last executing test programs:

2.059816022s ago: executing program 0 (id=422):
syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000000c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@compress}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x80)
write$dsp(r0, &(0x7f0000000100)='n', 0x1)
ftruncate(r1, 0x2007ffb)
sendfile(r0, r1, 0x0, 0x1000000201005)

1.18784169s ago: executing program 2 (id=426):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

1.084592748s ago: executing program 0 (id=427):
keyctl$clear(0x11, 0xfffffffffffffffd)

964.425352ms ago: executing program 2 (id=428):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x101, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", "00004010", "0300", "fdff1310", ["8b59b4d766cbd6e4af000700", "c2fed6e1d2de000000002982", "000000ff0000000000000020", "0006488000000000e31000"]})

835.618363ms ago: executing program 0 (id=429):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x11, 0x5, 0x401}], 0x18)

835.453386ms ago: executing program 0 (id=430):
socket(0x1d, 0x800, 0x1)

750.197342ms ago: executing program 0 (id=431):
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x24, 0x0, 0x0, @void, @value=0x0}, 0x20)

749.860582ms ago: executing program 0 (id=432):
syz_usb_connect$uac1(0x2, 0x9c, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xff, 0x80, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x6}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x2, 0x6, [0x9, 0x5, 0x3, 0x8, 0x8, 0x2], 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7f, 0x2, 0xe, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x4, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x8, 0x8, {0x7, 0x25, 0x1, 0x2, 0xa9, 0x7b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x84, 0x1, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x3, 0xf, {0x7, 0x25, 0x1, 0x2, 0x7, 0x6}}}}}}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x12, &(0x7f0000000480)={0x5, 0xf, 0x12, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x2, 0x5}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x44f}}]})

619.82431ms ago: executing program 2 (id=434):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d2, 0x8005, 0x401, 0xffff, 0x9, 0x1ed, 0x80002, 0x3, 0xfffffd67, 0xda9, 0x2070, 0xfec, 0x2, 0x1ac, 0xfffffff8], 0x1, 0x4})

558.891055ms ago: executing program 2 (id=436):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r1=>0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}])

480.271074ms ago: executing program 1 (id=437):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f0000000040)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@nodelalloc}, {@delalloc}, {@prjquota}]}, 0x0, 0x448, &(0x7f0000000bc0)="$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")
ioctl$FS_IOC_SETVERSION(r0, 0x40086607, 0x0)

398.919952ms ago: executing program 2 (id=438):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x900}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x4, 0x9, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000680)='GPL\x00', 0xd, 0x1009, &(0x7f0000001cc0)=""/4105, 0x41100}, 0x94)

398.664378ms ago: executing program 1 (id=439):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000)='smaps\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
read$FUSE(r0, &(0x7f0000002880)={0x2020}, 0x2020)

398.34015ms ago: executing program 2 (id=440):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c696e6f646536342c00655d9e4bfc7653603c61402ea595826c43b900e2426c63ec8f2848ba9bf63fa83ccd1540b5629c7bd796df672ec26f60"], 0x1, 0x4421, &(0x7f0000004500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0)
read(r2, &(0x7f0000001400)=""/4096, 0x1000)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x0, 0x8004, 0x8000c62)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r4, 0x0, 0xff7e82)

279.486503ms ago: executing program 1 (id=441):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$eJzs3UtoHOcdAPD/rFYrrQqOnPiRlkCWGNJSUVuyUFr1UreUokMoIT30vNhyLLyWg6QU2ZRG6ePeQ049pQfdQg8lvRvac0NKyVXHQCGXnHSqyszO7EMa7a5s2do6v5+YnW/me8w3/3nt7CAmgK+tlbmoPookVube3E6n93YXWxO7i1N5disiahFRiai2R5GsR5Z7Ix/im+nMvHzSafhf/cv5cG357c+/2vuiPVXNh6x80ldvuNrRWTv5EI2ImMjHR00e0+Inhxff197NY9sbVXcN04BdKQIXf3qiVuGJHRyx08n7+N/Z56DqJzlugTGVtK+bR8xGzETEdET7qp+fHSrPtnenb+esOwAAAAAnVT95lRf2Yz+249zT6A4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8r/L3/yf5UCnSjUiK9//X8nmRp9tzx8rwFyF+NtUeP3r6nQEAAAAAAACAp+7V/diP7ThXTB8k2TP/13qe8X8j3ovNWI2NuBrb0Yyt2IqNWIiI2Z6GatvNra2NhaxmxIUBNa/HpyU1rx/fxxunvM4AAAAAAAAAMOaG/Sf+3clOcqdI/DZWus//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgHCQRE+1RNlwo0rNRqUbEdFFuJ+LTiKidbW9PJCmb+ejZ9wMAAACeyHT/ZDI9Qp0X3o/92I5zxfRBkt3zX8rul6fjvViPrViLrWjFatzK76HTu/7K3u5ia2938V46HG33x1+eqOtZi9H+7aF8yS9nJepxO9ayOVfjZiRxkKnkrby8t7uYju+V9+uDtE/Jj3IDejPRk76Vflz+JEv/sf9XhGp79N8TrelJVY7Nmc1yJzsRmc/7ltY4X0SgPBJ9W6dsN6kOXNJCVDq//FwYvKTymH8weJ1nDpUq/eXmTByOxPWodLbQpcGRiPj23z7+5Z3W+t07tzfnxmeVSr0/tMThSCz2ROLycxSJ4eazSFzsTK/Ez+IXMRdfTr0VG7EWv4pmbMVqo8hv5vtz+jk7OFKfzfROvTWsJ+kx2eicv8r61Ii+PkUjfpqlmvFatk3PxVokcT8iVuON7O96LHTOBt0tfHGEo74ywpm2x5XvZKNOmKJ+fNm/jNbkaUnjer4nrr3n3Nksr3dON0ovlkapuNaNfj3qUf1Wnkhb+N3A68OzdjgSCz2ReOm4/aUd0j9nV5PN1vrdjTvNd0dc3uv5OD2O/jBWV4l0bV6M6XzlzmefSXZMzWd5L3WusP3xquVPXNoqR/Iuduq1j9Sfx/241Xekfj+WYimWs9KXstKTR65Yad7lTkv95/A0L/2mVe082On9vnU/Wu3vQwCMt5nvztTq/6n/s/5R/ff1O/U3p38y9YOpV2ox+Y/JH1bnJ16vvJL8NT6K33Tv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMe3+eDh3WartbpRnqiUZyWDazVbB8WLxAaU6Usk+atyRiicbD54eDC0wcGJqbx7j1n9NBPFa/iGF24MbKf6RN1Idg5vr+nh26J4y9MIi0iOBDyt/NihK5bcnTM5BpvycKJxeg0WO2xP1sn33nrZ9pqIiLLCQ04cE6dx9gHO0rWte+9e23zw8Htr95rvrL6zuj65tLQ8v7z0xuK122ut1fn2Z0+F6hl2FjhVvV8nOmoR8erwugNe1AoAAAAAAAAAAAA8Rc/ifyHOeh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/28rc1F9FEkszF+dT6f3dhdb6VCkuyWrEVGJiOTXEcnfI25Ee4jZnuaS45bz4dry259/tfdFt61qUb4SsXNsvdHs5EM0ImIiH59WezeHt1frJqdKspNOZNKAXSkCB2ftfwEAAP//jLTthw==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
ftruncate(r0, 0xc17a)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)

185.296565ms ago: executing program 1 (id=442):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'caif0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf250100000008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44004)

119.432035ms ago: executing program 1 (id=443):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xfec8}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

0s ago: executing program 1 (id=444):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sigaltstack(&(0x7f0000000480)={&(0x7f0000002080)=""/4140, 0x0, 0x102c}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1214' (ED25519) to the list of known hosts.
syzkaller login: [   56.414298][ T5829] cgroup: Unknown subsys name 'net'
[   56.518330][ T5829] cgroup: Unknown subsys name 'cpuset'
[   56.524583][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.381088][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.778165][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.782110][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.785401][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.785705][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.789233][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.794502][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.795254][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.798112][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.801045][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.810129][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.904982][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.908617][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.911776][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.915944][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.919297][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.238713][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   64.255317][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   64.309089][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   64.374875][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.377224][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.380270][ T5844] bridge_slave_0: entered allmulticast mode
[   64.384375][ T5844] bridge_slave_0: entered promiscuous mode
[   64.407491][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.410494][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.413685][ T5844] bridge_slave_1: entered allmulticast mode
[   64.417455][ T5844] bridge_slave_1: entered promiscuous mode
[   64.489067][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.492710][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.495969][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.498880][ T5845] bridge_slave_0: entered allmulticast mode
[   64.502641][ T5845] bridge_slave_0: entered promiscuous mode
[   64.516988][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.520853][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.524085][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.526839][ T5845] bridge_slave_1: entered allmulticast mode
[   64.530578][ T5845] bridge_slave_1: entered promiscuous mode
[   64.600978][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.605914][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.608779][ T5854] bridge_slave_0: entered allmulticast mode
[   64.613685][ T5854] bridge_slave_0: entered promiscuous mode
[   64.632380][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.640091][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.645500][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.648288][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.651134][ T5854] bridge_slave_1: entered allmulticast mode
[   64.655651][ T5854] bridge_slave_1: entered promiscuous mode
[   64.660630][ T5844] team0: Port device team_slave_0 added
[   64.702603][ T5844] team0: Port device team_slave_1 added
[   64.707262][ T5845] team0: Port device team_slave_0 added
[   64.750955][ T5845] team0: Port device team_slave_1 added
[   64.770711][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.776219][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.779002][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.789221][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.796213][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.798554][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.809583][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.823910][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.826157][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.835811][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.842424][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.867180][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.869817][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.879707][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.902347][ T5854] team0: Port device team_slave_0 added
[   64.915340][ T5854] team0: Port device team_slave_1 added
[   64.954170][ T5844] hsr_slave_0: entered promiscuous mode
[   64.956956][ T5844] hsr_slave_1: entered promiscuous mode
[   64.988497][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.991118][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.000800][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.025799][ T5845] hsr_slave_0: entered promiscuous mode
[   65.029804][ T5845] hsr_slave_1: entered promiscuous mode
[   65.033246][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   65.036097][ T5845] Cannot create hsr debugfs directory
[   65.039434][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.041656][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.050256][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.140831][ T5854] hsr_slave_0: entered promiscuous mode
[   65.143276][ T5854] hsr_slave_1: entered promiscuous mode
[   65.146784][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   65.148637][ T5854] Cannot create hsr debugfs directory
[   65.439962][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.454051][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.461019][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.478498][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.546571][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.568005][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.593449][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.608148][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.655948][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.672825][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.680372][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.696883][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.770516][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.801911][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   65.817325][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.820137][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.841041][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.843848][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.854855][ T5849] Bluetooth: hci1: command tx timeout
[   65.857202][ T5846] Bluetooth: hci0: command tx timeout
[   65.890342][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.944327][ T5846] Bluetooth: hci2: command tx timeout
[   65.955135][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.964803][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   65.999629][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.002342][ T4199] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.009653][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   66.021076][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.024132][ T4199] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.043363][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.046307][ T4199] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.061888][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.064889][ T4199] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.199973][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.296776][ T5844] veth0_vlan: entered promiscuous mode
[   66.307001][ T5844] veth1_vlan: entered promiscuous mode
[   66.346150][ T5844] veth0_macvtap: entered promiscuous mode
[   66.352703][ T5844] veth1_macvtap: entered promiscuous mode
[   66.378356][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.389491][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.406706][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.412140][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.431713][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.436145][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.445960][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.455280][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.526203][ T5854] veth0_vlan: entered promiscuous mode
[   66.529611][ T5845] veth0_vlan: entered promiscuous mode
[   66.553386][ T5854] veth1_vlan: entered promiscuous mode
[   66.567920][ T5845] veth1_vlan: entered promiscuous mode
[   66.590894][  T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.594880][  T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.625941][ T5845] veth0_macvtap: entered promiscuous mode
[   66.629458][  T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.632344][  T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.640320][ T5845] veth1_macvtap: entered promiscuous mode
[   66.667369][ T5854] veth0_macvtap: entered promiscuous mode
[   66.676320][ T5854] veth1_macvtap: entered promiscuous mode
[   66.688296][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.693936][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.724566][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.737249][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.743174][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.783311][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.786441][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.789601][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.792246][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.812147][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.837773][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.841972][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.866718][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.889215][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.892298][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.933149][  T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.938134][  T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.967040][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.969689][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.005447][ T5912] loop1: detected capacity change from 0 to 40427
[   67.009282][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.009698][ T5912] F2FS-fs: heap/no_heap options were deprecated
[   67.012207][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.036226][ T5912] F2FS-fs (loop1): invalid crc value
[   67.038895][ T5912] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[   67.124133][ T5912] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   67.129427][ T5912] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   67.495487][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   67.577355][ T5925] loop1: detected capacity change from 0 to 128
[   67.681026][   T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   67.685007][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.689011][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   67.706898][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.721232][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.759168][   T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   67.788465][   T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   67.791699][   T10] usb 3-1: Product: syz
[   67.793456][   T10] usb 3-1: Manufacturer: syz
[   67.837973][   T10] cdc_wdm 3-1:1.0: skipping garbage
[   67.840153][   T10] cdc_wdm 3-1:1.0: skipping garbage
[   67.868426][   T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   67.870595][   T10] cdc_wdm 3-1:1.0: Unknown control protocol
[   67.934317][ T5846] Bluetooth: hci0: command tx timeout
[   67.936525][ T5846] Bluetooth: hci1: command tx timeout
[   68.026253][ T5846] Bluetooth: hci2: command tx timeout
[   68.064530][ T5920] cdc_wdm 3-1:1.0: Error submitting int urb - -90
[   68.070409][ T5914] usb 3-1: USB disconnect, device number 2
[   68.126232][ T5929] loop0: detected capacity change from 0 to 4096
[   68.136186][ T5929] ntfs3(loop0): Unsupported bytes per MFT record 8192.
[   68.146643][ T5929] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[   68.168502][ T5927] loop1: detected capacity change from 0 to 32768
[   68.195753][ T5927] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6 (5927)
[   68.215969][ T5927] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   68.219342][ T5927] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   68.225364][ T5927] BTRFS info (device loop1): using free-space-tree
[   68.370842][ T5946] loop0: detected capacity change from 0 to 4096
[   68.388394][ T5946] =======================================================
[   68.388394][ T5946] WARNING: The mand mount option has been deprecated and
[   68.388394][ T5946]          and is ignored by this kernel. Remove the mand
[   68.388394][ T5946]          option from the mount to silence this warning.
[   68.388394][ T5946] =======================================================
[   68.427891][ T5946] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   68.436536][ T5844] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   68.487788][ T5946] ntfs3(loop0): ino=19, mi_enum_attr
[   68.490255][ T5946] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   68.792829][ T5957] loop0: detected capacity change from 0 to 128
[   68.854400][ T5957] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   68.859639][ T5957] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   68.946704][ T5854] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   68.967979][ T5965] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   69.040689][ T5967] loop0: detected capacity change from 0 to 16
[   69.075761][ T5967] erofs (device loop0): blkszbits 0 isn't supported
[   69.129063][ T5953] loop1: detected capacity change from 0 to 32768
[   69.201284][ T5953] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   69.419969][ T5844] ocfs2: Unmounting device (7,1) on (node local)
[   70.014710][ T5846] Bluetooth: hci1: command tx timeout
[   70.017025][ T5849] Bluetooth: hci0: command tx timeout
[   70.134355][ T5849] Bluetooth: hci2: command tx timeout
[   71.059027][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.063064][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.713623][ T5910] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   71.823038][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.841436][   T33] audit: type=1326 audit(1755569050.326:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   71.864509][   T33] audit: type=1326 audit(1755569050.326:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   71.891139][ T5910] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   71.897000][   T33] audit: type=1326 audit(1755569050.326:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   71.906611][ T5910] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   71.910972][ T5910] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[   71.915188][   T33] audit: type=1326 audit(1755569050.326:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   71.932686][   T33] audit: type=1326 audit(1755569050.326:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   71.938905][ T5910] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[   71.947166][   T33] audit: type=1326 audit(1755569050.326:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.31" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   71.974286][ T5910] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.977977][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.987177][ T5910] usb 3-1: Product: syz
[   71.989017][ T5910] usb 3-1: Manufacturer: syz
[   71.990913][ T5910] usb 3-1: SerialNumber: syz
[   71.998791][ T6004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   72.005479][ T5910] cdc_mbim 3-1:1.0: skipping garbage
[   72.082061][ T6027] loop0: detected capacity change from 0 to 512
[   72.095117][ T6027] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[   72.103766][ T5849] Bluetooth: hci0: command tx timeout
[   72.106182][ T5849] Bluetooth: hci1: command tx timeout
[   72.210536][ T6004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   72.217041][ T6004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   72.346620][ T6037] warning: `syz.0.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.406053][ T6039] capability: warning: `syz.0.37' uses deprecated v2 capabilities in a way that may be insecure
[   72.476729][ T6041] loop0: detected capacity change from 0 to 1024
[   72.529572][   T64] hfsplus: b-tree write err: -5, ino 4
[   72.828085][ T6004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   72.830394][ T6004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   72.832909][ T5910] cdc_mbim 3-1:1.0: setting tx_max = 184
[   72.837753][ T5910] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[   72.849932][ T5910] wwan wwan0: port wwan0mbim0 attached
[   72.859685][ T5910] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 5a:3d:76:4e:45:ef
[   73.024266][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.039076][   T10] usb 3-1: USB disconnect, device number 3
[   73.042480][   T10] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[   73.052901][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.075399][ T6060] netlink: 'syz.0.44': attribute type 16 has an invalid length.
[   73.078505][ T6060] netlink: 'syz.0.44': attribute type 17 has an invalid length.
[   73.230121][ T6060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.231016][   T10] wwan wwan0: port wwan0mbim0 disconnected
[   73.724672][ T6077] loop2: detected capacity change from 0 to 1024
[   73.815273][   T33] audit: type=1800 audit(1755569052.226:8): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.48" name="file1" dev="loop2" ino=25 res=0 errno=0
[   74.004881][ T6080] loop2: detected capacity change from 0 to 32768
[   74.147486][ T6080] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.50 (6080)
[   74.239079][ T6083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.51'.
[   74.243009][ T6082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.51'.
[   74.691998][ T6098] overlayfs: workdir and upperdir must be separate subtrees
[   75.058363][ T6104] program syz.1.61 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.072209][ T6078] loop0: detected capacity change from 0 to 262144
[   75.077540][ T6078] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.49 (6078)
[   75.086135][ T6080] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   75.089998][ T6080] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   75.094046][ T6080] BTRFS info (device loop2): using free-space-tree
[   75.104591][ T6078] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   75.108632][ T6078] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   75.112299][ T6078] BTRFS info (device loop0): using free-space-tree
[   75.413392][   T33] audit: type=1800 audit(1755569053.896:9): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.49" name="bus" dev="loop0" ino=263 res=0 errno=0
[   75.442296][   T33] audit: type=1800 audit(1755569053.916:10): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.49" name="file1" dev="loop0" ino=260 res=0 errno=0
[   75.513472][ T5854] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   75.525189][ T5845] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   75.921552][ T6142] loop1: detected capacity change from 0 to 32768
[   76.090218][ T6142] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,compression=lz4
[   76.090238][ T6142]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   76.131391][ T6142] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   76.151328][ T6142] bcachefs (loop1): recovering from clean shutdown, journal seq 8
[   76.160463][ T6142] bcachefs (loop1): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[   76.160463][ T6142]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[   76.215300][ T6142] bcachefs (loop1): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[   76.222290][ T6142] bcachefs (loop1): check_topology... done
[   76.229126][ T6142] bcachefs (loop1): accounting_read... done
[   76.239378][ T6142] bcachefs (loop1): alloc_read... done
[   76.242583][ T6142] bcachefs (loop1): snapshots_read... done
[   76.247571][ T6142] bcachefs (loop1): check_allocations...
[   76.279907][ T6142] bcachefs (loop1): bucket 0:79 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[   76.292360][ T6142] bcachefs (loop1): bucket 0:79 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing
[   76.311979][ T6142]  done
[   76.327824][ T6142] bcachefs (loop1): going read-write
[   76.340220][ T6142] bcachefs (loop1): journal_replay... done
[   76.400419][ T6142] bcachefs (loop1): check_lrus... done
[   76.409145][ T6142] bcachefs (loop1): check_backpointers_to_extents... done
[   76.418418][ T6142] bcachefs (loop1): check_extents_to_backpointers... done
[   76.425546][ T6142] bcachefs (loop1): check_inodes... done
[   76.431238][ T6142] bcachefs (loop1): resume_logged_ops...
[   76.431578][ T6173] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   76.431742][ T6142]  done
[   76.438338][ T6142] bcachefs (loop1): delete_dead_inodes... done
[   76.439514][ T6173] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   76.444806][ T6142] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[   76.449965][ T6142] bcachefs (loop1): check_extents_to_backpointers...
[   76.450673][ T6142] bcachefs (loop1): scanning for missing backpointers in 1/512 buckets
[   76.459061][ T6142]  done
[   76.461215][ T6142] bcachefs (loop1): check_inodes... done
[   76.464146][ T6142] bcachefs (loop1): resume_logged_ops... done
[   76.466494][ T6142] bcachefs (loop1): delete_dead_inodes... done
[   76.469842][ T6142] bcachefs (loop1): done starting filesystem
[   76.597791][ T6176] syz.1.66 (6176) used greatest stack depth: 18040 bytes left
[   76.613070][ T6142] syz.1.66 (6142) used greatest stack depth: 15112 bytes left
[   76.627878][ T5844] bcachefs (loop1): shutting down
[   76.630391][ T5844] bcachefs (loop1): going read-only
[   76.636732][ T5844] bcachefs (loop1): finished waiting for writes to stop
[   76.643099][ T5844] bcachefs (loop1): flushing journal and stopping allocators, journal seq 18
[   76.866999][ T5844] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 19
[   76.874155][ T5844] bcachefs (loop1): clean shutdown complete, journal seq 20
[   76.876996][ T5844] bcachefs (loop1): marking filesystem clean
[   76.907277][ T5844] bcachefs (loop1): shutdown complete
[   77.303169][ T6180] loop2: detected capacity change from 0 to 32768
[   77.309583][ T6180] (syz.2.75,6180,0):ocfs2_initialize_super:2019 ERROR: Invalid number of node slots (0)
[   77.312737][ T6180] (syz.2.75,6180,0):ocfs2_fill_super:1177 ERROR: status = -22
[   77.989175][ T5910] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   78.166967][ T5910] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[   78.171548][ T5910] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   78.175653][ T5910] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   78.179771][ T5910] usb 1-1: config 220 has no interface number 2
[   78.182361][ T5910] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   78.189124][ T5910] usb 1-1: config 220 interface 0 has no altsetting 0
[   78.191986][ T5910] usb 1-1: config 220 interface 76 has no altsetting 0
[   78.195205][ T5910] usb 1-1: config 220 interface 1 has no altsetting 0
[   78.200151][ T5910] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   78.206547][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.209871][ T5910] usb 1-1: Product: syz
[   78.211788][ T5910] usb 1-1: Manufacturer: syz
[   78.215864][ T5910] usb 1-1: SerialNumber: syz
[   78.339129][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'.
[   78.449202][ T5910] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[   78.451808][ T5910] usb 1-1: No valid video chain found.
[   78.470460][ T5910] usb 1-1: selecting invalid altsetting 0
[   78.495683][ T5910] usb 1-1: selecting invalid altsetting 0
[   78.500254][ T5910] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[   78.517249][ T5910] usb 1-1: USB disconnect, device number 2
[   78.696610][ T6227] loop2: detected capacity change from 0 to 512
[   78.706603][ T6227] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.93: casefold flag without casefold feature
[   78.716237][ T6227] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.93: couldn't read orphan inode 15 (err -117)
[   78.721943][ T6227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.751260][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.192619][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'.
[   79.316433][ T6244] loop2: detected capacity change from 0 to 2048
[   79.339965][ T6244] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   79.435490][ T6244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.440384][ T6244] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.496469][ T6258] netlink: 88 bytes leftover after parsing attributes in process `syz.1.106'.
[   79.503332][ T6258] netlink: 48 bytes leftover after parsing attributes in process `syz.1.106'.
[   79.515045][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.727770][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   79.889482][ T6282] loop2: detected capacity change from 0 to 1764
[   79.943685][ T5910] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   80.466027][ T5910] usb 1-1: config 0 has an invalid interface number: 152 but max is 0
[   80.469766][ T5910] usb 1-1: config 0 has no interface number 0
[   80.472291][ T5910] usb 1-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64
[   80.479061][ T5910] usb 1-1: config 0 interface 152 has no altsetting 0
[   80.487445][ T5910] usb 1-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17
[   80.493388][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.503984][ T5910] usb 1-1: Product: syz
[   80.505703][ T5910] usb 1-1: Manufacturer: syz
[   80.507620][ T5910] usb 1-1: SerialNumber: syz
[   80.521756][ T5910] usb 1-1: config 0 descriptor??
[   80.532369][ T6272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   80.690274][ T6308] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   80.767279][ T6272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   80.795713][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   80.808555][ T5910] cdc_subset 1-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, Yopy, b6:8b:1c:8d:9e:5f
[   80.834161][ T6312] vlan2: entered allmulticast mode
[   80.836587][ T6312] bridge0: port 3(vlan2) entered blocking state
[   80.847219][ T6312] bridge0: port 3(vlan2) entered disabled state
[   80.870054][ T6312] vlan2: entered promiscuous mode
[   80.903451][ T6316] netlink: 248 bytes leftover after parsing attributes in process `syz.1.133'.
[   80.911143][ T6316] netlink: 44 bytes leftover after parsing attributes in process `syz.1.133'.
[   81.003229][ T5910] usb 1-1: USB disconnect, device number 3
[   81.014689][ T5910] cdc_subset 1-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, Yopy
[   81.199333][ T6337] netlink: 6 bytes leftover after parsing attributes in process `syz.1.140'.
[   81.203086][ T6337] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   81.309626][    T9] cfg80211: failed to load regulatory.db
[   81.946962][ T6355] mkiss: ax0: crc mode is auto.
[   83.090141][ T6379] loop0: detected capacity change from 0 to 4096
[   83.118682][ T6379] ntfs3(loop0): ino=b, mi_enum_attr
[   83.123266][ T6379] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   83.130821][ T6379] ntfs3(loop0): Failed to load $Extend (-22).
[   83.136892][ T6379] ntfs3(loop0): Failed to initialize $Extend.
[   83.308742][ T6385] loop0: detected capacity change from 0 to 4096
[   83.319557][ T6385] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   83.387995][ T6385] ntfs3(loop0): MFT: r=18, expect seq=1 instead of 0!
[   83.390928][ T6385] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   83.396220][ T6385] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[   83.822764][ T6394] mmap: syz.0.159 (6394) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   84.166739][ T6398] loop1: detected capacity change from 0 to 128
[   84.206576][ T6393] loop2: detected capacity change from 0 to 40427
[   84.227602][ T6393] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[   84.232527][ T6398] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.238629][ T6393] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   84.258243][ T6398] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.263138][ T6393] F2FS-fs (loop2): invalid crc value
[   84.396229][ T6396] loop0: detected capacity change from 0 to 32768
[   84.406430][ T6396] (syz.0.162,6396,0):ocfs2_parse_param:1357 ERROR: Invalid cluster_stack option
[   84.444727][ T6393] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   84.588299][ T6393] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   84.601070][ T6393] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   84.821156][   T33] audit: type=1800 audit(1755569063.306:11): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.167" name="/" dev="9p" ino=2 res=0 errno=0
[   84.833444][ T6410] netfs: Couldn't get user pages (rc=-14)
[   84.911049][ T6412] process 'syz.2.165' launched './file2' with NULL argv: empty string added
[   85.102080][ T5844] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.126086][ T6422] loop2: detected capacity change from 0 to 512
[   85.174818][ T6422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.186676][ T6422] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.222521][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.331208][ T6433] loop2: detected capacity change from 0 to 2048
[   85.351917][ T6433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.491474][ T6427] loop0: detected capacity change from 0 to 32768
[   85.496065][ T6427] XFS: noikeep mount option is deprecated.
[   85.576461][ T6427] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   85.601799][ T6427] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   85.616669][ T6427] XFS (loop0): Starting recovery (logdev: internal)
[   85.627711][ T6427] XFS (loop0): Ending recovery (logdev: internal)
[   85.703369][ T5854] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   85.748069][ T6446] loop2: detected capacity change from 0 to 32768
[   85.751104][ T6446] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[   85.836054][ T6451] loop2: detected capacity change from 0 to 512
[   85.858543][ T6451] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.182: invalid block
[   85.881181][ T6451] EXT4-fs (loop2): Remounting filesystem read-only
[   85.887623][ T6451] EXT4-fs (loop2): 2 truncates cleaned up
[   85.892157][ T6451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.565375][ T5882] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   86.723912][ T5882] usb 3-1: Using ep0 maxpacket: 16
[   86.730852][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.734715][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   86.738103][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   86.741067][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   86.745477][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   86.756706][ T5882] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   86.760623][ T5882] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   86.768798][ T5882] usb 3-1: Manufacturer: syz
[   86.779497][ T5882] usb 3-1: config 0 descriptor??
[   86.828135][ T6472] loop0: detected capacity change from 0 to 1024
[   86.849853][ T6472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.855206][ T6472] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.893772][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.931872][ T6476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.190'.
[   87.083720][ T5882] rc_core: IR keymap rc-hauppauge not found
[   87.087604][ T5882] Registered IR keymap rc-empty
[   87.089953][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.120057][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.161682][ T5882] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   87.175672][ T5882] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input4
[   87.191030][ T6485] tc_dump_action: action bad kind
[   87.193486][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.213815][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.235877][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.254554][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.283667][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.305581][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.333708][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.362172][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.387952][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.404432][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   87.440993][ T5882] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   87.447907][ T5882] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   87.488527][ T6496] Illegal XDP return value 66144169 on prog  (id 25) dev N/A, expect packet loss!
[   88.374106][ T6510] sctp: [Deprecated]: syz.1.205 (pid 6510) Use of int in max_burst socket option.
[   88.374106][ T6510] Use struct sctp_assoc_value instead
[   88.429570][ T6512] loop1: detected capacity change from 0 to 512
[   88.432573][ T6512] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   88.439222][ T6512] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   88.445380][ T6512] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.206: Invalid block bitmap block 0 in block_group 0
[   88.461992][ T6512] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   88.477878][ T6512] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.206: attempt to clear invalid blocks 983261 len 1
[   88.489544][ T6512] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.206: Invalid inode table block 0 in block_group 0
[   88.497796][ T6512] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   88.501136][ T6512] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   88.504914][ T6512] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.206: Invalid inode table block 0 in block_group 0
[   88.509269][ T6512] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   88.513300][ T6512] EXT4-fs error (device loop1): ext4_truncate:4666: inode #11: comm syz.1.206: mark_inode_dirty error
[   88.531251][ T6512] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   88.541247][ T6512] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.206: Invalid inode table block 0 in block_group 0
[   88.558541][ T6512] EXT4-fs (loop1): 1 truncate cleaned up
[   88.564867][ T6512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.593145][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.737357][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'.
[   88.741778][ T6523] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[   88.864377][    T9] usb 3-1: USB disconnect, device number 4
[   88.922251][ T6532] netlink: 'syz.1.215': attribute type 10 has an invalid length.
[   88.932106][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.934751][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.962159][ T6532] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.964776][ T6532] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.967570][ T6532] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.969878][ T6532] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.978315][ T6532] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   88.984852][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.061507][ T6538] netlink: 'syz.0.219': attribute type 1 has an invalid length.
[   89.090578][ T6542] IPv6: NLM_F_CREATE should be specified when creating new route
[   90.146748][ T6587] loop2: detected capacity change from 0 to 256
[   90.156250][ T6587] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   90.160665][ T6587] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   90.189177][ T6587] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   90.265152][ T6593] netlink: 'syz.2.243': attribute type 2 has an invalid length.
[   90.268261][ T6593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.243'.
[   90.347658][ T6595] misc userio: No port type given on /dev/userio
[   90.446971][ T6601] loop0: detected capacity change from 0 to 512
[   90.450548][ T6601] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   90.470472][ T6601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.475983][ T6601] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.485034][ T6601] EXT4-fs error (device loop0): ext4_xattr_block_list:762: inode #15: comm syz.0.247: corrupted xattr block 19: overlapping e_value 
[   90.490395][ T6601] EXT4-fs (loop0): Remounting filesystem read-only
[   90.507790][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.651562][ T6610] loop0: detected capacity change from 0 to 512
[   90.655722][ T6610] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   90.672087][ T6610] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #17: comm syz.0.250: iget: bad extra_isize 1568 (inode size 256)
[   90.680254][ T6610] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.250: couldn't read orphan inode 17 (err -117)
[   90.689510][ T6610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.718217][   T33] audit: type=1326 audit(1755569069.206:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.250" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   90.735609][   T33] audit: type=1326 audit(1755569069.206:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.250" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   90.744903][   T33] audit: type=1326 audit(1755569069.226:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.250" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   90.755499][   T33] audit: type=1326 audit(1755569069.226:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.250" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   90.766206][   T33] audit: type=1326 audit(1755569069.226:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.250" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   90.774756][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.775371][   T33] audit: type=1326 audit(1755569069.226:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.250" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc077f8ebe9 code=0x7ffc0000
[   90.948595][ T6625] loop2: detected capacity change from 0 to 512
[   90.970456][ T6625] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   90.981937][ T6625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[   90.986269][ T5882] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   90.991041][ T6625] System zones: 1-12
[   90.993091][ T6625] EXT4-fs (loop2): orphan cleanup on readonly fs
[   90.999670][ T6625] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.257: invalid indirect mapped block 12 (level 1)
[   91.005276][ T6625] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.257: invalid indirect mapped block 2 (level 2)
[   91.009923][ T6625] EXT4-fs (loop2): 1 truncate cleaned up
[   91.012535][ T6625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[   91.038272][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   91.070728][ T6632] loop0: detected capacity change from 0 to 256
[   91.091770][ T6632] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[   91.133769][ T5882] usb 2-1: Using ep0 maxpacket: 32
[   91.141172][ T5882] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[   91.147199][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0
[   91.149971][ T5882] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[   91.153462][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.173083][ T5882] usb 2-1: config 0 descriptor??
[   91.393056][ T6640] loop2: detected capacity change from 0 to 32768
[   91.428165][ T6640] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   91.459638][ T5845] ocfs2: Unmounting device (7,2) on (node local)
[   91.594300][ T5882] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0
[   91.596756][ T5882] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0
[   91.599265][ T5882] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0
[   91.600033][ T6652] netlink: 120 bytes leftover after parsing attributes in process `syz.2.269'.
[   91.601646][ T5882] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0
[   91.601672][ T5882] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0
[   91.607626][ T5882] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[   91.617952][ T6652] netlink: 120 bytes leftover after parsing attributes in process `syz.2.269'.
[   91.676149][ T5882] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -38
[   91.805283][ T5882] usb 2-1: USB disconnect, device number 2
[   93.232975][ T6689] loop0: detected capacity change from 0 to 4096
[   93.236796][ T6689] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   93.354122][ T6693] evm: overlay not supported
[   93.421055][ T6701] loop0: detected capacity change from 0 to 512
[   93.425294][ T6701] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   93.432856][ T6701] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.290: bg 0: block 384: padding at end of block bitmap is not set
[   93.439240][ T6701] EXT4-fs (loop0): Remounting filesystem read-only
[   93.442286][ T6701] EXT4-fs (loop0): 1 truncate cleaned up
[   93.445969][ T6701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.454550][ T5849] Bluetooth: hci2: command tx timeout
[   93.505831][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.669398][ T6700] loop1: detected capacity change from 0 to 32768
[   93.699989][ T6700] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   93.767486][ T5844] ocfs2: Unmounting device (7,1) on (node local)
[   94.026993][ T6723] loop1: detected capacity change from 0 to 64
[   94.457177][ T6735] syz.2.304: attempt to access beyond end of device
[   94.457177][ T6735] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0
[   94.707749][ T6740] loop1: detected capacity change from 0 to 32768
[   94.721744][ T6740] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.306 (6740)
[   94.734690][ T6740] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   94.738539][ T6740] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   94.741832][ T6740] BTRFS info (device loop1): disk space caching is enabled
[   94.745635][ T6740] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   94.754249][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   94.810089][ T6740] BTRFS info (device loop1): rebuilding free space tree
[   94.831543][ T6740] BTRFS info (device loop1): disabling free space tree
[   94.835555][ T6740] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   94.840082][ T6740] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   94.913678][   T10] usb 3-1: Using ep0 maxpacket: 32
[   94.918634][   T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[   94.921736][   T10] usb 3-1: config 0 has no interface number 0
[   94.932046][   T10] usb 3-1: config 0 interface 2 has no altsetting 0
[   94.946207][   T10] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[   94.949682][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.955053][   T10] usb 3-1: Product: syz
[   94.956726][   T10] usb 3-1: Manufacturer: syz
[   94.958628][   T10] usb 3-1: SerialNumber: syz
[   94.968289][   T10] usb 3-1: config 0 descriptor??
[   94.988075][ T5844] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   95.119838][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.308'.
[   95.134003][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.308'.
[   95.159774][ T6765] ip6gretap0: entered promiscuous mode
[   95.162987][ T6765] syz_tun: entered promiscuous mode
[   95.293967][ T5910] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   95.473838][ T5910] usb 1-1: Using ep0 maxpacket: 32
[   95.497387][ T5910] usb 1-1: config index 0 descriptor too short (expected 164, got 36)
[   95.502373][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.523025][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.533158][ T5910] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[   95.544264][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.567172][ T5910] usb 1-1: config 0 descriptor??
[   95.676252][ T6770] loop1: detected capacity change from 0 to 32768
[   95.701198][ T6770] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   95.720860][   T33] audit: type=1800 audit(1755569074.196:18): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.312" name="file1" dev="loop1" ino=17058 res=0 errno=0
[   95.781207][ T5844] ocfs2: Unmounting device (7,1) on (node local)
[   95.996115][ T5910] logitech 0003:046D:C29C.0002: reserved main item tag 0xe
[   96.024535][ T5910] logitech 0003:046D:C29C.0002: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0
[   96.175229][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   96.183370][ T6775] loop1: detected capacity change from 0 to 32768
[   96.208215][ T5910] logitech 0003:046D:C29C.0002: no inputs found
[   96.211804][ T6775] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   96.260614][ T5910] usb 1-1: USB disconnect, device number 4
[   96.279756][ T5844] ocfs2: Unmounting device (7,1) on (node local)
[   96.299262][   T10] usb 3-1: USB disconnect, device number 5
[   96.387497][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   96.436477][ T6781] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[   96.490220][ T6785] raw_sendmsg: syz.1.316 forgot to set AF_INET. Fix it!
[   96.651677][ T6795] loop1: detected capacity change from 0 to 8
[   97.553343][ T6812] loop0: detected capacity change from 0 to 32768
[   97.565289][ T6812] (syz.0.329,6812,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   97.582011][ T6812] (syz.0.329,6812,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   97.623182][ T6812] JBD2: Ignoring recovery information on journal
[   97.680921][ T6812] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   97.733941][ T5910] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   97.886596][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   97.893648][ T5910] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   97.897169][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.918765][ T5910] usb 2-1: config 0 descriptor??
[   97.921744][ T6817] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   97.945835][ T6822] loop2: detected capacity change from 0 to 512
[   97.984863][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.989598][ T6822] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   98.028095][ T6822] EXT4-fs warning (device loop2): verify_group_input:156: Last group not full
[   98.058144][ T5854] ocfs2: Unmounting device (7,0) on (node local)
[   98.074568][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.294508][ T6835] loop0: detected capacity change from 0 to 1024
[   98.318307][ T6837] comedi comedi1: dmm32at: I/O port conflict (0x10002f03,16)
[   98.323396][ T6835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.335627][ T6835] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.348581][   T33] audit: type=1800 audit(1755569076.836:19): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.337" name="file1" dev="loop0" ino=15 res=0 errno=0
[   98.369706][ T5910] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[   98.375931][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.595402][ T5882] usb 2-1: USB disconnect, device number 3
[   98.898381][ T6855] loop2: detected capacity change from 0 to 32768
[   98.905727][ T6855] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.346 (6855)
[   98.915873][ T6855] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   98.919941][ T6855] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   98.922695][ T6855] BTRFS info (device loop2): using free-space-tree
[   99.024725][ T6855] BTRFS info (device loop2): rebuilding free space tree
[   99.109630][ T5845] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   99.380199][ T6889] loop1: detected capacity change from 0 to 4096
[   99.403782][ T5910] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   99.440719][ T6891] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.566734][ T5910] usb 1-1: Using ep0 maxpacket: 32
[   99.573102][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.576810][ T5910] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   99.581804][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[   99.588031][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.596562][ T5910] usb 1-1: config 0 descriptor??
[   99.703810][   T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   99.784280][ T6902] loop2: detected capacity change from 0 to 32768
[   99.791041][ T6902] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.358 (6902)
[   99.810673][ T5889] usb 1-1: USB disconnect, device number 5
[   99.810856][ T6902] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.818047][ T6902] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   99.820733][ T6902] BTRFS info (device loop2): using free-space-tree
[   99.865502][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.874369][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   99.887483][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   99.899795][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.902877][   T10] usb 2-1: Product: syz
[   99.914385][   T10] usb 2-1: Manufacturer: syz
[   99.923672][   T10] usb 2-1: SerialNumber: syz
[   99.951746][ T5909] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   99.972929][ T5845] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.148021][   T10] usb 2-1: 0:2 : does not exist
[  100.156793][   T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  100.185684][   T10] usb 2-1: USB disconnect, device number 4
[  100.217526][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  100.227743][ T6923] pim6reg1: entered promiscuous mode
[  100.229617][ T6923] pim6reg1: entered allmulticast mode
[  100.569271][ T6925] loop2: detected capacity change from 0 to 32768
[  100.602507][ T6925] (syz.2.361,6925,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  100.610390][ T6925] (syz.2.361,6925,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  100.621913][ T6925] JBD2: Ignoring recovery information on journal
[  100.672568][ T6925] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  101.154902][ T5845] ocfs2: Unmounting device (7,2) on (node local)
[  102.253334][ T6973] loop0: detected capacity change from 0 to 4096
[  102.283430][ T6973] ntfs3(loop0): ino=1a, mi_enum_attr
[  102.363915][ T6979] loop1: detected capacity change from 0 to 1024
[  102.369741][ T6979] EXT4-fs: Ignoring removed bh option
[  102.391911][ T6979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  102.441111][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  102.501381][ T6986] pim6reg: tun_chr_ioctl cmd 2147767507
[  102.633668][   T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  102.637752][   T33] audit: type=1326 audit(1755569081.126:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.2.371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579a98ebe9 code=0x7fc00000
[  102.649973][   T33] audit: type=1326 audit(1755569081.126:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.2.371" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f579a98ebe9 code=0x7fc00000
[  102.660364][   T33] audit: type=1326 audit(1755569081.126:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.2.371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579a98ebe9 code=0x7fc00000
[  102.678638][   T33] audit: type=1326 audit(1755569081.126:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.2.371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579a98ebe9 code=0x7fc00000
[  102.693840][   T33] audit: type=1326 audit(1755569081.126:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.2.371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579a98ebe9 code=0x7fc00000
[  102.713065][   T33] audit: type=1326 audit(1755569081.126:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.2.371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579a98ebe9 code=0x7fc00000
[  102.728339][   T33] audit: type=1326 audit(1755569081.126:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.2.371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579a98ebe9 code=0x7fc00000
[  102.743734][   T33] audit: type=1326 audit(1755569081.126:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.2.371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579a98ebe9 code=0x7fc00000
[  102.751548][   T33] audit: type=1326 audit(1755569081.126:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.2.371" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579a98ebe9 code=0x7fc00000
[  102.803215][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  102.816983][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  102.821070][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  102.825039][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  102.839454][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  102.842930][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  102.854686][   T10] usb 1-1: SerialNumber: syz
[  102.866940][ T6984] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  102.870045][ T6984] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  102.876744][   T10] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  102.898899][   T10] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[  102.974040][    T9] usb 2-1: Using ep0 maxpacket: 16
[  102.979906][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.988128][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.991326][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  102.994096][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  102.996992][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.006417][    T9] usb 2-1: config 0 descriptor??
[  103.152264][  T794] usb 1-1: USB disconnect, device number 6
[  103.456648][    T9] hid (null): unknown global tag 0xd
[  103.458815][    T9] hid (null): global environment stack underflow
[  103.636752][    T9] usb 2-1: USB disconnect, device number 5
[  104.223221][ T7026] loop0: detected capacity change from 0 to 4096
[  104.253088][ T7026] ntfs3(loop0): ino=18, mi_enum_attr
[  104.258580][ T7026] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  104.261190][ T7026] ntfs3(loop0): ino=1a, mi_enum_attr
[  104.338223][ T7030] binder: 7029:7030 ioctl c0306201 2000000003c0 returned -14
[  105.304028][ T7063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.414'.
[  105.887436][ T7061] loop2: detected capacity change from 0 to 32768
[  105.920385][ T7061] XFS (loop2): alignment check failed: sunit/swidth vs. blocksize(4096)
[  105.948291][ T7074] loop0: detected capacity change from 0 to 1024
[  105.996418][ T7074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.001355][ T7074] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.030431][ T7074] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  106.040549][ T7074] EXT4-fs (loop0): Remounting filesystem read-only
[  106.063057][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.363620][ T5889] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  106.446420][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  106.446677][   T33] audit: type=1800 audit(1755569084.906:32): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.420" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  106.713655][ T5889] usb 3-1: Using ep0 maxpacket: 8
[  106.719367][ T5889] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  106.722519][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.727311][ T5889] usb 3-1: Product: syz
[  106.728916][ T5889] usb 3-1: Manufacturer: syz
[  106.730425][ T5889] usb 3-1: SerialNumber: syz
[  106.733975][ T5889] usb 3-1: config 0 descriptor??
[  106.740079][ T5889] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  106.743095][ T5889] usb 3-1: setting power ON
[  106.747210][ T5889] dvb-usb: bulk message failed: -22 (2/0)
[  106.755142][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  106.758659][ T5889] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  106.762296][ T5889] usb 3-1: media controller created
[  106.776558][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  106.788324][ T5889] usb 3-1: selecting invalid altsetting 6
[  106.790492][ T5889] usb 3-1: digital interface selection failed (-22)
[  106.792987][ T5889] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  106.796594][ T5889] usb 3-1: setting power OFF
[  106.798496][ T5889] dvb-usb: bulk message failed: -22 (2/0)
[  106.800761][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  106.804314][ T5889] (NULL device *): no alternate interface
[  106.828243][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  106.947731][   T10] usb 3-1: USB disconnect, device number 6
[  107.338222][ T7091] loop0: detected capacity change from 0 to 32768
[  107.345904][ T7091] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.422 (7091)
[  107.366299][ T7091] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  107.369464][ T7091] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  107.372717][ T7091] BTRFS info (device loop0): disk space caching is enabled
[  107.375946][ T7091] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  107.415760][ T7091] BTRFS info (device loop0): rebuilding free space tree
[  107.428168][ T7091] BTRFS info (device loop0): disabling free space tree
[  107.430967][ T7091] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  107.437852][ T7091] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  107.804848][ T7114] loop2: detected capacity change from 0 to 32768
[  107.810743][ T7114] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.425 (7114)
[  107.832101][ T7114] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  107.838786][ T7114] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  107.842930][ T7114] BTRFS info (device loop2): using free-space-tree
[  108.009815][ T5845] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  108.150778][ T5854] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  108.585416][ T7147] binder: 7146:7147 ioctl c018620c 200000000000 returned -22
[  108.703777][ T5882] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  108.745931][ T7155] loop1: detected capacity change from 0 to 512
[  108.748756][ T7155] EXT4-fs: Ignoring removed mblk_io_submit option
[  108.761095][ T7155] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.437: inode #13: comm syz.1.437: iget: illegal inode #
[  108.769697][ T7155] EXT4-fs (loop1): Remounting filesystem read-only
[  108.772450][ T7155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.802500][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.857796][ T5882] usb 1-1: not running at top speed; connect to a high speed hub
[  108.862701][ T5882] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  108.869080][ T5882] usb 1-1: config 1 has no interface number 1
[  108.871304][ T5882] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  108.881206][ T5882] usb 1-1: string descriptor 0 read error: -22
[  108.883098][ T5882] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  108.887329][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.899590][ T5882] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc
[  108.935032][ T7164] loop1: detected capacity change from 0 to 1024
[  108.997720][  T152] hfsplus: b-tree write err: -5, ino 4
[  109.046375][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'.
[  109.132991][ T5882] usb 1-1: USB disconnect, device number 7
[  109.139814][ T7168] trusted_key: syz.1.443 sent an empty control message without MSG_MORE.
[  109.211918][ T7160] loop2: detected capacity change from 0 to 32768
[  109.236905][ T7160] JBD2: Ignoring recovery information on journal
[  109.268177][ T7160] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  109.277105][   T33] audit: type=1800 audit(1755569087.766:33): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.440" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  109.316709][ T7160] 
[  109.317621][ T7160] ======================================================
[  109.320030][ T7160] WARNING: possible circular locking dependency detected
[  109.322132][ T7160] syzkaller #0 Not tainted
[  109.323861][ T7160] ------------------------------------------------------
[  109.326753][ T7160] syz.2.440/7160 is trying to acquire lock:
[  109.328667][ T7160] ffff888116671840 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_del_inode_from_orphan+0x134/0x740
[  109.332566][ T7160] 
[  109.332566][ T7160] but task is already holding lock:
[  109.334784][ T7160] ffff888116655d60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_dio_end_io+0x389/0x10f0
[  109.338287][ T7160] 
[  109.338287][ T7160] which lock already depends on the new lock.
[  109.338287][ T7160] 
[  109.341632][ T7160] 
[  109.341632][ T7160] the existing dependency chain (in reverse order) is:
[  109.344738][ T7160] 
[  109.344738][ T7160] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  109.347333][ T7160]        lock_acquire+0x120/0x360
[  109.348856][ T7160]        down_write+0x96/0x1f0
[  109.350583][ T7160]        ocfs2_create_local_dquot+0x19d/0x1a40
[  109.352698][ T7160]        ocfs2_acquire_dquot+0x80f/0xb30
[  109.354351][ T7160]        dqget+0x7b1/0xf10
[  109.355874][ T7160]        __dquot_initialize+0x3b3/0xcb0
[  109.357783][ T7160]        ocfs2_get_init_inode+0x13b/0x1b0
[  109.359828][ T7160]        ocfs2_mknod+0x863/0x2050
[  109.361662][ T7160]        ocfs2_create+0x1a5/0x440
[  109.363441][ T7160]        path_openat+0x14f4/0x3830
[  109.365211][ T7160]        do_filp_open+0x1fa/0x410
[  109.366987][ T7160]        do_sys_openat2+0x121/0x1c0
[  109.368766][ T7160]        __x64_sys_openat+0x138/0x170
[  109.370339][ T7160]        do_syscall_64+0xfa/0x3b0
[  109.371839][ T7160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.373694][ T7160] 
[  109.373694][ T7160] -> #2 (&dquot->dq_lock){+.+.}-{4:4}:
[  109.376147][ T7160]        lock_acquire+0x120/0x360
[  109.377926][ T7160]        __mutex_lock+0x187/0x1360
[  109.379500][ T7160]        dqget+0x72a/0xf10
[  109.381056][ T7160]        __dquot_initialize+0x3b3/0xcb0
[  109.382834][ T7160]        ocfs2_get_init_inode+0x13b/0x1b0
[  109.384551][ T7160]        ocfs2_mknod+0x863/0x2050
[  109.386339][ T7160]        ocfs2_create+0x1a5/0x440
[  109.387832][ T7160]        path_openat+0x14f4/0x3830
[  109.389729][ T7160]        do_filp_open+0x1fa/0x410
[  109.391532][ T7160]        do_sys_openat2+0x121/0x1c0
[  109.393370][ T7160]        __x64_sys_openat+0x138/0x170
[  109.395318][ T7160]        do_syscall_64+0xfa/0x3b0
[  109.397196][ T7160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.399398][ T7160] 
[  109.399398][ T7160] -> #1 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  109.402906][ T7160]        lock_acquire+0x120/0x360
[  109.404546][ T7160]        down_write+0x96/0x1f0
[  109.406074][ T7160]        ocfs2_evict_inode+0x153d/0x40e0
[  109.407874][ T7160]        evict+0x504/0x9c0
[  109.409459][ T7160]        ocfs2_dentry_iput+0x247/0x370
[  109.411422][ T7160]        __dentry_kill+0x209/0x660
[  109.413177][ T7160]        dput+0x19f/0x2b0
[  109.414747][ T7160]        __fput+0x68e/0xa70
[  109.416191][ T7160]        task_work_run+0x1d4/0x260
[  109.418008][ T7160]        exit_to_user_mode_loop+0xec/0x110
[  109.419827][ T7160]        do_syscall_64+0x2bd/0x3b0
[  109.421338][ T7160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.423351][ T7160] 
[  109.423351][ T7160] -> #0 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}:
[  109.426528][ T7160]        validate_chain+0xb9b/0x2140
[  109.428077][ T7160]        __lock_acquire+0xab9/0xd20
[  109.429605][ T7160]        lock_acquire+0x120/0x360
[  109.431092][ T7160]        down_write+0x96/0x1f0
[  109.432532][ T7160]        ocfs2_del_inode_from_orphan+0x134/0x740
[  109.434583][ T7160]        ocfs2_dio_end_io+0x479/0x10f0
[  109.436541][ T7160]        dio_complete+0x25b/0x790
[  109.438581][ T7160]        __blockdev_direct_IO+0x2e63/0x3490
[  109.440597][ T7160]        ocfs2_direct_IO+0x25f/0x2d0
[  109.442355][ T7160]        generic_file_direct_write+0x1db/0x3e0
[  109.444302][ T7160]        __generic_file_write_iter+0x11d/0x230
[  109.446389][ T7160]        ocfs2_file_write_iter+0x157a/0x1d10
[  109.448657][ T7160]        iter_file_splice_write+0x9c9/0x10b0
[  109.450811][ T7160]        direct_splice_actor+0x101/0x160
[  109.452491][ T7160]        splice_direct_to_actor+0x5a8/0xcc0
[  109.454309][ T7160]        do_splice_direct+0x181/0x270
[  109.456144][ T7160]        do_sendfile+0x4da/0x7e0
[  109.457680][ T7160]        __se_sys_sendfile64+0x13e/0x190
[  109.459373][ T7160]        do_syscall_64+0xfa/0x3b0
[  109.460945][ T7160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.462909][ T7160] 
[  109.462909][ T7160] other info that might help us debug this:
[  109.462909][ T7160] 
[  109.466243][ T7160] Chain exists of:
[  109.466243][ T7160]   &ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE] --> &dquot->dq_lock --> &ocfs2_quota_ip_alloc_sem_key
[  109.466243][ T7160] 
[  109.471598][ T7160]  Possible unsafe locking scenario:
[  109.471598][ T7160] 
[  109.473810][ T7160]        CPU0                    CPU1
[  109.475576][ T7160]        ----                    ----
[  109.477416][ T7160]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  109.479177][ T7160]                                lock(&dquot->dq_lock);
[  109.481272][ T7160]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  109.483777][ T7160]   lock(&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]);
[  109.485993][ T7160] 
[  109.485993][ T7160]  *** DEADLOCK ***
[  109.485993][ T7160] 
[  109.488399][ T7160] 3 locks held by syz.2.440/7160:
[  109.489958][ T7160]  #0: ffff888110d24428 (sb_writers#15){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160
[  109.493094][ T7160]  #1: ffff8881166560c0 (&sb->s_type->i_mutex_key#32){+.+.}-{4:4}, at: ocfs2_file_write_iter+0x429/0x1d10
[  109.496603][ T7160]  #2: ffff888116655d60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_dio_end_io+0x389/0x10f0
[  109.500142][ T7160] 
[  109.500142][ T7160] stack backtrace:
[  109.502150][ T7160] CPU: 1 UID: 0 PID: 7160 Comm: syz.2.440 Not tainted syzkaller #0 PREEMPT(full) 
[  109.502161][ T7160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.502168][ T7160] Call Trace:
[  109.502174][ T7160]  <TASK>
[  109.502190][ T7160]  dump_stack_lvl+0x189/0x250
[  109.502209][ T7160]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.502219][ T7160]  ? __pfx__printk+0x10/0x10
[  109.502237][ T7160]  ? print_lock_name+0xde/0x100
[  109.502256][ T7160]  print_circular_bug+0x2ee/0x310
[  109.502273][ T7160]  check_noncircular+0x134/0x160
[  109.502291][ T7160]  validate_chain+0xb9b/0x2140
[  109.502307][ T7160]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  109.502330][ T7160]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  109.502348][ T7160]  __lock_acquire+0xab9/0xd20
[  109.502361][ T7160]  ? ocfs2_del_inode_from_orphan+0x134/0x740
[  109.502369][ T7160]  lock_acquire+0x120/0x360
[  109.502380][ T7160]  ? ocfs2_del_inode_from_orphan+0x134/0x740
[  109.502388][ T7160]  ? do_raw_spin_unlock+0x4d/0x240
[  109.502399][ T7160]  down_write+0x96/0x1f0
[  109.502407][ T7160]  ? ocfs2_del_inode_from_orphan+0x134/0x740
[  109.502414][ T7160]  ? __pfx_down_write+0x10/0x10
[  109.502428][ T7160]  ocfs2_del_inode_from_orphan+0x134/0x740
[  109.502437][ T7160]  ? ocfs2_dio_end_io+0x389/0x10f0
[  109.502445][ T7160]  ? __pfx_ocfs2_del_inode_from_orphan+0x10/0x10
[  109.502454][ T7160]  ? down_write+0x162/0x1f0
[  109.502461][ T7160]  ? __pfx_down_write+0x10/0x10
[  109.502471][ T7160]  ? ocfs2_direct_IO+0x25f/0x2d0
[  109.502479][ T7160]  ? __generic_file_write_iter+0x11d/0x230
[  109.502493][ T7160]  ? ocfs2_file_write_iter+0x157a/0x1d10
[  109.502532][ T7160]  ? iter_file_splice_write+0x9c9/0x10b0
[  109.502546][ T7160]  ocfs2_dio_end_io+0x479/0x10f0
[  109.502557][ T7160]  ? __pfx_ocfs2_dio_end_io+0x10/0x10
[  109.502569][ T7160]  ? __lock_acquire+0xab9/0xd20
[  109.502580][ T7160]  ? do_raw_spin_lock+0x121/0x290
[  109.502591][ T7160]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  109.502601][ T7160]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.502611][ T7160]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.502621][ T7160]  ? __pfx_ocfs2_dio_end_io+0x10/0x10
[  109.502629][ T7160]  dio_complete+0x25b/0x790
[  109.502640][ T7160]  __blockdev_direct_IO+0x2e63/0x3490
[  109.502663][ T7160]  ? __pfx___blockdev_direct_IO+0x10/0x10
[  109.502682][ T7160]  ? __pfx_invalidate_inode_pages2_range+0x10/0x10
[  109.502695][ T7160]  ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10
[  109.502705][ T7160]  ? filemap_write_and_wait_range+0x18a/0x320
[  109.502717][ T7160]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  109.502733][ T7160]  ? current_time+0x222/0x370
[  109.502742][ T7160]  ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10
[  109.502750][ T7160]  ocfs2_direct_IO+0x25f/0x2d0
[  109.502760][ T7160]  generic_file_direct_write+0x1db/0x3e0
[  109.502769][ T7160]  ? file_update_time+0x2da/0x490
[  109.502778][ T7160]  __generic_file_write_iter+0x11d/0x230
[  109.502786][ T7160]  ? ocfs2_file_write_iter+0x1551/0x1d10
[  109.502798][ T7160]  ocfs2_file_write_iter+0x157a/0x1d10
[  109.502809][ T7160]  ? kasan_save_track+0x3e/0x80
[  109.502819][ T7160]  ? __kasan_kmalloc+0x93/0xb0
[  109.502834][ T7160]  ? __kmalloc_noprof+0x27a/0x4f0
[  109.502858][ T7160]  ? __pfx_ocfs2_file_write_iter+0x10/0x10
[  109.502879][ T7160]  ? splice_from_pipe_next+0x608/0x660
[  109.502898][ T7160]  ? __asan_memset+0x22/0x50
[  109.502908][ T7160]  iter_file_splice_write+0x9c9/0x10b0
[  109.502924][ T7160]  ? __pfx_iter_file_splice_write+0x10/0x10
[  109.502936][ T7160]  ? rcu_read_lock_any_held+0xb3/0x120
[  109.502947][ T7160]  ? __pfx_iter_file_splice_write+0x10/0x10
[  109.502958][ T7160]  direct_splice_actor+0x101/0x160
[  109.502970][ T7160]  splice_direct_to_actor+0x5a8/0xcc0
[  109.502987][ T7160]  ? __pfx_direct_splice_actor+0x10/0x10
[  109.503004][ T7160]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  109.503028][ T7160]  do_splice_direct+0x181/0x270
[  109.503048][ T7160]  ? __pfx_do_splice_direct+0x10/0x10
[  109.503061][ T7160]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  109.503074][ T7160]  ? rw_verify_area+0x255/0x4d0
[  109.503084][ T7160]  do_sendfile+0x4da/0x7e0
[  109.503092][ T7160]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.503103][ T7160]  ? __pfx_do_sendfile+0x10/0x10
[  109.503111][ T7160]  ? __se_sys_futex+0x36f/0x400
[  109.503122][ T7160]  __se_sys_sendfile64+0x13e/0x190
[  109.503134][ T7160]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  109.503154][ T7160]  ? rcu_is_watching+0x15/0xb0
[  109.503169][ T7160]  ? do_syscall_64+0xbe/0x3b0
[  109.503190][ T7160]  do_syscall_64+0xfa/0x3b0
[  109.503209][ T7160]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.503220][ T7160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.503229][ T7160]  ? exc_page_fault+0x9f/0xf0
[  109.503239][ T7160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.503247][ T7160] RIP: 0033:0x7f579a98ebe9
[  109.503260][ T7160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.503272][ T7160] RSP: 002b:00007f579b72a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  109.503286][ T7160] RAX: ffffffffffffffda RBX: 00007f579abb5fa0 RCX: 00007f579a98ebe9
[  109.503297][ T7160] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004
[  109.503304][ T7160] RBP: 00007f579aa11e19 R08: 0000000000000000 R09: 0000000000000000
[  109.503313][ T7160] R10: 0000000000ff7e82 R11: 0000000000000246 R12: 0000000000000000
[  109.503321][ T7160] R13: 00007f579abb6038 R14: 00007f579abb5fa0 R15: 00007ffc5dc0d528
[  109.503338][ T7160]  </TASK>
[  109.784976][ T7160] (syz.2.440,7160,0):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = -28
[  109.805167][ T5845] ocfs2: Unmounting device (7,2) on (node local)

VM DIAGNOSIS:
02:04:47  Registers:
info registers vcpu 0

CPU#0
RAX=bbf3cd8bd50e0400 RBX=ffffffff819683a8 RCX=bbf3cd8bd50e0400 RDX=0000000000000001
RSI=ffffffff8be332e0 RDI=ffffffff819683a8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37d30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f579a9733e0 CR3=000000010fd10000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5071787498 00007f5071787470 XMM03=00007f50717874a8 00007f50717874a0
XMM04=00007f50722ed100 00007f5071787460 XMM05=00007f5071787478 00007f50717874c0
XMM06=00007f50717874b8 00007f50717874b0 XMM07=00007f50717874a8 00007f50717874a0
XMM08=0000000000000000 00007f5071612ee7 XMM09=0000000000000000 00007f5071612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000fe73 RDI=000000000000fe74 RBP=00000000000003f8 RSP=ffffc900077d6130
R8 =ffff888107158237 R9 =1ffff11020e2b046 R10=dffffc0000000000 R11=ffffffff854f0230
R12=dffffc0000000000 R13=ffffffff99af98df R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f02ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f579b72a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32323ffc CR3=00000001090ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff818ceb3c ffffffff8176007a
XMM02=00007fc078187498 ffffffff8176007a XMM03=00007fc0781874a8 00007fc0781874a0
XMM04=00007fc078ced100 00007fc078187460 XMM05=00007fc078187478 00007fc0781874c0
XMM06=00007fc0781874b8 00007fc0781874b0 XMM07=00007fc0781874a8 00007fc0781874a0
XMM08=0000000000000000 00007fc078012ee7 XMM09=0000000000000000 00007fc078012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
