last executing test programs:

2m15.295591105s ago: executing program 0 (id=72):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="620ac4ff0000080071100f000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

2m15.234705291s ago: executing program 0 (id=73):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x100, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x7, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x20000009, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0xffffffff], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x202, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2m15.234270069s ago: executing program 0 (id=74):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0xff00)

2m14.892771255s ago: executing program 0 (id=75):
r0 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02)
ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000300))
r1 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x800)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r3 = epoll_create1(0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0})
ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000280)={0x0, 0x2, 0x4, 0x8, 0x2, {r4, r5/1000+10000}, {0x4, 0xc, 0x5, 0x1, 0x6, 0xff, "0be8c911"}, 0x90e5344, 0x4, {<r6=>0xffffffffffffffff}, 0xe, 0x0, r1})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000040))
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)={0x8000203d})
pipe2$9p(&(0x7f0000000240)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ptrace(0x19, r10)
r11 = dup(r9)
read$FUSE(r11, &(0x7f0000004c00)={0x2020, 0x0, <r12=>0x0, 0x0, 0x0, <r13=>0x0}, 0x2020)
write$FUSE_BMAP(r11, &(0x7f0000000000)={0x18, 0x0, r12, {0xfffffffffffffffc}}, 0x18)
write$FUSE_DIRENTPLUS(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',directio,access=user,cache=mmap,vession=9p2000,cache=none,version=9p2000.u,obj_type=trans=fd,,\x00'])
newfstatat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', &(0x7f0000000f00), 0x800)
r14 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200, 0x20, 0xa}, 0x18)
kcmp(r13, r10, 0x0, r9, r14)

2m14.814739524s ago: executing program 0 (id=76):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
poll(&(0x7f0000000080)=[{r0, 0x429}], 0x1, 0xe)

2m14.343451722s ago: executing program 0 (id=85):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="540000001d00310a2dbd7000fbdbdf2502"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000)

2m13.920427581s ago: executing program 32 (id=85):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="540000001d00310a2dbd7000fbdbdf2502"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000)

2.64948763s ago: executing program 3 (id=1563):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "09007a15"}, @local=@item_4={0x3, 0x2, 0x4, "5d8c3dda"}]}}, 0x0}, 0x0)

1.735259341s ago: executing program 2 (id=1575):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRESHEX=r0], 0x24}}, 0x0)

1.73472512s ago: executing program 1 (id=1576):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000100)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$eJzs3EtvVGUfAPD/mbaUvtC3fXm9cVFG0dhopLRcFy6AaMLGxERjcFnbQpAChtYESCPFGEhcaPgEXnYmfgJXujFqXGjcStwaE2K6AV2YY87MmTrt6fTGtGPp75fM8JzbPM//nPMwz2VOA9iwytlbErE1In6OiJ7q4uwdytV/7k5PDv8xPTmcRJq+8ntS2e/O9ORwbdfacVvyhb5SROm9JHYWs+0cv3zl7NDY2OjFfEX/RClPnRs6PXp69PzgkSMH9ncdPjR4sClxZmW6s+OdC7u2n3j95kvDJ2++8e3nWXnTfHt9HFW9lfdNS86hrbCmHOXZ57LOU0sv+rrQXZdO2rP3UusKw5Jld212uToq9b8n2ipLVT3x4rstLRywqtI0TTsLa2e+y6bSeklSPSBNr6XAfSCJVpcAaI3aF/2d6aynOjlc7Aff324fi0oPKIv7bv6qbmmv9GDLvdW+Uccq5f9ARJyc+vOj7BXzjkMAADTXl8cibhyvtjtqr+qWUjxUt99/87mh3oj4X0Rsi4j/5+2XByMq+z4cEY/UHdO9hFmA8pzlYvvnx648Ud9cbZqs/fd8Prc1u/03U/LetnypuxJ/R3LqzNjovvyc9EVHZ7Y8UPzomWG1r1746cNG+Zfr2n/ZK8u/1hbMy/Fb+5wBupGhiaF7jbvm9rXKib1ajD+J9qSWitgeETtW8PnZOTvzzGe7Gm2fFX8WZyH+Dxp/ePsKCjRH+knE09XrPxVz4o98/i+pzE+ee6t//PKV587Uz08OHD40eLB/c4yN7uuv3RVF3/1w/eU8WehGLHD9a1VjVSfSsuv/n3nv/5mZy94sNTNfO778PK7futGwT7PS+39T8molXZufvTQ0MXFxIGJTMlVcP/jPsZeGumbtn8Xft2f++r8t4q+P8+N2RkR2Ez8aEY9FxO687I9HxBMRsWeB+L85/uSbjbqQi8e/urL4R5Z1/Rsljn4fMf+mtrNff1HI+P1yIf6OaHT9D1RSffmakaGJzYvFtVBJ6xP3fAIBAABgHdgdEVsjKe3NB5q2Rqm0d2/ElpkRlPGJZ09dePv8SPUZgd7oKNVGunrqxkMH8rHhbDk7arBuOdu+vzJunKZp2pUtZ/33se7Whg4b3pYG9T/za/GRFuB+s6x5tEZPtAHr0tz6f2vJRzb/BxnA2mrC72iAdUr9h41ryfV/tZ6CA1pmvvp/NeJuC4oCrLH56v9rhTVH16QswNrS/4eNa+X1348BYL3z/Q8b0pIekl9BYtuJBfZJ2lcn08aJUiz8VwB6I2pram2ahT/wl1JEc0rY1tRIu2Zd09K8+2yOZuQVpUX3aV/GH2JY20Tp31GMaqIzIha5e2dutqu1xJXVLlilEnza2v+dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7t3fAQAA///tUdPr")
open(&(0x7f0000000340)='.\x00', 0x50000, 0x0)
fstat(r1, &(0x7f0000000400))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
keyctl$session_to_parent(0x12)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x88a, &(0x7f0000000080)=ANY=[@ANYBLOB='dots,nodots,nocase,dots,nodots,debug\x00\b\x00\x00s,nodots,quiet,\x00'], 0x1, 0x162, &(0x7f0000000500)="$eJzs3DGr01AUB/DTvuh76tJZHAKCOBV1clSkglhQlA46KVSXVgp2iU79KH5BQTpIB+GKprS0tEihaerr77fkkD9Jzh2Syw0k7259GvRH44+jl9O4aDQiexR5zBrRimacRWkSa87XdwAA/5NZSvEjpZTOJ3HtW6SU6u4IAKia+R8ATs8/5/+HNTUGAFTG+h8ATs/rN2+fP+52O6/y/CLi+6ToFb1yW+ZPn3U79/K/WsujpkXRO1vk98s8X82vxPV5/mBjfjXu3i7zP9mTF1ms5jeiX/noAQAA4DS084WN6/t2e0venJfL9wNr6/ssbmaHGgUAsIvxl6+D98Phh8/7KZp7Os9Bi5+pdCz97FbcOY42FJesqPvJBFRtedPX3QkAAAAAAAAAAAAAALDNIT4n2nzlX/41DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG1+BwAA///7v1kj")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000001740)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x0)
ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800})
close_range(r0, 0xffffffffffffffff, 0x0)

1.671569945s ago: executing program 2 (id=1577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r0, 0xffffffffffffffff, 0x2c, 0x201c}, 0x20)

1.671368635s ago: executing program 2 (id=1578):
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0)

1.520134844s ago: executing program 2 (id=1579):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0eb01001800000000000200070000000100"], 0x0, 0x37}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10)

1.420481527s ago: executing program 2 (id=1580):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d01020301090224000100000800090400000221efb00009058d3a"], 0x0)

947.349684ms ago: executing program 3 (id=1581):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)

886.789856ms ago: executing program 3 (id=1582):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x100000003)

886.556759ms ago: executing program 3 (id=1583):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x68083, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x2, "26d8d3b549733910149e2bf71c8df3716129904db656c4cdb041763bad90a966"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x12, "43a5d33fc396096b1e0d3edb763adb3ec8615fff1adbea1dbdd5f71c08279d05"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x3, "555b0ddfc8345794218c530300f5ffb92eafb6723b0800080117257ce35bde00"})

876.645054ms ago: executing program 1 (id=1584):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)

721.384314ms ago: executing program 3 (id=1585):
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
r2 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000200), &(0x7f0000000080)=@tcp6=r2}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000200), &(0x7f0000000080)=@udp=r0, 0x1}, 0x20)

721.127659ms ago: executing program 3 (id=1586):
syz_usb_connect(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e44098082e0c2007f79b000000010902220001000000000904000001834b3c000905f9ff"], 0x0)

720.82933ms ago: executing program 1 (id=1587):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000a40)={&(0x7f0000000980)=[r1, r1], 0x2})

615.786003ms ago: executing program 1 (id=1588):
r0 = socket(0x2, 0x3, 0xff)
shutdown(r0, 0x1)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000b80)="f1e62f98c7ab3281eebd3c8dfdf09829d3", 0x11}, {&(0x7f0000000040)='UE\b', 0x3}], 0x2}}], 0x1, 0x4044880)

615.572671ms ago: executing program 1 (id=1589):
io_setup(0x1, &(0x7f00000012c0)=<r0=>0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x1, 0x200000000004}])

451.167502ms ago: executing program 1 (id=1590):
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4, 0xfff7}], 0x1)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/20)

0s ago: executing program 2 (id=1591):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008d0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x81)
fallocate(r0, 0x0, 0x0, 0x1000f4)
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10)
open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x145142, 0xc1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x700000000000000)
creat(&(0x7f00000000c0)='./bus\x00', 0x182)

kernel console output (not intermixed with test programs):

upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  116.685610][ T7250] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  116.789531][ T7254] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  117.030631][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'.
[  117.592065][ T5913] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  117.744612][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  117.749225][ T5913] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  117.753101][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.760972][ T5913] usb 2-1: config 0 descriptor??
[  117.771654][ T5913] smsusb:smsusb_probe: board id=8, interface number 0
[  117.775588][ T5913] smsusb:smsusb_probe: Device initialized with return code -19
[  117.969608][   T51] usb 2-1: USB disconnect, device number 7
[  118.688343][ T7302] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (16777216)
[  118.735400][ T7304] loop1: detected capacity change from 0 to 128
[  119.192347][ T5916] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  119.234037][ T5961] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  119.324804][ T7321] loop2: detected capacity change from 0 to 512
[  119.349371][ T7321] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.502: bg 0: block 393: padding at end of block bitmap is not set
[  119.349650][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.366154][ T7321] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  119.370204][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.370513][ T7321] EXT4-fs (loop2): 2 truncates cleaned up
[  119.381128][ T5916] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  119.381852][ T7321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.385469][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.402519][ T5961] usb 2-1: Using ep0 maxpacket: 8
[  119.402704][ T5916] usb 4-1: config 0 descriptor??
[  119.437592][ T7321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  119.443765][ T5961] usb 2-1: unable to get BOS descriptor or descriptor too short
[  119.447244][ T7321] EXT4-fs (loop2): can't disable delalloc during remount
[  119.454128][ T5961] usb 2-1: unable to read config index 0 descriptor/start: -71
[  119.457220][ T5961] usb 2-1: can't read configurations, error -71
[  119.490317][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.572041][ T7325] netlink: 'syz.2.503': attribute type 1 has an invalid length.
[  119.834179][ T5916] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[  119.837264][ T5916] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[  119.843502][ T5916] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0003/input/input9
[  119.884870][ T5916] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  120.041773][ T5916] usb 4-1: USB disconnect, device number 5
[  121.060722][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'.
[  121.360486][ T7370] loop2: detected capacity change from 0 to 40427
[  121.376069][ T7370] F2FS-fs (loop2): invalid crc value
[  121.498159][ T7370] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  121.510506][ T7370] F2FS-fs (loop2): Start checkpoint disabled!
[  121.587384][ T7370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  121.757137][ T4075] kworker/u9:5: attempt to access beyond end of device
[  121.757137][ T4075] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  121.774624][ T4075] CPU: 0 UID: 0 PID: 4075 Comm: kworker/u9:5 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  121.774649][ T4075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  121.774660][ T4075] Workqueue: writeback wb_workfn (flush-7:2)
[  121.774688][ T4075] Call Trace:
[  121.774695][ T4075]  <TASK>
[  121.774702][ T4075]  dump_stack_lvl+0x189/0x250
[  121.774726][ T4075]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.774742][ T4075]  ? __pfx_queue_work_on+0x10/0x10
[  121.774756][ T4075]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  121.774775][ T4075]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.774803][ T4075]  f2fs_handle_critical_error+0x37c/0x540
[  121.774830][ T4075]  f2fs_write_end_io+0x886/0xb60
[  121.774860][ T4075]  __submit_merged_bio+0x27a/0x6a0
[  121.774886][ T4075]  __submit_merged_write_cond+0x255/0x530
[  121.774907][ T4075]  f2fs_write_data_pages+0x261d/0x3000
[  121.774954][ T4075]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  121.774987][ T4075]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  121.775035][ T4075]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  121.775066][ T4075]  ? trace_f2fs_writepages+0x7f/0x200
[  121.775085][ T4075]  ? f2fs_write_node_pages+0x478/0x6e0
[  121.775108][ T4075]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  121.775147][ T4075]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  121.775167][ T4075]  do_writepages+0x32e/0x550
[  121.775221][ T4075]  ? reacquire_held_locks+0x127/0x1d0
[  121.775235][ T4075]  ? writeback_sb_inodes+0x384/0x1010
[  121.775261][ T4075]  __writeback_single_inode+0x145/0xff0
[  121.775279][ T4075]  ? do_raw_spin_unlock+0x4d/0x240
[  121.775300][ T4075]  writeback_sb_inodes+0x6c7/0x1010
[  121.775342][ T4075]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  121.775399][ T4075]  ? rcu_is_watching+0x15/0xb0
[  121.775423][ T4075]  wb_writeback+0x43b/0xaf0
[  121.775447][ T4075]  ? queue_io+0x2f1/0x590
[  121.775467][ T4075]  ? __pfx_wb_writeback+0x10/0x10
[  121.775492][ T4075]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.775514][ T4075]  wb_workfn+0x409/0xef0
[  121.775545][ T4075]  ? __pfx_wb_workfn+0x10/0x10
[  121.775565][ T4075]  ? __lock_acquire+0xab9/0xd20
[  121.775596][ T4075]  ? process_scheduled_works+0x9ef/0x17b0
[  121.775617][ T4075]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.775631][ T4075]  ? process_scheduled_works+0x9ef/0x17b0
[  121.775643][ T4075]  ? process_scheduled_works+0x9ef/0x17b0
[  121.775658][ T4075]  process_scheduled_works+0xae1/0x17b0
[  121.775700][ T4075]  ? __pfx_process_scheduled_works+0x10/0x10
[  121.775731][ T4075]  worker_thread+0x8a0/0xda0
[  121.775749][ T4075]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.775773][ T4075]  ? __kthread_parkme+0x7b/0x200
[  121.775798][ T4075]  kthread+0x711/0x8a0
[  121.775818][ T4075]  ? __pfx_worker_thread+0x10/0x10
[  121.775831][ T4075]  ? __pfx_kthread+0x10/0x10
[  121.775850][ T4075]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.775865][ T4075]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.775882][ T4075]  ? __pfx_kthread+0x10/0x10
[  121.775899][ T4075]  ret_from_fork+0x3fc/0x770
[  121.775917][ T4075]  ? __pfx_ret_from_fork+0x10/0x10
[  121.775938][ T4075]  ? __switch_to_asm+0x39/0x70
[  121.775954][ T4075]  ? __switch_to_asm+0x33/0x70
[  121.775969][ T4075]  ? __pfx_kthread+0x10/0x10
[  121.775986][ T4075]  ret_from_fork_asm+0x1a/0x30
[  121.776018][ T4075]  </TASK>
[  121.776026][ T4075] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  121.847117][ T7391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.533'.
[  121.957640][ T7393] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode active-backup(1)
[  122.350898][ T7397] loop2: detected capacity change from 0 to 32768
[  122.372249][ T7397] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  122.436337][ T5849] ocfs2: Unmounting device (7,2) on (node local)
[  123.133204][ T7411] loop1: detected capacity change from 0 to 32768
[  123.189848][ T7411] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.212372][ T7411] XFS (loop1): Ending clean mount
[  123.220606][ T7411] XFS (loop1): Quotacheck needed: Please wait.
[  123.251866][ T7411] XFS (loop1): Quotacheck: Done.
[  123.311280][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  124.772169][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.548'.
[  124.837665][ T5916] IPVS: starting estimator thread 0...
[  124.933247][ T7443] IPVS: using max 63 ests per chain, 151200 per kthread
[  125.521944][ T7459] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  125.525158][ T7459] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  125.553950][ T7459] hsr_slave_0: left promiscuous mode
[  125.558569][ T7459] hsr_slave_1: left promiscuous mode
[  125.602375][ T5852] Bluetooth: hci1: Malformed Event: 0x13
[  125.845197][ T7469] netlink: 'syz.1.561': attribute type 4 has an invalid length.
[  126.059538][ T7479] netlink: 6 bytes leftover after parsing attributes in process `syz.2.565'.
[  126.283909][ T7485] cgroup: Unknown subsys name 'cpuset'
[  126.288526][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  126.484253][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.497055][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  126.504324][   T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  126.507932][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  126.511261][   T10] usb 2-1: SerialNumber: syz
[  126.737684][   T10] usb 2-1: 0:2 : does not exist
[  126.776513][   T10] usb 2-1: USB disconnect, device number 10
[  126.796303][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  126.866165][ T7498] loop2: detected capacity change from 0 to 4096
[  127.169175][ T7509] loop3: detected capacity change from 0 to 128
[  127.221739][   T33] audit: type=1800 audit(1755247535.085:6): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.579" name="bus" dev="loop3" ino=1048610 res=0 errno=0
[  127.266177][ T7514] Unsupported ieee802154 address type: 0
[  127.343820][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'.
[  127.377389][ T7519] netlink: 'syz.2.583': attribute type 10 has an invalid length.
[  127.388795][ T5912] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.397348][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'.
[  127.403551][ T5912] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.406440][ T5912] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.430112][ T7519] team0: Port device netdevsim0 added
[  127.446619][ T5912] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.509172][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'.
[  127.666398][ T7537] loop1: detected capacity change from 0 to 2048
[  127.671924][ T7537] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  127.688960][ T7539] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.695362][ T7537] syz.1.592: attempt to access beyond end of device
[  127.695362][ T7537] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  127.721375][ T7537] process 'syz.1.592' launched './file3' with NULL argv: empty string added
[  127.730004][ T7537] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  127.739184][ T7537] Remounting filesystem read-only
[  127.742293][ T7537] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  127.750878][ T7537] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  127.757605][   T33] audit: type=1800 audit(1755247535.625:7): pid=7537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.592" name="file3" dev="loop1" ino=16 res=0 errno=0
[  127.906024][ T7544] loop1: detected capacity change from 0 to 128
[  127.916851][ T7544] /dev/loop1: Can't open blockdev
[  128.078915][ T7552] openvswitch: netlink: Missing key (keys=40, expected=80)
[  128.185190][ T7557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.600'.
[  128.483814][  T793] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  128.643412][  T793] usb 4-1: Using ep0 maxpacket: 32
[  128.650609][  T793] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  128.660007][  T793] usb 4-1: config 0 has no interface number 0
[  128.677970][  T793] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.39
[  128.689298][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.692581][  T793] usb 4-1: Product: syz
[  128.694468][  T793] usb 4-1: Manufacturer: syz
[  128.696267][  T793] usb 4-1: SerialNumber: syz
[  128.703710][  T793] usb 4-1: config 0 descriptor??
[  128.711352][  T793] smsc95xx v2.0.0
[  128.860686][ T7573] loop2: detected capacity change from 0 to 32768
[  128.875702][ T7573] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  128.992920][ T5849] ocfs2: Unmounting device (7,2) on (node local)
[  129.122097][  T793] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  129.130648][  T793] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  129.293390][ T7589] loop1: detected capacity change from 0 to 128
[  129.321975][ T7589] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  129.327209][ T7589] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  129.346172][ T7589] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.615: No space for directory leaf checksum. Please run e2fsck -D.
[  129.351442][ T7589] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.615: checksumming directory block 0
[  129.376984][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.401588][ T7595] netlink: 88 bytes leftover after parsing attributes in process `syz.2.617'.
[  129.414165][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'.
[  129.542955][  T793] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  129.553831][  T793] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  129.573517][  T793] usb 4-1: USB disconnect, device number 6
[  129.658576][ T7601] loop2: detected capacity change from 0 to 4096
[  129.672244][ T7601] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  129.789732][ T7601] ntfs3(loop2): ino=19, mi_enum_attr
[  129.792092][ T7601] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  129.805611][ T7601] ntfs3(loop2): failed to convert "c46c" to macromanian
[  129.809979][ T7601] ntfs3(loop2): ino=20, mi_enum_attr
[  130.615466][  T793] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  130.754281][ T7634] loop1: detected capacity change from 0 to 4096
[  130.779399][ T7634] NILFS (loop1): mounting unchecked fs
[  130.785432][  T793] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  130.792465][ T7634] NILFS (loop1): invalid segment: Checksum error in segment payload
[  130.796748][  T793] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  130.800408][  T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  130.805963][ T7634] NILFS (loop1): trying rollback from an earlier position
[  130.815294][ T7634] NILFS (loop1): recovery cancelled because norecovery option was specified for a read/write mount
[  130.819303][  T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  130.822543][  T793] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  130.829449][  T793] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  130.832934][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.837396][  T793] usb 4-1: Product: syz
[  130.839028][  T793] usb 4-1: Manufacturer: syz
[  130.840750][  T793] usb 4-1: SerialNumber: syz
[  130.844615][  T793] usb 4-1: config 0 descriptor??
[  130.871047][  T793] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[  130.993246][ T7644] loop1: detected capacity change from 0 to 512
[  131.001596][ T7644] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  131.010600][ T7644] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[  131.015724][ T7644] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.640: inode #15: comm syz.1.640: iget: illegal inode #
[  131.021537][ T7644] EXT4-fs (loop1): Remounting filesystem read-only
[  131.027516][ T7644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.036552][ T5916] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  131.053211][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.073480][   T10] usb 4-1: USB disconnect, device number 7
[  131.111927][ T7647] sp0: Synchronizing with TNC
[  131.199837][ T5916] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  131.203095][ T5916] usb 3-1: config 0 has no interface number 0
[  131.212664][ T5916] usb 3-1: config 0 interface 12 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  131.219883][ T5916] usb 3-1: config 0 interface 12 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 511
[  131.236506][ T5916] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=5f.c4
[  131.239927][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.242919][ T5916] usb 3-1: Product: syz
[  131.250258][ T5916] usb 3-1: Manufacturer: syz
[  131.252213][ T5916] usb 3-1: SerialNumber: syz
[  131.260611][ T5916] usb 3-1: config 0 descriptor??
[  131.265391][ T7638] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  131.273887][ T7638] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  131.302988][ T5916] option 3-1:0.12: GSM modem (1-port) converter detected
[  131.314566][ T5916] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0
[  131.493759][  T793] usb 3-1: USB disconnect, device number 10
[  131.507265][  T793] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  131.514924][  T793] option 3-1:0.12: device disconnected
[  131.616957][ T7654] binder: 7653:7654 ioctl c018620c 200000000280 returned -1
[  131.757549][ T7658] loop3: detected capacity change from 0 to 256
[  131.769126][ T7658] FAT-fs (loop3): Directory bread(block 1285) failed
[  131.780818][ T7658] FAT-fs (loop3): Directory bread(block 1285) failed
[  131.783442][ T7658] FAT-fs (loop3): Directory bread(block 1285) failed
[  131.785835][ T7658] FAT-fs (loop3): Directory bread(block 1285) failed
[  132.304316][  T793] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  132.398374][ T7668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.650'.
[  132.477030][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  132.489843][  T793] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  132.497918][  T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.513045][  T793] usb 3-1: config 0 descriptor??
[  132.579203][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.581720][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.828514][ T7676] input: syz0 as /devices/virtual/input/input11
[  133.195503][  T793] uclogic 0003:5543:0522.0004: unbalanced delimiter at end of report description
[  133.206508][  T793] uclogic 0003:5543:0522.0004: parse failed
[  133.213966][  T793] uclogic 0003:5543:0522.0004: probe with driver uclogic failed with error -22
[  133.315204][ T7682] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  133.385725][ T7684] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  133.404530][   T10] usb 3-1: USB disconnect, device number 11
[  133.534805][ T7686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.658'.
[  134.071289][ T7701] loop1: detected capacity change from 0 to 32768
[  134.246216][ T7701] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  134.246233][ T7701]   allowing incompatible features above 0.0: (unknown version)
[  134.246239][ T7701]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  134.267052][ T7701] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  134.272018][ T7701] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  134.276204][ T7701] bcachefs (loop1): Version upgrade required:
[  134.276204][ T7701] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  134.276204][ T7701] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  134.276204][ T7701]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  134.324306][ T7701] bcachefs (loop1): dropping and reconstructing all alloc info
[  134.356854][ T7701] bcachefs (loop1): accounting_read... done
[  134.374865][ T7701] bcachefs (loop1): alloc_read... done
[  134.378890][ T7701] bcachefs (loop1): snapshots_read... done
[  134.400222][ T7701] bcachefs (loop1): check_allocations... done
[  134.455104][ T7701] bcachefs (loop1): going read-write
[  134.457465][ T7701] bcachefs (loop1): insufficient writeable journal devices available: have 0, need 1
[  134.457465][ T7701] rw journal devs:
[  134.478876][ T7701] bcachefs (loop1): done starting filesystem
[  134.566654][ T7701] syz.1.664 (7701) used greatest stack depth: 18968 bytes left
[  134.614460][ T5845] bcachefs (loop1): shutting down
[  134.617128][ T5845] bcachefs (loop1): going read-only
[  134.619879][ T5845] bcachefs (loop1): finished waiting for writes to stop
[  134.644479][ T5845] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  134.648779][ T5845] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  134.674686][ T5845] bcachefs (loop1): unclean shutdown complete, journal seq 10
[  134.696902][ T5845] bcachefs (loop1): done going read-only, filesystem not clean
[  134.732123][ T5845] bcachefs (loop1): shutdown complete
[  134.902503][ T7735] loop2: detected capacity change from 0 to 32768
[  134.909457][ T7735] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  134.909457][ T7735] members_v2 (size 152):
[  134.909457][ T7735] Device:                        0
[  134.909457][ T7735]   Label:                       (none)
[  134.909457][ T7735]   UUID:                        7af6772b-00de-4159-84cd-1faead7f0000
[  134.909457][ T7735]   Size:                        0
[  134.909457][ T7735]   read errors:                 0
[  134.909457][ T7735]   write errors:                0
[  134.909457][ T7735]   checksum errors:             0
[  134.909457][ T7735]   seqread iops:                0
[  134.909457][ T7735]   seqwrite iops:               0
[  134.909457][ T7735]   randread iops:               0
[  134.909457][ T7735]   randwrite iops:              0
[  134.909457][ T7735]   Bucket size:                 131072
[  134.909457][ T7735]   First bucket:                0
[  134.909457][ T7735]   Buckets:                     0
[  134.909457][ T7735]   Last mount:                  1714681267
[  134.909457][ T7735]   Last superblock write:       83886122
[  134.909457][ T7735]   State:                       rw
[  134.909457][ T7735]   Data allowed:                journal,btree,user
[  134.909457][ T7735]   Has data:                    (none)
[  134.909457][ T7735]   Btree allocated bitmap blocksize:256
[  134.909457][ T7735]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  134.909457][ T7735]   Durability:   
[  134.909562][ T7735] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  134.957004][    C0] vkms_vblank_simulate: vblank timer overrun
[  134.991716][ T7731] loop3: detected capacity change from 0 to 32768
[  135.343009][ T7749] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.682'.
[  135.348948][ T7749] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.682'.
[  135.508452][ T7757] loop3: detected capacity change from 0 to 4096
[  135.517270][ T7757] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  135.548219][ T7757] ntfs3(loop3): ino=19, mi_enum_attr
[  135.556019][ T7757] ntfs3(loop3): failed to convert "c46c" to maciceland
[  135.558519][ T7757] ntfs3(loop3): ino=20, mi_enum_attr
[  135.619371][ T7761] loop2: detected capacity change from 0 to 256
[  135.630200][ T7761] vfat: Unknown parameter 'nnonumtail'
[  135.707012][   T33] audit: type=1804 audit(1755247543.574:8): pid=7761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.689" name="/newroot/202/file0/file1" dev="overlay" ino=1067 res=1 errno=0
[  135.832511][ T7763] loop3: detected capacity change from 0 to 32768
[  136.041642][ T7768] tmpfs: Bad value for 'mpol'
[  136.594859][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  136.669534][ T7800] loop3: detected capacity change from 0 to 128
[  136.675611][ T7800] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  136.685674][ T7800] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  136.697558][ T7800] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.705: Directory block failed checksum
[  136.731607][ T6136] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.757233][   T10] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.761454][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  136.764177][   T10] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  136.771141][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.824040][   T10] usb 2-1: config 0 descriptor??
[  136.958426][ T7807] netlink: 'syz.3.706': attribute type 6 has an invalid length.
[  137.243986][ T7809] Invalid option length (65058) for dns_resolver key
[  137.271125][   T10] elecom 0003:056E:010C.0005: hidraw0: USB HID v8.00 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0
[  137.689206][ T5899] usb 2-1: USB disconnect, device number 11
[  138.154738][ T7815] team_slave_0: entered promiscuous mode
[  138.157500][ T7815] team_slave_1: entered promiscuous mode
[  138.159696][ T7815] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  138.169968][ T7815] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  138.538470][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'.
[  138.813048][ T7827] loop9: detected capacity change from 0 to 7
[  138.869524][ T7827] Dev loop9: unable to read RDB block 7
[  138.889486][ T7827]  loop9: unable to read partition table
[  138.893561][ T7827] loop9: partition table beyond EOD, truncated
[  138.897042][ T7827] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5)
[  139.295057][ T5899] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  139.472442][ T5899] usb 2-1: config 160 has an invalid interface number: 200 but max is 0
[  139.489076][ T5899] usb 2-1: config 160 has no interface number 0
[  139.499008][ T5899] usb 2-1: config 160 interface 200 has no altsetting 0
[  139.518490][ T5899] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  139.528129][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.535205][ T5899] usb 2-1: Product: syz
[  139.539405][ T5899] usb 2-1: Manufacturer: syz
[  139.544882][ T5899] usb 2-1: SerialNumber: syz
[  140.316731][ T5899] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  140.319224][ T5899] usb 2-1: MIDIStreaming interface descriptor not found
[  140.420700][ T5899] usb 2-1: USB disconnect, device number 12
[  140.575184][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  140.815160][   T51] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  140.860987][ T7861] bond0: option lp_interval: invalid value (0)
[  140.867398][ T7861] bond0: option lp_interval: allowed values 1 - 2147483647
[  140.980067][   T51] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  140.983587][   T51] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  140.989286][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.992882][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.999121][   T51] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  141.003084][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7
[  141.007544][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024
[  141.014116][   T51] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  141.019457][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.022663][   T51] usb 3-1: Product: syz
[  141.024271][   T51] usb 3-1: Manufacturer: syz
[  141.026758][   T51] usb 3-1: SerialNumber: syz
[  141.030845][   T51] usb 3-1: config 0 descriptor??
[  141.106954][ T5899] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  141.241207][   T51] usb 3-1: ucan: probing device on interface #0
[  141.243618][   T51] usb 3-1: ucan: invalid endpoint configuration
[  141.248570][   T51] usb 3-1: ucan: probe failed; try to update the device firmware
[  141.255824][   T51] usb 3-1: USB disconnect, device number 12
[  141.266530][ T5899] usb 2-1: config 0 has an invalid interface number: 71 but max is 0
[  141.270692][ T5899] usb 2-1: config 0 has no interface number 0
[  141.273050][ T5899] usb 2-1: config 0 interface 71 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  141.277252][ T5899] usb 2-1: config 0 interface 71 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  141.283878][ T5899] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0
[  141.288573][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.291453][ T5899] usb 2-1: Product: syz
[  141.293045][ T5899] usb 2-1: Manufacturer: syz
[  141.294614][ T5899] usb 2-1: SerialNumber: syz
[  141.309100][ T5899] usb 2-1: config 0 descriptor??
[  141.312642][ T7859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  141.319334][ T7859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  141.323637][ T5899] kvaser_usb 2-1:0.71: error -ENODEV: Cannot get usb endpoint(s)
[  141.540106][ T7859] loop1: detected capacity change from 0 to 1024
[  141.547661][ T7859] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  141.588059][ T7859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.932530][ T7877] loop3: detected capacity change from 0 to 2048
[  141.951862][ T7879] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.993464][ T7877] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  141.998974][ T7877] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16)
[  142.011819][ T7877] Remounting filesystem read-only
[  142.017256][ T7877] NILFS (loop3): error -5 truncating bmap (ino=16)
[  142.061575][ T6136] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  142.149503][ T7885] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.734'.
[  142.316633][ T7890] loop2: detected capacity change from 0 to 1024
[  142.440631][ T7896] loop2: detected capacity change from 0 to 512
[  142.448464][ T5913] usb 2-1: USB disconnect, device number 13
[  142.453400][ T7896] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.739: casefold flag without casefold feature
[  142.459784][ T7896] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.739: couldn't read orphan inode 15 (err -117)
[  142.467917][ T7896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.542419][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.766074][ T7899] loop3: detected capacity change from 0 to 32768
[  142.772008][ T7899] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 2 start >= end (16259633109040355076 >= 202532834100012515)
[  142.772008][ T7899] journal_seq_blacklist (size 64):
[  142.772008][ T7899] 0-9895604649984 8747515680081339234-12315680807489264408 16259633109040355076-202532834100012515
[  142.772008][ T7899] 
[  142.787847][ T7899] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist
[  142.846892][ T5899] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  142.963132][ T7909] netlink: 'syz.3.746': attribute type 1 has an invalid length.
[  142.976775][ T7909] netlink: 'syz.3.746': attribute type 2 has an invalid length.
[  143.009868][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  143.017336][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.038844][ T5899] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  143.042500][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.056789][ T5899] usb 3-1: config 0 descriptor??
[  143.064891][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.129876][ T7913] loop1: detected capacity change from 0 to 2048
[  143.142567][ T7913] NILFS (loop1): invalid segment: Magic number mismatch
[  143.147535][ T7913] NILFS (loop1): trying rollback from an earlier position
[  143.159115][ T7913] NILFS (loop1): recovery complete
[  143.161910][ T7914] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.468996][ T5899] hid-u2fzero 0003:10C4:8ACF.0006: unbalanced delimiter at end of report description
[  143.472726][ T5899] hid-u2fzero 0003:10C4:8ACF.0006: probe with driver hid-u2fzero failed with error -22
[  143.672152][ T5913] usb 3-1: USB disconnect, device number 13
[  143.922087][ T7923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.752'.
[  143.953173][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'.
[  144.862292][ T7951] loop2: detected capacity change from 0 to 1024
[  144.874913][ T7951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.355227][ T7964] loop3: detected capacity change from 0 to 16
[  145.369620][ T7964] erofs (device loop3): mounted with root inode @ nid 36.
[  145.730959][ T7974] loop2: detected capacity change from 0 to 1024
[  146.006387][ T5961] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  146.343506][ T8011] netlink: 72 bytes leftover after parsing attributes in process `syz.1.792'.
[  146.359796][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.367480][ T5961] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  146.372073][ T5961] usb 4-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df
[  146.378500][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.390522][ T5961] usb 4-1: config 0 descriptor??
[  146.418704][ T5961] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected.
[  146.641979][ T5961] pwc: send_video_command error -71
[  146.651764][ T5961] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  146.662227][ T5961] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  146.693416][ T5961] usb 4-1: USB disconnect, device number 8
[  146.724196][ T8016] loop1: detected capacity change from 0 to 1024
[  146.765395][ T8016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.870341][ T8045] loop3: detected capacity change from 0 to 256
[  147.890464][ T8045] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  148.026175][ T8045] exFAT-fs (loop3): IO charset iso8859- not found
[  148.249422][ T8060] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.253903][ T8060] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.260176][ T8060] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.263099][ T8060] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.297635][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.814'.
[  149.133308][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.822'.
[  149.185174][ T8094] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  149.389693][ T8105] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  149.461422][ T8109] loop3: detected capacity change from 0 to 1024
[  149.604335][   T69] hfsplus: b-tree write err: -5, ino 8
[  149.619286][   T26] wlan1: Trigger new scan to find an IBSS to join
[  149.674229][ T8115] loop2: detected capacity change from 0 to 256
[  149.699850][ T8115] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  149.715581][ T8115] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  150.122276][ T5913] libceph: connect (1)[c::]:6789 error -101
[  150.125478][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  150.136953][ T5913] libceph: connect (1)[c::]:6789 error -101
[  150.140527][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  150.151768][   T51] libceph: connect (1)[c::]:6789 error -101
[  150.154665][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  150.164609][   T51] libceph: connect (1)[c::]:6789 error -101
[  150.171256][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  150.220216][ T8119] loop3: detected capacity change from 0 to 32768
[  150.331189][   T33] audit: type=1800 audit(1755247558.193:9): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.836" name="bus" dev="loop3" ino=7 res=0 errno=0
[  150.396887][ T5913] libceph: connect (1)[c::]:6789 error -101
[  150.402939][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  150.428555][   T51] libceph: connect (1)[c::]:6789 error -101
[  150.430884][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  150.907676][ T8127] ceph: No mds server is up or the cluster is laggy
[  150.907944][ T8124] ceph: No mds server is up or the cluster is laggy
[  150.927550][ T5913] libceph: connect (1)[c::]:6789 error -101
[  150.937893][ T5899] libceph: connect (1)[c::]:6789 error -101
[  150.940392][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  150.940586][ T5899] libceph: mon0 (1)[c::]:6789 connect error
[  150.996215][ T8134] loop3: detected capacity change from 0 to 1024
[  151.038717][ T8134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.123341][ T6136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.199652][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'.
[  151.987615][ T8158] loop3: detected capacity change from 0 to 32768
[  152.001251][ T8158] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  152.017355][ T8158] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  152.034803][ T8158] (syz.3.849,8158,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  152.062879][ T6136] ocfs2: Unmounting device (7,3) on (node local)
[  152.188509][ T8166] tipc: Trying to set illegal importance in message
[  152.378518][ T8177] loop1: detected capacity change from 0 to 512
[  152.384568][ T8177] FAT-fs (loop1): bogus sectors per cluster 69
[  152.388498][ T8177] FAT-fs (loop1): Can't find a valid FAT filesystem
[  152.668064][   T26] wlan1: Trigger new scan to find an IBSS to join
[  152.707755][ T8184] ieee802154 phy0 wpan0: encryption failed: -22
[  152.990594][ T8181] loop3: detected capacity change from 0 to 32768
[  153.043702][ T5856]  loop3: p1 p3 < >
[  153.165630][ T8181]  loop3: p1 p3 < >
[  153.241197][ T8191] netlink: 'syz.1.863': attribute type 27 has an invalid length.
[  153.244394][ T8191] lo: left allmulticast mode
[  153.246855][ T8191] tunl0: left allmulticast mode
[  153.249183][ T8191] gre0: left allmulticast mode
[  153.251312][ T8191] gretap0: left allmulticast mode
[  153.253444][ T8191] erspan0: left allmulticast mode
[  153.255738][ T8191] ip_vti0: left allmulticast mode
[  153.258262][ T8191] ip6_vti0: left allmulticast mode
[  153.261222][ T8191] sit0: left allmulticast mode
[  153.263398][ T8191] ip6tnl0: left allmulticast mode
[  153.265629][ T8191] ip6gre0: left allmulticast mode
[  153.270560][ T8191] syz_tun: left allmulticast mode
[  153.272827][ T8191] ip6gretap0: left allmulticast mode
[  153.275116][ T8191] bridge0: left allmulticast mode
[  153.291988][ T8191] vcan0: left allmulticast mode
[  153.301894][ T8191] bond0: left allmulticast mode
[  153.303769][ T8191] team0: left allmulticast mode
[  153.305445][ T8191] dummy0: left allmulticast mode
[  153.308913][ T8191] nlmon0: left allmulticast mode
[  153.311391][ T8191] caif0: left allmulticast mode
[  153.318756][ T8191] batadv0: left allmulticast mode
[  153.320686][ T8191] vxcan0: left allmulticast mode
[  153.322613][ T8191] vxcan1: left allmulticast mode
[  153.324654][ T8191] veth0: left allmulticast mode
[  153.345128][ T8191] veth1: left allmulticast mode
[  153.357912][ T8191] wg0: left allmulticast mode
[  153.359953][ T8191] wg1: left allmulticast mode
[  153.361785][ T8191] wg2: left allmulticast mode
[  153.363537][ T8191] veth0_to_bridge: left allmulticast mode
[  153.365628][ T8191] veth1_to_bridge: left allmulticast mode
[  153.368392][ T8191] veth0_to_bond: left allmulticast mode
[  153.370390][ T8191] bond_slave_0: left allmulticast mode
[  153.372572][ T8191] veth1_to_bond: left allmulticast mode
[  153.374537][ T8191] bond_slave_1: left allmulticast mode
[  153.376645][ T8191] veth0_to_team: left allmulticast mode
[  153.379288][ T8191] team_slave_0: left allmulticast mode
[  153.382238][ T8191] veth1_to_team: left allmulticast mode
[  153.384241][ T8191] team_slave_1: left allmulticast mode
[  153.386921][ T8191] veth0_to_batadv: left allmulticast mode
[  153.389219][ T8191] batadv_slave_0: left allmulticast mode
[  153.391352][ T8191] veth1_to_batadv: left allmulticast mode
[  153.393841][ T8191] batadv_slave_1: left allmulticast mode
[  153.396123][ T8191] xfrm0: left allmulticast mode
[  153.400017][ T8191] veth0_to_hsr: left allmulticast mode
[  153.401132][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  153.405336][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  153.409686][ T8191] veth1_to_hsr: left allmulticast mode
[  153.417561][ T8191] hsr0: left allmulticast mode
[  153.421059][ T8191] hsr_slave_0: left allmulticast mode
[  153.423426][ T8191] hsr_slave_1: left allmulticast mode
[  153.425858][ T8191] veth1_virt_wifi: left allmulticast mode
[  153.428611][ T8191] veth0_virt_wifi: left allmulticast mode
[  153.431029][ T8191] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  153.433836][ T8191] veth1_vlan: left allmulticast mode
[  153.436167][ T8191] vlan0: left allmulticast mode
[  153.439888][ T8191] vlan1: left allmulticast mode
[  153.441868][ T8191] macvlan0: left allmulticast mode
[  153.443804][ T8191] macvlan1: left allmulticast mode
[  153.444188][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  153.445655][ T8191] ipvlan0: left allmulticast mode
[  153.450636][ T8191] ipvlan1: left allmulticast mode
[  153.450928][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  153.452433][ T8191] veth0_vlan: left allmulticast mode
[  153.472195][ T8191] veth1_macvtap: left allmulticast mode
[  153.475002][ T8191] veth0_macvtap: left allmulticast mode
[  153.483803][ T8191] macvtap0: left allmulticast mode
[  153.485700][ T8191] macsec0: left allmulticast mode
[  153.488639][ T8191] geneve0: left allmulticast mode
[  153.493956][ T8191] geneve1: left allmulticast mode
[  153.498499][ T8191] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  153.507336][ T8191] netdevsim netdevsim1 netdevsim1: left allmulticast mode
[  153.512171][ T8191] netdevsim netdevsim1 netdevsim2: left allmulticast mode
[  153.516671][ T8191] netdevsim netdevsim1 netdevsim3: left allmulticast mode
[  153.523916][ T8191] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  153.536615][ T8191] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  153.545079][ T8191] bond1: left allmulticast mode
[  153.586898][ T8196] loop2: detected capacity change from 0 to 32768
[  153.598670][ T8196] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.865 (8196)
[  153.618860][ T8196] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  153.624224][ T8196] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  153.630021][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.633586][ T8193] 8021q: adding VLAN 0 to HW filter on device team0
[  153.640563][ T8193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.646144][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.659954][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.667836][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.674127][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.695793][ T8196] BTRFS info (device loop2): rebuilding free space tree
[  153.702812][ T8196] BTRFS info (device loop2): disabling free space tree
[  153.705069][ T8196] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  153.708284][ T8196] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  154.371791][ T5849] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  155.619150][   T27] wlan1: Trigger new scan to find an IBSS to join
[  157.371568][ T8255] loop3: detected capacity change from 0 to 1024
[  157.374529][ T8255] EXT4-fs: Ignoring removed orlov option
[  157.376563][ T8255] EXT4-fs: Ignoring removed nomblk_io_submit option
[  157.410435][ T8255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.638203][ T6136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.711172][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'.
[  157.766302][   T69] wlan1: Creating new IBSS network, BSSID 5e:19:30:8b:5f:f5
[  157.790737][ T8279] loop2: detected capacity change from 0 to 128
[  157.812264][ T8279] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.821114][ T8279] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  157.868637][ T8279] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 20: comm syz.2.891: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  157.886461][ T8279] EXT4-fs (loop2): Remounting filesystem read-only
[  157.919395][ T5849] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.015822][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'.
[  158.276324][ T8301] CIFS mount error: No usable UNC path provided in device string!
[  158.276324][ T8301] 
[  158.286570][ T8301] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  158.632850][ T8322] loop1: detected capacity change from 0 to 2048
[  158.651199][ T8322] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  158.699857][ T8327] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.880830][ T8335] loop2: detected capacity change from 0 to 1764
[  159.475157][ T8348] loop2: detected capacity change from 0 to 512
[  159.495868][ T8348] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  159.506734][ T8348] EXT4-fs (loop2): mount failed
[  159.787277][ T5913] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  159.840905][ T8365] loop1: detected capacity change from 0 to 1024
[  159.924739][   T69] hfsplus: b-tree write err: -5, ino 4
[  159.948241][ T5913] usb 3-1: Using ep0 maxpacket: 32
[  159.951847][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short
[  159.956050][ T5913] usb 3-1: config 4 has an invalid interface number: 10 but max is 0
[  159.960161][ T5913] usb 3-1: config 4 has no interface number 0
[  159.962462][ T5913] usb 3-1: config 4 interface 10 has no altsetting 0
[  159.968496][ T5913] usb 3-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15
[  159.972071][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.975416][ T5913] usb 3-1: Product: syz
[  159.979216][ T5913] usb 3-1: Manufacturer: syz
[  159.981827][ T5913] usb 3-1: SerialNumber: syz
[  160.194295][ T5913] radio-si470x 3-1:4.10: could not find interrupt in endpoint
[  160.196835][ T5913] radio-si470x 3-1:4.10: probe with driver radio-si470x failed with error -5
[  160.202483][ T5913] usbhid 3-1:4.10: couldn't find an input interrupt endpoint
[  160.207318][ T5913] usb 3-1: USB disconnect, device number 14
[  160.267298][ T5899] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  160.419304][ T5899] usb 2-1: config 252 has an invalid interface number: 107 but max is 0
[  160.421918][ T5899] usb 2-1: config 252 has no interface number 0
[  160.423943][ T5899] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  160.428472][ T5899] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  160.435158][ T5899] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67
[  160.439048][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.442284][ T5899] usb 2-1: Product: syz
[  160.444022][ T5899] usb 2-1: Manufacturer: syz
[  160.445899][ T5899] usb 2-1: SerialNumber: syz
[  160.662089][ T5913] usb 2-1: USB disconnect, device number 14
[  161.091416][ T8397] loop3: detected capacity change from 0 to 128
[  161.181879][ T8399] team0: Port device netdevsim0 removed
[  161.193451][ T8399] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  161.321758][ T8409] netlink: 'syz.3.947': attribute type 21 has an invalid length.
[  161.325123][ T8409] netlink: 128 bytes leftover after parsing attributes in process `syz.3.947'.
[  161.329980][ T8409] netlink: 'syz.3.947': attribute type 4 has an invalid length.
[  161.332721][ T8409] netlink: 'syz.3.947': attribute type 5 has an invalid length.
[  161.335382][ T8409] netlink: 3 bytes leftover after parsing attributes in process `syz.3.947'.
[  161.518409][ T8405] loop1: detected capacity change from 0 to 32768
[  161.525106][ T8405] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  162.067548][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  162.237499][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.244164][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  162.255336][   T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  162.268108][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  162.271402][   T10] usb 2-1: SerialNumber: syz
[  162.494263][   T10] usb 2-1: 0:2 : does not exist
[  162.516059][   T10] usb 2-1: USB disconnect, device number 15
[  162.549773][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  162.690695][ T8441] loop3: detected capacity change from 0 to 512
[  162.698756][ T8441] EXT4-fs: Ignoring removed orlov option
[  162.714665][ T8441] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  162.815986][ T8443] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  162.833572][ T8443] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  162.855187][ T8439] loop2: detected capacity change from 0 to 32768
[  162.949531][ T8449] netlink: 104 bytes leftover after parsing attributes in process `syz.2.964'.
[  162.954134][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.966'.
[  162.958423][ T8451] netlink: 32 bytes leftover after parsing attributes in process `syz.3.966'.
[  162.961125][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.966'.
[  162.964844][ T8451] netlink: 32 bytes leftover after parsing attributes in process `syz.3.966'.
[  163.146022][ T8457] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  163.166446][ T8463] loop2: detected capacity change from 0 to 1024
[  163.314284][ T8467] loop1: detected capacity change from 0 to 2048
[  163.330952][ T8469] hfsplus: request for non-existent node 211 in B*Tree
[  163.333905][ T8469] hfsplus: request for non-existent node 211 in B*Tree
[  163.355191][ T8467] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  163.393831][ T8467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.452250][   T33] audit: type=1800 audit(1755247571.321:10): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.973" name="file1" dev="loop1" ino=1346 res=0 errno=0
[  164.496111][ T8496] ip6erspan0: entered promiscuous mode
[  164.761200][ T8511] loop3: detected capacity change from 0 to 512
[  164.787408][ T8511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.793030][ T8511] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.826113][ T6136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.949950][   T33] audit: type=1326 audit(1755247572.821:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8515 comm="syz.3.993" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed4938ebe9 code=0x0
[  164.971830][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'.
[  164.975507][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'.
[  165.503898][ T8523] loop3: detected capacity change from 0 to 32768
[  165.548801][ T8523] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  165.602438][ T8523] XFS (loop3): Ending clean mount
[  165.666714][ T8523] XFS (loop3): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xe0, xfs_refcountbt block 0x28 
[  165.673192][ T8523] XFS (loop3): Unmount and run xfs_repair
[  165.678294][ T8523] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  165.686704][ T8523] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[  165.697291][ T8523] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[  165.707594][ T8523] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  165.724803][ T8523] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[  165.729530][ T8523] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  165.734495][ T8523] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  165.747973][ T8523] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  165.751541][ T8523] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  165.755482][ T8523] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x28 len 8 error 74
[  165.783192][ T8523] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  165.791849][ T8523] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  165.872736][ T6136] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  166.814493][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'.
[  167.027390][ T8583] loop3: detected capacity change from 0 to 256
[  167.101790][ T8571] loop2: detected capacity change from 0 to 32768
[  167.120967][ T8583] FAT-fs (loop3): Directory bread(block 64) failed
[  167.129069][ T8583] FAT-fs (loop3): Directory bread(block 65) failed
[  167.137665][ T8583] FAT-fs (loop3): Directory bread(block 66) failed
[  167.150201][ T8571] (syz.2.1015,8571,0):ocfs2_load_local_alloc:320 ERROR: Local alloc size is invalid (la_size = 0)
[  167.154771][ T8583] FAT-fs (loop3): Directory bread(block 67) failed
[  167.159034][ T8571] (syz.2.1015,8571,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[  167.164262][ T8583] FAT-fs (loop3): Directory bread(block 68) failed
[  167.171952][ T8571] (syz.2.1015,8571,1):ocfs2_check_volume:2404 ERROR: status = -22
[  167.174950][ T8583] FAT-fs (loop3): Directory bread(block 69) failed
[  167.177138][ T8571] (syz.2.1015,8571,1):ocfs2_check_volume:2432 ERROR: status = -22
[  167.182817][ T8583] FAT-fs (loop3): Directory bread(block 70) failed
[  167.187621][ T8571] (syz.2.1015,8571,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  167.193757][ T8583] FAT-fs (loop3): Directory bread(block 71) failed
[  167.205518][ T8583] FAT-fs (loop3): Directory bread(block 72) failed
[  167.210280][ T8583] FAT-fs (loop3): Directory bread(block 73) failed
[  167.231326][ T8571] (syz.2.1015,8571,0):ocfs2_fill_super:1177 ERROR: status = -22
[  167.687500][ T8593] loop1: detected capacity change from 0 to 764
[  167.755991][ T8593] Symlink component flag not implemented
[  167.763136][ T8593] Symlink component flag not implemented (116)
[  168.473109][ T8606] loop2: detected capacity change from 0 to 32768
[  168.515425][ T8606] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1029 (8606)
[  168.738672][ T8618] loop3: detected capacity change from 0 to 32768
[  168.765898][ T8606] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  168.772151][ T8606] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  168.776659][ T8606] BTRFS info (device loop2): using free-space-tree
[  168.779656][ T8618] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  168.813570][ T8618] XFS (loop3): Metadata corruption detected at __xfs_buf_ioend+0x342/0x6f0, xfs_inode block 0x2280 xfs_inode_buf_verify
[  168.821817][ T8618] XFS (loop3): Unmount and run xfs_repair
[  168.824225][ T8618] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  168.827125][ T8618] 00000000: 49 4e 07 00 00 00 00 00 00 00 00 00 00 00 00 00  IN..............
[  168.831008][ T8618] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  168.834413][ T8618] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  168.837824][ T8618] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  168.841606][ T8618] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  168.845261][ T8618] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  168.848960][ T8618] 00000060: ff ff ff ff 01 81 e9 80 00 00 00 00 00 00 00 00  ................
[  168.852593][ T8618] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  168.856156][ T8618] XFS (loop3): metadata I/O error in "xfs_imap_to_bp+0x127/0x2f0" at daddr 0x2280 len 64 error 117
[  168.860788][ T8618] XFS (loop3): Failed to read root inode 0x1140, error 117
[  168.864242][ T8618] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  169.106944][ T5849] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  169.546072][ T8654] JFS: charset not found
[  169.673536][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1047'.
[  169.686883][ T8669] geneve2: entered promiscuous mode
[  169.703311][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'.
[  169.706379][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'.
[  169.709418][ T8671] netlink: 'syz.1.1048': attribute type 5 has an invalid length.
[  170.307016][ T8691] loop2: detected capacity change from 0 to 4096
[  170.310839][ T8691] ntfs3(loop2): Primary boot: invalid record size -64.
[  170.318197][ T8691] ntfs3(loop2): try to read out of volume at offset 0x1ffe00
[  170.792838][ T8706] netlink: 'syz.1.1063': attribute type 10 has an invalid length.
[  170.796218][ T8706] syz_tun: entered promiscuous mode
[  170.807761][ T8706] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  170.816588][ T8706] netlink: 'syz.1.1063': attribute type 10 has an invalid length.
[  170.825818][ T8706] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.831697][ T8706] team0: Port device bond0 added
[  170.848583][ T5913] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  171.060360][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.064502][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  171.068803][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  171.072875][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  171.077694][ T5913] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  171.085555][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.091164][ T5913] usb 4-1: config 0 descriptor??
[  171.537950][ T5899] usb 4-1: USB disconnect, device number 9
[  171.737770][ T8723] veth5: entered allmulticast mode
[  171.987667][ T8731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1074'.
[  172.278673][ T8747] netlink: 'syz.3.1081': attribute type 21 has an invalid length.
[  172.281575][ T8747] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1081'.
[  172.294337][ T8747] netlink: 'syz.3.1081': attribute type 5 has an invalid length.
[  172.297486][ T8747] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1081'.
[  172.588230][ T8757] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  172.744024][ T8763] netlink: 'syz.3.1089': attribute type 29 has an invalid length.
[  172.766017][ T8763] netlink: 'syz.3.1089': attribute type 29 has an invalid length.
[  172.866320][ T8774] netlink: 'syz.3.1094': attribute type 10 has an invalid length.
[  172.872980][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1094'.
[  173.179109][ T5899] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  173.231934][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'.
[  173.307323][ T8803] netlink: 'syz.3.1109': attribute type 1 has an invalid length.
[  173.313569][ T8801] dvmrp0: tun_chr_ioctl cmd 1074025677
[  173.315890][ T8801] dvmrp0: linktype set to 768
[  173.350184][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.353620][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.359760][ T5899] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  173.374402][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.400410][ T5899] usb 2-1: config 0 descriptor??
[  173.473122][   T33] audit: type=1800 audit(1755247581.340:12): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1112" name="bus" dev="overlay" ino=1786 res=0 errno=0
[  173.813760][ T5899] hid_mf 0003:0079:1846.0007: report_id 393985501 is invalid
[  173.826754][ T5899] hid_mf 0003:0079:1846.0007: item 0 4 1 8 parsing failed
[  173.831645][ T5899] hid_mf 0003:0079:1846.0007: HID parse failed.
[  173.833741][ T5899] hid_mf 0003:0079:1846.0007: probe with driver hid_mf failed with error -22
[  173.850737][ T8825] loop2: detected capacity change from 0 to 32768
[  173.979896][ T8825] bcachefs (loop2): starting version 1.13: inode_has_child_snapshots
[  173.979912][ T8825]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  173.988609][ T8825] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  173.992179][ T8825] bcachefs (loop2): recovering from clean shutdown, journal seq 8
[  173.996060][ T8825] bcachefs (loop2): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  173.996060][ T8825]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  174.017151][   T51] usb 2-1: USB disconnect, device number 16
[  174.031158][ T8825] bcachefs (loop2): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[  174.035910][ T8825] bcachefs (loop2): check_topology... done
[  174.040106][ T8825] bcachefs (loop2): accounting_read... done
[  174.044598][ T8825] bcachefs (loop2): alloc_read... done
[  174.047502][ T8825] bcachefs (loop2): snapshots_read... done
[  174.050904][ T8825] bcachefs (loop2): check_allocations...
[  174.056061][ T8825] bcachefs (loop2): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  174.063488][ T8825] bcachefs (loop2): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing
[  174.073524][ T8825]  done
[  174.085738][ T8825] bcachefs (loop2): going read-write
[  174.094811][ T8825] bcachefs (loop2): journal_replay...
[  174.129667][ T5899] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  174.156873][ T8825]  done
[  174.159587][ T8825] bcachefs (loop2): check_lrus... done
[  174.162834][ T8825] bcachefs (loop2): check_backpointers_to_extents... done
[  174.172487][ T8825] bcachefs (loop2): check_extents_to_backpointers... done
[  174.178251][ T8825] bcachefs (loop2): check_inodes... done
[  174.183628][ T8825] bcachefs (loop2): resume_logged_ops... done
[  174.186883][ T8825] bcachefs (loop2): delete_dead_inodes... done
[  174.195048][ T8825] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[  174.199530][ T8825] bcachefs (loop2): check_extents_to_backpointers...
[  174.200656][ T8825] bcachefs (loop2): scanning for missing backpointers in 1/512 buckets
[  174.208392][ T8825]  done
[  174.210926][ T8825] bcachefs (loop2): check_inodes... done
[  174.213998][ T8825] bcachefs (loop2): resume_logged_ops... done
[  174.216505][ T8825] bcachefs (loop2): delete_dead_inodes... done
[  174.220298][ T8825] bcachefs (loop2): done starting filesystem
[  174.243187][ T8825] syz.2.1120 (8825) used greatest stack depth: 12824 bytes left
[  174.248365][ T5849] bcachefs (loop2): shutting down
[  174.251089][ T5849] bcachefs (loop2): going read-only
[  174.253126][ T5849] bcachefs (loop2): finished waiting for writes to stop
[  174.257397][ T5849] bcachefs (loop2): flushing journal and stopping allocators, journal seq 17
[  174.269582][ T5849] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 18
[  174.276055][ T5849] bcachefs (loop2): clean shutdown complete, journal seq 19
[  174.281023][ T5849] bcachefs (loop2): marking filesystem clean
[  174.293304][ T5899] usb 4-1: Using ep0 maxpacket: 32
[  174.299070][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  174.308086][ T5849] bcachefs (loop2): shutdown complete
[  174.311189][ T5899] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  174.323361][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.326579][ T5899] usb 4-1: Product: syz
[  174.328180][ T5899] usb 4-1: Manufacturer: syz
[  174.334973][ T5899] usb 4-1: SerialNumber: syz
[  174.344520][ T5899] usb 4-1: config 0 descriptor??
[  174.347234][ T8832] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  174.357444][ T5899] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13
[  174.560591][ T5961] usb 4-1: USB disconnect, device number 10
[  174.560657][    C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  175.232979][ T8858] loop3: detected capacity change from 0 to 1024
[  175.245076][ T8858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.275692][ T6136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.532032][ T8865] loop3: detected capacity change from 0 to 40427
[  175.547839][ T8865] F2FS-fs (loop3): Image doesn't support compression
[  175.554096][ T8865] F2FS-fs (loop3): build fault injection rate: 14
[  175.556459][ T8865] F2FS-fs (loop3): build fault injection type: 0x1
[  175.561822][ T8865] F2FS-fs (loop3): invalid crc value
[  175.570868][ T8865] F2FS-fs (loop3): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x30ed/0x49f0
[  175.575050][ T8865] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12)
[  175.627756][ T8870] loop1: detected capacity change from 0 to 4096
[  176.071583][ T8889] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1140'.
[  176.124507][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'.
[  176.128218][ T8893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.290946][ T8904] loop2: detected capacity change from 0 to 1024
[  176.334873][ T8904] hfsplus: bad catalog entry type
[  176.358531][ T1266] hfsplus: b-tree write err: -5, ino 4
[  177.457915][ T8926] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present
[  177.825052][ T8928] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  177.844422][ T8928] Error validating options; rc = [-22]
[  177.871913][ T8930] loop1: detected capacity change from 0 to 512
[  177.880981][ T8930] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  178.003480][   T33] audit: type=1326 audit(1755247585.869:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.1161" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac438ebe9 code=0x0
[  178.253264][ T8948] loop3: detected capacity change from 0 to 128
[  178.259744][ T5961] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  178.274512][ T8948] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  178.287169][ T8948] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.409445][ T5961] usb 3-1: Using ep0 maxpacket: 16
[  178.418618][ T5961] usb 3-1: config 8 has an invalid interface number: 206 but max is 0
[  178.427721][ T6136] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  178.431871][ T5961] usb 3-1: config 8 has no interface number 0
[  178.434770][ T5961] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  178.456927][ T5961] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  178.469775][ T5961] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  178.480006][ T5961] usb 3-1: config 8 interface 206 has no altsetting 0
[  178.488819][ T5961] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  178.493745][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.496826][ T5961] usb 3-1: Product: syz
[  178.500642][ T5961] usb 3-1: Manufacturer: syz
[  178.502575][ T5961] usb 3-1: SerialNumber: syz
[  178.724742][ T5961] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected
[  178.768619][ T5961] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  178.928487][ T5961] usb 3-1: USB disconnect, device number 15
[  179.058770][ T5961] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  179.069750][ T5961] garmin_gps 3-1:8.206: device disconnected
[  179.408444][ T5899] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  179.572549][ T5899] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  179.577090][ T5899] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  179.587319][ T5899] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  179.599782][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.617384][ T8963] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  179.625815][ T5899] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  179.858192][ T5899] usb 2-1: USB disconnect, device number 17
[  180.011164][ T8986] netlink: 'syz.3.1179': attribute type 12 has an invalid length.
[  180.708153][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'.
[  180.839400][ T9028] loop1: detected capacity change from 0 to 256
[  180.854594][ T9028] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  181.197047][ T9045] loop2: detected capacity change from 0 to 512
[  181.208960][ T9045] EXT4-fs (loop2): Test dummy encryption mode enabled
[  181.221472][ T9045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  181.244047][ T9045] EXT4-fs (loop2): 1 truncate cleaned up
[  181.247768][ T9045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.341039][ T9045] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  181.373347][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.547434][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'.
[  182.723851][ T5899] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  183.100503][ T5913] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  183.314088][ T5899] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  183.317783][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.322097][ T5899] usb 3-1: Product: syz
[  183.323826][ T5899] usb 3-1: Manufacturer: syz
[  183.325617][ T5899] usb 3-1: SerialNumber: syz
[  183.329697][ T5899] usb 3-1: config 0 descriptor??
[  183.340171][ T5913] usb 4-1: Using ep0 maxpacket: 16
[  183.344932][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.350959][ T5913] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  183.354750][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.363096][ T5913] usb 4-1: config 0 descriptor??
[  183.544238][ T5899] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  183.742787][ T9106] netlink: 'syz.1.1231': attribute type 30 has an invalid length.
[  183.747243][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'.
[  183.753654][ T9106] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  183.791243][ T5913] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  184.236991][ T5913] usb 4-1: USB disconnect, device number 11
[  184.681920][ T9112] loop1: detected capacity change from 0 to 256
[  184.689007][ T9112] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  184.866540][ T9122] loop1: detected capacity change from 0 to 512
[  184.872162][ T9122] EXT4-fs: Ignoring removed orlov option
[  184.880187][ T9122] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  184.888732][ T9122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  184.913463][ T9122] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1238: corrupted in-inode xattr: e_value size too large
[  184.926496][ T9122] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1238: couldn't read orphan inode 15 (err -117)
[  184.933241][ T9122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.088584][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'.
[  185.202378][ T5899] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  185.234203][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'.
[  185.803827][ T5899] usb 3-1: USB disconnect, device number 16
[  185.843355][ T9157] loop3: detected capacity change from 0 to 256
[  185.895613][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.986758][ T9159] loop1: detected capacity change from 0 to 4096
[  185.989755][ T9159] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  186.003114][ T9159] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  186.123026][ T9165] loop1: detected capacity change from 0 to 1024
[  186.159695][ T9170] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  186.170631][ T9165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  186.175627][ T9165] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.210979][ T9165] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.1257: lblock 0 mapped to illegal pblock 0 (length 3)
[  186.222821][ T9165] EXT4-fs (loop1): Remounting filesystem read-only
[  186.270547][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  186.358408][ T9180] loop2: detected capacity change from 0 to 2048
[  186.388127][ T9182] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.505047][ T9182] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  186.515289][ T9182] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  186.529240][ T9182] Remounting filesystem read-only
[  186.536047][ T5849] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  186.546521][ T9190] loop3: detected capacity change from 0 to 2048
[  186.613355][ T9196] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.643034][ T9196] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  186.647310][ T9196] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  186.653838][ T9196] Remounting filesystem read-only
[  186.687566][ T6136] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  186.951155][ T9206] loop3: detected capacity change from 0 to 512
[  186.966520][ T9206] EXT4-fs (loop3): orphan cleanup on readonly fs
[  186.969311][ T9206] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  186.977519][ T9206] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  186.999229][ T9206] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1274: attempt to clear invalid blocks 2 len 1
[  187.015487][ T9206] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1274: invalid indirect mapped block 1819239214 (level 0)
[  187.026510][ T9206] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1274: invalid indirect mapped block 1819239214 (level 1)
[  187.039651][ T9206] EXT4-fs (loop3): 1 truncate cleaned up
[  187.047106][ T9206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  187.176997][ T6136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.643796][ T9213] loop3: detected capacity change from 0 to 24
[  187.647793][ T9213] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  187.688120][ T9213] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  187.763117][ T9213] VFS: Lookup of 'file0' in romfs loop3 would have caused loop
[  187.845191][ T4075] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  188.389672][ T9230] loop3: detected capacity change from 0 to 256
[  188.405359][ T9230] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  188.409344][ T9232] loop2: detected capacity change from 0 to 256
[  188.418616][ T9230] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  188.542402][ T9236] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1288'.
[  188.542828][ T9238] loop2: detected capacity change from 0 to 256
[  188.548652][ T9238] exfat: Deprecated parameter 'utf8'
[  188.558651][ T9238] exfat: Deprecated parameter 'utf8'
[  188.563954][ T9238] exfat: Deprecated parameter 'utf8'
[  188.565754][ T9238] exfat: Deprecated parameter 'utf8'
[  188.571849][ T9238] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d)
[  188.718213][ T9248] loop3: detected capacity change from 0 to 2048
[  188.726541][ T9248] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.914317][  T793] IPVS: starting estimator thread 0...
[  189.002905][ T9261] IPVS: using max 63 ests per chain, 151200 per kthread
[  189.140688][   T51] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  189.292581][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  189.301247][   T51] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[  189.304179][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.315422][   T51] usb 4-1: config 0 descriptor??
[  189.526752][ T9260] Bluetooth: hci0: unsupported parameter 4096
[  189.529452][ T9260] Bluetooth: hci0: invalid len left 4, exp >= 243
[  189.536308][   T51] usbhid 4-1:0.0: can't add hid device: -71
[  189.538386][   T51] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  189.543290][   T51] usb 4-1: USB disconnect, device number 12
[  189.926439][ T9285] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1311'.
[  190.085945][ T9292] loop3: detected capacity change from 0 to 2048
[  190.095748][ T9292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  190.246675][ T9298] loop1: detected capacity change from 0 to 512
[  190.260274][ T9300] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  190.265453][ T9298] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1317: casefold flag without casefold feature
[  190.279520][ T9298] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1317: couldn't read orphan inode 15 (err -117)
[  190.286053][ T9298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.321144][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.434239][ T9308] loop3: detected capacity change from 0 to 256
[  190.456222][ T9308] FAT-fs (loop3): Directory bread(block 64) failed
[  190.458780][ T9308] FAT-fs (loop3): Directory bread(block 65) failed
[  190.470888][ T9308] FAT-fs (loop3): Directory bread(block 66) failed
[  190.474134][ T9308] FAT-fs (loop3): Directory bread(block 67) failed
[  190.477532][ T9308] FAT-fs (loop3): Directory bread(block 68) failed
[  190.480204][ T9308] FAT-fs (loop3): Directory bread(block 69) failed
[  190.485032][ T9308] FAT-fs (loop3): Directory bread(block 70) failed
[  190.488873][ T9308] FAT-fs (loop3): Directory bread(block 71) failed
[  190.496649][ T9308] FAT-fs (loop3): Directory bread(block 72) failed
[  190.499342][ T9308] FAT-fs (loop3): Directory bread(block 73) failed
[  190.646612][ T9318] loop3: detected capacity change from 0 to 4096
[  190.871215][ T5913] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  190.986602][ T5857] Bluetooth: hci2: command 0x0406 tx timeout
[  190.989116][ T5857] Bluetooth: hci1: command 0x0406 tx timeout
[  191.050302][ T9339] loop2: detected capacity change from 0 to 1024
[  191.055072][ T5913] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[  191.058473][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.070136][ T9339] EXT4-fs (loop2): Test dummy encryption mode enabled
[  191.076380][ T5913] usb 2-1: config 0 descriptor??
[  191.080621][ T5913] usb 2-1: selecting invalid altsetting 1
[  191.094221][ T5913] flexcop_usb: set interface failed.
[  191.096513][ T5913] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22
[  191.103429][ T9339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.237719][ T9339] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  191.273312][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.303453][ T5899] usb 2-1: USB disconnect, device number 18
[  191.545978][ T9372] netlink: 'syz.2.1349': attribute type 5 has an invalid length.
[  191.559013][ T9374] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  191.664009][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'.
[  191.670912][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'.
[  191.686270][ T9379] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  192.112239][ T9387] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  192.693449][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.785484][ T9395] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  192.956583][ T9405] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2
[  192.996086][   T33] audit: type=1326 audit(1755247600.857:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.1.1365" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac438ebe9 code=0x0
[  193.339056][ T9436] tipc: Can't bind to reserved service type 2
[  193.447763][ T5853] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4
[  193.453625][ T5853] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2
[  193.456934][ T5853] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3
[  193.472763][ T5853] hid-generic 0000:3000000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [sy] on syz0
[  193.562962][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'.
[  193.567459][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'.
[  193.684637][ T9454] netlink: 'syz.2.1381': attribute type 12 has an invalid length.
[  193.839815][ T9458] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1380'.
[  193.845340][ T9458] mmap: syz.3.1380 (9458) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  194.025477][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.030145][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.128366][ T9463] loop1: detected capacity change from 0 to 256
[  194.429459][ T9469] loop2: detected capacity change from 0 to 32768
[  194.433571][ T9469] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1387 (9469)
[  194.551758][ T9469] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  194.555333][ T9469] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  194.568909][ T9469] BTRFS info (device loop2): using free-space-tree
[  194.695264][ T9469] BTRFS info (device loop2 state M): resize thread pool 5 -> 4
[  194.707103][ T9469] BTRFS info (device loop2 state M): use  compression, level 0
[  194.769154][ T5849] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  195.078274][ T9505] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  195.366710][ T9514] overlayfs: missing 'lowerdir'
[  195.901846][ T9529] netlink: 'syz.1.1406': attribute type 3 has an invalid length.
[  196.053970][ T9531] PKCS7: Unknown OID: [4] 5.25.373.87(bad)
[  196.071729][ T9531] PKCS7: Only support pkcs7_signedData type
[  196.586612][ T9540] loop2: detected capacity change from 0 to 4096
[  196.665533][ T9545] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.085769][ T9557] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  197.134431][ T9544] loop1: detected capacity change from 0 to 40427
[  197.138084][ T9544] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  197.141363][ T9544] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  197.146592][ T9544] F2FS-fs (loop1): invalid crc value
[  197.184397][ T9544] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  197.201472][ T9544] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  197.204011][ T9544] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  197.268765][ T9567] loop3: detected capacity change from 0 to 64
[  197.282720][   T51] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  197.434827][   T51] usb 3-1: unable to get BOS descriptor or descriptor too short
[  197.442773][   T51] usb 3-1: not running at top speed; connect to a high speed hub
[  197.451797][   T51] usb 3-1: config 8 has an invalid interface number: 24 but max is 0
[  197.455434][   T51] usb 3-1: config 8 has no interface number 0
[  197.457519][   T51] usb 3-1: config 8 interface 24 has no altsetting 0
[  197.464369][   T51] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  197.467445][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.471968][   T51] usb 3-1: Product: syz
[  197.473429][   T51] usb 3-1: Manufacturer: syz
[  197.475011][   T51] usb 3-1: SerialNumber: syz
[  197.706037][   T51] vmk80xx 3-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  197.722810][   T51] usb 3-1: USB disconnect, device number 17
[  197.810853][ T9580] loop3: detected capacity change from 0 to 512
[  197.833225][ T9580] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1428: bg 0: block 5: invalid block bitmap
[  197.853104][ T9580] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  197.858542][ T9580] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1428: invalid indirect mapped block 3 (level 2)
[  197.868251][ T9580] EXT4-fs (loop3): 1 orphan inode deleted
[  197.870545][ T9580] EXT4-fs (loop3): 1 truncate cleaned up
[  197.875918][ T9580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.914525][ T6136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.971739][ T9577] loop1: detected capacity change from 0 to 32768
[  198.241987][ T5853] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  198.335476][ T9598] overlayfs: missing 'workdir'
[  198.394721][ T9600] loop2: detected capacity change from 0 to 4096
[  198.405365][ T5853] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  198.413887][ T5853] usb 4-1: config 1 interface 0 has no altsetting 0
[  198.423982][ T5853] usb 4-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40
[  198.426864][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.429429][ T5853] usb 4-1: Product: syz
[  198.430752][ T5853] usb 4-1: Manufacturer: syz
[  198.437945][ T5853] usb 4-1: SerialNumber: syz
[  198.487615][   T33] audit: type=1800 audit(1755247606.347:15): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1436" name="file1" dev="loop2" ino=30 res=0 errno=0
[  198.490665][ T9600] ntfs3(loop2): ino=1e, "file1" attr_set_size
[  198.503022][   T33] audit: type=1800 audit(1755247606.347:16): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1436" name="file1" dev="loop2" ino=30 res=0 errno=0
[  198.595595][ T9610] loop2: detected capacity change from 0 to 256
[  198.611033][ T9610] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  198.651151][ T5853] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input14
[  198.668707][ T5280] bcm5974 4-1:1.0: could not read from device
[  198.676254][ T5280] bcm5974 4-1:1.0: could not read from device
[  198.681477][ T5853] usb 4-1: USB disconnect, device number 13
[  198.779711][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1445'.
[  198.795383][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1445'.
[  198.876879][ T9622] loop1: detected capacity change from 0 to 1024
[  198.893602][ T9622] hfsplus: failed to load root directory
[  199.075095][ T9624] loop2: detected capacity change from 0 to 32768
[  199.100134][ T9624] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  199.145143][ T9624] XFS (loop2): Ending clean mount
[  199.152419][ T9624] XFS (loop2): Quotacheck needed: Please wait.
[  199.220736][ T9642] loop3: detected capacity change from 0 to 16
[  199.226581][ T9642] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  199.248360][ T9624] XFS (loop2): Quotacheck: Done.
[  199.286466][ T5849] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  199.653703][ T9654] loop3: detected capacity change from 0 to 1024
[  199.654783][ T9652] use of bytesused == 0 is deprecated and will be removed in the future,
[  199.664480][ T9652] use the actual size instead.
[  199.713577][ T4075] hfsplus: b-tree write err: -5, ino 4
[  199.774379][ T9658] 8021q: VLANs not supported on lo
[  200.038111][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'.
[  200.211453][ T9676] loop1: detected capacity change from 0 to 512
[  200.220685][ T9676] EXT4-fs (loop1): orphan cleanup on readonly fs
[  200.224883][ T9676] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1468: bad orphan inode 13
[  200.228496][ T9676] ext4_test_bit(bit=12, block=18) = 1
[  200.230410][ T9676] is_bad_inode(inode)=0
[  200.231821][ T9676] NEXT_ORPHAN(inode)=2130706432
[  200.233865][ T9676] max_ino=32
[  200.235223][ T9676] i_nlink=1
[  200.238589][ T9676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  200.257405][ T9676] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  200.288838][ T9676] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  200.304966][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.393477][ T5913] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  200.434021][ T5853] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  200.552205][ T5913] usb 3-1: Using ep0 maxpacket: 8
[  200.559008][ T5913] usb 3-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config
[  200.563984][ T5913] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  200.568981][ T5913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  200.577289][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.583657][ T5853] usb 4-1: Using ep0 maxpacket: 8
[  200.596767][ T5853] usb 4-1: config 0 has an invalid interface number: 148 but max is 0
[  200.600122][ T5853] usb 4-1: config 0 has no interface number 0
[  200.606719][ T5913] usbtmc 3-1:16.0: bulk endpoints not found
[  200.615889][ T5853] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36
[  200.619573][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.624272][ T5853] usb 4-1: Product: syz
[  200.625651][ T5853] usb 4-1: Manufacturer: syz
[  200.627138][ T5853] usb 4-1: SerialNumber: syz
[  200.630595][ T5853] usb 4-1: config 0 descriptor??
[  200.637481][ T5853] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected
[  200.655045][ T5853] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  200.938743][ T5853] usb 4-1: USB disconnect, device number 14
[  200.959488][ T5853] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  200.965113][ T5853] kobil_sct 4-1:0.148: device disconnected
[  201.367523][ T9686] loop1: detected capacity change from 0 to 256
[  201.487170][ T9690] loop1: detected capacity change from 0 to 64
[  201.675796][ T5848] Bluetooth: hci1: unexpected event for opcode 0x0c13
[  201.680264][ T9704] loop1: detected capacity change from 0 to 512
[  201.685896][ T9704] EXT4-fs: Ignoring removed nobh option
[  201.693087][ T9704] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  201.698045][ T9704] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  201.705204][ T9704] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.1480: casefold flag without casefold feature
[  201.713382][ T9704] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1480: couldn't read orphan inode 13 (err -117)
[  201.723434][ T9704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.774434][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.296852][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1488'.
[  202.300546][ T9722] tipc: Started in network mode
[  202.303023][ T9722] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711
[  202.306734][ T9722] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  202.593997][ T9731] netlink: 'syz.1.1490': attribute type 1 has an invalid length.
[  202.597301][ T9731] netlink: 'syz.1.1490': attribute type 1 has an invalid length.
[  202.693044][ T5853] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  202.725368][   T33] audit: type=1326 audit(1755247610.586:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac438ebe9 code=0x7ff00000
[  202.743162][   T33] audit: type=1326 audit(1755247610.596:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac438ebe9 code=0x7ff00000
[  202.751790][   T33] audit: type=1326 audit(1755247610.596:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac438ebe9 code=0x7ff00000
[  202.762806][   T33] audit: type=1326 audit(1755247610.596:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac438ebe9 code=0x7ff00000
[  202.772630][   T33] audit: type=1326 audit(1755247610.596:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac438ebe9 code=0x7ff00000
[  202.781214][   T33] audit: type=1326 audit(1755247610.596:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac438ebe9 code=0x7ff00000
[  202.790425][   T33] audit: type=1326 audit(1755247610.596:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac438ebe9 code=0x7ff00000
[  202.799596][   T33] audit: type=1326 audit(1755247610.596:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.1.1493" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac438ebe9 code=0x7ff00000
[  202.843622][ T5853] usb 4-1: Using ep0 maxpacket: 32
[  202.847228][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  202.854901][ T5853] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  202.858770][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.862002][ T5853] usb 4-1: Product: syz
[  202.864646][ T5853] usb 4-1: Manufacturer: syz
[  202.866656][ T5853] usb 4-1: SerialNumber: syz
[  202.872860][ T5853] usb 4-1: config 0 descriptor??
[  202.895056][   T51] usb 3-1: USB disconnect, device number 18
[  202.908542][ T5853] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  203.082553][   T12] usb 4-1: Failed to submit usb control message: -71
[  203.085528][   T12] usb 4-1: unable to send the bmi data to the device: -71
[  203.087994][   T12] usb 4-1: unable to get target info from device
[  203.090085][   T12] usb 4-1: could not get target info (-71)
[  203.094485][ T5853] usb 4-1: USB disconnect, device number 15
[  203.102384][   T12] usb 4-1: could not probe fw (-71)
[  203.173077][ T9746] loop1: detected capacity change from 0 to 32768
[  203.206746][ T9746] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  203.250006][ T9746] (syz.1.1496,9746,0):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume.
[  203.254397][ T9746] (syz.1.1496,9746,0):ocfs2_group_add:511 ERROR: status = -22
[  203.267474][ T9742] loop2: detected capacity change from 0 to 40427
[  203.292158][ T9742] F2FS-fs (loop2): invalid crc value
[  203.314084][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  203.397169][ T9742] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  203.401378][ T9742] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  203.437690][ T5849] syz-executor: attempt to access beyond end of device
[  203.437690][ T5849] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.444483][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  203.444499][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  203.444505][ T5849] Call Trace:
[  203.444509][ T5849]  <TASK>
[  203.444514][ T5849]  dump_stack_lvl+0x189/0x250
[  203.444531][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.444540][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[  203.444550][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  203.444561][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  203.444577][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[  203.444594][ T5849]  f2fs_write_end_io+0x886/0xb60
[  203.444612][ T5849]  __submit_merged_bio+0x27a/0x6a0
[  203.444626][ T5849]  __submit_merged_write_cond+0x255/0x530
[  203.444641][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[  203.444678][ T5849]  ? __lock_acquire+0xab9/0xd20
[  203.444708][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.444742][ T5849]  ? __mod_zone_page_state+0xd7/0x140
[  203.444759][ T5849]  ? folios_put_refs+0x560/0x640
[  203.444776][ T5849]  ? __lock_acquire+0xab9/0xd20
[  203.444791][ T5849]  ? do_raw_spin_lock+0x121/0x290
[  203.444807][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  203.444817][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.444828][ T5849]  do_writepages+0x32e/0x550
[  203.444846][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  203.444857][ T5849]  filemap_fdatawrite+0x199/0x240
[  203.444869][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  203.444906][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  203.444918][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[  203.444935][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[  203.444956][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  203.444990][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[  203.445001][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[  203.445013][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[  203.445019][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[  203.445034][ T5849]  ? shrinker_free+0x2ce/0x3e0
[  203.445045][ T5849]  deactivate_locked_super+0xbc/0x130
[  203.445055][ T5849]  cleanup_mnt+0x425/0x4c0
[  203.445065][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.445078][ T5849]  task_work_run+0x1d4/0x260
[  203.445091][ T5849]  ? __pfx_task_work_run+0x10/0x10
[  203.445100][ T5849]  ? __x64_sys_umount+0x122/0x160
[  203.445113][ T5849]  ? exit_to_user_mode_loop+0x40/0x110
[  203.445127][ T5849]  exit_to_user_mode_loop+0xec/0x110
[  203.445138][ T5849]  do_syscall_64+0x2bd/0x3b0
[  203.445149][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.445158][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.445166][ T5849]  ? exc_page_fault+0x9f/0xf0
[  203.445177][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.445185][ T5849] RIP: 0033:0x7f9ab878ff17
[  203.445194][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  203.445202][ T5849] RSP: 002b:00007ffff5931828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  203.445211][ T5849] RAX: 0000000000000000 RBX: 00007f9ab8811c05 RCX: 00007f9ab878ff17
[  203.445217][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff59318e0
[  203.445222][ T5849] RBP: 00007ffff59318e0 R08: 0000000000000000 R09: 0000000000000000
[  203.445227][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffff5932970
[  203.445232][ T5849] R13: 00007f9ab8811c05 R14: 0000000000031a2f R15: 00007ffff59329b0
[  203.445247][ T5849]  </TASK>
[  203.445251][ T5849] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  203.845706][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'.
[  203.849799][ T9764] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1498'.
[  204.031832][ T9771] loop1: detected capacity change from 0 to 2048
[  204.038057][ T9771] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  204.058187][ T9771] syz.1.1504: attempt to access beyond end of device
[  204.058187][ T9771] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  204.064388][ T9772] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.214988][ T9767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.552657][ T9782] loop1: detected capacity change from 0 to 40427
[  204.558179][ T9782] F2FS-fs (loop1): Image doesn't support compression
[  204.560775][ T9782] F2FS-fs (loop1): build fault injection rate: 690
[  204.568184][ T9782] F2FS-fs (loop1): invalid crc value
[  204.638003][ T9782] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  204.642653][ T9782] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  204.661908][   T33] kauditd_printk_skb: 153 callbacks suppressed
[  204.661923][   T33] audit: type=1800 audit(1755247612.516:178): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1509" name="file1" dev="loop1" ino=10 res=0 errno=0
[  204.719029][ T9782] syz.1.1509: attempt to access beyond end of device
[  204.719029][ T9782] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  204.781562][ T5845] syz-executor: attempt to access beyond end of device
[  204.781562][ T5845] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  204.791646][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  204.791667][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.791675][ T5845] Call Trace:
[  204.791681][ T5845]  <TASK>
[  204.791688][ T5845]  dump_stack_lvl+0x189/0x250
[  204.791713][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.791729][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  204.791742][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  204.791760][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  204.791787][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  204.791812][ T5845]  f2fs_write_end_io+0x886/0xb60
[  204.791840][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  204.791865][ T5845]  __submit_merged_write_cond+0x255/0x530
[  204.791889][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  204.791938][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  204.791994][ T5845]  ? __mod_zone_page_state+0xd7/0x140
[  204.792022][ T5845]  ? folios_put_refs+0x560/0x640
[  204.792047][ T5845]  ? __pfx_folios_put_refs+0x10/0x10
[  204.792059][ T5845]  ? rcu_is_watching+0x15/0xb0
[  204.792081][ T5845]  ? __lock_acquire+0xab9/0xd20
[  204.792116][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  204.792135][ T5845]  do_writepages+0x32e/0x550
[  204.792163][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  204.792204][ T5845]  filemap_fdatawrite+0x199/0x240
[  204.792223][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  204.792281][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  204.792300][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  204.792327][ T5845]  f2fs_write_checkpoint+0x95a/0x1df0
[  204.792360][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  204.792431][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[  204.792452][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[  204.792470][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  204.792481][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[  204.792505][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  204.792546][ T5845]  deactivate_locked_super+0xbc/0x130
[  204.792567][ T5845]  cleanup_mnt+0x425/0x4c0
[  204.792587][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.792607][ T5845]  task_work_run+0x1d4/0x260
[  204.792628][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  204.792643][ T5845]  ? __x64_sys_umount+0x122/0x160
[  204.792665][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[  204.792686][ T5845]  exit_to_user_mode_loop+0xec/0x110
[  204.792704][ T5845]  do_syscall_64+0x2bd/0x3b0
[  204.792720][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.792736][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.792749][ T5845]  ? exc_page_fault+0x9f/0xf0
[  204.792767][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.792779][ T5845] RIP: 0033:0x7f8ac438ff17
[  204.792791][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  204.792802][ T5845] RSP: 002b:00007ffd55483b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  204.792817][ T5845] RAX: 0000000000000000 RBX: 00007f8ac4411c05 RCX: 00007f8ac438ff17
[  204.792824][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd55483c00
[  204.792832][ T5845] RBP: 00007ffd55483c00 R08: 0000000000000000 R09: 0000000000000000
[  204.792839][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd55484c90
[  204.792847][ T5845] R13: 00007f8ac4411c05 R14: 0000000000031f63 R15: 00007ffd55484cd0
[  204.792871][ T5845]  </TASK>
[  204.918183][ T9795] loop2: detected capacity change from 0 to 256
[  204.925246][ T9795] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[  205.085197][ T5845] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  205.223736][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'.
[  205.874282][ T9832] 9pnet_virtio: no channels available for device syz
[  206.107335][ T9840] loop1: detected capacity change from 0 to 4096
[  206.118275][ T9840] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  206.144372][ T9840] ntfs3(loop1): ino=1a, mi_enum_attr
[  206.152989][ T9840] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  206.222195][   T53] ntfs3(loop1): ino=1e, ntfs3_write_inode failed, -22.
[  206.548711][ T9860] loop1: detected capacity change from 0 to 512
[  206.570636][ T9860] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1544: bg 0: block 5: invalid block bitmap
[  206.583565][ T9860] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  206.593394][ T9860] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1544: invalid indirect mapped block 3 (level 2)
[  206.610649][ T9860] EXT4-fs (loop1): 2 truncates cleaned up
[  206.618026][ T9860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.634087][   T51] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  206.676440][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.789094][   T51] usb 4-1: config 0 has an invalid interface number: 25 but max is 0
[  206.792367][   T51] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.797367][   T51] usb 4-1: config 0 has no interface number 0
[  206.807041][   T51] usb 4-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  206.812542][   T51] usb 4-1: config 0 interface 25 has no altsetting 0
[  206.818440][   T51] usb 4-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee
[  206.821263][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.824424][   T51] usb 4-1: Product: syz
[  206.825784][   T51] usb 4-1: Manufacturer: syz
[  206.827450][   T51] usb 4-1: SerialNumber: syz
[  206.835475][   T51] usb 4-1: config 0 descriptor??
[  206.892972][ T5899] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  207.042859][   T51] usb 4-1: Found UVC 0.00 device syz (1b3b:2951)
[  207.044933][   T51] usb 4-1: No valid video chain found.
[  207.054113][ T5899] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  207.057074][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.059548][ T5899] usb 3-1: Product: syz
[  207.062108][   T51] usb 4-1: USB disconnect, device number 16
[  207.074097][ T5899] usb 3-1: Manufacturer: syz
[  207.076812][ T5899] usb 3-1: SerialNumber: syz
[  207.085100][ T5899] usb 3-1: config 0 descriptor??
[  207.101193][ T5899] gspca_main: sunplus-2.14.0 probing 055f:c230
[  207.779769][ T9877] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  207.820507][ T9874] bridge_slave_0: left allmulticast mode
[  207.825462][ T9874] bridge_slave_0: left promiscuous mode
[  207.828538][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.848730][ T9874] bridge_slave_1: left allmulticast mode
[  207.851086][ T9874] bridge_slave_1: left promiscuous mode
[  207.855055][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.877113][ T9874] bond0: (slave bond_slave_0): Releasing backup interface
[  207.897427][ T9874] bond0: (slave bond_slave_1): Releasing backup interface
[  207.921740][ T9874] team0: Port device team_slave_0 removed
[  207.938690][ T9874] team0: Port device team_slave_1 removed
[  208.096516][ T9886] loop3: detected capacity change from 0 to 512
[  208.101214][ T9886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  208.115873][ T9886] EXT4-fs (loop3): 1 truncate cleaned up
[  208.119798][ T9886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.157536][ T6136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.333549][ T5961] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  208.483059][ T5961] usb 2-1: Using ep0 maxpacket: 16
[  208.490724][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.499924][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.506299][ T5961] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  208.512039][ T5961] usb 2-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8
[  208.515817][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.521808][ T5961] usb 2-1: config 0 descriptor??
[  208.525000][ T9901] affs: No valid root block on device nullb0
[  208.640146][ T9903] loop3: detected capacity change from 0 to 1024
[  208.664423][ T9903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.668159][ T9903] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.708289][ T6136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.721933][ T5899] gspca_sunplus: reg_r err -71
[  208.725296][ T5899] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  208.737067][ T5899] usb 3-1: USB disconnect, device number 19
[  208.940229][ T5961] hid-generic 0003:045E:FC40.000A: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.1-1/input0
[  209.073265][  T793] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  209.138834][ T5899] usb 2-1: USB disconnect, device number 19
[  209.223296][  T793] usb 4-1: Using ep0 maxpacket: 16
[  209.226603][  T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.233055][  T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.236483][  T793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  209.240553][  T793] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  209.243617][  T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.248428][  T793] usb 4-1: config 0 descriptor??
[  209.452036][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'.
[  209.677910][  T793] microsoft 0003:045E:07DA.000B: unbalanced delimiter at end of report description
[  209.681965][  T793] microsoft 0003:045E:07DA.000B: parse failed
[  209.684990][  T793] microsoft 0003:045E:07DA.000B: probe with driver microsoft failed with error -22
[  209.792903][ T9937] loop1: detected capacity change from 0 to 512
[  209.822004][ T9937] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  209.851785][ T9937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  209.861158][ T9937] EXT4-fs (loop1): orphan cleanup on readonly fs
[  209.867249][ T9937] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1576: bg 0: block 361: padding at end of block bitmap is not set
[  209.875400][ T5899] usb 4-1: USB disconnect, device number 17
[  209.888085][ T9937] EXT4-fs (loop1): Remounting filesystem read-only
[  209.898736][ T9937] EXT4-fs (loop1): 1 truncate cleaned up
[  209.906910][ T9937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  210.256082][ T9948] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1576: dx entry: limit 0 != root limit 125
[  210.260869][ T9948] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1576: Corrupt directory, running e2fsck is recommended
[  210.272579][ T9948] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1576: dx entry: limit 0 != root limit 125
[  210.277273][ T9948] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1576: Corrupt directory, running e2fsck is recommended
[  210.285514][ T9948] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1576: dx entry: limit 0 != root limit 125
[  210.289194][ T9948] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1576: Corrupt directory, running e2fsck is recommended
[  210.295682][ T9948] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1576: dx entry: limit 0 != root limit 125
[  210.299310][ T9948] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1576: Corrupt directory, running e2fsck is recommended
[  210.473770][ T5961] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  210.645956][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  210.656382][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.680162][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  210.691030][ T5961] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  210.696288][ T5961] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  210.703900][ T5961] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  210.708672][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.713052][ T5961] usb 3-1: Product: syz
[  210.715913][ T5961] usb 3-1: Manufacturer: syz
[  210.717720][ T5961] usb 3-1: SerialNumber: syz
[  210.728188][ T5961] usb 3-1: config 0 descriptor??
[  210.735006][ T5961] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  210.945573][ T5913] usb 3-1: USB disconnect, device number 20
[  211.073779][ T5961] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  211.233269][ T5961] usb 4-1: Using ep0 maxpacket: 8
[  211.236893][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.240482][ T5961] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  211.245390][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  211.249294][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  211.252385][ T5961] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7
[  211.255706][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.260181][ T5961] usb 4-1: config 0 descriptor??
[  211.264574][ T5961] metro_usb 4-1:0.0: Metrologic USB to Serial converter detected
[  211.269492][ T5961] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  211.467241][ T5961] usb 4-1: USB disconnect, device number 18
[  211.480045][ T5961] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  211.484514][ T5961] metro_usb 4-1:0.0: device disconnected
[  211.634562][ T9971] loop2: detected capacity change from 0 to 32768
[  211.649384][ T9971] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  211.688511][   T33] audit: type=1804 audit(1755247619.545:179): pid=9971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1591" name="/newroot/495/file1/bus" dev="loop2" ino=17058 res=1 errno=0
[  211.706658][   T33] audit: type=1800 audit(1755247619.565:180): pid=9971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1591" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  211.717283][   T33] audit: type=1804 audit(1755247619.575:181): pid=9971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1591" name="/newroot/495/file1/bus" dev="loop2" ino=17058 res=1 errno=0
[  211.740792][ T9971] 
[  211.741628][ T9971] ======================================================
[  211.743818][ T9971] WARNING: possible circular locking dependency detected
[  211.746132][ T9971] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  211.748993][ T9971] ------------------------------------------------------
[  211.752278][ T9971] syz.2.1591/9971 is trying to acquire lock:
[  211.754147][ T9971] ffff8881259931e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320
[  211.757716][ T9971] 
[  211.757716][ T9971] but task is already holding lock:
[  211.759993][ T9971] ffff888125993278 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  211.763134][ T9971] 
[  211.763134][ T9971] which lock already depends on the new lock.
[  211.763134][ T9971] 
[  211.766823][ T9971] 
[  211.766823][ T9971] the existing dependency chain (in reverse order) is:
[  211.770114][ T9971] 
[  211.770114][ T9971] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  211.773224][ T9971]        lock_acquire+0x120/0x360
[  211.774956][ T9971]        down_read+0x46/0x2e0
[  211.776765][ T9971]        ocfs2_init_acl+0x2f9/0x720
[  211.778562][ T9971]        ocfs2_mknod+0x1321/0x2050
[  211.780383][ T9971]        ocfs2_create+0x1a5/0x440
[  211.782060][ T9971]        path_openat+0x14f4/0x3830
[  211.784107][ T9971]        do_filp_open+0x1fa/0x410
[  211.786019][ T9971]        do_sys_openat2+0x121/0x1c0
[  211.787736][ T9971]        __x64_sys_openat+0x138/0x170
[  211.789629][ T9971]        do_syscall_64+0xfa/0x3b0
[  211.791497][ T9971]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.793674][ T9971] 
[  211.793674][ T9971] -> #3 (jbd2_handle){++++}-{0:0}:
[  211.796005][ T9971]        lock_acquire+0x120/0x360
[  211.797599][ T9971]        start_this_handle+0x1fa7/0x21c0
[  211.799516][ T9971]        jbd2__journal_start+0x2c1/0x5b0
[  211.801346][ T9971]        jbd2_journal_start+0x2a/0x40
[  211.803252][ T9971]        ocfs2_start_trans+0x376/0x6d0
[  211.805069][ T9971]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  211.807100][ T9971]        ocfs2_dismount_volume+0x201/0x8d0
[  211.809318][ T9971]        generic_shutdown_super+0x135/0x2c0
[  211.811593][ T9971]        kill_block_super+0x44/0x90
[  211.813390][ T9971]        deactivate_locked_super+0xbc/0x130
[  211.815644][ T9971]        cleanup_mnt+0x425/0x4c0
[  211.817262][ T9971]        task_work_run+0x1d4/0x260
[  211.819204][ T9971]        exit_to_user_mode_loop+0xec/0x110
[  211.821331][ T9971]        do_syscall_64+0x2bd/0x3b0
[  211.823037][ T9971]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.825163][ T9971] 
[  211.825163][ T9971] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  211.828010][ T9971]        lock_acquire+0x120/0x360
[  211.829617][ T9971]        down_read+0x46/0x2e0
[  211.831255][ T9971]        ocfs2_start_trans+0x36a/0x6d0
[  211.832948][ T9971]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  211.834932][ T9971]        ocfs2_dismount_volume+0x201/0x8d0
[  211.836749][ T9971]        generic_shutdown_super+0x135/0x2c0
[  211.838754][ T9971]        kill_block_super+0x44/0x90
[  211.840657][ T9971]        deactivate_locked_super+0xbc/0x130
[  211.842802][ T9971]        cleanup_mnt+0x425/0x4c0
[  211.844407][ T9971]        task_work_run+0x1d4/0x260
[  211.846067][ T9971]        exit_to_user_mode_loop+0xec/0x110
[  211.847997][ T9971]        do_syscall_64+0x2bd/0x3b0
[  211.849761][ T9971]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.851999][ T9971] 
[  211.851999][ T9971] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  211.854500][ T9971]        lock_acquire+0x120/0x360
[  211.856214][ T9971]        ocfs2_start_trans+0x26b/0x6d0
[  211.858289][ T9971]        ocfs2_write_begin_nolock+0x26ee/0x4340
[  211.860496][ T9971]        ocfs2_write_begin+0x1bb/0x310
[  211.862272][ T9971]        generic_perform_write+0x2c5/0x900
[  211.864248][ T9971]        ocfs2_file_write_iter+0x157a/0x1d10
[  211.866270][ T9971]        vfs_write+0x5c9/0xb30
[  211.868074][ T9971]        ksys_write+0x145/0x250
[  211.869904][ T9971]        do_syscall_64+0xfa/0x3b0
[  211.871640][ T9971]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.873924][ T9971] 
[  211.873924][ T9971] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  211.876962][ T9971]        validate_chain+0xb9b/0x2140
[  211.878627][ T9971]        __lock_acquire+0xab9/0xd20
[  211.880328][ T9971]        lock_acquire+0x120/0x360
[  211.881916][ T9971]        down_write+0x96/0x1f0
[  211.883426][ T9971]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  211.885456][ T9971]        ocfs2_truncate_file+0xda0/0x1420
[  211.887521][ T9971]        ocfs2_setattr+0x1520/0x1b40
[  211.889270][ T9971]        notify_change+0xb36/0xe40
[  211.890834][ T9971]        do_truncate+0x1a4/0x220
[  211.892385][ T9971]        path_openat+0x306c/0x3830
[  211.893997][ T9971]        do_filp_open+0x1fa/0x410
[  211.895744][ T9971]        do_sys_openat2+0x121/0x1c0
[  211.897428][ T9971]        __x64_sys_creat+0x8f/0xc0
[  211.899412][ T9971]        do_syscall_64+0xfa/0x3b0
[  211.901040][ T9971]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.903279][ T9971] 
[  211.903279][ T9971] other info that might help us debug this:
[  211.903279][ T9971] 
[  211.906434][ T9971] Chain exists of:
[  211.906434][ T9971]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  211.906434][ T9971] 
[  211.910786][ T9971]  Possible unsafe locking scenario:
[  211.910786][ T9971] 
[  211.913149][ T9971]        CPU0                    CPU1
[  211.915192][ T9971]        ----                    ----
[  211.916926][ T9971]   lock(&oi->ip_xattr_sem);
[  211.918426][ T9971]                                lock(jbd2_handle);
[  211.920585][ T9971]                                lock(&oi->ip_xattr_sem);
[  211.922772][ T9971]   lock(&ocfs2_file_ip_alloc_sem_key);
[  211.924533][ T9971] 
[  211.924533][ T9971]  *** DEADLOCK ***
[  211.924533][ T9971] 
[  211.927022][ T9971] 3 locks held by syz.2.1591/9971:
[  211.928736][ T9971]  #0: ffff8880321f4428 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  211.932157][ T9971]  #1: ffff888125993540 (&sb->s_type->i_mutex_key#30){+.+.}-{4:4}, at: do_truncate+0x171/0x220
[  211.936148][ T9971]  #2: ffff888125993278 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  211.940449][ T9971] 
[  211.940449][ T9971] stack backtrace:
[  211.942706][ T9971] CPU: 0 UID: 0 PID: 9971 Comm: syz.2.1591 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  211.942726][ T9971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  211.942737][ T9971] Call Trace:
[  211.942744][ T9971]  <TASK>
[  211.942753][ T9971]  dump_stack_lvl+0x189/0x250
[  211.942776][ T9971]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.942791][ T9971]  ? __pfx__printk+0x10/0x10
[  211.942809][ T9971]  ? print_lock_name+0xde/0x100
[  211.942828][ T9971]  print_circular_bug+0x2ee/0x310
[  211.942845][ T9971]  check_noncircular+0x134/0x160
[  211.942860][ T9971]  validate_chain+0xb9b/0x2140
[  211.942911][ T9971]  __lock_acquire+0xab9/0xd20
[  211.942931][ T9971]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  211.942947][ T9971]  lock_acquire+0x120/0x360
[  211.942967][ T9971]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  211.942987][ T9971]  down_write+0x96/0x1f0
[  211.943000][ T9971]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  211.943017][ T9971]  ? __pfx_down_write+0x10/0x10
[  211.943043][ T9971]  ocfs2_try_remove_refcount_tree+0xb6/0x320
[  211.943059][ T9971]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  211.943072][ T9971]  ? up_write+0x1c4/0x420
[  211.943088][ T9971]  ocfs2_truncate_file+0xda0/0x1420
[  211.943111][ T9971]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  211.943129][ T9971]  ? do_raw_spin_unlock+0x4d/0x240
[  211.943146][ T9971]  ? _raw_spin_unlock+0x28/0x50
[  211.943169][ T9971]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  211.943184][ T9971]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  211.943196][ T9971]  ? ocfs2_rw_lock+0x13a/0x240
[  211.943210][ T9971]  ? __pfx___dquot_initialize+0x10/0x10
[  211.943232][ T9971]  ? __pfx_ocfs2_rw_lock+0x10/0x10
[  211.943244][ T9971]  ? setattr_prepare+0x1e7/0xac0
[  211.943264][ T9971]  ? inode_newsize_ok+0x11b/0x1c0
[  211.943283][ T9971]  ocfs2_setattr+0x1520/0x1b40
[  211.943306][ T9971]  ? __pfx_ocfs2_setattr+0x10/0x10
[  211.943322][ T9971]  ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0
[  211.943340][ T9971]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  211.943360][ T9971]  ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0
[  211.943378][ T9971]  ? current_time+0x222/0x370
[  211.943391][ T9971]  ? evm_inode_setattr+0x1b6/0x7d0
[  211.943408][ T9971]  ? __pfx_current_time+0x10/0x10
[  211.943423][ T9971]  ? try_break_deleg+0x79/0x130
[  211.943437][ T9971]  ? __pfx_ocfs2_setattr+0x10/0x10
[  211.943452][ T9971]  notify_change+0xb36/0xe40
[  211.943471][ T9971]  do_truncate+0x1a4/0x220
[  211.943489][ T9971]  ? __pfx_do_truncate+0x10/0x10
[  211.943505][ T9971]  ? apparmor_file_truncate+0x23e/0x2d0
[  211.943531][ T9971]  path_openat+0x306c/0x3830
[  211.943547][ T9971]  ? arch_stack_walk+0xfc/0x150
[  211.943565][ T9971]  ? stack_depot_save_flags+0x40/0x860
[  211.943588][ T9971]  ? __pfx_path_openat+0x10/0x10
[  211.943603][ T9971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.943628][ T9971]  do_filp_open+0x1fa/0x410
[  211.943645][ T9971]  ? __lock_acquire+0xab9/0xd20
[  211.943665][ T9971]  ? __pfx_do_filp_open+0x10/0x10
[  211.943688][ T9971]  ? _raw_spin_unlock+0x28/0x50
[  211.943698][ T9971]  ? alloc_fd+0x64c/0x6c0
[  211.943720][ T9971]  do_sys_openat2+0x121/0x1c0
[  211.943734][ T9971]  ? __se_sys_futex+0x36f/0x400
[  211.943749][ T9971]  ? __pfx_do_sys_openat2+0x10/0x10
[  211.943765][ T9971]  ? __pfx___se_sys_futex+0x10/0x10
[  211.943782][ T9971]  ? rcu_is_watching+0x15/0xb0
[  211.943797][ T9971]  __x64_sys_creat+0x8f/0xc0
[  211.943813][ T9971]  do_syscall_64+0xfa/0x3b0
[  211.943826][ T9971]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.943842][ T9971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.943855][ T9971]  ? exc_page_fault+0x9f/0xf0
[  211.943900][ T9971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.943919][ T9971] RIP: 0033:0x7f9ab878ebe9
[  211.943932][ T9971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.943945][ T9971] RSP: 002b:00007f9ab9649038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  211.943960][ T9971] RAX: ffffffffffffffda RBX: 00007f9ab89b5fa0 RCX: 00007f9ab878ebe9
[  211.943969][ T9971] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0
[  211.943978][ T9971] RBP: 00007f9ab8811e19 R08: 0000000000000000 R09: 0000000000000000
[  211.943985][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.943993][ T9971] R13: 00007f9ab89b6038 R14: 00007f9ab89b5fa0 R15: 00007ffff5932598
[  211.944011][ T9971]  </TASK>
[  212.099387][    C0] vkms_vblank_simulate: vblank timer overrun
[  212.128211][ T5849] ocfs2: Unmounting device (7,2) on (node local)
[  218.874901][ T1266] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)

VM DIAGNOSIS:
08:43:20  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000274e RDI=000000000000274f RBP=00000000000003f8 RSP=ffffc9000437e850
R8 =ffff888107ba0237 R9 =1ffff11020f74046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98d6 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9ab96496c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9ab87733e0 CR3=0000000124716000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=00ff0000000000ff 000000000000ff00
XMM04=aa00588d6b9fa800 2c30303030303030 XMM05=7cceb42f4608ce21 29d5dc35876c4e95
XMM06=6798d2777bd1f432 c33a445132880016 XMM07=2ec932a059fbe963 59bc6d93101632e4
XMM08=0000000000000000 0000006df451d6fe XMM09=0000000000000000 00007f9ab8812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d841214e0889a100 RBX=ffffffff81968308 RCX=d841214e0889a100 RDX=0000000000000001
RSI=ffffffff8be333e0 RDI=ffffffff81968308 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c298922 CR3=0000000028814000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8ac4587498 00007f8ac4587470 XMM03=00007f8ac45874a8 00007f8ac45874a0
XMM04=00007f8ac50ed100 00007f8ac4587460 XMM05=00007f8ac4587478 00007f8ac45874c0
XMM06=00007f8ac45874b8 00007f8ac45874b0 XMM07=00007f8ac45874a8 00007f8ac45874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f8ac4412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
