last executing test programs:

2m54.628056552s ago: executing program 1 (id=117):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

2m54.567772972s ago: executing program 1 (id=118):
unshare(0x22020600)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

2m54.505915471s ago: executing program 1 (id=120):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]})
clock_adjtime(0x3, 0x0)

2m54.504211436s ago: executing program 1 (id=123):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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")
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00')

2m54.280475501s ago: executing program 1 (id=128):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x5aa7bac0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0)

2m53.719023588s ago: executing program 1 (id=133):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000590040580487000000000000010902240001000040b1090400da010300010009210301020122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0x35, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2m53.580060797s ago: executing program 32 (id=133):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000590040580487000000000000010902240001000040b1090400da010300010009210301020122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0x35, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1m51.088611799s ago: executing program 2 (id=651):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x516, &(0x7f0000000dc0)="$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")
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, r1, 0x0)

1m51.019711667s ago: executing program 2 (id=652):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0)

1m50.957381604s ago: executing program 2 (id=653):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000400000000f5dffeff95"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

1m50.05057586s ago: executing program 2 (id=659):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x3810082, &(0x7f0000001880)={[{@noadinicb}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x400}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid_forget}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@longad}]}, 0xfd, 0xc32, &(0x7f0000001a40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]})

1m49.727521808s ago: executing program 2 (id=660):
r0 = io_uring_setup(0x51d0, &(0x7f0000000140)={0x0, 0x3957, 0x40, 0x2000002, 0x402d7})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20)

1m49.539770422s ago: executing program 2 (id=661):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1m49.405145804s ago: executing program 33 (id=661):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1m15.179349009s ago: executing program 3 (id=964):
r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0)
ioctl$VIDIOC_ENUMSTD(r0, 0xc0205647, &(0x7f0000000080)={0xf010000, 0x100, "3127608efb75b4c827912445aead8b49f0a87e73a02eec2f"})

1m15.070420517s ago: executing program 3 (id=965):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
munlockall()

1m15.070279384s ago: executing program 3 (id=966):
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0xb})

1m15.020352372s ago: executing program 3 (id=967):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000001c40)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

1m14.997449203s ago: executing program 3 (id=968):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x8000)

1m14.71928738s ago: executing program 3 (id=970):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a"], 0x174}}, 0x0)

1m14.607441941s ago: executing program 34 (id=970):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a"], 0x174}}, 0x0)

3.458068812s ago: executing program 0 (id=1593):
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

3.322372588s ago: executing program 0 (id=1594):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
dup(r0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
read$dsp(r2, 0x0, 0x0)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

3.069781524s ago: executing program 4 (id=1599):
syz_mount_image$jfs(&(0x7f0000000b80), &(0x7f00000000c0)='./file1\x00', 0x20108c0, &(0x7f0000000940)=ANY=[], 0xf0, 0x6218, &(0x7f0000008b40)="$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")
lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
llistxattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=""/16, 0x1001)

2.858590134s ago: executing program 4 (id=1602):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x100000000006, 0x5, 0xfffb, 0x80, 0xfffffffffffeffff, 0xffffffffffffffff, 0x1ff, 0xe, 0x36})

2.783289012s ago: executing program 4 (id=1604):
setuid(0xee00)
ptrace(0x10, 0x1)

2.715910407s ago: executing program 4 (id=1605):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)

2.715528324s ago: executing program 4 (id=1606):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x400, <r0=>0xffffffffffffffff, 0x1})
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40})
getsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000140), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpgid(0xffffffffffffffff)
ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000280)={[0x3]})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000580)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6020fffd90780000000000"], 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000)="180c4552", 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB="170000fe2b20000000000000b1fd15c4426723c80da8011923d75b234f83309a9ed64e065c13900e3bef976b10bfad7ccb22711fde573c532a8ec45b30f9bb61a37fdf58963200c3eb5cac2df0dc", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)

2.574260424s ago: executing program 5 (id=1607):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0xb0a0, 0x1, 0x3}, 0x15, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0x40049409, 0x0)

2.459324665s ago: executing program 0 (id=1608):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)

2.399520856s ago: executing program 5 (id=1609):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000005c0), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0)

2.327711808s ago: executing program 0 (id=1610):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x34}}, 0x0)

2.196660125s ago: executing program 0 (id=1611):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b7032d7a3d77ba65f6179d16cef7c34648024212402e69cc86c8fce5989be545ce26a9c4f5f2165f36561402b40d94de59edbb0507bf01e3ece0fd57e13bef384234e823d81383eac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f473cd22efb03bcddff402dacf8c1372a5e8ff5bc5b6a5015037cf1236a6167a302d5d082a447099b4ee2bc4"], 0x1, 0x10600, &(0x7f0000020cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file2\x00', 0x8442, 0x5c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
socket(0x28, 0x5, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfff})

687.905256ms ago: executing program 4 (id=1612):
memfd_create(&(0x7f0000000280)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x5)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00222200000096231306e53f93"], 0x0}, 0x0)

562.435744ms ago: executing program 5 (id=1613):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x4e21, @empty}, {0x306, @random="c80c34e6b9c4"}, 0x6, {0x2, 0x4e22, @broadcast}, 'ip6gretap0\x00'})

405.326414ms ago: executing program 5 (id=1614):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)

307.978248ms ago: executing program 5 (id=1615):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$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")
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

56.249676ms ago: executing program 5 (id=1616):
syz_mount_image$ocfs2(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x2804440, &(0x7f0000004680)=ANY=[@ANYBLOB="61636c2c6e6f696e74722c6174696d655f7175616e74756d3d30303030303030303030303030303030303030372c6c6f63616c666c6f636b732c6c6f63616c616c6c6f633d30303030303030303030303030303030303030332c6c6f63616c666c6f636b732c696e74722c6865617274626561743d6e6f6e652c0024855616ead4c7dc9e9da093713b0e6a6e67e1af8e4f5d7cbff1185218b41bcefa2f4f41b8212051258a0a6168526c8eef9d759bbb36a4b49ff8042320899ca9b6e9fa68a0abe364e0e2d46408f18da37d557aa1ebb8aa29451a584f1980dc477bd97f6a0446b8957872e51c2adf98e1acff806babdc9d58bc06d6d0b19476862cebe64cafa5a069852602786f40bf6a1bf7594e171d16ced9409b168ef591c2f5b676a2eb18e8a3b91275fd4467aea2037bd9790e240137bc7c80cc99e9dd662a5f"], 0x5, 0x4430, &(0x7f0000004840)="$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")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143042, 0x4)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)

0s ago: executing program 0 (id=1617):
r0 = socket(0x2, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000001c0)=0x9)

kernel console output (not intermixed with test programs):

ave bond_slave_0): Releasing backup interface
[  170.994036][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.998101][ T5882] bond0 (unregistering): Released all slaves
[  171.009620][ T5882] bond1 (unregistering): Released all slaves
[  171.115393][ T5882] tipc: Left network mode
[  171.237529][ T8887] chnl_net:caif_netlink_parms(): no params data found
[  171.329353][ T8897] usbtmc 5-1:16.0: stb usb_control_msg returned -32
[  171.336318][   T10] usb 5-1: USB disconnect, device number 9
[  171.431597][ T8887] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.436641][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.439943][ T8887] bridge_slave_0: entered allmulticast mode
[  171.444761][ T8887] bridge_slave_0: entered promiscuous mode
[  171.489928][ T8887] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.494517][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.499253][ T8887] bridge_slave_1: entered allmulticast mode
[  171.503534][ T8887] bridge_slave_1: entered promiscuous mode
[  171.523744][ T5882] hsr_slave_0: left promiscuous mode
[  171.526662][ T5882] hsr_slave_1: left promiscuous mode
[  171.529476][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.533165][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.537157][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.539819][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.550689][ T5882] veth1_macvtap: left promiscuous mode
[  171.552897][ T5882] veth0_macvtap: left promiscuous mode
[  171.555313][ T5882] veth1_vlan: left promiscuous mode
[  171.557122][ T5882] veth0_vlan: left promiscuous mode
[  171.709124][ T8903] loop0: detected capacity change from 0 to 512
[  171.728618][ T8903] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  172.139988][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  172.171398][ T5882] team0 (unregistering): Port device team_slave_0 removed
[  172.496374][   T55] Bluetooth: hci2: command tx timeout
[  172.582636][ T8887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.587994][ T8887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.612032][ T8887] team0: Port device team_slave_0 added
[  172.619363][ T8887] team0: Port device team_slave_1 added
[  172.658264][ T8887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.661386][ T8887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.673712][ T8887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.683924][ T8887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.687093][ T8887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.699502][ T8887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.745916][ T8914] loop0: detected capacity change from 0 to 512
[  172.758523][ T8914] EXT4-fs: Ignoring removed mblk_io_submit option
[  172.762232][ T8914] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  172.780671][ T8914] EXT4-fs (loop0): 1 truncate cleaned up
[  172.783628][ T8914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.798420][   T33] audit: type=1804 audit(1755121206.642:44): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.980" name="/newroot/317/bus/bus" dev="loop0" ino=18 res=1 errno=0
[  172.840760][ T8887] hsr_slave_0: entered promiscuous mode
[  172.866594][ T8887] hsr_slave_1: entered promiscuous mode
[  172.870082][ T8887] debugfs: 'hsr0' already exists in 'hsr'
[  172.887348][ T8887] Cannot create hsr debugfs directory
[  172.927260][ T8920] loop4: detected capacity change from 0 to 1024
[  172.937131][ T8920] EXT4-fs: Ignoring removed oldalloc option
[  172.939569][ T8920] EXT4-fs: Ignoring removed bh option
[  172.978161][ T8920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.049288][ T7909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.161897][ T5882] IPVS: stop unused estimator thread 0...
[  173.345491][ T8932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.983'.
[  173.487766][ T8936] loop4: detected capacity change from 0 to 164
[  173.683930][ T8887] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  173.717168][ T8887] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  173.754629][ T8887] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  173.790942][ T8887] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  173.919117][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.045003][ T8887] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.069217][ T8958] loop0: detected capacity change from 0 to 4096
[  174.085927][ T8887] 8021q: adding VLAN 0 to HW filter on device team0
[  174.098776][ T8958] ntfs3(loop0): Failed to load $MFT (-22).
[  174.107613][ T3227] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.110769][ T3227] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.153454][ T3227] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.156523][ T3227] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.216268][ T8887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.391884][ T8887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.449922][ T8984] loop0: detected capacity change from 0 to 128
[  174.459624][ T8984] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  174.535875][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  174.572445][   T55] Bluetooth: hci2: command 0x041b tx timeout
[  174.665191][ T8996] loop0: detected capacity change from 0 to 128
[  174.667902][ T8887] veth0_vlan: entered promiscuous mode
[  174.694302][   T10] usb 5-1: Using ep0 maxpacket: 8
[  174.700122][   T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  174.708171][ T8887] veth1_vlan: entered promiscuous mode
[  174.710483][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  174.724162][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  174.738689][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  174.762804][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  174.772053][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  174.781023][ T8887] veth0_macvtap: entered promiscuous mode
[  174.782998][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.789814][ T8887] veth1_macvtap: entered promiscuous mode
[  174.811893][ T8887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.834217][ T8887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.844987][ T5882] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.854872][ T5882] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.860150][ T5882] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.875069][ T5882] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.947419][ T7516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.957303][ T7516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.996320][   T10] usb 5-1: usb_control_msg returned -32
[  174.999040][   T10] usbtmc 5-1:16.0: can't read capabilities
[  174.999413][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.009598][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.352584][   T47] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  175.359251][ T9020] usbtmc 5-1:16.0: stb usb_control_msg returned -32
[  175.368125][   T10] usb 5-1: USB disconnect, device number 10
[  175.476751][ T9025] loop0: detected capacity change from 0 to 512
[  175.488714][ T9025] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1000: iget: bad extended attribute block 1
[  175.507245][ T9025] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1000: couldn't read orphan inode 15 (err -117)
[  175.517375][   T47] usb 6-1: config 0 has an invalid interface number: 20 but max is 0
[  175.518308][ T9025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.520217][   T47] usb 6-1: config 0 has no interface number 0
[  175.534591][   T47] usb 6-1: config 0 interface 20 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.539227][   T47] usb 6-1: config 0 interface 20 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.539373][ T9025] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  175.546087][   T47] usb 6-1: config 0 interface 20 has no altsetting 0
[  175.558105][   T47] usb 6-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  175.561752][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.566599][   T47] usb 6-1: config 0 descriptor??
[  175.601181][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.727814][ T9035] loop0: detected capacity change from 0 to 2048
[  175.744048][ T9035] EXT4-fs (loop0): cluster size (1024) smaller than block size (2048)
[  175.856437][   T33] audit: type=1326 audit(1755121209.702:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.1004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b838ebe9 code=0x7ffc0000
[  175.871478][   T33] audit: type=1326 audit(1755121209.712:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.1004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b838ebe9 code=0x7ffc0000
[  175.896041][   T33] audit: type=1326 audit(1755121209.712:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.1004" exe="/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f26b838ebe9 code=0x7ffc0000
[  175.921166][   T33] audit: type=1326 audit(1755121209.712:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.0.1004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b838ebe9 code=0x7ffc0000
[  175.980668][   T47] logitech-djreceiver 0003:046D:C534.000B: unknown main item tag 0x0
[  175.989333][   T47] logitech-djreceiver 0003:046D:C534.000B: unknown main item tag 0x0
[  175.997048][   T47] logitech-djreceiver 0003:046D:C534.000B: unknown main item tag 0x0
[  176.007651][   T47] logitech-djreceiver 0003:046D:C534.000B: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.5-1/input20
[  176.196602][ T1272] usb 6-1: USB disconnect, device number 2
[  176.312689][ T5854] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  176.467282][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.472190][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.476863][ T5854] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  176.480596][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.489006][ T5854] usb 5-1: config 0 descriptor??
[  176.652929][   T55] Bluetooth: hci2: command 0x041b tx timeout
[  176.871721][ T9066] loop5: detected capacity change from 0 to 2048
[  176.884440][ T9066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.916796][ T5854] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0
[  176.923846][ T5854] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0
[  176.930875][ T5854] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0
[  176.938385][ T5854] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0
[  176.941408][ T5854] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0
[  176.962224][ T5854] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  177.060700][ T9072] loop5: detected capacity change from 0 to 8
[  177.088444][ T9072] SQUASHFS error: Failed to read block 0x4de: -5
[  177.091586][ T9072] SQUASHFS error: Failed to read block 0x4de: -5
[  177.096479][ T9072] SQUASHFS error: Failed to read block 0x4de: -5
[  177.099429][ T9072] SQUASHFS error: Failed to read block 0x4de: -5
[  177.102540][ T9072] SQUASHFS error: Failed to read block 0x4de: -5
[  177.198172][   T33] audit: type=1800 audit(1755121210.952:49): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1016" name="file1" dev="loop5" ino=5 res=0 errno=0
[  177.490924][ T5854] playstation 0003:054C:0DF2.000C: Failed to retrieve feature with reportID 32: -71
[  177.498278][ T5854] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense firmware info: -71
[  177.501999][ T5854] playstation 0003:054C:0DF2.000C: Failed to get firmware info from DualSense
[  177.506311][ T5854] playstation 0003:054C:0DF2.000C: Failed to create dualsense.
[  177.517269][ T5854] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -71
[  177.525816][ T5854] usb 5-1: USB disconnect, device number 11
[  177.688378][ T9087] trusted_key: encrypted_key: insufficient parameters specified
[  178.087974][ T9089] loop0: detected capacity change from 0 to 512
[  178.094219][ T9089] EXT4-fs (loop0): invalid journal inode
[  178.096393][ T9089] EXT4-fs (loop0): can't get journal size
[  178.111565][ T9089] EXT4-fs (loop0): 1 truncate cleaned up
[  178.117855][ T9089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.189373][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.543244][ T9114] Illegal XDP return value 183 on prog  (id 76) dev N/A, expect packet loss!
[  178.616823][ T9121] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1036'.
[  178.640171][ T9119] loop5: detected capacity change from 0 to 8192
[  178.733284][   T55] Bluetooth: hci2: command 0x041b tx timeout
[  178.965221][ T9126] svc: failed to register nfsdv3 RPC service (errno 111).
[  178.969590][ T9126] svc: failed to register nfsaclv3 RPC service (errno 111).
[  179.340048][ T9152] loop5: detected capacity change from 0 to 2048
[  179.353081][ T9152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.611631][   T33] audit: type=1800 audit(1755121213.402:50): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1048" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  179.758441][ T9158] dummy0: entered promiscuous mode
[  179.761353][ T9158] dummy0: entered allmulticast mode
[  179.882399][   T33] audit: type=1326 audit(1755121213.562:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9155 comm="syz.5.1049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc9d8ebe9 code=0x7ffc0000
[  179.891490][   T33] audit: type=1326 audit(1755121213.562:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9155 comm="syz.5.1049" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefc9d8ebe9 code=0x7ffc0000
[  179.905142][   T33] audit: type=1326 audit(1755121213.562:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9155 comm="syz.5.1049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc9d8ebe9 code=0x7ffc0000
[  179.921025][   T33] audit: type=1326 audit(1755121213.562:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9155 comm="syz.5.1049" exe="/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fefc9d8ebe9 code=0x7ffc0000
[  179.944543][   T33] audit: type=1326 audit(1755121213.562:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9155 comm="syz.5.1049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc9d8ebe9 code=0x7ffc0000
[  179.953998][   T33] audit: type=1326 audit(1755121213.562:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9155 comm="syz.5.1049" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefc9d8ebe9 code=0x7ffc0000
[  179.986773][   T33] audit: type=1326 audit(1755121213.562:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9155 comm="syz.5.1049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc9d8ebe9 code=0x7ffc0000
[  180.003878][   T33] audit: type=1326 audit(1755121213.562:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9155 comm="syz.5.1049" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefc9d8ebe9 code=0x7ffc0000
[  180.020543][   T33] audit: type=1326 audit(1755121213.562:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9155 comm="syz.5.1049" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc9d8ebe9 code=0x7ffc0000
[  180.429287][ T9176] loop0: detected capacity change from 0 to 32768
[  180.432715][ T9176] btrfs: Deprecated parameter 'usebackuproot'
[  180.435318][ T9176] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  180.469297][ T9176] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1059 (9176)
[  180.811214][ T9176] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  180.814063][   T55] Bluetooth: hci2: command 0x041b tx timeout
[  180.816191][ T9176] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  180.822062][ T9176] BTRFS info (device loop0): using free-space-tree
[  180.944181][ T9176] BTRFS info (device loop0): rebuilding free space tree
[  181.030314][ T9200] BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 159744 free, is not full
[  181.035478][ T9200] BTRFS info (device loop0): space_info total=3276800, used=53248, pinned=20480, reserved=1236992, may_use=1806336, readonly=0 zone_unusable=0
[  181.041633][ T9200] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792
[  181.045767][ T9200] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0
[  181.048945][ T9200] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0
[  181.052165][ T9200] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0
[  181.055610][ T9200] BTRFS info (device loop0): delayed_refs_rsv: size 65536 reserved 65536
[  181.166421][ T9206] loop4: detected capacity change from 0 to 256
[  181.242996][ T9206] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  181.326665][ T5853] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  181.432481][ T9213] loop5: detected capacity change from 0 to 164
[  181.642492][ T5854] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  181.685606][ T9220] loop5: detected capacity change from 0 to 512
[  181.702144][ T9220] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  181.720390][ T9220] EXT4-fs (loop5): 1 truncate cleaned up
[  181.728626][ T9220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.779427][ T9220] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.1069: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  181.819016][ T5854] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  181.821704][ T9220] EXT4-fs (loop5): Remounting filesystem read-only
[  181.822842][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.825184][ T9220] EXT4-fs warning (device loop5): ext4_rename_delete:3735: inode #2: comm syz.5.1069: Deleting old file: nlink 5, error=-117
[  181.829611][ T5854] usb 5-1: Product: syz
[  181.834829][ T5854] usb 5-1: Manufacturer: syz
[  181.836748][ T5854] usb 5-1: SerialNumber: syz
[  181.842146][ T5854] usb 5-1: config 0 descriptor??
[  181.891113][ T8887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.129361][ T5854] usb 5-1: Firmware version (0.0) predates our first public release.
[  182.141226][ T5854] usb 5-1: Please update to version 0.2 or newer
[  182.195586][ T5854] usb 5-1: USB disconnect, device number 12
[  182.483888][   T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  182.665046][   T10] usb 6-1: config 0 has no interfaces?
[  182.667267][   T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  182.670382][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.675186][   T10] usb 6-1: config 0 descriptor??
[  182.907227][ T5949] usb 6-1: USB disconnect, device number 3
[  183.498706][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'.
[  183.767842][ T9271] loop5: detected capacity change from 0 to 512
[  183.777506][ T9271] EXT4-fs: Ignoring removed bh option
[  183.793030][ T9271] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  183.806548][ T9271] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  183.814235][ T9271] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  183.818835][ T9271] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  183.827447][ T9271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.837274][ T9271] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  183.877834][ T8887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.939787][ T9276] loop0: detected capacity change from 0 to 4096
[  183.990080][ T9282] loop5: detected capacity change from 0 to 8
[  183.998873][ T9282] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  184.264388][ T9286] : entered promiscuous mode
[  184.535581][ T9278] loop4: detected capacity change from 0 to 40427
[  184.591743][ T9278] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  184.596002][ T9278] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  184.627662][ T7909] syz-executor: attempt to access beyond end of device
[  184.627662][ T7909] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  184.633063][ T7909] CPU: 0 UID: 0 PID: 7909 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  184.633085][ T7909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.633093][ T7909] Call Trace:
[  184.633098][ T7909]  <TASK>
[  184.633105][ T7909]  dump_stack_lvl+0x189/0x250
[  184.633127][ T7909]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.633143][ T7909]  ? __pfx_queue_work_on+0x10/0x10
[  184.633155][ T7909]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  184.633170][ T7909]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.633193][ T7909]  f2fs_handle_critical_error+0x37c/0x540
[  184.633217][ T7909]  f2fs_write_end_io+0x886/0xb60
[  184.633250][ T7909]  __submit_merged_bio+0x27a/0x6a0
[  184.633271][ T7909]  __submit_merged_write_cond+0x255/0x530
[  184.633292][ T7909]  f2fs_write_data_pages+0x261d/0x3000
[  184.633339][ T7909]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  184.633394][ T7909]  ? ktime_get+0x3e/0x1f0
[  184.633408][ T7909]  ? ktime_get+0x3e/0x1f0
[  184.633424][ T7909]  ? unwind_next_frame+0xa5/0x2390
[  184.633436][ T7909]  ? rcu_is_watching+0x15/0xb0
[  184.633447][ T7909]  ? __kasan_check_byte+0x12/0x40
[  184.633476][ T7909]  ? __lock_acquire+0xab9/0xd20
[  184.633501][ T7909]  ? do_raw_spin_lock+0x121/0x290
[  184.633524][ T7909]  ? do_raw_spin_unlock+0x4d/0x240
[  184.633539][ T7909]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  184.633556][ T7909]  do_writepages+0x32e/0x550
[  184.633583][ T7909]  ? do_raw_spin_unlock+0x4d/0x240
[  184.633602][ T7909]  filemap_fdatawrite+0x199/0x240
[  184.633619][ T7909]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  184.633634][ T7909]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[  184.633687][ T7909]  ? do_raw_spin_unlock+0x4d/0x240
[  184.633705][ T7909]  f2fs_sync_dirty_inodes+0x31f/0x830
[  184.633735][ T7909]  f2fs_write_checkpoint+0x95a/0x1df0
[  184.633780][ T7909]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  184.633839][ T7909]  ? kill_f2fs_super+0x298/0x6c0
[  184.633861][ T7909]  kill_f2fs_super+0x2c3/0x6c0
[  184.633884][ T7909]  ? __pfx_kill_f2fs_super+0x10/0x10
[  184.633927][ T7909]  ? radix_tree_delete_item+0x2b6/0x400
[  184.633949][ T7909]  ? shrinker_free+0x2ce/0x3e0
[  184.633966][ T7909]  deactivate_locked_super+0xbc/0x130
[  184.633984][ T7909]  cleanup_mnt+0x425/0x4c0
[  184.633998][ T7909]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.634016][ T7909]  task_work_run+0x1d4/0x260
[  184.634036][ T7909]  ? __pfx_task_work_run+0x10/0x10
[  184.634050][ T7909]  ? __x64_sys_umount+0x122/0x160
[  184.634071][ T7909]  ? exit_to_user_mode_loop+0x40/0x110
[  184.634093][ T7909]  exit_to_user_mode_loop+0xec/0x110
[  184.634111][ T7909]  do_syscall_64+0x2bd/0x3b0
[  184.634124][ T7909]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.634138][ T7909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.634151][ T7909]  ? exc_page_fault+0x9f/0xf0
[  184.634167][ T7909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.634179][ T7909] RIP: 0033:0x7f26e358ff17
[  184.634194][ T7909] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  184.634206][ T7909] RSP: 002b:00007fff3988a768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  184.634220][ T7909] RAX: 0000000000000000 RBX: 00007f26e3611c05 RCX: 00007f26e358ff17
[  184.634229][ T7909] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3988a820
[  184.634237][ T7909] RBP: 00007fff3988a820 R08: 0000000000000000 R09: 0000000000000000
[  184.634244][ T7909] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3988b8b0
[  184.634253][ T7909] R13: 00007f26e3611c05 R14: 000000000002d0a3 R15: 00007fff3988b8f0
[  184.634275][ T7909]  </TASK>
[  184.634281][ T7909] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  185.010821][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.013691][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.098683][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.107773][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.115276][ T9303] loop4: detected capacity change from 0 to 2048
[  185.120228][ T9303] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  185.166010][ T9304] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.268115][ T5713] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.272123][ T5713] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.286802][ T5713] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.290614][ T9308] use of bytesused == 0 is deprecated and will be removed in the future,
[  185.293936][ T9308] use the actual size instead.
[  185.300095][ T5713] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.374180][ T9312] loop5: detected capacity change from 0 to 1024
[  185.383710][ T9312] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  185.389965][ T9314] loop4: detected capacity change from 0 to 1024
[  185.393177][ T9314] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  185.399307][ T9312] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  185.402116][ T9312] EXT4-fs (loop5): orphan cleanup on readonly fs
[  185.407438][ T9312] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.1102: Invalid inode table block 0 in block_group 0
[  185.411981][ T9312] EXT4-fs (loop5): Remounting filesystem read-only
[  185.415221][ T9314] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  185.416154][ T9312] __quota_error: 3 callbacks suppressed
[  185.416161][ T9312] Quota error (device loop5): write_blk: dquota write failed
[  185.429124][ T9312] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  185.433949][ T9312] EXT4-fs (loop5): 1 truncate cleaned up
[  185.445675][ T9312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  185.461682][ T9312] EXT4-fs (loop5): shut down requested (1)
[  185.498371][ T9317] can0: slcan on ttyS3.
[  185.509633][ T8887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.614032][ T9317] can0 (unregistered): slcan off ttyS3.
[  185.955953][ T9325] loop5: detected capacity change from 0 to 32768
[  185.983706][ T5949] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  186.052678][ T9325] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names,read_only
[  186.052702][ T9325]   allowing incompatible features above 0.0: (unknown version)
[  186.052712][ T9325]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  186.072574][ T9325] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  186.076155][ T9325] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  186.079633][ T9325] bcachefs (loop5): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  186.079633][ T9325]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  186.108120][ T9325] bcachefs (loop5): btree node read error at btree lru level 0/0
[  186.108169][ T9325]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0
[  186.108176][ T9325]   loop5 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0
[  186.108180][ T9325]   loop5 btree validate error
[  186.108185][ T9325]   flagging btree lru lost data
[  186.108190][ T9325]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  186.108195][ T9325]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[  186.108199][ T9325]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[  186.108205][ T9325]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[  186.108210][ T9325]   ret btree_node_read_err_bad_node
[  186.148748][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  186.152047][ T5949] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  186.153291][ T9325] bcachefs (loop5): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[  186.156189][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  186.162160][ T9325] bcachefs (loop5): btree node read error at btree freespace level 0/0
[  186.167330][ T5949] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  186.168340][ T9325]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[  186.170948][ T5949] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  186.175785][ T9325]   loop5 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295
[  186.180642][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.190416][ T9325]   u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0
[  186.191129][ T5949] usb 5-1: config 0 descriptor??
[  186.199009][ T9325]   loop5 btree validate error
[  186.201226][ T9325]   flagging btree freespace lost data
[  186.203849][ T9325]   ret btree_node_read_err_bad_node
[  186.206212][ T9325] bcachefs (loop5): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  186.218365][ T9325] bcachefs (loop5): check_topology... done
[  186.223645][ T9325] bcachefs (loop5): accounting_read... done
[  186.228479][ T9325] bcachefs (loop5): alloc_read... done
[  186.231250][ T9325] bcachefs (loop5): snapshots_read... done
[  186.236626][ T9325] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  186.240912][ T9325] bcachefs (loop5): done starting filesystem
[  186.282484][ T8887] bcachefs (loop5): shutting down
[  186.305990][ T8887] bcachefs (loop5): shutdown complete
[  186.405563][ T5949] hdpvr 5-1:0.0: firmware version 0x0 dated 
[  186.408878][ T5949] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[  186.843484][ T5949] hdpvr 5-1:0.0: Could not setup controls
[  186.846679][ T5949] hdpvr 5-1:0.0: registering videodev failed
[  186.865647][ T5949] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71
[  186.888237][ T5949] usb 5-1: USB disconnect, device number 13
[  187.531904][ T9386] loop4: detected capacity change from 0 to 64
[  187.571070][ T9386] syz.4.1116: attempt to access beyond end of device
[  187.571070][ T9386] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  187.588204][ T9388] loop5: detected capacity change from 0 to 256
[  187.600699][ T9388] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[  187.610773][ T9386] Buffer I/O error on dev loop4, logical block 8388608, async page read
[  187.621409][ T9386] syz.4.1116: attempt to access beyond end of device
[  187.621409][ T9386] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  187.647947][ T9386] Buffer I/O error on dev loop4, logical block 8388608, async page read
[  187.701305][ T9395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1120'.
[  187.759335][   T33] audit: type=1326 audit(1755121221.602:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.4.1122" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26e358ebe9 code=0x0
[  187.952669][ T9405] loop5: detected capacity change from 0 to 512
[  187.991322][ T9405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.996160][ T9405] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.019227][ T9405] EXT4-fs error (device loop5): ext4_empty_dir:3100: inode #12: block 31: comm syz.5.1124: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1
[  188.041250][ T9405] EXT4-fs (loop5): Remounting filesystem read-only
[  188.044967][ T9405] EXT4-fs warning (device loop5): ext4_empty_dir:3103: inode #12: comm syz.5.1124: directory missing '..'
[  188.075411][ T8887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.457715][ T9414] loop5: detected capacity change from 0 to 32768
[  188.465254][ T9414] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  188.491044][ T9414] XFS (loop5): Ending clean mount
[  188.518304][ T8887] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  189.062018][ T9440] loop4: detected capacity change from 0 to 32768
[  189.079349][ T9440] ERROR: (device loop4): diAllocAG: ipimap->i_size is wrong
[  189.079349][ T9440] 
[  189.104861][ T9440] ERROR: (device loop4): remounting filesystem as read-only
[  189.108137][ T9440] ialloc: diAlloc returned -5!
[  189.462551][ T5883] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  189.612389][ T5883] usb 5-1: Using ep0 maxpacket: 32
[  189.617077][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.622001][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.628245][ T5883] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  189.632261][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.643069][ T5883] usb 5-1: config 0 descriptor??
[  189.649207][ T5883] hub 5-1:0.0: USB hub found
[  189.850716][ T5883] hub 5-1:0.0: 1 port detected
[  190.182502][ T5949] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  190.257792][ T5883] usb 5-1: USB disconnect, device number 14
[  190.365946][ T5949] usb 6-1: Using ep0 maxpacket: 32
[  190.372217][ T5949] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  190.376603][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.380238][ T5949] usb 6-1: Product: syz
[  190.382033][ T5949] usb 6-1: Manufacturer: syz
[  190.383708][ T5949] usb 6-1: SerialNumber: syz
[  190.386838][ T5949] usb 6-1: config 0 descriptor??
[  190.390420][ T5949] cdc_ether 6-1:0.0: More than one union descriptor, skipping ...
[  190.393393][ T5949] usb 6-1: bad CDC descriptors
[  190.395584][ T5949] usb 6-1: unsupported MDLM descriptors
[  190.598662][   T10] usb 6-1: USB disconnect, device number 4
[  190.956192][ T9479] loop0: detected capacity change from 0 to 128
[  191.678979][ T9495] loop4: detected capacity change from 0 to 40427
[  191.709982][ T9495] F2FS-fs: heap/no_heap options were deprecated
[  191.712929][ T9495] F2FS-fs: heap/no_heap options were deprecated
[  192.136097][ T9516] loop0: detected capacity change from 0 to 512
[  192.146325][ T9516] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  192.152471][ T5949] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  192.171617][ T9516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.181028][ T9516] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.188969][ T9516] EXT4-fs: Cannot change quota options when quota turned on
[  192.207746][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.279173][ T9528] loop0: detected capacity change from 0 to 512
[  192.302774][ T5949] usb 5-1: Using ep0 maxpacket: 8
[  192.316925][ T5949] usb 5-1: config 0 has no interfaces?
[  192.323193][ T5949] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  192.327205][ T5949] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  192.332652][ T5949] usb 5-1: Product: syz
[  192.334558][ T5949] usb 5-1: Manufacturer: syz
[  192.336566][ T5949] usb 5-1: SerialNumber: syz
[  192.341195][ T5949] usb 5-1: config 0 descriptor??
[  192.346659][ T9528] EXT4-fs (loop0): 1 orphan inode deleted
[  192.354871][ T9528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.365081][ T1090] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  192.369066][ T1090] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u9:5: Failed to release dquot type 1
[  192.378929][ T9528] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.399479][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.440834][ T9535] usb usb1: usbfs: process 9535 (syz.0.1160) did not claim interface 0 before use
[  192.484119][ T9537] netlink: 'syz.0.1161': attribute type 21 has an invalid length.
[  192.487687][ T9537] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1161'.
[  192.562627][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  192.658488][ T5917] usb 5-1: USB disconnect, device number 15
[  192.745903][   T10] usb 6-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  192.749276][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.752087][   T10] usb 6-1: Product: syz
[  192.754094][   T10] usb 6-1: Manufacturer: syz
[  192.755666][   T10] usb 6-1: SerialNumber: syz
[  192.963645][   T10] gspca_main: pac207-2.14.0 probing 093a:2476
[  192.967273][   T10] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  192.970625][   T10] uvcvideo 6-1:13.0: probe with driver uvcvideo failed with error -22
[  192.975198][   T10] usb 6-1: USB disconnect, device number 5
[  193.533932][   T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  193.606184][ T9560] loop5: detected capacity change from 0 to 4096
[  193.625440][ T9560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.671066][ T8887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.724152][   T10] usb 5-1: config 2 has an invalid interface number: 1 but max is 0
[  193.730370][   T10] usb 5-1: config 2 has no interface number 0
[  193.741247][   T10] usb 5-1: config 2 interface 1 has no altsetting 0
[  193.752185][   T10] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78
[  193.758621][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.772075][   T10] usb 5-1: Product: syz
[  193.774048][   T10] usb 5-1: Manufacturer: syz
[  193.775939][   T10] usb 5-1: SerialNumber: syz
[  193.819109][ T9572] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  193.826212][ T9572] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  193.847080][ T9574] loop5: detected capacity change from 0 to 2048
[  193.860032][ T9574] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  193.896095][ T9577] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.005058][   T10] snd-usb-audio 5-1:2.1: probe with driver snd-usb-audio failed with error -22
[  194.012526][   T10] snd-usb-us122l 5-1:2.1: usb_set_interface error
[  194.015449][   T10] snd-usb-us122l 5-1:2.1: probe with driver snd-usb-us122l failed with error -22
[  194.020229][   T10] usb 5-1: USB disconnect, device number 16
[  194.204139][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.208131][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.227277][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.522473][ T9591] loop5: detected capacity change from 0 to 1024
[  194.547152][ T9591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.551615][ T9591] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.575116][ T8887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.869654][ T9597] loop5: detected capacity change from 0 to 32768
[  194.875471][ T9597] (syz.5.1185,9597,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  194.881139][ T9597] (syz.5.1185,9597,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  194.908075][ T9597] JBD2: Ignoring recovery information on journal
[  194.945306][ T9597] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  195.054740][ T8887] ocfs2: Unmounting device (7,5) on (node local)
[  195.077610][ T9622] netlink: 'syz.4.1197': attribute type 21 has an invalid length.
[  195.081275][ T9622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1197'.
[  195.085509][ T9622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1197'.
[  195.230310][ T9630] loop5: detected capacity change from 0 to 1024
[  195.267776][  T140] hfsplus: b-tree write err: -5, ino 8
[  195.376910][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1204'.
[  195.379968][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1204'.
[  195.462670][ T5949] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  195.612665][ T5949] usb 5-1: Using ep0 maxpacket: 32
[  195.616219][ T5949] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  195.621931][ T5949] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  195.625653][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  195.629154][ T5949] usb 5-1: Product: syz
[  195.630648][ T5949] usb 5-1: Manufacturer: syz
[  195.632253][ T5949] usb 5-1: SerialNumber: syz
[  195.635571][ T5949] usb 5-1: config 0 descriptor??
[  195.638679][ T9628] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  195.642234][ T5949] hub 5-1:0.0: bad descriptor, ignoring hub
[  195.644695][ T5949] hub 5-1:0.0: probe with driver hub failed with error -5
[  195.663170][   T47] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  195.815249][   T47] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.818741][   T47] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  195.821896][   T47] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.825244][   T47] usb 6-1: config 1 interface 0 has no altsetting 0
[  195.829646][   T47] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  195.832824][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.835665][   T47] usb 6-1: Product: syz
[  195.837349][   T47] usb 6-1: Manufacturer: syz
[  195.839029][   T47] usb 6-1: SerialNumber: syz
[  196.112167][ T9651] loop0: detected capacity change from 0 to 2048
[  196.157123][ T9651] GPT:first_usable_lbas don't match.
[  196.159546][ T9651] GPT:34 != 290
[  196.161122][ T9651] GPT: Use GNU Parted to correct GPT errors.
[  196.164593][ T9651]  loop0: p1 p2 p3
[  196.266648][   T10] usb 6-1: USB disconnect, device number 6
[  196.317377][ T5945] udevd[5945]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  196.334990][ T5948] udevd[5948]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  196.335814][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  196.627945][ T9657] loop0: detected capacity change from 0 to 40427
[  196.636270][ T9657] F2FS-fs (loop0): Image doesn't support compression
[  196.639125][ T9657] F2FS-fs (loop0): build fault injection rate: 690
[  196.641920][ T9657] F2FS-fs (loop0): build fault injection type: 0x4
[  196.647089][ T9657] F2FS-fs (loop0): invalid crc value
[  196.698450][ T9657] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  196.703168][ T9657] F2FS-fs (loop0): Start checkpoint disabled!
[  196.711749][ T9657] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  197.194414][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1216'.
[  197.464324][   T47] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  197.644126][   T47] usb 6-1: config 0 has an invalid interface number: 20 but max is 0
[  197.647290][   T47] usb 6-1: config 0 has no interface number 0
[  197.649401][   T47] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  197.655089][   T47] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  197.658272][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.661053][   T47] usb 6-1: Product: syz
[  197.663619][   T47] usb 6-1: Manufacturer: syz
[  197.665307][   T47] usb 6-1: SerialNumber: syz
[  197.669377][   T47] usb 6-1: config 0 descriptor??
[  197.671700][ T9669] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  197.675553][   T47] usb-storage 6-1:0.20: USB Mass Storage device detected
[  197.681406][   T47] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  197.881453][   T47] scsi host6: usb-storage 6-1:0.20
[  198.084236][   T10] usb 6-1: USB disconnect, device number 7
[  198.543552][ T9688] cgroup: none used incorrectly
[  198.657401][ T9694] loop0: detected capacity change from 0 to 1024
[  198.708918][  T140] hfsplus: b-tree write err: -5, ino 4
[  199.008026][ T9709] loop0: detected capacity change from 0 to 4096
[  199.013351][ T9709] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  199.023608][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  199.050412][ T9709] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1234'.
[  199.102842][ T5949] usb 5-1: USB disconnect, device number 17
[  199.252475][   T10] usb 6-1: Using ep0 maxpacket: 32
[  199.256754][   T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  199.259804][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.274543][   T10] usb 6-1: config 0 descriptor??
[  199.536402][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  199.539991][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  199.543778][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  199.546184][   T10] usb 6-1: media controller created
[  199.555662][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  199.738749][   T10] az6027: usb out operation failed. (-71)
[  199.742792][   T10] az6027: usb out operation failed. (-71)
[  199.744611][   T10] stb0899_attach: Driver disabled by Kconfig
[  199.751092][   T10] az6027: no front-end attached
[  199.751092][   T10] 
[  199.762518][   T10] az6027: usb out operation failed. (-71)
[  199.764950][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  199.770185][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12
[  199.779681][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  199.783108][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  199.791425][   T10] usb 6-1: USB disconnect, device number 8
[  199.824599][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  200.239711][   T33] audit: type=1326 audit(1755121234.082:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.4.1244" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26e358ebe9 code=0x0
[  200.319439][ T9740] binder: BC_ACQUIRE_RESULT not supported
[  200.321346][ T9740] binder: 9738:9740 ioctl c0306201 200000000480 returned -22
[  200.351750][ T9743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1247'.
[  200.356011][ T9743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1247'.
[  200.403886][ T9746] loop5: detected capacity change from 0 to 2048
[  200.414954][ T9749] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.599340][ T9762] loop5: detected capacity change from 0 to 2048
[  200.606434][ T9762] NILFS (loop5): invalid segment: Magic number mismatch
[  200.612480][ T9762] NILFS (loop5): trying rollback from an earlier position
[  200.619703][ T9762] NILFS (loop5): recovery complete
[  200.622140][ T9765] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.816512][ T9767] loop4: detected capacity change from 0 to 32768
[  200.821043][ T9767] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1257 (9767)
[  200.840039][ T9767] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  200.844252][ T9767] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  200.873524][  T140] BTRFS warning (device loop4): checksum verify failed on logical 5267456 mirror 1 wanted 0xb8512a1d2916df35de1eb979e5409d57680a9623aa14e80f6c4e3536403d44d6 found 0x6fc812b96c4b111b3c2dea23d215f88791d82c68a8d551c19a2c275913556555 level 0
[  200.889983][ T9767] BTRFS warning (device loop4): failed to read fs tree: -5
[  201.079577][ T9767] BTRFS error (device loop4): open_ctree failed: -5
[  201.170872][ T9794] loop0: detected capacity change from 0 to 1024
[  201.247436][ T9794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.328912][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.555742][ T9813] netlink: 'syz.0.1268': attribute type 5 has an invalid length.
[  201.568323][ T9817] mmap: syz.5.1271 (9817) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  201.726669][ T9831] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 3, id = 0
[  201.842423][ T5949] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  202.199267][ T9819] loop4: detected capacity change from 0 to 32768
[  202.217969][ T9819] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  202.236427][ T9819] XFS (loop4): Ending clean mount
[  202.316303][ T9859] loop0: detected capacity change from 0 to 4096
[  202.319374][ T9859] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  202.330630][ T9859] ntfs3(loop0): ino=19, mi_enum_attr
[  202.332448][ T9859] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  202.341211][ T9859] ntfs3(loop0): failed to convert "c46c" to macromanian
[  202.345701][ T9859] ntfs3(loop0): ino=20, mi_enum_attr
[  202.639489][ T9866] loop5: detected capacity change from 0 to 512
[  202.645523][ T9866] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  202.776750][ T9819] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  202.972823][ T9876] loop5: detected capacity change from 0 to 512
[  203.010006][ T9876] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  203.014437][ T9876] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  203.017769][ T9876] System zones: 0-1, 15-15, 18-18, 34-34
[  203.020082][ T9876] EXT4-fs (loop5): orphan cleanup on readonly fs
[  203.023981][ T9876] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  203.027592][ T9876] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  203.032746][ T9876] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  203.035240][ T9876] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1293: bad orphan inode 16
[  203.038770][ T9876] ext4_test_bit(bit=15, block=18) = 1
[  203.040572][ T9876] is_bad_inode(inode)=0
[  203.042114][ T9876] NEXT_ORPHAN(inode)=0
[  203.045018][ T9876] max_ino=32
[  203.046122][ T9876] i_nlink=2
[  203.047931][ T9876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  203.054653][ T9876] fscrypt (loop5, inode 16): Error -61 getting encryption context
[  203.069244][ T8887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.220530][ T9887] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1295'.
[  203.593759][ T5949] usb 5-1: device descriptor read/64, error -71
[  203.654405][ T9895] loop6: detected capacity change from 0 to 63
[  203.664843][ T5948] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.674033][ T5948] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.685106][ T9895] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.690842][ T5948] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.695012][ T5948] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.697777][ T9895] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.701544][ T9895] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.711621][ T5948] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.722668][ T9895] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.729050][ T9895] Buffer I/O error on dev loop6, logical block 0, async page read
[  204.092565][ T5949] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  204.244756][ T5949] usb 5-1: Using ep0 maxpacket: 16
[  204.250634][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.259120][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.263165][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  204.270044][ T5949] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  204.276290][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.281570][ T5949] usb 5-1: config 0 descriptor??
[  204.627448][ T9908] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0)
[  204.699485][ T5949] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max
[  204.711314][ T5949] microsoft 0003:045E:07DA.000D: unsupported Resolution Multiplier 0
[  204.904523][ T5949] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  204.908547][ T5949] microsoft 0003:045E:07DA.000D: no inputs found
[  204.910725][ T5949] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway
[  204.915686][ T5949] usb 5-1: USB disconnect, device number 19
[  204.932601][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  205.082415][   T10] usb 6-1: Using ep0 maxpacket: 8
[  205.089508][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  205.093995][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.097242][   T10] usb 6-1: Product: syz
[  205.099111][   T10] usb 6-1: Manufacturer: syz
[  205.100959][   T10] usb 6-1: SerialNumber: syz
[  205.106499][   T10] usb 6-1: config 0 descriptor??
[  205.319349][   T10] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71
[  205.325882][   T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  205.334660][   T10] usb 6-1: USB disconnect, device number 9
[  205.466057][ T9917] loop4: detected capacity change from 0 to 1764
[  206.237682][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  206.426908][   T10] usb 6-1: config 102 has an invalid interface number: 120 but max is 0
[  206.429818][   T10] usb 6-1: config 102 has no interface number 0
[  206.431967][   T10] usb 6-1: config 102 interface 120 has no altsetting 0
[  206.439140][   T10] usb 6-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  206.442123][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.445050][   T10] usb 6-1: Product: syz
[  206.446893][   T10] usb 6-1: Manufacturer: syz
[  206.448529][   T10] usb 6-1: SerialNumber: syz
[  206.694261][   T10] go7007 6-1:102.120: The Lifeview TV Walker Ultra is not supported. Sorry!
[  206.704262][   T10] usb 6-1: USB disconnect, device number 10
[  206.727871][ T9927] overlayfs: missing 'workdir'
[  206.917032][ T9935] loop4: detected capacity change from 0 to 256
[  206.920806][ T9935] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  206.925045][ T9935] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  206.933393][ T9935] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  207.432266][   T55] Bluetooth: hci2: unexpected event for opcode 0x0c26
[  208.371448][ T9948] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  208.427859][ T9950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1322'.
[  208.455023][ T9952] loop4: detected capacity change from 0 to 136
[  208.470787][ T9952] Attempt to read inode for relocated directory
[  208.572174][ T9954] loop0: detected capacity change from 0 to 64
[  208.604087][ T9954] syz.0.1324: attempt to access beyond end of device
[  208.604087][ T9954] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64
[  208.610018][ T9954] syz.0.1324: attempt to access beyond end of device
[  208.610018][ T9954] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64
[  208.962453][ T5949] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  208.964065][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  209.114407][   T10] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.118784][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  209.121682][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  209.122611][ T5949] usb 6-1: Using ep0 maxpacket: 32
[  209.127288][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.133195][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.135302][   T10] usb 5-1: config 0 descriptor??
[  209.138155][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.146047][ T5949] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  209.150026][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.156833][ T5949] usb 6-1: config 0 descriptor??
[  209.162011][ T5949] hub 6-1:0.0: USB hub found
[  209.365128][ T5949] hub 6-1:0.0: 1 port detected
[  209.561673][   T10] logitech-djreceiver 0003:046D:C52F.000E: hidraw0: USB HID v8.00 Device [HID 046d:c52f] on usb-dummy_hcd.4-1/input0
[  209.570265][ T5949] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  209.578173][ T5949] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  209.585265][ T5949] usbhid 6-1:0.0: can't add hid device: -71
[  209.588061][ T5949] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  209.613568][ T5949] usb 6-1: USB disconnect, device number 11
[  209.765148][   T47] usb 5-1: USB disconnect, device number 20
[  210.323442][ T9967] loop5: detected capacity change from 0 to 32768
[  210.327637][ T9967] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1330 (9967)
[  210.347125][ T9967] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  210.353945][ T9967] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  210.358102][ T9967] BTRFS info (device loop5): using free-space-tree
[  210.490912][ T9967] BTRFS info (device loop5): rebuilding free space tree
[  210.589318][ T8887] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  210.670465][ T9997] loop4: detected capacity change from 0 to 256
[  211.172625][   T47] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  211.323708][   T47] usb 6-1: Using ep0 maxpacket: 32
[  211.329990][   T47] usb 6-1: unable to get BOS descriptor or descriptor too short
[  211.335911][   T47] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  211.339920][   T47] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  211.347499][   T47] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  211.351143][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.355214][   T47] usb 6-1: Product: syz
[  211.357128][   T47] usb 6-1: Manufacturer: syz
[  211.358768][   T47] usb 6-1: SerialNumber: syz
[  211.577806][   T47] usb 6-1: invalid UAC_HEADER (v1)
[  211.591903][   T47] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  211.597786][   T47] usb 6-1: USB disconnect, device number 12
[  211.612073][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.113332][T10002] loop4: detected capacity change from 0 to 262144
[  212.118458][T10002] F2FS-fs (loop4): invalid crc value
[  212.181097][T10002] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  212.194643][T10002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  212.235120][T10002] F2FS-fs (loop4): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix
[  212.559273][T10010] loop0: detected capacity change from 0 to 131072
[  212.564658][T10010] F2FS-fs (loop0): Test dummy encryption mode enabled
[  212.569193][T10010] F2FS-fs (loop0): invalid crc value
[  212.635141][T10010] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  212.639664][T10010] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  212.661664][T10018] loop5: detected capacity change from 0 to 32768
[  212.703849][T10018] JBD2: Ignoring recovery information on journal
[  212.744193][T10018] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  212.792844][T10010] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  212.872065][ T8887] ocfs2: Unmounting device (7,5) on (node local)
[  213.166308][T10034] loop4: detected capacity change from 0 to 256
[  213.262395][   T47] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  213.422707][   T47] usb 6-1: Using ep0 maxpacket: 8
[  213.431351][   T47] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  213.434266][   T47] usb 6-1: config 0 has no interface number 0
[  213.437188][   T47] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  213.457446][   T47] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  213.462721][   T47] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  213.468195][   T47] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  213.475005][   T47] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  213.479351][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.502488][   T47] usb 6-1: config 0 descriptor??
[  213.552634][   T47] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  213.801948][   T10] usb 6-1: USB disconnect, device number 13
[  213.803227][    C1] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  213.807519][T10032] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19
[  213.814632][   T10] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  214.868835][T10052] loop5: detected capacity change from 0 to 32768
[  214.885259][T10052] ialloc: diAlloc returned -5!
[  215.093019][T10054] loop4: detected capacity change from 0 to 8192
[  215.107605][T10054] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  215.383236][T10058] loop4: detected capacity change from 0 to 40427
[  215.387457][T10058] F2FS-fs (loop4): build fault injection rate: 771
[  215.395944][T10058] F2FS-fs (loop4): invalid crc value
[  215.476025][T10058] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  215.484291][T10058] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  215.540456][ T7909] syz-executor: attempt to access beyond end of device
[  215.540456][ T7909] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  215.545492][ T7909] CPU: 1 UID: 0 PID: 7909 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  215.545515][ T7909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  215.545522][ T7909] Call Trace:
[  215.545526][ T7909]  <TASK>
[  215.545530][ T7909]  dump_stack_lvl+0x189/0x250
[  215.545549][ T7909]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.545561][ T7909]  ? __pfx_queue_work_on+0x10/0x10
[  215.545571][ T7909]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  215.545583][ T7909]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  215.545600][ T7909]  f2fs_handle_critical_error+0x37c/0x540
[  215.545617][ T7909]  f2fs_write_end_io+0x886/0xb60
[  215.545640][ T7909]  __submit_merged_bio+0x27a/0x6a0
[  215.545655][ T7909]  __submit_merged_write_cond+0x255/0x530
[  215.545670][ T7909]  f2fs_write_data_pages+0x261d/0x3000
[  215.545705][ T7909]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  215.545781][ T7909]  ? folios_put_refs+0x559/0x640
[  215.545801][ T7909]  ? __lock_acquire+0xab9/0xd20
[  215.545823][ T7909]  ? do_raw_spin_lock+0x121/0x290
[  215.545844][ T7909]  ? do_raw_spin_unlock+0x4d/0x240
[  215.545877][ T7909]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  215.545893][ T7909]  do_writepages+0x32e/0x550
[  215.545915][ T7909]  ? do_raw_spin_unlock+0x4d/0x240
[  215.545932][ T7909]  filemap_fdatawrite+0x199/0x240
[  215.545953][ T7909]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  215.546000][ T7909]  ? do_raw_spin_unlock+0x4d/0x240
[  215.546017][ T7909]  f2fs_sync_dirty_inodes+0x31f/0x830
[  215.546042][ T7909]  f2fs_write_checkpoint+0x95a/0x1df0
[  215.546073][ T7909]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  215.546117][ T7909]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  215.546133][ T7909]  ? kfree+0x18e/0x440
[  215.546148][ T7909]  ? kill_f2fs_super+0x298/0x6c0
[  215.546168][ T7909]  kill_f2fs_super+0x2c3/0x6c0
[  215.546189][ T7909]  ? __pfx_kill_f2fs_super+0x10/0x10
[  215.546203][ T7909]  ? radix_tree_delete_item+0x2b6/0x400
[  215.546223][ T7909]  ? shrinker_free+0x2ce/0x3e0
[  215.546238][ T7909]  deactivate_locked_super+0xbc/0x130
[  215.546253][ T7909]  cleanup_mnt+0x425/0x4c0
[  215.546266][ T7909]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.546282][ T7909]  task_work_run+0x1d4/0x260
[  215.546300][ T7909]  ? __pfx_task_work_run+0x10/0x10
[  215.546315][ T7909]  ? __x64_sys_umount+0x122/0x160
[  215.546335][ T7909]  ? exit_to_user_mode_loop+0x40/0x110
[  215.546355][ T7909]  exit_to_user_mode_loop+0xec/0x110
[  215.546370][ T7909]  do_syscall_64+0x2bd/0x3b0
[  215.546381][ T7909]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.546392][ T7909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.546401][ T7909]  ? exc_page_fault+0x9f/0xf0
[  215.546413][ T7909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.546422][ T7909] RIP: 0033:0x7f26e358ff17
[  215.546431][ T7909] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  215.546440][ T7909] RSP: 002b:00007fff3988a768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  215.546451][ T7909] RAX: 0000000000000000 RBX: 00007f26e3611c05 RCX: 00007f26e358ff17
[  215.546458][ T7909] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3988a820
[  215.546464][ T7909] RBP: 00007fff3988a820 R08: 0000000000000000 R09: 0000000000000000
[  215.546469][ T7909] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3988b8b0
[  215.546475][ T7909] R13: 00007f26e3611c05 R14: 0000000000034955 R15: 00007fff3988b8f0
[  215.546492][ T7909]  </TASK>
[  215.546544][ T7909] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  215.862686][   T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  216.015928][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  216.019757][   T10] usb 6-1: not running at top speed; connect to a high speed hub
[  216.024831][   T10] usb 6-1: config 1 interface 0 altsetting 222 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  216.029335][   T10] usb 6-1: config 1 interface 0 has no altsetting 0
[  216.046904][   T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40
[  216.050879][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.055026][   T10] usb 6-1: Product: syz
[  216.056809][   T10] usb 6-1: Manufacturer: syz
[  216.058684][   T10] usb 6-1: SerialNumber: syz
[  216.065508][T10065] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  216.278588][   T10] usbhid 6-1:1.0: can't add hid device: -71
[  216.281284][   T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  216.289498][   T10] usb 6-1: USB disconnect, device number 14
[  216.500268][T10078] loop4: detected capacity change from 0 to 32768
[  216.522113][T10078] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  216.522113][T10078] 
[  216.540151][T10078] ERROR: (device loop4): remounting filesystem as read-only
[  216.754732][T10084] loop0: detected capacity change from 0 to 40427
[  216.771885][T10084] F2FS-fs (loop0): invalid crc value
[  216.843309][T10084] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  216.850882][T10084] F2FS-fs (loop0): Start checkpoint disabled!
[  216.855704][T10084] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  216.916664][ T1090] kworker/u9:5: attempt to access beyond end of device
[  216.916664][ T1090] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  216.927396][ T1090] kworker/u9:5: attempt to access beyond end of device
[  216.927396][ T1090] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  216.937148][ T1090] CPU: 0 UID: 0 PID: 1090 Comm: kworker/u9:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  216.937172][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.937182][ T1090] Workqueue: writeback wb_workfn (flush-7:0)
[  216.937206][ T1090] Call Trace:
[  216.937212][ T1090]  <TASK>
[  216.937218][ T1090]  dump_stack_lvl+0x189/0x250
[  216.937242][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.937257][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  216.937270][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  216.937286][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  216.937309][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  216.937330][ T1090]  f2fs_write_end_io+0x886/0xb60
[  216.937365][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  216.937386][ T1090]  __submit_merged_write_cond+0x255/0x530
[  216.937407][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  216.937450][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  216.937478][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  216.937526][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  216.937551][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[  216.937568][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[  216.937603][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  216.937620][ T1090]  do_writepages+0x32e/0x550
[  216.937642][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[  216.937656][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[  216.937685][ T1090]  __writeback_single_inode+0x145/0xff0
[  216.937700][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  216.937748][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  216.937764][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.937801][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  216.937853][ T1090]  ? rcu_is_watching+0x15/0xb0
[  216.937874][ T1090]  wb_writeback+0x43b/0xaf0
[  216.937897][ T1090]  ? queue_io+0x381/0x590
[  216.937915][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  216.937939][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.937957][ T1090]  wb_workfn+0x409/0xef0
[  216.937982][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  216.938000][ T1090]  ? __lock_acquire+0xab9/0xd20
[  216.938029][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  216.938048][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.938059][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  216.938071][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  216.938085][ T1090]  process_scheduled_works+0xae1/0x17b0
[  216.938122][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  216.938157][ T1090]  worker_thread+0x8a0/0xda0
[  216.938182][ T1090]  ? __kthread_parkme+0x7b/0x200
[  216.938205][ T1090]  kthread+0x711/0x8a0
[  216.938223][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  216.938236][ T1090]  ? __pfx_kthread+0x10/0x10
[  216.938252][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.938265][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.938277][ T1090]  ? __pfx_kthread+0x10/0x10
[  216.938293][ T1090]  ret_from_fork+0x3fc/0x770
[  216.938310][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  216.938329][ T1090]  ? __switch_to_asm+0x39/0x70
[  216.938343][ T1090]  ? __switch_to_asm+0x33/0x70
[  216.938357][ T1090]  ? __pfx_kthread+0x10/0x10
[  216.938373][ T1090]  ret_from_fork_asm+0x1a/0x30
[  216.938403][ T1090]  </TASK>
[  216.938409][ T1090] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  217.205416][   T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  217.355740][   T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  217.359123][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.362501][ T6359] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  217.366859][   T10] usb 6-1: config 0 descriptor??
[  217.371180][   T10] cp210x 6-1:0.0: cp210x converter detected
[  217.514260][ T6359] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.517784][ T6359] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  217.522046][ T6359] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  217.525837][ T6359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  217.528627][ T6359] usb 5-1: SerialNumber: syz
[  217.746290][ T6359] usb 5-1: 0:2 : does not exist
[  217.757283][ T6359] usb 5-1: USB disconnect, device number 21
[  217.770301][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  217.776845][   T10] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -32
[  217.779624][   T10] cp210x 6-1:0.0: GPIO initialisation failed: -32
[  217.787285][   T10] usb 6-1: cp210x converter now attached to ttyUSB0
[  217.804144][   T10] usb 6-1: USB disconnect, device number 15
[  217.808848][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  217.811748][   T10] cp210x 6-1:0.0: device disconnected
[  218.564388][T10105] loop4: detected capacity change from 0 to 32768
[  218.608082][T10105] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=24,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=very,nojournal_transaction_names,rebalance_on_ac_only
[  218.608098][T10105]   allowing incompatible features above 0.0: (unknown version)
[  218.608103][T10105]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  218.625415][T10105] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  218.628162][T10105] bcachefs (loop4): initializing new filesystem
[  218.634732][T10105] bcachefs (loop4): going read-write
[  218.640071][T10105] bcachefs (loop4): marking superblocks
[  218.659968][T10105] bcachefs (loop4): initializing freespace
[  218.664310][T10105] bcachefs (loop4): done initializing freespace
[  218.668769][T10105] bcachefs (loop4): reading snapshots table
[  218.670893][T10105] bcachefs (loop4): reading snapshots done
[  218.692605][T10105] bcachefs (loop4): done starting filesystem
[  218.760550][T10111] loop5: detected capacity change from 0 to 32768
[  218.763848][ T7909] bcachefs (loop4): shutting down
[  218.764808][T10111] XFS: ikeep mount option is deprecated.
[  218.766084][ T7909] bcachefs (loop4): going read-only
[  218.766125][ T7909] bcachefs (loop4): finished waiting for writes to stop
[  218.777598][ T7909] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  218.796469][T10111] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  218.826346][ T7909] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  218.834841][ T7909] bcachefs (loop4): clean shutdown complete, journal seq 4
[  218.842573][ T7909] bcachefs (loop4): marking filesystem clean
[  218.846442][T10111] XFS (loop5): Ending clean mount
[  218.849946][T10111] XFS (loop5): Quotacheck needed: Please wait.
[  218.870145][ T7909] bcachefs (loop4): shutdown complete
[  218.879929][T10111] XFS (loop5): Quotacheck: Done.
[  218.915884][ T8887] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  219.090846][T10131] loop5: detected capacity change from 0 to 64
[  220.218243][T10136] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  220.340936][T10141] loop0: detected capacity change from 0 to 164
[  220.430954][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1387'.
[  220.480602][T10150] loop5: detected capacity change from 0 to 8
[  220.523184][T10152] loop0: detected capacity change from 0 to 128
[  220.527208][T10150] SQUASHFS error: Unable to read inode 0xe3
[  220.543618][T10152] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  220.553850][T10152] ext4 filesystem being mounted at /454/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  220.665618][ T5853] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.718497][   T55] Bluetooth: hci2: unexpected event for opcode 0x2005
[  220.746203][T10138] loop4: detected capacity change from 0 to 65536
[  220.757991][T10138] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  220.777444][T10138] XFS (loop4): Ending clean mount
[  220.807435][ T7909] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  221.701218][T10189] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1402'.
[  221.854333][T10197] syzkaller1: entered promiscuous mode
[  221.856724][T10197] syzkaller1: entered allmulticast mode
[  222.040347][T10215] loop0: detected capacity change from 0 to 2048
[  222.051553][T10215] NILFS (loop0): invalid segment: Magic number mismatch
[  222.057487][T10215] NILFS (loop0): trying rollback from an earlier position
[  222.064086][T10215] NILFS (loop0): recovery complete
[  222.072953][T10216] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  222.212453][ T5949] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  222.376208][ T5949] usb 5-1: Using ep0 maxpacket: 8
[  222.387498][ T5949] usb 5-1: config 6 has an invalid interface number: 51 but max is 1
[  222.393241][ T5949] usb 5-1: config 6 has no interface number 1
[  222.396409][ T5949] usb 5-1: config 6 interface 0 has no altsetting 0
[  222.399399][ T5949] usb 5-1: config 6 interface 51 has no altsetting 0
[  222.406350][ T5949] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad
[  222.410467][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.414800][ T5949] usb 5-1: Product: syz
[  222.416920][ T5949] usb 5-1: Manufacturer: syz
[  222.419051][ T5949] usb 5-1: SerialNumber: syz
[  222.687176][ T5949] xr_serial 5-1:6.51: xr_serial converter detected
[  222.693115][ T5949] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  222.696192][ T5949] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  222.711376][ T5949] usb 5-1: USB disconnect, device number 22
[  222.729257][ T5949] xr_serial 5-1:6.0: device disconnected
[  223.395246][T10242] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  223.398055][T10242] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  223.457316][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'.
[  223.749018][T10249] loop0: detected capacity change from 0 to 32768
[  223.786603][T10249] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  223.818433][ T5853] ocfs2: Unmounting device (7,0) on (node local)
[  223.886495][T10268] loop5: detected capacity change from 0 to 4096
[  223.906213][T10268] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  223.916356][   T47] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  223.930265][T10268] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  223.938918][T10268] ntfs3(loop5): ino=5, mi_enum_attr
[  223.943523][T10268] ntfs3(loop5): ino=5, "/" mi_enum_attr
[  223.998244][T10277] mac80211_hwsim hwsim13 `: renamed from wlan1
[  224.067326][   T47] usb 5-1: Using ep0 maxpacket: 8
[  224.072152][T10283] loop5: detected capacity change from 0 to 136
[  224.076178][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  224.097024][   T47] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3
[  224.105939][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.108712][   T47] usb 5-1: Product: syz
[  224.110202][   T47] usb 5-1: Manufacturer: syz
[  224.111815][   T47] usb 5-1: SerialNumber: syz
[  224.126373][   T47] usb 5-1: config 0 descriptor??
[  224.353126][   T47] usb 5-1: USB disconnect, device number 23
[  224.605157][T10297] loop0: detected capacity change from 0 to 32768
[  224.612233][T10297] XFS: noikeep mount option is deprecated.
[  224.634223][T10297] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.662447][T10297] XFS (loop0): Ending clean mount
[  224.666469][T10297] XFS (loop0): Quotacheck needed: Please wait.
[  224.696124][T10297] XFS (loop0): Quotacheck: Done.
[  224.711264][T10297] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.957757][T10316] loop4: detected capacity change from 0 to 2048
[  225.017958][T10316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.030868][T10316] overlayfs: invalid redirect ((null))
[  225.048163][ T7909] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  225.074140][ T7909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.135492][T10323] macvlan2: entered promiscuous mode
[  225.140589][T10323] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  225.153979][T10323] macvlan3: entered promiscuous mode
[  225.158113][T10323] bond0: (slave macvlan3): Error -98 calling set_mac_address
[  225.486713][T10329] loop5: detected capacity change from 0 to 40427
[  225.491894][T10329] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  225.494509][T10329] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  225.498435][T10329] F2FS-fs (loop5): invalid crc value
[  225.541311][T10329] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  225.545648][T10329] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  225.548025][T10329] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  225.681899][T10336] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1460'.
[  225.777719][T10337] f2fs: Unknown parameter '01777777777777777777777	Z* m.Dc8'@C9G9?9S{1Jլ5æԌqqY糔'
[  225.804502][   T33] audit: type=1800 audit(1755121259.632:65): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1459" name="file1" dev="loop5" ino=10 res=0 errno=0
[  226.011073][T10345] loop4: detected capacity change from 0 to 1024
[  226.236097][T10349] mkiss: ax0: crc mode is auto.
[  227.051497][T10356] loop5: detected capacity change from 0 to 32768
[  227.089947][T10356] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  227.113548][T10356] XFS (loop5): Ending clean mount
[  227.127620][T10371] loop4: detected capacity change from 0 to 512
[  227.130911][T10356] XFS (loop5): Quotacheck needed: Please wait.
[  227.171772][T10371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.177019][T10371] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.181492][T10356] XFS (loop5): Quotacheck: Done.
[  227.196640][ T7909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.201690][ T8887] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  227.278161][T10375] binder: 10374:10375 ioctl c0306201 2000000001c0 returned -22
[  227.654721][T10388] loop5: detected capacity change from 0 to 40427
[  227.658270][T10388] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  227.661202][T10388] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  227.666108][T10388] F2FS-fs (loop5): invalid crc value
[  227.727358][T10388] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  227.731346][T10388] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  227.734710][T10388] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  227.773752][   T33] audit: type=1804 audit(1755121261.602:66): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1477" name="/newroot/178/file0/bus" dev="loop5" ino=10 res=1 errno=0
[  227.790208][T10388] syz.5.1477: attempt to access beyond end of device
[  227.790208][T10388] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  227.804326][T10388] syz.5.1477: attempt to access beyond end of device
[  227.804326][T10388] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  227.811715][T10388] CPU: 1 UID: 0 PID: 10388 Comm: syz.5.1477 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  227.811730][T10388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.811736][T10388] Call Trace:
[  227.811740][T10388]  <TASK>
[  227.811745][T10388]  dump_stack_lvl+0x189/0x250
[  227.811763][T10388]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.811773][T10388]  ? __pfx_queue_work_on+0x10/0x10
[  227.811782][T10388]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  227.811794][T10388]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  227.811809][T10388]  f2fs_handle_critical_error+0x37c/0x540
[  227.811824][T10388]  f2fs_write_end_io+0x886/0xb60
[  227.811844][T10388]  __submit_merged_bio+0x27a/0x6a0
[  227.811871][T10388]  ? up_write+0x1c4/0x420
[  227.811882][T10388]  __submit_merged_write_cond+0x44c/0x530
[  227.811895][T10388]  f2fs_sync_node_pages+0x1479/0x15e0
[  227.811914][T10388]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  227.811936][T10388]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  227.811951][T10388]  ? up_write+0x1c4/0x420
[  227.811958][T10388]  ? do_raw_spin_unlock+0x4d/0x240
[  227.811971][T10388]  f2fs_write_checkpoint+0xe6f/0x1df0
[  227.811993][T10388]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  227.812023][T10388]  ? down_write+0x162/0x1f0
[  227.812035][T10388]  ? __pfx_down_write+0x10/0x10
[  227.812051][T10388]  f2fs_issue_checkpoint+0x3ac/0x570
[  227.812064][T10388]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  227.812077][T10388]  ? do_raw_spin_lock+0x121/0x290
[  227.812091][T10388]  ? __up_read+0x280/0x680
[  227.812103][T10388]  ? f2fs_sync_fs+0x200/0x3d0
[  227.812112][T10388]  f2fs_do_sync_file+0x869/0x1860
[  227.812128][T10388]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  227.812155][T10388]  ? f2fs_file_write_iter+0x4ac/0x2410
[  227.812164][T10388]  ? vfs_fsync_range+0x12c/0x1c0
[  227.812171][T10388]  ? f2fs_sync_file+0xe9/0x160
[  227.812182][T10388]  f2fs_file_write_iter+0x753/0x2410
[  227.812199][T10388]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  227.812210][T10388]  ? __asan_memset+0x22/0x50
[  227.812222][T10388]  iter_file_splice_write+0x93a/0x1000
[  227.812244][T10388]  ? __pfx_iter_file_splice_write+0x10/0x10
[  227.812256][T10388]  ? rcu_read_lock_any_held+0xb3/0x120
[  227.812270][T10388]  ? __pfx_iter_file_splice_write+0x10/0x10
[  227.812281][T10388]  direct_splice_actor+0x101/0x160
[  227.812293][T10388]  splice_direct_to_actor+0x5a8/0xcc0
[  227.812318][T10388]  ? __pfx_direct_splice_actor+0x10/0x10
[  227.812346][T10388]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  227.812363][T10388]  do_splice_direct+0x181/0x270
[  227.812376][T10388]  ? __pfx_do_splice_direct+0x10/0x10
[  227.812389][T10388]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  227.812405][T10388]  ? rw_verify_area+0x255/0x4d0
[  227.812418][T10388]  do_sendfile+0x4da/0x7e0
[  227.812426][T10388]  ? __pfx_vfs_write+0x10/0x10
[  227.812438][T10388]  ? __pfx_do_sendfile+0x10/0x10
[  227.812448][T10388]  ? __se_sys_futex+0x36f/0x400
[  227.812462][T10388]  __se_sys_sendfile64+0x13e/0x190
[  227.812477][T10388]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  227.812487][T10388]  ? rcu_is_watching+0x15/0xb0
[  227.812498][T10388]  ? do_syscall_64+0xbe/0x3b0
[  227.812510][T10388]  do_syscall_64+0xfa/0x3b0
[  227.812518][T10388]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.812526][T10388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.812533][T10388]  ? exc_page_fault+0x9f/0xf0
[  227.812543][T10388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.812550][T10388] RIP: 0033:0x7fefc9d8ebe9
[  227.812559][T10388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.812567][T10388] RSP: 002b:00007fefcabf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  227.812577][T10388] RAX: ffffffffffffffda RBX: 00007fefc9fb5fa0 RCX: 00007fefc9d8ebe9
[  227.812583][T10388] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005
[  227.812587][T10388] RBP: 00007fefc9e11e19 R08: 0000000000000000 R09: 0000000000000000
[  227.812592][T10388] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000000
[  227.812596][T10388] R13: 00007fefc9fb6038 R14: 00007fefc9fb5fa0 R15: 00007ffc3b808df8
[  227.812609][T10388]  </TASK>
[  227.966321][T10388] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  228.179343][T10399] loop5: detected capacity change from 0 to 512
[  228.188201][T10399] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  228.306488][T10403] loop5: detected capacity change from 0 to 256
[  228.318183][T10403] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  229.052918][T10422] loop0: detected capacity change from 0 to 512
[  229.089557][T10422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.112694][T10422] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.213417][T10422] EXT4-fs error (device loop0): ext4_get_first_dir_block:3544: inode #12: comm syz.0.1489: directory missing '.'
[  229.220480][T10422] EXT4-fs (loop0): Remounting filesystem read-only
[  229.268741][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.449146][T10427] syz.4.1491 (10427): /proc/10426/oom_adj is deprecated, please use /proc/10426/oom_score_adj instead.
[  229.699371][T10435] loop4: detected capacity change from 0 to 8
[  230.392431][   T47] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  230.546798][   T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.550199][   T47] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  230.554099][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  230.558465][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  230.562340][   T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  230.571370][   T47] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  230.575014][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  230.578367][   T47] usb 6-1: Product: syz
[  230.579905][   T47] usb 6-1: Manufacturer: syz
[  230.581550][   T47] usb 6-1: SerialNumber: syz
[  230.596547][   T47] usb 6-1: config 0 descriptor??
[  230.823378][   T47] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  230.825927][   T47] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  231.030136][   T47] radio-si470x 6-1:0.0: software version 0, hardware version 0
[  231.033025][   T47] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  231.037124][   T47] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  231.231187][   T47] radio-si470x 6-1:0.0: submitting int urb failed (-90)
[  231.558964][T10466] syzkaller1: entered promiscuous mode
[  231.560894][T10466] syzkaller1: entered allmulticast mode
[  232.310433][   T47] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71
[  232.314662][   T47] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71
[  232.321767][   T47] usb 6-1: USB disconnect, device number 16
[  232.868304][   T47] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  233.027366][   T47] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=a5.ed
[  233.031416][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.035927][   T47] usb 5-1: Product: syz
[  233.037948][   T47] usb 5-1: Manufacturer: syz
[  233.041507][   T47] usb 5-1: SerialNumber: syz
[  233.047492][   T47] usb 5-1: config 0 descriptor??
[  233.057487][   T47] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  233.063217][   T47] ftdi_sio ttyUSB0: unknown device type: 0xa5ed
[  233.182451][ T6359] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  233.258430][   T10] usb 5-1: USB disconnect, device number 24
[  233.262131][   T10] ftdi_sio 5-1:0.0: device disconnected
[  233.352408][ T6359] usb 6-1: Using ep0 maxpacket: 16
[  233.356215][ T6359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.360153][ T6359] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.364261][ T6359] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  233.367729][ T6359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.371797][ T6359] usb 6-1: config 0 descriptor??
[  233.627987][T10488] syz.0.1516: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  233.635694][T10488] CPU: 0 UID: 0 PID: 10488 Comm: syz.0.1516 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  233.635709][T10488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.635716][T10488] Call Trace:
[  233.635720][T10488]  <TASK>
[  233.635724][T10488]  dump_stack_lvl+0x189/0x250
[  233.635742][T10488]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.635753][T10488]  ? __pfx__printk+0x10/0x10
[  233.635763][T10488]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  233.635774][T10488]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  233.635784][T10488]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  233.635794][T10488]  warn_alloc+0x214/0x310
[  233.635808][T10488]  ? stack_depot_save_flags+0x41b/0x860
[  233.635819][T10488]  ? __pfx_warn_alloc+0x10/0x10
[  233.635830][T10488]  ? kasan_save_track+0x4f/0x80
[  233.635841][T10488]  ? xskq_create+0x56/0x170
[  233.635848][T10488]  ? xsk_init_queue+0xb0/0x110
[  233.635855][T10488]  ? xsk_setsockopt+0x4dc/0x8d0
[  233.635861][T10488]  ? do_sock_setsockopt+0x17c/0x1b0
[  233.635873][T10488]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  233.635884][T10488]  ? do_syscall_64+0xfa/0x3b0
[  233.635893][T10488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.635904][T10488]  __vmalloc_node_range_noprof+0x125/0x12f0
[  233.635926][T10488]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  233.635939][T10488]  ? __kasan_kmalloc+0x93/0xb0
[  233.635956][T10488]  vmalloc_user_noprof+0xad/0xf0
[  233.635966][T10488]  ? xskq_create+0xbf/0x170
[  233.635974][T10488]  xskq_create+0xbf/0x170
[  233.635983][T10488]  xsk_init_queue+0xb0/0x110
[  233.635992][T10488]  xsk_setsockopt+0x4dc/0x8d0
[  233.636001][T10488]  ? __pfx_xsk_setsockopt+0x10/0x10
[  233.636008][T10488]  ? __pfx_aa_sk_perm+0x10/0x10
[  233.636020][T10488]  ? aa_sock_opt_perm+0xff/0x1b0
[  233.636030][T10488]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  233.636038][T10488]  ? __pfx_xsk_setsockopt+0x10/0x10
[  233.636046][T10488]  do_sock_setsockopt+0x17c/0x1b0
[  233.636058][T10488]  __x64_sys_setsockopt+0x13f/0x1b0
[  233.636070][T10488]  do_syscall_64+0xfa/0x3b0
[  233.636078][T10488]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.636086][T10488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.636093][T10488]  ? exc_page_fault+0x9f/0xf0
[  233.636102][T10488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.636109][T10488] RIP: 0033:0x7f26b838ebe9
[  233.636117][T10488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.636124][T10488] RSP: 002b:00007f26b92b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  233.636133][T10488] RAX: ffffffffffffffda RBX: 00007f26b85b6090 RCX: 00007f26b838ebe9
[  233.636138][T10488] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  233.636142][T10488] RBP: 00007f26b8411e19 R08: 0000000000000004 R09: 0000000000000000
[  233.636147][T10488] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.636151][T10488] R13: 00007f26b85b6128 R14: 00007f26b85b6090 R15: 00007ffdec6bf768
[  233.636163][T10488]  </TASK>
[  233.637065][T10488] Mem-Info:
[  233.760586][T10488] active_anon:8005 inactive_anon:0 isolated_anon:0
[  233.760586][T10488]  active_file:10844 inactive_file:38352 isolated_file:0
[  233.760586][T10488]  unevictable:1768 dirty:232 writeback:0
[  233.760586][T10488]  slab_reclaimable:10495 slab_unreclaimable:54879
[  233.760586][T10488]  mapped:19223 shmem:3034 pagetables:1376
[  233.760586][T10488]  sec_pagetables:0 bounce:0
[  233.760586][T10488]  kernel_misc_reclaimable:0
[  233.760586][T10488]  free:277386 free_pcp:20116 free_cma:0
[  233.779309][T10488] Node 0 active_anon:17176kB inactive_anon:0kB active_file:42488kB inactive_file:9392kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47232kB dirty:864kB writeback:0kB shmem:5980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5104kB pagetables:2596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  233.804298][T10488] Node 1 active_anon:14868kB inactive_anon:0kB active_file:888kB inactive_file:144016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29664kB dirty:64kB writeback:0kB shmem:6160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7760kB pagetables:2924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  233.815022][T10488] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  233.826743][T10488] lowmem_reserve[]: 0 811 811 811 811
[  233.828722][T10488] Node 0 DMA32 free:354060kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17176kB inactive_anon:0kB active_file:42488kB inactive_file:9392kB unevictable:3536kB writepending:864kB present:1556484kB managed:831000kB mlocked:0kB bounce:0kB free_pcp:37824kB local_pcp:18132kB free_cma:0kB
[  233.840565][T10488] lowmem_reserve[]: 0 0 0 0 0
[  233.844656][T10488] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  233.857748][T10488] lowmem_reserve[]: 0 0 854 854 854
[  233.859724][T10488] Node 1 Normal free:281632kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14868kB inactive_anon:0kB active_file:888kB inactive_file:144016kB unevictable:3536kB writepending:64kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42736kB local_pcp:16276kB free_cma:0kB
[  233.894008][T10488] lowmem_reserve[]: 0 0 0 0 0
[  233.902244][T10488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  233.912186][T10488] Node 0 DMA32: 675*4kB (ME) 882*8kB (UME) 269*16kB (UME) 211*32kB (UME) 333*64kB (UME) 79*128kB (UME) 11*256kB (UM) 10*512kB (UME) 7*1024kB (UM) 4*2048kB (ME) 68*4096kB (M) = 354060kB
[  233.929667][T10488] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  233.938668][T10488] Node 1 Normal: 604*4kB (UM) 340*8kB (UM) 253*16kB (UME) 388*32kB (UME) 214*64kB (UME) 162*128kB (UME) 85*256kB (UM) 52*512kB (UME) 31*1024kB (UME) 15*2048kB (UM) 28*4096kB (UM) = 281568kB
[  233.946984][T10488] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  233.950362][T10488] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  233.955845][T10488] 52177 total pagecache pages
[  233.957670][T10488] 0 pages in swap cache
[  233.959165][T10488] Free swap  = 124996kB
[  233.960726][T10488] Total swap = 124996kB
[  233.962201][T10488] 786301 pages RAM
[  233.966304][T10488] 0 pages HighMem/MovableOnly
[  233.968066][T10488] 241319 pages reserved
[  233.969563][T10488] 0 pages cma reserved
[  234.162551][   T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  234.325116][   T10] usb 5-1: Using ep0 maxpacket: 8
[  234.334306][   T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  234.337265][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  234.340502][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  234.350446][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  234.355193][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  234.360595][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  234.367524][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.396301][ T6359] letsketch 0003:6161:4D15.000F: Device info: ఁ
[  234.625228][ T6359] usb 6-1: Max retries (5) exceeded reading string descriptor 201
[  234.627935][ T6359] letsketch 0003:6161:4D15.000F: probe with driver letsketch failed with error -71
[  234.634817][ T6359] usb 6-1: USB disconnect, device number 17
[  234.787638][   T10] usb 5-1: USB disconnect, device number 25
[  235.372442][   T47] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  235.479925][T10498] loop4: detected capacity change from 0 to 32768
[  235.496050][T10498] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  235.508680][T10498] XFS (loop4): Ending clean mount
[  235.516041][T10498] XFS (loop4): Quotacheck needed: Please wait.
[  235.526278][   T47] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  235.529296][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.541206][   T47] usb 6-1: config 0 descriptor??
[  235.557535][T10498] XFS (loop4): Quotacheck: Done.
[  235.612014][ T7909] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  235.621309][T10517] loop0: detected capacity change from 0 to 1024
[  235.744492][ T9500] hfsplus: b-tree write err: -5, ino 4
[  235.904307][T10525] loop0: detected capacity change from 0 to 128
[  235.944923][T10525] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  235.967322][T10525] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.027541][ T5853] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  236.097792][   T33] audit: type=1326 audit(1755121269.932:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10534 comm="syz.0.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b838ebe9 code=0x7ffc0000
[  236.108525][ T5949] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  236.132988][   T33] audit: type=1326 audit(1755121269.932:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10534 comm="syz.0.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b838ebe9 code=0x7ffc0000
[  236.140220][   T33] audit: type=1326 audit(1755121269.942:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10534 comm="syz.0.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f26b838ebe9 code=0x7ffc0000
[  236.156283][ T5949] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  236.167910][   T33] audit: type=1326 audit(1755121269.942:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10534 comm="syz.0.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b838ebe9 code=0x7ffc0000
[  236.179178][   T33] audit: type=1326 audit(1755121269.942:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10534 comm="syz.0.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b838ebe9 code=0x7ffc0000
[  236.390268][T10543] loop4: detected capacity change from 0 to 1024
[  236.401050][T10543] hfsplus: failed to load root directory
[  236.529184][   T33] audit: type=1326 audit(1755121270.372:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1538" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e358ebe9 code=0x7ffc0000
[  236.543514][   T33] audit: type=1326 audit(1755121270.372:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1538" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e358ebe9 code=0x7ffc0000
[  236.565092][   T33] audit: type=1326 audit(1755121270.372:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1538" exe="/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f26e358ebe9 code=0x7ffc0000
[  236.584323][   T33] audit: type=1326 audit(1755121270.372:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1538" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e358ebe9 code=0x7ffc0000
[  236.601393][   T33] audit: type=1326 audit(1755121270.372:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.4.1538" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e358ebe9 code=0x7ffc0000
[  236.783362][   T47] pegasus 6-1:0.0: can't reset MAC
[  236.786720][   T47] pegasus 6-1:0.0: probe with driver pegasus failed with error -5
[  236.795057][   T47] usb 6-1: USB disconnect, device number 18
[  237.447027][T10559] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1541'.
[  237.541916][T10561] netlink: 'syz.5.1542': attribute type 10 has an invalid length.
[  237.550233][T10561] 8021q: adding VLAN 0 to HW filter on device team0
[  237.557317][T10561] bond0: (slave team0): Enslaving as an active interface with an up link
[  237.588261][T10561] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  237.606613][T10561] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  237.994873][T10572] loop4: detected capacity change from 0 to 512
[  238.008471][T10572] EXT4-fs: Ignoring removed bh option
[  238.010580][T10572] EXT4-fs: Ignoring removed mblk_io_submit option
[  238.023204][T10572] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  238.029975][T10576] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  238.031563][T10572] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  238.039332][T10572] EXT4-fs (loop4): orphan cleanup on readonly fs
[  238.049230][T10572] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1547: Failed to acquire dquot type 1
[  238.054945][T10572] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1547: Invalid block bitmap block 0 in block_group 0
[  238.064698][T10572] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1547: Invalid block bitmap block 0 in block_group 0
[  238.078090][T10579] netlink: 'syz.5.1550': attribute type 11 has an invalid length.
[  238.080814][T10579] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1550'.
[  238.084193][T10572] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1547: Invalid block bitmap block 0 in block_group 0
[  238.089808][T10572] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1547: Failed to acquire dquot type 1
[  238.103318][T10572] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1547: Failed to acquire dquot type 1
[  238.117413][T10572] EXT4-fs (loop4): 1 orphan inode deleted
[  238.125936][T10572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  238.140554][T10581] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1551'.
[  238.155115][ T7909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.762659][ T6359] IPVS: starting estimator thread 0...
[  238.862459][T10687] IPVS: using max 79 ests per chain, 189600 per kthread
[  239.111442][T10723] ip6tnl1: entered promiscuous mode
[  239.116106][T10723] ip6tnl1: entered allmulticast mode
[  239.122696][ T5949] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  239.282832][ T5949] usb 5-1: config 8 has an invalid interface number: 177 but max is 0
[  239.285826][ T5949] usb 5-1: config 8 has no interface number 0
[  239.289652][ T5949] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  239.294906][T10728] loop0: detected capacity change from 0 to 8
[  239.299071][ T5949] usb 5-1: config 8 interface 177 has no altsetting 0
[  239.301411][ T5949] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  239.313278][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.328274][T10702] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  239.386725][T10725] loop5: detected capacity change from 0 to 32768
[  239.394203][T10725] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1567 (10725)
[  239.415111][T10725] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.421746][T10725] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  239.433944][T10725] BTRFS info (device loop5): using free-space-tree
[  239.538694][ T5949] usb 5-1: string descriptor 0 read error: -71
[  239.556068][    C1] ir_toy 5-1:8.177: out urb status: -71
[  239.646178][T10753] option changes via remount are deprecated (pid=10752 comm=syz.0.1571)
[  239.752217][ T8887] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  240.004527][T10756] loop0: detected capacity change from 0 to 40427
[  240.036471][T10756] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  240.039209][T10756] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  240.050028][T10756] F2FS-fs (loop0): build fault injection type: 0x6
[  240.055455][T10756] F2FS-fs (loop0): invalid crc value
[  240.067630][ T5949] ir_toy 5-1:8.177: could not write reset command: -110
[  240.070916][ T5949] ir_toy 5-1:8.177: probe with driver ir_toy failed with error -110
[  240.104393][ T5949] usb 5-1: USB disconnect, device number 26
[  240.134844][T10756] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  240.138347][T10756] F2FS-fs (loop0): Start checkpoint disabled!
[  240.148110][T10756] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  240.150527][T10756] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  240.170437][T10762] loop5: detected capacity change from 0 to 512
[  240.177163][T10756] syz.0.1572: attempt to access beyond end of device
[  240.177163][T10756] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  240.226029][ T1090] kworker/u9:5: attempt to access beyond end of device
[  240.226029][ T1090] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  240.241936][ T1090] CPU: 0 UID: 0 PID: 1090 Comm: kworker/u9:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  240.241952][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.241958][ T1090] Workqueue: writeback wb_workfn (flush-7:0)
[  240.241975][ T1090] Call Trace:
[  240.241978][ T1090]  <TASK>
[  240.241983][ T1090]  dump_stack_lvl+0x189/0x250
[  240.241997][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.242006][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  240.242015][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  240.242024][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  240.242038][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  240.242052][ T1090]  f2fs_write_end_io+0x886/0xb60
[  240.242071][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  240.242083][ T1090]  __submit_merged_write_cond+0x255/0x530
[  240.242095][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  240.242121][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  240.242137][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  240.242164][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  240.242179][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[  240.242188][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[  240.242199][ T1090]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  240.242214][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  240.242224][ T1090]  do_writepages+0x32e/0x550
[  240.242238][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[  240.242246][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[  240.242259][ T1090]  __writeback_single_inode+0x145/0xff0
[  240.242287][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  240.242300][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  240.242327][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  240.242356][ T1090]  ? rcu_is_watching+0x15/0xb0
[  240.242369][ T1090]  wb_writeback+0x43b/0xaf0
[  240.242382][ T1090]  ? queue_io+0x381/0x590
[  240.242393][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  240.242406][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.242417][ T1090]  wb_workfn+0x409/0xef0
[  240.242432][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  240.242442][ T1090]  ? __lock_acquire+0xab9/0xd20
[  240.242459][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  240.242469][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.242477][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  240.242483][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  240.242491][ T1090]  process_scheduled_works+0xae1/0x17b0
[  240.242513][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  240.242533][ T1090]  worker_thread+0x8a0/0xda0
[  240.242547][ T1090]  ? __kthread_parkme+0x7b/0x200
[  240.242560][ T1090]  kthread+0x711/0x8a0
[  240.242571][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  240.242600][ T1090]  ? __pfx_kthread+0x10/0x10
[  240.242610][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.242618][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.242626][ T1090]  ? __pfx_kthread+0x10/0x10
[  240.242635][ T1090]  ret_from_fork+0x3fc/0x770
[  240.242646][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  240.242657][ T1090]  ? __switch_to_asm+0x39/0x70
[  240.242666][ T1090]  ? __switch_to_asm+0x33/0x70
[  240.242674][ T1090]  ? __pfx_kthread+0x10/0x10
[  240.242683][ T1090]  ret_from_fork_asm+0x1a/0x30
[  240.242700][ T1090]  </TASK>
[  240.243185][T10762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.248629][ T1090] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  240.307740][T10768] loop4: detected capacity change from 0 to 128
[  240.393247][T10768] FAT-fs (loop4): Directory bread(block 11554) failed
[  240.402430][T10768] FAT-fs (loop4): Directory bread(block 11555) failed
[  240.408769][T10768] FAT-fs (loop4): Directory bread(block 11556) failed
[  240.411114][T10768] FAT-fs (loop4): Directory bread(block 11557) failed
[  240.426372][ T8887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.434105][T10768] FAT-fs (loop4): Directory bread(block 11558) failed
[  240.436400][T10768] FAT-fs (loop4): Directory bread(block 11559) failed
[  240.438628][T10768] FAT-fs (loop4): Directory bread(block 11560) failed
[  240.441180][T10768] FAT-fs (loop4): Directory bread(block 11561) failed
[  240.470002][T10768] FAT-fs (loop4): Directory bread(block 11562) failed
[  240.477102][T10768] FAT-fs (loop4): Directory bread(block 11563) failed
[  240.952043][T10790] loop0: detected capacity change from 0 to 2048
[  240.977608][T10790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.984895][T10790] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  241.016106][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.037133][T10796] loop5: detected capacity change from 0 to 8
[  241.047342][T10796] unable to read xattr id index table
[  241.078093][T10798] loop0: detected capacity change from 0 to 8
[  241.113446][T10798] SQUASHFS error: xz decompression failed, data probably corrupt
[  241.118985][T10798] SQUASHFS error: Failed to read block 0x108: -5
[  241.122955][T10798] SQUASHFS error: Unable to read metadata cache entry [106]
[  241.126059][T10798] SQUASHFS error: Unable to read inode 0x0
[  241.490141][T10813] vlan2: entered promiscuous mode
[  241.494057][T10813] vlan2: entered allmulticast mode
[  241.496419][T10813] hsr_slave_1: entered allmulticast mode
[  241.583605][T10807] loop5: detected capacity change from 0 to 32768
[  241.832813][T10822] loop4: detected capacity change from 0 to 32768
[  241.900763][T10828] loop4: detected capacity change from 0 to 1024
[  241.909699][T10828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.946446][ T7909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.980354][T10831] loop5: detected capacity change from 0 to 256
[  242.036562][T10831] FAT-fs (loop5): Directory bread(block 64) failed
[  242.046861][T10831] FAT-fs (loop5): Directory bread(block 65) failed
[  242.049097][T10831] FAT-fs (loop5): Directory bread(block 66) failed
[  242.051343][T10831] FAT-fs (loop5): Directory bread(block 67) failed
[  242.057499][T10831] FAT-fs (loop5): Directory bread(block 68) failed
[  242.060719][T10831] FAT-fs (loop5): Directory bread(block 69) failed
[  242.063919][T10831] FAT-fs (loop5): Directory bread(block 70) failed
[  242.066899][T10831] FAT-fs (loop5): Directory bread(block 71) failed
[  242.069165][T10831] FAT-fs (loop5): Directory bread(block 72) failed
[  242.071403][T10831] FAT-fs (loop5): Directory bread(block 73) failed
[  242.130919][T10838] overlayfs: failed to resolve './file1': -2
[  242.325595][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1608'.
[  242.642532][   T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  242.794560][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.799485][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.805693][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  242.811276][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  242.819719][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.827425][   T10] usb 6-1: config 0 descriptor??
[  243.006901][T10848] loop0: detected capacity change from 0 to 131072
[  243.010150][T10848] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  243.012943][T10848] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  243.040393][T10848] F2FS-fs (loop0): invalid crc value
[  243.197322][T10848] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  243.222721][T10848] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  243.226122][T10848] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  243.395944][   T10] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  243.593087][   T10] usb 6-1: USB disconnect, device number 19
[  244.313289][   T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  244.474403][   T10] usb 5-1: Using ep0 maxpacket: 16
[  244.490059][T10861] loop5: detected capacity change from 0 to 2048
[  244.505614][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.509464][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.521175][T10861] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  244.528289][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  244.549915][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  244.563044][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.580079][T10862] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  244.583092][   T10] usb 5-1: config 0 descriptor??
[  244.892180][T10864] loop5: detected capacity change from 0 to 32768
[  244.910899][T10864] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  244.965099][T10864] 
[  244.966112][T10864] ======================================================
[  244.968443][T10864] WARNING: possible circular locking dependency detected
[  244.970778][T10864] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  244.974321][T10864] ------------------------------------------------------
[  244.976772][T10864] syz.5.1616/10864 is trying to acquire lock:
[  244.978926][T10864] ffff888031499578 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  244.982234][T10864] 
[  244.982234][T10864] but task is already holding lock:
[  244.984845][T10864] ffff888023f72950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  244.988329][T10864] 
[  244.988329][T10864] which lock already depends on the new lock.
[  244.988329][T10864] 
[  244.992200][T10864] 
[  244.992200][T10864] the existing dependency chain (in reverse order) is:
[  244.995995][T10864] 
[  244.995995][T10864] -> #4 (jbd2_handle){++++}-{0:0}:
[  244.999004][T10864]        lock_acquire+0x120/0x360
[  245.000860][T10864]        start_this_handle+0x1fa7/0x21c0
[  245.002808][T10864]        jbd2__journal_start+0x2c1/0x5b0
[  245.004745][T10864]        jbd2_journal_start+0x2a/0x40
[  245.006695][T10864]        ocfs2_start_trans+0x376/0x6d0
[  245.008499][T10864]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  245.010639][T10864]        ocfs2_dismount_volume+0x201/0x8d0
[  245.012688][T10864]        generic_shutdown_super+0x135/0x2c0
[  245.014816][T10864]        kill_block_super+0x44/0x90
[  245.016546][T10864]        deactivate_locked_super+0xbc/0x130
[  245.018519][T10864]        cleanup_mnt+0x425/0x4c0
[  245.020301][T10864]        task_work_run+0x1d4/0x260
[  245.021986][T10864]        exit_to_user_mode_loop+0xec/0x110
[  245.024278][T10864]        do_syscall_64+0x2bd/0x3b0
[  245.026324][T10864]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.028454][T10864] 
[  245.028454][T10864] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  245.031241][T10864]        lock_acquire+0x120/0x360
[  245.033035][T10864]        down_read+0x46/0x2e0
[  245.034613][T10864]        ocfs2_start_trans+0x36a/0x6d0
[  245.036450][T10864]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  245.038505][T10864]        ocfs2_dismount_volume+0x201/0x8d0
[  245.040492][T10864]        generic_shutdown_super+0x135/0x2c0
[  245.042404][T10864]        kill_block_super+0x44/0x90
[  245.044201][T10864]        deactivate_locked_super+0xbc/0x130
[  245.046198][T10864]        cleanup_mnt+0x425/0x4c0
[  245.047848][T10864]        task_work_run+0x1d4/0x260
[  245.049520][T10864]        exit_to_user_mode_loop+0xec/0x110
[  245.051470][T10864]        do_syscall_64+0x2bd/0x3b0
[  245.053256][T10864]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.055380][T10864] 
[  245.055380][T10864] -> #2 (sb_internal#6){.+.+}-{0:0}:
[  245.057813][T10864]        lock_acquire+0x120/0x360
[  245.059447][T10864]        ocfs2_start_trans+0x26b/0x6d0
[  245.061237][T10864]        ocfs2_extend_dir+0x10a8/0x4870
[  245.063061][T10864]        ocfs2_prepare_dir_for_insert+0x3d7b/0x5450
[  245.065164][T10864]        ocfs2_mknod+0x819/0x2050
[  245.066835][T10864]        ocfs2_create+0x1a5/0x440
[  245.068497][T10864]        path_openat+0x14f4/0x3830
[  245.070129][T10864]        do_filp_open+0x1fa/0x410
[  245.071803][T10864]        do_sys_openat2+0x121/0x1c0
[  245.073599][T10864]        __x64_sys_creat+0x8f/0xc0
[  245.075225][T10864]        do_syscall_64+0xfa/0x3b0
[  245.076912][T10864]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.078969][T10864] 
[  245.078969][T10864] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  245.081803][T10864]        lock_acquire+0x120/0x360
[  245.083687][T10864]        down_write+0x96/0x1f0
[  245.085307][T10864]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  245.087465][T10864]        ocfs2_xattr_set+0x595/0x11f0
[  245.089209][T10864]        ocfs2_set_acl+0x701/0x7b0
[  245.090853][T10864]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  245.092663][T10864]        vfs_set_acl+0x887/0xb00
[  245.094202][T10864]        filename_setxattr+0x2e0/0x600
[  245.096040][T10864]        path_setxattrat+0x364/0x3a0
[  245.097854][T10864]        __x64_sys_setxattr+0xbc/0xe0
[  245.099692][T10864]        do_syscall_64+0xfa/0x3b0
[  245.101744][T10864]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.103949][T10864] 
[  245.103949][T10864] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  245.107118][T10864]        validate_chain+0xb9b/0x2140
[  245.109128][T10864]        __lock_acquire+0xab9/0xd20
[  245.111162][T10864]        lock_acquire+0x120/0x360
[  245.112869][T10864]        down_read+0x46/0x2e0
[  245.114847][T10864]        ocfs2_init_acl+0x2f9/0x720
[  245.116967][T10864]        ocfs2_mknod+0x1321/0x2050
[  245.118664][T10864]        ocfs2_create+0x1a5/0x440
[  245.120325][T10864]        path_openat+0x14f4/0x3830
[  245.122026][T10864]        do_filp_open+0x1fa/0x410
[  245.123695][T10864]        do_sys_openat2+0x121/0x1c0
[  245.125401][T10864]        __x64_sys_creat+0x8f/0xc0
[  245.127098][T10864]        do_syscall_64+0xfa/0x3b0
[  245.128789][T10864]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.130999][T10864] 
[  245.130999][T10864] other info that might help us debug this:
[  245.130999][T10864] 
[  245.134422][T10864] Chain exists of:
[  245.134422][T10864]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  245.134422][T10864] 
[  245.138903][T10864]  Possible unsafe locking scenario:
[  245.138903][T10864] 
[  245.141323][T10864]        CPU0                    CPU1
[  245.143114][T10864]        ----                    ----
[  245.144928][T10864]   rlock(jbd2_handle);
[  245.146311][T10864]                                lock(&journal->j_trans_barrier);
[  245.148966][T10864]                                lock(jbd2_handle);
[  245.151174][T10864]   rlock(&oi->ip_xattr_sem);
[  245.152760][T10864] 
[  245.152760][T10864]  *** DEADLOCK ***
[  245.152760][T10864] 
[  245.155400][T10864] 8 locks held by syz.5.1616/10864:
[  245.157121][T10864]  #0: ffff888027f58428 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  245.160146][T10864]  #1: ffff888031499840 (&type->i_mutex_dir_key#21){+.+.}-{4:4}, at: path_openat+0x8da/0x3830
[  245.163525][T10864]  #2: ffff88812886b540 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  245.167974][T10864]  #3: ffff88803149ef40 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  245.172450][T10864]  #4: ffff888128869840 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  245.176987][T10864]  #5: ffff888027f58618 (sb_internal#6){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  245.179999][T10864]  #6: ffff88802805ece8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  245.183441][T10864]  #7: ffff888023f72950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  245.186644][T10864] 
[  245.186644][T10864] stack backtrace:
[  245.188570][T10864] CPU: 0 UID: 0 PID: 10864 Comm: syz.5.1616 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  245.188582][T10864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.188589][T10864] Call Trace:
[  245.188594][T10864]  <TASK>
[  245.188601][T10864]  dump_stack_lvl+0x189/0x250
[  245.188614][T10864]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.188623][T10864]  ? __pfx__printk+0x10/0x10
[  245.188636][T10864]  ? stack_trace_save+0x9c/0xe0
[  245.188649][T10864]  print_circular_bug+0x2ee/0x310
[  245.188660][T10864]  check_noncircular+0x134/0x160
[  245.188670][T10864]  validate_chain+0xb9b/0x2140
[  245.188683][T10864]  __lock_acquire+0xab9/0xd20
[  245.188696][T10864]  ? ocfs2_init_acl+0x2f9/0x720
[  245.188703][T10864]  lock_acquire+0x120/0x360
[  245.188713][T10864]  ? ocfs2_init_acl+0x2f9/0x720
[  245.188722][T10864]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  245.188732][T10864]  down_read+0x46/0x2e0
[  245.188741][T10864]  ? ocfs2_init_acl+0x2f9/0x720
[  245.188747][T10864]  ocfs2_init_acl+0x2f9/0x720
[  245.188753][T10864]  ? ocfs2_mknod_locked+0x148/0x250
[  245.188765][T10864]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  245.188771][T10864]  ? dquot_alloc_inode+0x216/0xa50
[  245.188779][T10864]  ? ocfs2_block_signals+0x94/0xe0
[  245.188788][T10864]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  245.188798][T10864]  ? ocfs2_init_security_get+0x139/0x1a0
[  245.188809][T10864]  ocfs2_mknod+0x1321/0x2050
[  245.188823][T10864]  ? __pfx_ocfs2_mknod+0x10/0x10
[  245.188832][T10864]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  245.188840][T10864]  ? __lock_acquire+0xab9/0xd20
[  245.188853][T10864]  ? look_up_lock_class+0x74/0x170
[  245.188862][T10864]  ? register_lock_class+0x51/0x320
[  245.188872][T10864]  ? __lock_acquire+0xab9/0xd20
[  245.188882][T10864]  ? __lock_acquire+0xab9/0xd20
[  245.188893][T10864]  ? do_raw_spin_lock+0x121/0x290
[  245.188902][T10864]  ? do_raw_spin_unlock+0x4d/0x240
[  245.188911][T10864]  ? rcu_is_watching+0x15/0xb0
[  245.188918][T10864]  ? ocfs2_lookup+0x5b9/0x9b0
[  245.188928][T10864]  ocfs2_create+0x1a5/0x440
[  245.188938][T10864]  ? __pfx_ocfs2_lookup+0x10/0x10
[  245.188947][T10864]  ? from_kgid+0x1b0/0x650
[  245.188956][T10864]  ? __pfx_ocfs2_create+0x10/0x10
[  245.188965][T10864]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  245.188973][T10864]  ? inode_permission+0x149/0x470
[  245.188979][T10864]  ? __pfx_ocfs2_permission+0x10/0x10
[  245.188987][T10864]  ? bpf_lsm_inode_create+0x9/0x20
[  245.188995][T10864]  ? __pfx_ocfs2_create+0x10/0x10
[  245.189004][T10864]  path_openat+0x14f4/0x3830
[  245.189012][T10864]  ? arch_stack_walk+0xfc/0x150
[  245.189026][T10864]  ? __pfx_path_openat+0x10/0x10
[  245.189033][T10864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.189044][T10864]  do_filp_open+0x1fa/0x410
[  245.189052][T10864]  ? __lock_acquire+0xab9/0xd20
[  245.189062][T10864]  ? __pfx_do_filp_open+0x10/0x10
[  245.189071][T10864]  ? __pfx_page_put_link+0x10/0x10
[  245.189082][T10864]  ? _raw_spin_unlock+0x28/0x50
[  245.189089][T10864]  ? alloc_fd+0x64c/0x6c0
[  245.189100][T10864]  do_sys_openat2+0x121/0x1c0
[  245.189108][T10864]  ? __se_sys_futex+0x36f/0x400
[  245.189116][T10864]  ? __pfx_do_sys_openat2+0x10/0x10
[  245.189124][T10864]  ? rcu_is_watching+0x15/0xb0
[  245.189131][T10864]  __x64_sys_creat+0x8f/0xc0
[  245.189139][T10864]  do_syscall_64+0xfa/0x3b0
[  245.189148][T10864]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.189155][T10864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.189162][T10864]  ? exc_page_fault+0x9f/0xf0
[  245.189170][T10864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.189178][T10864] RIP: 0033:0x7fefc9d8ebe9
[  245.189187][T10864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.189194][T10864] RSP: 002b:00007fefcabf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  245.189202][T10864] RAX: ffffffffffffffda RBX: 00007fefc9fb5fa0 RCX: 00007fefc9d8ebe9
[  245.189207][T10864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  245.189212][T10864] RBP: 00007fefc9e11e19 R08: 0000000000000000 R09: 0000000000000000
[  245.189216][T10864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.189221][T10864] R13: 00007fefc9fb6038 R14: 00007fefc9fb5fa0 R15: 00007ffc3b808df8
[  245.189228][T10864]  </TASK>
[  245.331021][   T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x1
[  245.334247][   T10] microsoft 0003:045E:07DA.0012: report is too long
[  245.336475][   T10] microsoft 0003:045E:07DA.0012: item 0 2 0 11 parsing failed
[  245.339185][   T10] microsoft 0003:045E:07DA.0012: parse failed
[  245.341293][   T10] microsoft 0003:045E:07DA.0012: probe with driver microsoft failed with error -22
[  245.373949][ T8887] ocfs2: Unmounting device (7,5) on (node local)
[  245.532184][   T10] usb 5-1: USB disconnect, device number 27

VM DIAGNOSIS:
21:41:18  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bcc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000003cbd RDI=0000000000003cbe RBP=ffffffff99de6770 RSP=ffffc9000354e890
R8 =ffff888106b30237 R9 =1ffff11020d66046 R10=dffffc0000000000 R11=ffffffff854e6d10
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e6d87 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fefcabf26c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3021aff8 CR3=0000000027ec6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fefc9e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff9042276b RCX=ffffffff8fc12ddc RDX=ffffffff9042276a
RSI=ffffffff9042276e RDI=ffffffff8be325a0 RBP=dffffc0000000000 RSP=ffffc9000369f158
R8 =0000000000000007 R9 =0000000000000000 R10=ffffc9000369f278 R11=ffffffff81ac3890
R12=ffffc9000369fd50 R13=ffffc9000369f278 R14=ffffc9000369f228 R15=ffffc9000369f260
RIP=ffffffff8172cb50 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555591366500 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555591389608 CR3=0000000027738000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
