last executing test programs:

1m53.3506954s ago: executing program 1 (id=375):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
listen(r1, 0x100)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x4df, 0x6, 0x3, 0x5}, 0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x20, @loopback}, 0x1c)

1m52.920400334s ago: executing program 1 (id=377):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, 0x0, 0x0, 0x240000f0, &(0x7f0000000100)={0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xba}, 0x1c)

1m52.860983377s ago: executing program 1 (id=379):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003b40)=ANY=[@ANYBLOB="f42200001e00010a000000000000000007"], 0x22f4}}, 0x8080)

1m52.722523409s ago: executing program 1 (id=382):
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {}, [], {0x4, 0x7}, [], {0x10, 0x2}, {0x20, 0x6}}, 0x24, 0x2)
listxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)=""/27, 0x30)

1m52.631898624s ago: executing program 1 (id=386):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'})

1m52.520866042s ago: executing program 1 (id=387):
r0 = epoll_create1(0x80000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
open(0x0, 0x123f42, 0x1c0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x48000008})
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x20000003})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0x2})

1m37.130554667s ago: executing program 32 (id=387):
r0 = epoll_create1(0x80000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
open(0x0, 0x123f42, 0x1c0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x48000008})
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x20000003})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0x2})

3.800157999s ago: executing program 0 (id=1773):
r0 = mq_open(&(0x7f0000000140)='*+@[^#^\x00', 0x40, 0x65, 0x0)
mq_notify(r0, &(0x7f0000000300)={0x0, 0x1b, 0x1, @thr={0x0, 0x0}})
read(r0, 0x0, 0x0)

3.740457554s ago: executing program 0 (id=1774):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b00)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYBLOB="6cdf8f7961c86375815dbf554896386de6c42a145b2da8d8d2daaefa62b863b75227f708353389612d2e675103dbdcbbc133e9792b1044c601e4aea785ed055e46400be76c7e7b12021c9eddb8badf499b592d77bc5817a2d52020c2"], 0x1, 0x5505, &(0x7f0000000340)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)

3.320944884s ago: executing program 0 (id=1783):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000400), 0x3, 0x437, &(0x7f0000000ec0)="$eJzs289rXEUcAPDv201Sk7ZmLVXbtGq0isEfSZPW2oMXRcGDgqCHeoxJWmK3jTQRbAkaRepRCt7Fo+Bf4Ekvop4Er3qXQpEgtHpaebv7kt3tbn6sm2ztfj7w2pk3s8x8973ZnTeTDaBnjab/JBH7IuK3iBiuZOsrjFb+u7W6PPP36vJMEqXSm38m5Xo3V5dnsqrZ6/Zmmb6I3KdJHGnS7uLlK+eni8W5S9X8xNKF9yYWL195dv7C9Lm5c3MXp06fPnli8vlTU891JM40rpsjHy4cPfzq29denzlz7Z2fvkmy+Bvi6JDRjQqfKJU63Fx37a9JJ31d7Ajbkq8M0+gvj//hyMf6xRuOVz7paueAHVUqlUoPtC5eKQF3sSS63QOgO7Iv+vT5Nzt2aepxR7jxYuUBKI37VvWolPRFrlqnv+H5tpNGI+LMyj9fpkfszDoEAECd79L5zzPN5n+5qF0Xure6h1KIiPsi4kBEnIqIgxFxf0S57oMRcWib7Tduktw+/8ldbyuwLUrnfy9U97bq53/Z7C8K+Wpufzn+/uTQUKUgfU/Gon/P2fni3OQGbXz/8q+ftyqrnf+lR9p+Nhes9uN6357618xOL023HXCDGx9HjPQ1iz9Z2wlIIuJwRIy02cb8U18fbVW2efwb6MA+U+mriCcr138lGuLPJBvvT07cE8W54xPpXXC8aRs//3L1jVbt/6f4OyC9/kNN7/+1+AtJ7X7t4vbbuPr7Zy2fadq9/weSt+rOfTC9tHRpMmIgea3S6drzUw31ptbrp/GPHWs+/g/E+jtxJCLSm/ihiHg4Ih6p9v3RiHgsIo5tEP+PLz3+bvvxN/XXJuVblsY/u63rv54YiMYzzRP58z98W9doYTvxp9f/ZDk1Vj2zlc+/rfSrvbsZAAAA/n9yEbEvktz4WjqXGx+v/A3/wRjKFRcWl54+u/D+xdnKbwQK0Z/LVrqGq+uh2fpnoSY/1ZA/UV03/iI/WM6PzywUZ7sdPPS4vS3Gf+qPfLd7B+w4v9eC3mX8Q+8y/qF3Gf/Qu5qM/8Fu9APYfc2+/z/qQj+A3dcw/m37QQ/x/A+9y/iH3mX8Q09aHIzNfyQvIXFbInJ3RDckdijR7U8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvg3AAD//6s75ho=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x8d)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, r1, 0x6, 0x100000000, 0x6, 0x2d1})

2.795278607s ago: executing program 0 (id=1796):
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$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")
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

1.259347383s ago: executing program 3 (id=1815):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

1.259211994s ago: executing program 2 (id=1816):
setgid(0xffffffffffffffff)

1.258983062s ago: executing program 3 (id=1817):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538", 0x58}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4004014}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/99, 0x63}], 0x2}, 0x20)

1.179441822s ago: executing program 2 (id=1818):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000280)='}', 0x1)
setsockopt$inet6_buf(r0, 0x29, 0x22, 0x0, 0x0)

1.179123677s ago: executing program 3 (id=1819):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40)

1.129014316s ago: executing program 3 (id=1820):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r3, r1, 0x4, r1}, 0x10)

1.128698754s ago: executing program 2 (id=1821):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.06486104s ago: executing program 3 (id=1822):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000003c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000580), &(0x7f0000000180)=@v2={0x2000000, [{0xffff, 0x9}, {0x4, 0x8}]}, 0x14, 0x0)
write$FUSE_STATFS(r0, &(0x7f0000000480)={0x60, 0xffffffffffffffda, 0x0, {{0x18, 0x2, 0x2, 0x80000001, 0x3, 0x3, 0x1, 0x2}}}, 0x60)

1.064589609s ago: executing program 2 (id=1823):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

1.038687217s ago: executing program 0 (id=1824):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = timerfd_create(0x8, 0x800)
timerfd_gettime(r4, 0x0)
r5 = dup(r3)
accept$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10)

860.302921ms ago: executing program 2 (id=1825):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file2\x00', 0x8, &(0x7f00000001c0)={[{@clear_cache}, {@space_cache_v1}, {@discard}, {@notreelog}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x5}}]}, 0x1, 0x50ed, &(0x7f00000051c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x44402, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x6042, 0x0)
sendfile(r1, r0, 0x0, 0x80000002)

288.800103ms ago: executing program 3 (id=1826):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c696e6f646536342c6c6f63616c616c6c6f633d30303030303030303030303030303030313731342c61636c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c00882bb7a63864a19f186813ab5265f313eeeea0cb144b9317f58558f596fa072f9a29c38a293509350482fc7f"], 0x1, 0x4450, &(0x7f0000008900)="$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")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000200), 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=@v2={0x3, 0x2, 0x5, 0x7}, 0x9, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1)
capset(&(0x7f0000000000)={0x20080522}, 0x0)
llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2003, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FITRIM(r3, 0x40406f06, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x100})
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x7, 0x7, 0x19ef, 0x3, 0x8, 0x27fe, 0x2800, 0x6, 0xbb6, 0x4, 0x2c, {0x1ff, 0xfffffeff}, 0xd0, 0x6}})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), 0xffffffffffffffff, r4}}, 0x18)

170.20965ms ago: executing program 2 (id=1827):
syz_open_dev$hidraw(0x0, 0x0, 0x14a042)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x60b, 0x0)
write$char_usb(r1, 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x7fe782539b0b)

0s ago: executing program 0 (id=1828):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c810}, 0x40000)
fsopen(&(0x7f0000000000)='exofs\x00', 0x1)

kernel console output (not intermixed with test programs):

): Directory bread(block 69) failed
[   87.029056][ T6322] FAT-fs (loop1): Directory bread(block 70) failed
[   87.031634][ T6322] FAT-fs (loop1): Directory bread(block 71) failed
[   87.034191][ T6322] FAT-fs (loop1): Directory bread(block 72) failed
[   87.044620][ T6322] FAT-fs (loop1): Directory bread(block 73) failed
[   87.154085][ T6328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.206'.
[   87.400303][ T6343] loop1: detected capacity change from 0 to 4096
[   87.866837][ T5978] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   88.027992][ T5978] usb 3-1: Using ep0 maxpacket: 8
[   88.033880][ T5978] usb 3-1: unable to get BOS descriptor or descriptor too short
[   88.043447][ T5978] usb 3-1: config 3 has an invalid interface number: 35 but max is 0
[   88.047092][ T5978] usb 3-1: config 3 has no interface number 0
[   88.051541][ T5978] usb 3-1: config 3 interface 35 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024
[   88.056950][ T5978] usb 3-1: config 3 interface 35 has no altsetting 0
[   88.062941][ T5978] usb 3-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=57.12
[   88.067119][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.070616][ T5978] usb 3-1: Product: syz
[   88.074385][ T5978] usb 3-1: Manufacturer: syz
[   88.076465][ T5978] usb 3-1: SerialNumber: syz
[   88.085111][ T6352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   88.147817][ T6373] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.179816][ T6375] loop1: detected capacity change from 0 to 256
[   88.182930][ T6375] exfat: Deprecated parameter 'namecase'
[   88.184928][ T6375] exfat: Deprecated parameter 'namecase'
[   88.191181][ T6375] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[   88.244625][ T6377] loop1: detected capacity change from 0 to 128
[   88.308803][ T5978] usb 3-1: bad CDC descriptors
[   88.322585][ T6381] loop1: detected capacity change from 0 to 4096
[   88.327810][ T6381] ntfs3(loop1): Failed to load $MFT (-22).
[   88.328050][ T5978] usb 3-1: USB disconnect, device number 3
[   88.426004][ T6386] loop1: detected capacity change from 0 to 256
[   88.433382][ T6386] exfat: Deprecated parameter 'utf8'
[   88.445257][ T6386] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d)
[   88.644332][ T6388] loop0: detected capacity change from 0 to 32768
[   88.650220][ T6388] (syz.0.231,6388,1):ocfs2_verify_volume:2314 ERROR: bad root_blkno: 0
[   88.652954][ T6388] (syz.0.231,6388,1):ocfs2_verify_volume:2331 ERROR: status = -22
[   88.655498][ T6388] (syz.0.231,6388,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   88.658636][ T6388] (syz.0.231,6388,1):ocfs2_fill_super:1177 ERROR: status = -22
[   89.138157][ T6396] loop0: detected capacity change from 0 to 8
[   89.156413][ T6396] cramfs: empty filesystem
[   90.686811][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   90.695470][ T6447] netlink: 'syz.1.256': attribute type 2 has an invalid length.
[   90.832684][ T6451] loop1: detected capacity change from 0 to 1024
[   90.841627][ T6451] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[   90.848710][   T24] usb 1-1: Using ep0 maxpacket: 16
[   90.864306][   T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   90.883123][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.894475][   T24] usb 1-1: Product: syz
[   90.901003][   T24] usb 1-1: Manufacturer: syz
[   90.906895][   T24] usb 1-1: SerialNumber: syz
[   90.922757][   T24] r8152-cfgselector 1-1: Unknown version 0x0000
[   90.930918][   T24] r8152-cfgselector 1-1: config 0 descriptor??
[   91.161657][ T6455] loop2: detected capacity change from 0 to 128
[   91.209235][ T6455] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   91.227990][ T6455] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   91.323272][ T6455] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-fixed-time,nhpoly1305-sse2)"
[   91.367659][ T6466] loop1: detected capacity change from 0 to 256
[   91.386473][ T5914] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.392340][ T5978] r8152-cfgselector 1-1: USB disconnect, device number 3
[   91.420465][ T6466] FAT-fs (loop1): Directory bread(block 64) failed
[   91.424454][ T6466] FAT-fs (loop1): Directory bread(block 65) failed
[   91.428129][ T6466] FAT-fs (loop1): Directory bread(block 66) failed
[   91.445898][ T6468] loop2: detected capacity change from 0 to 16
[   91.446057][ T6466] FAT-fs (loop1): Directory bread(block 67) failed
[   91.454708][ T6466] FAT-fs (loop1): Directory bread(block 68) failed
[   91.458281][ T6468] erofs (device loop2): mounted with root inode @ nid 36.
[   91.461560][ T6466] FAT-fs (loop1): Directory bread(block 69) failed
[   91.465508][ T6466] FAT-fs (loop1): Directory bread(block 70) failed
[   91.473395][ T6466] FAT-fs (loop1): Directory bread(block 71) failed
[   91.477368][ T6466] FAT-fs (loop1): Directory bread(block 72) failed
[   91.480134][ T6466] FAT-fs (loop1): Directory bread(block 73) failed
[   91.645708][ T6473] loop2: detected capacity change from 0 to 8192
[   91.806888][ T5978] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   92.247061][   T33] audit: type=1326 audit(1759350233.201:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.0.269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[   92.274097][   T33] audit: type=1326 audit(1759350233.201:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.0.269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[   92.293222][   T33] audit: type=1326 audit(1759350233.211:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.0.269" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[   92.303132][ T5978] usb 2-1: config 5 has an invalid interface number: 123 but max is 0
[   92.306807][ T5978] usb 2-1: config 5 has no interface number 0
[   92.309208][ T5978] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0x6B, changing to 0xB
[   92.315768][ T5978] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[   92.320497][   T33] audit: type=1326 audit(1759350233.211:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.0.269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[   92.320518][ T5978] usb 2-1: config 5 interface 123 has no altsetting 0
[   92.333014][ T6483] loop0: detected capacity change from 0 to 64
[   92.334133][ T5978] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[   92.340647][   T33] audit: type=1326 audit(1759350233.211:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.0.269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[   92.341136][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.352504][ T5978] usb 2-1: Product: syz
[   92.355966][   T33] audit: type=1326 audit(1759350233.221:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.0.269" exe="/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[   92.359689][ T5978] usb 2-1: Manufacturer: syz
[   92.364878][   T33] audit: type=1326 audit(1759350233.221:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.0.269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[   92.366612][ T5978] usb 2-1: SerialNumber: syz
[   92.382621][   T33] audit: type=1326 audit(1759350233.221:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.0.269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[   92.529678][ T6491] loop0: detected capacity change from 0 to 512
[   92.536363][ T6491] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   92.563158][ T6491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[   92.567076][ T6491] EXT4-fs (loop0): orphan cleanup on readonly fs
[   92.569710][ T6491] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.274: bad orphan inode 267
[   92.575461][ T6491] EXT4-fs (loop0): Remounting filesystem read-only
[   92.580268][ T6491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   92.601376][ T5978] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device.
[   92.616179][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   92.706823][ T5978] usb 2-1: USB disconnect, device number 4
[   93.096120][ T6507] loop0: detected capacity change from 0 to 4096
[   93.109938][ T6507] EXT4-fs: Ignoring removed bh option
[   93.116440][ T6507] EXT4-fs (loop0): Test dummy encryption mode enabled
[   93.156924][ T6507] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   93.160446][ T6507] System zones: 0-5
[   93.182710][ T6507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.266536][ T6507] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   93.412786][ T6507] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   93.448899][  T795] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   93.571622][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.956955][  T795] usb 2-1: Using ep0 maxpacket: 8
[   93.961364][  T795] usb 2-1: config 4 has an invalid interface number: 8 but max is 0
[   93.964676][  T795] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[   93.968661][  T795] usb 2-1: config 4 has an invalid interface descriptor of length 2, skipping
[   93.972441][  T795] usb 2-1: config 4 has no interface number 0
[   93.975078][  T795] usb 2-1: config 4 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   93.982944][  T795] usb 2-1: New USB device found, idVendor=1199, idProduct=9091, bcdDevice=31.d6
[   93.986866][  T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.990226][  T795] usb 2-1: Product: syz
[   93.991967][  T795] usb 2-1: Manufacturer: syz
[   93.993898][  T795] usb 2-1: SerialNumber: syz
[   94.223743][  T795] usb 2-1: USB disconnect, device number 5
[   94.316199][ T6540] loop2: detected capacity change from 0 to 256
[   94.341599][ T6540] FAT-fs (loop2): Directory bread(block 64) failed
[   94.344989][ T6540] FAT-fs (loop2): Directory bread(block 65) failed
[   94.348868][ T6540] FAT-fs (loop2): Directory bread(block 66) failed
[   94.351759][ T6540] FAT-fs (loop2): Directory bread(block 67) failed
[   94.354681][ T6540] FAT-fs (loop2): Directory bread(block 68) failed
[   94.357671][ T6540] FAT-fs (loop2): Directory bread(block 69) failed
[   94.360569][ T6540] FAT-fs (loop2): Directory bread(block 70) failed
[   94.363526][ T6540] FAT-fs (loop2): Directory bread(block 71) failed
[   94.366461][ T6540] FAT-fs (loop2): Directory bread(block 72) failed
[   94.369953][ T6540] FAT-fs (loop2): Directory bread(block 73) failed
[   95.638648][ T6563] loop2: detected capacity change from 0 to 136
[   95.670787][ T6563] iso9660: Unknown parameter '/dev/input/event#'
[   96.589503][ T6565] loop1: detected capacity change from 0 to 40427
[   96.624375][ T6565] F2FS-fs (loop1): invalid crc value
[   96.738653][   T33] audit: type=1326 audit(1759350237.731:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b98ec29 code=0x7ffc0000
[   96.747768][   T33] audit: type=1326 audit(1759350237.731:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b98ec29 code=0x7ffc0000
[   96.763073][ T6565] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   96.776137][ T6565] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   97.104647][ T6565] syz.1.301: attempt to access beyond end of device
[   97.104647][ T6565] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427
[   97.140807][ T5920] syz-executor: attempt to access beyond end of device
[   97.140807][ T5920] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   97.152785][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   97.152803][ T5920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.152810][ T5920] Call Trace:
[   97.152815][ T5920]  <TASK>
[   97.152821][ T5920]  dump_stack_lvl+0x189/0x250
[   97.152842][ T5920]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.152856][ T5920]  ? __pfx_queue_work_on+0x10/0x10
[   97.152866][ T5920]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   97.152881][ T5920]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   97.152903][ T5920]  f2fs_handle_critical_error+0x37c/0x540
[   97.152923][ T5920]  f2fs_write_end_io+0x886/0xb60
[   97.152950][ T5920]  __submit_merged_bio+0x27a/0x6a0
[   97.152968][ T5920]  __submit_merged_write_cond+0x255/0x530
[   97.152992][ T5920]  f2fs_write_data_pages+0x261d/0x3000
[   97.153030][ T5920]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   97.153099][ T5920]  ? __lock_acquire+0xab9/0xd20
[   97.153122][ T5920]  ? do_raw_spin_lock+0x121/0x290
[   97.153144][ T5920]  ? do_raw_spin_unlock+0x4d/0x240
[   97.153158][ T5920]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   97.153172][ T5920]  do_writepages+0x32e/0x550
[   97.153193][ T5920]  ? do_raw_spin_unlock+0x4d/0x240
[   97.153210][ T5920]  filemap_fdatawrite+0x199/0x240
[   97.153223][ T5920]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   97.153268][ T5920]  ? do_raw_spin_unlock+0x4d/0x240
[   97.153285][ T5920]  f2fs_sync_dirty_inodes+0x31f/0x830
[   97.153310][ T5920]  f2fs_write_checkpoint+0x93e/0x2440
[   97.153371][ T5920]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   97.153386][ T5920]  ? kasan_record_aux_stack+0xbd/0xd0
[   97.153437][ T5920]  kill_f2fs_super+0x2cc/0x6d0
[   97.153458][ T5920]  ? __pfx_kill_f2fs_super+0x10/0x10
[   97.153484][ T5920]  ? shrinker_free+0x2ce/0x3e0
[   97.153504][ T5920]  deactivate_locked_super+0xbc/0x130
[   97.153525][ T5920]  cleanup_mnt+0x425/0x4c0
[   97.153542][ T5920]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.153559][ T5920]  task_work_run+0x1d4/0x260
[   97.153576][ T5920]  ? __pfx_task_work_run+0x10/0x10
[   97.153589][ T5920]  ? __x64_sys_umount+0x122/0x160
[   97.153605][ T5920]  ? exit_to_user_mode_loop+0x40/0x130
[   97.153624][ T5920]  exit_to_user_mode_loop+0xe9/0x130
[   97.153640][ T5920]  do_syscall_64+0x2bd/0xfa0
[   97.153656][ T5920]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.153670][ T5920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.153681][ T5920]  ? exc_page_fault+0xab/0x100
[   97.153697][ T5920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.153709][ T5920] RIP: 0033:0x7fc30cf8ff57
[   97.153720][ T5920] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   97.153729][ T5920] RSP: 002b:00007ffcad751a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   97.153742][ T5920] RAX: 0000000000000000 RBX: 00007fc30d011c2d RCX: 00007fc30cf8ff57
[   97.153750][ T5920] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcad751b50
[   97.153757][ T5920] RBP: 00007ffcad751b50 R08: 0000000000000000 R09: 0000000000000000
[   97.153764][ T5920] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcad752be0
[   97.153771][ T5920] R13: 00007fc30d011c2d R14: 0000000000017aeb R15: 00007ffcad752c20
[   97.153793][ T5920]  </TASK>
[   97.153798][ T5920] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   97.487383][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   97.650082][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[   97.653674][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[   97.657892][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.663204][   T24] usb 3-1: config 0 descriptor??
[   97.783599][ T6603] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   97.896041][   T24]  (null): keene_cmd_main failed (-71)
[   97.915313][   T24] video4linux radio48: keene_cmd_main failed (-71)
[   97.923037][   T24] radio-keene 3-1:0.0: V4L2 device registered as radio48
[   97.939115][   T24] usb 3-1: USB disconnect, device number 4
[   98.152649][ T6609] loop1: detected capacity change from 0 to 32768
[   98.195954][ T6609] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.225265][ T6609] XFS (loop1): Ending clean mount
[   98.260128][ T5920] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.516401][ T6625] loop2: detected capacity change from 0 to 164
[   98.527118][ T6625] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   98.713379][ T6630] ptrace attach of "/syz-executor exec"[6631] was attempted by "/syz-executor exec"[6630]
[   98.721059][ T6630] 9pnet_fd: Insufficient options for proto=fd
[   98.726068][   T33] kauditd_printk_skb: 4 callbacks suppressed
[   98.736739][   T33] audit: type=1326 audit(1759350239.711:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.1.321" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc30cf8ec29 code=0x0
[   99.373730][ T6635] loop0: detected capacity change from 0 to 2048
[   99.391074][ T6636] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.401685][ T6635] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5
[   99.408566][ T6635] Remounting filesystem read-only
[   99.836977][ T5314] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   99.986922][ T5314] usb 1-1: Using ep0 maxpacket: 8
[   99.990615][ T5314] usb 1-1: config 0 has an invalid interface number: 148 but max is 0
[   99.993890][ T5314] usb 1-1: config 0 has no interface number 0
[  100.009411][ T5314] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36
[  100.013393][ T5314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.023583][ T5314] usb 1-1: Product: syz
[  100.025322][ T5314] usb 1-1: Manufacturer: syz
[  100.033763][ T5314] usb 1-1: SerialNumber: syz
[  100.038441][ T5314] usb 1-1: config 0 descriptor??
[  100.049525][ T5314] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected
[  100.067478][ T5314] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  100.259415][ T5314] usb 1-1: USB disconnect, device number 4
[  100.280213][ T5314] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  100.290911][ T5314] kobil_sct 1-1:0.148: device disconnected
[  100.591814][ T6662] loop1: detected capacity change from 0 to 1024
[  100.713981][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[  100.831989][ T6677] loop0: detected capacity change from 0 to 1024
[  100.842427][ T6677] EXT4-fs: Ignoring removed nomblk_io_submit option
[  100.883136][ T6677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.892730][ T6685] loop1: detected capacity change from 0 to 64
[  100.946158][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.296031][ T6703] loop2: detected capacity change from 0 to 32768
[  101.312651][ T6703] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  101.323541][ T6703] XFS (loop2): Ending clean mount
[  101.329738][ T6703] XFS (loop2): Quotacheck needed: Please wait.
[  101.354765][ T6703] XFS (loop2): Quotacheck: Done.
[  101.401860][ T5914] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  101.418846][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  101.598815][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  101.602970][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  101.604344][ T6732] loop2: detected capacity change from 0 to 164
[  101.617466][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  101.621689][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  101.644962][   T24] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  101.648838][ T6732] rock: directory entry would overflow storage
[  101.649421][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.651399][ T6732] rock: sig=0x4f50, size=4, remaining=3
[  101.654745][   T24] usb 2-1: Product: syz
[  101.654760][   T24] usb 2-1: Manufacturer: syz
[  101.654770][   T24] usb 2-1: SerialNumber: syz
[  101.660421][   T24] usb 2-1: config 0 descriptor??
[  101.669926][ T6732] isofs: Unable to find the ".." directory for NFS.
[  101.675197][   T24] ums-isd200 2-1:0.0: USB Mass Storage device detected
[  102.414451][   T24] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22
[  102.431013][   T24] usb 2-1: USB disconnect, device number 6
[  102.655173][ T6749] vlan2: entered promiscuous mode
[  102.661668][ T6749] macvlan1: entered promiscuous mode
[  103.619427][   T33] audit: type=1326 audit(1759350244.611:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.2.378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b98ec29 code=0x7ffc0000
[  103.642633][   T33] audit: type=1326 audit(1759350244.611:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.2.378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b98ec29 code=0x7ffc0000
[  103.652642][   T33] audit: type=1326 audit(1759350244.621:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.2.378" exe="/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f291b98ec29 code=0x7ffc0000
[  103.669187][   T33] audit: type=1326 audit(1759350244.621:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.2.378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b98ec29 code=0x7ffc0000
[  103.747822][ T6772] netlink: 8916 bytes leftover after parsing attributes in process `syz.1.379'.
[  104.186746][ T5962] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  104.338589][ T5962] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  104.342487][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.356243][ T5962] usb 3-1: config 0 descriptor??
[  104.386297][ T6788] xt_limit: Overflow, try lower: 2498045675/2726951205
[  104.586511][ T6792] loop0: detected capacity change from 0 to 32768
[  104.611768][ T6792] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.621975][ T6792] XFS (loop0): Ending clean mount
[  104.636282][ T5917] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.809955][ T6802] netlink: 'syz.0.391': attribute type 29 has an invalid length.
[  104.814353][ T6802] netlink: 'syz.0.391': attribute type 29 has an invalid length.
[  104.818801][ T6802] netlink: 'syz.0.391': attribute type 29 has an invalid length.
[  104.881091][ T6804] loop0: detected capacity change from 0 to 2048
[  104.905813][ T6804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.914274][ T6804] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.948718][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.121797][ T6813] loop0: detected capacity change from 0 to 256
[  105.125095][ T6813] exfat: Deprecated parameter 'utf8'
[  105.128280][ T6813] exfat: Deprecated parameter 'utf8'
[  105.130549][ T6813] exfat: Deprecated parameter 'utf8'
[  105.141558][ T6813] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[  105.282551][ T6819] loop0: detected capacity change from 0 to 512
[  105.315869][ T6819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.320614][ T6819] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.348295][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.378646][ T5962] usb 3-1: Cannot set autoneg
[  105.382311][ T5962] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  105.394316][ T5962] usb 3-1: USB disconnect, device number 5
[  106.446747][ T5978] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  106.596926][ T5978] usb 3-1: Using ep0 maxpacket: 16
[  106.600131][ T5978] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  106.604400][ T5978] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  106.608236][ T5978] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  106.614302][ T5978] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  106.618010][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.621129][ T5978] usb 3-1: Product: syz
[  106.622775][ T5978] usb 3-1: Manufacturer: syz
[  106.624541][ T5978] usb 3-1: SerialNumber: syz
[  106.726775][  T795] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  106.842140][ T5978] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  106.870206][ T5978] usb 3-1: USB disconnect, device number 6
[  106.883452][  T795] usb 1-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e
[  106.886372][  T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.889677][  T795] usb 1-1: Product: syz
[  106.891479][  T795] usb 1-1: Manufacturer: syz
[  106.893429][  T795] usb 1-1: SerialNumber: syz
[  106.899415][  T795] usb 1-1: config 0 descriptor??
[  106.905061][  T795] pwc: Samsung SNC-35E (v3.0) USB webcam detected.
[  107.109056][  T795] pwc: Failed to set LED on/off time (-71)
[  107.111266][  T795] pwc: send_video_command error -71
[  107.113438][  T795] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  107.116141][  T795] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  107.122115][  T795] usb 1-1: USB disconnect, device number 5
[  107.699717][ T6852] netlink: 'syz.0.413': attribute type 2 has an invalid length.
[  107.703037][ T6852] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.413'.
[  107.707716][ T6852] nbd: must specify at least one socket
[  107.944466][ T6862] loop0: detected capacity change from 0 to 16
[  107.948852][ T6862] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615000000000000000000000x000000000000000018446744073709551615$'
[  108.246989][  T795] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  108.398838][  T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.403412][  T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.417549][  T795] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  108.425410][  T795] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  108.433486][  T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.447676][  T795] usb 1-1: config 0 descriptor??
[  108.875374][  T795] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  108.914061][ T6891] loop2: detected capacity change from 0 to 32768
[  108.924776][ T6891] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  108.932942][ T6891] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  108.959017][ T6891] syz.2.432 (6891) used greatest stack depth: 19528 bytes left
[  108.982980][ T5914] ocfs2: Unmounting device (7,2) on (node local)
[  109.069262][ T5314] usb 1-1: USB disconnect, device number 6
[  109.302459][ T6907] process 'syz.2.439' launched '/dev/fd/4' with NULL argv: empty string added
[  109.323492][ T6907] loop2: detected capacity change from 0 to 1024
[  109.331673][ T6907] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 5)!
[  109.335801][ T6907] EXT4-fs (loop2): group descriptors corrupted!
[  109.362265][ T6907] loop2: detected capacity change from 0 to 1024
[  109.366265][ T6907] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0)
[  109.569010][ T6917] loop2: detected capacity change from 0 to 4096
[  109.573857][ T6917] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  109.729731][ T6923] overlayfs: invalid origin (0000)
[  109.732472][ T6923] evm: overlay not supported
[  110.522508][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'.
[  110.525825][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'.
[  110.530925][ T6938] netlink: 'syz.2.454': attribute type 14 has an invalid length.
[  110.533656][ T6938] netlink: 'syz.2.454': attribute type 11 has an invalid length.
[  110.833523][   T33] audit: type=1326 audit(1759350507.817:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.2.456" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f291b98ec29 code=0x0
[  111.008006][ T6946] loop2: detected capacity change from 0 to 1024
[  111.010477][ T6946] EXT4-fs: Ignoring removed bh option
[  111.021163][ T6946] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  111.031129][ T6946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.114279][ T6953] warning: `syz.0.460' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  111.817783][ T6961] loop0: detected capacity change from 0 to 32768
[  111.919571][ T5914] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.333577][ T6966] loop2: detected capacity change from 0 to 40427
[  112.343596][ T6966] F2FS-fs (loop2): invalid crc value
[  112.388021][ T6966] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.393129][ T6966] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  112.408250][ T6966] syz.2.466: attempt to access beyond end of device
[  112.408250][ T6966] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  112.411697][ T6988] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  112.424464][ T5914] syz-executor: attempt to access beyond end of device
[  112.424464][ T5914] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  112.430636][ T5914] CPU: 1 UID: 0 PID: 5914 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  112.430652][ T5914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.430659][ T5914] Call Trace:
[  112.430665][ T5914]  <TASK>
[  112.430670][ T5914]  dump_stack_lvl+0x189/0x250
[  112.430693][ T5914]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.430707][ T5914]  ? __pfx_queue_work_on+0x10/0x10
[  112.430717][ T5914]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.430733][ T5914]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  112.430756][ T5914]  f2fs_handle_critical_error+0x37c/0x540
[  112.430776][ T5914]  f2fs_write_end_io+0x886/0xb60
[  112.430805][ T5914]  __submit_merged_bio+0x27a/0x6a0
[  112.430823][ T5914]  __submit_merged_write_cond+0x255/0x530
[  112.430849][ T5914]  f2fs_write_data_pages+0x261d/0x3000
[  112.430890][ T5914]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.430967][ T5914]  ? __mod_zone_page_state+0xd7/0x140
[  112.430989][ T5914]  ? folios_put_refs+0x58b/0x670
[  112.431014][ T5914]  ? __pfx_folios_put_refs+0x10/0x10
[  112.431030][ T5914]  ? rcu_is_watching+0x15/0xb0
[  112.431050][ T5914]  ? __lock_acquire+0xab9/0xd20
[  112.431078][ T5914]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.431122][ T5914]  do_writepages+0x32e/0x550
[  112.431144][ T5914]  ? do_raw_spin_unlock+0x4d/0x240
[  112.431161][ T5914]  filemap_fdatawrite+0x199/0x240
[  112.431175][ T5914]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  112.431225][ T5914]  ? do_raw_spin_unlock+0x4d/0x240
[  112.431243][ T5914]  f2fs_sync_dirty_inodes+0x31f/0x830
[  112.431271][ T5914]  f2fs_write_checkpoint+0x93e/0x2440
[  112.431285][ T5914]  ? __lock_acquire+0xab9/0xd20
[  112.431323][ T5914]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  112.431385][ T5914]  kill_f2fs_super+0x2cc/0x6d0
[  112.431405][ T5914]  ? __pfx_kill_f2fs_super+0x10/0x10
[  112.431434][ T5914]  ? shrinker_free+0x2ce/0x3e0
[  112.431454][ T5914]  deactivate_locked_super+0xbc/0x130
[  112.431477][ T5914]  cleanup_mnt+0x425/0x4c0
[  112.431495][ T5914]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.431513][ T5914]  task_work_run+0x1d4/0x260
[  112.431529][ T5914]  ? __pfx_task_work_run+0x10/0x10
[  112.431542][ T5914]  ? __x64_sys_umount+0x122/0x160
[  112.431558][ T5914]  ? exit_to_user_mode_loop+0x40/0x130
[  112.431578][ T5914]  exit_to_user_mode_loop+0xe9/0x130
[  112.431594][ T5914]  do_syscall_64+0x2bd/0xfa0
[  112.431609][ T5914]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.431621][ T5914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.431633][ T5914]  ? exc_page_fault+0xab/0x100
[  112.431649][ T5914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.431661][ T5914] RIP: 0033:0x7f291b98ff57
[  112.431672][ T5914] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  112.431682][ T5914] RSP: 002b:00007ffeadda1f08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  112.431697][ T5914] RAX: 0000000000000000 RBX: 00007f291ba11c2d RCX: 00007f291b98ff57
[  112.431704][ T5914] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeadda1fc0
[  112.431711][ T5914] RBP: 00007ffeadda1fc0 R08: 0000000000000000 R09: 0000000000000000
[  112.431718][ T5914] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeadda3050
[  112.431725][ T5914] R13: 00007f291ba11c2d R14: 000000000001b6ab R15: 00007ffeadda3090
[  112.431749][ T5914]  </TASK>
[  112.432614][ T5914] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  112.726767][ T5314] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  112.906958][ T5314] usb 1-1: Using ep0 maxpacket: 32
[  112.915909][ T5314] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  112.919395][ T5314] usb 1-1: config 0 has no interface number 0
[  112.924994][ T5314] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  112.929547][ T5314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.932796][ T5314] usb 1-1: Product: syz
[  112.934690][ T5314] usb 1-1: Manufacturer: syz
[  112.937509][ T5314] usb 1-1: SerialNumber: syz
[  112.947487][ T5314] usb 1-1: config 0 descriptor??
[  113.011767][ T6994] loop2: detected capacity change from 0 to 32768
[  113.017330][ T6994] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.477 (6994)
[  113.029786][ T6994] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  113.034120][ T6994] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  113.066514][ T6994] BTRFS info (device loop2): enabling ssd optimizations
[  113.069830][ T6994] BTRFS info (device loop2): enabling free space tree
[  113.114710][ T5914] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  113.159597][ T5314] radio-si470x 1-1:0.35: this is not a si470x device.
[  113.187579][ T5314] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  113.203049][ T5314] usb 1-1: USB disconnect, device number 7
[  113.904947][ T7016] loop0: detected capacity change from 0 to 256
[  113.915462][ T7016] FAT-fs (loop0): Directory bread(block 64) failed
[  113.918455][ T7016] FAT-fs (loop0): Directory bread(block 65) failed
[  113.920859][ T7016] FAT-fs (loop0): Directory bread(block 66) failed
[  113.923160][ T7016] FAT-fs (loop0): Directory bread(block 67) failed
[  113.925399][ T7016] FAT-fs (loop0): Directory bread(block 68) failed
[  113.928925][ T7016] FAT-fs (loop0): Directory bread(block 69) failed
[  113.931795][ T7016] FAT-fs (loop0): Directory bread(block 70) failed
[  113.934673][ T7016] FAT-fs (loop0): Directory bread(block 71) failed
[  113.938482][ T7016] FAT-fs (loop0): Directory bread(block 72) failed
[  113.941156][ T7016] FAT-fs (loop0): Directory bread(block 73) failed
[  114.731630][ T7026] loop0: detected capacity change from 0 to 32768
[  114.739857][ T7026] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.483 (7026)
[  114.769750][ T7026] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.775544][ T7026] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  114.812484][ T7026] BTRFS info (device loop0): enabling ssd optimizations
[  114.815594][ T7026] BTRFS info (device loop0): enabling free space tree
[  114.840480][ T5917] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.516796][ T5978] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  115.666761][ T5978] usb 1-1: Using ep0 maxpacket: 8
[  115.670674][ T5978] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  115.674056][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.683501][ T5978] usb 1-1: config 0 descriptor??
[  116.060236][ T7075] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  116.096004][ T5978] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x2
[  116.112238][ T5978] magicmouse 0003:05AC:0269.0003: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0
[  116.204348][ T7085] loop2: detected capacity change from 0 to 256
[  116.208979][ T7085] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.300290][ T5948] usb 1-1: USB disconnect, device number 8
[  116.868533][ T7120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.516'.
[  116.883244][ T7120] loop0: detected capacity change from 0 to 764
[  117.231390][ T7129] overlayfs: failed to resolve './cgroup': -2
[  118.209299][ T7147] loop0: detected capacity change from 0 to 128
[  118.213257][ T7147] EXT4-fs (loop0): Test dummy encryption mode enabled
[  118.232455][ T7147] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  118.247170][ T7147] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  118.280798][ T7153] fuse: Bad value for 'fd'
[  118.288397][ T5917] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.429674][ T7184] : renamed from wg2 (while UP)
[  119.511730][ T7186] loop0: detected capacity change from 0 to 128
[  119.538170][   T33] audit: type=1800 audit(1759350516.527:22): pid=7186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.545" name="file1" dev="loop0" ino=1048639 res=0 errno=0
[  119.823139][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.831155][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.834500][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.842268][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.845191][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.881291][ T7198] loop0: detected capacity change from 0 to 1024
[  119.885774][ T7198] EXT4-fs: Ignoring removed orlov option
[  119.897281][ T7198] EXT4-fs: Ignoring removed oldalloc option
[  119.902130][ T7198] EXT4-fs: Ignoring removed bh option
[  119.906124][ T7198] EXT4-fs (loop0): inodes count not valid: 262176 vs 32
[  119.981002][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.044466][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.109342][ T7195] chnl_net:caif_netlink_parms(): no params data found
[  120.127356][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.168412][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.193429][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.196362][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.199426][ T7195] bridge_slave_0: entered allmulticast mode
[  120.203071][ T7195] bridge_slave_0: entered promiscuous mode
[  120.208052][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.210984][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.213565][ T7195] bridge_slave_1: entered allmulticast mode
[  120.216279][ T7195] bridge_slave_1: entered promiscuous mode
[  120.235126][ T7195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.242056][ T7195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.273093][ T7195] team0: Port device team_slave_0 added
[  120.286943][ T5978] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  120.290134][ T7195] team0: Port device team_slave_1 added
[  120.341369][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.344508][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  120.358034][ T7195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.364922][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.368120][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  120.379673][ T7195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.384591][   T13] bridge_slave_1: left allmulticast mode
[  120.396785][   T13] bridge_slave_1: left promiscuous mode
[  120.400576][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.409518][   T13] bridge_slave_0: left allmulticast mode
[  120.411757][   T13] bridge_slave_0: left promiscuous mode
[  120.414181][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.440517][ T5978] usb 1-1: unable to get BOS descriptor or descriptor too short
[  120.444682][ T5978] usb 1-1: not running at top speed; connect to a high speed hub
[  120.456430][ T5978] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  120.472653][ T5978] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  120.481547][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.496343][ T5978] usb 1-1: Product: syz
[  120.504426][ T5978] usb 1-1: Manufacturer: syz
[  120.506298][ T5978] usb 1-1: SerialNumber: syz
[  120.553266][ T7217] syz.2.554 (7217) used greatest stack depth: 19208 bytes left
[  120.725166][ T5978] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  120.728675][ T5978] usb 1-1: unit 2 not found!
[  120.750036][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.757007][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.757871][ T5978] usb 1-1: USB disconnect, device number 9
[  120.764410][   T13] bond0 (unregistering): Released all slaves
[  120.779811][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.863406][ T7195] hsr_slave_0: entered promiscuous mode
[  120.867466][ T7195] hsr_slave_1: entered promiscuous mode
[  120.870466][ T7195] debugfs: 'hsr0' already exists in 'hsr'
[  120.872799][ T7195] Cannot create hsr debugfs directory
[  120.875351][ T7222] netlink: 'syz.2.556': attribute type 25 has an invalid length.
[  120.881570][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'.
[  121.129597][   T13] hsr_slave_0: left promiscuous mode
[  121.138450][   T13] hsr_slave_1: left promiscuous mode
[  121.140752][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.143261][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.157577][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.160522][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.177881][   T13] veth1_macvtap: left promiscuous mode
[  121.180085][   T13] veth0_macvtap: left promiscuous mode
[  121.182372][   T13] veth1_vlan: left promiscuous mode
[  121.184765][   T13] veth0_vlan: left promiscuous mode
[  121.703233][   T13] team0 (unregistering): Port device team_slave_1 removed
[  121.759029][   T13] team0 (unregistering): Port device team_slave_0 removed
[  121.784511][ T7246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.564'.
[  121.898595][ T7248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'.
[  121.909739][   T56] Bluetooth: hci2: command tx timeout
[  121.953377][ T7249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'.
[  122.150200][ T7195] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  122.155425][ T7195] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  122.161241][ T7195] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  122.168374][ T7195] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  122.234300][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.267398][ T7195] 8021q: adding VLAN 0 to HW filter on device team0
[  122.281604][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.284625][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.323636][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.326785][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.631503][ T7195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.901141][ T7195] veth0_vlan: entered promiscuous mode
[  122.953281][ T7195] veth1_vlan: entered promiscuous mode
[  123.009713][ T7195] veth0_macvtap: entered promiscuous mode
[  123.021455][ T7195] veth1_macvtap: entered promiscuous mode
[  123.048040][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.070616][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.094223][ T5926] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.101927][ T5926] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.113050][ T5926] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.123375][ T5926] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.189336][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.192944][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.209639][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.212227][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.977146][   T56] Bluetooth: hci2: command tx timeout
[  124.035051][ T7324] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.582'.
[  125.695935][ T7432] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  125.699382][ T7432] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  125.702727][ T7432] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  125.706565][ T7432] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  125.709660][ T7432] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  125.712765][ T7432] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  125.715682][ T7432] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  125.718754][ T7432] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  125.721422][ T7432] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  125.724544][ T7432] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  125.811050][ T7438] loop3: detected capacity change from 0 to 128
[  126.067101][   T56] Bluetooth: hci2: command tx timeout
[  126.510173][ T7466] loop0: detected capacity change from 0 to 1024
[  126.549328][ T7466] hfsplus: xattr searching failed
[  126.556425][ T7466] hfsplus: xattr searching failed
[  126.561492][ T7466] hfsplus: xattr searching failed
[  126.660949][   T33] audit: type=1326 audit(1759350523.647:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  126.682938][   T33] audit: type=1326 audit(1759350523.667:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  126.707966][   T33] audit: type=1326 audit(1759350523.667:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.646" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  126.717570][   T33] audit: type=1326 audit(1759350523.667:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  126.739196][   T33] audit: type=1326 audit(1759350523.667:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  126.750542][   T33] audit: type=1326 audit(1759350523.667:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.646" exe="/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  126.761450][   T33] audit: type=1326 audit(1759350523.667:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  126.776966][   T33] audit: type=1326 audit(1759350523.667:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7467 comm="syz.0.646" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  127.980550][ T7501] netlink: 68 bytes leftover after parsing attributes in process `syz.0.661'.
[  127.984187][ T7501] netlink: 68 bytes leftover after parsing attributes in process `syz.0.661'.
[  127.987963][ T7501] netlink: 10 bytes leftover after parsing attributes in process `syz.0.661'.
[  128.146863][   T56] Bluetooth: hci2: command tx timeout
[  128.272889][ T7509] loop0: detected capacity change from 0 to 8192
[  128.515186][ T7529] loop0: detected capacity change from 0 to 2048
[  128.534576][ T7529] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  128.538754][ T5850] udevd[5850]: incorrect nilfs2 checksum on /dev/loop0
[  128.554779][ T5850] udevd[5850]: incorrect nilfs2 checksum on /dev/loop0
[  128.564711][ T7533] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.604550][ T7532] pimreg: entered allmulticast mode
[  129.287011][ T7550] loop3: detected capacity change from 0 to 512
[  129.296823][ T7550] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  129.320877][ T7550] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  129.324342][ T7550] EXT4-fs (loop3): orphan cleanup on readonly fs
[  129.342867][ T7550] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.683: corrupted inode contents
[  129.347726][ T7550] EXT4-fs (loop3): Remounting filesystem read-only
[  129.357391][ T7550] EXT4-fs (loop3): 1 truncate cleaned up
[  129.362339][ T1093] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  129.370828][ T1093] Quota error (device loop3): write_blk: dquota write failed
[  129.373934][ T1093] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries
[  129.379277][ T1093] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  129.383397][ T1093] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  129.392207][ T7550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  129.449337][ T7195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.933115][ T7574] 9pnet_fd: p9_fd_create_unix (7574): problem connecting socket: qY3aK: -111
[  131.212518][ T7615] libceph: resolve '0..' (ret=-3): failed
[  131.537692][ T5921] Bluetooth: hci1: command tx timeout
[  131.558859][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'.
[  132.452035][ T7681] loop3: detected capacity change from 0 to 128
[  132.456161][ T7681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  132.462996][ T7681] System zones: 1-3, 19-19, 35-36
[  132.465994][ T7681] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  132.471034][ T7681] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  132.500289][ T7195] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.633137][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.635998][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.683014][ T5962] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  133.166917][ T5962] usb 1-1: Using ep0 maxpacket: 8
[  133.170845][ T5962] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  133.174872][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.181653][ T5962] usb 1-1: config 0 descriptor??
[  133.494644][ T7703] vlan2: entered promiscuous mode
[  133.496574][ T7703] bond0: entered promiscuous mode
[  133.498822][ T7703] bond_slave_0: entered promiscuous mode
[  133.500784][ T7703] bond_slave_1: entered promiscuous mode
[  134.485697][ T7727] loop3: detected capacity change from 0 to 164
[  134.719567][ T7743] ptrace attach of "/syz-executor exec"[5914] was attempted by "/syz-executor exec"[7743]
[  134.768736][ T7747] loop3: detected capacity change from 0 to 764
[  134.775887][ T7747] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  135.436620][ T5962] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  135.442477][ T5962] asix 1-1:0.0: probe with driver asix failed with error -71
[  135.448881][ T5962] usb 1-1: USB disconnect, device number 10
[  135.592282][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[  135.596004][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.761'.
[  135.607619][ T7763] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  135.650589][ T7765] netlink: 64 bytes leftover after parsing attributes in process `syz.2.762'.
[  135.654574][ T7765] netlink: 'syz.2.762': attribute type 1 has an invalid length.
[  135.695433][ T7767] netlink: 44 bytes leftover after parsing attributes in process `syz.2.763'.
[  135.730609][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'.
[  136.070979][ T7786] kAFS: No cell specified
[  136.385341][ T7798] netlink: 'syz.2.777': attribute type 10 has an invalid length.
[  136.927018][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  137.087799][   T10] usb 1-1: Using ep0 maxpacket: 32
[  137.092325][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  137.110670][   T10] usb 1-1: language id specifier not provided by device, defaulting to English
[  137.116032][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40
[  137.121701][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.124841][   T10] usb 1-1: Product: syz
[  137.126536][   T10] usb 1-1: Manufacturer: 剩ꗨ㌌谮㞔畺魶๊≱還뛌큭⡋≣ᆓෟ劚썵췚眃赺漉ꋋㄐ鸒씀芆栯혁煮薂酒ꄙ╚둥შ볚酔⏓䣣ᛖ齗䔟顱ﬠ㎵稃ն䍳
[  137.146049][   T10] usb 1-1: SerialNumber: syz
[  137.166894][   T10] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  137.217106][ T5948] IPVS: starting estimator thread 0...
[  137.317272][ T7842] IPVS: using max 37 ests per chain, 88800 per kthread
[  137.360760][   T10] usb 1-1: USB disconnect, device number 11
[  137.372329][ T7850] loop3: detected capacity change from 0 to 1024
[  137.766826][ T5962] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  137.842908][ T7860] 9pnet: Found fid 0 not clunked
[  137.942147][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  137.942369][   T33] audit: type=1326 audit(1759350534.927:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  137.978767][ T5962] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  137.981560][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.984152][ T5962] usb 4-1: Product: syz
[  137.986347][   T33] audit: type=1326 audit(1759350534.927:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  137.999159][ T5962] usb 4-1: Manufacturer: syz
[  138.001131][ T5962] usb 4-1: SerialNumber: syz
[  138.004701][ T5962] usb 4-1: config 0 descriptor??
[  138.016611][   T33] audit: type=1326 audit(1759350534.927:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  138.030059][   T33] audit: type=1326 audit(1759350534.927:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  138.045741][   T33] audit: type=1326 audit(1759350534.927:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  138.056890][   T33] audit: type=1326 audit(1759350534.927:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  138.065363][   T33] audit: type=1326 audit(1759350534.927:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  138.075601][   T33] audit: type=1326 audit(1759350534.927:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  138.083444][   T33] audit: type=1326 audit(1759350534.927:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  138.090830][   T33] audit: type=1326 audit(1759350534.927:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7ffc0000
[  138.638582][ T5962] mos7840 4-1:0.0: required endpoints missing
[  138.646431][ T5962] usb 4-1: USB disconnect, device number 2
[  139.069703][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'.
[  139.073479][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.830'.
[  139.085049][ T7914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.830'.
[  139.142879][ T7919] loop0: detected capacity change from 0 to 128
[  139.162458][ T7919] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  139.255320][ T7919] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  139.492209][ T7927] netlink: 'syz.3.833': attribute type 1 has an invalid length.
[  139.492309][ T7927] netlink: 224 bytes leftover after parsing attributes in process `syz.3.833'.
[  139.741424][ T7929] tipc: Invalid UDP bearer configuration
[  139.741464][ T7929] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  139.797335][ T7931] bridge0: entered promiscuous mode
[  139.799930][ T7931] macvlan2: entered promiscuous mode
[  139.903892][ T7939] netlink: 64 bytes leftover after parsing attributes in process `syz.0.840'.
[  140.267593][ T7959] loop0: detected capacity change from 0 to 4096
[  140.705043][ T7966] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.709086][ T7966] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  140.826875][   T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  140.979162][   T24] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[  140.983349][   T24] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  140.988553][   T24] usb 4-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  140.997935][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  141.001693][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  141.004883][   T24] usb 4-1: SerialNumber: syz
[  141.232074][   T24] usb 4-1: bad CDC descriptors
[  141.238112][   T24] usb 4-1: USB disconnect, device number 3
[  141.810679][ T8000] loop3: detected capacity change from 0 to 128
[  141.814321][ T8000] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  141.825102][ T8000] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  141.915367][ T1091] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  142.083757][ T8013] loop0: detected capacity change from 0 to 16
[  142.090252][ T8013] erofs (device loop0): mounted with root inode @ nid 36.
[  142.099313][ T8013] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[  142.116480][ T8013] erofs (device loop0): failed to decompress -10 in[58, 4038] out[1851]
[  142.121140][ T8013] erofs (device loop0): read error -117 @ 43 of nid 36
[  142.231335][ T8019] loop0: detected capacity change from 0 to 512
[  142.237693][ T8019] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  142.290426][ T8008] loop3: detected capacity change from 0 to 32768
[  142.329483][ T8019] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.873: bad orphan inode 131083
[  142.334857][ T8019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.357944][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.400114][ T8008] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.420686][ T8032] random: crng reseeded on system resumption
[  142.449085][ T8008] XFS (loop3): Ending clean mount
[  142.452944][ T8008] XFS (loop3): Quotacheck needed: Please wait.
[  142.481061][ T8008] XFS (loop3): Quotacheck: Done.
[  142.541709][ T8036] loop0: detected capacity change from 0 to 16
[  142.550964][ T8036] erofs (device loop0): mounted with root inode @ nid 36.
[  142.569956][ T8036] erofs (device loop0): readahead error at folio 12 @ nid 36
[  142.574768][ T8036] erofs (device loop0): readahead error at folio 9 @ nid 36
[  142.580169][ T8036] erofs (device loop0): readahead error at folio 6 @ nid 36
[  142.583296][ T8036] erofs (device loop0): readahead error at folio 4 @ nid 36
[  142.586607][ T8036] syz.0.876: attempt to access beyond end of device
[  142.586607][ T8036] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  142.592739][ T8036] syz.0.876: attempt to access beyond end of device
[  142.592739][ T8036] loop0: rw=524288, sector=376, nr_sectors = 16 limit=16
[  142.599039][ T8036] syz.0.876: attempt to access beyond end of device
[  142.599039][ T8036] loop0: rw=524288, sector=0, nr_sectors = 24 limit=16
[  142.603968][ T8036] syz.0.876: attempt to access beyond end of device
[  142.603968][ T8036] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16
[  142.609686][ T8036] syz.0.876: attempt to access beyond end of device
[  142.609686][ T8036] loop0: rw=524288, sector=525144, nr_sectors = 16 limit=16
[  142.619548][ T8036] erofs (device loop0): failed to decompress -32 in[46, 4050] out[4096]
[  142.623208][ T8036] erofs (device loop0): read error -117 @ 8200 of nid 36
[  143.053297][ T7195] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  144.570311][ T8070] loop3: detected capacity change from 0 to 32768
[  144.585465][ T8085] netlink: 'syz.0.899': attribute type 20 has an invalid length.
[  144.588375][ T8070] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.892 (8070)
[  144.633329][ T8070] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  144.647177][ T8070] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  145.171605][ T8070] BTRFS info (device loop3): enabling ssd optimizations
[  145.173840][ T8070] BTRFS info (device loop3): enabling free space tree
[  145.176034][ T8070] BTRFS info (device loop3): use zstd compression, level 3
[  145.195255][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  145.195266][   T33] audit: type=1800 audit(1759350542.177:43): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.892" name="file1" dev="loop3" ino=260 res=0 errno=0
[  145.357200][ T7195] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  146.993647][ T8136] loop0: detected capacity change from 0 to 4096
[  147.023058][ T8136] ntfs3(loop0): ino=1a, mi_enum_attr
[  147.025327][ T8136] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  147.030092][ T8140] __nla_validate_parse: 3 callbacks suppressed
[  147.030101][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'.
[  147.390834][ T8156] loop0: detected capacity change from 0 to 4096
[  147.400779][ T8156] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  147.627542][ T8156] ntfs3(loop0): ino=19, mi_enum_attr
[  147.629830][ T8156] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  148.387703][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'.
[  148.396853][ T5314] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  148.565728][ T5314] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  148.576007][ T5314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.599163][ T5314] usb 1-1: config 0 descriptor??
[  148.619722][ T5314] gspca_main: sunplus-2.14.0 probing 055f:c420
[  149.130742][ T5314] gspca_sunplus: reg_w_riv err -71
[  149.133550][ T5314] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  149.138874][ T5314] usb 1-1: USB disconnect, device number 12
[  150.272481][ T5962] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  150.345487][ T8230] loop3: detected capacity change from 0 to 512
[  150.386169][ T8230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.392389][ T8230] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.419530][   T33] audit: type=1800 audit(1759350547.407:44): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.952" name="bus" dev="loop3" ino=18 res=0 errno=0
[  150.447983][ T5962] usb 1-1: Using ep0 maxpacket: 16
[  150.451985][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.453272][ T7195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.456296][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.479278][ T5962] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  150.502406][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.526876][ T5962] usb 1-1: config 0 descriptor??
[  150.673098][ T8253] xt_policy: too many policy elements
[  150.769000][ T8259] QAT: Invalid ioctl 21531
[  150.826500][ T8265] loop3: detected capacity change from 0 to 512
[  150.831296][ T8265] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  150.839487][ T8265] EXT4-fs (loop3): 1 truncate cleaned up
[  150.842067][ T8265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.922287][ T7195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.947414][ T5962] zydacron 0003:13EC:0006.0004: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.0-1/input0
[  151.048546][ T8277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.972'.
[  151.147822][ T5962] usb 1-1: USB disconnect, device number 13
[  151.173574][ T8285] netlink: 'syz.2.975': attribute type 10 has an invalid length.
[  151.185652][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.190716][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.208333][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.211605][ T8285] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.216128][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.219315][ T8285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.226338][ T8285] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  151.230705][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'.
[  151.234760][ T8286] bridge_slave_1: left allmulticast mode
[  151.237759][ T8286] bridge_slave_1: left promiscuous mode
[  151.240633][ T8286] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.246355][ T8286] bridge_slave_0: left allmulticast mode
[  151.249045][ T8286] bridge_slave_0: left promiscuous mode
[  151.252049][ T8286] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.272197][ T8286] bond0: (slave bridge0): Releasing backup interface
[  151.448521][ T8290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.977'.
[  151.981620][ T8318] trusted_key: syz.3.990 sent an empty control message without MSG_MORE.
[  152.222737][ T8338] 9pnet_fd: Insufficient options for proto=fd
[  152.242474][ T8336] loop0: detected capacity change from 0 to 2048
[  152.260312][ T8336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.312291][ T8336] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a
[  152.953789][   T56] Bluetooth: hci2: command 0x0406 tx timeout
[  152.995963][ T8362] loop0: detected capacity change from 0 to 4096
[  153.000987][ T8362] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  153.005267][ T8362] ntfs3(loop0): ino=3, mi_enum_attr
[  153.008177][ T8362] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  153.011241][ T8362] ntfs3(loop0): Failed to load $LogFile (-22).
[  153.580103][ T8372] netlink: 'syz.0.1015': attribute type 4 has an invalid length.
[  153.888635][ T8378] mmap: syz.0.1017 (8378) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  154.058708][ T8390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1022'.
[  154.062566][ T8390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1022'.
[  154.195503][ T8394] XFS (nullb0): Invalid superblock magic number
[  154.338587][ T8401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1025'.
[  154.664620][ T8405] loop3: detected capacity change from 0 to 32768
[  154.684052][ T8405] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  154.701281][ T8405] XFS (loop3): Ending clean mount
[  154.711043][ T8405] XFS (loop3): Quotacheck needed: Please wait.
[  154.762308][ T8405] XFS (loop3): Quotacheck: Done.
[  154.825028][ T7195] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  154.878504][ T8425] input: syz1 as /devices/virtual/input/input6
[  154.881226][ T8425] input: failed to attach handler leds to device input6, error: -6
[  156.063903][ T8458] sd 0:0:0:0: PR command failed: 1026
[  156.066389][ T8458] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  156.069455][ T8458] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  156.534696][ T8469] netlink: 'syz.0.1051': attribute type 29 has an invalid length.
[  156.540405][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1051'.
[  157.295857][ T8491] loop3: detected capacity change from 0 to 2048
[  157.387484][ T8491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.392994][ T8491] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.545888][ T8485] loop0: detected capacity change from 0 to 32768
[  157.551060][ T8498] netlink: 'syz.2.1061': attribute type 5 has an invalid length.
[  157.554784][ T8498] netlink: 'syz.2.1061': attribute type 9 has an invalid length.
[  157.558172][ T8498] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1061'.
[  157.567809][ T8485] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  157.579961][ T8485] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  157.619216][ T5917] ocfs2: Unmounting device (7,0) on (node local)
[  157.794386][ T7195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.167449][ T8506] loop0: detected capacity change from 0 to 4096
[  158.229725][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  158.312218][ T8514] loop0: detected capacity change from 0 to 2048
[  158.350598][ T8514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.376622][ T8514] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.401228][   T33] audit: type=1800 audit(1759350555.387:45): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1066" name="file0" dev="loop0" ino=13 res=0 errno=0
[  158.429746][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.554262][ T8522] loop0: detected capacity change from 0 to 2048
[  158.573594][ T8522] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  158.596539][ T8522] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  158.600199][ T8522] UDF-fs: Scanning with blocksize 512 failed
[  158.604436][ T8522] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  158.611877][ T8522] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  158.712294][ T8520] loop3: detected capacity change from 0 to 32768
[  158.721029][ T8520] 
[  158.721029][ T8520]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.721029][ T8520] 
[  158.748197][ T8520] ERROR: (device loop3): diWrite: ixpxd invalid
[  158.748197][ T8520] 
[  158.765792][ T8520] ERROR: (device loop3): txCommit: 
[  158.765792][ T8520] 
[  158.805975][ T7195] 
[  158.805975][ T7195]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.805975][ T7195] 
[  158.817261][ T7195] 
[  158.817261][ T7195]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.817261][ T7195] 
[  159.430085][ T8548] loop0: detected capacity change from 0 to 32768
[  159.453388][   T33] audit: type=1800 audit(1759350556.437:46): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1082" name="file1" dev="loop0" ino=4 res=0 errno=0
[  159.865394][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'.
[  160.265115][ T8589] loop3: detected capacity change from 0 to 128
[  161.178296][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'.
[  161.493185][ T8608] loop3: detected capacity change from 0 to 128
[  161.523831][ T8608] qnx6: superblock #1 checksum error
[  162.684170][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'.
[  163.439862][ T8641] loop3: detected capacity change from 0 to 512
[  163.445843][ T8641] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4635: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  163.459009][ T8641] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  163.823415][ T8666] overlayfs: upper fs does not support file handles, falling back to index=off.
[  163.829245][ T8666] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  163.838037][ T8666] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  163.843959][ T8666] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  163.972168][ T8672] dvmrp0: entered allmulticast mode
[  164.665726][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'.
[  164.717626][   T33] audit: type=1326 audit(1759350561.707:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  164.974944][   T33] audit: type=1326 audit(1759350561.717:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  164.983934][   T33] audit: type=1326 audit(1759350561.717:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  164.994063][   T33] audit: type=1326 audit(1759350561.717:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  165.002940][   T33] audit: type=1326 audit(1759350561.717:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  165.010070][   T33] audit: type=1326 audit(1759350561.717:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  165.019234][   T33] audit: type=1326 audit(1759350561.717:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  165.028238][   T33] audit: type=1326 audit(1759350561.717:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  165.037277][   T33] audit: type=1326 audit(1759350561.717:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  165.045935][   T33] audit: type=1326 audit(1759350561.717:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  165.412053][ T8717] loop0: detected capacity change from 0 to 256
[  165.426497][ T8717] exfat: Deprecated parameter 'namecase'
[  165.434362][ T8717] exfat: Deprecated parameter 'utf8'
[  165.442074][ T8717] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  165.589269][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'.
[  165.593055][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'.
[  165.630164][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'.
[  165.822781][ T8740] loop0: detected capacity change from 0 to 32768
[  165.840554][ T8740] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  165.854413][ T8740] XFS (loop0): Ending clean mount
[  165.887852][ T5917] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.205722][ T8764] sctp: [Deprecated]: syz.0.1173 (pid 8764) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.205722][ T8764] Use struct sctp_sack_info instead
[  166.826824][ T5962] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  167.080154][ T5962] usb 4-1: Using ep0 maxpacket: 32
[  167.084012][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.108433][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.112562][ T5962] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  167.116345][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.123692][ T5962] usb 4-1: config 0 descriptor??
[  167.137007][ T5962] hub 4-1:0.0: USB hub found
[  167.468938][ T8793] netlink: 'syz.0.1186': attribute type 4 has an invalid length.
[  167.496039][ T5962] hub 4-1:0.0: 1 port detected
[  168.320945][ T5962] hub 4-1:0.0: activate --> -90
[  168.593612][   T10] usb 4-1: USB disconnect, device number 4
[  170.272331][ T8861] loop0: detected capacity change from 0 to 1024
[  170.298867][ T8861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.340092][   T33] kauditd_printk_skb: 25 callbacks suppressed
[  170.340101][   T33] audit: type=1800 audit(1759350567.327:82): pid=8861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1216" name="bus" dev="loop0" ino=18 res=0 errno=0
[  170.367666][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.427082][ T5314] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  170.580360][ T5314] usb 4-1: unable to get BOS descriptor or descriptor too short
[  170.585314][ T5314] usb 4-1: config 1 interface 0 has no altsetting 0
[  170.592533][ T5314] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40
[  170.596432][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.599931][ T5314] usb 4-1: Product: syz
[  170.601801][ T5314] usb 4-1: Manufacturer: syz
[  170.603843][ T5314] usb 4-1: SerialNumber: syz
[  170.825456][ T5314] usbhid 4-1:1.0: can't add hid device: -71
[  170.828381][ T5314] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  170.836379][ T5314] usb 4-1: USB disconnect, device number 5
[  171.199884][ T8906] veth4: entered allmulticast mode
[  171.589063][   T33] audit: type=1326 audit(1759350568.577:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b98ec29 code=0x7ffc0000
[  171.606596][   T33] audit: type=1326 audit(1759350568.577:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b98ec29 code=0x7ffc0000
[  171.626416][   T33] audit: type=1326 audit(1759350568.587:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f291b98ec29 code=0x7ffc0000
[  171.634991][   T33] audit: type=1326 audit(1759350568.587:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b98ec29 code=0x7ffc0000
[  171.645985][   T33] audit: type=1326 audit(1759350568.587:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.2.1250" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b98ec29 code=0x7ffc0000
[  171.808245][ T5314] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  172.385144][ T8966] o2cb: This node has not been configured.
[  172.388024][ T8966] o2cb: Cluster check failed. Fix errors before retrying.
[  172.391092][ T8966] (syz.2.1261,8966,1):user_dlm_register:674 ERROR: status = -22
[  172.394125][ T8966] (syz.2.1261,8966,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  172.506792][ T5314] usb 1-1: config 2 has an invalid interface number: 169 but max is 0
[  172.510133][ T5314] usb 1-1: config 2 has no interface number 0
[  172.512747][ T5314] usb 1-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92
[  172.516511][ T5314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.550667][ T5314] cypress_m8 1-1:2.169: DeLorme Earthmate USB converter detected
[  172.554947][ T5314] earthmate ttyUSB0: required endpoint is missing
[  172.754499][ T5948] usb 1-1: USB disconnect, device number 14
[  172.771436][ T5948] cypress_m8 1-1:2.169: device disconnected
[  172.776537][ T8980] loop3: detected capacity change from 0 to 128
[  172.794165][   T33] audit: type=1800 audit(1759350569.777:88): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1268" name="file2" dev="loop3" ino=1048664 res=0 errno=0
[  172.801034][ T8980] syz.3.1268: attempt to access beyond end of device
[  172.801034][ T8980] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128
[  173.012764][ T8989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1272'.
[  173.506521][   T33] audit: type=1800 audit(1759350570.487:89): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.1275" name="/" dev="sockfs" ino=16355 res=0 errno=0
[  173.618655][ T5948] IPVS: starting estimator thread 0...
[  173.707073][ T9000] IPVS: using max 45 ests per chain, 108000 per kthread
[  174.589399][ T5314] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  174.789222][ T5314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.822200][ T5314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  174.851053][ T5314] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  174.870467][ T5314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.895345][ T5314] usb 1-1: config 0 descriptor??
[  175.347640][ T5314] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0
[  175.747667][ T5314] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device
[  175.754596][ T5314] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse
[  175.762858][ T5314] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71
[  175.779421][ T5314] usb 1-1: USB disconnect, device number 15
[  175.901886][ T9051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1298'.
[  175.985986][ T9059] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  176.035990][   T33] audit: type=1326 audit(1759350573.017:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.3.1304" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  176.067327][   T33] audit: type=1326 audit(1759350573.017:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.3.1304" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  176.092620][   T33] audit: type=1326 audit(1759350573.027:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.3.1304" exe="/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  176.101987][   T33] audit: type=1326 audit(1759350573.027:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.3.1304" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  176.111578][   T33] audit: type=1326 audit(1759350573.027:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9062 comm="syz.3.1304" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1036d8ec29 code=0x7ffc0000
[  177.032579][ T9111] loop3: detected capacity change from 0 to 736
[  178.517934][ T9141] 8021q: adding VLAN 0 to HW filter on device bond1
[  178.532055][ T9145] ip6erspan0: entered promiscuous mode
[  178.847789][ T9158] netlink: 'syz.2.1345': attribute type 16 has an invalid length.
[  178.850199][ T9158] netlink: 'syz.2.1345': attribute type 17 has an invalid length.
[  178.878808][ T9158] net_ratelimit: 44 callbacks suppressed
[  178.878814][ T9158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  179.335477][ T5978] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  179.486769][ T5978] usb 1-1: Using ep0 maxpacket: 32
[  179.495937][ T5978] usb 1-1: config 0 interface 0 has no altsetting 0
[  179.504770][ T5978] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  179.509223][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.512638][ T5978] usb 1-1: Product: syz
[  179.514541][ T5978] usb 1-1: Manufacturer: syz
[  179.516509][ T5978] usb 1-1: SerialNumber: syz
[  179.523872][ T5978] usb 1-1: config 0 descriptor??
[  179.884105][ T9184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.933079][ T5978] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  180.337831][ T5978] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  180.342838][ T5978] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22
[  180.545860][ T5978] usb 1-1: USB disconnect, device number 16
[  180.595695][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'.
[  180.686173][ T9190] loop3: detected capacity change from 0 to 40427
[  180.703872][ T9190] F2FS-fs (loop3): invalid crc value
[  180.783472][ T9190] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  180.787981][ T9190] F2FS-fs (loop3): Start checkpoint disabled!
[  180.802208][ T9190] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  180.806783][ T9190] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  180.830092][   T28] kworker/u9:1: attempt to access beyond end of device
[  180.830092][   T28] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  180.841778][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  180.841796][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.841804][   T28] Workqueue: writeback wb_workfn (flush-7:3)
[  180.841830][   T28] Call Trace:
[  180.841836][   T28]  <TASK>
[  180.841842][   T28]  dump_stack_lvl+0x189/0x250
[  180.841860][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.841874][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  180.841885][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  180.841900][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  180.841922][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  180.841971][   T28]  f2fs_write_end_io+0x886/0xb60
[  180.841999][   T28]  __submit_merged_bio+0x27a/0x6a0
[  180.842017][   T28]  __submit_merged_write_cond+0x255/0x530
[  180.842042][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  180.842081][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.842105][   T28]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  180.842147][   T28]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  180.842160][   T28]  ? look_up_lock_class+0x74/0x170
[  180.842182][   T28]  ? trace_f2fs_writepages+0x7f/0x200
[  180.842196][   T28]  ? f2fs_write_node_pages+0x478/0x6e0
[  180.842212][   T28]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  180.842228][   T28]  ? __lock_acquire+0xab9/0xd20
[  180.842249][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.842264][   T28]  do_writepages+0x32e/0x550
[  180.842280][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  180.842291][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  180.842312][   T28]  __writeback_single_inode+0x145/0xff0
[  180.842325][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  180.842343][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  180.842376][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  180.842420][   T28]  ? rcu_is_watching+0x15/0xb0
[  180.842439][   T28]  wb_writeback+0x43b/0xaf0
[  180.842458][   T28]  ? queue_io+0x331/0x590
[  180.842473][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  180.842493][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  180.842510][   T28]  wb_workfn+0x409/0xef0
[  180.842539][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  180.842560][   T28]  ? __lock_acquire+0xab9/0xd20
[  180.842584][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  180.842607][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  180.842619][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  180.842635][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  180.842653][   T28]  process_scheduled_works+0xae1/0x17b0
[  180.842693][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  180.842729][   T28]  worker_thread+0x8a0/0xda0
[  180.842768][   T28]  kthread+0x711/0x8a0
[  180.842784][   T28]  ? __pfx_worker_thread+0x10/0x10
[  180.842801][   T28]  ? __pfx_kthread+0x10/0x10
[  180.842816][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  180.842829][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.842841][   T28]  ? __pfx_kthread+0x10/0x10
[  180.842855][   T28]  ret_from_fork+0x4bc/0x870
[  180.842875][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  180.842898][   T28]  ? __switch_to_asm+0x39/0x70
[  180.842911][   T28]  ? __switch_to_asm+0x33/0x70
[  180.842925][   T28]  ? __pfx_kthread+0x10/0x10
[  180.842964][   T28]  ret_from_fork_asm+0x1a/0x30
[  180.842993][   T28]  </TASK>
[  180.842998][   T28] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  181.328570][ T9243] loop3: detected capacity change from 0 to 1024
[  181.330492][ T9242] loop0: detected capacity change from 0 to 4096
[  181.334307][ T9242] ntfs3: Unknown parameter 'hidedot_files'
[  181.357581][ T9243] hfsplus: bad catalog entry type
[  181.469476][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1387'.
[  181.796795][ T5314] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  182.230642][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'.
[  182.234741][ T9266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1394'.
[  182.302401][ T5314] usb 4-1: config 128 has an invalid interface number: 249 but max is 0
[  182.307086][ T5314] usb 4-1: config 128 has no interface number 0
[  182.310130][ T5314] usb 4-1: config 128 interface 249 has no altsetting 0
[  182.319758][ T5314] usb 4-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= a.c0
[  182.328103][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.342025][ T5314] usb 4-1: Product: syz
[  182.343956][ T5314] usb 4-1: Manufacturer: syz
[  182.356796][ T5314] usb 4-1: SerialNumber: syz
[  182.649069][ T5314] gspca_main: spca506-2.14.0 probing 06e1:a190
[  182.852097][ T5314] usb 4-1: USB disconnect, device number 6
[  182.872864][ T5850] udevd[5850]: setting mode of /dev/bus/usb/004/006 to 020664 failed: No such file or directory
[  182.885651][ T5850] udevd[5850]: setting owner of /dev/bus/usb/004/006 to uid=0, gid=0 failed: No such file or directory
[  183.191994][ T9275] netlink: 'syz.2.1397': attribute type 21 has an invalid length.
[  183.194865][ T9275] netlink: 'syz.2.1397': attribute type 1 has an invalid length.
[  183.198374][ T9275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1397'.
[  183.812557][ T9285] tc_dump_action: action bad kind
[  183.907549][ T9289] loop0: detected capacity change from 0 to 1024
[  183.926867][ T9289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.953323][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.930254][ T9311] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  185.557291][ T5962] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  185.710271][ T5962] usb 1-1: Using ep0 maxpacket: 16
[  185.717449][ T5962] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  185.721512][ T5962] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  185.727840][ T9334] netlink: 'syz.3.1422': attribute type 13 has an invalid length.
[  185.730594][ T9334] netlink: 'syz.3.1422': attribute type 17 has an invalid length.
[  185.732953][ T5962] usb 1-1: config 0 has no interface number 0
[  185.735515][ T5962] usb 1-1: too many endpoints for config 0 interface 105 altsetting 48: 49, using maximum allowed: 30
[  185.741973][ T5962] usb 1-1: config 0 interface 105 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 49
[  185.756712][ T5962] usb 1-1: config 0 interface 105 has no altsetting 0
[  185.761503][ T5962] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  185.764877][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.772674][ T9334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.772892][ T5962] usb 1-1: Product: syz
[  185.795507][ T5962] usb 1-1: Manufacturer: syz
[  185.802877][ T5962] usb 1-1: SerialNumber: syz
[  185.810418][ T5962] usb 1-1: config 0 descriptor??
[  186.034482][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.037746][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.216934][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  186.366820][   T10] usb 4-1: Using ep0 maxpacket: 16
[  186.373824][   T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  186.379885][   T10] usb 4-1: config 0 has no interface number 0
[  186.384550][   T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  186.388795][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.392029][   T10] usb 4-1: Product: syz
[  186.393532][   T10] usb 4-1: Manufacturer: syz
[  186.395191][   T10] usb 4-1: SerialNumber: syz
[  186.400343][   T10] usb 4-1: config 0 descriptor??
[  186.407713][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  187.500726][ T9382] dvmrp1: entered allmulticast mode
[  187.618806][   T10] gspca_spca1528: reg_w err -71
[  187.622407][   T10] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  187.629610][   T10] usb 4-1: USB disconnect, device number 7
[  188.078263][ T5962] usb 1-1: USB disconnect, device number 17
[  188.128766][ T9399] bridge2: entered promiscuous mode
[  188.523341][ T9407] fuse: Bad value for 'fd'
[  188.546448][ T9407] overlayfs: overlapping lowerdir path
[  188.935851][ T9405] loop0: detected capacity change from 0 to 40427
[  188.952927][ T9405] F2FS-fs (loop0): invalid crc value
[  189.154783][ T9405] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  189.159429][ T9405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  189.563769][ T9437] loop3: detected capacity change from 0 to 32768
[  190.043908][ T9460] loop0: detected capacity change from 0 to 256
[  190.051537][ T9460] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  190.081323][   T33] audit: type=1800 audit(1759350587.057:95): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1475" name="file1" dev="loop0" ino=1048665 res=0 errno=0
[  190.343436][ T9464] loop0: detected capacity change from 0 to 32768
[  190.365593][ T9464] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.390631][ T9464] XFS (loop0): Ending clean mount
[  190.431168][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'.
[  190.768022][   T33] audit: type=1800 audit(1759350587.737:96): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1477" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  191.119796][ T5917] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  191.238520][ T9493] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1485'.
[  191.242121][ T9493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1485'.
[  191.245901][ T9493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1485'.
[  191.797493][ T5962] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  191.970603][ T5962] usb 1-1: config 2 has an invalid interface number: 233 but max is 0
[  191.974126][ T5962] usb 1-1: config 2 has no interface number 0
[  191.977932][ T5962] usb 1-1: config 2 interface 233 has no altsetting 0
[  191.990186][ T5962] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0109, bcdDevice=33.00
[  191.995034][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.001870][ T5962] usb 1-1: Product: syz
[  192.005898][ T5962] usb 1-1: Manufacturer: syz
[  192.015475][ T5962] usb 1-1: SerialNumber: syz
[  192.239539][ T5962] ftdi_sio 1-1:2.233: FTDI USB Serial Device converter detected
[  192.243651][ T5962] usb 1-1: Detected FT232HP
[  192.264186][ T5962] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  192.288256][ T5962] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  192.289505][ T9545] loop3: detected capacity change from 0 to 512
[  192.293874][ T5962] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  192.303326][ T9545] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  192.312890][ T9545] EXT4-fs (loop3): orphan cleanup on readonly fs
[  192.319095][ T5962] usb 1-1: USB disconnect, device number 18
[  192.319249][ T9545] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1495: iget: bad i_size value: 38620345925642
[  192.335454][ T9545] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1495: couldn't read orphan inode 15 (err -117)
[  192.340523][ T5962] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  192.340930][ T5962] ftdi_sio 1-1:2.233: device disconnected
[  192.353855][ T9545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  192.518047][ T7195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.760661][ T9585] loop3: detected capacity change from 0 to 32768
[  192.770014][ T9585] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1496 (9585)
[  192.788202][ T9585] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.803110][ T9585] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  192.853884][ T9592] netlink: 'syz.2.1500': attribute type 21 has an invalid length.
[  192.941144][ T9585] BTRFS info (device loop3): setting nodatasum
[  192.943684][ T9585] BTRFS info (device loop3): setting nodatacow
[  192.947827][ T9585] BTRFS info (device loop3): enabling free space tree
[  192.955154][ T9585] BTRFS info (device loop3): enabling auto defrag
[  192.979220][ T9585] BTRFS info (device loop3): max_inline set to 0
[  193.126037][ T7195] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.384396][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1508'.
[  193.387889][ T9638] tc_dump_action: action bad kind
[  193.693591][ T9663] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  194.062992][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.593538][ T9706] : renamed from vlan1 (while UP)
[  195.029614][ T9745] loop3: detected capacity change from 0 to 1024
[  195.064453][ T9745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.111986][ T7195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.139356][ T5915] Bluetooth: hci1: command 0x0406 tx timeout
[  196.374964][ T9788] raw_sendmsg: syz.0.1581 forgot to set AF_INET. Fix it!
[  196.414489][ T9790] loop3: detected capacity change from 0 to 512
[  196.439519][ T9790] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  196.453060][ T9790] EXT4-fs (loop3): orphan cleanup on readonly fs
[  196.461763][ T9790] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  196.471641][ T9790] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  196.474007][ T9790] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.1583: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  196.482335][ T9790] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1583: couldn't read orphan inode 13 (err -117)
[  196.500057][ T9790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  196.511441][ T9790] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  196.516009][ T9790] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  196.541695][ T9790] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  196.569460][ T7195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.298578][ T5921] Bluetooth: hci2: command 0x0406 tx timeout
[  197.446897][ T5978] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  197.631062][ T5978] usb 4-1: unable to get BOS descriptor or descriptor too short
[  197.634432][ T5978] usb 4-1: not running at top speed; connect to a high speed hub
[  197.638179][ T5978] usb 4-1: config 2 has an invalid interface number: 226 but max is 1
[  197.641285][ T5978] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  197.645490][ T5978] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2
[  197.650013][ T5978] usb 4-1: config 2 has no interface number 0
[  197.652748][ T5978] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  197.660996][ T5978] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  197.666254][ T5978] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  197.674497][ T5978] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  197.678253][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.681704][ T5978] usb 4-1: Product: syz
[  197.683516][ T5978] usb 4-1: Manufacturer: syz
[  197.685544][ T5978] usb 4-1: SerialNumber: syz
[  198.230933][ T5978] usb 4-1: USB disconnect, device number 8
[  198.439057][ T9834] overlayfs: failed to clone upperpath
[  198.686924][  T795] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  198.689676][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1608'.
[  198.694949][ T9850] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1608'.
[  198.836829][  T795] usb 1-1: Using ep0 maxpacket: 32
[  198.841858][  T795] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  198.845918][  T795] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  198.853082][  T795] usb 1-1: config 0 interface 0 has no altsetting 0
[  198.858792][  T795] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e
[  198.863067][  T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.866486][  T795] usb 1-1: Product: syz
[  198.868704][  T795] usb 1-1: Manufacturer: syz
[  198.870852][  T795] usb 1-1: SerialNumber: syz
[  198.875711][  T795] usb 1-1: config 0 descriptor??
[  199.086212][  T795] gs_usb 1-1:0.0: Couldn't send data format (err=-71)
[  199.099802][  T795] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  199.109263][  T795] usb 1-1: USB disconnect, device number 19
[  199.429839][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'.
[  200.029881][ T9911] loop3: detected capacity change from 0 to 256
[  200.041711][ T9911] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  202.502341][ T9936] loop3: detected capacity change from 0 to 24
[  202.841486][ T9956] loop3: detected capacity change from 0 to 512
[  202.845505][ T9956] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  202.858018][ T9956] EXT4-fs (loop3): 1 truncate cleaned up
[  202.865839][ T9956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.899123][ T7195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.121509][ T9954] loop0: detected capacity change from 0 to 32768
[  203.139506][ T9954] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: OCFS2_VALID_FL not set
[  203.146164][ T9954] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  203.150739][ T9954] OCFS2: File system is now read-only.
[  203.153164][ T9954] (syz.0.1648,9954,0):ocfs2_read_locked_inode:597 ERROR: status = -30
[  203.156904][ T9954] (syz.0.1648,9954,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  203.190865][ T9954] (syz.0.1648,9954,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  203.195618][ T9954] (syz.0.1648,9954,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  203.195739][ T9954] (syz.0.1648,9954,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  203.210618][ T9954] (syz.0.1648,9954,1):ocfs2_initialize_super:2198 ERROR: status = -30
[  203.241802][ T9954] (syz.0.1648,9954,1):ocfs2_fill_super:1177 ERROR: status = -30
[  203.322543][ T9963] loop3: detected capacity change from 0 to 8192
[  203.330012][ T9963] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  203.653487][ T9971] netlink: 'syz.0.1653': attribute type 21 has an invalid length.
[  203.656336][ T9971] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1653'.
[  203.980363][ T9991] netlink: 'syz.0.1663': attribute type 1 has an invalid length.
[  205.662649][T10020] loop3: detected capacity change from 0 to 512
[  205.668912][T10020] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  205.680286][T10020] EXT4-fs (loop3): 1 truncate cleaned up
[  205.683596][T10020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.691915][T10020] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:298: inode #15: comm syz.3.1675: verity file has no extents
[  205.700867][T10020] EXT4-fs (loop3): Remounting filesystem read-only
[  205.703742][T10020] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  205.758895][ T7195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.786763][   T33] audit: type=1326 audit(1759350608.748:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.0.1673" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426838ec29 code=0x7fc00000
[  206.429293][   T56] Bluetooth: hci1: unexpected event for opcode 0x041c
[  206.743258][T10071] loop0: detected capacity change from 0 to 512
[  206.980757][T10083] netlink: 'syz.0.1703': attribute type 10 has an invalid length.
[  206.984752][T10083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1703'.
[  206.991461][T10083] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  206.995992][T10083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  207.213545][T10076] loop3: detected capacity change from 0 to 32768
[  207.251607][T10076] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  207.332216][T10092] overlay: Unknown parameter 'euid'
[  207.338743][T10092] overlayfs: failed to resolve './file1': -2
[  207.465748][T10076] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  207.823679][ T7195] ocfs2: Unmounting device (7,3) on (node local)
[  207.996206][T10108] netlink: 'syz.3.1709': attribute type 1 has an invalid length.
[  207.998934][T10108] netlink: 'syz.3.1709': attribute type 1 has an invalid length.
[  208.545739][T10140] netlink: 'syz.0.1727': attribute type 1 has an invalid length.
[  208.855568][T10143] loop0: detected capacity change from 0 to 512
[  208.884090][T10143] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  208.891081][T10143] EXT4-fs (loop0): 1 truncate cleaned up
[  208.894896][T10143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.931135][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.016433][T10151] tipc: Started in network mode
[  209.020874][T10151] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  209.034434][T10151] tipc: Enabled bearer <eth:ipvlan0>, priority 19
[  209.155246][T10160] vxfs: unable to read disk superblock at 1
[  209.158287][T10160] vxfs: unable to read disk superblock at 8
[  209.160256][T10160] vxfs: can't find superblock.
[  209.237521][T10164] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  209.344306][   T10] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0
[  209.362730][   T10] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0
[  209.383587][   T10] hid-generic 0000:0003:0000.0006: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz0
[  210.029763][  T795] tipc: Node number set to 10136234
[  210.709049][T10190] can: request_module (can-proto-3) failed.
[  211.669766][T10213] kernel profiling enabled (shift: 17)
[  212.376793][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  212.459696][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'.
[  212.462851][T10233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1766'.
[  212.526788][   T10] usb 4-1: Using ep0 maxpacket: 16
[  212.530807][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  212.535366][   T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  212.539574][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.549506][   T10] usb 4-1: config 0 descriptor??
[  212.978306][   T10] lua 0003:1E7D:2C2E.0007: unbalanced collection at end of report description
[  212.982658][   T10] lua 0003:1E7D:2C2E.0007: parse failed
[  212.991302][   T10] lua 0003:1E7D:2C2E.0007: probe with driver lua failed with error -22
[  213.053248][T10249] loop0: detected capacity change from 0 to 40427
[  213.059491][T10249] F2FS-fs (loop0): build fault injection rate: 14
[  213.062223][T10249] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  213.083244][T10249] F2FS-fs (loop0): invalid crc value
[  213.088464][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  213.101461][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  213.150976][T10249] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  213.154688][T10249] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  213.160668][T10249] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  213.181036][ T5961] usb 4-1: USB disconnect, device number 9
[  213.183130][T10249] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  213.194762][T10249] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  213.231240][ T5917] syz-executor: attempt to access beyond end of device
[  213.231240][ T5917] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  213.239778][ T5917] CPU: 1 UID: 0 PID: 5917 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  213.239817][ T5917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.239826][ T5917] Call Trace:
[  213.239832][ T5917]  <TASK>
[  213.239838][ T5917]  dump_stack_lvl+0x189/0x250
[  213.239860][ T5917]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.239873][ T5917]  ? __pfx_queue_work_on+0x10/0x10
[  213.239883][ T5917]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  213.239898][ T5917]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.239922][ T5917]  f2fs_handle_critical_error+0x37c/0x540
[  213.239941][ T5917]  f2fs_write_end_io+0x886/0xb60
[  213.239970][ T5917]  __submit_merged_bio+0x27a/0x6a0
[  213.239988][ T5917]  __submit_merged_write_cond+0x255/0x530
[  213.240013][ T5917]  f2fs_write_data_pages+0x261d/0x3000
[  213.240055][ T5917]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  213.240109][ T5917]  ? folio_unqueue_deferred_split+0x93/0x230
[  213.240137][ T5917]  ? folios_put_refs+0x584/0x670
[  213.240164][ T5917]  ? __lock_acquire+0xab9/0xd20
[  213.240188][ T5917]  ? do_raw_spin_lock+0x121/0x290
[  213.240212][ T5917]  ? do_raw_spin_unlock+0x4d/0x240
[  213.240225][ T5917]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  213.240239][ T5917]  do_writepages+0x32e/0x550
[  213.240261][ T5917]  ? do_raw_spin_unlock+0x4d/0x240
[  213.240276][ T5917]  filemap_fdatawrite+0x199/0x240
[  213.240289][ T5917]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  213.240341][ T5917]  ? do_raw_spin_unlock+0x4d/0x240
[  213.240360][ T5917]  f2fs_sync_dirty_inodes+0x31f/0x830
[  213.240414][ T5917]  f2fs_write_checkpoint+0x93e/0x2440
[  213.240431][ T5917]  ? __lock_acquire+0xab9/0xd20
[  213.240471][ T5917]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  213.240534][ T5917]  kill_f2fs_super+0x2cc/0x6d0
[  213.240555][ T5917]  ? __pfx_kill_f2fs_super+0x10/0x10
[  213.240586][ T5917]  ? shrinker_free+0x2ce/0x3e0
[  213.240607][ T5917]  deactivate_locked_super+0xbc/0x130
[  213.240628][ T5917]  cleanup_mnt+0x425/0x4c0
[  213.240647][ T5917]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.240665][ T5917]  task_work_run+0x1d4/0x260
[  213.240683][ T5917]  ? __pfx_task_work_run+0x10/0x10
[  213.240697][ T5917]  ? __x64_sys_umount+0x122/0x160
[  213.240714][ T5917]  ? exit_to_user_mode_loop+0x40/0x130
[  213.240735][ T5917]  exit_to_user_mode_loop+0xe9/0x130
[  213.240752][ T5917]  do_syscall_64+0x2bd/0xfa0
[  213.240767][ T5917]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.240781][ T5917]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.240793][ T5917]  ? exc_page_fault+0xab/0x100
[  213.240809][ T5917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.240822][ T5917] RIP: 0033:0x7f426838ff57
[  213.240834][ T5917] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  213.240844][ T5917] RSP: 002b:00007ffdaeb64408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  213.240858][ T5917] RAX: 0000000000000000 RBX: 00007f4268411c2d RCX: 00007f426838ff57
[  213.240867][ T5917] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaeb644c0
[  213.240874][ T5917] RBP: 00007ffdaeb644c0 R08: 0000000000000000 R09: 0000000000000000
[  213.240881][ T5917] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdaeb65550
[  213.240889][ T5917] R13: 00007f4268411c2d R14: 0000000000034064 R15: 00007ffdaeb65590
[  213.240913][ T5917]  </TASK>
[  213.244181][ T5917] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  213.618825][T10286] loop0: detected capacity change from 0 to 512
[  213.627914][T10286] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  213.658885][T10286] EXT4-fs (loop0): 1 truncate cleaned up
[  213.661511][T10286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.763222][ T5917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.821426][T10301] loop0: detected capacity change from 0 to 256
[  213.840694][T10301] FAT-fs (loop0): Directory bread(block 1285) failed
[  214.006783][  T795] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  214.086802][ T5961] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  214.186795][  T795] usb 4-1: Using ep0 maxpacket: 8
[  214.191449][  T795] usb 4-1: config 0 has no interfaces?
[  214.196044][  T795] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  214.200013][  T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.203397][  T795] usb 4-1: Product: syz
[  214.205297][  T795] usb 4-1: Manufacturer: syz
[  214.207394][  T795] usb 4-1: SerialNumber: syz
[  214.212749][  T795] usb 4-1: config 0 descriptor??
[  214.236779][ T5961] usb 1-1: Using ep0 maxpacket: 16
[  214.241017][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.245040][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  214.250057][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  214.254607][ T5961] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  214.258987][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  214.265417][ T5961] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  214.269241][ T5961] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  214.272922][ T5961] usb 1-1: Manufacturer: syz
[  214.277188][ T5961] usb 1-1: config 0 descriptor??
[  214.423544][   T10] usb 4-1: USB disconnect, device number 10
[  214.529131][ T5961] rc_core: IR keymap rc-hauppauge not found
[  214.531278][ T5961] Registered IR keymap rc-empty
[  214.533438][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.548932][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.569141][ T5961] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  214.575922][ T5961] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7
[  214.588294][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.607638][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.627286][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.646886][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.666746][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.687074][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.706859][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.727081][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.747387][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.767375][ T5961] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  214.789424][ T5961] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  214.793002][ T5961] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  214.956392][ T5961] usb 1-1: USB disconnect, device number 20
[  216.035685][T10361] loop3: detected capacity change from 0 to 32768
[  216.174213][   T33] audit: type=1800 audit(1759350619.158:98): pid=10361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1822" name="file1" dev="loop3" ino=4 res=0 errno=0
[  216.498774][T10372] loop3: detected capacity change from 0 to 32768
[  216.507444][T10372] JBD2: Ignoring recovery information on journal
[  216.530666][T10372] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  216.624555][T10384] 
[  216.625638][T10384] ======================================================
[  216.628590][T10384] WARNING: possible circular locking dependency detected
[  216.631279][T10384] syzkaller #0 Not tainted
[  216.633103][T10384] ------------------------------------------------------
[  216.637649][T10384] syz.3.1826/10384 is trying to acquire lock:
[  216.640266][T10384] ffff88802ee1ef40 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  216.645826][T10384] 
[  216.645826][T10384] but task is already holding lock:
[  216.648736][T10384] ffff88811e0ccf78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  216.652562][T10384] 
[  216.652562][T10384] which lock already depends on the new lock.
[  216.652562][T10384] 
[  216.656839][T10384] 
[  216.656839][T10384] the existing dependency chain (in reverse order) is:
[  216.660626][T10384] 
[  216.660626][T10384] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  216.663904][T10384]        lock_acquire+0x120/0x360
[  216.666108][T10384]        down_read+0x46/0x2e0
[  216.668083][T10384]        ocfs2_init_acl+0x2f9/0x720
[  216.670250][T10384]        ocfs2_mknod+0x1321/0x2050
[  216.672445][T10384]        ocfs2_mkdir+0x191/0x440
[  216.674554][T10384]        vfs_mkdir+0x306/0x510
[  216.676634][T10384]        do_mkdirat+0x247/0x590
[  216.678726][T10384]        __x64_sys_mkdirat+0x87/0xa0
[  216.680993][T10384]        do_syscall_64+0xfa/0xfa0
[  216.683127][T10384]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.685825][T10384] 
[  216.685825][T10384] -> #4 (jbd2_handle){++++}-{0:0}:
[  216.688910][T10384]        lock_acquire+0x120/0x360
[  216.691061][T10384]        start_this_handle+0x1fa7/0x21c0
[  216.693271][T10384]        jbd2__journal_start+0x2c1/0x5b0
[  216.695484][T10384]        jbd2_journal_start+0x2a/0x40
[  216.697668][T10384]        ocfs2_start_trans+0x376/0x6d0
[  216.699995][T10384]        ocfs2_reserve_local_alloc_bits+0xb04/0x24e0
[  216.702845][T10384]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  216.705556][T10384]        ocfs2_extend_dir+0x701/0x4870
[  216.707902][T10384]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  216.710681][T10384]        ocfs2_mknod+0x819/0x2050
[  216.712780][T10384]        ocfs2_mkdir+0x191/0x440
[  216.714894][T10384]        vfs_mkdir+0x306/0x510
[  216.716869][T10384]        do_mkdirat+0x247/0x590
[  216.718919][T10384]        __x64_sys_mkdirat+0x87/0xa0
[  216.721054][T10384]        do_syscall_64+0xfa/0xfa0
[  216.723177][T10384]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.725759][T10384] 
[  216.725759][T10384] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  216.730165][T10384]        lock_acquire+0x120/0x360
[  216.732251][T10384]        down_read+0x46/0x2e0
[  216.734244][T10384]        ocfs2_start_trans+0x36a/0x6d0
[  216.736556][T10384]        ocfs2_reserve_local_alloc_bits+0xb04/0x24e0
[  216.739398][T10384]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  216.742192][T10384]        ocfs2_extend_dir+0x701/0x4870
[  216.744405][T10384]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  216.747210][T10384]        ocfs2_mknod+0x819/0x2050
[  216.749406][T10384]        ocfs2_mkdir+0x191/0x440
[  216.751402][T10384]        vfs_mkdir+0x306/0x510
[  216.753289][T10384]        do_mkdirat+0x247/0x590
[  216.755300][T10384]        __x64_sys_mkdirat+0x87/0xa0
[  216.757551][T10384]        do_syscall_64+0xfa/0xfa0
[  216.759626][T10384]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.762342][T10384] 
[  216.762342][T10384] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  216.765524][T10384]        lock_acquire+0x120/0x360
[  216.767689][T10384]        ocfs2_start_trans+0x26b/0x6d0
[  216.769979][T10384]        ocfs2_extend_dir+0xf71/0x4870
[  216.772266][T10384]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  216.774867][T10384]        ocfs2_mknod+0x819/0x2050
[  216.776950][T10384]        ocfs2_mkdir+0x191/0x440
[  216.779013][T10384]        vfs_mkdir+0x306/0x510
[  216.780960][T10384]        do_mkdirat+0x247/0x590
[  216.783040][T10384]        __x64_sys_mkdirat+0x87/0xa0
[  216.785283][T10384]        do_syscall_64+0xfa/0xfa0
[  216.787456][T10384]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.790065][T10384] 
[  216.790065][T10384] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  216.794228][T10384]        lock_acquire+0x120/0x360
[  216.796261][T10384]        down_write+0x96/0x1f0
[  216.798114][T10384]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  216.801376][T10384]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  216.804464][T10384]        ocfs2_mknod+0xe32/0x2050
[  216.806624][T10384]        ocfs2_mkdir+0x191/0x440
[  216.808770][T10384]        vfs_mkdir+0x306/0x510
[  216.810870][T10384]        do_mkdirat+0x247/0x590
[  216.812869][T10384]        __x64_sys_mkdirat+0x87/0xa0
[  216.814989][T10384]        do_syscall_64+0xfa/0xfa0
[  216.817151][T10384]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.819845][T10384] 
[  216.819845][T10384] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  216.824218][T10384]        validate_chain+0xb9b/0x2140
[  216.826491][T10384]        __lock_acquire+0xab9/0xd20
[  216.828613][T10384]        lock_acquire+0x120/0x360
[  216.830761][T10384]        down_write+0x96/0x1f0
[  216.832781][T10384]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  216.835036][T10384]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  216.837237][T10384]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  216.839108][T10384]        ocfs2_xattr_set+0xb70/0x11f0
[  216.840741][T10384]        __vfs_setxattr+0x43c/0x480
[  216.842524][T10384]        __vfs_setxattr_noperm+0x12d/0x660
[  216.845020][T10384]        vfs_setxattr+0x16b/0x2f0
[  216.847198][T10384]        filename_setxattr+0x274/0x600
[  216.849520][T10384]        path_setxattrat+0x364/0x3a0
[  216.851783][T10384]        __x64_sys_setxattr+0xbc/0xe0
[  216.854037][T10384]        do_syscall_64+0xfa/0xfa0
[  216.856169][T10384]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.858811][T10384] 
[  216.858811][T10384] other info that might help us debug this:
[  216.858811][T10384] 
[  216.863060][T10384] Chain exists of:
[  216.863060][T10384]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  216.863060][T10384] 
[  216.869634][T10384]  Possible unsafe locking scenario:
[  216.869634][T10384] 
[  216.872652][T10384]        CPU0                    CPU1
[  216.874826][T10384]        ----                    ----
[  216.877049][T10384]   lock(&oi->ip_xattr_sem);
[  216.879008][T10384]                                lock(jbd2_handle);
[  216.881716][T10384]                                lock(&oi->ip_xattr_sem);
[  216.884586][T10384]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  216.887657][T10384] 
[  216.887657][T10384]  *** DEADLOCK ***
[  216.887657][T10384] 
[  216.890988][T10384] 3 locks held by syz.3.1826/10384:
[  216.893201][T10384]  #0: ffff88803a79c420 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  216.897013][T10384]  #1: ffff88811e0cd240 (&sb->s_type->i_mutex_key#42){+.+.}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  216.901349][T10384]  #2: ffff88811e0ccf78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  216.905426][T10384] 
[  216.905426][T10384] stack backtrace:
[  216.907903][T10384] CPU: 1 UID: 0 PID: 10384 Comm: syz.3.1826 Not tainted syzkaller #0 PREEMPT(full) 
[  216.907918][T10384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.907927][T10384] Call Trace:
[  216.907934][T10384]  <TASK>
[  216.907940][T10384]  dump_stack_lvl+0x189/0x250
[  216.907957][T10384]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.907971][T10384]  ? __pfx__printk+0x10/0x10
[  216.907986][T10384]  ? print_lock_name+0xde/0x100
[  216.908002][T10384]  print_circular_bug+0x2ee/0x310
[  216.908017][T10384]  check_noncircular+0x134/0x160
[  216.908031][T10384]  validate_chain+0xb9b/0x2140
[  216.908043][T10384]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  216.908060][T10384]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  216.908078][T10384]  __lock_acquire+0xab9/0xd20
[  216.908097][T10384]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  216.908121][T10384]  lock_acquire+0x120/0x360
[  216.908137][T10384]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  216.908158][T10384]  down_write+0x96/0x1f0
[  216.908174][T10384]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  216.908191][T10384]  ? __pfx_down_write+0x10/0x10
[  216.908211][T10384]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  216.908228][T10384]  ? do_raw_spin_lock+0x121/0x290
[  216.908244][T10384]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  216.908258][T10384]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.908273][T10384]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  216.908288][T10384]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  216.908305][T10384]  ? stack_depot_save_flags+0x41b/0x860
[  216.908350][T10384]  ? kasan_save_track+0x4f/0x80
[  216.908365][T10384]  ? kasan_save_track+0x3e/0x80
[  216.908378][T10384]  ? __kasan_kmalloc+0x93/0xb0
[  216.908392][T10384]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  216.908407][T10384]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  216.908423][T10384]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  216.908443][T10384]  ? ocfs2_xattr_set+0xb70/0x11f0
[  216.908461][T10384]  ? __vfs_setxattr+0x43c/0x480
[  216.908475][T10384]  ? __vfs_setxattr_noperm+0x12d/0x660
[  216.908489][T10384]  ? vfs_setxattr+0x16b/0x2f0
[  216.908502][T10384]  ? filename_setxattr+0x274/0x600
[  216.908517][T10384]  ? path_setxattrat+0x364/0x3a0
[  216.908534][T10384]  ? __x64_sys_setxattr+0xbc/0xe0
[  216.908550][T10384]  ? do_syscall_64+0xfa/0xfa0
[  216.908565][T10384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.908589][T10384]  ? __kasan_kmalloc+0x93/0xb0
[  216.908604][T10384]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  216.908618][T10384]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  216.908634][T10384]  ? do_raw_spin_unlock+0x4d/0x240
[  216.908649][T10384]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  216.908668][T10384]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  216.908684][T10384]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  216.908699][T10384]  ? __lock_acquire+0xab9/0xd20
[  216.908718][T10384]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  216.908738][T10384]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  216.908759][T10384]  ? ocfs2_xattr_set+0xb36/0x11f0
[  216.908778][T10384]  ? up_write+0x1c4/0x420
[  216.908791][T10384]  ocfs2_xattr_set+0xb70/0x11f0
[  216.908815][T10384]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  216.908834][T10384]  ? dput+0x37/0x2b0
[  216.908850][T10384]  ? dput+0x37/0x2b0
[  216.908863][T10384]  ? step_into+0x3ee/0xe80
[  216.908881][T10384]  ? step_into+0x3ee/0xe80
[  216.908897][T10384]  ? look_up_lock_class+0x74/0x170
[  216.908912][T10384]  ? register_lock_class+0x51/0x320
[  216.908930][T10384]  ? evm_protected_xattr_common+0x170/0x190
[  216.908949][T10384]  ? evm_protect_xattr+0x71d/0xa90
[  216.908962][T10384]  ? __pfx_evm_protect_xattr+0x10/0x10
[  216.908974][T10384]  ? __pfx_ocfs2_xattr_security_set+0x10/0x10
[  216.908985][T10384]  __vfs_setxattr+0x43c/0x480
[  216.909002][T10384]  __vfs_setxattr_noperm+0x12d/0x660
[  216.909019][T10384]  vfs_setxattr+0x16b/0x2f0
[  216.909036][T10384]  ? __pfx_vfs_setxattr+0x10/0x10
[  216.909054][T10384]  filename_setxattr+0x274/0x600
[  216.909073][T10384]  ? __pfx_filename_setxattr+0x10/0x10
[  216.909089][T10384]  ? getname_flags+0x1e5/0x540
[  216.909112][T10384]  path_setxattrat+0x364/0x3a0
[  216.909133][T10384]  ? __pfx_path_setxattrat+0x10/0x10
[  216.909151][T10384]  ? do_futex+0x333/0x420
[  216.909175][T10384]  __x64_sys_setxattr+0xbc/0xe0
[  216.909192][T10384]  do_syscall_64+0xfa/0xfa0
[  216.909208][T10384]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.909222][T10384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.909234][T10384]  ? exc_page_fault+0xab/0x100
[  216.909249][T10384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.909262][T10384] RIP: 0033:0x7f1036d8ec29
[  216.909273][T10384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.909285][T10384] RSP: 002b:00007f1037cbb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  216.909298][T10384] RAX: ffffffffffffffda RBX: 00007f1036fd6090 RCX: 00007f1036d8ec29
[  216.909307][T10384] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 00002000000000c0
[  216.909316][T10384] RBP: 00007f1036e11e41 R08: 0000000000000000 R09: 0000000000000000
[  216.909352][T10384] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
[  216.909360][T10384] R13: 00007f1036fd6128 R14: 00007f1036fd6090 R15: 00007fffdd9a3798
[  216.909375][T10384]  </TASK>
[  217.158117][ T7195] ocfs2: Unmounting device (7,3) on (node local)

VM DIAGNOSIS:
20:25:57  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffd40008b6980 RBX=0000000000000000 RCX=ffffffff820b601f RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc9000a4bf890 RSP=ffffc9000a4bf5d8
R8 =ffffea00045b4c07 R9 =1ffffd40008b6980 R10=dffffc0000000000 R11=fffff940008b6981
R12=dffffc0000000000 R13=ffffc9000a4bfaa0 R14=ffffea00045b4c00 R15=ffffc9000a4bfaa0
RIP=ffffffff81c060e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e922ff8 CR3=000000000e138000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81a16369 ffffffff8176012b
XMM02=00007f42685a7498 ffffffff8176012b XMM03=00007f42685a74a8 00007f42685a74a0
XMM04=00007f426910d100 00007f42685a7460 XMM05=00007f42685a7478 00007f42685a74c0
XMM06=00007f42685a74b8 00007f42685a74b0 XMM07=00007f42685a74a8 00007f42685a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f4268412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001219 RDI=000000000000121a RBP=00000000000003f8 RSP=ffffc9000a4ce4b0
R8 =ffff888106d68237 R9 =1ffff11020dad046 R10=dffffc0000000000 R11=ffffffff8556dea0
R12=dffffc0000000000 R13=ffffffff99d1990c R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556df1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1037cbb6c0 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000112a20000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
