last executing test programs:

1m54.017036998s ago: executing program 1 (id=193):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x200, 0x4a, 0x2b, 0x80000005, 0x2})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})

1m53.07914229s ago: executing program 1 (id=208):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="33b59d6edb0500174ede7fd5f8b01be6325bb962454b3767052873c80c5f2c573ed5f4429de9f62d38503c73041915fe06e7e3b92c12f5c0d1c60ce3bafce2fcc95dd1d85553f94a39a1ef9aba9e2f00af7b50d3596cc1e448275ad4618db4b4e2cafd969271ba2c8dd354f9dba9bf7df6dfa6b7617f36b7cc8d4623d59f15558ddfdeed68d6f318f7fee8", @ANYBLOB="3cbed6e52efe7e5218c0f9829b50d40a4da4d0accda131734cbe6c66d4eb9ac85f5cb845dd4a8185d66e14c9511af49b481c0a86d034e702e2df26bc8d2020116977c6008d4a10ec2ff5b5a2c73d099f1d28", @ANYRESOCT], 0x9f, 0x194, &(0x7f0000000840)="$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")

1m53.010093642s ago: executing program 1 (id=209):
r0 = socket$inet(0x2, 0x2, 0x1)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000007c0)=0x30)

1m53.009747197s ago: executing program 1 (id=210):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
setuid(0xee01)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x7}}, 0x24, 0x2)

1m52.874298137s ago: executing program 1 (id=211):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x28)

1m52.599747758s ago: executing program 1 (id=212):
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x91)

1m52.504093436s ago: executing program 32 (id=212):
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x91)

3.796975711s ago: executing program 0 (id=1467):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"})

3.796469094s ago: executing program 0 (id=1468):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x8, 0x105c2, &(0x7f0000020b80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xf502, 0x0)

3.104662403s ago: executing program 0 (id=1472):
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x1000006, @loopback, 0x97}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x17)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, 0x0)

2.667080111s ago: executing program 0 (id=1473):
syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x101480)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0)

2.666343974s ago: executing program 0 (id=1474):
r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
syz_fuse_handle_req(r5, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x400, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0xc000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'})
write$FUSE_NOTIFY_STORE(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00\b'], 0x28)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @local}]})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1}, 0x0)

1.792934184s ago: executing program 2 (id=1479):
keyctl$set_reqkey_keyring(0xe, 0x0)

1.792579989s ago: executing program 2 (id=1480):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="2fae1baf930b45", 0x7}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0)

1.712541746s ago: executing program 0 (id=1481):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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")
syz_emit_vhci(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}}, &(0x7f00000004c0))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="31af0000001c04"], 0x7)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0xb8, 0x0, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r0, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0xd8a, @remote, 0xfffffff7}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
fsopen(0x0, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x7)
r2 = epoll_create(0x5000)
ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
getgroups(0x0, 0x0)

1.540422858s ago: executing program 2 (id=1482):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)

1.45438471s ago: executing program 2 (id=1483):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0)

1.454268102s ago: executing program 2 (id=1484):
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010003000000401e044230400001020301090269000301003003080b00020109200809040000000101200009240102000609000309040000010220000904"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})

456.032376ms ago: executing program 3 (id=1490):
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x20580, 0x0)
ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000940)={{}, 0x3})

204.518951ms ago: executing program 3 (id=1491):
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)
ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56)

125.527629ms ago: executing program 3 (id=1492):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xffffbffe)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000880)="00a61b121621936c97b0086c98914024309c9c0853ba5933e4b15891343b97f219151095cac38d57", 0x28}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0)

125.192707ms ago: executing program 3 (id=1493):
r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3)

59.851267ms ago: executing program 3 (id=1494):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$eJzs3c9rXFsdAPDvzCR5SZtn33uKvFfBFirUHzSTH0gTFcSVuiiIBTcKNSbTWDPphMykNqFgqrsuXIiiIC7c+xe4sStLQVwrbl1Ji9YIVSpcmTtz00kyk041mfHlfj4wnXvnTOd7ziTfkzPnnjs3gNy62PynEDEZEb+PiHOt3f1PuNi62312b6l5K0SSXP9rIX1ecz97avb/zkbETkSMR8RXvxjxrcLhuPWt7dXFarWy0d4vN9bWy/Wt7Su31hZXKiuV2zPzVxcW5qfnZheOra0PfvidB9d+/eWxXz3/wZNHP/rtb5rVmmyXdbbjOLWaPhpvdzw2EhGfO4lgQ1Bqt2di2BXhv9L8+X0wIi6l+X8uSulPsz8vTrRmwElLkiT5d/JGr+KdBDi1iukYuFCciojWdrE4NdUaw38ozhSrtXrjUzdrm7eXW2Plt2K0ePNWtTLd/qzwVowWmvsz6fbL/dkD+3MR6Rj4x6WJdH9qqVZdHmxXBxxw9kD+/6PUyn8gJ/r/yA+cNvIf8kv+Q37Jf8gv+Q/5Jf8hv+Q/5Jf8h/yS/5Bfnfmfncj15pDqAgzWUX//xwZYD2CgvnLtWvOWZOe/L9/Z2lyt3bmyXKmvTq1tLk0t1TbWp1ZqtZX0nJ21V71etVZbn/l0bN4tNyr1Rrm+tX1jrbZ5u3EjPa//RmV0IK0C+vH2hYd/LETEzmcm0lt0/MmXq3C6JUkhhn0OMjAcpWF3QMDQOPQH+fUan/F7fkkY8P7W5St694yf7Vn0+Vg/keoAA1A8qvDF48FVBBi4y+85/gd5Zf4f8sv8P+TXK8b4hgeQA0fN/0f7Wn5d9Tv///z16gOcvCPn/4FTbbLL9b+SJPnemx3X7pqOiA9ExB9Ko29k1/oCToPiXwrt8f/lcx+bPFg6VvhnOgcwFhHf/fn1n95dbDQ2ZpqP/23v8cbP2o/PDqP+QG/7Z/iyPM3yGADIr91n95ay2yDjPv1CaxHC4fgj7bnJ8XQEc2a3sG+tQuGY1i7s3I+Id7vFL7Svd9468nFmt3Qo/jvt+0LrJdL6jqTXTR9M/Pc64n+0I/75//ldgXx42Ox/prvlXzHN6djLv/39z+QxrY/O+r9szXVn/Kz/K/Xo/y70GePbv/h+t8O76WLvp/cjznftf7N442msg/GbdbvcZ/wn3/jah3uVJb9svU63+JnmVrmxtl6ub21fuZXVYv7qwsL89NzsQjmdoy5nM9WHffbd3z3qFb/Z/rYe7f/TofZPtOv0iT7b/6+PPP76xSPif/xS99+/d9L7A+9/kuzV4ZN9xv/77J+/2ausGX+5x/tf7BY/stKIuT7j13/yJecOA8D/kfrW9upitVrZ6LIx2rvIhg0bg94YiQEGfVXPsTOYDgo4MS+Tftg1AQAAAAAAAAAAAPrVa/Xvw2NcTjzsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAb/CQAA//9AntRF")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0xffffffffffff5c94, 0x8000000000, 0x23b0, 0x2001000a, 0x40000000000009, 0x6, 0xffffffffffff0001, 0x86cc, 0xd4})

59.459205ms ago: executing program 2 (id=1495):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2)
pwrite64(r1, &(0x7f0000000080)="cc", 0x1, 0x200980)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

0s ago: executing program 3 (id=1496):
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02ff"], 0x0)

kernel console output (not intermixed with test programs):

ilfs_palloc_freev (ino=3): entry number 239 already freed
[  117.198007][ T6840] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 511 already freed
[  117.202202][ T5195] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  117.208261][ T6840] NILFS (loop0): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  117.279072][ T6843] loop0: detected capacity change from 0 to 1024
[  117.377021][ T5195] usb 3-1: descriptor type invalid, skip
[  117.388562][ T5195] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  117.398763][ T5195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.404730][ T5195] usb 3-1: Product: syz
[  117.406419][ T5195] usb 3-1: Manufacturer: syz
[  117.408296][ T5195] usb 3-1: SerialNumber: syz
[  117.636323][ T6855] loop0: detected capacity change from 0 to 32768
[  117.679132][ T5195] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  117.683164][ T6855] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  117.696074][ T5195] usb 3-1: MIDIStreaming interface descriptor not found
[  117.793937][ T5195] usb 3-1: USB disconnect, device number 9
[  117.830495][ T6862] loop3: detected capacity change from 0 to 512
[  117.881430][ T6862] EXT4-fs (loop3): orphan cleanup on readonly fs
[  117.898381][ T6862] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.415: iget: bad extra_isize 90 (inode size 256)
[  117.903976][ T6862] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  117.905708][ T6862] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.415: error while reading EA inode 11 err=-117
[  117.914367][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  117.914389][    C0] EXT4-fs (loop3): initial error at time 1781009302: ext4_xattr_inode_iget:441: inode 11
[  117.914412][    C0] EXT4-fs (loop3): last error at time 1781009302: ext4_xattr_inode_iget:441: inode 11
[  118.027053][ T6865] overlayfs: upper fs does not support tmpfile.
[  118.049098][ T6865] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  118.065972][ T6865] overlayfs: upper fs missing required features.
[  118.253125][ T6862] loop3: lost filesystem error report for type 5 error -117
[  118.255360][ T6862] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  118.286582][ T6862] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.415: iget: bad extra_isize 90 (inode size 256)
[  118.291668][ T6862] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  118.292932][ T6862] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.415: error while reading EA inode 11 err=-117
[  118.300255][ T6862] loop3: lost filesystem error report for type 5 error -117
[  118.300988][ T6862] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.415: iget: bad extra_isize 90 (inode size 256)
[  118.307811][ T6862] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  118.312460][ T6862] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.415: error while reading EA inode 18 err=-117
[  118.320208][ T6862] loop3: lost filesystem error report for type 5 error -117
[  118.320896][ T6862] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.415: iget: bad extra_isize 90 (inode size 256)
[  118.321568][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  118.326461][ T6862] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  118.336844][ T6862] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.415: error while reading EA inode 18 err=-117
[  118.345843][ T6862] loop3: lost filesystem error report for type 5 error -117
[  118.346185][ T6862] EXT4-fs (loop3): 1 orphan inode deleted
[  118.361395][ T6862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  118.408761][ T6855] syz.0.413 (6855) used greatest stack depth: 19064 bytes left
[  118.422215][ T6279] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.658275][ T5683] ocfs2: Unmounting device (7,0) on (node local)
[  118.782329][ T5651] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  118.873444][ T6882] loop0: detected capacity change from 0 to 512
[  118.880105][ T6882] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  118.889437][ T6882] EXT4-fs (loop0): orphan file too big: 67108874
[  118.893375][ T6882] EXT4-fs (loop0): mount failed
[  118.932381][ T5651] usb 3-1: Using ep0 maxpacket: 8
[  118.938613][ T5651] usb 3-1: config 64 has an invalid interface number: 19 but max is 0
[  118.948134][ T5651] usb 3-1: config 64 has no interface number 0
[  118.953154][ T5651] usb 3-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid maxpacket 11521, setting to 1024
[  118.967396][ T5651] usb 3-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  118.974877][ T5651] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  118.982706][ T5651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.997320][ T6868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  119.023844][ T5651] usb 3-1: probing VID:PID(2201:012C)   
[  119.034021][ T5651] usb 3-1: vub300 testing BULK OUT EndPoint(0) 02
[  119.043447][ T5651] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  119.046771][ T6889] netlink: 428 bytes leftover after parsing attributes in process `syz.0.425'.
[  119.054193][ T5651] vub300 3-1:64.19: probe with driver vub300 failed with error -22
[  119.056834][ T6889] netlink: 32 bytes leftover after parsing attributes in process `syz.0.425'.
[  119.174668][ T6899] Cannot find del_set index 0 as target
[  119.220126][ T5651] usb 3-1: USB disconnect, device number 10
[  119.319345][ T6907] loop0: detected capacity change from 0 to 256
[  119.588608][ T6927] loop3: detected capacity change from 0 to 1024
[  120.133229][ T6944] loop2: detected capacity change from 0 to 1024
[  120.146583][ T6944] EXT4-fs: Ignoring removed bh option
[  120.206791][ T6944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.264270][ T5687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.558529][ T6960] loop2: detected capacity change from 0 to 256
[  120.597257][ T6960] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[  120.656189][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  120.828546][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.839538][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.848450][    T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  120.857514][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.868646][    T9] usb 1-1: config 0 descriptor??
[  120.968464][ T6970] netlink: 36 bytes leftover after parsing attributes in process `syz.2.459'.
[  121.508701][    T9] usb 1-1: string descriptor 0 read error: -22
[  121.722139][    T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input5
[  121.809722][    T9] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[  121.834746][ T6977] loop2: detected capacity change from 0 to 40427
[  121.843243][ T6977] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  121.846968][ T6977] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  121.853169][ T6977] F2FS-fs (loop2): invalid crc value
[  121.911147][ T6977] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  121.923500][ T6977] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  121.926630][ T6977] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  121.934993][    T9] usb 1-1: USB disconnect, device number 5
[  121.983040][ T6977] syz.2.461: attempt to access beyond end of device
[  121.983040][ T6977] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  122.073282][   T52] kworker/u9:2: attempt to access beyond end of device
[  122.073282][   T52] loop2: rw=1, sector=77944, nr_sectors = 16 limit=40427
[  122.339648][ T6983] loop3: detected capacity change from 0 to 4096
[  122.400257][ T6983] ntfs3(loop3): Failed to load $Extend (-22).
[  122.403958][ T6983] ntfs3(loop3): Failed to initialize $Extend.
[  122.615098][ T6996] vlan2: entered promiscuous mode
[  122.619981][ T6996] geneve1: entered promiscuous mode
[  122.622000][ T6996] vlan2: entered allmulticast mode
[  122.623792][ T6996] geneve1: entered allmulticast mode
[  122.744478][ T7007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.474'.
[  122.874160][ T7017] trusted_key: encrypted_key: master key parameter is missing
[  122.909726][ T7019] evm: overlay not supported
[  122.993893][ T7023] loop0: detected capacity change from 0 to 256
[  123.016085][ T7023] exfat: Deprecated parameter 'utf8'
[  123.045308][ T7023] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  123.186420][ T7033] loop0: detected capacity change from 0 to 2048
[  123.282839][ T7037] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.282861][ T7033] NILFS (loop0): error -2 reading inode: ino=2
[  123.305934][ T7033] NILFS (loop0): error -2 getting root inode
[  123.767797][ T7048] loop3: detected capacity change from 0 to 512
[  123.776788][ T7048] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  123.798564][ T7048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  123.802406][ T7048] System zones: 1-12
[  123.807495][ T7048] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  123.817545][ T7048] EXT4-fs (loop3): 1 truncate cleaned up
[  123.825496][ T7048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.905136][ T7055] loop0: detected capacity change from 0 to 512
[  123.959960][ T7055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.965286][ T7055] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  124.105626][ T7059] loop2: detected capacity change from 0 to 512
[  124.163803][ T7059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.176259][ T7059] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.224173][ T5687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.521411][ T7069] loop2: detected capacity change from 0 to 128
[  124.547807][ T7069] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  124.557449][ T7069] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  124.620085][ T6279] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.915199][ T7072] ceph: No mds server is up or the cluster is laggy
[  125.024194][ T5651] libceph: connect (1)[c::]:6789 error -101
[  125.043876][ T5651] libceph: mon0 (1)[c::]:6789 connect error
[  125.070301][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.474645][ T5687] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  126.422539][ T7090] loop3: detected capacity change from 0 to 40427
[  126.445973][ T7090] F2FS-fs (loop3): invalid crc value
[  126.689278][ T7090] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.699141][ T7090] F2FS-fs (loop3): Start checkpoint disabled!
[  126.716462][ T7090] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  126.730049][ T7090] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  126.891209][  T968] kworker/u10:3: attempt to access beyond end of device
[  126.891209][  T968] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  126.914175][  T968] CPU: 1 UID: 0 PID: 968 Comm: kworker/u10:3 Not tainted syzkaller #0 PREEMPT(full) 
[  126.914217][  T968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.914226][  T968] Workqueue: writeback wb_workfn (flush-7:3)
[  126.914256][  T968] Call Trace:
[  126.914262][  T968]  <TASK>
[  126.914268][  T968]  dump_stack_lvl+0xe8/0x150
[  126.914292][  T968]  f2fs_stop_checkpoint+0x3c7/0x590
[  126.914314][  T968]  f2fs_write_end_io+0x1274/0x1740
[  126.914343][  T968]  __submit_merged_bio+0x256/0x6a0
[  126.914364][  T968]  f2fs_submit_merged_write+0x284/0x390
[  126.914385][  T968]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  126.914413][  T968]  f2fs_sync_node_pages+0x11fe/0x13c0
[  126.914443][  T968]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  126.914460][  T968]  ? __percpu_counter_sum+0x1c2/0x1e0
[  126.914502][  T968]  ? blk_start_plug+0x51/0x1b0
[  126.914525][  T968]  f2fs_write_node_pages+0x312/0x700
[  126.914546][  T968]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  126.914565][  T968]  ? __lock_acquire+0x6b5/0x2cf0
[  126.914581][  T968]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  126.914600][  T968]  do_writepages+0x32e/0x550
[  126.914639][  T968]  ? reacquire_held_locks+0x104/0x190
[  126.914654][  T968]  ? writeback_sb_inodes+0x463/0x19d0
[  126.914681][  T968]  __writeback_single_inode+0x133/0x10e0
[  126.914694][  T968]  ? do_raw_spin_unlock+0x4d/0x210
[  126.914744][  T968]  writeback_sb_inodes+0x979/0x19d0
[  126.914760][  T968]  ? __lock_acquire+0x6b5/0x2cf0
[  126.914793][  T968]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  126.914810][  T968]  ? do_raw_spin_lock+0x12b/0x2f0
[  126.914855][  T968]  ? rcu_is_watching+0x15/0xb0
[  126.914878][  T968]  wb_writeback+0x445/0xb00
[  126.914900][  T968]  ? queue_io+0x231/0x470
[  126.914924][  T968]  ? __pfx_wb_writeback+0x10/0x10
[  126.914940][  T968]  ? do_raw_spin_lock+0x12b/0x2f0
[  126.914970][  T968]  wb_workfn+0x3f8/0xf10
[  126.914985][  T968]  ? __lock_acquire+0x6b5/0x2cf0
[  126.914995][  T968]  ? look_up_lock_class+0x57/0x110
[  126.915024][  T968]  ? __pfx_wb_workfn+0x10/0x10
[  126.915042][  T968]  ? do_raw_spin_lock+0x12b/0x2f0
[  126.915058][  T968]  ? lock_acquire+0x106/0x350
[  126.915073][  T968]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  126.915092][  T968]  ? process_scheduled_works+0xa70/0x1860
[  126.915108][  T968]  ? process_scheduled_works+0xa70/0x1860
[  126.915127][  T968]  ? process_scheduled_works+0xa70/0x1860
[  126.915139][  T968]  ? process_scheduled_works+0xa70/0x1860
[  126.915153][  T968]  process_scheduled_works+0xb5d/0x1860
[  126.915189][  T968]  ? __pfx_process_scheduled_works+0x10/0x10
[  126.915207][  T968]  ? assign_work+0x3d5/0x5e0
[  126.915224][  T968]  worker_thread+0xa53/0xfc0
[  126.915256][  T968]  kthread+0x389/0x470
[  126.915275][  T968]  ? __pfx_worker_thread+0x10/0x10
[  126.915287][  T968]  ? __pfx_kthread+0x10/0x10
[  126.915304][  T968]  ret_from_fork+0x514/0xb70
[  126.915322][  T968]  ? __pfx_ret_from_fork+0x10/0x10
[  126.915335][  T968]  ? __switch_to+0xc79/0x1410
[  126.915354][  T968]  ? __pfx_kthread+0x10/0x10
[  126.915370][  T968]  ret_from_fork_asm+0x1a/0x30
[  126.915398][  T968]  </TASK>
[  126.917319][  T968] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  127.073521][  T968] CPU: 1 UID: 0 PID: 968 Comm: kworker/u10:3 Not tainted syzkaller #0 PREEMPT(full) 
[  127.073566][  T968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.073575][  T968] Workqueue: writeback wb_workfn (flush-7:3)
[  127.073604][  T968] Call Trace:
[  127.073611][  T968]  <TASK>
[  127.073617][  T968]  dump_stack_lvl+0xe8/0x150
[  127.073637][  T968]  f2fs_stop_checkpoint+0x3c7/0x590
[  127.073664][  T968]  f2fs_write_end_io+0x1274/0x1740
[  127.073742][  T968]  __submit_merged_bio+0x256/0x6a0
[  127.073767][  T968]  f2fs_submit_merged_write+0x284/0x390
[  127.073790][  T968]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  127.073820][  T968]  f2fs_sync_node_pages+0x11fe/0x13c0
[  127.073853][  T968]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  127.073872][  T968]  ? __percpu_counter_sum+0x1c2/0x1e0
[  127.073914][  T968]  ? blk_start_plug+0x51/0x1b0
[  127.073937][  T968]  f2fs_write_node_pages+0x312/0x700
[  127.073967][  T968]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  127.073989][  T968]  ? __lock_acquire+0x6b5/0x2cf0
[  127.074009][  T968]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  127.074027][  T968]  do_writepages+0x32e/0x550
[  127.074048][  T968]  ? reacquire_held_locks+0x104/0x190
[  127.074063][  T968]  ? writeback_sb_inodes+0x463/0x19d0
[  127.074087][  T968]  __writeback_single_inode+0x133/0x10e0
[  127.074101][  T968]  ? do_raw_spin_unlock+0x4d/0x210
[  127.074122][  T968]  writeback_sb_inodes+0x979/0x19d0
[  127.074140][  T968]  ? __lock_acquire+0x6b5/0x2cf0
[  127.074173][  T968]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  127.074191][  T968]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.074237][  T968]  ? rcu_is_watching+0x15/0xb0
[  127.074261][  T968]  wb_writeback+0x445/0xb00
[  127.074283][  T968]  ? queue_io+0x231/0x470
[  127.074307][  T968]  ? __pfx_wb_writeback+0x10/0x10
[  127.074324][  T968]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.074353][  T968]  wb_workfn+0x3f8/0xf10
[  127.074368][  T968]  ? __lock_acquire+0x6b5/0x2cf0
[  127.074380][  T968]  ? look_up_lock_class+0x57/0x110
[  127.074409][  T968]  ? __pfx_wb_workfn+0x10/0x10
[  127.074428][  T968]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.074443][  T968]  ? lock_acquire+0x106/0x350
[  127.074457][  T968]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  127.074476][  T968]  ? process_scheduled_works+0xa70/0x1860
[  127.074492][  T968]  ? process_scheduled_works+0xa70/0x1860
[  127.074511][  T968]  ? process_scheduled_works+0xa70/0x1860
[  127.074523][  T968]  ? process_scheduled_works+0xa70/0x1860
[  127.074538][  T968]  process_scheduled_works+0xb5d/0x1860
[  127.074570][  T968]  ? __pfx_process_scheduled_works+0x10/0x10
[  127.074586][  T968]  ? assign_work+0x3d5/0x5e0
[  127.074601][  T968]  worker_thread+0xa53/0xfc0
[  127.074636][  T968]  kthread+0x389/0x470
[  127.074654][  T968]  ? __pfx_worker_thread+0x10/0x10
[  127.074664][  T968]  ? __pfx_kthread+0x10/0x10
[  127.074680][  T968]  ret_from_fork+0x514/0xb70
[  127.074729][  T968]  ? __pfx_ret_from_fork+0x10/0x10
[  127.074743][  T968]  ? __switch_to+0xc79/0x1410
[  127.074764][  T968]  ? __pfx_kthread+0x10/0x10
[  127.074781][  T968]  ret_from_fork_asm+0x1a/0x30
[  127.074809][  T968]  </TASK>
[  127.075013][  T968] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  128.003072][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'.
[  128.402488][ T5195] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  128.583105][  T996] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  128.585517][ T5195] usb 3-1: Using ep0 maxpacket: 8
[  128.591251][ T5195] usb 3-1: config 0 interface 0 altsetting 29 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.595862][ T5195] usb 3-1: config 0 interface 0 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  128.599843][ T5195] usb 3-1: config 0 interface 0 has no altsetting 0
[  128.602108][ T5195] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  128.604883][ T5195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.609044][ T5195] usb 3-1: config 0 descriptor??
[  128.734044][  T996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.738459][  T996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.742486][  T996] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  128.747673][  T996] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  128.751198][  T996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.759994][  T996] usb 4-1: config 0 descriptor??
[  128.831899][ T5742] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  128.981903][ T5742] usb 1-1: Using ep0 maxpacket: 32
[  128.986544][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.991119][ T5742] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  128.995316][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.005648][ T5742] usb 1-1: config 0 descriptor??
[  129.025439][ T5195] hid (null): unknown global tag 0xe
[  129.036403][ T5195] redragon 0003:0C45:760B.0006: unknown main item tag 0x2
[  129.039937][ T5195] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  129.043196][ T5195] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  129.046117][ T5195] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  129.049049][ T5195] redragon 0003:0C45:760B.0006: unknown main item tag 0x0
[  129.052095][ T5195] redragon 0003:0C45:760B.0006: unknown global tag 0xe
[  129.054885][ T5195] redragon 0003:0C45:760B.0006: item 0 0 1 14 parsing failed
[  129.058993][ T5195] redragon 0003:0C45:760B.0006: probe with driver redragon failed with error -22
[  129.175063][  T996] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  129.178120][  T996] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  129.181490][  T996] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  129.184474][  T996] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  129.187310][  T996] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  129.190123][  T996] steelseries 0003:1038:1410.0007: item fetching failed at offset 6/7
[  129.193913][  T996] steelseries 0003:1038:1410.0007: parse failed
[  129.196435][  T996] steelseries 0003:1038:1410.0007: probe with driver steelseries failed with error -22
[  129.237479][  T996] usb 3-1: USB disconnect, device number 11
[  129.379924][ T5195] usb 4-1: USB disconnect, device number 3
[  129.433508][ T5742] lua 0003:1E7D:2C2E.0008: hidraw0: USB HID v0.05 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0
[  129.634011][ T5195] usb 1-1: USB disconnect, device number 6
[  130.338344][ T7133] loop3: detected capacity change from 0 to 1024
[  130.573551][ T7141] loop0: detected capacity change from 0 to 512
[  130.619307][ T7141] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e098, mo2=0002]
[  130.626383][ T7141] System zones: 0-2, 18-18, 34-34
[  130.798311][ T7141] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  130.822202][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  130.824144][    C0] EXT4-fs (loop0): initial error at time 1781009315: ext4_mb_generate_buddy:1317
[  130.826614][ T7141] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.521: corrupted inode contents
[  130.827090][    C0] EXT4-fs (loop0): last error at time 1781009315: ext4_mb_generate_buddy:1317
[  130.839852][ T7141] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  130.840143][ T7141] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.521: mark_inode_dirty error
[  130.848228][ T7141] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  130.848722][ T7141] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.521: corrupted inode contents
[  130.857379][ T7141] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  130.857711][ T7141] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.521: mark_inode_dirty error
[  130.871931][ T7141] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  130.872603][ T7141] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.521: corrupted inode contents
[  130.895636][ T7141] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  130.896097][ T7141] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.521: mark_inode_dirty error
[  130.921095][ T7141] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  130.921606][ T7141] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.521: corrupted inode contents
[  130.937054][ T7141] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  130.940617][ T7141] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  130.948717][ T7141] loop0: lost filesystem error report for type 5 error -117
[  130.949102][ T7141] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.521: corrupted inode contents
[  130.957234][ T7141] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  130.957667][ T7141] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.521: mark_inode_dirty error
[  130.989136][ T7141] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  130.993775][ T7141] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  131.001454][ T7141] loop0: lost filesystem error report for type 5 error -117
[  131.004490][ T7141] EXT4-fs (loop0): 1 truncate cleaned up
[  131.012881][ T7141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.018137][ T7141] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.037066][ T1113] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  131.060306][ T1113] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u10:4: Failed to release dquot type 1
[  131.108351][ T7158] wg2: entered promiscuous mode
[  131.117068][ T7158] wg2: entered allmulticast mode
[  131.119375][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.140077][ T7158] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  131.956970][ T7187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.541'.
[  132.447887][ T7193] loop2: detected capacity change from 0 to 164
[  132.453598][ T7193] rock: directory entry would overflow storage
[  132.456286][ T7193] rock: sig=0x5053, size=7, remaining=4
[  132.458726][ T7193] isofs_fill_super: root inode is not a directory. Corrupted media?
[  132.604578][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'.
[  132.608567][ T7201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.547'.
[  132.718093][ T7214] loop2: detected capacity change from 0 to 256
[  132.748458][ T7214] FAT-fs (loop2): Directory bread(block 64) failed
[  132.750528][ T7214] FAT-fs (loop2): Directory bread(block 65) failed
[  132.754471][ T7214] FAT-fs (loop2): Directory bread(block 66) failed
[  132.757204][ T7214] FAT-fs (loop2): Directory bread(block 67) failed
[  132.764139][ T7214] FAT-fs (loop2): Directory bread(block 68) failed
[  132.770551][ T7214] FAT-fs (loop2): Directory bread(block 69) failed
[  132.775109][ T7214] FAT-fs (loop2): Directory bread(block 70) failed
[  132.780016][ T7214] FAT-fs (loop2): Directory bread(block 71) failed
[  132.782733][ T7214] FAT-fs (loop2): Directory bread(block 72) failed
[  132.785255][ T7214] FAT-fs (loop2): Directory bread(block 73) failed
[  133.411472][ T7237] loop2: detected capacity change from 0 to 64
[  134.204935][ T7253] loop0: detected capacity change from 0 to 256
[  134.235495][ T7253] FAT-fs (loop0): Directory bread(block 64) failed
[  134.240953][ T7253] FAT-fs (loop0): Directory bread(block 65) failed
[  134.243944][ T7253] FAT-fs (loop0): Directory bread(block 66) failed
[  134.245893][ T7253] FAT-fs (loop0): Directory bread(block 67) failed
[  134.247756][ T7253] FAT-fs (loop0): Directory bread(block 68) failed
[  134.249587][ T7253] FAT-fs (loop0): Directory bread(block 69) failed
[  134.251485][ T7253] FAT-fs (loop0): Directory bread(block 70) failed
[  134.253822][ T7253] FAT-fs (loop0): Directory bread(block 71) failed
[  134.257039][ T7253] FAT-fs (loop0): Directory bread(block 72) failed
[  134.259223][ T7253] FAT-fs (loop0): Directory bread(block 73) failed
[  134.362973][ T7262] loop0: detected capacity change from 0 to 512
[  134.391014][ T7262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  134.397309][ T7262] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  134.454054][ T7262] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  134.457682][ T7262] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  134.457853][ T7269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.574'.
[  134.470611][ T7262] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.571: Failed to acquire dquot type 0
[  134.488456][ T7269] bond1: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms
[  134.499243][ T7269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.574'.
[  134.506215][ T7269] bond1: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms
[  134.521892][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  134.595401][  T797] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  134.752688][  T797] usb 4-1: Using ep0 maxpacket: 32
[  134.758696][  T797] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  134.771073][  T797] usb 4-1: config 0 has no interface number 0
[  134.772896][ T7285] loop2: detected capacity change from 0 to 512
[  134.782501][  T797] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  134.789542][  T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.799205][  T797] usb 4-1: Product: syz
[  134.802785][  T797] usb 4-1: Manufacturer: syz
[  134.806784][  T797] usb 4-1: SerialNumber: syz
[  134.811469][  T797] usb 4-1: config 0 descriptor??
[  134.814524][ T7285] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  134.844135][  T797] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  134.858417][ T7285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.880685][ T7285] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 3: comm syz.2.581: lblock 8 mapped to illegal pblock 3 (length 26)
[  134.918334][ T5687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.058315][  T797] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  135.068120][  T797] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  135.240724][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6
[  135.251876][ T5195] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  135.401831][ T5195] usb 1-1: Using ep0 maxpacket: 32
[  135.407449][ T5195] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  135.410265][ T5195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.414337][ T5195] usb 1-1: Product: syz
[  135.415726][ T5195] usb 1-1: Manufacturer: syz
[  135.417282][ T5195] usb 1-1: SerialNumber: syz
[  135.421229][ T5195] usb 1-1: config 0 descriptor??
[  135.427619][ T5195] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  135.433341][ T5195] dvb-usb: bulk message failed: -22 (4/0)
[  135.436017][ T5195] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  135.439278][ T5195] dvb-usb: bulk message failed: -22 (5/0)
[  135.442345][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  135.446541][  T996] usb 4-1: USB disconnect, device number 4
[  135.451563][ T5195] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  135.457675][  T996] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  135.489608][  T996] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  135.509927][ T5195] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  135.512813][  T996] quatech2 4-1:0.51: device disconnected
[  135.518294][ T5195] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  135.527069][ T5195] usb 1-1: media controller created
[  135.540003][ T5195] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  135.558185][ T5195] usb 1-1: selecting invalid altsetting 3
[  135.560119][ T5195] ttusb2: set interface to alts=3 failed
[  135.576275][ T5195] DVB: Unable to find symbol tda10086_attach()
[  135.578412][ T5195] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  135.581523][ T5195] dvb-usb: bulk message failed: -22 (4/0)
[  135.583976][ T5195] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  135.587181][ T5195] dvb-usb: bulk message failed: -22 (5/0)
[  135.589952][ T5195] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  135.593237][ T5195] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  135.639906][ T5195] usb 1-1: USB disconnect, device number 7
[  135.670673][ T5195] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  135.913537][ T7300] loop2: detected capacity change from 0 to 128
[  135.930713][ T7300] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.938349][ T7300] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  135.956980][ T7300] EXT4-fs error (device loop2): __ext4_new_inode:1079: comm syz.2.586: reserved inode found cleared - inode=2
[  135.986435][ T5687] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.682625][ T7316] netlink: 'syz.0.592': attribute type 3 has an invalid length.
[  137.568764][ T7336] netlink: 212 bytes leftover after parsing attributes in process `syz.3.599'.
[  137.568788][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'.
[  137.568821][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'.
[  138.398729][ T7334] syz.2.598 (7334): drop_caches: 1
[  138.495692][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  138.500715][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  138.834509][ T7364] loop0: detected capacity change from 0 to 64
[  138.840807][ T7360] loop2: detected capacity change from 0 to 4096
[  138.963679][ T7360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.088407][ T5687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.428007][ T7393] netlink: 'syz.3.625': attribute type 4 has an invalid length.
[  139.436052][ T7393] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.625'.
[  139.543761][ T7401] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0
[  139.565765][ T7404] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  139.572124][ T7404] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  139.686139][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'.
[  139.693929][ T7412] loop0: detected capacity change from 0 to 512
[  139.706728][ T7412] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.633: bg 0: block 127: padding at end of block bitmap is not set
[  139.715534][ T7412] loop0: lost filesystem error report for type 5 error -117
[  139.719053][ T7412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.633: iget: bad extra_isize 58 (inode size 256)
[  139.722145][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  139.722165][    C1] EXT4-fs (loop0): initial error at time 1781009580: ext4_validate_block_bitmap:441
[  139.722184][    C1] EXT4-fs (loop0): last error at time 1781009580: ext4_validate_block_bitmap:441
[  139.738785][ T7412] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  139.739327][ T7412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.633: error while reading EA inode 11 err=-117
[  139.749079][ T7412] loop0: lost filesystem error report for type 5 error -117
[  139.749630][ T7412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.633: iget: bad extra_isize 58 (inode size 256)
[  139.757622][ T7412] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  139.758377][ T7412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.633: error while reading EA inode 11 err=-117
[  139.767504][ T7412] loop0: lost filesystem error report for type 5 error -117
[  139.768073][ T7412] EXT4-fs (loop0): 1 orphan inode deleted
[  139.775169][ T7412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.802378][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.914157][  T797] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  140.082115][  T797] usb 4-1: config 12 interface 0 has no altsetting 0
[  140.103342][  T797] usb 4-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=69.9c
[  140.114008][  T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.124372][  T797] usb 4-1: Product: syz
[  140.129074][  T797] usb 4-1: Manufacturer: syz
[  140.134551][  T797] usb 4-1: SerialNumber: syz
[  140.187794][  T797] au0828: au0828: Device initialization failed.
[  140.207091][  T797] au0828: au0828: Device must be connected to a high-speed USB 2.0 port.
[  140.423562][    T9] usb 4-1: USB disconnect, device number 5
[  140.895031][ T7427] loop2: detected capacity change from 0 to 32768
[  141.129776][  T123] blkno = 8ed2c, nblocks = 1
[  141.135094][  T123] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  141.135094][  T123] 
[  141.150173][  T123] ERROR: (device loop2): remounting filesystem as read-only
[  141.355267][ T7433] loop3: detected capacity change from 0 to 128
[  141.390592][ T7433] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  141.398206][ T5687] JFS: metapage_get_blocks failed
[  141.406030][ T7433] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  141.433416][ T7433] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes
[  141.512980][ T6279] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  141.963433][ T7437] loop3: detected capacity change from 0 to 32768
[  142.085243][ T7462] loop2: detected capacity change from 0 to 256
[  142.086892][ T7437] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  142.088703][ T7462] vfat: Unknown parameter ''
[  142.166466][ T7437] XFS (loop3): Ending clean mount
[  142.305673][ T7474] loop0: detected capacity change from 0 to 8
[  142.308876][ T7474] squashfs: Unknown parameter 'w|ERi{&DR'
[  142.324317][ T6279] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  142.377973][ T7476] sock: sock_set_timeout: `syz.2.659' (pid 7476) tries to set negative timeout
[  142.668428][ T7474] loop0: detected capacity change from 0 to 32768
[  142.686684][ T7474] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  142.725687][ T7474] XFS (loop0): Ending clean mount
[  142.741333][ T7478] loop2: detected capacity change from 0 to 32768
[  142.755510][ T7478] ERROR: (device loop2): xtSearch: stack overrun!
[  142.755510][ T7478] 
[  142.779723][ T5683] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  142.783059][ T7478] xtLookup: xtSearch returned -5
[  142.790880][ T7478] read_mapping_page failed!
[  142.796906][ T7478] jfs_mount: diMount(ipaimap) failed w/rc = -5
[  142.815019][ T7478] Mount JFS Failure: -5
[  142.821481][ T7478] jfs_mount failed w/return code = -5
[  143.282592][ T7505] squashfs image failed sanity check
[  143.457736][ T7513] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  143.519398][ T7518] netlink: 'syz.3.671': attribute type 30 has an invalid length.
[  143.521490][ T7513] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #17: comm syz.0.670: inode has both inline data and extents flags
[  143.549255][ T7513] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  143.549708][ T7513] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.670: couldn't read orphan inode 17 (err -117)
[  143.553375][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  143.553392][    C0] EXT4-fs (loop0): initial error at time 1781009584: ext4_orphan_get:1397: inode 17
[  143.553412][    C0] EXT4-fs (loop0): last error at time 1781009584: ext4_orphan_get:1397: inode 17
[  143.772592][ T7513] loop0: lost filesystem error report for type 5 error -117
[  143.778548][ T7513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.910390][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.962765][ T7527] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  144.062841][ T7531] bond0: (slave erspan0): Opening slave failed
[  144.122152][   T33] audit: type=1326 audit(1781009584.861:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.3.676" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd79d9ce59 code=0x0
[  145.522898][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  146.546137][ T7587] set_capacity_and_notify: 3 callbacks suppressed
[  146.546150][ T7587] loop0: detected capacity change from 0 to 512
[  146.587146][ T7587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.596274][ T7587] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.847820][ T7585] loop3: detected capacity change from 0 to 40427
[  146.863234][ T7585] F2FS-fs (loop3): invalid crc value
[  146.978345][ T7585] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  146.988580][ T7585] F2FS-fs (loop3): Start checkpoint disabled!
[  146.994457][ T7600] loop2: detected capacity change from 0 to 512
[  146.995036][ T7600] EXT4-fs: Ignoring removed nobh option
[  147.019050][ T7600] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  147.022546][ T7600] EXT4-fs (loop2): 1 truncate cleaned up
[  147.022913][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.025411][ T7600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.083720][   T33] audit: type=1800 audit(1781009587.831:365): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.702" name="file0" dev="loop2" ino=13 res=0 errno=0
[  147.104495][ T7600] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.702: Invalid block bitmap block 3 in block_group 0
[  147.115653][ T7600] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  147.119127][ T7600] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.702: invalid indirect mapped block 4194304 (level 1)
[  147.171906][ T7585] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  147.174036][ T5687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.191081][ T7585] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  147.282812][   T36] kworker/u10:1: attempt to access beyond end of device
[  147.282812][   T36] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  147.289847][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  147.289861][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.289866][   T36] Workqueue: writeback wb_workfn (flush-7:3)
[  147.289887][   T36] Call Trace:
[  147.289890][   T36]  <TASK>
[  147.289895][   T36]  dump_stack_lvl+0xe8/0x150
[  147.289908][   T36]  f2fs_stop_checkpoint+0x3c7/0x590
[  147.289924][   T36]  f2fs_write_end_io+0x1274/0x1740
[  147.289944][   T36]  __submit_merged_bio+0x256/0x6a0
[  147.289966][   T36]  __submit_merged_write_cond+0x3c9/0x4e0
[  147.289981][   T36]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  147.290003][   T36]  f2fs_write_data_pages+0x287e/0x34f0
[  147.290010][   T36]  ? f2fs_build_free_nids+0xdc/0x1810
[  147.290038][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.290051][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  147.290076][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  147.290096][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  147.290111][   T36]  ? lock_list_lru_of_memcg+0x34/0x4b0
[  147.290123][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.290131][   T36]  do_writepages+0x32e/0x550
[  147.290144][   T36]  ? reacquire_held_locks+0x104/0x190
[  147.290153][   T36]  ? writeback_sb_inodes+0x463/0x19d0
[  147.290168][   T36]  __writeback_single_inode+0x133/0x10e0
[  147.290176][   T36]  ? do_raw_spin_unlock+0x4d/0x210
[  147.290188][   T36]  writeback_sb_inodes+0x979/0x19d0
[  147.290199][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  147.290219][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  147.290230][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.290259][   T36]  ? rcu_is_watching+0x15/0xb0
[  147.290381][   T36]  wb_writeback+0x445/0xb00
[  147.290395][   T36]  ? queue_io+0x231/0x470
[  147.290410][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  147.290420][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.290438][   T36]  wb_workfn+0x3f8/0xf10
[  147.290447][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  147.290453][   T36]  ? look_up_lock_class+0x57/0x110
[  147.290473][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  147.290484][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.290496][   T36]  ? lock_acquire+0x106/0x350
[  147.290509][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  147.290525][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.290537][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.290553][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.290564][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.290579][   T36]  process_scheduled_works+0xb5d/0x1860
[  147.290618][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  147.290635][   T36]  ? assign_work+0x3d5/0x5e0
[  147.290653][   T36]  worker_thread+0xa53/0xfc0
[  147.290712][   T36]  kthread+0x389/0x470
[  147.290726][   T36]  ? __pfx_worker_thread+0x10/0x10
[  147.290733][   T36]  ? __pfx_kthread+0x10/0x10
[  147.290743][   T36]  ret_from_fork+0x514/0xb70
[  147.290754][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  147.290763][   T36]  ? __switch_to+0xc79/0x1410
[  147.290777][   T36]  ? __pfx_kthread+0x10/0x10
[  147.290787][   T36]  ret_from_fork_asm+0x1a/0x30
[  147.290806][   T36]  </TASK>
[  147.398356][   T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  147.401297][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  147.401316][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.401325][   T36] Workqueue: writeback wb_workfn (flush-7:3)
[  147.401353][   T36] Call Trace:
[  147.401359][   T36]  <TASK>
[  147.401366][   T36]  dump_stack_lvl+0xe8/0x150
[  147.401383][   T36]  f2fs_stop_checkpoint+0x3c7/0x590
[  147.401409][   T36]  f2fs_write_end_io+0x1274/0x1740
[  147.401449][   T36]  __submit_merged_bio+0x256/0x6a0
[  147.401473][   T36]  __submit_merged_write_cond+0x3c9/0x4e0
[  147.401499][   T36]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  147.401535][   T36]  f2fs_write_data_pages+0x287e/0x34f0
[  147.401548][   T36]  ? f2fs_build_free_nids+0xdc/0x1810
[  147.401589][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.401612][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  147.401647][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  147.401679][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  147.401704][   T36]  ? lock_list_lru_of_memcg+0x34/0x4b0
[  147.401743][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.401758][   T36]  do_writepages+0x32e/0x550
[  147.401781][   T36]  ? reacquire_held_locks+0x104/0x190
[  147.401796][   T36]  ? writeback_sb_inodes+0x463/0x19d0
[  147.401821][   T36]  __writeback_single_inode+0x133/0x10e0
[  147.401835][   T36]  ? do_raw_spin_unlock+0x4d/0x210
[  147.401857][   T36]  writeback_sb_inodes+0x979/0x19d0
[  147.401875][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  147.401911][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  147.401928][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.401975][   T36]  ? rcu_is_watching+0x15/0xb0
[  147.401998][   T36]  wb_writeback+0x445/0xb00
[  147.402018][   T36]  ? queue_io+0x231/0x470
[  147.402041][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  147.402057][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.402087][   T36]  wb_workfn+0x3f8/0xf10
[  147.402101][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  147.402113][   T36]  ? look_up_lock_class+0x57/0x110
[  147.402143][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  147.402162][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.402177][   T36]  ? lock_acquire+0x106/0x350
[  147.402192][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  147.402212][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.402226][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.402246][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.402285][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.402301][   T36]  process_scheduled_works+0xb5d/0x1860
[  147.402339][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  147.402359][   T36]  ? assign_work+0x3d5/0x5e0
[  147.402376][   T36]  worker_thread+0xa53/0xfc0
[  147.402412][   T36]  kthread+0x389/0x470
[  147.402429][   T36]  ? __pfx_worker_thread+0x10/0x10
[  147.402445][   T36]  ? __pfx_kthread+0x10/0x10
[  147.402462][   T36]  ret_from_fork+0x514/0xb70
[  147.402479][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  147.402493][   T36]  ? __switch_to+0xc79/0x1410
[  147.402514][   T36]  ? __pfx_kthread+0x10/0x10
[  147.402531][   T36]  ret_from_fork_asm+0x1a/0x30
[  147.402561][   T36]  </TASK>
[  147.515198][   T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  147.519980][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  147.520000][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.520009][   T36] Workqueue: writeback wb_workfn (flush-7:3)
[  147.520038][   T36] Call Trace:
[  147.520044][   T36]  <TASK>
[  147.520050][   T36]  dump_stack_lvl+0xe8/0x150
[  147.520071][   T36]  f2fs_stop_checkpoint+0x3c7/0x590
[  147.520098][   T36]  f2fs_write_end_io+0x1274/0x1740
[  147.520132][   T36]  __submit_merged_bio+0x256/0x6a0
[  147.520166][   T36]  __submit_merged_write_cond+0x3c9/0x4e0
[  147.520193][   T36]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  147.520231][   T36]  f2fs_write_data_pages+0x287e/0x34f0
[  147.520245][   T36]  ? f2fs_build_free_nids+0xdc/0x1810
[  147.520327][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.520352][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  147.520394][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  147.520425][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  147.520446][   T36]  ? lock_list_lru_of_memcg+0x34/0x4b0
[  147.520464][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.520479][   T36]  do_writepages+0x32e/0x550
[  147.520499][   T36]  ? reacquire_held_locks+0x104/0x190
[  147.520512][   T36]  ? writeback_sb_inodes+0x463/0x19d0
[  147.520536][   T36]  __writeback_single_inode+0x133/0x10e0
[  147.520548][   T36]  ? do_raw_spin_unlock+0x4d/0x210
[  147.520570][   T36]  writeback_sb_inodes+0x979/0x19d0
[  147.520585][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  147.520619][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  147.520636][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.520676][   T36]  ? rcu_is_watching+0x15/0xb0
[  147.520699][   T36]  wb_writeback+0x445/0xb00
[  147.520720][   T36]  ? queue_io+0x231/0x470
[  147.520746][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  147.520762][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.520813][   T36]  wb_workfn+0x3f8/0xf10
[  147.520829][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  147.520841][   T36]  ? look_up_lock_class+0x57/0x110
[  147.520873][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  147.520893][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  147.520909][   T36]  ? lock_acquire+0x106/0x350
[  147.520924][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  147.520944][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.520960][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.520980][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.520992][   T36]  ? process_scheduled_works+0xa70/0x1860
[  147.521006][   T36]  process_scheduled_works+0xb5d/0x1860
[  147.521048][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  147.521068][   T36]  ? assign_work+0x3d5/0x5e0
[  147.521086][   T36]  worker_thread+0xa53/0xfc0
[  147.521125][   T36]  kthread+0x389/0x470
[  147.521143][   T36]  ? __pfx_worker_thread+0x10/0x10
[  147.521161][   T36]  ? __pfx_kthread+0x10/0x10
[  147.521178][   T36]  ret_from_fork+0x514/0xb70
[  147.521197][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  147.521211][   T36]  ? __switch_to+0xc79/0x1410
[  147.521233][   T36]  ? __pfx_kthread+0x10/0x10
[  147.521281][   T36]  ret_from_fork_asm+0x1a/0x30
[  147.521312][   T36]  </TASK>
[  147.647112][   T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  147.849182][   T33] audit: type=1326 audit(1781009588.591:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  147.872393][   T33] audit: type=1326 audit(1781009588.591:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  147.918264][   T33] audit: type=1326 audit(1781009588.591:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  147.951903][   T33] audit: type=1326 audit(1781009588.591:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  147.972563][   T33] audit: type=1326 audit(1781009588.591:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.708" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  147.981600][   T33] audit: type=1326 audit(1781009588.591:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  148.002160][   T33] audit: type=1326 audit(1781009588.651:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.708" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  148.017154][   T33] audit: type=1326 audit(1781009588.651:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.0.708" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf6135d68e code=0x7ffc0000
[  148.382797][ T7626] loop3: detected capacity change from 0 to 32768
[  148.436629][ T7626] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  148.571237][ T7633] loop0: detected capacity change from 0 to 40427
[  148.575310][ T7633] F2FS-fs (loop0): build fault injection rate: 14
[  148.578020][ T7633] F2FS-fs (loop0): build fault injection type: 0x0
[  148.582088][ T7633] F2FS-fs (loop0): invalid crc value
[  148.634036][ T7633] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  148.656722][ T7633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  148.730073][ T5683] syz-executor: attempt to access beyond end of device
[  148.730073][ T5683] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  148.748430][ T5683] CPU: 1 UID: 0 PID: 5683 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  148.748447][ T5683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.748453][ T5683] Call Trace:
[  148.748458][ T5683]  <TASK>
[  148.748463][ T5683]  dump_stack_lvl+0xe8/0x150
[  148.748478][ T5683]  f2fs_stop_checkpoint+0x3c7/0x590
[  148.748495][ T5683]  f2fs_write_end_io+0x1274/0x1740
[  148.748514][ T5683]  __submit_merged_bio+0x256/0x6a0
[  148.748529][ T5683]  __submit_merged_write_cond+0x3c9/0x4e0
[  148.748544][ T5683]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  148.748565][ T5683]  f2fs_write_data_pages+0x287e/0x34f0
[  148.748573][ T5683]  ? unwind_next_frame+0xa6/0x2550
[  148.748597][ T5683]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  148.748605][ T5683]  ? is_bpf_text_address+0x26/0x2b0
[  148.748620][ T5683]  ? arch_stack_walk+0xfb/0x150
[  148.748643][ T5683]  ? add_lock_to_list+0xc7/0x100
[  148.748655][ T5683]  ? lockdep_unlock+0x5d/0xd0
[  148.748661][ T5683]  ? __lock_acquire+0x146e/0x2cf0
[  148.748681][ T5683]  ? do_raw_spin_lock+0x12b/0x2f0
[  148.748696][ T5683]  ? do_raw_spin_unlock+0x4d/0x210
[  148.748707][ T5683]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  148.748715][ T5683]  do_writepages+0x32e/0x550
[  148.748730][ T5683]  ? do_raw_spin_unlock+0x4d/0x210
[  148.748742][ T5683]  filemap_fdatawrite+0x1e9/0x2f0
[  148.748754][ T5683]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  148.748781][ T5683]  ? do_raw_spin_unlock+0x4d/0x210
[  148.748793][ T5683]  f2fs_sync_dirty_inodes+0x30e/0x830
[  148.748808][ T5683]  f2fs_write_checkpoint+0x9df/0x26a0
[  148.748816][ T5683]  ? __lock_acquire+0x6b5/0x2cf0
[  148.748837][ T5683]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  148.748888][ T5683]  kill_f2fs_super+0x314/0x730
[  148.748900][ T5683]  ? __pfx_kill_f2fs_super+0x10/0x10
[  148.748914][ T5683]  ? lockdep_hardirqs_on+0x7a/0x110
[  148.748931][ T5683]  deactivate_locked_super+0xbc/0x130
[  148.748942][ T5683]  cleanup_mnt+0x437/0x4d0
[  148.748953][ T5683]  ? _raw_spin_unlock_irq+0x23/0x50
[  148.748964][ T5683]  task_work_run+0x1d9/0x270
[  148.748978][ T5683]  ? __pfx_task_work_run+0x10/0x10
[  148.748993][ T5683]  exit_to_user_mode_loop+0x193/0x680
[  148.749002][ T5683]  ? rcu_is_watching+0x15/0xb0
[  148.749012][ T5683]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.749021][ T5683]  do_syscall_64+0x353/0x580
[  148.749031][ T5683]  ? trace_irq_disable+0x3b/0x140
[  148.749046][ T5683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.749054][ T5683] RIP: 0033:0x7fdf6139e097
[  148.749064][ T5683] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  148.749071][ T5683] RSP: 002b:00007ffcdc4b8938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  148.749082][ T5683] RAX: 0000000000000000 RBX: 00007fdf614321ca RCX: 00007fdf6139e097
[  148.749087][ T5683] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdc4b89f0
[  148.749092][ T5683] RBP: 00007ffcdc4b89f0 R08: 00007ffcdc4b99f0 R09: 00000000ffffffff
[  148.749098][ T5683] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdc4b9a80
[  148.749103][ T5683] R13: 00007fdf614321ca R14: 000000000002446c R15: 00007ffcdc4b9ac0
[  148.749116][ T5683]  </TASK>
[  148.749184][ T5683] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  148.839662][ T7631] loop2: detected capacity change from 0 to 32768
[  148.928930][ T7631] gfs2: path_lookup on c::: returned error -2
[  148.970107][ T6279] ocfs2: Unmounting device (7,3) on (node local)
[  149.326505][ T7651] loop3: detected capacity change from 0 to 2048
[  149.347699][ T7651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.352959][ T7651] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  149.377641][ T7641] loop2: detected capacity change from 0 to 32768
[  149.396566][ T7641] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  149.408782][ T7641] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  149.469936][ T7651] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.493064][ T7641] XFS (loop2): Ending clean mount
[  149.533330][ T5687] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  149.541024][ T7666] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  149.811364][ T7675] x_tables: duplicate underflow at hook 1
[  149.897282][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.730'.
[  149.954988][ T7683] loop2: detected capacity change from 0 to 2048
[  149.978869][ T7685] sctp: [Deprecated]: syz.3.732 (pid 7685) Use of struct sctp_assoc_value in delayed_ack socket option.
[  149.978869][ T7685] Use struct sctp_sack_info instead
[  150.008972][ T7683] Alternate GPT is invalid, using primary GPT.
[  150.015232][ T7683]  loop2: p1 p2 p3
[  150.322614][ T5694] udevd[5694]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  150.356970][ T5620] udevd[5620]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  150.557805][ T7701] fuseblk: Bad value for 'source'
[  150.639869][ T7701] loop2: detected capacity change from 0 to 1024
[  150.685554][ T7701] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  150.691956][ T7701] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  150.695490][ T7701] EXT4-fs (loop2): orphan cleanup on readonly fs
[  150.698557][ T7701] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.738: Freeing blocks not in datazone - block = 0, count = 4096
[  150.704092][ T7701] loop2: lost filesystem error report for type 5 error -117
[  150.707949][ T7701] EXT4-fs (loop2): 1 orphan inode deleted
[  150.713251][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  150.713270][    C1] EXT4-fs (loop2): initial error at time 1781009591: ext4_free_blocks:6718
[  150.713289][    C1] EXT4-fs (loop2): last error at time 1781009591: ext4_free_blocks:6718
[  150.723676][ T7701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  151.215179][ T5687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.450240][ T7758] xt_ecn: cannot match TCP bits for non-tcp packets
[  152.491928][  T797] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  152.604264][ T7764] netlink: 'syz.3.767': attribute type 2 has an invalid length.
[  152.642343][  T797] usb 1-1: too many configurations: 70, using maximum allowed: 8
[  152.650424][  T797] usb 1-1: config index 0 descriptor too short (expected 65505, got 72)
[  152.732245][  T797] usb 1-1: config index 1 descriptor too short (expected 65505, got 72)
[  152.736360][  T797] usb 1-1: config index 2 descriptor too short (expected 65505, got 72)
[  152.740278][  T797] usb 1-1: config index 3 descriptor too short (expected 65505, got 72)
[  152.745021][  T797] usb 1-1: config index 4 descriptor too short (expected 65505, got 72)
[  152.749045][  T797] usb 1-1: config index 5 descriptor too short (expected 65505, got 72)
[  152.753496][  T797] usb 1-1: config index 6 descriptor too short (expected 65505, got 72)
[  152.759366][  T797] usb 1-1: config index 7 descriptor too short (expected 65505, got 72)
[  152.773835][  T797] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  152.777773][  T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.781054][  T797] usb 1-1: Product: syz
[  152.786453][  T797] usb 1-1: Manufacturer: syz
[  152.788447][  T797] usb 1-1: SerialNumber: syz
[  152.863042][  T797] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  152.926855][    T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  153.118156][ T7772] loop2: detected capacity change from 0 to 764
[  153.135061][ T7772] rock: directory entry would overflow storage
[  153.138565][ T7772] rock: sig=0x4654, size=5, remaining=4
[  153.505495][    C0] usb 1-1: ath9k_htc: invalid pkt_len (ec09)
[  153.706433][   T31] usb 1-1: USB disconnect, device number 8
[  153.898188][ T7777] ceph: No mds server is up or the cluster is laggy
[  153.996296][ T5195] libceph: connect (1)[c::]:6789 error -101
[  154.009731][ T5195] libceph: mon0 (1)[c::]:6789 connect error
[  154.067993][    T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  154.072991][    T9] ath9k_htc: Failed to initialize the device
[  154.076623][   T31] usb 1-1: ath9k_htc: USB layer deinitialized
[  154.133421][ T7782] netlink: 'syz.2.772': attribute type 3 has an invalid length.
[  154.265893][ T7788] loop2: detected capacity change from 0 to 16
[  154.275258][ T7788] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  154.369145][ T7794] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  154.565167][ T7792] loop0: detected capacity change from 0 to 256
[  154.587212][ T7792] FAT-fs (loop0): Directory bread(block 64) failed
[  154.589950][ T7792] FAT-fs (loop0): Directory bread(block 65) failed
[  154.593018][ T7792] FAT-fs (loop0): Directory bread(block 66) failed
[  154.595639][ T7792] FAT-fs (loop0): Directory bread(block 67) failed
[  154.598330][ T7792] FAT-fs (loop0): Directory bread(block 68) failed
[  154.600963][ T7792] FAT-fs (loop0): Directory bread(block 69) failed
[  154.603815][ T7792] FAT-fs (loop0): Directory bread(block 70) failed
[  154.606405][ T7792] FAT-fs (loop0): Directory bread(block 71) failed
[  154.609084][ T7792] FAT-fs (loop0): Directory bread(block 72) failed
[  154.611662][ T7792] FAT-fs (loop0): Directory bread(block 73) failed
[  156.700942][ T7937] loop0: detected capacity change from 0 to 512
[  158.053298][ T7991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.837'.
[  158.083434][ T7992] netlink: 68 bytes leftover after parsing attributes in process `syz.2.836'.
[  158.155985][ T7980] loop0: detected capacity change from 0 to 32768
[  158.168083][ T7980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.831 (7980)
[  158.596199][ T8001] loop2: detected capacity change from 0 to 128
[  158.607294][ T7980] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.610935][ T8001] FAT-fs (loop2): bogus number of reserved sectors
[  158.618099][ T7980] BTRFS info (device loop0): using sha256 checksum algorithm
[  158.619518][ T8001] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  158.633061][ T8001] FAT-fs (loop2): Can't find a valid FAT filesystem
[  158.725389][ T8015] loop2: detected capacity change from 0 to 512
[  158.736842][ T8015] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  158.750566][ T8015] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  158.769128][ T8015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002]
[  158.775388][ T8015] System zones: 1-12
[  158.776886][ T8015] EXT4-fs (loop2): orphan cleanup on readonly fs
[  158.779960][ T8015] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.841: Block bitmap for bg 0 marked uninitialized
[  158.790249][ T8015] loop2: lost filesystem error report for type 5 error -117
[  158.803353][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  158.808768][    C1] EXT4-fs (loop2): initial error at time 1781009599: ext4_read_block_bitmap_nowait:517
[  158.812659][    C1] EXT4-fs (loop2): last error at time 1781009599: ext4_read_block_bitmap_nowait:517
[  158.818529][ T8015] EXT4-fs (loop2): Remounting filesystem read-only
[  158.823627][ T8015] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  158.829208][ T8015] EXT4-fs (loop2): 1 truncate cleaned up
[  158.836147][ T7980] BTRFS info (device loop0): enabling ssd optimizations
[  158.839209][ T8015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  158.844122][ T7980] BTRFS info (device loop0): turning on sync discard
[  158.847346][ T7980] BTRFS info (device loop0): enabling free space tree
[  158.893380][ T5687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.897285][   T33] kauditd_printk_skb: 176 callbacks suppressed
[  158.897298][   T33] audit: type=1800 audit(1781009599.641:550): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.831" name="file1" dev="loop0" ino=260 res=0 errno=0
[  159.355016][ T8037] netlink: 'syz.2.850': attribute type 21 has an invalid length.
[  159.394260][ T8039] loop2: detected capacity change from 0 to 128
[  159.403070][ T8039] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  159.417237][ T8039] ext4 filesystem being mounted at /289/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  159.449268][ T8039] Invalid argument reading file caps for ./file0
[  159.451077][ T5683] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  159.588013][ T5687] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  159.757758][ T8046] loop0: detected capacity change from 0 to 8
[  159.828037][ T8049] loop0: detected capacity change from 0 to 8192
[  160.117013][ T8083] loop0: detected capacity change from 0 to 512
[  160.123911][ T8083] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  160.138892][ T8083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.152546][ T8083] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  160.306116][ T8093] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.865: iget: bad i_size value: 2533274857506816
[  160.411031][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'.
[  160.419223][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.869'.
[  160.658109][ T8101] xt_NFQUEUE: number of queues (51632) out of range (got 109621)
[  161.090810][ T8107] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  161.613783][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.881169][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.879'.
[  161.961490][ T8131] loop0: detected capacity change from 0 to 256
[  161.964866][ T8131] exfat: Deprecated parameter 'namecase'
[  161.971934][ T8131] exfat: Deprecated parameter 'namecase'
[  161.980108][ T8131] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d)
[  162.103596][ T8137] loop0: detected capacity change from 0 to 4096
[  162.118490][ T8137] ntfs3(loop0): ino=19, mi_enum_attr
[  162.120142][ T8137] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  162.562259][ T5195] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  162.730145][ T5195] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  162.733596][ T5195] usb 3-1: config 0 has no interface number 0
[  162.742432][ T5195] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  162.747141][ T5195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.750685][ T5195] usb 3-1: Product: syz
[  162.756056][ T5195] usb 3-1: Manufacturer: syz
[  162.764367][ T5195] usb 3-1: SerialNumber: syz
[  162.777278][ T5195] usb 3-1: config 0 descriptor??
[  162.990037][ T5195] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  163.000394][ T5195] usb 3-1: USB disconnect, device number 12
[  163.170995][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'.
[  163.178435][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'.
[  163.290324][ T8167] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  164.567305][ T5006] Bluetooth: hci2: unexpected event for opcode 0x2031
[  165.150431][ T8220] loop2: detected capacity change from 0 to 1024
[  165.173813][ T8220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  165.215302][ T5687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  165.449256][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.926'.
[  165.509969][ T8236] loop2: detected capacity change from 0 to 32768
[  165.512301][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'.
[  165.512491][ T8236] btrfs: Deprecated parameter 'usebackuproot'
[  165.518348][ T8236] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  165.524210][ T8236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.927 (8236)
[  165.541622][ T8236] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.544774][ T8236] BTRFS info (device loop2): using crc32c checksum algorithm
[  165.633803][ T8254] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.928'.
[  165.659090][ T7907] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  165.677837][ T8236] BTRFS error (device loop2): failed to load root extent
[  165.683861][ T8236] BTRFS warning (device loop2): try to load backup roots slot 1
[  165.693324][ T7907] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  165.700595][ T8236] BTRFS warning (device loop2): couldn't read tree root
[  165.703203][ T8236] BTRFS warning (device loop2): try to load backup roots slot 2
[  165.706406][ T7909] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  165.711381][ T8236] BTRFS warning (device loop2): couldn't read tree root
[  165.714390][ T8236] BTRFS warning (device loop2): try to load backup roots slot 3
[  165.743745][ T8236] BTRFS info (device loop2): rebuilding free space tree
[  165.756094][ T8259] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.930'.
[  165.782049][ T8236] BTRFS info (device loop2): checking UUID tree
[  165.785744][ T8236] BTRFS info (device loop2): enabling ssd optimizations
[  165.788053][ T8236] BTRFS info (device loop2): turning on async discard
[  165.790816][ T8236] BTRFS info (device loop2): enabling free space tree
[  165.794252][ T8236] BTRFS info (device loop2): force clearing of disk cache
[  165.797282][ T8236] BTRFS info (device loop2): enabling auto defrag
[  165.799933][ T8236] BTRFS info (device loop2): trying to use backup root at mount time
[  165.802871][ T8236] BTRFS info (device loop2): use zstd compression, level 3
[  165.836268][   T33] audit: type=1800 audit(1781009606.532:551): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.927" name="file1" dev="loop2" ino=257 res=0 errno=0
[  166.484911][ T5687] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.342759][ T8281] input: syz0 as /devices/virtual/input/input6
[  167.545516][ T8291] loop0: detected capacity change from 0 to 1024
[  168.015444][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'.
[  168.028993][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'.
[  168.309264][ T8306] loop0: detected capacity change from 0 to 512
[  168.341966][ T8306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.355062][ T8306] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.584997][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.826681][ T8327] loop0: detected capacity change from 0 to 4096
[  168.864353][ T8327] ntfs3(loop0): Failed to load $Extend (-22).
[  168.871362][ T8327] ntfs3(loop0): Failed to initialize $Extend.
[  168.882069][ T8333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  168.901699][ T8327] ntfs3(loop0): ino=5, "/" indx_read_ra
[  168.906417][ T8327] ntfs3(loop0): ino=5, "/" ntfs_readdir
[  169.205448][ T8355] loop2: detected capacity change from 0 to 128
[  169.226112][ T8355] ufs: You didn't specify the type of your ufs filesystem
[  169.226112][ T8355] 
[  169.226112][ T8355] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  169.226112][ T8355] 
[  169.226112][ T8355] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  169.270908][ T8355] ufs: ufstype=old is supported read-only
[  169.286040][ T8355] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  169.597320][ T8359] ipvlan3: entered allmulticast mode
[  169.599589][ T8359] veth0_vlan: entered allmulticast mode
[  169.665845][ T8361] AppArmor: change_hat: Invalid input ''
[  169.705639][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'.
[  169.711834][ T8363] netlink: 'syz.2.975': attribute type 8 has an invalid length.
[  169.726676][ T8363] geneve2: entered promiscuous mode
[  169.728939][ T8363] geneve2: entered allmulticast mode
[  169.850239][ T8371] loop2: detected capacity change from 0 to 256
[  169.880349][ T8371] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  170.039424][ T8377] cgroup: release_agent respecified
[  170.600878][ T8403] overlayfs: failed to clone upperpath
[  170.618068][   T33] audit: type=1326 audit(1781009611.277:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.0.995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  170.640664][   T33] audit: type=1326 audit(1781009611.277:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.0.995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  170.671977][   T33] audit: type=1326 audit(1781009611.277:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.0.995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  170.700342][   T33] audit: type=1326 audit(1781009611.277:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.0.995" exe="/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  170.726454][   T33] audit: type=1326 audit(1781009611.277:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.0.995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  170.750496][   T33] audit: type=1326 audit(1781009611.277:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.0.995" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  170.774606][   T33] audit: type=1326 audit(1781009611.277:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8404 comm="syz.0.995" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdf6139ce59 code=0x7ffc0000
[  170.928520][   T33] audit: type=1800 audit(1781009611.563:559): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1002" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=16141 res=0 errno=0
[  171.002270][ T8423] raw_sendmsg: syz.2.1004 forgot to set AF_INET. Fix it!
[  171.308511][ T5742] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  171.469341][ T5742] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  171.472682][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  171.475247][ T5742] usb 3-1: Product: syz
[  171.476633][ T5742] usb 3-1: SerialNumber: syz
[  171.482479][ T5742] usb 3-1: config 0 descriptor??
[  171.706377][ T5742] hso 3-1:0.0: Failed to find BULK eps
[  171.849243][ T8445] netlink: 'syz.0.1015': attribute type 107 has an invalid length.
[  171.888669][ T8447] netlink: 'syz.0.1016': attribute type 8 has an invalid length.
[  171.928476][ T5195] usb 3-1: USB disconnect, device number 13
[  172.490189][ T8478] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1031'.
[  172.566426][ T8484] loop0: detected capacity change from 0 to 128
[  172.590037][ T8484] befs: (loop0): No write support. Marking filesystem read-only
[  172.619188][ T8484] befs: (loop0): invalid magic header
[  174.011248][ T8518] wg1 speed is unknown, defaulting to 1000
[  174.014540][ T8518] wg1 speed is unknown, defaulting to 1000
[  174.039487][ T8518] wg1 speed is unknown, defaulting to 1000
[  174.056247][ T8518] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  174.066443][ T8518] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  174.075966][ T8518] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  174.098436][ T8518] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  174.127630][ T8518] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  174.248022][ T8518] wg1 speed is unknown, defaulting to 1000
[  174.261314][ T8518] wg1 speed is unknown, defaulting to 1000
[  174.268417][ T8518] wg1 speed is unknown, defaulting to 1000
[  174.400184][ T8526] loop0: detected capacity change from 0 to 512
[  174.404911][ T8526] EXT4-fs: Ignoring removed bh option
[  174.408263][ T8526] EXT4-fs (loop0): Test dummy encryption mode enabled
[  174.411757][ T8526] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  174.427926][ T8526] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1052: inode has both inline data and extents flags
[  174.434892][ T8526] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  174.435440][ T8526] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1052: couldn't read orphan inode 15 (err -117)
[  174.444207][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  174.444229][    C1] EXT4-fs (loop0): initial error at time 1781009614: ext4_orphan_get:1397: inode 15
[  174.444253][    C1] EXT4-fs (loop0): last error at time 1781009614: ext4_orphan_get:1397: inode 15
[  174.456351][ T8526] loop0: lost filesystem error report for type 5 error -117
[  174.457523][ T8526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.584231][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.656974][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'.
[  175.678911][ T5477] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.678963][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'.
[  175.682540][ T5477] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.688680][ T5477] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.691713][ T5477] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.709303][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  175.845323][ T8557] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  175.850768][ T8557] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  175.881134][    T9] usb 3-1: Using ep0 maxpacket: 8
[  175.887682][    T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  175.890399][    T9] usb 3-1: config 179 has no interface number 0
[  175.893087][    T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  175.897860][    T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  175.902146][    T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  175.907391][    T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  175.912690][    T9] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  175.917095][    T9] usb 3-1: config 179 interface 65 has no altsetting 0
[  175.919397][    T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  175.922864][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.957665][    T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7
[  176.016302][ T5051] input input7: unable to receive magic message: -110
[  176.038880][ T5051] input input7: unable to receive magic message: -32
[  176.043290][ T5742] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  176.059823][ T5051] input input7: unable to receive magic message: -32
[  176.079387][ T5051] input input7: unable to receive magic message: -32
[  176.099209][ T5051] input input7: unable to receive magic message: -32
[  176.105191][ T5051] input input7: unable to receive magic message: -32
[  176.203830][ T5742] usb 1-1: Using ep0 maxpacket: 16
[  176.208235][ T5742] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[  176.215751][ T5742] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  176.218709][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.221154][ T5742] usb 1-1: Product: syz
[  176.222508][ T5742] usb 1-1: Manufacturer: syz
[  176.223970][ T5742] usb 1-1: SerialNumber: syz
[  176.390012][ T5195] usb 3-1: USB disconnect, device number 14
[  176.390037][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  177.365250][ T5742] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  177.498407][ T8587] hfs: can't find a HFS filesystem on dev nullb0
[  177.510029][ T5742] usb 1-1: USB disconnect, device number 9
[  177.595436][ T6859] udevd[6859]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  177.677784][ T8599] 9p: Bad value for 'rfdno'
[  177.758644][ T8604] loop0: detected capacity change from 0 to 256
[  177.784306][ T8604] exFAT-fs (loop0): failed to test first cluster bit of root dir(5)
[  177.868207][ T8610] netlink: 'syz.0.1089': attribute type 3 has an invalid length.
[  177.914925][ T8614] loop0: detected capacity change from 0 to 512
[  177.922938][ T8614] EXT4-fs: Ignoring removed mblk_io_submit option
[  177.931401][ T8614] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  177.935638][ T8612] fuse: Bad value for 'fd'
[  177.944713][ T8614] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  177.952662][ T8614] EXT4-fs (loop0): orphan cleanup on readonly fs
[  177.961561][ T8614] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1091: Invalid block bitmap block 0 in block_group 0
[  177.974961][ T8614] loop0: lost filesystem error report for type 5 error -117
[  177.982295][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  177.986644][    C0] EXT4-fs (loop0): last error at time 1781009618: ext4_read_block_bitmap_nowait:483
[  177.992544][ T8614] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1091: Invalid block bitmap block 0 in block_group 0
[  177.998823][ T8614] loop0: lost filesystem error report for type 5 error -117
[  178.016501][ T8614] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1091: Invalid block bitmap block 0 in block_group 0
[  178.027629][ T8614] loop0: lost filesystem error report for type 5 error -117
[  178.028246][ T8614] Quota error (device loop0): write_blk: dquota write failed
[  178.038849][ T8614] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  178.048725][ T8614] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1091: Failed to acquire dquot type 1
[  178.054080][ T8614] loop0: lost filesystem error report for type 5 error -28
[  178.060562][ T8614] EXT4-fs (loop0): 1 orphan inode deleted
[  178.066636][ T7911] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5
[  178.070946][ T7911] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u9:8: Failed to release dquot type 1
[  178.076629][ T7911] loop0: lost filesystem error report for type 5 error -117
[  178.078546][ T8614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  178.090324][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'.
[  178.108575][ T8606] loop2: detected capacity change from 0 to 32768
[  178.122184][ T8606] syz.2.1087: attempt to access beyond end of device
[  178.122184][ T8606] loop2: rw=0, sector=243224, nr_sectors = 8 limit=32768
[  178.128133][ T8606] Read error 10 at 0x0
[  178.131347][ T8606] read_mapping_page failed!
[  178.133291][ T8606] jfs_mount: diMount failed w/rc = -5
[  178.136023][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.140591][ T8606] Mount JFS Failure: -5
[  178.148693][ T8606] jfs_mount failed w/return code = -5
[  178.476177][ T5195] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  178.641255][ T8635] loop2: detected capacity change from 0 to 40427
[  178.648706][ T5195] usb 1-1: Using ep0 maxpacket: 32
[  178.658120][ T5195] usb 1-1: config 242 has an invalid interface number: 195 but max is 0
[  178.659776][ T8635] F2FS-fs (loop2): old and new quota format mixing
[  178.669262][ T5195] usb 1-1: config 242 has no interface number 0
[  178.672520][ T5195] usb 1-1: config 242 interface 195 has no altsetting 0
[  178.677550][ T5195] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03
[  178.693528][ T5195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.699416][ T5195] usb 1-1: Product: syz
[  178.700828][ T5195] usb 1-1: Manufacturer: syz
[  178.703313][ T5195] usb 1-1: SerialNumber: syz
[  178.936123][ T5195] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  178.941172][ T5195] usb 1-1: selecting invalid altsetting 0
[  178.945661][ T2423] pvrusb2: Invalid write control endpoint
[  178.950311][ T5195] usb 1-1: USB disconnect, device number 10
[  178.992174][ T8649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1108'.
[  178.997381][ T8649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1108'.
[  179.055196][ T2423] pvrusb2: Invalid write control endpoint
[  179.057760][ T2423] pvrusb2: Invalid write control endpoint
[  179.062895][ T2423] pvrusb2: Invalid write control endpoint
[  179.071935][ T2423] pvrusb2: Invalid write control endpoint
[  179.074259][ T2423] pvrusb2: Invalid write control endpoint
[  179.076459][ T2423] pvrusb2: Invalid write control endpoint
[  179.078768][ T2423] pvrusb2: Invalid write control endpoint
[  179.082191][ T2423] pvrusb2: Invalid write control endpoint
[  179.086968][ T2423] pvrusb2: Invalid write control endpoint
[  179.089222][ T2423] pvrusb2: Invalid write control endpoint
[  179.091935][ T2423] pvrusb2: Invalid write control endpoint
[  179.094212][ T2423] pvrusb2: Invalid write control endpoint
[  179.096523][ T2423] pvrusb2: Invalid write control endpoint
[  179.098815][ T2423] pvrusb2: Invalid write control endpoint
[  179.101022][ T2423] pvrusb2: Invalid write control endpoint
[  179.103770][ T2423] pvrusb2: Invalid write control endpoint
[  179.106085][ T2423] pvrusb2: Invalid write control endpoint
[  179.108399][ T2423] pvrusb2: Invalid write control endpoint
[  179.111118][ T2423] pvrusb2: Invalid write control endpoint
[  179.116303][ T2423] pvrusb2: Invalid write control endpoint
[  179.124831][ T2423] pvrusb2: Invalid write control endpoint
[  179.129024][ T2423] pvrusb2: Invalid write control endpoint
[  179.133002][ T2423] pvrusb2: Invalid write control endpoint
[  179.137246][ T2423] pvrusb2: Invalid write control endpoint
[  179.140866][ T2423] pvrusb2: Invalid write control endpoint
[  179.143377][ T2423] pvrusb2: Invalid write control endpoint
[  179.147007][ T2423] pvrusb2: Invalid write control endpoint
[  179.148810][ T2423] pvrusb2: Invalid write control endpoint
[  179.150731][ T2423] pvrusb2: Invalid write control endpoint
[  179.152520][ T2423] pvrusb2: Invalid write control endpoint
[  179.154286][ T2423] pvrusb2: Invalid write control endpoint
[  179.156185][ T2423] pvrusb2: Invalid write control endpoint
[  179.162704][ T2423] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  179.192077][ T2423] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_a)
[  179.202224][ T2423] pvrusb2: Invalid write control endpoint
[  179.205603][ T2423] pvrusb2: Invalid write control endpoint
[  179.208793][ T2423] pvrusb2: Invalid write control endpoint
[  179.213005][ T2423] pvrusb2: Invalid write control endpoint
[  179.216326][ T2423] pvrusb2: Invalid write control endpoint
[  179.220196][ T2423] pvrusb2: Invalid write control endpoint
[  179.222738][ T2423] pvrusb2: Invalid write control endpoint
[  179.225902][ T2423] pvrusb2: Invalid write control endpoint
[  179.227779][ T2423] pvrusb2: Invalid write control endpoint
[  179.229754][ T2423] pvrusb2: Invalid write control endpoint
[  179.233310][ T2423] pvrusb2: Invalid write control endpoint
[  179.239339][ T2423] pvrusb2: Invalid write control endpoint
[  179.241611][ T2423] pvrusb2: Invalid write control endpoint
[  179.244267][ T2423] pvrusb2: Invalid write control endpoint
[  179.247085][ T2423] pvrusb2: Invalid write control endpoint
[  179.249346][ T2423] pvrusb2: Invalid write control endpoint
[  179.251578][ T2423] pvrusb2: Invalid write control endpoint
[  179.254121][ T2423] pvrusb2: Invalid write control endpoint
[  179.256535][ T2423] pvrusb2: Invalid write control endpoint
[  179.258824][ T2423] pvrusb2: Invalid write control endpoint
[  179.260965][ T2423] pvrusb2: Invalid write control endpoint
[  179.268968][ T2423] pvrusb2: Attached sub-driver cs53l32a
[  179.309332][ T2423] pvrusb2: Invalid write control endpoint
[  179.314062][ T2423] pvrusb2: Invalid write control endpoint
[  179.316568][ T2423] pvrusb2: Invalid write control endpoint
[  179.319106][ T2423] pvrusb2: Invalid write control endpoint
[  179.321345][ T2423] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  179.328150][ T2423] pvrusb2: Device being rendered inoperable
[  179.330633][ T2423] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  179.336653][ T2423] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  179.347086][ T8666] 9p: Bad value for 'rfdno'
[  179.410715][   T33] audit: type=1326 audit(1781009619.499:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  179.424204][   T33] audit: type=1326 audit(1781009619.499:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  179.435506][   T33] audit: type=1326 audit(1781009619.499:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  179.445690][   T33] audit: type=1326 audit(1781009619.499:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  179.455238][   T33] audit: type=1326 audit(1781009619.499:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  179.465361][   T33] audit: type=1326 audit(1781009619.499:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  179.496881][   T33] audit: type=1326 audit(1781009619.499:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.3.1117" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  179.737964][ T8685] wg1 speed is unknown, defaulting to 1000
[  180.319564][ T8721] binder: 8718:8721 ioctl c0306201 2000000001c0 returned -22
[  180.373151][ T8723] loop8: detected capacity change from 0 to 1
[  180.384047][ T8723] Dev loop8: unable to read RDB block 1
[  180.389208][ T8723]  loop8: unable to read partition table
[  180.391187][ T8723] loop8: partition table beyond EOD, truncated
[  180.394935][ T8723] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  180.536294][ T8727] loop0: detected capacity change from 0 to 256
[  180.543817][ T8727] exfat: Deprecated parameter 'utf8'
[  180.548528][ T8727] exfat: Deprecated parameter 'utf8'
[  180.561431][ T8727] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  180.990261][ T8739] loop0: detected capacity change from 0 to 128
[  181.018355][ T8739] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.037679][ T8739] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  182.262643][ T8760] loop2: detected capacity change from 0 to 40427
[  182.274219][ T8760] F2FS-fs (loop2): invalid crc value
[  182.383638][ T8760] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  182.396619][ T5683] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  182.446951][ T8760] F2FS-fs (loop2): Start checkpoint disabled!
[  182.491497][ T8760] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  182.494474][ T8760] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  182.512382][ T8775] loop0: detected capacity change from 0 to 4096
[  182.521511][ T8775] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  182.526926][ T8775] ntfs3(loop0): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  182.539731][ T8775] ntfs3(loop0): It is recommended to use chkdsk.
[  182.543513][ T8775] ntfs3(loop0): ino=0, mi_enum_attr
[  182.545949][ T8775] ntfs3(loop0): failed to read volume at offset 0x201800
[  182.551210][ T8775] ntfs3(loop0): failed to read volume at offset 0x201800
[  182.555292][ T8775] ntfs3(loop0): failed to read volume at offset 0x201800
[  182.557562][ T8775] ntfs3(loop0): failed to read volume at offset 0x201800
[  182.559763][ T8775] ntfs3(loop0): failed to read volume at offset 0x202800
[  182.564252][ T8775] ntfs3(loop0): failed to read volume at offset 0x203800
[  182.586886][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'.
[  182.970905][ T8804] loop2: detected capacity change from 0 to 1024
[  182.998343][ T8804] hfsplus: failed to load extents file
[  183.259450][ T8824] loop0: detected capacity change from 0 to 512
[  183.269827][ T8824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  183.297492][ T8824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.304936][ T8824] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  183.893660][ T8842] mmap: syz.3.1194 (8842) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  184.431233][ T8854] libceph: resolve 'c' (ret=-3): failed
[  184.754673][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.304807][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'.
[  186.892572][ T8910] loop2: detected capacity change from 0 to 1024
[  187.374562][ T8918] loop2: detected capacity change from 0 to 32768
[  187.388378][ T8918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1230 (8918)
[  187.451717][ T8918] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.456816][ T8918] BTRFS info (device loop2): using crc32c checksum algorithm
[  187.504707][ T8918] BTRFS info (device loop2): enabling ssd optimizations
[  187.512087][ T8918] BTRFS info (device loop2): turning on flush-on-commit
[  187.514975][ T8918] BTRFS info (device loop2): enabling free space tree
[  187.522311][ T8918] BTRFS info (device loop2): force zlib compression, level 3
[  187.526796][ T8918] BTRFS info (device loop2): max_inline set to 4096
[  187.643407][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'.
[  187.811245][ T5687] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  188.155872][ T8968] loop2: detected capacity change from 0 to 16
[  188.207397][ T8968] erofs (device loop2): mounted with root inode @ nid 36.
[  188.228515][ T8968] syz.2.1240: attempt to access beyond end of device
[  188.228515][ T8968] loop2: rw=0, sector=1936876908, nr_sectors = 1 limit=16
[  188.256147][ T8968] syz.2.1240: attempt to access beyond end of device
[  188.256147][ T8968] loop2: rw=0, sector=3955228672, nr_sectors = 1 limit=16
[  188.267384][ T8968] syz.2.1240: attempt to access beyond end of device
[  188.267384][ T8968] loop2: rw=0, sector=1936876908, nr_sectors = 1 limit=16
[  188.278198][ T8968] syz.2.1240: attempt to access beyond end of device
[  188.278198][ T8968] loop2: rw=0, sector=3955228672, nr_sectors = 1 limit=16
[  188.988706][ T8988] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1252'.
[  189.011022][ T8988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.031265][ T8988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.040300][ T8988] bond0 (unregistering): Released all slaves
[  189.852026][ T9018] loop2: detected capacity change from 0 to 128
[  189.881327][ T9018] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  189.898605][ T9018] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  189.902533][ T9018] FAT-fs (loop2): Filesystem has been set read-only
[  189.934016][ T5687] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  190.532411][ T9028] loop0: detected capacity change from 0 to 32768
[  190.670617][   T33] kauditd_printk_skb: 8 callbacks suppressed
[  190.670628][   T33] audit: type=1326 audit(1781009629.905:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  190.692586][   T33] audit: type=1326 audit(1781009629.914:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  190.700129][   T33] audit: type=1326 audit(1781009629.914:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  190.707798][   T33] audit: type=1326 audit(1781009629.914:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  190.731144][ T9043] IPVS: Scheduler module ip_vs_ not found
[  190.736340][   T33] audit: type=1326 audit(1781009629.969:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.3.1275" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd79d9ce59 code=0x7ffc0000
[  191.342642][ T9067] loop2: detected capacity change from 0 to 4096
[  191.351320][ T9067] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  191.363169][ T9067] ntfs3(loop2): ino=1, mi_enum_attr
[  191.369515][ T9067] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  191.374305][ T5195] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  191.379757][ T9067] ntfs3(loop2): Failed to load $MFTMirr (-22).
[  191.535056][ T5195] usb 1-1: Using ep0 maxpacket: 8
[  191.540581][ T5195] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  191.548477][ T5195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.575203][ T5195] pvrusb2: Hardware description: Terratec Grabster AV400
[  191.577555][ T5195] pvrusb2: **********
[  191.578985][ T5195] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  191.582315][ T5195] pvrusb2: Important functionality might not be entirely working.
[  191.585205][ T5195] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  191.591682][ T5195] pvrusb2: **********
[  191.816227][ T2423] pvrusb2: Invalid write control endpoint
[  191.956002][ T2423] pvrusb2: Invalid write control endpoint
[  191.966673][ T2423] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  191.985189][ T2423] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  191.994963][ T2423] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  191.998811][ T2423] pvrusb2: Device being rendered inoperable
[  192.013434][ T2423] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  192.016736][ T2423] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  192.020194][ T5821] usb 1-1: USB disconnect, device number 11
[  192.041360][ T2423] pvrusb2: Attached sub-driver cx25840
[  192.043633][ T2423] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  192.048067][ T2423] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  193.113040][ T9143] loop2: detected capacity change from 0 to 512
[  193.132025][ T9143] EXT4-fs (loop2): 1 truncate cleaned up
[  193.143168][ T9143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.156409][   T33] audit: type=1800 audit(1781009632.195:580): pid=9143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1320" name="file0" dev="loop2" ino=13 res=0 errno=0
[  193.165552][ T9143] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1320: invalid indirect mapped block 234881024 (level 0)
[  193.191547][ T5687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.392624][   T31] IPVS: starting estimator thread 0...
[  193.495603][ T9154] IPVS: using max 49 ests per chain, 117600 per kthread
[  193.620188][ T9168] netlink: 'syz.3.1330': attribute type 1 has an invalid length.
[  195.057103][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1343'.
[  195.340181][ T9200] loop0: detected capacity change from 0 to 32768
[  195.348956][ T9200] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1344 (9200)
[  195.375534][ T9200] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  195.379725][ T9200] BTRFS info (device loop0): using blake2b checksum algorithm
[  195.440650][ T9200] BTRFS info (device loop0): enabling ssd optimizations
[  195.445212][ T9200] BTRFS info (device loop0): turning on async discard
[  195.448439][ T9200] BTRFS info (device loop0): enabling free space tree
[  195.452503][ T9200] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  195.750385][ T9234] loop0: detected capacity change from 0 to 512
[  195.806827][ T9234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.811075][ T9234] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.883972][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.279384][   T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  196.441661][   T31] usb 1-1: Using ep0 maxpacket: 32
[  196.453156][   T31] usb 1-1: unable to get BOS descriptor or descriptor too short
[  196.462712][   T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  196.468745][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.472211][   T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  196.478319][   T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  196.481194][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.483724][   T31] usb 1-1: Product: syz
[  196.486549][   T31] usb 1-1: Manufacturer: syz
[  196.488636][   T31] usb 1-1: SerialNumber: syz
[  196.733539][   T31] usb 1-1: 0:2 : does not exist
[  196.876542][   T31] usb 1-1: USB disconnect, device number 12
[  196.901380][ T9283] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2
[  196.974372][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.161167][ T9293] loop2: detected capacity change from 0 to 256
[  197.164865][ T9293] exfat: Deprecated parameter 'namecase'
[  197.170301][ T9293] exfat: Deprecated parameter 'utf8'
[  197.183274][ T9293] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  197.311231][ T9295] loop0: detected capacity change from 0 to 64
[  197.901352][ T9314] loop0: detected capacity change from 0 to 1024
[  197.908054][ T9314] EXT4-fs: Ignoring removed i_version option
[  197.915781][ T9314] EXT4-fs: inline encryption not supported
[  197.927920][ T9314] EXT4-fs (loop0): Test dummy encryption mode enabled
[  197.958532][ T9314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.040197][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.418830][ T9323] loop2: detected capacity change from 0 to 32768
[  198.438231][ T9323] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  198.910637][   T33] audit: type=1800 audit(1781009637.494:581): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1394" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  199.048999][ T5006] Bluetooth: hci2: command 0x0405 tx timeout
[  199.252137][ T5687] ocfs2: Unmounting device (7,2) on (node local)
[  199.355405][   T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  199.736830][   T31] usb 1-1: Using ep0 maxpacket: 8
[  199.740334][   T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  199.742906][   T31] usb 1-1: config 179 has no interface number 0
[  199.744958][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  199.749355][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  199.754907][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  199.761344][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  199.768762][   T31] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  199.773837][   T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  199.777060][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.784667][ T9343] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  200.025253][   T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8
[  200.278349][ T5195] usb 1-1: USB disconnect, device number 13
[  200.280322][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  200.280349][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  200.430996][ T9366] loop2: detected capacity change from 0 to 512
[  200.485502][ T9366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.489322][ T9366] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.530823][ T9366] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  200.544264][ T9366] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring
[  200.556360][ T9366] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  200.571350][ T9374] sctp: [Deprecated]: syz.3.1413 (pid 9374) Use of int in maxseg socket option.
[  200.571350][ T9374] Use struct sctp_assoc_value instead
[  200.585724][ T5687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.777889][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'.
[  201.093963][ T9404] loop2: detected capacity change from 0 to 256
[  201.109700][ T9404] FAT-fs (loop2): Directory bread(block 64) failed
[  201.114608][ T9404] FAT-fs (loop2): Directory bread(block 65) failed
[  201.116798][ T9404] FAT-fs (loop2): Directory bread(block 66) failed
[  201.118878][ T9404] FAT-fs (loop2): Directory bread(block 67) failed
[  201.123081][ T9404] FAT-fs (loop2): Directory bread(block 68) failed
[  201.125355][ T9404] FAT-fs (loop2): Directory bread(block 69) failed
[  201.127683][ T9404] FAT-fs (loop2): Directory bread(block 70) failed
[  201.129932][ T9404] FAT-fs (loop2): Directory bread(block 71) failed
[  201.133083][   T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  201.137355][ T9404] FAT-fs (loop2): Directory bread(block 72) failed
[  201.139819][ T9404] FAT-fs (loop2): Directory bread(block 73) failed
[  201.186923][ T9406] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1429'.
[  201.294129][   T24] usb 1-1: Using ep0 maxpacket: 32
[  201.297469][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.303670][   T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  201.313738][   T24] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  201.320766][   T24] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  201.326918][   T24] usb 1-1: Product: syz
[  201.330238][   T24] usb 1-1: Manufacturer: syz
[  201.333559][   T24] usb 1-1: SerialNumber: syz
[  201.343880][   T24] usb 1-1: config 0 descriptor??
[  201.441180][ T9417] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[  201.570670][   T24] usb 1-1: USB disconnect, device number 14
[  202.216162][ T9428] loop0: detected capacity change from 0 to 4096
[  202.257289][ T9429] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.258082][ T9428] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  202.272848][ T9428] NILFS (loop0): mounting fs with errors
[  202.316701][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1438'.
[  202.341849][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  202.344556][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  202.380026][ T9426] ipvlan1: entered promiscuous mode
[  202.382880][ T9426] ipvlan1: entered allmulticast mode
[  202.385084][ T9426] veth0_vlan: entered allmulticast mode
[  202.385281][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1438'.
[  202.733168][ T9455] [U] 
[  202.737633][ T9455] [U] K{
[  202.738764][ T9455] [U] T 1FFˊ`GJǘGO/MC
[  202.741436][ T9455] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب(5OBܤ̓J
[  202.746806][ T9455] [U] K\&}66XHXԵ.`A$40|϶9ިU4ĮVBZ}WMTQΦR4
[  202.751226][ T9455] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_<	ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ
[  202.765789][ T9455] [U] 	+WG?]'A:	)' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿BٜNY"VI2
[  202.775098][ T9455] [U] T_K5TYJ9C$BRLNUL9W|G"ʃ%ڶC؝Q 3QN^HP*$	.7Yӱ2
[  202.780335][ T9455] [U] ?H*3͝7ɍ^#Q"0~(OXLB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ
[  202.785546][ T9455] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<<RB|ФE۠V96#ͤʦJU%S851ҩSP\?Q|LQX0K1ORɴ2|DFِ2ޔ0H}C[/PX^O
[  202.798144][ T9455] [U] ؛(JЛMXZ;؝_*335\XMUAK!AQ`;FЕI+VUHMJƷZCZ)_ǟ	ԑ&֡AXTO_ ڼ:%PCֲY+_ܛ}UMƫC!KJ7пG=B
[  202.807263][ T9455] [U] ٽF%XAL2R*GVW$J	AF+ؾ9̈́VI֗Kپ1}_%R6(]/ؐřYܺHäR GRN/ܫ#!D%D-{$VUT$:MTREC1VD~];[SQ(E,X8"GDڵ2@T8҃T8.RC+@ʦPUPC'ńYL-SS1E?7O^]C½H]JKR]RKQ܆ݣ޴OTCX4N	&ڋ@:M7~+W*XM>>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)MăT(Aϝ}9ڥJ*Mќġ'LQ	DWظ=|Q	ÆW;5Ž!DBX`ɧ/E`ƦMX"\
[  202.826432][ T9455] [U] {;ե٘_O2)O.2W2ʲYX_  HPϱSD:]{Ƚ
[  202.831299][ T9455] [U] I,>Ӥ	51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^`	ؿ
[  202.837458][ T9455] [U] 22Ʃ۩X?0;3U
[  202.840113][ T9455] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D,		D~D+W;A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ	ͿAET1ݯ4K.E"RS|ПS:>PR"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ
[  202.850714][ T9455] [U] [['XN',MR/1D=!DX91BWǻRLFK̤Z#`̑L؛˜B~M
[  202.855061][ T9455] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y
[  202.859012][ T9455] [U] 'B6V20ķǞ׌"T8{9FW]̩
[  202.863000][ T9455] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C
[  202.868715][ T9455] [U] EC
[  202.870647][ T9455] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP|IRIӍPM Y ڔ8TV,L,
[  202.882651][ T9454] [U] K)0~ܳʪIP'FҜZR@B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L
[  203.473491][ T9440] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  203.941241][ T9502] netem: incorrect ge model size
[  203.962483][ T9502] netem: change failed
[  204.812459][ T9517] batman_adv: batadv0: Adding interface: dummy0
[  204.814709][ T9517] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  204.822966][ T9517] batman_adv: batadv0: Interface activated: dummy0
[  204.823475][ T9511] loop0: detected capacity change from 0 to 131072
[  204.870062][ T9511] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  204.886315][ T9511] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  204.895794][ T9517] batadv0: mtu less than device minimum
[  204.899964][ T9517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  204.905475][ T9517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  204.909460][ T9517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  204.913353][ T9517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  204.917116][ T9517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  204.920943][ T9517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  204.924885][ T9517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  204.929304][ T9517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  204.935074][ T9517] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304)
[  205.020456][ T5651] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  205.187514][ T5651] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  205.192453][ T5651] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  205.195804][ T5651] usb 3-1: Product: syz
[  205.197575][ T5651] usb 3-1: SerialNumber: syz
[  205.202692][ T5651] usb 3-1: config 0 descriptor??
[  205.426910][ T5651] hso 3-1:0.0: Failed to find BULK eps
[  205.638804][ T9533] fuse: Bad value for 'rootmode'
[  205.656331][ T5195] usb 3-1: USB disconnect, device number 15
[  206.424946][ T9545] loop0: detected capacity change from 0 to 512
[  206.427859][ T9545] EXT4-fs: Ignoring removed oldalloc option
[  206.431644][ T9545] EXT4-fs (loop0): Test dummy encryption mode enabled
[  206.446787][ T9545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.760617][ T5685] Bluetooth: hci1: link tx timeout
[  206.768949][ T5685] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.949210][    T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  207.141756][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  207.146625][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  207.151934][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.158187][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  207.166264][    T9] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  207.179931][    T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40
[  207.186565][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.190564][    T9] usb 3-1: Product: syz
[  207.193772][    T9] usb 3-1: Manufacturer: syz
[  207.196901][    T9] usb 3-1: SerialNumber: syz
[  207.220787][    T9] usb 3-1: 0:1 : does not exist
[  207.458434][    T9] usb 3-1: USB disconnect, device number 16
[  207.611918][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  208.054628][ T9579] loop2: detected capacity change from 0 to 128
[  208.073236][ T9579] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  208.086823][ T9579] ext4 filesystem being mounted at /456/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  208.121612][ T9579] 
[  208.122472][ T9579] ======================================================
[  208.124621][ T9579] WARNING: possible circular locking dependency detected
[  208.126855][ T9579] syzkaller #0 Not tainted
[  208.128366][ T9579] ------------------------------------------------------
[  208.130422][ T9579] syz.2.1495/9579 is trying to acquire lock:
[  208.132259][ T9579] ffff88811ef12600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10e0
[  208.134897][ T9579] 
[  208.134897][ T9579] but task is already holding lock:
[  208.137364][ T9579] ffff88811a7f6c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130
[  208.140638][ T9579] 
[  208.140638][ T9579] which lock already depends on the new lock.
[  208.140638][ T9579] 
[  208.143563][ T9579] 
[  208.143563][ T9579] the existing dependency chain (in reverse order) is:
[  208.146249][ T9579] 
[  208.146249][ T9579] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  208.148760][ T9579]        percpu_down_read_internal+0x48/0x1c0
[  208.150583][ T9579]        ext4_writepages+0x205/0x3b0
[  208.152129][ T9579]        do_writepages+0x32e/0x550
[  208.153664][ T9579]        __writeback_single_inode+0x133/0x10e0
[  208.155594][ T9579]        writeback_single_inode+0x4ac/0xdc0
[  208.157876][ T9579]        write_inode_now+0x1c2/0x290
[  208.159988][ T9579]        iput+0x8c1/0xe80
[  208.161721][ T9579]        ext4_xattr_block_set+0x1fd4/0x2ad0
[  208.164073][ T9579]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  208.166569][ T9579]        __ext4_expand_extra_isize+0x30d/0x400
[  208.169063][ T9579]        __ext4_mark_inode_dirty+0x45c/0x710
[  208.171451][ T9579]        ext4_evict_inode+0x986/0x10e0
[  208.173626][ T9579]        evict+0x61e/0xb10
[  208.175455][ T9579]        ext4_orphan_cleanup+0xc38/0x1470
[  208.177674][ T9579]        ext4_fill_super+0x5a19/0x6330
[  208.179845][ T9579]        get_tree_bdev_flags+0x431/0x4f0
[  208.182079][ T9579]        vfs_get_tree+0x92/0x2a0
[  208.184029][ T9579]        do_new_mount+0x341/0xd30
[  208.185598][ T9579]        __se_sys_mount+0x31d/0x420
[  208.187468][ T9579]        do_syscall_64+0x174/0x580
[  208.189044][ T9579]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.190983][ T9579] 
[  208.190983][ T9579] -> #0 (sb_internal){.+.+}-{0:0}:
[  208.193773][ T9579]        __lock_acquire+0x15a5/0x2cf0
[  208.195544][ T9579]        lock_acquire+0x106/0x350
[  208.197077][ T9579]        percpu_down_read_internal+0x48/0x1c0
[  208.198912][ T9579]        ext4_evict_inode+0x426/0x10e0
[  208.200961][ T9579]        evict+0x61e/0xb10
[  208.202548][ T9579]        ext4_ext_migrate+0xe11/0x1130
[  208.204397][ T9579]        ext4_ioctl+0x234c/0x4b30
[  208.205963][ T9579]        __se_sys_ioctl+0xfc/0x170
[  208.207874][ T9579]        do_syscall_64+0x174/0x580
[  208.209595][ T9579]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.211725][ T9579] 
[  208.211725][ T9579] other info that might help us debug this:
[  208.211725][ T9579] 
[  208.215047][ T9579]  Possible unsafe locking scenario:
[  208.215047][ T9579] 
[  208.217391][ T9579]        CPU0                    CPU1
[  208.218984][ T9579]        ----                    ----
[  208.220658][ T9579]   lock(&sbi->s_writepages_rwsem);
[  208.222400][ T9579]                                lock(sb_internal);
[  208.224732][ T9579]                                lock(&sbi->s_writepages_rwsem);
[  208.227769][ T9579]   rlock(sb_internal);
[  208.229333][ T9579] 
[  208.229333][ T9579]  *** DEADLOCK ***
[  208.229333][ T9579] 
[  208.232048][ T9579] 3 locks held by syz.2.1495/9579:
[  208.233704][ T9579]  #0: ffff88811ef12410 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x60/0x200
[  208.237090][ T9579]  #1: ffff888117bb8378 (&sb->s_type->i_mutex_key#11){++++}-{4:4}, at: ext4_ioctl+0x2344/0x4b30
[  208.240743][ T9579]  #2: ffff88811a7f6c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130
[  208.244314][ T9579] 
[  208.244314][ T9579] stack backtrace:
[  208.246392][ T9579] CPU: 1 UID: 0 PID: 9579 Comm: syz.2.1495 Not tainted syzkaller #0 PREEMPT(full) 
[  208.246407][ T9579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.246416][ T9579] Call Trace:
[  208.246425][ T9579]  <TASK>
[  208.246431][ T9579]  dump_stack_lvl+0xe8/0x150
[  208.246449][ T9579]  print_circular_bug+0x2e1/0x300
[  208.246466][ T9579]  check_noncircular+0x12e/0x150
[  208.246483][ T9579]  __lock_acquire+0x15a5/0x2cf0
[  208.246504][ T9579]  ? __asan_memset+0x22/0x50
[  208.246522][ T9579]  ? ext4_evict_inode+0x426/0x10e0
[  208.246536][ T9579]  lock_acquire+0x106/0x350
[  208.246550][ T9579]  ? ext4_evict_inode+0x426/0x10e0
[  208.246563][ T9579]  percpu_down_read_internal+0x48/0x1c0
[  208.246577][ T9579]  ? ext4_evict_inode+0x426/0x10e0
[  208.246587][ T9579]  ext4_evict_inode+0x426/0x10e0
[  208.246598][ T9579]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  208.246611][ T9579]  ? do_raw_spin_lock+0x12b/0x2f0
[  208.246624][ T9579]  ? __pfx_ext4_evict_inode+0x10/0x10
[  208.246634][ T9579]  ? do_raw_spin_unlock+0x4d/0x210
[  208.246648][ T9579]  ? __pfx_ext4_evict_inode+0x10/0x10
[  208.246657][ T9579]  evict+0x61e/0xb10
[  208.246671][ T9579]  ? __pfx_evict+0x10/0x10
[  208.246683][ T9579]  ? _raw_spin_unlock+0x28/0x50
[  208.246694][ T9579]  ? iput+0xb25/0xe80
[  208.246705][ T9579]  ext4_ext_migrate+0xe11/0x1130
[  208.246722][ T9579]  ? __pfx_ext4_ext_migrate+0x10/0x10
[  208.246736][ T9579]  ? __pfx_down_write+0x10/0x10
[  208.246751][ T9579]  ? sb_start_write+0x114/0x1c0
[  208.246765][ T9579]  ? mnt_want_write_file+0x164/0x200
[  208.246778][ T9579]  ext4_ioctl+0x234c/0x4b30
[  208.246789][ T9579]  ? __pfx_ext4_ioctl+0x10/0x10
[  208.246798][ T9579]  ? is_bpf_text_address+0x292/0x2b0
[  208.246808][ T9579]  ? is_bpf_text_address+0x26/0x2b0
[  208.246818][ T9579]  ? kernel_text_address+0xa5/0xe0
[  208.246832][ T9579]  ? __kernel_text_address+0xd/0x30
[  208.246844][ T9579]  ? unwind_get_return_address+0x4d/0x90
[  208.246856][ T9579]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  208.246870][ T9579]  ? arch_stack_walk+0xfb/0x150
[  208.246884][ T9579]  ? stack_trace_save+0xa9/0x100
[  208.246897][ T9579]  ? __pfx_stack_trace_save+0x10/0x10
[  208.246909][ T9579]  ? kasan_save_free_info+0x46/0x50
[  208.246923][ T9579]  ? stack_depot_save_flags+0x33/0x810
[  208.246937][ T9579]  ? kasan_save_track+0x4f/0x80
[  208.246946][ T9579]  ? kasan_save_track+0x3e/0x80
[  208.246954][ T9579]  ? kasan_save_free_info+0x46/0x50
[  208.246965][ T9579]  ? __kasan_slab_free+0x5c/0x80
[  208.246974][ T9579]  ? kfree+0x1c5/0x640
[  208.246987][ T9579]  ? tomoyo_path_number_perm+0x501/0x630
[  208.247032][ T9579]  ? security_file_ioctl+0xc3/0x2a0
[  208.247050][ T9579]  ? __se_sys_ioctl+0x47/0x170
[  208.247063][ T9579]  ? do_syscall_64+0x174/0x580
[  208.247078][ T9579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.247095][ T9579]  ? file_ioctl+0x273/0x860
[  208.247108][ T9579]  ? __pfx_file_ioctl+0x10/0x10
[  208.247122][ T9579]  ? kasan_quarantine_put+0xbb/0x1f0
[  208.247139][ T9579]  ? tomoyo_path_number_perm+0x219/0x630
[  208.247162][ T9579]  ? tomoyo_path_number_perm+0x219/0x630
[  208.247180][ T9579]  ? do_vfs_ioctl+0x1166/0x1530
[  208.247195][ T9579]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  208.247208][ T9579]  ? vfs_write+0x9bc/0xb90
[  208.247224][ T9579]  ? do_futex+0x333/0x420
[  208.247243][ T9579]  ? __fget_files+0x2a/0x420
[  208.247253][ T9579]  ? __fget_files+0x2a/0x420
[  208.247262][ T9579]  ? __fget_files+0x3a0/0x420
[  208.247270][ T9579]  ? __fget_files+0x2a/0x420
[  208.247280][ T9579]  ? bpf_lsm_file_ioctl+0x9/0x20
[  208.247294][ T9579]  ? __pfx_ext4_ioctl+0x10/0x10
[  208.247303][ T9579]  __se_sys_ioctl+0xfc/0x170
[  208.247315][ T9579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.247325][ T9579]  do_syscall_64+0x174/0x580
[  208.247336][ T9579]  ? trace_irq_disable+0x3b/0x140
[  208.247351][ T9579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.247361][ T9579] RIP: 0033:0x7ff475d9ce59
[  208.247375][ T9579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.247387][ T9579] RSP: 002b:00007ff473fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  208.247400][ T9579] RAX: ffffffffffffffda RBX: 00007ff476015fa0 RCX: 00007ff475d9ce59
[  208.247409][ T9579] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004
[  208.247416][ T9579] RBP: 00007ff475e32d6f R08: 0000000000000000 R09: 0000000000000000
[  208.247423][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.247430][ T9579] R13: 00007ff476016038 R14: 00007ff476015fa0 R15: 00007fff0dc89608
[  208.247443][ T9579]  </TASK>
[  208.422929][ T5687] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  208.747015][ T5683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.017478][ T5685] Bluetooth: hci1: command 0x0406 tx timeout
