last executing test programs:

1.777259587s ago: executing program 0 (id=500):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000404e200000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23)

1.601776274s ago: executing program 0 (id=501):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x4a}, 0x2, 0x2)

1.601534446s ago: executing program 0 (id=502):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x1100, &(0x7f0000000540)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000001808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0)

1.541683878s ago: executing program 0 (id=504):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
unshare(0x22020600)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3)

642.037513ms ago: executing program 1 (id=515):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000004000900010073797a30"], 0xa8}}, 0x0)

641.765261ms ago: executing program 1 (id=516):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x6, 0x190, 0x0, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0x0, {0x3, 0x6fd8e84b}, 0x3, 0xed}})

590.217319ms ago: executing program 0 (id=517):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40803, 0x0)
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000180)=0x9)

589.995523ms ago: executing program 1 (id=518):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000e40)={0x40, 0x15, 0xc, "01fcffff00f740399bbec063"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

589.850192ms ago: executing program 0 (id=519):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}})

240.506371ms ago: executing program 2 (id=521):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0)

240.218198ms ago: executing program 2 (id=522):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="080096000a000200aaaaaaaaaac00000060005"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

181.745675ms ago: executing program 2 (id=523):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0)

181.374082ms ago: executing program 2 (id=524):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000200)=<r2=>0x0)
sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="a75618c9357220ae979e5e4e463e140143", 0x11}], 0x1, 0x0, 0x0, 0x24040004}, 0x24000090)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x1}])

60.9219ms ago: executing program 2 (id=525):
mkdir(0x0, 0x0)
chdir(0x0)
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
syz_clone3(&(0x7f0000000800)={0x204001400, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x0], 0x1, {r0}}, 0x58)

60.584416ms ago: executing program 1 (id=526):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r1, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)

1.97782ms ago: executing program 2 (id=527):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f00000004c0)={[{@grpquota}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x1200)

1.75082ms ago: executing program 1 (id=528):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000680)={[{@nodioread_nolock}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x797, &(0x7f0000002040)="$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")
setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0)

0s ago: executing program 1 (id=529):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000a40)={0x1c, &(0x7f0000000880)={0x0, 0x11}, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29620' (ED25519) to the list of known hosts.
syzkaller login: [   49.192934][ T5746] cgroup: Unknown subsys name 'net'
[   49.322032][ T5746] cgroup: Unknown subsys name 'cpuset'
[   49.330591][ T5746] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.750972][ T5746] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.868895][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.873774][   T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.876906][   T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.879913][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.883253][   T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.884462][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.889494][   T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.890376][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.897240][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.900846][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.905501][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.907326][ T5202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.910564][ T5202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.917081][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.919695][ T5202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.186659][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   55.279616][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   55.288701][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   55.324063][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.327142][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.330428][ T5822] bridge_slave_0: entered allmulticast mode
[   55.333390][ T5822] bridge_slave_0: entered promiscuous mode
[   55.344085][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.346767][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.350457][ T5822] bridge_slave_1: entered allmulticast mode
[   55.353112][ T5822] bridge_slave_1: entered promiscuous mode
[   55.413757][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.440484][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.469969][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.472465][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.474650][ T5814] bridge_slave_0: entered allmulticast mode
[   55.477271][ T5814] bridge_slave_0: entered promiscuous mode
[   55.480813][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.482929][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.485062][ T5814] bridge_slave_1: entered allmulticast mode
[   55.488447][ T5814] bridge_slave_1: entered promiscuous mode
[   55.520363][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.522573][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.525096][ T5818] bridge_slave_0: entered allmulticast mode
[   55.529311][ T5818] bridge_slave_0: entered promiscuous mode
[   55.532728][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.535171][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.538365][ T5818] bridge_slave_1: entered allmulticast mode
[   55.541568][ T5818] bridge_slave_1: entered promiscuous mode
[   55.545292][ T5822] team0: Port device team_slave_0 added
[   55.549626][ T5822] team0: Port device team_slave_1 added
[   55.553345][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.581568][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.585708][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.596513][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.600318][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.610639][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.624602][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.635399][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.637962][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.645576][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.669614][ T5818] team0: Port device team_slave_0 added
[   55.673016][ T5818] team0: Port device team_slave_1 added
[   55.685935][ T5814] team0: Port device team_slave_0 added
[   55.723179][ T5822] hsr_slave_0: entered promiscuous mode
[   55.726463][ T5822] hsr_slave_1: entered promiscuous mode
[   55.732270][ T5814] team0: Port device team_slave_1 added
[   55.735288][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.737998][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.746807][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.777710][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.780580][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.790623][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.794986][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.797189][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.805282][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.834987][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.837735][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.846302][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.886307][ T5818] hsr_slave_0: entered promiscuous mode
[   55.888950][ T5818] hsr_slave_1: entered promiscuous mode
[   55.891161][ T5818] debugfs: 'hsr0' already exists in 'hsr'
[   55.893097][ T5818] Cannot create hsr debugfs directory
[   55.930947][ T5814] hsr_slave_0: entered promiscuous mode
[   55.933562][ T5814] hsr_slave_1: entered promiscuous mode
[   55.935961][ T5814] debugfs: 'hsr0' already exists in 'hsr'
[   55.938440][ T5814] Cannot create hsr debugfs directory
[   56.165956][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.178130][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.195292][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.202828][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.259771][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.280525][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.304735][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.324803][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.345222][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.357180][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.370508][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.376998][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.413229][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.447113][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   56.461710][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.464390][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.478778][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.481045][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.556215][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.591571][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   56.607333][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.614853][  T946] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.617675][  T946] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.655632][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   56.662940][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.665222][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.680839][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.683079][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.696173][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.698723][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.765541][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.809987][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.878639][ T5822] veth0_vlan: entered promiscuous mode
[   56.893572][ T5822] veth1_vlan: entered promiscuous mode
[   56.923094][ T5822] veth0_macvtap: entered promiscuous mode
[   56.930432][ T5822] veth1_macvtap: entered promiscuous mode
[   56.949130][   T56] Bluetooth: hci1: command tx timeout
[   56.951115][   T56] Bluetooth: hci2: command tx timeout
[   56.953100][   T56] Bluetooth: hci0: command tx timeout
[   56.953148][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.971451][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.990228][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.992619][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.006406][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.010959][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.025457][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.034076][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.104827][ T5818] veth0_vlan: entered promiscuous mode
[   57.126999][  T946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.132065][ T5818] veth1_vlan: entered promiscuous mode
[   57.136904][  T946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.168522][ T5814] veth0_vlan: entered promiscuous mode
[   57.170918][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.173311][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.180122][ T5814] veth1_vlan: entered promiscuous mode
[   57.205337][ T5818] veth0_macvtap: entered promiscuous mode
[   57.212460][ T5818] veth1_macvtap: entered promiscuous mode
[   57.220730][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.226529][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.238391][ T5814] veth0_macvtap: entered promiscuous mode
[   57.242585][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.250126][ T5814] veth1_macvtap: entered promiscuous mode
[   57.264406][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.267168][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.280940][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.289628][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.315798][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.338441][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.347005][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.359833][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.402273][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.409042][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.438150][ T5883] Bluetooth: MGMT ver 1.23
[   57.470857][  T946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.473981][  T946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.498531][ T5883] loop0: detected capacity change from 0 to 512
[   57.506112][ T5883] =======================================================
[   57.506112][ T5883] WARNING: The mand mount option has been deprecated and
[   57.506112][ T5883]          and is ignored by this kernel. Remove the mand
[   57.506112][ T5883]          option from the mount to silence this warning.
[   57.506112][ T5883] =======================================================
[   57.530468][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.536732][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.546404][ T5883] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   57.551979][ T5883] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   57.563325][ T5883] EXT4-fs (loop0): group descriptors corrupted!
[   57.581229][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.592016][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.600264][ T5883] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[   57.636872][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.648961][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.876654][ T5896] loop2: detected capacity change from 0 to 512
[   57.902223][ T5896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.915948][ T5896] EXT4-fs warning (device loop2): ext4_begin_enable_verity:135: inode #15: comm syz.2.8: verity is only allowed on extent-based files
[   57.959410][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.193117][ T5888] loop0: detected capacity change from 0 to 32768
[   58.320790][ T5888] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[   58.325926][ T5888] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   58.347288][ T5888] XFS (loop0): Ending clean mount
[   58.358402][ T5888] XFS (loop0): Quotacheck needed: Please wait.
[   58.402500][ T5888] XFS (loop0): Quotacheck: Done.
[   58.455613][ T5822] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   58.460043][ T5902] loop2: detected capacity change from 0 to 131072
[   58.469720][ T5902] F2FS-fs (loop2): invalid crc value
[   58.523234][ T5902] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   58.542397][ T5902] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   58.770359][ T5921] loop0: detected capacity change from 0 to 1024
[   58.966873][ T5925] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   59.030499][   T56] Bluetooth: hci2: command tx timeout
[   59.030530][ T5820] Bluetooth: hci1: command tx timeout
[   59.033926][ T5202] Bluetooth: hci0: command tx timeout
[   59.273043][ T5864] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   59.429227][ T5947] openvswitch: netlink: nsh attr 0 has unexpected len 16 expected 0
[   59.432684][ T5947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.447597][ T5864] usb 1-1: Using ep0 maxpacket: 16
[   59.452467][ T5864] usb 1-1: config index 0 descriptor too short (expected 46642, got 72)
[   59.459930][ T5864] usb 1-1: config 173 has too many interfaces: 131, using maximum allowed: 32
[   59.462609][ T5864] usb 1-1: config 173 contains an unexpected descriptor of type 0x1, skipping
[   59.465213][ T5864] usb 1-1: config 173 has an invalid descriptor of length 0, skipping remainder of the config
[   59.482650][ T5864] usb 1-1: config 173 has 0 interfaces, different from the descriptor's value: 131
[   59.487968][ T5864] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   59.490798][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.506674][ T5864] usb 1-1: Product: syz
[   59.511737][ T5864] usb 1-1: Manufacturer: syz
[   59.513614][ T5864] usb 1-1: SerialNumber: syz
[   59.653167][ T5943] loop2: detected capacity change from 0 to 32768
[   59.667111][ T5955] evm: overlay not supported
[   59.689713][ T5955] overlayfs: failed to verify index (index/00fb2100013ec9369d9d70467b9782b2aa5c3f54ae81e9f6406300000000000000, ftype=8000, err=-61)
[   59.694216][ T5955] overlayfs: failed index dir cleanup (-61)
[   59.696308][ T5955] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[   59.751744][ T5864] usb 1-1: USB disconnect, device number 2
[   59.818410][ T5960] loop1: detected capacity change from 0 to 1024
[   59.832864][ T5960] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   59.882718][ T5960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.915345][ T5960] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.31: missing EA_INODE flag
[   59.922994][ T5960] EXT4-fs (loop1): Remounting filesystem read-only
[   59.930689][ T5960] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   59.953885][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.986982][ T5968] loop2: detected capacity change from 0 to 512
[   60.001068][ T5968] EXT4-fs (loop2): Test dummy encryption mode enabled
[   60.003742][ T5968] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   60.009298][ T5968] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   60.015506][ T5968] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.33: bad orphan inode 131083
[   60.032458][ T5968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.102000][ T5968] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   60.141873][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.269693][ T5980] loop2: detected capacity change from 0 to 256
[   60.285991][ T5980] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bed01f, utbl_chksum : 0xe619d30d)
[   60.297751][ T5864] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   60.319339][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'.
[   60.467821][ T5864] usb 2-1: Using ep0 maxpacket: 32
[   60.475167][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'.
[   60.478098][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short
[   60.483525][ T5992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'.
[   60.486793][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   60.497805][ T5992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'.
[   60.502844][ T5864] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe
[   60.505985][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.513521][   T24] IPVS: starting estimator thread 0...
[   60.514263][ T5864] usb 2-1: Product: syz
[   60.518394][ T5864] usb 2-1: Manufacturer: syz
[   60.526495][ T5864] usb 2-1: SerialNumber: syz
[   60.532038][ T5864] usb 2-1: config 0 descriptor??
[   60.607576][ T5995] IPVS: using max 49 ests per chain, 117600 per kthread
[   60.631076][ T6000] loop0: detected capacity change from 0 to 1024
[   60.653496][ T6000] EXT4-fs: inline encryption not supported
[   60.694966][ T6000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.742115][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.748655][ T5864] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4
[   60.934735][ T6008] loop2: detected capacity change from 0 to 512
[   60.941566][ T6008] EXT4-fs: Ignoring removed nobh option
[   61.032113][ T6008] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   61.036372][ T6008] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[   61.040298][ T6008] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.47: Corrupt directory, running e2fsck is recommended
[   61.046470][ T6008] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   61.049433][ T6008] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.47: corrupted in-inode xattr: invalid ea_ino
[   61.058232][ T6008] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.47: couldn't read orphan inode 15 (err -117)
[   61.068570][ T6008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.091751][ T5864] usb 2-1: USB disconnect, device number 2
[   61.108061][   T56] Bluetooth: hci1: command tx timeout
[   61.110012][   T56] Bluetooth: hci2: command tx timeout
[   61.111794][   T56] Bluetooth: hci0: command tx timeout
[   61.306295][ T6019] loop0: detected capacity change from 0 to 128
[   61.314172][ T6019] befs: (loop0): blocksize(8192) cannot be larger than system pagesize(4096)
[   61.563429][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.866922][   T34] audit: type=1804 audit(1764000594.518:2): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.60" name="/newroot/19/file0" dev="tmpfs" ino=120 res=1 errno=0
[   61.882348][ T6040] loop0: detected capacity change from 0 to 32768
[   61.950784][ T6048] loop2: detected capacity change from 0 to 512
[   61.954340][ T6048] journal_path: not usable as path
[   61.956547][ T6048] EXT4-fs: error: could not find journal device path
[   61.960439][ T2280] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   62.134391][ T2280] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[   62.153856][ T2280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.157219][ T2280] usb 2-1: Product: syz
[   62.161843][ T2280] usb 2-1: Manufacturer: syz
[   62.163833][ T2280] usb 2-1: SerialNumber: syz
[   62.172109][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'.
[   62.180715][ T2280] usb 2-1: config 0 descriptor??
[   62.192937][ T2280] gspca_main: sunplus-2.14.0 probing 055f:c230
[   62.212182][ T6056] syz.2.65 uses obsolete (PF_INET,SOCK_PACKET)
[   62.214590][ T6056] syzkaller1: entered promiscuous mode
[   62.216437][ T6056] syzkaller1: entered allmulticast mode
[   62.321891][ T6060] loop0: detected capacity change from 0 to 16
[   62.324671][ T6060] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   62.483785][ T6066] loop0: detected capacity change from 0 to 1024
[   62.577524][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   62.729914][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   62.737610][   T10] usb 3-1: config 0 has no interface number 0
[   62.740185][   T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.759709][   T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.763332][   T10] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   62.772228][   T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[   62.775662][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.781930][   T10] usb 3-1: config 0 descriptor??
[   62.969201][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.187674][ T5202] Bluetooth: hci0: command tx timeout
[   63.187765][ T5820] Bluetooth: hci1: command tx timeout
[   63.190450][   T56] Bluetooth: hci2: command tx timeout
[   63.405573][   T10] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0001/input/input5
[   63.475356][   T10] uclogic 0003:28BD:0042.0001: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1
[   63.496716][   T10] usb 3-1: USB disconnect, device number 2
[   64.017638][   T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   64.018367][ T2280] gspca_sunplus: reg_r err -71
[   64.028050][ T2280] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[   64.035416][ T2280] usb 2-1: USB disconnect, device number 3
[   64.180697][   T10] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[   64.183997][   T10] usb 1-1: config 0 has no interface number 0
[   64.200852][   T10] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   64.204463][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.219428][   T10] usb 1-1: Product: syz
[   64.221174][   T10] usb 1-1: Manufacturer: syz
[   64.222922][   T10] usb 1-1: SerialNumber: syz
[   64.228827][   T10] usb 1-1: config 0 descriptor??
[   64.484405][ T6113] loop2: detected capacity change from 0 to 4096
[   64.508243][ T6113] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   64.513699][ T6113] ntfs3(loop2): Failed to load $UpCase (-22).
[   64.793077][ T6129] loop1: detected capacity change from 0 to 128
[   64.814627][ T6129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.96'.
[   64.947516][ T2280] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   64.950004][ T6135] capability: warning: `syz.1.99' uses deprecated v2 capabilities in a way that may be insecure
[   65.110518][ T2280] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[   65.114671][ T2280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.118716][ T2280] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[   65.123745][ T2280] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[   65.127260][ T2280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.138411][ T2280] usb 3-1: config 0 descriptor??
[   65.252934][   T10] usb 1-1: non-Atmel transceiver xxxxc000
[   65.270636][ T6145] bpf: Bad value for 'uid'
[   65.455740][   T10] usb 1-1: Firmware version (0.0) predates our first public release.
[   65.458970][   T10] usb 1-1: Please update to version 0.2 or newer
[   65.462748][   T10] usb 1-1: atusb_probe: initialization failed, error = -19
[   65.473174][   T10] usb 1-1: USB disconnect, device number 3
[   65.561841][ T2280] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0
[   65.564347][ T2280] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0
[   65.568193][ T2280] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0
[   65.570974][ T2280] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0
[   65.577928][ T2280] holtek_kbd 0003:04D9:A055.0002: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0
[   65.774313][ T5878] usb 3-1: USB disconnect, device number 3
[   66.701489][ T6202] loop0: detected capacity change from 0 to 32768
[   66.719343][ T6202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.131 (6202)
[   66.739493][ T6202] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   66.744217][ T6202] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   66.749782][ T6202] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   66.837857][ T6202] BTRFS info (device loop0): rebuilding free space tree
[   66.867233][ T6202] BTRFS info (device loop0): disabling free space tree
[   66.874984][ T6202] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   66.879788][ T6202] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   66.894363][ T6202] BTRFS info (device loop0): enabling ssd optimizations
[   66.897268][ T6202] BTRFS info (device loop0): turning off barriers
[   66.899623][ T6202] BTRFS info (device loop0): turning on flush-on-commit
[   66.902331][ T6202] BTRFS info (device loop0): enabling disk space caching
[   66.904459][ T6202] BTRFS info (device loop0): force clearing of disk cache
[   66.906979][ T6202] BTRFS info (device loop0): use zlib compression, level 3
[   66.947738][ T5822] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   67.094851][ T6233] fuse: Bad value for 'fd'
[   67.207043][ T6243] netlink: 'syz.1.144': attribute type 2 has an invalid length.
[   67.246772][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'.
[   67.255892][ T6249] process 'syz.0.146' launched './file0' with NULL argv: empty string added
[   67.430354][ T6260] loop0: detected capacity change from 0 to 4096
[   67.617652][ T6268] warning: `syz.0.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.754242][ T6264] loop2: detected capacity change from 0 to 32768
[   67.799089][ T6264] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   67.837327][ T5814] ocfs2: Unmounting device (7,2) on (node local)
[   68.008268][ T6280] loop0: detected capacity change from 0 to 32768
[   68.068108][   T27] read_mapping_page failed!
[   68.070177][   T27] ERROR: (device loop0): txCommit: 
[   68.070177][   T27] 
[   68.074465][   T27] ERROR: (device loop0): remounting filesystem as read-only
[   68.077125][   T27] jfs_write_inode: jfs_commit_inode failed!
[   68.771270][ T6317] loop0: detected capacity change from 0 to 128
[   68.848315][ T6317] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /syz-executor /syz-executor /newroot/65/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   68.981410][ T6328] loop0: detected capacity change from 0 to 512
[   69.027334][ T6328] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   69.031650][ T6328] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   69.034887][ T6328] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.180: Corrupt directory, running e2fsck is recommended
[   69.041008][ T6328] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   69.044113][ T6328] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.180: corrupted in-inode xattr: invalid ea_ino
[   69.058518][ T6328] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.180: couldn't read orphan inode 15 (err -117)
[   69.066182][ T6328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.089497][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.207544][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'.
[   69.256427][ T6349] loop0: detected capacity change from 0 to 256
[   69.342685][ T5864] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   69.419595][ T6361] netlink: 'syz.1.195': attribute type 3 has an invalid length.
[   69.422842][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'.
[   69.499612][ T5864] usb 3-1: Using ep0 maxpacket: 32
[   69.504818][ T5864] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   69.517003][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.539971][ T5864] usb 3-1: config 0 descriptor??
[   69.611975][ T6373] loop0: detected capacity change from 0 to 512
[   69.646855][ T6373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.652542][ T6373] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.664694][   T34] audit: type=1800 audit(1764000602.318:3): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.201" name="file1" dev="loop0" ino=15 res=0 errno=0
[   69.676895][   T34] audit: type=1800 audit(1764000602.328:4): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.201" name="file2" dev="loop0" ino=16 res=0 errno=0
[   69.694904][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.757341][ T5864] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   69.768707][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   69.773980][ T5864] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   69.779663][ T5864] usb 3-1: media controller created
[   69.796509][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   69.872995][ T6387] loop0: detected capacity change from 0 to 64
[   69.960233][ T5864] az6027: usb out operation failed. (-71)
[   69.964749][ T5864] az6027: usb out operation failed. (-71)
[   69.967663][ T5864] stb0899_attach: Driver disabled by Kconfig
[   69.969665][ T5864] az6027: no front-end attached
[   69.969665][ T5864] 
[   69.977841][ T5864] az6027: usb out operation failed. (-71)
[   69.979889][ T5864] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   69.998416][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[   70.003992][ T5864] dvb-usb: schedule remote query interval to 400 msecs.
[   70.008030][ T5864] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   70.012117][ T5864] usb 3-1: USB disconnect, device number 4
[   70.097252][ T5864] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   70.181910][ T6399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.212'.
[   70.196151][ T6393] loop0: detected capacity change from 0 to 32768
[   70.230610][ T6393] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   70.252359][   T34] audit: type=1800 audit(1764000602.908:5): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.209" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   70.283262][ T5822] ocfs2: Unmounting device (7,0) on (node local)
[   70.380291][ T6407] loop0: detected capacity change from 0 to 128
[   70.411097][ T6407] FAT-fs (loop0): bogus number of FAT structure
[   70.422927][ T6407] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   70.431921][ T6407] FAT-fs (loop0): Can't find a valid FAT filesystem
[   70.762616][ T6425] netlink: 'syz.0.223': attribute type 4 has an invalid length.
[   70.765003][ T6425] netlink: 'syz.0.223': attribute type 1 has an invalid length.
[   70.767823][ T6425] netlink: 228 bytes leftover after parsing attributes in process `syz.0.223'.
[   70.776505][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.224'.
[   70.835283][ T6427] syzkaller0: tun_chr_ioctl cmd 2147767507
[   70.957579][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   71.074172][ T6433] loop0: detected capacity change from 0 to 32768
[   71.093456][ T6433] ERROR: (device loop0): dbFindCtl: Corrupt dmapctl page
[   71.093456][ T6433] 
[   71.097298][ T6433] ERROR: (device loop0): remounting filesystem as read-only
[   71.100137][ T6433] ialloc: diAlloc returned -5!
[   71.117521][   T10] usb 3-1: Using ep0 maxpacket: 16
[   71.121011][   T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.124697][   T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.141976][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[   71.144657][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[   71.157575][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.163750][   T10] usb 3-1: config 0 descriptor??
[   71.433901][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.436882][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.580653][   T10] apple 0003:05AC:0247.0003: unknown main item tag 0x0
[   71.583375][   T10] apple 0003:05AC:0247.0003: unknown main item tag 0x0
[   71.585654][   T10] apple 0003:05AC:0247.0003: unknown main item tag 0x0
[   71.589502][   T10] apple 0003:05AC:0247.0003: unknown main item tag 0x0
[   71.592597][   T10] apple 0003:05AC:0247.0003: unknown main item tag 0x0
[   71.595055][   T10] apple 0003:05AC:0247.0003: unknown main item tag 0x0
[   71.598407][   T10] apple 0003:05AC:0247.0003: unknown main item tag 0x0
[   71.601289][   T10] apple 0003:05AC:0247.0003: unknown main item tag 0x0
[   71.603652][   T10] apple 0003:05AC:0247.0003: unknown main item tag 0x0
[   71.606134][   T10] apple 0003:05AC:0247.0003: unknown main item tag 0x0
[   71.611817][   T10] apple 0003:05AC:0247.0003: unexpected long global item
[   71.614490][   T10] apple 0003:05AC:0247.0003: parse failed
[   71.616451][   T10] apple 0003:05AC:0247.0003: probe with driver apple failed with error -22
[   71.791660][   T10] usb 3-1: USB disconnect, device number 5
[   72.880228][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'.
[   72.883916][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'.
[   73.297481][ T5864] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   73.447821][ T5864] usb 3-1: Using ep0 maxpacket: 16
[   73.453405][ T5864] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   73.456557][ T5864] usb 3-1: config 1 has no interface number 1
[   73.463043][ T5864] usb 3-1: config 1 interface 2 has no altsetting 0
[   73.471765][ T5864] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   73.475862][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.485273][ T5864] usb 3-1: Product: syz
[   73.491818][ T5864] usb 3-1: Manufacturer: syz
[   73.498498][ T5864] usb 3-1: SerialNumber: syz
[   73.740845][ T5864] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   73.752486][ T5864] usb 3-1: selecting invalid altsetting 0
[   73.757841][ T5864] usb 3-1: usbmixer: too many channels (44) in unit 6
[   73.802585][ T5864] usb 3-1: USB disconnect, device number 6
[   73.832586][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   73.991420][ T6507] loop0: detected capacity change from 0 to 32768
[   73.996526][ T6507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.263 (6507)
[   74.007761][ T6507] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   74.012117][ T6507] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   74.016116][ T6507] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   74.071389][ T6507] BTRFS info (device loop0): rebuilding free space tree
[   74.082936][ T6507] BTRFS info (device loop0): disabling free space tree
[   74.085700][ T6507] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   74.089091][ T6507] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   74.098372][ T6507] BTRFS info (device loop0): enabling ssd optimizations
[   74.101419][ T6507] BTRFS info (device loop0): enabling disk space caching
[   74.104180][ T6507] BTRFS info (device loop0): force clearing of disk cache
[   74.106510][ T6507] BTRFS info (device loop0): enabling auto defrag
[   74.108960][ T6507] BTRFS info (device loop0): max_inline set to 0
[   74.182954][ T5822] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   74.250781][ T6530] trusted_key: encrypted_key: key trusted:syz not found
[   74.294409][   T34] audit: type=1326 audit(1764000606.938:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.268" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2505d8f749 code=0x0
[   74.520546][ T6554] loop0: detected capacity change from 0 to 512
[   74.575875][ T6554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.278: iget: bad extra_isize 90 (inode size 256)
[   74.613881][ T6554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.278: error while reading EA inode 11 err=-117
[   74.644637][ T6554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.278: iget: bad extra_isize 90 (inode size 256)
[   74.690929][ T6554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.278: error while reading EA inode 11 err=-117
[   74.724264][ T6554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.278: iget: bad extra_isize 90 (inode size 256)
[   74.747243][ T6554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.278: error while reading EA inode 18 err=-117
[   74.769798][ T6554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.278: iget: bad extra_isize 90 (inode size 256)
[   74.784650][ T6554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.278: error while reading EA inode 18 err=-117
[   74.791453][ T6554] EXT4-fs (loop0): 1 orphan inode deleted
[   74.795058][ T6554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.812067][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.642388][ T6573] loop0: detected capacity change from 0 to 4096
[   75.653003][ T6573] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   75.689305][   T10] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[   75.722349][ T6573] ntfs3(loop0): ino=19, mi_enum_attr
[   75.840028][   T10] usb 3-1: config 8 has an invalid interface number: 233 but max is 0
[   75.844156][   T10] usb 3-1: config 8 has no interface number 0
[   75.846155][   T10] usb 3-1: config 8 interface 233 has no altsetting 0
[   75.862526][   T10] usb 3-1: string descriptor 0 read error: -22
[   75.865123][   T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c
[   75.868352][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.878070][   T10] cp210x 3-1:8.233: cp210x converter detected
[   76.037837][ T5878] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   76.079510][   T10] cp210x 3-1:8.233: failed to get vendor val 0x370b size 1: -71
[   76.082084][   T10] cp210x 3-1:8.233: querying part number failed
[   76.100411][   T10] usb 3-1: cp210x converter now attached to ttyUSB0
[   76.108169][   T10] usb 3-1: USB disconnect, device number 7
[   76.114136][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   76.117290][   T10] cp210x 3-1:8.233: device disconnected
[   76.197702][ T5878] usb 1-1: Using ep0 maxpacket: 16
[   76.203418][ T5878] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[   76.206916][ T5878] usb 1-1: config 0 has no interface number 0
[   76.217125][ T5878] usb 1-1: New USB device found, idVendor=0411, idProduct=006e, bcdDevice=c1.05
[   76.221606][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.234469][ T5878] usb 1-1: config 0 descriptor??
[   76.242810][ T5878] asix 1-1:0.231: probe with driver asix failed with error -22
[   76.454524][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.463385][ T6581] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   76.660016][ T6604] loop2: detected capacity change from 0 to 4096
[   77.152475][ T6609] sctp: [Deprecated]: syz.2.302 (pid 6609) Use of int in max_burst socket option.
[   77.152475][ T6609] Use struct sctp_assoc_value instead
[   77.559425][ T6623] loop2: detected capacity change from 0 to 4096
[   77.567856][ T6623] ntfs3(loop2): ino=3, Correct links count -> 2.
[   77.686272][ T6629] loop2: detected capacity change from 0 to 16
[   77.701936][ T6629] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 63300)
[   77.785097][ T6633] loop2: detected capacity change from 0 to 47
[   77.870136][ T6638] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.913232][ T6640] loop2: detected capacity change from 0 to 16
[   77.919106][ T6640] erofs (device loop2): mounted with root inode @ nid 36.
[   78.011497][ T6644] loop2: detected capacity change from 0 to 128
[   78.026692][ T6644] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   78.034198][ T6644] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   78.070733][ T5814] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   78.311031][ T6657] loop2: detected capacity change from 0 to 1024
[   78.359845][ T6657] hfsplus: xattr searching failed
[   78.363871][ T6657] hfsplus: xattr search failed
[   78.382546][ T5814] hfsplus: node 4:3 still has 1 user(s)!
[   78.512204][   T10] IPVS: starting estimator thread 0...
[   78.574643][ T6674] loop2: detected capacity change from 0 to 4096
[   78.578841][ T6674] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   78.597568][ T6670] IPVS: using max 80 ests per chain, 192000 per kthread
[   78.739892][ T6684] loop2: detected capacity change from 0 to 8
[   78.754381][ T6684] unable to read xattr id index table
[   78.843545][ T6685] sctp: [Deprecated]: syz.2.336 (pid 6685) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.843545][ T6685] Use struct sctp_sack_info instead
[   78.843775][ T6687] fuse: Bad value for 'fd'
[   78.929452][ T5878] usb 1-1: USB disconnect, device number 4
[   78.992261][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'.
[   79.206372][ T6696] loop0: detected capacity change from 0 to 512
[   79.270630][ T6696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.303041][ T6696] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   79.366839][ T6696] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.340: corrupted inode contents
[   79.366920][ T6702] overlayfs: failed to clone upperpath
[   79.391462][ T6696] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.340: mark_inode_dirty error
[   79.403951][ T6696] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.340: corrupted inode contents
[   79.413115][ T6696] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.340: mark_inode_dirty error
[   79.494895][ T6707] netlink: 'syz.1.345': attribute type 63 has an invalid length.
[   79.549544][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.688894][ T6710] loop0: detected capacity change from 0 to 2048
[   79.751650][ T6710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.786782][ T6710] cifs: Unknown parameter 'norecovery'
[   79.831896][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.847320][ T6739] fuse: Bad value for 'fd'
[   81.545511][ T6755] trusted_key: encrypted_key: master key parameter 'C' is invalid
[   81.681081][ T1234] cfg80211: failed to load regulatory.db
[   81.762212][   T10] IPVS: starting estimator thread 0...
[   81.864515][ T6763] IPVS: using max 78 ests per chain, 187200 per kthread
[   82.114528][ T6770] trusted_key: encrypted_key: key user:syz not found
[   82.872172][ T6694] hid_parser_main: 839 callbacks suppressed
[   82.872191][ T6694] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   82.883003][ T6694] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2
[   82.886325][ T6694] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   82.891038][ T6694] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   82.894149][ T6694] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   82.897193][ T6694] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   82.900819][ T6694] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   82.904181][ T6694] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   82.907175][ T6694] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   82.910719][ T6694] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   82.918080][ T6694] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   83.098151][ T6810] loop2: detected capacity change from 0 to 512
[   83.123348][ T6810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.174470][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.305422][   T34] audit: type=1326 audit(1764000615.958:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.394" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2505d8f749 code=0x7ffc0000
[   83.314859][   T34] audit: type=1326 audit(1764000615.958:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.394" exe="/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f2505d8f749 code=0x7ffc0000
[   83.325043][   T34] audit: type=1326 audit(1764000615.958:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.394" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2505d8f749 code=0x7ffc0000
[   83.332569][   T34] audit: type=1326 audit(1764000615.958:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.394" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2505d8f749 code=0x7ffc0000
[   83.458756][   T34] audit: type=1326 audit(1764000616.118:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.1.397" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2505d8f749 code=0x0
[   83.613166][ T6840] netlink: 56 bytes leftover after parsing attributes in process `syz.2.402'.
[   85.277517][  T793] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   85.427626][  T793] usb 1-1: Using ep0 maxpacket: 8
[   85.437047][  T793] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[   85.439246][ T6887] Zero length message leads to an empty skb
[   85.442500][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.445700][  T793] usb 1-1: Product: syz
[   85.447841][  T793] usb 1-1: Manufacturer: syz
[   85.449331][  T793] usb 1-1: SerialNumber: syz
[   85.453149][  T793] usb 1-1: config 0 descriptor??
[   85.529967][   T34] audit: type=1800 audit(1764000618.188:12): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.423" name="file1" dev="tmpfs" ino=1029 res=0 errno=0
[   85.661730][  T793] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[   85.704655][ T6902] openvswitch: netlink: Unknown key attributes 2
[   86.065432][  T793] usb write operation failed. (-71)
[   86.075336][  T793] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   86.091138][  T793] dvbdev: DVB: registering new adapter (Terratec H7)
[   86.093879][  T793] usb 1-1: media controller created
[   86.099194][  T793] usb read operation failed. (-71)
[   86.101479][  T793] usb write operation failed. (-71)
[   86.106199][  T793] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[   86.110664][  T793] usb 1-1: USB disconnect, device number 5
[   86.347473][ T1234] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   86.519499][ T1234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   86.524110][ T1234] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   86.527833][ T1234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.533264][ T1234] usb 3-1: config 0 descriptor??
[   86.538103][ T6926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   87.049128][ T1234] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[   87.837517][ T6960] loop0: detected capacity change from 0 to 32768
[   87.846143][ T6960] (syz.0.454,6960,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: directory entry overrun - offset=160, inode=72, rec_len=2332, name_len=15
[   87.852154][ T6960] (syz.0.454,6960,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=7, slot=0
[   87.855405][ T6960] (syz.0.454,6960,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[   87.858272][ T6960] (syz.0.454,6960,1):ocfs2_mount_volume:1758 ERROR: status = -22
[   87.862463][ T6960] (syz.0.454,6960,1):ocfs2_fill_super:1177 ERROR: status = -22
[   88.091288][ T6969] loop0: detected capacity change from 0 to 512
[   88.120916][ T6969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.124961][ T6969] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   88.132922][ T6969] EXT4-fs (loop0): shut down requested (2)
[   88.150322][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.417691][ T5864] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   88.577515][ T5864] usb 1-1: Using ep0 maxpacket: 16
[   88.581431][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.585719][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.589804][ T5864] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[   88.597549][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.603678][ T5864] usb 1-1: config 0 descriptor??
[   88.896882][  T793] usb 3-1: USB disconnect, device number 8
[   89.023046][ T5864] hid_parser_main: 24 callbacks suppressed
[   89.023062][ T5864] logitech 0003:046D:C50C.0006: unknown main item tag 0x0
[   89.029803][ T5864] logitech 0003:046D:C50C.0006: unknown main item tag 0x0
[   89.033529][ T5864] logitech 0003:046D:C50C.0006: unknown main item tag 0x0
[   89.036401][ T5864] logitech 0003:046D:C50C.0006: unknown main item tag 0x0
[   89.039530][ T5864] logitech 0003:046D:C50C.0006: unknown main item tag 0x0
[   89.040873][ T6997] hsr0: entered promiscuous mode
[   89.042340][ T5864] logitech 0003:046D:C50C.0006: unknown main item tag 0x0
[   89.042368][ T5864] logitech 0003:046D:C50C.0006: unknown main item tag 0x0
[   89.042386][ T5864] logitech 0003:046D:C50C.0006: unknown main item tag 0x0
[   89.044769][ T6997] macsec1: entered promiscuous mode
[   89.048234][ T5864] logitech 0003:046D:C50C.0006: unknown main item tag 0x0
[   89.059701][ T5864] logitech 0003:046D:C50C.0006: unknown main item tag 0x0
[   89.064577][ T5864] logitech 0003:046D:C50C.0006: item 0 0 0 8 parsing failed
[   89.069192][ T5864] logitech 0003:046D:C50C.0006: parse failed
[   89.072038][ T5864] logitech 0003:046D:C50C.0006: probe with driver logitech failed with error -22
[   89.228033][ T5878] usb 1-1: USB disconnect, device number 6
[   89.621372][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.474'.
[   89.624795][ T7006] netlink: 'syz.1.474': attribute type 7 has an invalid length.
[   89.627321][ T7006] netlink: 'syz.1.474': attribute type 8 has an invalid length.
[   89.634708][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'.
[   89.988237][ T7014] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[   90.118984][   T34] audit: type=1326 audit(1764000622.768:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135b78f749 code=0x7ffc0000
[   90.154600][   T34] audit: type=1326 audit(1764000622.768:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135b78f749 code=0x7ffc0000
[   90.162746][   T34] audit: type=1326 audit(1764000622.778:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.480" exe="/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f135b78f749 code=0x7ffc0000
[   90.171346][   T34] audit: type=1326 audit(1764000622.778:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.480" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135b78f749 code=0x7ffc0000
[   91.128545][ T7076] syzkaller1: entered promiscuous mode
[   91.130581][ T7076] syzkaller1: entered allmulticast mode
[   92.266613][ T7107] loop2: detected capacity change from 0 to 4096
[   92.287548][ T1234] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   92.437470][ T1234] usb 1-1: Using ep0 maxpacket: 16
[   92.441130][ T1234] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[   92.444949][ T1234] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[   92.449158][ T1234] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.453840][ T1234] usb 1-1: config 1 interface 0 has no altsetting 0
[   92.460103][ T1234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   92.463534][ T1234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.466198][ T1234] usb 1-1: Product: syz
[   92.468009][ T1234] usb 1-1: Manufacturer: syz
[   92.469576][ T1234] usb 1-1: SerialNumber: syz
[   92.564671][ T7122] loop2: detected capacity change from 0 to 2048
[   92.604869][ T7122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.686510][ T1234] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[   92.890590][ T1234] usb 1-1: USB disconnect, device number 7
[   92.896581][ T1234] usblp0: removed
[   92.921747][ T1090] 
[   92.922735][ T1090] ======================================================
[   92.925314][ T1090] WARNING: possible circular locking dependency detected
[   92.927919][ T1090] syzkaller #0 Not tainted
[   92.929713][ T1090] ------------------------------------------------------
[   92.932136][ T1090] kworker/u10:4/1090 is trying to acquire lock:
[   92.934156][ T1090] ffff8881b66543b8 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0
[   92.937838][ T1090] 
[   92.937838][ T1090] but task is already holding lock:
[   92.940705][ T1090] ffff888113a20b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350
[   92.944721][ T1090] 
[   92.944721][ T1090] which lock already depends on the new lock.
[   92.944721][ T1090] 
[   92.948831][ T1090] 
[   92.948831][ T1090] the existing dependency chain (in reverse order) is:
[   92.951954][ T1090] 
[   92.951954][ T1090] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[   92.954635][ T1090]        lock_acquire+0x120/0x360
[   92.956385][ T1090]        percpu_down_read_internal+0x48/0x1c0
[   92.958550][ T1090]        ext4_writepages+0x1cc/0x350
[   92.960252][ T1090]        do_writepages+0x32e/0x550
[   92.961864][ T1090]        __writeback_single_inode+0x145/0xff0
[   92.963757][ T1090]        writeback_single_inode+0x1f9/0x6a0
[   92.965669][ T1090]        write_inode_now+0x160/0x1d0
[   92.967274][ T1090]        iput+0x830/0xc50
[   92.968591][ T1090]        ext4_xattr_block_set+0x1fce/0x2ac0
[   92.970543][ T1090]        ext4_expand_extra_isize_ea+0x12da/0x1ea0
[   92.973002][ T1090]        __ext4_expand_extra_isize+0x30d/0x400
[   92.975262][ T1090]        __ext4_mark_inode_dirty+0x46c/0x700
[   92.977576][ T1090]        ext4_evict_inode+0x80d/0xee0
[   92.979413][ T1090]        evict+0x504/0x9c0
[   92.981043][ T1090]        ext4_orphan_cleanup+0xc20/0x1460
[   92.982916][ T1090]        ext4_fill_super+0x5920/0x61e0
[   92.984697][ T1090]        get_tree_bdev_flags+0x40e/0x4d0
[   92.986629][ T1090]        vfs_get_tree+0x92/0x2b0
[   92.988268][ T1090]        do_new_mount+0x302/0xa10
[   92.989929][ T1090]        __se_sys_mount+0x313/0x410
[   92.991617][ T1090]        do_syscall_64+0xfa/0xfa0
[   92.993293][ T1090]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.995377][ T1090] 
[   92.995377][ T1090] -> #0 (&ei->xattr_sem){++++}-{4:4}:
[   92.998010][ T1090]        validate_chain+0xb9b/0x2140
[   92.999806][ T1090]        __lock_acquire+0xab9/0xd20
[   93.001485][ T1090]        lock_acquire+0x120/0x360
[   93.003201][ T1090]        down_write+0x96/0x1f0
[   93.005005][ T1090]        ext4_destroy_inline_data+0x28/0xe0
[   93.006949][ T1090]        ext4_do_writepages+0x526/0x4610
[   93.008818][ T1090]        ext4_writepages+0x205/0x350
[   93.010433][ T1090]        do_writepages+0x32e/0x550
[   93.011999][ T1090]        __writeback_single_inode+0x145/0xff0
[   93.013866][ T1090]        writeback_sb_inodes+0x6c7/0x1010
[   93.015613][ T1090]        wb_writeback+0x43b/0xaf0
[   93.017274][ T1090]        wb_workfn+0x409/0xef0
[   93.018817][ T1090]        process_scheduled_works+0xae1/0x17b0
[   93.020622][ T1090]        worker_thread+0x8a0/0xda0
[   93.022193][ T1090]        kthread+0x711/0x8a0
[   93.023663][ T1090]        ret_from_fork+0x4bc/0x870
[   93.025222][ T1090]        ret_from_fork_asm+0x1a/0x30
[   93.026902][ T1090] 
[   93.026902][ T1090] other info that might help us debug this:
[   93.026902][ T1090] 
[   93.029971][ T1090]  Possible unsafe locking scenario:
[   93.029971][ T1090] 
[   93.032211][ T1090]        CPU0                    CPU1
[   93.033888][ T1090]        ----                    ----
[   93.035570][ T1090]   rlock(&sbi->s_writepages_rwsem);
[   93.037241][ T1090]                                lock(&ei->xattr_sem);
[   93.039388][ T1090]                                lock(&sbi->s_writepages_rwsem);
[   93.041881][ T1090]   lock(&ei->xattr_sem);
[   93.043278][ T1090] 
[   93.043278][ T1090]  *** DEADLOCK ***
[   93.043278][ T1090] 
[   93.045835][ T1090] 3 locks held by kworker/u10:4/1090:
[   93.047836][ T1090]  #0: ffff888161edf948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   93.052279][ T1090]  #1: ffffc90007c1fba0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   93.057270][ T1090]  #2: ffff888113a20b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350
[   93.061259][ T1090] 
[   93.061259][ T1090] stack backtrace:
[   93.063576][ T1090] CPU: 1 UID: 0 PID: 1090 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[   93.063590][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.063655][ T1090] Workqueue: writeback wb_workfn (flush-7:2)
[   93.063677][ T1090] Call Trace:
[   93.063684][ T1090]  <TASK>
[   93.063690][ T1090]  dump_stack_lvl+0x189/0x250
[   93.063708][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.063722][ T1090]  ? __pfx__printk+0x10/0x10
[   93.063734][ T1090]  ? print_lock_name+0xde/0x100
[   93.063746][ T1090]  print_circular_bug+0x2ee/0x310
[   93.063760][ T1090]  check_noncircular+0x134/0x160
[   93.063819][ T1090]  validate_chain+0xb9b/0x2140
[   93.063836][ T1090]  ? ret_from_fork_asm+0x1a/0x30
[   93.063851][ T1090]  __lock_acquire+0xab9/0xd20
[   93.063863][ T1090]  ? ext4_destroy_inline_data+0x28/0xe0
[   93.063878][ T1090]  lock_acquire+0x120/0x360
[   93.063887][ T1090]  ? ext4_destroy_inline_data+0x28/0xe0
[   93.063902][ T1090]  ? worker_thread+0x8a0/0xda0
[   93.063916][ T1090]  down_write+0x96/0x1f0
[   93.063928][ T1090]  ? ext4_destroy_inline_data+0x28/0xe0
[   93.063942][ T1090]  ? __pfx_down_write+0x10/0x10
[   93.063953][ T1090]  ? ext4_journal_check_start+0x1cf/0x2b0
[   93.063966][ T1090]  ext4_destroy_inline_data+0x28/0xe0
[   93.063982][ T1090]  ext4_do_writepages+0x526/0x4610
[   93.063993][ T1090]  ? kasan_quarantine_put+0xdd/0x220
[   93.064007][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.064023][ T1090]  ? ieee80211_inform_bss+0xbd9/0x10a0
[   93.064037][ T1090]  ? kfree+0x19a/0x6d0
[   93.064053][ T1090]  ? ieee80211_inform_bss+0xbd9/0x10a0
[   93.064068][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.064083][ T1090]  ? __local_bh_enable_ip+0x12d/0x1c0
[   93.064094][ T1090]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   93.064105][ T1090]  ? rcu_is_watching+0x15/0xb0
[   93.064118][ T1090]  ? __pfx_ext4_do_writepages+0x10/0x10
[   93.064128][ T1090]  ? cfg80211_inform_single_bss_data+0x13da/0x1ac0
[   93.064144][ T1090]  ? look_up_lock_class+0x74/0x170
[   93.064158][ T1090]  ? register_lock_class+0x51/0x320
[   93.064169][ T1090]  ? __lock_acquire+0xab9/0xd20
[   93.064180][ T1090]  ? rcu_read_lock_any_held+0xb3/0x120
[   93.064198][ T1090]  ext4_writepages+0x205/0x350
[   93.064212][ T1090]  ? __pfx_ext4_writepages+0x10/0x10
[   93.064226][ T1090]  ? unwind_next_frame+0x19ae/0x2390
[   93.064241][ T1090]  ? __pfx_ext4_writepages+0x10/0x10
[   93.064254][ T1090]  do_writepages+0x32e/0x550
[   93.064268][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[   93.064279][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[   93.064296][ T1090]  __writeback_single_inode+0x145/0xff0
[   93.064311][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[   93.064326][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[   93.064341][ T1090]  ? __lock_acquire+0xab9/0xd20
[   93.064356][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   93.064380][ T1090]  ? rcu_is_watching+0x15/0xb0
[   93.064393][ T1090]  wb_writeback+0x43b/0xaf0
[   93.064409][ T1090]  ? queue_io+0x391/0x590
[   93.064424][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[   93.064439][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.064454][ T1090]  wb_workfn+0x409/0xef0
[   93.064470][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[   93.064496][ T1090]  ? __lock_acquire+0xab9/0xd20
[   93.064507][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[   93.064518][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.064530][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[   93.064539][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[   93.064549][ T1090]  process_scheduled_works+0xae1/0x17b0
[   93.064564][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[   93.064577][ T1090]  worker_thread+0x8a0/0xda0
[   93.064592][ T1090]  kthread+0x711/0x8a0
[   93.064606][ T1090]  ? __pfx_worker_thread+0x10/0x10
[   93.064617][ T1090]  ? __pfx_kthread+0x10/0x10
[   93.064628][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.064639][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.064652][ T1090]  ? __pfx_kthread+0x10/0x10
[   93.064665][ T1090]  ret_from_fork+0x4bc/0x870
[   93.064677][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[   93.064689][ T1090]  ? __switch_to_asm+0x39/0x70
[   93.064697][ T1090]  ? __switch_to_asm+0x33/0x70
[   93.064706][ T1090]  ? __pfx_kthread+0x10/0x10
[   93.064719][ T1090]  ret_from_fork_asm+0x1a/0x30
[   93.064731][ T1090]  </TASK>
[   93.207663][ T1090] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   93.213433][ T1090] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   93.220499][ T1090] EXT4-fs (loop2): This should not happen!! Data will be lost
[   93.220499][ T1090] 
[   93.223570][ T1090] EXT4-fs (loop2): Total free blocks count 0
[   93.225454][ T1090] EXT4-fs (loop2): Free/Dirty block details
[   93.227333][ T1090] EXT4-fs (loop2): free_blocks=66060288
[   93.229381][ T1090] EXT4-fs (loop2): dirty_blocks=8208
[   93.231065][ T1090] EXT4-fs (loop2): Block reservation details
[   93.233057][ T1090] EXT4-fs (loop2): i_reserved_data_blocks=513
[   93.236308][   T91] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2048 with error 28
