844][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.916680][T12174] CIFS: VFS: Malformed UNC in devname
[  303.922728][T12176] loop0: detected capacity change from 0 to 128
[  304.468777][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  304.729423][ T6021] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  304.768802][ T5899] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  304.888817][ T6021] usb 1-1: Using ep0 maxpacket: 32
[  304.894132][ T6021] usb 1-1: config 0 has an invalid interface number: 247 but max is 0
[  304.897451][ T6021] usb 1-1: config 0 has no interface number 0
[  304.900676][ T6021] usb 1-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  304.904609][ T6021] usb 1-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  304.910869][ T6021] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  304.914156][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  304.916852][ T6021] usb 1-1: Product: syz
[  304.918259][ T6021] usb 1-1: Manufacturer: syz
[  304.925790][ T6021] usb 1-1: config 0 descriptor??
[  304.930707][ T5899] usb 2-1: Using ep0 maxpacket: 8
[  304.944050][ T5899] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  304.947207][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.950188][ T5899] usb 2-1: Product: syz
[  304.952144][ T5899] usb 2-1: Manufacturer: syz
[  304.954211][ T5899] usb 2-1: SerialNumber: syz
[  304.960579][ T5899] usb 2-1: config 0 descriptor??
[  304.972948][ T5899] gspca_main: 2770:9120 too many config
[  305.139239][ T5899] usb 1-1: USB disconnect, device number 31
[  305.196807][T12204] netlink: 'syz.1.2432': attribute type 10 has an invalid length.
[  305.206657][T12204] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  305.219956][T12204] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  305.229197][   T24] usb 2-1: USB disconnect, device number 32
[  305.508777][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  305.662036][ T5899] Process accounting resumed
[  305.682589][T12217] Process accounting resumed
[  306.021124][T12232] loop3: detected capacity change from 0 to 2048
[  306.052949][T12232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  306.488532][   T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  306.548501][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  306.639363][   T24] usb 2-1: Using ep0 maxpacket: 32
[  306.652454][   T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  306.656029][   T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  306.659387][   T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  306.662667][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  306.666447][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  306.670287][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  306.674063][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  306.679173][   T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  306.682485][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.689246][ T5899] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  306.694426][   T24] usb 2-1: config 0 descriptor??
[  306.865302][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0
[  306.867968][ T5899] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  306.876651][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.887283][ T5899] usb 4-1: config 0 descriptor??
[  306.925785][   T24] usb 2-1: USB disconnect, device number 33
[  306.934129][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2448'.
[  306.983357][T12246] loop0: detected capacity change from 0 to 512
[  306.987861][T12246] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  307.011416][T12246] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  307.321089][T12258] autofs: Bad value for 'uid'
[  307.322946][T12258] autofs: Bad value for 'uid'
[  307.325696][ T5899] elecom 0003:056E:010C.0011: unknown main item tag 0x0
[  307.331843][ T5899] elecom 0003:056E:010C.0011: hidraw0: USB HID v1.01 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0
[  307.386614][T12260] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  307.395187][T12260] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  307.410848][T12260] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  307.524935][ T5899] usb 4-1: USB disconnect, device number 30
[  307.588376][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  307.888693][ T2310] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  308.067664][ T2310] usb 1-1: unable to get BOS descriptor or descriptor too short
[  308.071754][ T2310] usb 1-1: not running at top speed; connect to a high speed hub
[  308.079904][ T2310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.083895][ T2310] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  308.100160][ T2310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  308.103733][ T2310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.106893][ T2310] usb 1-1: Product: syz
[  308.109244][ T2310] usb 1-1: Manufacturer: syz
[  308.111552][ T2310] usb 1-1: SerialNumber: syz
[  308.341470][ T2310] usb 1-1: 0:2 : does not exist
[  308.362110][ T2310] usb 1-1: USB disconnect, device number 32
[  308.392277][T10865] udevd[10865]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.628725][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  308.745059][T12293] netlink: 'syz.1.2472': attribute type 6 has an invalid length.
[  308.748925][T12293] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2472'.
[  308.862642][T12295] loop1: detected capacity change from 0 to 4096
[  309.250542][T12295] ntfs3(loop1): no free space to extend mft
[  309.537885][T12315] loop3: detected capacity change from 0 to 512
[  309.574410][T12315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.574620][T12306] loop0: detected capacity change from 0 to 32768
[  309.579166][T12315] ext4 filesystem being mounted at /687/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.591752][T12315] EXT4-fs warning (device loop3): ext4_group_add:1716: Can't resize non-sparse filesystem further
[  309.609441][T12306] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  309.621486][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.634902][T12306] XFS (loop0): Ending clean mount
[  309.668167][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  309.728152][ T5847] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  310.052752][T12341] loop3: detected capacity change from 0 to 16
[  310.056238][T12341] erofs (device loop3): mounted with root inode @ nid 36.
[  310.065899][T12341] syz.3.2489: attempt to access beyond end of device
[  310.065899][T12341] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16
[  310.077463][T12341] syz.3.2489: attempt to access beyond end of device
[  310.077463][T12341] loop3: rw=524288, sector=40, nr_sectors = 64 limit=16
[  310.083768][T12341] syz.3.2489: attempt to access beyond end of device
[  310.083768][T12341] loop3: rw=0, sector=16, nr_sectors = 8 limit=16
[  310.091043][   T33] audit: type=1800 audit(1759293255.397:341): pid=12341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2489" name="file2" dev="loop3" ino=89 res=0 errno=0
[  310.485297][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'.
[  310.655934][ T5911] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  310.708039][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  310.756704][T12380] loop3: detected capacity change from 0 to 2048
[  310.784539][T12380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.818138][ T5911] usb 1-1: Using ep0 maxpacket: 32
[  310.822987][ T5911] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  310.826092][ T5911] usb 1-1: config 0 has no interface number 0
[  310.837147][T12380] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 9: comm syz.3.2508: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0
[  310.839069][ T5911] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  310.847727][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.861005][T12380] EXT4-fs (loop3): Remounting filesystem read-only
[  310.864141][ T5911] usb 1-1: Product: syz
[  310.866017][ T5911] usb 1-1: Manufacturer: syz
[  310.878379][ T5911] usb 1-1: SerialNumber: syz
[  310.891964][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.896482][ T5911] usb 1-1: config 0 descriptor??
[  310.901402][ T5911] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  311.106192][ T5911] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  311.112341][ T5911] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  311.159227][   T24] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  311.208021][ T5897] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  311.309280][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[  311.313745][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.316778][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00
[  311.319983][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.325402][   T24] usb 2-1: config 0 descriptor??
[  311.361201][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.364859][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.368497][ T5897] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  311.371384][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.376634][ T5897] usb 4-1: config 0 descriptor??
[  311.509959][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  311.510234][ T2310] usb 1-1: USB disconnect, device number 33
[  311.518543][ T2310] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  311.525271][ T2310] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  311.535513][ T2310] quatech2 1-1:0.51: device disconnected
[  311.748018][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  311.751182][   T24] apple 0003:05AC:027B.0012: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.1-1/input0
[  311.788652][ T5897] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  311.790996][ T5897] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  311.793543][ T5897] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  311.795588][ T5897] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  311.798298][ T5897] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  311.800899][ T5897] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  311.802873][ T5897] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  311.807215][ T5897] elo 0003:04E7:0030.0013: hidraw1: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0
[  311.945493][ T2310] usb 2-1: USB disconnect, device number 34
[  311.993482][ T5897] usb 4-1: USB disconnect, device number 31
[  312.320294][T12392] loop0: detected capacity change from 0 to 32768
[  312.332059][T12392] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  312.345160][T12392] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  312.403840][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  312.519276][T12396] loop1: detected capacity change from 0 to 256
[  312.598801][T12402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  312.601487][T12402] IPv6: NLM_F_CREATE should be set when creating new route
[  312.787901][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  313.038237][ T5897] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  313.197798][ T5897] usb 2-1: Using ep0 maxpacket: 32
[  313.202397][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  313.210550][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.216781][ T5897] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  313.223856][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.230378][ T5897] usb 2-1: config 0 descriptor??
[  313.243216][T12417] loop0: detected capacity change from 0 to 4096
[  313.256520][T12418] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  313.260533][T12417] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  313.266388][T12417] NILFS (loop0): mounting fs with errors
[  313.563935][T12420] loop0: detected capacity change from 0 to 32768
[  313.576510][T12422] loop3: detected capacity change from 0 to 512
[  313.608809][T12420] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  313.647554][T12420] 
[  313.648617][T12420] ======================================================
[  313.651341][T12420] WARNING: possible circular locking dependency detected
[  313.654064][T12420] syzkaller #0 Not tainted
[  313.655902][T12420] ------------------------------------------------------
[  313.659397][T12420] syz.0.2524/12420 is trying to acquire lock:
[  313.661798][T12420] ffff88810375ec78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  313.665399][T12420] 
[  313.665399][T12420] but task is already holding lock:
[  313.668249][T12420] ffff8880364c4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  313.671900][T12420] 
[  313.671900][T12420] which lock already depends on the new lock.
[  313.671900][T12420] 
[  313.675995][T12420] 
[  313.675995][T12420] the existing dependency chain (in reverse order) is:
[  313.679573][T12420] 
[  313.679573][T12420] -> #4 (jbd2_handle){++++}-{0:0}:
[  313.682541][T12420]        lock_acquire+0x120/0x360
[  313.684624][T12420]        start_this_handle+0x1fa7/0x21c0
[  313.686976][T12420]        jbd2__journal_start+0x2c1/0x5b0
[  313.689271][T12420]        jbd2_journal_start+0x2a/0x40
[  313.691476][T12420]        ocfs2_start_trans+0x376/0x6d0
[  313.693707][T12420]        ocfs2_mknod+0xe93/0x2050
[  313.695758][T12420]        ocfs2_create+0x1a5/0x440
[  313.697842][T12420]        path_openat+0x14f4/0x3830
[  313.700067][T12420]        do_filp_open+0x1fa/0x410
[  313.702076][T12420]        do_sys_openat2+0x121/0x1c0
[  313.704327][T12420]        __x64_sys_openat+0x138/0x170
[  313.706559][T12420]        do_syscall_64+0xfa/0xfa0
[  313.708674][T12420]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.711222][T12420] 
[  313.711222][T12420] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  313.714683][T12420]        lock_acquire+0x120/0x360
[  313.716726][T12420]        down_read+0x46/0x2e0
[  313.718643][T12420]        ocfs2_start_trans+0x36a/0x6d0
[  313.720895][T12420]        ocfs2_mknod+0xe93/0x2050
[  313.722863][T12420]        ocfs2_create+0x1a5/0x440
[  313.724727][T12420]        path_openat+0x14f4/0x3830
[  313.726843][T12420]        do_filp_open+0x1fa/0x410
[  313.728900][T12420]        do_sys_openat2+0x121/0x1c0
[  313.730956][T12420]        __x64_sys_openat+0x138/0x170
[  313.733157][T12420]        do_syscall_64+0xfa/0xfa0
[  313.735222][T12420]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.737709][T12420] 
[  313.737709][T12420] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  313.740754][T12420]        lock_acquire+0x120/0x360
[  313.742771][T12420]        ocfs2_start_trans+0x26b/0x6d0
[  313.744751][T12420]        ocfs2_write_begin_nolock+0x26ee/0x4340
[  313.747253][T12420]        ocfs2_write_begin+0x1bb/0x310
[  313.749311][T12420]        generic_perform_write+0x2c5/0x900
[  313.751616][T12420]        ocfs2_file_write_iter+0x157a/0x1d10
[  313.754071][T12420]        vfs_write+0x5c9/0xb30
[  313.755952][T12420]        ksys_write+0x145/0x250
[  313.758027][T12420]        do_syscall_64+0xfa/0xfa0
[  313.760028][T12420]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.762540][T12420] 
[  313.762540][T12420] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  313.766011][T12420]        lock_acquire+0x120/0x360
[  313.768166][T12420]        down_write+0x96/0x1f0
[  313.770076][T12420]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  313.772636][T12420]        ocfs2_xattr_set+0x595/0x11f0
[  313.774794][T12420]        ocfs2_set_acl+0x701/0x7b0
[  313.776818][T12420]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  313.778953][T12420]        vfs_set_acl+0x887/0xb00
[  313.780847][T12420]        filename_setxattr+0x2e0/0x600
[  313.783010][T12420]        path_setxattrat+0x364/0x3a0
[  313.785074][T12420]        __x64_sys_setxattr+0xbc/0xe0
[  313.787212][T12420]        do_syscall_64+0xfa/0xfa0
[  313.789189][T12420]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.791784][T12420] 
[  313.791784][T12420] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  313.794867][T12420]        validate_chain+0xb9b/0x2140
[  313.797013][T12420]        __lock_acquire+0xab9/0xd20
[  313.799057][T12420]        lock_acquire+0x120/0x360
[  313.801001][T12420]        down_read+0x46/0x2e0
[  313.802876][T12420]        ocfs2_init_acl+0x2f9/0x720
[  313.804927][T12420]        ocfs2_mknod+0x1321/0x2050
[  313.806974][T12420]        ocfs2_create+0x1a5/0x440
[  313.808956][T12420]        path_openat+0x14f4/0x3830
[  313.811020][T12420]        do_filp_open+0x1fa/0x410
[  313.813025][T12420]        do_sys_openat2+0x121/0x1c0
[  313.815026][T12420]        __x64_sys_creat+0x8f/0xc0
[  313.817017][T12420]        do_syscall_64+0xfa/0xfa0
[  313.819067][T12420]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.821536][T12420] 
[  313.821536][T12420] other info that might help us debug this:
[  313.821536][T12420] 
[  313.825618][T12420] Chain exists of:
[  313.825618][T12420]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  313.825618][T12420] 
[  313.827698][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  313.830996][T12420]  Possible unsafe locking scenario:
[  313.830996][T12420] 
[  313.836501][T12420]        CPU0                    CPU1
[  313.838700][T12420]        ----                    ----
[  313.840782][T12420]   rlock(jbd2_handle);
[  313.842482][T12420]                                lock(&journal->j_trans_barrier);
[  313.845626][T12420]                                lock(jbd2_handle);
[  313.848231][T12420]   rlock(&oi->ip_xattr_sem);
[  313.850156][T12420] 
[  313.850156][T12420]  *** DEADLOCK ***
[  313.850156][T12420] 
[  313.853370][T12420] 8 locks held by syz.0.2524/12420:
[  313.855476][T12420]  #0: ffff888110016420 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  313.859210][T12420]  #1: ffff88810375ef40 (&type->i_mutex_dir_key#11){++++}-{4:4}, at: path_openat+0x8da/0x3830
[  313.863293][T12420]  #2: ffff8881035943c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  313.868585][T12420]  #3: ffff88810375a6c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  313.874122][T12420]  #4: ffff8881035960c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  313.879600][T12420]  #5: ffff888110016610 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  313.883151][T12420]  #6: ffff88810a0b10e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  313.887236][T12420]  #7: ffff8880364c4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  313.890895][T12420] 
[  313.890895][T12420] stack backtrace:
[  313.893181][T12420] CPU: 0 UID: 0 PID: 12420 Comm: syz.0.2524 Not tainted syzkaller #0 PREEMPT(full) 
[  313.893199][T12420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  313.893210][T12420] Call Trace:
[  313.893219][T12420]  <TASK>
[  313.893228][T12420]  dump_stack_lvl+0x189/0x250
[  313.893248][T12420]  ? __pfx_dump_stack_lvl+0x10/0x10
[  313.893264][T12420]  ? __pfx__printk+0x10/0x10
[  313.893280][T12420]  ? stack_trace_save+0x9c/0xe0
[  313.893300][T12420]  print_circular_bug+0x2ee/0x310
[  313.893316][T12420]  check_noncircular+0x134/0x160
[  313.893332][T12420]  validate_chain+0xb9b/0x2140
[  313.893351][T12420]  __lock_acquire+0xab9/0xd20
[  313.893371][T12420]  ? ocfs2_init_acl+0x2f9/0x720
[  313.893386][T12420]  lock_acquire+0x120/0x360
[  313.893403][T12420]  ? ocfs2_init_acl+0x2f9/0x720
[  313.893421][T12420]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  313.893437][T12420]  down_read+0x46/0x2e0
[  313.893454][T12420]  ? ocfs2_init_acl+0x2f9/0x720
[  313.893472][T12420]  ocfs2_init_acl+0x2f9/0x720
[  313.893490][T12420]  ? ocfs2_mknod_locked+0x148/0x250
[  313.893508][T12420]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  313.893524][T12420]  ? dquot_alloc_inode+0x216/0xa50
[  313.893545][T12420]  ? ocfs2_block_signals+0x94/0xe0
[  313.893560][T12420]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  313.893574][T12420]  ? __kasan_save_free_info+0x46/0x50
[  313.893595][T12420]  ? ocfs2_init_security_get+0x139/0x1a0
[  313.893616][T12420]  ocfs2_mknod+0x1321/0x2050
[  313.893636][T12420]  ? __pfx_ocfs2_mknod+0x10/0x10
[  313.893679][T12420]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  313.893700][T12420]  ? __lock_acquire+0xab9/0xd20
[  313.893723][T12420]  ? look_up_lock_class+0x74/0x170
[  313.893739][T12420]  ? register_lock_class+0x51/0x320
[  313.893758][T12420]  ? __lock_acquire+0xab9/0xd20
[  313.893777][T12420]  ? __lock_acquire+0xab9/0xd20
[  313.893797][T12420]  ? do_raw_spin_lock+0x121/0x290
[  313.893814][T12420]  ? do_raw_spin_unlock+0x4d/0x240
[  313.893830][T12420]  ? rcu_is_watching+0x15/0xb0
[  313.893843][T12420]  ? ocfs2_lookup+0x5b9/0x9b0
[  313.893859][T12420]  ocfs2_create+0x1a5/0x440
[  313.893874][T12420]  ? __pfx_ocfs2_lookup+0x10/0x10
[  313.893889][T12420]  ? from_kgid+0x1b0/0x650
[  313.893906][T12420]  ? __pfx_ocfs2_create+0x10/0x10
[  313.893928][T12420]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  313.893947][T12420]  ? inode_permission+0x149/0x470
[  313.893964][T12420]  ? __pfx_ocfs2_permission+0x10/0x10
[  313.893978][T12420]  ? bpf_lsm_inode_create+0x9/0x20
[  313.893994][T12420]  ? __pfx_ocfs2_create+0x10/0x10
[  313.894008][T12420]  path_openat+0x14f4/0x3830
[  313.894031][T12420]  ? __pfx_path_openat+0x10/0x10
[  313.894049][T12420]  do_filp_open+0x1fa/0x410
[  313.894061][T12420]  ? __lock_acquire+0xab9/0xd20
[  313.894078][T12420]  ? __pfx_do_filp_open+0x10/0x10
[  313.894097][T12420]  ? _raw_spin_unlock+0x28/0x50
[  313.894111][T12420]  ? alloc_fd+0x64c/0x6c0
[  313.894129][T12420]  do_sys_openat2+0x121/0x1c0
[  313.894148][T12420]  ? __se_sys_futex+0x36f/0x400
[  313.894163][T12420]  ? __pfx_do_sys_openat2+0x10/0x10
[  313.894184][T12420]  __x64_sys_creat+0x8f/0xc0
[  313.894204][T12420]  do_syscall_64+0xfa/0xfa0
[  313.894220][T12420]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.894235][T12420]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.894249][T12420]  ? exc_page_fault+0xab/0x100
[  313.894263][T12420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.894277][T12420] RIP: 0033:0x7f2caab8ec29
[  313.894291][T12420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.894304][T12420] RSP: 002b:00007f2cab97d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  313.894318][T12420] RAX: ffffffffffffffda RBX: 00007f2caadd5fa0 RCX: 00007f2caab8ec29
[  313.894328][T12420] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000e00
[  313.894338][T12420] RBP: 00007f2caac11e41 R08: 0000000000000000 R09: 0000000000000000
[  313.894347][T12420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.894355][T12420] R13: 00007f2caadd6038 R14: 00007f2caadd5fa0 R15: 00007fff8dee0998
[  313.894371][T12420]  </TASK>
[  314.054121][ T5897] ft260 0003:0403:6030.0014: unknown main item tag 0x7
[  314.058743][T12422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.064891][T12422] ext4 filesystem being mounted at /707/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  314.081275][T12420] syz.0.2524 (12420) used greatest stack depth: 17112 bytes left
[  314.089453][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.108047][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[  314.253173][ T5897] ft260 0003:0403:6030.0014: chip code: 0000 0000
[  314.453924][ T5897] ft260 0003:0403:6030.0014: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[  314.654866][ T5897] ft260 0003:0403:6030.0014: failed to retrieve status: -32, no wakeup
[  314.867010][ T2310] usb 2-1: USB disconnect, device number 35
[  314.867539][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  315.907413][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  316.947267][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  317.111125][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  317.113597][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  317.987169][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  319.027059][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  320.066947][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  321.106784][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  322.146681][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  323.186547][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available

VM DIAGNOSIS:
04:25:44  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000005bee RDI=0000000000005bef RBP=00000000000003f8 RSP=ffffc9000ad5e8f0
R8 =ffff888106ad8237 R9 =1ffff11020d5b046 R10=dffffc0000000000 R11=ffffffff8556cf50
R12=dffffc0000000000 R13=ffffffff99d198f9 R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556cfcc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2cab97d6c0 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=fffffffffffffffd CR3=0000000028578000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=622f617461642f76 6564752f6e75722f
XMM02=0000000000000000 00ff00000000ff00 XMM03=ff00000000000000 0000000000000000
XMM04=0000000000000000 000000ff00000000 XMM05=0000333a37622f2a 00006c616b637973
XMM06=ffff000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffff000000000000 ffff000000000000 XMM09=0000333a37622f72 656c6c616b7a7973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=7ef329d3f826cb00 RBX=ffffffff81972677 RCX=7ef329d3f826cb00 RDX=0000000000000001
RSI=ffffffff8c03da40 RDI=ffffffff81972677 RBP=ffffc90000177f10 RSP=ffffc90000177db8
R8 =ffff888136632fdb R9 =1ffff11026cc65fb R10=dffffc0000000000 R11=ffffed1026cc65fc
R12=ffffffff8fc35770 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020007000
RIP=ffffffff810014b0 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=fffffffffffffffd CR3=0000000028d86000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
