last executing test programs:

1m33.642383935s ago: executing program 1 (id=18):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r0, &(0x7f0000000f40)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)

1m33.64211621s ago: executing program 1 (id=19):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
sendto$inet(r0, &(0x7f0000000080)="a9d85e69d486c0d488fa234e2f27056e5b36eef8cf9a179e648a5e1cc8731f76574839e6182760236a83c5755ddf1fdf1ac67c71bb60780d043351314c644c07388e6c", 0xfffffef8, 0x40000850, 0x0, 0x0)

1m33.593389777s ago: executing program 1 (id=20):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)=""/4078, 0xfee}], 0x1}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4091, 0xffb}, {&(0x7f00000000c0)=""/23, 0x17}], 0x3}, 0x8}], 0x3, 0x2, 0x0)

1m33.592914508s ago: executing program 1 (id=21):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000d40))

1m33.443119797s ago: executing program 1 (id=22):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x4a, {0x2, 0x8000}, 'lo\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

1m30.990652929s ago: executing program 1 (id=34):
r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000480)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x1, 0x8})
io_uring_enter(r0, 0x7aaa, 0xfffffffd, 0x0, 0x0, 0x0)

1m30.859501444s ago: executing program 32 (id=34):
r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000480)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x1, 0x8})
io_uring_enter(r0, 0x7aaa, 0xfffffffd, 0x0, 0x0, 0x0)

29.90234486s ago: executing program 3 (id=601):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000000000000}, 0x1})

29.820316302s ago: executing program 3 (id=602):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x1d, 0x9f2, 0xe7, 0x3, 0x2, 0xb1, 0x8, 0x5, 0x4, 0xe, [0xfffffffe, 0x2, 0x6, 0x3, 0x6, 0x6, 0x200, 0xd]}})

29.818719356s ago: executing program 3 (id=604):
mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1200040, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=local='])

29.758640607s ago: executing program 3 (id=605):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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")
syz_clone(0x801000, &(0x7f0000000180), 0x0, &(0x7f0000000280), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0x0)

29.412764642s ago: executing program 3 (id=609):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)

28.892614319s ago: executing program 3 (id=611):
r0 = socket(0x10, 0x80002, 0x0)
connect$inet6(r0, 0x0, 0x0)

28.819559671s ago: executing program 33 (id=611):
r0 = socket(0x10, 0x80002, 0x0)
connect$inet6(r0, 0x0, 0x0)

5.021509278s ago: executing program 4 (id=807):
syz_usb_connect(0x0, 0xdd5, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038f08e140ac051d92bec2010203010902c30d040306104e0904080605035600a609058203", @ANYRESDEC], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})

3.284003975s ago: executing program 4 (id=812):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x80000)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x5b, 0x18, 0x400, 0x9, "78bd8b56bcd8be08560459e12ae887839fe1bd9db3c9ba870fe6e2563cab1f70"})

3.185930219s ago: executing program 4 (id=815):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x7, 0x8, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0)

1.842715357s ago: executing program 4 (id=835):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x6c}]}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000002b40)={@local, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x9, 0x24, 0x67, 0x0, 0x7, 0x21, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x3, 0x4, "06e265", 0x10, "7558b8"}}}}}}, 0x0)

1.632020805s ago: executing program 4 (id=836):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@nested={0x4c, 0xa6, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @uid}, @nested={0x3d, 0x104, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @ipv4=@multicast1}, @generic="46b0c5ae91adde9aef1b438139fd29468dc7a577ea0369e748c8f0315c37b3891b2e0badeaf4b1d45c99429f962f064b09"]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0x75, 0x0, 0x1, [@nested={0xe9, 0x105, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r0}, @generic="611d480acb000d37a827f3bd511f1241d0de7463603dc133c74c13a987ecdfa6375f877f420dca97716e5ad0c26971782f08a38516551aff2f488d5ee08b97fd99e60aa682b871d0d802b65b73c29657d8ee772fcc1d062c05c01bf9c108f636299719a86973a3f8135d8d0638674c5c98932a58c6d6fb6d0c030301de3fdbf4f38aa87db3eef5398f8501c363e9a2a1ae869d7f987fa6515477d1afdb7e72316bee105886e3f12111669919fbc187b4fbb272046a01b4b216e7eb67c302fcfa8f3095fece7d242141d247d1f609abac6b8ea96892076279f9807d5a52"]}, @nested={0x2c, 0x14c, 0x0, 0x1, [@nested={0x28, 0xe9, 0x0, 0x1, [@nested={0x24, 0x46, 0x0, 0x1, [@nested={0x1d, 0x74, 0x0, 0x1, [@typed={0x14, 0x16, 0x0, 0x0, @ipv6=@mcast1}, @generic="cb79cfe3c7"]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)

1.55093528s ago: executing program 4 (id=837):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
getpid()
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105200, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'batadv_slave_0\x00', @remote})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'ipvlan1\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x400, 0xb, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffdfd, 0x4, 0x40]}})

1.13167779s ago: executing program 2 (id=841):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f000000000008004b001300000208000300000000000800150000000000080001"], 0x38}}, 0x0)

1.072241806s ago: executing program 2 (id=842):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYRES16], 0xd8}, 0x1, 0x0, 0x0, 0x4040880}, 0x24008014)

1.071959544s ago: executing program 2 (id=843):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
kcmp(r1, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)

982.722747ms ago: executing program 2 (id=844):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0)
socket$unix(0x1, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000100000000000000000000008520000004"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0)

894.254987ms ago: executing program 2 (id=845):
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xa, 0x2, 0x0, 0x0, 0x4ffffff)

358.970118ms ago: executing program 0 (id=847):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

230.398963ms ago: executing program 0 (id=848):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)

230.172837ms ago: executing program 0 (id=849):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

152.408723ms ago: executing program 0 (id=850):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002"], 0x50}}, 0x0)

152.175324ms ago: executing program 0 (id=851):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10)
setgroups(0x0, 0x0)
syz_read_part_table(0x5ce, &(0x7f0000000200)="$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")

194.494µs ago: executing program 0 (id=852):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x142942, 0x1a6)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r1, 0x0, 0x0, 0x1001f0)
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x185042, 0x182)
copy_file_range(r2, 0x0, r0, 0x0, 0xfffffbffa003e45c, 0x700000000000000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r3, r4, 0x0, 0xfffe80)

0s ago: executing program 2 (id=853):
syz_usb_connect(0x2, 0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="120120021bd459088904b5e02aae0102030109022600010701e00509040000029722185c090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

precated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.600170][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.662931][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.664783][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.666251][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.678880][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.819864][ T5914] loop0: detected capacity change from 0 to 1024
[   56.881115][ T5914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.005897][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.332491][   T33] audit: type=1326 audit(1755487278.458:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.2.10" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3f6b8ebe9 code=0x0
[   57.421741][ T5937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.478935][ T5937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.757235][ T5943] process 'syz.1.13' launched './file1' with NULL argv: empty string added
[   58.084097][ T5959] loop1: detected capacity change from 0 to 256
[   58.092452][ T5959] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   58.101233][ T5959] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   58.108631][ T5959] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[   58.143848][ T5959] loop1: detected capacity change from 256 to 64
[   58.203166][ T5847] Bluetooth: hci0: command tx timeout
[   58.283410][ T5847] Bluetooth: hci2: command tx timeout
[   58.851122][ T5937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.121685][ T5937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.197800][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.209700][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.225601][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.244572][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.301950][ T5847] Bluetooth: hci0: command tx timeout
[   60.366653][ T5841] Bluetooth: hci2: command tx timeout
[   60.508216][ T5984] loop2: detected capacity change from 0 to 1024
[   60.511718][ T5984] EXT4-fs: Ignoring removed bh option
[   60.514095][ T5984] EXT4-fs: Ignoring removed orlov option
[   60.522272][ T5984] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   60.540940][ T5984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.572404][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.692357][ T5675] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.765533][ T5675] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.836395][ T5675] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.884006][ T5995] loop2: detected capacity change from 0 to 512
[   60.918620][ T5995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   60.926302][ T5675] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.932186][ T5995] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.034577][ T5675] bridge_slave_1: left allmulticast mode
[   61.037958][ T5675] bridge_slave_1: left promiscuous mode
[   61.041058][ T5675] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.060083][ T5675] bridge_slave_0: left allmulticast mode
[   61.065559][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.067274][ T5675] bridge_slave_0: left promiscuous mode
[   61.069392][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.070314][ T5675] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.074182][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.086531][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   61.094542][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.098980][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.215315][   T33] audit: type=1326 audit(1755487282.348:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.0.29" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785ff8ebe9 code=0x7fc00000
[   61.368444][ T5675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.375412][ T5675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.380325][ T5675] bond0 (unregistering): Released all slaves
[   61.433560][ T5904] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   61.601133][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   61.622206][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[   61.627586][ T6017] loop0: detected capacity change from 0 to 256
[   61.636787][ T5904] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   61.640335][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.647005][ T5904] usb 3-1: Product: syz
[   61.648709][ T5904] usb 3-1: Manufacturer: syz
[   61.651714][ T5904] usb 3-1: SerialNumber: syz
[   61.676602][ T6017] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[   61.676761][ T5904] usb 3-1: config 0 descriptor??
[   61.797812][ T6000] chnl_net:caif_netlink_parms(): no params data found
[   61.824746][ T5675] hsr_slave_0: left promiscuous mode
[   61.833471][ T5675] hsr_slave_1: left promiscuous mode
[   61.835708][ T5675] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.838474][ T5675] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.841931][ T5675] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.844792][ T5675] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.854917][ T5675] veth1_macvtap: left promiscuous mode
[   61.856928][ T5675] veth0_macvtap: left promiscuous mode
[   61.858827][ T5675] veth1_vlan: left promiscuous mode
[   61.860894][ T5675] veth0_vlan: left promiscuous mode
[   61.915444][ T5904] usb 3-1: USB disconnect, device number 2
[   61.944613][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   62.154227][ T6032] netlink: 'syz.0.46': attribute type 7 has an invalid length.
[   62.192368][ T5675] team0 (unregistering): Port device team_slave_1 removed
[   62.211520][ T5675] team0 (unregistering): Port device team_slave_0 removed
[   62.373091][ T5841] Bluetooth: hci0: command tx timeout
[   62.418243][ T6032] : entered promiscuous mode
[   62.453337][ T5841] Bluetooth: hci2: command tx timeout
[   62.528653][ T6041] netlink: 56 bytes leftover after parsing attributes in process `syz.0.50'.
[   62.576370][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.579338][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.582322][ T6000] bridge_slave_0: entered allmulticast mode
[   62.602283][ T6000] bridge_slave_0: entered promiscuous mode
[   62.620056][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.631111][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.638464][ T6000] bridge_slave_1: entered allmulticast mode
[   62.642480][ T6000] bridge_slave_1: entered promiscuous mode
[   62.688788][ T6000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.698255][ T6000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.785886][ T6000] team0: Port device team_slave_0 added
[   62.797213][ T6000] team0: Port device team_slave_1 added
[   62.861035][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.864445][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.875231][ T6000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.880265][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.882510][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.894774][ T6000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.966583][ T6000] hsr_slave_0: entered promiscuous mode
[   62.969274][ T6000] hsr_slave_1: entered promiscuous mode
[   63.133603][ T6000] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.141058][ T6000] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.155540][ T6000] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.163403][ T5841] Bluetooth: hci1: command tx timeout
[   63.165239][ T6000] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.169519][ T6067] Bluetooth: Short BCSP packet
[   63.267032][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.286016][ T6000] 8021q: adding VLAN 0 to HW filter on device team0
[   63.295846][ T4149] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.298328][ T4149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.307183][ T4149] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.310080][ T4149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.460525][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.500899][ T6000] veth0_vlan: entered promiscuous mode
[   63.508397][ T6000] veth1_vlan: entered promiscuous mode
[   63.534777][ T6000] veth0_macvtap: entered promiscuous mode
[   63.546559][ T6000] veth1_macvtap: entered promiscuous mode
[   63.570768][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.586064][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.606357][ T5871] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.637630][ T5871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.640878][ T5871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.658235][ T5871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.696967][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.700783][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.755343][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.759017][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.797060][   T33] audit: type=1326 audit(1755487285.788:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785ff8ebe9 code=0x7ffc0000
[   64.805369][   T33] audit: type=1326 audit(1755487285.788:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f785ff8ebe9 code=0x7ffc0000
[   64.813501][   T33] audit: type=1326 audit(1755487285.788:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785ff8ebe9 code=0x7ffc0000
[   64.822149][   T33] audit: type=1326 audit(1755487285.788:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f785ff8ebe9 code=0x7ffc0000
[   64.831598][   T33] audit: type=1326 audit(1755487285.788:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785ff8ebe9 code=0x7ffc0000
[   64.839571][   T33] audit: type=1326 audit(1755487285.788:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f785ff8ebe9 code=0x7ffc0000
[   64.847209][   T33] audit: type=1326 audit(1755487285.788:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785ff8ebe9 code=0x7ffc0000
[   64.855372][   T33] audit: type=1326 audit(1755487285.788:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f785ff8ebe9 code=0x7ffc0000
[   64.862614][   T33] audit: type=1326 audit(1755487285.798:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785ff8ebe9 code=0x7ffc0000
[   64.870515][   T33] audit: type=1326 audit(1755487285.798:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.61" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f785ff8d550 code=0x7ffc0000
[   64.924196][ T2309] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   65.073261][ T2309] usb 1-1: Using ep0 maxpacket: 32
[   65.086234][ T2309] usb 1-1: config 0 has an invalid interface number: 155 but max is 0
[   65.089678][ T2309] usb 1-1: config 0 has no interface number 0
[   65.107238][ T2309] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c
[   65.110981][ T2309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.115070][ T2309] usb 1-1: Product: syz
[   65.116922][ T2309] usb 1-1: Manufacturer: syz
[   65.118790][ T2309] usb 1-1: SerialNumber: syz
[   65.124854][ T2309] usb 1-1: config 0 descriptor??
[   65.153223][ T5999] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   65.243295][ T5841] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   65.243426][ T5846] Bluetooth: hci3: command 0x1003 tx timeout
[   65.245975][ T5847] Bluetooth: hci1: command tx timeout
[   65.331838][ T5999] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[   65.341043][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.349840][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.355636][ T5999] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   65.361169][ T5999] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[   65.366096][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.378539][ T5999] usb 4-1: config 0 descriptor??
[   65.814039][ T5999] kye 0003:0458:0153.0001: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0
[   65.883988][ T5863] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   66.003698][ T5904] usb 4-1: USB disconnect, device number 2
[   66.043342][ T5863] usb 3-1: Using ep0 maxpacket: 32
[   66.051993][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   66.065235][ T5863] usb 3-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=cc.40
[   66.069778][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.074055][ T5863] usb 3-1: Product: syz
[   66.075919][ T5863] usb 3-1: Manufacturer: syz
[   66.077969][ T5863] usb 3-1: SerialNumber: syz
[   66.084601][ T5863] usb 3-1: config 0 descriptor??
[   66.089594][ T5863] gspca_main: pac7311-2.14.0 probing 093a:2603
[   66.497759][ T5863] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[   66.500838][ T5863] pac7311 3-1:0.0: probe with driver pac7311 failed with error -71
[   66.505667][ T5863] usb 3-1: USB disconnect, device number 3
[   66.611352][ T6159] loop3: detected capacity change from 0 to 512
[   66.624853][ T6159] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.68: corrupted in-inode xattr: invalid ea_ino
[   66.630287][ T6159] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.68: couldn't read orphan inode 15 (err -117)
[   66.637300][ T6159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.648029][ T6159] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.68: Directory hole found for htree leaf block 0
[   66.684095][ T6000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.791190][ T6166] netlink: 3176 bytes leftover after parsing attributes in process `syz.3.70'.
[   66.832417][ T6168] capability: warning: `syz.3.71' uses 32-bit capabilities (legacy support in use)
[   67.307713][ T6192] =======================================================
[   67.307713][ T6192] WARNING: The mand mount option has been deprecated and
[   67.307713][ T6192]          and is ignored by this kernel. Remove the mand
[   67.307713][ T6192]          option from the mount to silence this warning.
[   67.307713][ T6192] =======================================================
[   67.311308][ T6188] loop2: detected capacity change from 0 to 4096
[   67.327143][ T5841] Bluetooth: hci1: command tx timeout
[   67.351201][ T6188] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   67.371566][ T6188] ntfs3(loop2): ino=1a, mi_enum_attr
[   67.374849][ T6188] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   67.397553][ T6188] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_sync_inode failed, -22.
[   67.486441][ T1089] ntfs3(loop2): ino=1e, ntfs3_write_inode failed, -22.
[   67.514609][ T2309] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.155/input/input4
[   67.533627][ T5280] bcm5974 1-1:0.155: could not read from device
[   67.560923][ T5280] bcm5974 1-1:0.155: could not read from device
[   67.569082][ T2309] usb 1-1: USB disconnect, device number 2
[   67.597052][ T5280] bcm5974 1-1:0.155: could not read from device
[   67.661753][ T6202] loop0: detected capacity change from 0 to 4096
[   67.718444][ T6206] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   67.829954][ T6211] loop7: detected capacity change from 0 to 7
[   67.836604][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.839791][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   67.845195][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.848312][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   67.855588][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.858516][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   67.862533][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.865946][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   67.869758][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.872791][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   67.876761][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.880022][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   67.884375][ T6211] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.890525][ T6211] Buffer I/O error on dev loop7, logical block 0, async page read
[   67.894924][ T6211] ldm_validate_partition_table(): Disk read failed.
[   67.900024][ T6211] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.903787][ T6211] Buffer I/O error on dev loop7, logical block 0, async page read
[   67.906672][ T6211] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.914225][ T6211] Buffer I/O error on dev loop7, logical block 0, async page read
[   67.917625][ T6216] loop0: detected capacity change from 0 to 128
[   67.919656][ T6211] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   67.923348][ T6216] EXT4-fs: Ignoring removed nobh option
[   67.925969][ T6211] Buffer I/O error on dev loop7, logical block 0, async page read
[   67.929184][ T6211] Dev loop7: unable to read RDB block 0
[   67.937920][ T6216] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   67.938158][ T6211]  loop7: unable to read partition table
[   67.949660][ T6211] loop7: partition table beyond EOD, truncated
[   67.952267][ T6216] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   67.957132][ T6211] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[   67.971659][ T6216] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes
[   68.018738][ T5839] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   69.252233][ T6250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.103'.
[   69.403548][ T5841] Bluetooth: hci1: command tx timeout
[   69.671547][ T6266] loop0: detected capacity change from 0 to 4096
[   69.676647][ T6266] ntfs3(loop0): It is recommened to use chkdsk.
[   69.680108][ T6266] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[   69.684021][ T6266] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[   69.687344][ T6266] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[   69.691310][ T6266] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[   69.699007][ T6266] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00
[   69.702244][ T6266] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00
[   69.706392][ T6266] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00
[   69.710238][ T6266] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00
[   69.714174][ T6266] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00
[   69.785763][ T6270] loop2: detected capacity change from 0 to 256
[   69.798970][ T6270] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   69.810774][ T6270] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   69.912496][ T6276] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[   70.045972][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'.
[   70.054294][ T6284] veth1_to_hsr: entered promiscuous mode
[   70.056416][ T6284] macsec1: entered promiscuous mode
[   70.058502][ T6284] macsec1: entered allmulticast mode
[   70.060432][ T6284] veth1_to_hsr: entered allmulticast mode
[   70.066636][ T6284] veth1_to_hsr: left allmulticast mode
[   70.068766][ T6284] veth1_to_hsr: left promiscuous mode
[   70.532892][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.127'.
[   71.007707][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.013447][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.188999][ T6292] loop2: detected capacity change from 0 to 32768
[   71.291519][ T6292] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   71.521759][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[   72.158698][ T6333] sctp: [Deprecated]: syz.0.138 (pid 6333) Use of int in max_burst socket option.
[   72.158698][ T6333] Use struct sctp_assoc_value instead
[   72.222116][ T6317] loop3: detected capacity change from 0 to 32768
[   72.224782][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'.
[   72.269991][ T6317] 
[   72.269991][ T6317]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   72.269991][ T6317] 
[   72.290007][ T6317] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   72.290007][ T6317] 
[   72.349391][ T1089] 
[   72.349391][ T1089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   72.349391][ T1089] 
[   72.358644][ T1089] 
[   72.358644][ T1089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   72.358644][ T1089] 
[   72.370673][ T6000] 
[   72.370673][ T6000]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   72.370673][ T6000] 
[   72.375756][  T117] 
[   72.375756][  T117]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   72.375756][  T117] 
[   72.391798][ T6000] 
[   72.391798][ T6000]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   72.391798][ T6000] 
[   72.535709][ T6336] loop2: detected capacity change from 0 to 32768
[   72.550270][ T6336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.139 (6336)
[   72.585860][ T6336] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.592701][ T6336] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   72.601426][ T6336] BTRFS info (device loop2): using free-space-tree
[   72.754257][ T6336] BTRFS error (device loop2): target device  is invalid!
[   72.793950][ T5848] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.834035][ T2309] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   73.043083][ T2309] usb 4-1: config 0 has an invalid interface number: 209 but max is 0
[   73.049290][ T2309] usb 4-1: config 0 has no interface number 0
[   73.063593][ T2309] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=53.a6
[   73.073659][ T2309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.080780][ T2309] usb 4-1: config 0 descriptor??
[   73.089825][ T2309] ftdi_sio 4-1:0.209: FTDI USB Serial Device converter detected
[   73.107624][ T2309] ftdi_sio ttyUSB0: unknown device type: 0x53a6
[   73.242331][ T6386] loop0: detected capacity change from 0 to 128
[   73.310090][ T2309] usb 4-1: USB disconnect, device number 3
[   73.315963][ T2309] ftdi_sio 4-1:0.209: device disconnected
[   73.611482][ T6392] loop2: detected capacity change from 0 to 32768
[   73.624477][ T6392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.159 (6392)
[   73.632684][ T6392] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   73.656891][ T6392] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   73.659860][ T6392] BTRFS info (device loop2): using free-space-tree
[   73.714082][ T6398] loop0: detected capacity change from 0 to 32768
[   73.753290][ T6398] JBD2: Ignoring recovery information on journal
[   73.792611][ T6398] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   73.831364][ T5839] ocfs2: Unmounting device (7,0) on (node local)
[   73.831454][ T5848] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   73.977010][ T6421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'.
[   74.246464][ T6435] loop3: detected capacity change from 0 to 4096
[   74.276427][ T6433] loop2: detected capacity change from 0 to 32768
[   74.289543][ T6433] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   74.301241][ T6433] Bluetooth: MGMT ver 1.23
[   74.303569][ T6433] Bluetooth: hci0: unsupported parameter 512
[   74.305754][ T6433] Bluetooth: hci0: invalid len left 4, exp >= 115
[   74.333793][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[   74.485278][ T6441] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.528860][ T6443] loop2: detected capacity change from 0 to 128
[   74.532693][ T6443] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   74.538226][ T6443] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   74.581519][ T2309] IPVS: starting estimator thread 0...
[   74.675210][ T6446] IPVS: using max 44 ests per chain, 105600 per kthread
[   75.530254][ T6454] loop3: detected capacity change from 0 to 32768
[   75.607495][ T6454] XFS (loop3): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[   75.769606][ T6454] XFS (loop3): Starting recovery (logdev: internal)
[   75.786901][ T6456] loop2: detected capacity change from 0 to 32768
[   75.806093][ T6456] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[   75.873465][ T6454] XFS (loop3): Ending recovery (logdev: internal)
[   76.050184][ T6000] XFS (loop3): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[   77.183337][ T5891] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   77.464873][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.475149][ T5891] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18
[   77.478757][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.503864][ T5891] usb 1-1: Product: syz
[   77.505651][ T5891] usb 1-1: Manufacturer: syz
[   77.507514][ T5891] usb 1-1: SerialNumber: syz
[   77.515281][ T5891] usb 1-1: config 0 descriptor??
[   77.745275][ T6529] loop3: detected capacity change from 0 to 40427
[   77.754128][ T6529] F2FS-fs (loop3): Image doesn't support compression
[   77.759930][ T6529] F2FS-fs (loop3): invalid crc value
[   77.778614][ T5891] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   77.838251][ T6529] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   77.852130][ T6529] F2FS-fs (loop3): Start checkpoint disabled!
[   77.859917][ T6529] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   77.925625][ T6535] loop2: detected capacity change from 0 to 32768
[   77.936720][ T6535] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.192 (6535)
[   77.946114][ T5891] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[   77.966351][ T6535] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   77.971765][ T6535] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   77.975692][ T6535] BTRFS info (device loop2): using free-space-tree
[   78.270374][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   79.018620][ T6569] loop3: detected capacity change from 0 to 512
[   79.020704][ T5848] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   79.022167][ T6569] EXT4-fs: Ignoring removed bh option
[   79.045068][ T6569] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   79.295514][ T6569] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[   79.396098][ T6569] loop3: detected capacity change from 0 to 16
[   79.430013][ T6569] erofs (device loop3): mounted with root inode @ nid 36.
[   79.578942][ T2309] usb 1-1: USB disconnect, device number 3
[   79.638289][ T6578] loop3: detected capacity change from 0 to 1024
[   79.657740][ T6578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.662111][ T6578] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.675445][ T6578] EXT4-fs (loop3): stripe (248) is not aligned with cluster size (16), stripe is disabled
[   79.679488][ T6578] EXT4-fs (loop3): can't enable nombcache during remount
[   79.745170][ T6582] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   80.195369][ T6586] iommufd_mock iommufd_mock1: Adding to iommu group 1
[   80.269227][ T6588] loop0: detected capacity change from 0 to 8
[   80.362582][ T6588] SQUASHFS error: zlib decompression failed, data probably corrupt
[   80.369120][ T6588] SQUASHFS error: Failed to read block 0x9b: -5
[   80.372058][ T6588] SQUASHFS error: Unable to read metadata cache entry [99]
[   80.378881][ T6588] SQUASHFS error: Unable to read inode 0x127
[   81.147498][ T6000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.283254][ T5891] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   82.453211][ T5891] usb 4-1: Using ep0 maxpacket: 16
[   82.481383][ T5891] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[   82.491904][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.494927][ T5891] usb 4-1: Product: syz
[   82.500347][ T5891] usb 4-1: Manufacturer: syz
[   82.505928][ T5891] usb 4-1: SerialNumber: syz
[   82.621038][ T5891] usb 4-1: config 0 descriptor??
[   82.854356][ T2309] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   83.043133][ T5891] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[   83.050911][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   83.063900][ T5891] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[   83.067201][ T5891] usb 4-1: media controller created
[   83.077643][ T2309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   83.081766][ T2309] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   83.086569][ T2309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.095673][ T2309] usb 3-1: config 0 descriptor??
[   83.102919][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   83.106761][ T2309] pwc: Askey VC010 type 2 USB webcam detected.
[   83.245214][ T5891] zl10353_read_register: readreg error (reg=127, ret==0)
[   83.248551][ T5891] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[   83.252302][ T5891] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[   83.264709][ T5891] usb 4-1: USB disconnect, device number 4
[   83.319637][ T5891] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[   83.360327][ T6624] loop0: detected capacity change from 0 to 32768
[   83.375303][ T6624] JBD2: Ignoring recovery information on journal
[   83.402343][ T6624] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   83.436210][ T5839] ocfs2: Unmounting device (7,0) on (node local)
[   83.518452][ T2309] pwc: recv_control_msg error -32 req 02 val 2b00
[   83.522166][ T2309] pwc: recv_control_msg error -32 req 02 val 2700
[   83.526038][ T2309] pwc: recv_control_msg error -32 req 02 val 2c00
[   83.529239][ T2309] pwc: recv_control_msg error -32 req 04 val 1000
[   83.532607][ T2309] pwc: recv_control_msg error -32 req 04 val 1300
[   83.536550][ T2309] pwc: recv_control_msg error -32 req 04 val 1400
[   83.539732][ T2309] pwc: recv_control_msg error -32 req 02 val 2000
[   83.543207][ T2309] pwc: recv_control_msg error -32 req 02 val 2100
[   83.546627][ T2309] pwc: recv_control_msg error -32 req 04 val 1500
[   83.750547][ T2309] pwc: recv_control_msg error -71 req 02 val 2400
[   83.755532][ T2309] pwc: recv_control_msg error -71 req 02 val 2600
[   83.758720][ T2309] pwc: recv_control_msg error -71 req 02 val 2900
[   83.761879][ T2309] pwc: recv_control_msg error -71 req 02 val 2800
[   83.766855][ T2309] pwc: recv_control_msg error -71 req 04 val 1100
[   83.771641][ T2309] pwc: recv_control_msg error -71 req 04 val 1200
[   83.783248][ T2309] pwc: Registered as video103.
[   83.786303][ T2309] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[   83.818716][ T2309] usb 3-1: USB disconnect, device number 4
[   84.031090][ T6653] : renamed from team0 (while UP)
[   84.042572][ T6653] netlink: 'syz.0.223': attribute type 1 has an invalid length.
[   84.047623][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'.
[   84.051402][ T6653] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[   84.151287][ T2309] IPVS: starting estimator thread 0...
[   84.176708][ T5891] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   84.243708][ T6658] IPVS: using max 46 ests per chain, 110400 per kthread
[   84.323248][ T5891] usb 4-1: Using ep0 maxpacket: 8
[   84.329051][ T5891] usb 4-1: config 162 has an invalid interface number: 253 but max is 0
[   84.332100][ T5891] usb 4-1: config 162 has no interface number 0
[   84.344112][ T5891] usb 4-1: config 162 interface 253 has no altsetting 0
[   84.349481][ T5891] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09
[   84.358314][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.361672][ T5891] usb 4-1: Product: syz
[   84.367533][ T5891] usb 4-1: Manufacturer: syz
[   84.371907][ T5891] usb 4-1: SerialNumber: syz
[   84.463269][ T5863] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   84.585694][ T5891] go7007 4-1:162.253: probe with driver go7007 failed with error -12
[   84.591031][ T5891] usb 4-1: USB disconnect, device number 5
[   84.623490][ T5863] usb 1-1: Using ep0 maxpacket: 8
[   84.628267][ T5863] usb 1-1: config 5 has an invalid interface number: 22 but max is 0
[   84.631329][ T5863] usb 1-1: config 5 has no interface number 0
[   84.634537][ T5863] usb 1-1: config 5 interface 22 altsetting 25 endpoint 0x6 has invalid wMaxPacketSize 0
[   84.643472][ T5863] usb 1-1: config 5 interface 22 has no altsetting 0
[   84.653111][ T5863] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=ba.fa
[   84.656772][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.660023][ T5863] usb 1-1: Product: syz
[   84.663059][ T5863] usb 1-1: Manufacturer: syz
[   84.665127][ T5863] usb 1-1: SerialNumber: syz
[   84.876871][ T5863] kvaser_usb 1-1:5.22: error -ENODEV: Cannot get usb endpoint(s)
[   84.881674][ T5863] rndis_host 1-1:5.22: skipping garbage
[   84.884184][ T5863] usb 1-1: bad CDC descriptors
[   84.891422][ T5863] usb 1-1: USB disconnect, device number 4
[   84.985168][ T6680] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[   85.004162][ T5891] IPVS: starting estimator thread 0...
[   85.093414][ T6681] IPVS: using max 80 ests per chain, 192000 per kthread
[   85.558490][ T6690] loop0: detected capacity change from 0 to 1024
[   85.594928][ T6690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.601529][ T6690] EXT4-fs (loop0): shut down requested (1)
[   85.620467][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.920498][ T6699] loop0: detected capacity change from 0 to 40427
[   85.930027][ T6699] F2FS-fs (loop0): build fault injection rate: 771
[   85.942477][ T6699] F2FS-fs (loop0): invalid crc value
[   86.014518][ T6699] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   86.021511][ T6699] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   86.054714][ T5839] syz-executor: attempt to access beyond end of device
[   86.054714][ T5839] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   86.060342][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   86.060354][ T5839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.060359][ T5839] Call Trace:
[   86.060362][ T5839]  <TASK>
[   86.060366][ T5839]  dump_stack_lvl+0x189/0x250
[   86.060380][ T5839]  ? __pfx_dump_stack_lvl+0x10/0x10
[   86.060389][ T5839]  ? __pfx_queue_work_on+0x10/0x10
[   86.060397][ T5839]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   86.060407][ T5839]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   86.060421][ T5839]  f2fs_handle_critical_error+0x37c/0x540
[   86.060434][ T5839]  f2fs_write_end_io+0x886/0xb60
[   86.060449][ T5839]  __submit_merged_bio+0x27a/0x6a0
[   86.060461][ T5839]  __submit_merged_write_cond+0x255/0x530
[   86.060474][ T5839]  f2fs_write_data_pages+0x261d/0x3000
[   86.060499][ T5839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   86.060540][ T5839]  ? __lock_acquire+0xab9/0xd20
[   86.060554][ T5839]  ? do_raw_spin_lock+0x121/0x290
[   86.060568][ T5839]  ? do_raw_spin_unlock+0x4d/0x240
[   86.060577][ T5839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   86.060588][ T5839]  do_writepages+0x32e/0x550
[   86.060603][ T5839]  ? do_raw_spin_unlock+0x4d/0x240
[   86.060613][ T5839]  filemap_fdatawrite+0x199/0x240
[   86.060623][ T5839]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   86.060653][ T5839]  ? do_raw_spin_unlock+0x4d/0x240
[   86.060664][ T5839]  f2fs_sync_dirty_inodes+0x31f/0x830
[   86.060678][ T5839]  f2fs_write_checkpoint+0x95a/0x1df0
[   86.060695][ T5839]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   86.060720][ T5839]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   86.060727][ T5839]  ? kfree+0x18e/0x440
[   86.060738][ T5839]  ? kill_f2fs_super+0x298/0x6c0
[   86.060749][ T5839]  kill_f2fs_super+0x2c3/0x6c0
[   86.060759][ T5839]  ? __pfx_kill_f2fs_super+0x10/0x10
[   86.060765][ T5839]  ? radix_tree_delete_item+0x2b6/0x400
[   86.060777][ T5839]  ? shrinker_free+0x2ce/0x3e0
[   86.060787][ T5839]  deactivate_locked_super+0xbc/0x130
[   86.060796][ T5839]  cleanup_mnt+0x425/0x4c0
[   86.060805][ T5839]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.060815][ T5839]  task_work_run+0x1d4/0x260
[   86.060826][ T5839]  ? __pfx_task_work_run+0x10/0x10
[   86.060835][ T5839]  ? __x64_sys_umount+0x122/0x160
[   86.060846][ T5839]  ? exit_to_user_mode_loop+0x40/0x110
[   86.060858][ T5839]  exit_to_user_mode_loop+0xec/0x110
[   86.060868][ T5839]  do_syscall_64+0x2bd/0x3b0
[   86.060878][ T5839]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.060887][ T5839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.060894][ T5839]  ? exc_page_fault+0x9f/0xf0
[   86.060904][ T5839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.060938][ T5839] RIP: 0033:0x7f785ff8ff17
[   86.060946][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   86.060952][ T5839] RSP: 002b:00007ffe9f0a8358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   86.060960][ T5839] RAX: 0000000000000000 RBX: 00007f7860011c05 RCX: 00007f785ff8ff17
[   86.060965][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9f0a8410
[   86.060970][ T5839] RBP: 00007ffe9f0a8410 R08: 0000000000000000 R09: 0000000000000000
[   86.060974][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9f0a94a0
[   86.060979][ T5839] R13: 00007f7860011c05 R14: 0000000000014fa1 R15: 00007ffe9f0a94e0
[   86.060996][ T5839]  </TASK>
[   86.061000][ T5839] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   86.374830][   T47] cfg80211: failed to load regulatory.db
[   86.410261][ T6722] loop3: detected capacity change from 0 to 2048
[   86.468345][ T6722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.586081][ T6000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.654166][ T6741] loop3: detected capacity change from 0 to 512
[   86.662133][ T6741] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   86.673642][ T6741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   86.697010][ T6741] EXT4-fs (loop3): 1 truncate cleaned up
[   86.707823][ T6741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.743385][ T2309] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   86.747719][ T6000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.896196][ T2309] usb 1-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6
[   86.903110][ T2309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.913554][ T2309] usb 1-1: Product: syz
[   86.915113][ T2309] usb 1-1: Manufacturer: syz
[   86.916769][ T2309] usb 1-1: SerialNumber: syz
[   86.940417][ T2309] usb 1-1: config 0 descriptor??
[   86.946063][ T2309] aiptek 1-1:0.0: interface has no int in endpoints, but must have minimum 1
[   87.133265][ T5904] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   87.158426][ T2309] usb 1-1: USB disconnect, device number 5
[   87.289058][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.295818][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.300018][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   87.305817][ T5904] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   87.309668][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.316207][ T5904] usb 4-1: config 0 descriptor??
[   87.324670][ T5904] hub 4-1:0.0: USB hub found
[   87.524022][ T5904] hub 4-1:0.0: 14 ports detected
[   87.526350][ T5904] hub 4-1:0.0: insufficient power available to use all downstream ports
[   87.717814][ T6790] syzkaller1: entered promiscuous mode
[   87.720301][ T6790] syzkaller1: entered allmulticast mode
[   87.729220][ T5904] hub 4-1:0.0: hub_hub_status failed (err = -71)
[   87.732065][ T5904] hub 4-1:0.0: config failed, can't get hub status (err -71)
[   87.777597][ T5904] usb 4-1: USB disconnect, device number 6
[   88.531288][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.286'.
[   88.823091][ T5904] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   88.922848][ T6835] sctp: [Deprecated]: syz.0.294 (pid 6835) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.922848][ T6835] Use struct sctp_sack_info instead
[   89.043499][ T5904] usb 4-1: Using ep0 maxpacket: 32
[   89.051080][ T5904] usb 4-1: unable to get BOS descriptor or descriptor too short
[   89.059285][ T5904] usb 4-1: config 2 has an invalid interface number: 189 but max is 0
[   89.062829][ T5904] usb 4-1: config 2 has no interface number 0
[   89.070840][ T5904] usb 4-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping
[   89.076598][ T6841] loop0: detected capacity change from 0 to 128
[   89.077399][ T5904] usb 4-1: config 2 interface 189 has no altsetting 0
[   89.087724][ T5904] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52
[   89.091706][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.101677][ T5863] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   89.107859][ T5904] usb 4-1: Product: syz
[   89.110059][ T5904] usb 4-1: Manufacturer: syz
[   89.112622][ T5904] usb 4-1: SerialNumber: syz
[   89.245060][ T6845] loop0: detected capacity change from 0 to 2048
[   89.249511][ T6845] EXT4-fs: Ignoring removed mblk_io_submit option
[   89.267365][ T6845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.281963][ T5863] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[   89.282853][ T6845] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.299: bg 0: block 234: padding at end of block bitmap is not set
[   89.285908][ T5863] usb 3-1: config 0 has no interface number 0
[   89.295121][ T6845] EXT4-fs (loop0): Remounting filesystem read-only
[   89.296031][ T5863] usb 3-1: config 0 interface 12 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[   89.304725][ T5863] usb 3-1: config 0 interface 12 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 511
[   89.312702][ T5863] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0700, bcdDevice=5f.c4
[   89.320460][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.326539][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.345593][ T5863] usb 3-1: Product: syz
[   89.348173][ T5863] usb 3-1: Manufacturer: syz
[   89.350411][ T5863] usb 3-1: SerialNumber: syz
[   89.357542][ T5904] usb 4-1: unknown interface protocol 0x3b, assuming v1
[   89.360449][ T5904] usb 4-1: 189:2 : does not exist
[   89.363936][ T5863] usb 3-1: config 0 descriptor??
[   89.366733][ T6833] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   89.369953][ T6833] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   89.377720][ T5863] option 3-1:0.12: GSM modem (1-port) converter detected
[   89.392005][ T5863] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0
[   89.405177][ T5904] usb 4-1: USB disconnect, device number 7
[   89.445814][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   89.600806][ T5863] usb 3-1: USB disconnect, device number 5
[   89.614063][ T5863] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[   89.618770][ T5863] option 3-1:0.12: device disconnected
[   89.638707][ T6850] loop0: detected capacity change from 0 to 32768
[   91.477320][ T6867] loop2: detected capacity change from 0 to 256
[   91.494007][ T6867] exfat: Deprecated parameter 'utf8'
[   91.496432][ T6867] exfat: Deprecated parameter 'utf8'
[   91.498542][ T6867] exfat: Deprecated parameter 'utf8'
[   91.571764][ T6867] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d)
[   92.129428][ T6886] loop0: detected capacity change from 0 to 64
[   92.149075][ T6886] MINIX-fs: mounting file system with errors, running fsck is recommended
[   92.209283][ T6888] loop3: detected capacity change from 0 to 2048
[   92.273029][ T6889] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.318945][ T6888] NILFS (loop3): error -2 truncating bmap (ino=16)
[   92.795159][ T6905] 9pnet: Unknown protocol version 9p20\++}
[   92.869287][ T6897] loop3: detected capacity change from 0 to 32768
[   92.885403][ T6897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.318 (6897)
[   92.891357][ T6901] loop2: detected capacity change from 0 to 32768
[   92.916376][ T6897] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   92.927170][ T6901] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 539637e7-b904-46d5-a87c-c2f08f2fbf7c
[   92.931481][ T6901] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.320 (6901)
[   92.940427][ T6897] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   92.949174][ T6897] BTRFS info (device loop3): using free-space-tree
[   93.003658][ T6901] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   93.010178][ T6901] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   93.023353][ T6901] BTRFS info (device loop2): using free-space-tree
[   93.156443][ T6000] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   93.200778][ T5675] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   93.248964][ T5848] BTRFS info (device loop2): last unmount of filesystem 539637e7-b904-46d5-a87c-c2f08f2fbf7c
[   93.381897][ T6951] loop0: detected capacity change from 0 to 512
[   93.389000][ T6952] netlink: 6 bytes leftover after parsing attributes in process `syz.2.327'.
[   93.403823][ T6952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.446210][ T6951] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 3: comm syz.0.329: lblock 0 mapped to illegal pblock 3 (length 1)
[   93.470976][ T6951] EXT4-fs (loop0): Remounting filesystem read-only
[   93.499723][ T6951] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.329: error -117 reading directory block
[   93.512464][ T6951] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   93.525631][ T6951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.619391][ T6960] netlink: 'syz.3.331': attribute type 30 has an invalid length.
[   93.651492][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.696455][ T6962] loop3: detected capacity change from 0 to 1024
[   93.699919][ T6962] hfsplus: Unknown parameter ''
[   93.812347][ T6969] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[   96.979036][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'.
[   96.999840][ T7029] input: syz1 as /devices/virtual/input/input8
[   97.157826][ T7043] Invalid ELF header magic: != ELF
[   97.218628][ T7049] netlink: 224 bytes leftover after parsing attributes in process `syz.0.370'.
[   97.303288][ T5891] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   97.347344][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.373'.
[   97.454875][ T5891] usb 4-1: config 0 has an invalid interface number: 84 but max is 0
[   97.460523][ T5891] usb 4-1: config 0 has an invalid interface number: 66 but max is 0
[   97.471280][ T5891] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[   97.476751][ T5891] usb 4-1: config 0 has no interface number 0
[   97.479406][ T5891] usb 4-1: config 0 has no interface number 1
[   97.482092][ T5891] usb 4-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64
[   97.487405][ T5891] usb 4-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   97.495973][ T5891] usb 4-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[   97.500413][ T5891] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32
[   97.505435][ T5891] usb 4-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2
[   97.510402][ T5891] usb 4-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86
[   97.516193][ T5891] usb 4-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024
[   97.520908][ T5891] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024
[   97.525653][ T5891] usb 4-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[   97.531030][ T5891] usb 4-1: config 0 interface 66 has no altsetting 0
[   97.536336][ T5891] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[   97.540104][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.544119][ T5891] usb 4-1: Product: syz
[   97.545918][ T5891] usb 4-1: Manufacturer: syz
[   97.547867][ T5891] usb 4-1: SerialNumber: syz
[   97.551897][ T5891] usb 4-1: config 0 descriptor??
[   97.561579][ T5891] ljca 4-1:0.84: bulk endpoints not found
[   97.693109][ T5999] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   97.700713][ T7067] loop0: detected capacity change from 0 to 32768
[   97.706552][ T7067] (syz.0.377,7067,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   97.713607][ T7067] (syz.0.377,7067,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   97.739940][ T7067] JBD2: Ignoring recovery information on journal
[   97.785774][ T5891] ljca 4-1:0.66: probe with driver ljca failed with error -71
[   97.786819][ T7067] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   97.803420][ T5891] usb 4-1: USB disconnect, device number 8
[   97.843333][ T5999] usb 3-1: Using ep0 maxpacket: 32
[   97.855667][ T5999] usb 3-1: config 2 has an invalid interface number: 1 but max is 0
[   97.859083][ T5999] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   97.862816][ T5999] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[   97.879672][ T5999] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64
[   97.889879][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.897825][ T5839] ocfs2: Unmounting device (7,0) on (node local)
[   97.902133][ T5999] usb 3-1: Product: syz
[   97.904900][ T5999] usb 3-1: Manufacturer: syz
[   97.906935][ T5999] usb 3-1: SerialNumber: syz
[   97.927263][ T5999] cdc_acm 3-1:2.1: probe with driver cdc_acm failed with error -22
[   98.120076][ T5999] usb 3-1: USB disconnect, device number 6
[   98.127159][ T7076] devpts: Bad value for 'max'
[   98.430731][ T7082] loop3: detected capacity change from 0 to 16
[   98.452325][ T7082] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   98.774825][ T7086] netlink: 'syz.2.384': attribute type 1 has an invalid length.
[   98.779030][ T7086] netlink: 244 bytes leftover after parsing attributes in process `syz.2.384'.
[   98.883177][ T5999] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   99.057594][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.066618][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.070389][ T5999] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[   99.084875][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.105716][ T5999] usb 4-1: config 0 descriptor??
[   99.563072][ T5999] hid_mf 0003:0079:1846.0002: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0
[   99.567365][ T5999] hid_mf 0003:0079:1846.0002: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[   99.764829][ T2309] usb 4-1: USB disconnect, device number 9
[  100.119498][ T7111] loop0: detected capacity change from 0 to 32768
[  100.235921][ T7111] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  100.235934][ T7111]   allowing incompatible features above 0.0: (unknown version)
[  100.235938][ T7111]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  100.252704][ T7111] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  100.256199][ T7111] bcachefs (loop0): initializing new filesystem
[  100.263330][ T7111] bcachefs (loop0): going read-write
[  100.272476][ T7111] bcachefs (loop0): marking superblocks
[  100.287257][ T7111] bcachefs (loop0): initializing freespace
[  100.294247][ T7111] bcachefs (loop0): done initializing freespace
[  100.301034][ T7111] bcachefs (loop0): reading snapshots table
[  100.303433][ T7111] bcachefs (loop0): reading snapshots done
[  100.324847][ T7111] bcachefs (loop0): done starting filesystem
[  100.414984][ T7111] syz.0.396 (7111) used greatest stack depth: 16536 bytes left
[  100.457734][ T5839] bcachefs (loop0): shutting down
[  100.464898][ T5839] bcachefs (loop0): going read-only
[  100.467565][ T5839] bcachefs (loop0): finished waiting for writes to stop
[  100.478564][ T5839] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  100.535468][ T5839] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  100.541527][ T5839] bcachefs (loop0): clean shutdown complete, journal seq 4
[  100.546062][ T5839] bcachefs (loop0): marking filesystem clean
[  100.578180][ T5839] bcachefs (loop0): shutdown complete
[  100.943137][ T5891] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  101.094806][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  101.099296][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  101.103973][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  101.107327][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  101.112361][ T5891] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  101.115949][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.121004][ T5891] usb 4-1: config 0 descriptor??
[  101.462720][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.415'.
[  101.538793][ T5891] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max
[  101.573045][ T5891] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  101.814111][ T7195] loop2: detected capacity change from 0 to 1024
[  101.825631][ T7195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  101.830546][ T7195] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.839267][ T7195] EXT4-fs warning (device loop2): ext4_empty_dir:3103: inode #12: comm syz.2.424: directory missing '..'
[  101.860704][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  101.894495][ T5999] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  102.065891][ T7207] loop2: detected capacity change from 0 to 256
[  102.066691][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  102.072005][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  102.074372][ T7207] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xecfd5def, utbl_chksum : 0xe619d30d)
[  102.088984][ T5999] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  102.091907][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.111447][ T5999] usb 1-1: config 0 descriptor??
[  102.117045][ T7186] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  102.819672][ T5999] saitek 0003:06A3:0CCD.0004: item fetching failed at offset 0/2
[  102.825412][ T5999] saitek 0003:06A3:0CCD.0004: parse failed
[  102.828343][ T5999] saitek 0003:06A3:0CCD.0004: probe with driver saitek failed with error -22
[  103.027149][ T2309] usb 1-1: USB disconnect, device number 6
[  103.042587][ T7211] capability: warning: `syz.2.429' uses deprecated v2 capabilities in a way that may be insecure
[  103.219048][ T7217] loop2: detected capacity change from 0 to 4096
[  103.227016][ T7217] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  103.241095][ T7217] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  103.244938][ T7217] ntfs3(loop2): ino=5, mi_enum_attr
[  103.306059][ T7219] loop2: detected capacity change from 0 to 256
[  103.310406][ T7219] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  103.314881][ T7219] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  103.322364][ T7219] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  103.369210][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'.
[  103.373619][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'.
[  103.905175][ T5999] usb 4-1: reset high-speed USB device number 10 using dummy_hcd
[  103.943839][   T47] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  104.054486][ T5999] usb 4-1: device firmware changed
[  104.059478][ T5863] usb 4-1: USB disconnect, device number 10
[  104.123132][   T47] usb 1-1: Using ep0 maxpacket: 16
[  104.126849][   T47] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  104.130109][   T47] usb 1-1: config 0 has no interface number 0
[  104.132581][   T47] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  104.136997][   T47] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024
[  104.142665][   T47] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  104.147509][   T47] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  104.150463][   T47] usb 1-1: Product: syz
[  104.152093][   T47] usb 1-1: SerialNumber: syz
[  104.155794][   T47] usb 1-1: config 0 descriptor??
[  104.161536][   T47] cm109 1-1:0.8: invalid payload size 1024, expected 4
[  104.166306][   T47] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input9
[  104.213156][ T5863] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  104.364552][    C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[  104.390266][ T5863] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  104.394166][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.397376][ T5863] usb 4-1: Product: syz
[  104.399248][ T5863] usb 4-1: Manufacturer: syz
[  104.401300][ T5863] usb 4-1: SerialNumber: syz
[  104.410947][ T5863] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  104.448927][   T47] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  104.567715][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  104.569023][ T5999] usb 1-1: USB disconnect, device number 7
[  104.570577][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  104.589646][ T5999] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  104.608141][ T7247] loop2: detected capacity change from 0 to 1024
[  104.877577][ T5863] usb 4-1: USB disconnect, device number 11
[  104.902417][ T7251] loop2: detected capacity change from 0 to 32768
[  104.918411][ T7251] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.938218][ T7251] XFS (loop2): Ending clean mount
[  104.946499][ T7251] XFS (loop2): Quotacheck needed: Please wait.
[  104.974260][ T7251] XFS (loop2): Quotacheck: Done.
[  104.988065][   T33] kauditd_printk_skb: 205 callbacks suppressed
[  104.988076][   T33] audit: type=1800 audit(1755487326.118:219): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.448" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  104.999573][   T33] audit: type=1800 audit(1755487326.128:220): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.448" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  105.112744][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'.
[  105.137927][ T7262] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  105.148632][ T7262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.315187][ T5848] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  105.364559][ T7268] program syz.0.453 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  105.494414][   T47] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  105.513446][   T47] ath9k_htc: Failed to initialize the device
[  105.520087][ T5863] usb 4-1: ath9k_htc: USB layer deinitialized
[  105.562234][ T7277] nfs4: Unexpected value for 'acl'
[  105.640848][ T7279] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  105.650289][ T7281] loop0: detected capacity change from 0 to 256
[  105.658151][ T7281] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  105.662606][ T7281] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  105.687017][ T7281] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2d0d25cc, utbl_chksum : 0xe619d30d)
[  105.730830][ T7287] netlink: 'syz.2.461': attribute type 2 has an invalid length.
[  106.088418][ T7310] netlink: 'syz.2.469': attribute type 1 has an invalid length.
[  106.095301][ T7303] loop0: detected capacity change from 0 to 32768
[  106.098547][ T7303] bcachefs: bch2_fs_parse_param() Error parsing option sb: option_value
[  106.122205][ T7310] netlink: 'syz.2.469': attribute type 2 has an invalid length.
[  106.488298][ T7324] loop2: detected capacity change from 0 to 256
[  106.495823][ T7324] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  106.499457][ T7324] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  106.552664][ T7324] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  106.770685][ T7326] sd 0:0:0:0: PR command failed: 1026
[  106.774411][ T7326] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  106.777887][ T7326] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  106.926993][ T7333] loop3: detected capacity change from 0 to 256
[  106.951088][ T7333] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  106.995026][ T7333] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[  107.096238][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.100486][ T7343] bridge_slave_1: left promiscuous mode
[  107.103363][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.123490][ T7343] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  107.316852][ T7352] loop3: detected capacity change from 0 to 16
[  107.339447][ T7352] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 142735)
[  107.416110][ T7355] loop3: detected capacity change from 0 to 2048
[  107.432385][ T7355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.475866][ T7349] loop2: detected capacity change from 0 to 32768
[  107.484071][ T7349] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  107.537972][ T7359] vlan2: entered allmulticast mode
[  107.539761][ T7359] macvlan0: entered allmulticast mode
[  107.541640][ T7359] veth1_vlan: entered allmulticast mode
[  107.586210][ T7361] netlink: 'syz.3.491': attribute type 15 has an invalid length.
[  107.588545][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[  107.588712][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.491'.
[  107.613808][ T7359] Zero length message leads to an empty skb
[  107.703955][ T7363] loop3: detected capacity change from 0 to 4096
[  107.709375][ T7363] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  107.727451][ T7363] ntfs3(loop3): ino=19, mi_enum_attr
[  107.736584][ T7363] ntfs3(loop3): failed to convert "c46c" to cp936
[  107.739308][ T7363] ntfs3(loop3): ino=20, mi_enum_attr
[  109.115285][ T7396] loop0: detected capacity change from 0 to 512
[  109.118306][ T7396] EXT4-fs: Ignoring removed orlov option
[  109.127361][ T7396] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  109.145067][ T7396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  109.149950][ T7396] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.503: corrupted in-inode xattr: e_value size too large
[  109.157058][ T7396] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.503: couldn't read orphan inode 15 (err -117)
[  109.166030][ T7396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.197274][ T2309] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  109.203855][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.278251][ T7400] loop0: detected capacity change from 0 to 2048
[  109.319664][   T33] audit: type=1800 audit(1755487330.448:221): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.504" name="file1" dev="loop0" ino=1346 res=0 errno=0
[  109.353392][ T2309] usb 3-1: Using ep0 maxpacket: 32
[  109.360414][   T33] audit: type=1800 audit(1755487330.488:222): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.504" name="file1" dev="loop0" ino=1346 res=0 errno=0
[  109.377495][ T2309] usb 3-1: config 0 interface 0 has no altsetting 0
[  109.385549][ T2309] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  109.389270][ T2309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.403433][ T2309] usb 3-1: Product: syz
[  109.405334][ T2309] usb 3-1: Manufacturer: syz
[  109.407358][ T2309] usb 3-1: SerialNumber: syz
[  109.433882][ T2309] usb 3-1: config 0 descriptor??
[  109.664279][ T7410] loop3: detected capacity change from 0 to 64
[  109.856814][ T2309] gs_usb 3-1:0.0: Configuring for 84 interfaces
[  109.859106][ T2309] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  109.862376][ T2309] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22
[  109.947000][ T7413] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  109.951075][ T7413] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  110.062543][   T33] audit: type=1800 audit(1755487331.188:223): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.509" name="file1" dev="loop3" ino=5 res=0 errno=0
[  110.092776][ T7412] minix: Unknown parameter '18446744073709551615@LqE: 艞t}0$'
[  110.095409][ T2309] usb 3-1: USB disconnect, device number 7
[  110.099365][   T33] audit: type=1800 audit(1755487331.188:224): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.509" name="file2" dev="loop3" ino=6 res=0 errno=0
[  110.708773][ T7426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.794886][ T7423] loop3: detected capacity change from 0 to 8192
[  110.885930][   T33] audit: type=1800 audit(1755487331.988:225): pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.511" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  111.210289][ T7438] loop3: detected capacity change from 0 to 1024
[  111.218965][ T7438] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data
[  111.512435][ T7440] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  111.515781][ T7440] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  111.519981][ T7440] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  111.577275][ T7441] fuse: Bad value for 'fd'
[  112.100161][ T7447] loop2: detected capacity change from 0 to 4096
[  112.109166][ T7447] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  112.126405][ T7447] ntfs3(loop2): Looks like $AttrDef is corrupted (size=0).
[  112.133811][ T5863] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  112.182606][ T7449] loop3: detected capacity change from 0 to 4096
[  112.191229][ T7449] EXT4-fs: Ignoring removed mblk_io_submit option
[  112.194354][ T7449] EXT4-fs (loop3): Test dummy encryption mode enabled
[  112.200318][ T7449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.277233][ T6000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.306679][ T5863] usb 1-1: Using ep0 maxpacket: 16
[  112.315797][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  112.340586][ T5863] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  112.344756][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.348044][ T5863] usb 1-1: Product: syz
[  112.349702][ T5863] usb 1-1: Manufacturer: syz
[  112.351585][ T5863] usb 1-1: SerialNumber: syz
[  112.367009][ T5863] usb 1-1: config 0 descriptor??
[  112.371810][ T5863] hub 1-1:0.0: bad descriptor, ignoring hub
[  112.375588][ T5863] hub 1-1:0.0: probe with driver hub failed with error -5
[  112.380486][ T5863] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  112.423449][ T5863] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  112.452162][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.543138][ T2309] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  112.695420][ T2309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.700223][ T2309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.703823][ T5863] usb 1-1: USB disconnect, device number 8
[  112.704577][ T2309] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  112.710362][ T2309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.716572][ T2309] usb 3-1: config 0 descriptor??
[  112.813097][ T5999] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  112.963065][ T5999] usb 4-1: Using ep0 maxpacket: 32
[  112.966605][ T5999] usb 4-1: config 0 has an invalid interface number: 197 but max is 0
[  112.969290][ T5999] usb 4-1: config 0 has no interface number 0
[  112.971308][ T5999] usb 4-1: config 0 interface 197 has no altsetting 0
[  112.976298][ T5999] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=32.65
[  112.979339][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.981967][ T5999] usb 4-1: Product: syz
[  112.983530][ T5999] usb 4-1: Manufacturer: syz
[  112.985358][ T5999] usb 4-1: SerialNumber: syz
[  112.989280][ T5999] usb 4-1: config 0 descriptor??
[  112.995009][ T5999] gspca_main: etoms-2.14.0 probing 102c:6151
[  113.133614][ T2309] hid-thrustmaster 0003:044F:B65D.0005: collection stack underflow
[  113.136528][ T2309] hid-thrustmaster 0003:044F:B65D.0005: item 0 4 0 12 parsing failed
[  113.139897][ T2309] hid-thrustmaster 0003:044F:B65D.0005: parse failed with error -22
[  113.142037][ T7473] netem: change failed
[  113.145714][ T2309] hid-thrustmaster 0003:044F:B65D.0005: probe with driver hid-thrustmaster failed with error -22
[  113.230887][ T5999] usb 4-1: USB disconnect, device number 12
[  113.338536][ T2309] usb 3-1: USB disconnect, device number 8
[  113.792196][ T7496] loop3: detected capacity change from 0 to 128
[  113.795566][ T7496] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  113.800342][ T7496] EXT4-fs (loop3): Encoding requested by superblock is unknown
[  113.900689][ T7499] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  114.203968][ T7504] openvswitch: netlink: VXLAN extension 11 out of range max 1
[  114.400372][ T7516] loop2: detected capacity change from 0 to 128
[  114.671032][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  114.774865][ T7522] mmap: syz.3.549 (7522) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  114.798430][ T7524] loop3: detected capacity change from 0 to 512
[  114.801331][ T7524] EXT4-fs (loop3): Test dummy encryption mode enabled
[  114.810831][ T7524] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.823499][    T9] usb 3-1: Using ep0 maxpacket: 8
[  114.831581][    T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40
[  114.836946][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.839466][    T9] usb 3-1: Product: syz
[  114.840830][    T9] usb 3-1: Manufacturer: syz
[  114.842408][    T9] usb 3-1: SerialNumber: syz
[  114.848466][    T9] usb 3-1: config 0 descriptor??
[  114.855702][ T6000] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  115.109189][    T9] usb 3-1: USB disconnect, device number 9
[  115.126516][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  116.063587][    T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  116.215135][    T9] usb 3-1: config 0 has an invalid interface number: 133 but max is 0
[  116.218667][    T9] usb 3-1: config 0 has no interface number 0
[  116.223886][    T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  116.227588][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.231832][    T9] usb 3-1: Product: syz
[  116.233989][    T9] usb 3-1: Manufacturer: syz
[  116.236018][    T9] usb 3-1: SerialNumber: syz
[  116.240691][    T9] usb 3-1: config 0 descriptor??
[  116.361686][ T7543] loop3: detected capacity change from 0 to 4096
[  116.365876][ T7543] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  116.543720][    T9] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected
[  116.562784][    T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81
[  116.566373][    T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1
[  116.569770][    T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2
[  116.577384][    T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  116.986564][    T9] usb 3-1: USB disconnect, device number 10
[  117.003426][    T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  117.006678][    T9] keyspan 3-1:0.133: device disconnected
[  117.344343][ T7560] netlink: 'syz.0.562': attribute type 10 has an invalid length.
[  117.391683][ T7562] Bluetooth: MGMT ver 1.23
[  117.618469][ T7580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.572'.
[  117.622158][ T7580] netlink: 56 bytes leftover after parsing attributes in process `syz.2.572'.
[  117.629537][ T7580] netlink: 'syz.2.572': attribute type 10 has an invalid length.
[  118.260531][ T7599] loop3: detected capacity change from 0 to 32768
[  118.586840][ T7609] binder: 7606:7609 ioctl 4018620d 0 returned -22
[  118.590322][ T7609] binder: 7606:7609 ioctl c0306201 0 returned -14
[  118.661350][ T7611] loop2: detected capacity change from 0 to 764
[  118.815878][ T7612] Symlink component flag not implemented
[  118.827800][ T7612] Symlink component flag not implemented
[  118.841530][ T7612] Symlink component flag not implemented (128)
[  118.852857][ T7612] Symlink component flag not implemented (122)
[  119.640069][ T7625] netlink: 'syz.0.589': attribute type 2 has an invalid length.
[  119.936980][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  120.095335][    T9] usb 1-1: Using ep0 maxpacket: 8
[  120.099137][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  120.105504][    T9] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  120.110381][    T9] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  120.115052][    T9] usb 1-1: Product: syz
[  120.121090][    T9] usb 1-1: Manufacturer: syz
[  120.127116][    T9] usb 1-1: SerialNumber: syz
[  120.342771][    T9] usb 1-1: Handspring Visor / Palm OS: No valid connect info available
[  120.347880][    T9] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  120.351031][    T9] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  120.354484][    T9] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[  120.379255][ T7634] loop2: detected capacity change from 0 to 32768
[  120.386543][ T7634] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section disk_groups: label 3 empty
[  120.386543][ T7634] disk_groups (size 2912):
[  120.386543][ T7634] [deleted] [deleted] [parent 1028 name ] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 
[  120.386644][ T7634] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  120.418055][    C1] vkms_vblank_simulate: vblank timer overrun
[  120.544159][    T9] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  120.549254][    T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  120.554231][    T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  120.723066][ T5863] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  120.768579][    T9] usb 1-1: USB disconnect, device number 9
[  120.785280][    T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  120.802531][    T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  120.808649][    T9] visor 1-1:1.0: device disconnected
[  120.879482][ T5863] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  120.884278][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0
[  120.895371][ T5863] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  120.899538][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.903143][ T5863] usb 4-1: Product: syz
[  120.905540][ T5863] usb 4-1: Manufacturer: syz
[  120.907617][ T5863] usb 4-1: SerialNumber: syz
[  120.920370][ T5863] usb 4-1: config 0 descriptor??
[  120.946609][ T5863] usb 4-1: selecting invalid altsetting 0
[  121.192868][    T9] usb 4-1: USB disconnect, device number 13
[  121.282453][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  121.861673][ T7655] tmpfs: Bad value for 'mpol'
[  121.868094][ T7647] loop0: detected capacity change from 0 to 40427
[  121.877151][ T7647] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  121.889023][ T7647] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  121.899546][ T7647] F2FS-fs (loop0): invalid crc value
[  121.937035][ T7660] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  121.970879][ T7647] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  121.977781][ T7647] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  121.980010][ T7647] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  121.994810][ T7647] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[  122.098832][ T7662] loop3: detected capacity change from 0 to 40427
[  122.104854][ T7662] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  122.107637][ T7662] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  122.162307][ T7662] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.167603][ T7662] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  122.170457][ T7662] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  122.201672][ T6000] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  122.220576][ T6000] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  122.224190][ T6000] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  122.226766][ T6000] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  122.229251][ T6000] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  122.241241][ T6000] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  122.249037][ T6000] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  122.287508][ T7670] syz.3.605: attempt to access beyond end of device
[  122.287508][ T7670] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  122.295102][ T7670] syz.3.605: attempt to access beyond end of device
[  122.295102][ T7670] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  122.313180][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  122.473441][    T9] usb 3-1: Using ep0 maxpacket: 8
[  122.709028][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  122.714235][    T9] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8
[  122.717861][    T9] usb 3-1: config 8 interface 0 has no altsetting 0
[  122.729698][    T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  122.737723][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.740525][    T9] usb 3-1: Product: syz
[  122.742051][    T9] usb 3-1: Manufacturer: syz
[  122.745409][    T9] usb 3-1: SerialNumber: syz
[  122.749832][ T5871] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.755024][ T7665] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  122.833249][ T5871] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.891183][ T5871] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.971532][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.976996][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.977008][ T5871] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.981996][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  122.988021][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.991239][    T9] usb 3-1: selecting invalid altsetting 0
[  122.995764][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.998465][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  123.029313][    T9] usb 3-1: USB disconnect, device number 11
[  123.058040][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  123.060711][ T6006] udevd[6006]: setting owner of /dev/midi3 to uid=0, gid=29 failed: No such file or directory
[  123.223339][ T5871] bridge_slave_1: left allmulticast mode
[  123.231466][ T5871] bridge_slave_1: left promiscuous mode
[  123.240188][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.257749][ T5871] bridge_slave_0: left allmulticast mode
[  123.260896][ T5871] bridge_slave_0: left promiscuous mode
[  123.264006][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.899585][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.906818][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.911183][ T5871] bond0 (unregistering): Released all slaves
[  124.024855][ T5891] hid (null): global environment stack underflow
[  124.041059][ T5891] hid (null): unknown global tag 0xe
[  124.058643][ T5891] hid-generic 0005:0B57:000F.0006: reserved main item tag 0xe
[  124.066345][ T5891] hid-generic 0005:0B57:000F.0006: global environment stack underflow
[  124.069227][ T5891] hid-generic 0005:0B57:000F.0006: item 0 1 1 11 parsing failed
[  124.072405][ T5891] hid-generic 0005:0B57:000F.0006: probe with driver hid-generic failed with error -22
[  124.617371][ T7678] chnl_net:caif_netlink_parms(): no params data found
[  124.712164][ T5871] hsr_slave_0: left promiscuous mode
[  124.722275][ T5871] hsr_slave_1: left promiscuous mode
[  124.727200][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.730723][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.743606][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.746782][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.790128][ T5871] veth1_macvtap: left promiscuous mode
[  124.792286][ T5871] veth0_macvtap: left promiscuous mode
[  124.799173][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'.
[  124.800588][ T5871] veth1_vlan: left promiscuous mode
[  124.806621][ T5871] veth0_vlan: left promiscuous mode
[  125.084151][ T5841] Bluetooth: hci1: command tx timeout
[  125.597328][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  125.720143][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  125.871620][ T7736] loop0: detected capacity change from 0 to 32768
[  125.907136][ T7736] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.932022][ T7736] XFS (loop0): Ending clean mount
[  125.944652][ T7736] XFS (loop0): Quotacheck needed: Please wait.
[  125.990595][ T7736] XFS (loop0): Quotacheck: Done.
[  126.039182][ T5839] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  126.355404][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.359728][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.378432][ T7678] bridge_slave_0: entered allmulticast mode
[  126.389243][ T7678] bridge_slave_0: entered promiscuous mode
[  126.394673][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.397216][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.400257][ T7678] bridge_slave_1: entered allmulticast mode
[  126.404621][ T7678] bridge_slave_1: entered promiscuous mode
[  126.445001][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.450778][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.478567][ T7678] team0: Port device team_slave_0 added
[  126.483616][ T7678] team0: Port device team_slave_1 added
[  126.518145][ T5871] IPVS: stop unused estimator thread 0...
[  126.546020][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.549921][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.563147][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.576835][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.581579][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.592554][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.654609][ T7678] hsr_slave_0: entered promiscuous mode
[  126.658085][ T7678] hsr_slave_1: entered promiscuous mode
[  126.734033][ T7777] netlink: 'syz.2.639': attribute type 3 has an invalid length.
[  126.875481][ T7678] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  126.886030][ T7678] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  126.895891][ T7678] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  126.905175][ T7678] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  126.967940][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.970962][ T7678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.974464][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.977371][ T7678] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.026747][ T7780] loop2: detected capacity change from 0 to 32768
[  127.097103][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.115340][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.124876][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.164762][ T5841] Bluetooth: hci1: command tx timeout
[  127.349362][ T7678] 8021q: adding VLAN 0 to HW filter on device team0
[  127.379342][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.382406][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.397386][ T7798] loop0: detected capacity change from 0 to 40427
[  127.422688][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.425829][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.446404][ T7798] F2FS-fs (loop0): invalid crc value
[  127.501384][ T7798] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  127.507371][ T7798] F2FS-fs (loop0): Start checkpoint disabled!
[  127.516520][ T7798] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  127.544766][ T7678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  127.548839][ T7678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  127.877832][ T7810] loop2: detected capacity change from 0 to 32768
[  127.961954][ T7810] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  128.043911][ T7810] XFS (loop2): Ending clean mount
[  128.050205][ T7810] XFS (loop2): Quotacheck needed: Please wait.
[  128.108104][ T7810] XFS (loop2): Quotacheck: Done.
[  128.141897][ T4285] kworker/u9:4: attempt to access beyond end of device
[  128.141897][ T4285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  128.159305][ T4285] CPU: 0 UID: 0 PID: 4285 Comm: kworker/u9:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  128.159323][ T4285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.159332][ T4285] Workqueue: writeback wb_workfn (flush-7:0)
[  128.159351][ T4285] Call Trace:
[  128.159356][ T4285]  <TASK>
[  128.159363][ T4285]  dump_stack_lvl+0x189/0x250
[  128.159382][ T4285]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.159394][ T4285]  ? __pfx_queue_work_on+0x10/0x10
[  128.159405][ T4285]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.159421][ T4285]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.159446][ T4285]  f2fs_handle_critical_error+0x37c/0x540
[  128.159471][ T4285]  f2fs_write_end_io+0x886/0xb60
[  128.159525][ T4285]  __submit_merged_bio+0x27a/0x6a0
[  128.159551][ T4285]  __submit_merged_write_cond+0x255/0x530
[  128.159580][ T4285]  f2fs_write_data_pages+0x261d/0x3000
[  128.159636][ T4285]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.159668][ T4285]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  128.159709][ T4285]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  128.159734][ T4285]  ? trace_f2fs_writepages+0x7f/0x200
[  128.159751][ T4285]  ? f2fs_write_node_pages+0x478/0x6e0
[  128.159771][ T4285]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  128.159799][ T4285]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.159817][ T4285]  do_writepages+0x32e/0x550
[  128.159838][ T4285]  ? reacquire_held_locks+0x127/0x1d0
[  128.159850][ T4285]  ? writeback_sb_inodes+0x384/0x1010
[  128.159871][ T4285]  __writeback_single_inode+0x145/0xff0
[  128.159886][ T4285]  ? do_raw_spin_unlock+0x4d/0x240
[  128.159903][ T4285]  writeback_sb_inodes+0x6c7/0x1010
[  128.159938][ T4285]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  128.159981][ T4285]  ? rcu_is_watching+0x15/0xb0
[  128.160003][ T4285]  wb_writeback+0x43b/0xaf0
[  128.160025][ T4285]  ? queue_io+0x331/0x590
[  128.160044][ T4285]  ? __pfx_wb_writeback+0x10/0x10
[  128.160066][ T4285]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.160085][ T4285]  wb_workfn+0x409/0xef0
[  128.160110][ T4285]  ? __pfx_wb_workfn+0x10/0x10
[  128.160127][ T4285]  ? __lock_acquire+0xab9/0xd20
[  128.160152][ T4285]  ? process_scheduled_works+0x9ef/0x17b0
[  128.160169][ T4285]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.160183][ T4285]  ? process_scheduled_works+0x9ef/0x17b0
[  128.160193][ T4285]  ? process_scheduled_works+0x9ef/0x17b0
[  128.160206][ T4285]  process_scheduled_works+0xae1/0x17b0
[  128.160241][ T4285]  ? __pfx_process_scheduled_works+0x10/0x10
[  128.160268][ T4285]  worker_thread+0x8a0/0xda0
[  128.160284][ T4285]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.160304][ T4285]  ? __kthread_parkme+0x7b/0x200
[  128.160326][ T4285]  kthread+0x711/0x8a0
[  128.160343][ T4285]  ? __pfx_worker_thread+0x10/0x10
[  128.160354][ T4285]  ? __pfx_kthread+0x10/0x10
[  128.160368][ T4285]  ? _raw_spin_unlock_irq+0x23/0x50
[  128.160379][ T4285]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.160392][ T4285]  ? __pfx_kthread+0x10/0x10
[  128.160406][ T4285]  ret_from_fork+0x3fc/0x770
[  128.160423][ T4285]  ? __pfx_ret_from_fork+0x10/0x10
[  128.160442][ T4285]  ? __switch_to_asm+0x39/0x70
[  128.160456][ T4285]  ? __switch_to_asm+0x33/0x70
[  128.160468][ T4285]  ? __pfx_kthread+0x10/0x10
[  128.160483][ T4285]  ret_from_fork_asm+0x1a/0x30
[  128.160539][ T4285]  </TASK>
[  128.160544][ T4285] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  128.175083][ T7678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.316233][ T5848] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  128.505216][ T7843] tipc: Enabling of bearer <etl:g> rejected, media not registered
[  128.639866][ T7678] veth0_vlan: entered promiscuous mode
[  128.646713][ T7678] veth1_vlan: entered promiscuous mode
[  128.660524][ T7852] loop2: detected capacity change from 0 to 512
[  128.670697][ T7678] veth0_macvtap: entered promiscuous mode
[  128.678710][ T7678] veth1_macvtap: entered promiscuous mode
[  128.687124][ T7852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  128.694811][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.701948][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.714474][   T33] audit: type=1326 audit(1755487349.848:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.2.650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f6b8ebe9 code=0x7ffc0000
[  128.722879][ T7852] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.650: Unimplemented hash flags: 0x0001
[  128.734307][   T33] audit: type=1326 audit(1755487349.848:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.2.650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f6b8ebe9 code=0x7ffc0000
[  128.741431][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.744349][ T7852] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.650: Corrupt directory, running e2fsck is recommended
[  128.748699][   T33] audit: type=1326 audit(1755487349.848:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.2.650" exe="/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fa3f6b8ebe9 code=0x7ffc0000
[  128.748844][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.760774][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.760792][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.771238][ T7852] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.650: path /254/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  128.834906][   T33] audit: type=1326 audit(1755487349.968:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.2.650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f6b8ebe9 code=0x7ffc0000
[  128.855699][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.855714][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.870243][   T33] audit: type=1326 audit(1755487349.998:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7851 comm="syz.2.650" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f6b8ebe9 code=0x7ffc0000
[  128.876386][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.876397][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.919070][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.151547][ T5870] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.159721][ T5870] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.174977][ T5870] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.178705][ T5870] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.243316][ T5841] Bluetooth: hci1: command tx timeout
[  129.475401][ T7896] loop4: detected capacity change from 0 to 8192
[  129.486995][ T7896] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  129.501815][ T7885] loop2: detected capacity change from 0 to 32768
[  129.509386][ T7885] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.657 (7885)
[  129.536804][ T7885] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.540347][ T7885] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  129.542295][ T7896] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  129.555065][ T7885] BTRFS info (device loop2): disk space caching is enabled
[  129.559763][ T7896] ntfs3(loop4): Failed to load $Extend (-2).
[  129.562225][ T7896] ntfs3(loop4): Failed to initialize $Extend.
[  129.568109][ T7885] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  129.630192][ T7885] BTRFS info (device loop2): rebuilding free space tree
[  129.697624][ T7885] BTRFS info (device loop2): disabling free space tree
[  129.699809][ T7885] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.714617][ T7885] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  129.806823][ T5848] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.910273][ T7895] loop0: detected capacity change from 0 to 32768
[  129.912787][ T7895] XFS: noikeep mount option is deprecated.
[  129.948055][ T7895] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  129.992326][ T7895] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  130.019245][ T7895] XFS (loop0): Starting recovery (logdev: internal)
[  130.040061][ T7895] XFS (loop0): Ending recovery (logdev: internal)
[  130.119373][ T5839] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  130.191573][ T7933] loop2: detected capacity change from 0 to 32768
[  130.195901][ T7933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.666 (7933)
[  130.208180][ T7933] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.212062][ T7933] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  130.215363][ T7933] BTRFS info (device loop2): using free-space-tree
[  130.215377][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.670'.
[  130.300986][ T5848] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.442037][ T7962] overlayfs: maximum fs stacking depth exceeded
[  130.961822][ T7978] loop2: detected capacity change from 0 to 512
[  130.982033][ T7978] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  131.031782][ T7978] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  131.042339][ T7978] EXT4-fs (loop2): 1 truncate cleaned up
[  131.049227][ T7978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.108776][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.186872][ T7991] loop4: detected capacity change from 0 to 512
[  131.200237][ T7991] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.683: iget: bad i_size value: 38620345925642
[  131.206321][ T7991] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.683: couldn't read orphan inode 15 (err -117)
[  131.217906][ T7991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.257707][ T7678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.323119][ T5841] Bluetooth: hci1: command tx timeout
[  131.488900][ T7998] loop2: detected capacity change from 0 to 4096
[  131.503432][ T7998] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  131.670813][ T7996] loop4: detected capacity change from 0 to 32768
[  131.694653][   T33] audit: type=1800 audit(1755487352.828:231): pid=7996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.685" name="file1" dev="loop4" ino=4 res=0 errno=0
[  131.715737][ T7996] ERROR: (device loop4): diWrite: ixpxd invalid
[  131.715737][ T7996] 
[  131.727204][ T7996] ERROR: (device loop4): remounting filesystem as read-only
[  131.734487][ T7996] ERROR: (device loop4): txCommit: 
[  131.734487][ T7996] 
[  131.894712][ T5841] Bluetooth: hci0: unexpected subevent 0x01 length: 11 < 18
[  131.981607][ T8021] loop4: detected capacity change from 0 to 256
[  131.986329][ T8021] exfat: Deprecated parameter 'namecase'
[  131.994864][ T8021] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[  132.052556][ T8023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.055723][ T8023] IPv6: NLM_F_CREATE should be set when creating new route
[  132.170242][ T8015] loop0: detected capacity change from 0 to 40427
[  132.178131][ T8015] f2fs: Unknown parameter ''
[  132.447285][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.449910][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  134.023977][ T8059] loop0: detected capacity change from 0 to 32768
[  134.326225][ T8071] netlink: 'syz.0.715': attribute type 21 has an invalid length.
[  134.329823][ T8071] netlink: 144 bytes leftover after parsing attributes in process `syz.0.715'.
[  134.633203][ T8080] netlink: 'syz.4.719': attribute type 41 has an invalid length.
[  135.513229][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  135.683336][   T10] usb 5-1: Using ep0 maxpacket: 16
[  135.700390][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  135.707558][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  135.722282][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  135.728205][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.731643][   T10] usb 5-1: Product: syz
[  135.739049][   T10] usb 5-1: Manufacturer: syz
[  135.741069][   T10] usb 5-1: SerialNumber: syz
[  135.761506][   T10] usb 5-1: config 0 descriptor??
[  135.781088][   T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  135.791984][   T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  136.382569][ T8111] netlink: 'syz.2.729': attribute type 2 has an invalid length.
[  136.392466][   T10] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  136.408843][   T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  136.622631][ T8115] loop2: detected capacity change from 0 to 8
[  137.017269][   T10] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[  137.020762][   T10] em28xx 5-1:0.0: couldn't setup AC97 register 2
[  137.030009][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'.
[  137.039990][   T10] em28xx 5-1:0.0: couldn't setup AC97 register 4
[  137.045886][ T8123] veth0_to_bond: entered allmulticast mode
[  137.049635][   T10] em28xx 5-1:0.0: couldn't setup AC97 register 6
[  137.054810][   T10] em28xx 5-1:0.0: couldn't setup AC97 register 54
[  137.061219][   T10] em28xx 5-1:0.0: couldn't setup AC97 register 56
[  137.286160][   T10] em28xx 5-1:0.0: couldn't setup AC97 register 2
[  137.288943][   T10] em28xx 5-1:0.0: couldn't setup AC97 register 4
[  137.291683][   T10] em28xx 5-1:0.0: couldn't setup AC97 register 6
[  137.298522][   T10] em28xx 5-1:0.0: couldn't setup AC97 register 54
[  137.301331][   T10] em28xx 5-1:0.0: couldn't setup AC97 register 56
[  137.306562][   T10] usb 5-1: USB disconnect, device number 2
[  137.380486][ T8151] loop2: detected capacity change from 0 to 512
[  138.153221][   T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  138.260279][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  138.303049][   T47] usb 5-1: Using ep0 maxpacket: 32
[  138.310443][   T47] usb 5-1: config 0 has an invalid interface number: 225 but max is 0
[  138.313815][   T47] usb 5-1: config 0 has no interface number 0
[  138.318302][   T47] usb 5-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79
[  138.321558][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.324591][   T47] usb 5-1: Product: syz
[  138.326407][   T47] usb 5-1: Manufacturer: syz
[  138.328126][   T47] usb 5-1: SerialNumber: syz
[  138.336921][   T47] usb 5-1: config 0 descriptor??
[  138.413183][   T10] usb 3-1: Using ep0 maxpacket: 32
[  138.418455][   T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  138.421379][   T10] usb 3-1: config 0 has no interface number 0
[  138.423674][   T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  138.427880][   T10] usb 3-1: config 0 interface 85 has no altsetting 0
[  138.432511][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  138.437238][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.440304][   T10] usb 3-1: Product: syz
[  138.441862][   T10] usb 3-1: Manufacturer: syz
[  138.443509][   T10] usb 3-1: SerialNumber: syz
[  138.447303][   T10] usb 3-1: config 0 descriptor??
[  138.523182][ T5863] psmouse serio2: Failed to reset mouse on : -5
[  138.747626][   T47] mos7840 5-1:0.225: required endpoints missing
[  138.753739][   T47] usb 5-1: USB disconnect, device number 3
[  139.058520][   T10] appletouch 3-1:0.85: Geyser mode initialized.
[  139.061633][   T10] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input11
[  139.270524][   T10] usb 3-1: USB disconnect, device number 12
[  139.297238][   T10] appletouch 3-1:0.85: input: appletouch disconnected
[  140.515768][ T8210] loop2: detected capacity change from 0 to 32768
[  140.524401][ T8210] (syz.2.765,8210,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  140.541448][ T8210] (syz.2.765,8210,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  140.554631][ T8210] JBD2: Ignoring recovery information on journal
[  140.599854][ T8210] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  140.656418][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[  140.760268][ T8221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.766'.
[  140.791318][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.766'.
[  141.207513][ T8244] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  141.473462][ T8247] loop2: detected capacity change from 0 to 32768
[  141.503756][ T8247] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  141.566136][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[  141.621267][ T8259] loop4: detected capacity change from 0 to 32768
[  141.760501][ T8273] tipc: Started in network mode
[  141.762567][ T8273] tipc: Node identity caecc0b120a, cluster identity 4711
[  141.766243][ T8273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.770593][ T8272] tipc: Resetting bearer <eth:syzkaller0>
[  141.905390][ T8275] loop4: detected capacity change from 0 to 32768
[  141.909484][ T8275] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.781 (8275)
[  141.926154][ T8275] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  141.929666][ T8275] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  141.933170][ T8275] BTRFS info (device loop4): using free-space-tree
[  142.035724][ T8275] BTRFS info (device loop4): rebuilding free space tree
[  142.088788][   T33] audit: type=1800 audit(1755487363.218:232): pid=8275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.781" name="file1" dev="loop4" ino=260 res=0 errno=0
[  142.102592][   T33] audit: type=1804 audit(1755487363.228:233): pid=8275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.781" name="/newroot/51/file2/bus" dev="loop4" ino=263 res=1 errno=0
[  142.179057][ T7678] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  142.309511][ T5863] misc userio: Buffer overflowed, userio client isn't keeping up
[  142.774961][   T10] tipc: Node number set to 3930898609
[  143.283275][ T8272] tipc: Disabling bearer <eth:syzkaller0>
[  143.287645][ T8298] warning: `syz.4.783' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  143.374252][ T5863] input: PS/2 Generic Mouse as /devices/serio2/input/input10
[  143.593284][ T5863] psmouse serio2: Failed to enable mouse on 
[  144.208589][ T8312] loop0: detected capacity change from 0 to 256
[  144.212762][ T8312] exfat: Deprecated parameter 'namecase'
[  144.215247][ T8312] exfat: Deprecated parameter 'namecase'
[  144.232162][ T8312] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbc51571d, utbl_chksum : 0xe619d30d)
[  145.233070][ T2204] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  145.399134][ T2204] usb 3-1: unable to get BOS descriptor or descriptor too short
[  145.409075][ T2204] usb 3-1: not running at top speed; connect to a high speed hub
[  145.450073][ T2204] usb 3-1: config 4 has an invalid interface number: 147 but max is 0
[  145.456276][ T2204] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  145.475462][ T2204] usb 3-1: config 4 has no interface number 0
[  145.480599][ T2204] usb 3-1: Dual-Role OTG device on HNP port
[  145.486559][ T2204] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  145.490038][ T2204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38
[  145.493217][ T2204] usb 3-1: Product: syz
[  145.500876][ T2204] usb 3-1: Manufacturer: syz
[  145.506464][ T2204] usb 3-1: SerialNumber: syz
[  145.742729][ T8330] loop4: detected capacity change from 0 to 32768
[  145.766360][ T2204] usb 3-1: Found UVC 0.02 device syz (04f2:b746)
[  145.768872][ T2204] usb 3-1: No valid video chain found.
[  145.784233][ T8330] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  145.784633][ T2204] usb 3-1: USB disconnect, device number 13
[  145.831272][ T7678] ocfs2: Unmounting device (7,4) on (node local)
[  146.682538][ T8365] openvswitch: netlink: Flow actions attr not present in new flow.
[  146.863279][ T5999] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  146.897602][ T8367] loop0: detected capacity change from 0 to 512
[  146.906354][ T8367] EXT4-fs (loop0): Test dummy encryption mode enabled
[  146.909729][ T8367] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  146.937058][ T8367] EXT4-fs (loop0): 1 truncate cleaned up
[  146.964868][ T8367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.385554][ T5999] usb 5-1: unable to get BOS descriptor or descriptor too short
[  147.395487][ T5999] usb 5-1: config 3 has an invalid interface number: 8 but max is 3
[  147.398250][ T5999] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  147.401746][ T5999] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 4
[  147.405429][ T5999] usb 5-1: config 3 has no interface number 0
[  147.407619][ T5999] usb 5-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 52, changing to 9
[  147.412474][ T5999] usb 5-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid maxpacket 8241, setting to 1024
[  147.416933][ T5999] usb 5-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  147.422049][ T5999] usb 5-1: config 3 interface 8 has no altsetting 0
[  147.427987][ T5999] usb 5-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  147.431618][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.434840][ T5999] usb 5-1: Product: syz
[  147.436889][ T5999] usb 5-1: Manufacturer: syz
[  147.438714][ T5999] usb 5-1: SerialNumber: syz
[  148.055770][ T5999] appledisplay 5-1:3.8: Error while getting initial brightness: -71
[  148.085786][ T5999] appledisplay 5-1:3.8: probe with driver appledisplay failed with error -71
[  148.095441][ T5999] usb 5-1: USB disconnect, device number 4
[  148.133887][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.760074][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[  148.767956][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'.
[  148.880605][ T8419] loop0: detected capacity change from 0 to 512
[  148.892195][ T8419] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)!
[  148.916449][ T8419] EXT4-fs (loop0): group descriptors corrupted!
[  149.072233][ T8436] loop0: detected capacity change from 0 to 64
[  149.150386][ T8442] tls_set_device_offload: netdev not found
[  149.249091][ T2204] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  149.444758][ T2204] usb 3-1: config 162 has an invalid interface number: 35 but max is 0
[  149.448078][ T2204] usb 3-1: config 162 has no interface number 0
[  149.450635][ T2204] usb 3-1: config 162 interface 35 has no altsetting 0
[  149.712507][ T2204] usb 3-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=b9.11
[  149.717577][ T2204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.726132][ T2204] usb 3-1: Product: syz
[  149.730060][ T2204] usb 3-1: Manufacturer: syz
[  149.732738][ T2204] usb 3-1: SerialNumber: syz
[  149.971465][ T2204] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:162.35/input/input13
[  150.004302][ T2204] usb 3-1: USB disconnect, device number 14
[  150.096582][ T8496] loop4: detected capacity change from 0 to 512
[  150.121078][ T8496] EXT4-fs: Ignoring removed mblk_io_submit option
[  150.124763][ T8496] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  150.139777][ T8496] EXT4-fs (loop4): 1 truncate cleaned up
[  150.143786][ T8496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.391224][ T8496] netlink: 'syz.4.837': attribute type 1 has an invalid length.
[  150.411214][ T8496] bond1: entered promiscuous mode
[  150.414461][ T8496] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.443766][ T8496] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.446771][ T8496] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  150.451025][ T8496] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  150.459712][ T8496] bond1: (slave ip6gre1): making interface the new active one
[  150.462477][ T8496] ip6gre1: entered promiscuous mode
[  150.465547][ T8496] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  150.668539][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'.
[  150.672246][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'.
[  150.677479][ T8520] netlink: 'syz.2.844': attribute type 1 has an invalid length.
[  150.680430][ T8520] netlink: 10 bytes leftover after parsing attributes in process `syz.2.844'.
[  150.743739][ T8520] nbd: socks must be embedded in a SOCK_ITEM attr
[  150.746726][ T8520] block nbd0: shutting down sockets
[  151.268015][ T8526] syz.0.846 (8526): drop_caches: 0
[  151.548977][ T8536] loop0: detected capacity change from 0 to 2048
[  151.575440][ T5850]  loop0: p1 < >
[  151.577054][ T5850] loop0: partition table partially beyond EOD, truncated
[  151.580606][ T5850] loop0: p1 start 524289 is beyond EOD, truncated
[  151.586527][ T8536]  loop0: p1 < >
[  151.588197][ T8536] loop0: partition table partially beyond EOD, truncated
[  151.591401][ T8536] loop0: p1 start 524289 is beyond EOD, truncated
[  151.828744][ T8538] loop0: detected capacity change from 0 to 32768
[  151.833770][ T8538] (syz.0.852,8538,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  151.839532][ T8538] (syz.0.852,8538,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  151.850769][ T8538] JBD2: Ignoring recovery information on journal
[  151.880750][ T8538] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  151.943105][ T5891] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  151.980606][ T8538] 
[  151.981618][ T8538] ======================================================
[  151.984466][ T8538] WARNING: possible circular locking dependency detected
[  151.987048][ T8538] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  151.990900][ T8538] ------------------------------------------------------
[  151.993907][ T8538] syz.0.852/8538 is trying to acquire lock:
[  151.996220][ T8538] ffff888032e36f40 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_del_inode_from_orphan+0x134/0x740
[  152.001239][ T8538] 
[  152.001239][ T8538] but task is already holding lock:
[  152.004367][ T8538] ffff888029a86be0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_dio_end_io+0x389/0x10f0
[  152.008790][ T8538] 
[  152.008790][ T8538] which lock already depends on the new lock.
[  152.008790][ T8538] 
[  152.013127][ T8538] 
[  152.013127][ T8538] the existing dependency chain (in reverse order) is:
[  152.016837][ T8538] 
[  152.016837][ T8538] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  152.020660][ T8538]        lock_acquire+0x120/0x360
[  152.022710][ T8538]        down_write+0x96/0x1f0
[  152.024719][ T8538]        ocfs2_create_local_dquot+0x19d/0x1a40
[  152.026962][ T8538]        ocfs2_acquire_dquot+0x80f/0xb30
[  152.029061][ T8538]        dqget+0x7b1/0xf10
[  152.030926][ T8538]        __dquot_initialize+0x3b3/0xcb0
[  152.033211][ T8538]        ocfs2_get_init_inode+0x13b/0x1b0
[  152.035662][ T8538]        ocfs2_mknod+0x863/0x2050
[  152.037854][ T8538]        ocfs2_create+0x1a5/0x440
[  152.039835][ T8538]        path_openat+0x14f4/0x3830
[  152.041964][ T8538]        do_filp_open+0x1fa/0x410
[  152.044085][ T8538]        do_sys_openat2+0x121/0x1c0
[  152.046300][ T8538]        __x64_sys_openat+0x138/0x170
[  152.048621][ T8538]        do_syscall_64+0xfa/0x3b0
[  152.050824][ T8538]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.053601][ T8538] 
[  152.053601][ T8538] -> #2 (&dquot->dq_lock){+.+.}-{4:4}:
[  152.056874][ T8538]        lock_acquire+0x120/0x360
[  152.058915][ T8538]        __mutex_lock+0x187/0x1360
[  152.061030][ T8538]        dqget+0x72a/0xf10
[  152.062862][ T8538]        __dquot_initialize+0x3b3/0xcb0
[  152.064962][ T8538]        ocfs2_get_init_inode+0x13b/0x1b0
[  152.067128][ T8538]        ocfs2_mknod+0x863/0x2050
[  152.069096][ T8538]        ocfs2_create+0x1a5/0x440
[  152.070963][ T8538]        path_openat+0x14f4/0x3830
[  152.072848][ T8538]        do_filp_open+0x1fa/0x410
[  152.075032][ T8538]        do_sys_openat2+0x121/0x1c0
[  152.077056][ T8538]        __x64_sys_openat+0x138/0x170
[  152.079399][ T8538]        do_syscall_64+0xfa/0x3b0
[  152.081649][ T8538]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.084381][ T8538] 
[  152.084381][ T8538] -> #1 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  152.088892][ T8538]        lock_acquire+0x120/0x360
[  152.091022][ T8538]        down_write+0x96/0x1f0
[  152.092997][ T8538]        ocfs2_evict_inode+0x153d/0x40e0
[  152.094917][ T8538]        evict+0x504/0x9c0
[  152.096846][ T8538]        do_unlinkat+0x39f/0x560
[  152.098895][ T8538]        __x64_sys_unlink+0x47/0x50
[  152.101130][ T8538]        do_syscall_64+0xfa/0x3b0
[  152.103354][ T8538]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.105977][ T8538] 
[  152.105977][ T8538] -> #0 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}:
[  152.110435][ T8538]        validate_chain+0xb9b/0x2140
[  152.112680][ T8538]        __lock_acquire+0xab9/0xd20
[  152.114675][ T8538]        lock_acquire+0x120/0x360
[  152.116774][ T8538]        down_write+0x96/0x1f0
[  152.118827][ T8538]        ocfs2_del_inode_from_orphan+0x134/0x740
[  152.121523][ T8538]        ocfs2_dio_end_io+0x479/0x10f0
[  152.123893][ T8538]        dio_complete+0x25b/0x790
[  152.126067][ T8538]        __blockdev_direct_IO+0x2e63/0x3490
[  152.128621][ T8538]        ocfs2_direct_IO+0x25f/0x2d0
[  152.130901][ T8538]        generic_file_direct_write+0x1db/0x3e0
[  152.133563][ T8538]        __generic_file_write_iter+0x11d/0x230
[  152.136216][ T8538]        ocfs2_file_write_iter+0x157a/0x1d10
[  152.138823][ T8538]        iter_file_splice_write+0x9c9/0x10b0
[  152.141417][ T8538]        direct_splice_actor+0x101/0x160
[  152.143856][ T8538]        splice_direct_to_actor+0x5a8/0xcc0
[  152.146423][ T8538]        do_splice_direct+0x181/0x270
[  152.148738][ T8538]        do_sendfile+0x4da/0x7e0
[  152.150893][ T8538]        __se_sys_sendfile64+0x13e/0x190
[  152.153332][ T8538]        do_syscall_64+0xfa/0x3b0
[  152.155505][ T8538]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.158271][ T8538] 
[  152.158271][ T8538] other info that might help us debug this:
[  152.158271][ T8538] 
[  152.162157][ T8538] Chain exists of:
[  152.162157][ T8538]   &ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE] --> &dquot->dq_lock --> &ocfs2_quota_ip_alloc_sem_key
[  152.162157][ T8538] 
[  152.169013][ T8538]  Possible unsafe locking scenario:
[  152.169013][ T8538] 
[  152.171430][ T8538]        CPU0                    CPU1
[  152.173101][ T8538]        ----                    ----
[  152.174844][ T8538]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  152.174981][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short
[  152.176575][ T8538]                                lock(&dquot->dq_lock);
[  152.176584][ T8538]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  152.176590][ T8538]   lock(&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]);
[  152.176597][ T8538] 
[  152.176597][ T8538]  *** DEADLOCK ***
[  152.176597][ T8538] 
[  152.176600][ T8538] 3 locks held by syz.0.852/8538:
[  152.176605][ T8538]  #0: ffff888112612428 (sb_writers#16){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160
[  152.176633][ T8538]  #1: 
[  152.180431][ T5891] usb 3-1: not running at top speed; connect to a high speed hub
[  152.181893][ T8538] ffff888029a86f40 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}, at: ocfs2_file_write_iter+0x429/0x1d10
[  152.181927][ T8538]  #2: ffff888029a86be0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_dio_end_io+0x389/0x10f0
[  152.181947][ T8538] 
[  152.181947][ T8538] stack backtrace:
[  152.181952][ T8538] CPU: 0 UID: 0 PID: 8538 Comm: syz.0.852 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  152.181962][ T8538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.181967][ T8538] Call Trace:
[  152.181971][ T8538]  <TASK>
[  152.181975][ T8538]  dump_stack_lvl+0x189/0x250
[  152.181986][ T8538]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.181994][ T8538]  ? __pfx__printk+0x10/0x10
[  152.182004][ T8538]  ? print_lock_name+0xde/0x100
[  152.182013][ T8538]  print_circular_bug+0x2ee/0x310
[  152.182022][ T8538]  check_noncircular+0x134/0x160
[  152.182030][ T8538]  validate_chain+0xb9b/0x2140
[  152.182038][ T8538]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  152.182050][ T8538]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  152.182061][ T8538]  __lock_acquire+0xab9/0xd20
[  152.182076][ T8538]  ? ocfs2_del_inode_from_orphan+0x134/0x740
[  152.182083][ T8538]  lock_acquire+0x120/0x360
[  152.182092][ T8538]  ? ocfs2_del_inode_from_orphan+0x134/0x740
[  152.182100][ T8538]  ? do_raw_spin_unlock+0x4d/0x240
[  152.182109][ T8538]  down_write+0x96/0x1f0
[  152.182115][ T8538]  ? ocfs2_del_inode_from_orphan+0x134/0x740
[  152.182122][ T8538]  ? __pfx_down_write+0x10/0x10
[  152.182129][ T8538]  ocfs2_del_inode_from_orphan+0x134/0x740
[  152.182137][ T8538]  ? ocfs2_dio_end_io+0x389/0x10f0
[  152.182144][ T8538]  ? __pfx_ocfs2_del_inode_from_orphan+0x10/0x10
[  152.182152][ T8538]  ? down_write+0x162/0x1f0
[  152.182158][ T8538]  ? __pfx_down_write+0x10/0x10
[  152.182164][ T8538]  ? ocfs2_direct_IO+0x25f/0x2d0
[  152.182170][ T8538]  ? __generic_file_write_iter+0x11d/0x230
[  152.182179][ T8538]  ? ocfs2_file_write_iter+0x157a/0x1d10
[  152.182189][ T8538]  ? iter_file_splice_write+0x9c9/0x10b0
[  152.182201][ T8538]  ocfs2_dio_end_io+0x479/0x10f0
[  152.182209][ T8538]  ? __pfx_ocfs2_dio_end_io+0x10/0x10
[  152.182220][ T8538]  ? __lock_acquire+0xab9/0xd20
[  152.182231][ T8538]  ? do_raw_spin_lock+0x121/0x290
[  152.182240][ T8538]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  152.182272][ T8538]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.182281][ T8538]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  152.182290][ T8538]  ? __pfx_ocfs2_dio_end_io+0x10/0x10
[  152.182297][ T8538]  dio_complete+0x25b/0x790
[  152.182308][ T8538]  __blockdev_direct_IO+0x2e63/0x3490
[  152.182325][ T8538]  ? __pfx___blockdev_direct_IO+0x10/0x10
[  152.182335][ T8538]  ? __pfx_invalidate_inode_pages2_range+0x10/0x10
[  152.182345][ T8538]  ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10
[  152.182354][ T8538]  ? filemap_write_and_wait_range+0x18a/0x320
[  152.182365][ T8538]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  152.182375][ T8538]  ? inode_set_ctime_to_ts+0x126/0x2f0
[  152.182388][ T8538]  ? current_time+0x222/0x370
[  152.182395][ T8538]  ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10
[  152.182403][ T8538]  ocfs2_direct_IO+0x25f/0x2d0
[  152.182411][ T8538]  generic_file_direct_write+0x1db/0x3e0
[  152.182420][ T8538]  ? file_update_time+0x416/0x490
[  152.182428][ T8538]  __generic_file_write_iter+0x11d/0x230
[  152.182436][ T8538]  ? ocfs2_file_write_iter+0x1551/0x1d10
[  152.182446][ T8538]  ocfs2_file_write_iter+0x157a/0x1d10
[  152.182457][ T8538]  ? kasan_save_track+0x3e/0x80
[  152.182465][ T8538]  ? __kasan_kmalloc+0x93/0xb0
[  152.182474][ T8538]  ? __kmalloc_noprof+0x27a/0x4f0
[  152.182485][ T8538]  ? __pfx_ocfs2_file_write_iter+0x10/0x10
[  152.182499][ T8538]  ? splice_from_pipe_next+0x608/0x660
[  152.182510][ T8538]  ? __asan_memset+0x22/0x50
[  152.182518][ T8538]  iter_file_splice_write+0x9c9/0x10b0
[  152.182532][ T8538]  ? __pfx_iter_file_splice_write+0x10/0x10
[  152.182542][ T8538]  ? rcu_read_lock_any_held+0xb3/0x120
[  152.182551][ T8538]  ? __pfx_iter_file_splice_write+0x10/0x10
[  152.182561][ T8538]  direct_splice_actor+0x101/0x160
[  152.182571][ T8538]  splice_direct_to_actor+0x5a8/0xcc0
[  152.182584][ T8538]  ? __pfx_direct_splice_actor+0x10/0x10
[  152.182594][ T8538]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  152.182605][ T8538]  do_splice_direct+0x181/0x270
[  152.182615][ T8538]  ? __pfx_do_splice_direct+0x10/0x10
[  152.182624][ T8538]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  152.182636][ T8538]  ? rw_verify_area+0x255/0x4d0
[  152.182645][ T8538]  do_sendfile+0x4da/0x7e0
[  152.182652][ T8538]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.182662][ T8538]  ? __pfx_do_sendfile+0x10/0x10
[  152.182669][ T8538]  ? __se_sys_futex+0x36f/0x400
[  152.182679][ T8538]  __se_sys_sendfile64+0x13e/0x190
[  152.182689][ T8538]  ? __pfx___se_sys_futex+0x10/0x10
[  152.182698][ T8538]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  152.182708][ T8538]  ? rcu_is_watching+0x15/0xb0
[  152.182715][ T8538]  ? do_syscall_64+0xbe/0x3b0
[  152.182725][ T8538]  do_syscall_64+0xfa/0x3b0
[  152.182735][ T8538]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.182743][ T8538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.182750][ T8538]  ? exc_page_fault+0x9f/0xf0
[  152.182759][ T8538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.182766][ T8538] RIP: 0033:0x7f785ff8ebe9
[  152.182773][ T8538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.182780][ T8538] RSP: 002b:00007f7860e7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  152.182788][ T8538] RAX: ffffffffffffffda RBX: 00007f78601b5fa0 RCX: 00007f785ff8ebe9
[  152.182793][ T8538] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007
[  152.182797][ T8538] RBP: 00007f7860011e19 R08: 0000000000000000 R09: 0000000000000000
[  152.182802][ T8538] R10: 0000000000fffe80 R11: 0000000000000246 R12: 0000000000000000
[  152.182806][ T8538] R13: 00007f78601b6038 R14: 00007f78601b5fa0 R15: 00007ffe9f0a90c8
[  152.182814][ T8538]  </TASK>
[  152.396050][ T8538] (syz.0.852,8538,0):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = -28
[  152.402117][ T5891] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  152.451113][ T5891] usb 3-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.458365][ T5891] usb 3-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  152.462145][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.465778][ T5891] usb 3-1: Product: syz
[  152.467546][ T5891] usb 3-1: Manufacturer: syz
[  152.469422][ T5891] usb 3-1: SerialNumber: syz
[  152.497152][ T5839] ocfs2: Unmounting device (7,0) on (node local)
[  152.683092][ T5891] usb 3-1: USB disconnect, device number 15
[  153.122031][ T7678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.

VM DIAGNOSIS:
03:22:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000487fe RDI=00000000000487ff RBP=00000000000003f8 RSP=ffffc90002cfe130
R8 =ffff88801f868237 R9 =1ffff11003f0d046 R10=dffffc0000000000 R11=ffffffff854f0270
R12=dffffc0000000000 R13=ffffffff99af98f9 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f02ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7860e7e6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31e11ff8 CR3=000000010c434000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f8924012e53
XMM06=0000000000000000 00007f8924012e4d XMM07=0000000000000000 00007f8924012e61
XMM08=0000000000000000 00007f8924012ee7 XMM09=0000000000000000 00007f8924012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=46610da222e20700 RBX=ffffffff81968338 RCX=46610da222e20700 RDX=0000000000000001
RSI=ffffffff8be333e0 RDI=ffffffff81968338 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055af2c4367e8 CR3=0000000027fb2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81748683 ffffffff81748683
XMM02=0100010008000200 ffffffff81748683 XMM03=620001000c001200 1cb2552125000fff
XMM04=00007f8924ced100 00007f8924187460 XMM05=00007f8924187478 00007f89241874c0
XMM06=00007f89241874b8 00007f89241874b0 XMM07=00007f89241874a8 00007f89241874a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f8924012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
