last executing test programs:

1m10.660702092s ago: executing program 0 (id=993):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x3b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

1m10.592276638s ago: executing program 0 (id=994):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000440), 0x1000a)
sendfile(r0, r1, &(0x7f0000000080)=0x3, 0xffff)

1m10.592017395s ago: executing program 0 (id=995):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/modules\x00', 0x0, 0x0)
pread64$ublk_bdev(r0, &(0x7f0000002280)=""/11, 0xb, 0xf4df)

1m10.522041113s ago: executing program 0 (id=996):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m10.143963654s ago: executing program 0 (id=998):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000200)={0x20, r1, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x845}, 0x20000090)

1m9.723941222s ago: executing program 0 (id=1008):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x8844)

1m9.686815634s ago: executing program 32 (id=1008):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x8844)

1m0.77421198s ago: executing program 1 (id=1102):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x3200092, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x22406e, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x8000000000000001}}, 0x18)

1m0.453336222s ago: executing program 1 (id=1105):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x3a3}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x11)

1m0.234221626s ago: executing program 1 (id=1106):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0)
ioctl$TIOCCBRK(r0, 0x5428)

1m0.234015905s ago: executing program 1 (id=1107):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

1m0.172102403s ago: executing program 1 (id=1108):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040))

1m0.084111649s ago: executing program 1 (id=1109):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10800, &(0x7f0000001180)=ANY=[], 0x1, 0x188, &(0x7f0000000440)="$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")
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xb)
open(&(0x7f0000000040)='.\x00', 0x86000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x8800)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003)
r5 = dup2(r4, r4)
read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

1m0.004423973s ago: executing program 33 (id=1109):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10800, &(0x7f0000001180)=ANY=[], 0x1, 0x188, &(0x7f0000000440)="$eJzskrFuE0EQhr+9O98ZCBFIVGmSIhJQoDtfANGRMvR0NJySI0Q4iPgsgS0XhxByQYEoeQK/BhIvAAXiAVy7sKjRod2dO63hEdiv8O/5d2Z2Z+zn1UWVAL/Xs2MOMYRs810pImBXWW8VWP0k+kP0oxW+Sd4j8d+J7lSTaSw5e1y3xotiOCxHe8Av43VW9fBtwMq0+ilFT4GmaRoIOAGdzlabs54dh8BFlwM7EdwwQzRdjh5EBzeBdHz+Kq0m0ztn58VpeVq+zMOD+9ndLLuXp8/OhmVmP5VzhYyC1ttA0hej2DLnPeC9WJfZRDlPk3N1iSf0pXfc7nBb8TeBU9uq4kv3roT294LHh5ier2vluPumS4QZ6QhFKMEgct5n7+qbg/QKnMxRqLZsQdT1GCzpdUHuBgcPaq7aVnNpuS96JLoQXYruun+ZEKJaRx9k27dqiHlTjMejgV6S/daT2lEeQ4L28mu1uzB96+dgc7ivwT+79Xg8Ho/H4/F4PJ7/jT8BAAD//6CNcWQ=")
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xb)
open(&(0x7f0000000040)='.\x00', 0x86000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x8800)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003)
r5 = dup2(r4, r4)
read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

2.827432912s ago: executing program 3 (id=1746):
syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c000780080004000400000008000100070000000800020009000000080004000500000008000400009e"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000800000000000000000006001a004e230000050021000100000008001800ac1414bb0600030007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)

2.590818558s ago: executing program 3 (id=1747):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000100))

2.55169549s ago: executing program 3 (id=1749):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, 0x60000001}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x6}}]}, 0x70}, 0x1, 0x7}, 0x4004000)

2.465025796s ago: executing program 3 (id=1752):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x3, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1)

697.09232ms ago: executing program 2 (id=1777):
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x23, &(0x7f0000000080)={@multicast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0xaa, 0x59d81d89cb2273ec, 'c', "bcfb58", 0x6005, "1705b62102d87cc537"}}}}}, 0x0)

640.935417ms ago: executing program 2 (id=1779):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x149e03)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x40, 0x10000, 0x3008, 0x0, 0xc, 0x8, 0x2, 0x7}})

640.679138ms ago: executing program 2 (id=1780):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev, r2}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@remote, r2}, 0x78)

640.421139ms ago: executing program 4 (id=1781):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80)

536.964598ms ago: executing program 4 (id=1782):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x6, 0xf11, &(0x7f0000001e80)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, 0x0)

426.480054ms ago: executing program 2 (id=1783):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)

364.958005ms ago: executing program 4 (id=1784):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)

296.986135ms ago: executing program 2 (id=1785):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15})
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105200, 0x0)

251.118615ms ago: executing program 2 (id=1786):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
write$cgroup_subtree(r0, 0x0, 0x10448)
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
fallocate(r2, 0x0, 0x0, 0x1001f0)

250.765513ms ago: executing program 4 (id=1787):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

244.826695ms ago: executing program 3 (id=1788):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, r1, 0x51b9a55a701b075d, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

42.603065ms ago: executing program 3 (id=1789):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x16}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x34}}, 0x0)

42.386889ms ago: executing program 4 (id=1790):
syz_mount_image$minix(&(0x7f0000000540), &(0x7f00000002c0)='./file1\x00', 0x1810406, &(0x7f000000c680)=ANY=[], 0x1, 0x1e6, &(0x7f00000000c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, 0x0, 0x0)
getdents(r0, 0x0, 0x0)

0s ago: executing program 4 (id=1791):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x80000001, 0x700}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x8000)

kernel console output (not intermixed with test programs):

l error at time 1787568561: ext4_orphan_get:1399: inode 15
[  134.014340][    C1] EXT4-fs (loop2): last error at time 1787568561: ext4_orphan_get:1399: inode 15
[  134.046706][ T8089] loop2: lost filesystem error report for type 5 error -117
[  134.048869][ T8089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.089256][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.104711][ T5601] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.279130][ T8102] syz.2.988 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  134.291913][ T8091] mount: server 127.0.0.1 not responding, timed out
[  135.106468][ T8132] loop1: detected capacity change from 0 to 2048
[  135.117339][ T8132] NILFS (loop1): couldn't mount RDWR because of unsupported optional features (40)
[  135.553587][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  135.561181][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  135.569270][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  135.579144][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  135.584715][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  135.629719][ T8155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  135.638300][ T8155] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  135.646307][ T8155] System zones: 1-2, 4-12, 8-8
[  135.658073][ T8155] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1014: iget: bad i_size value: 38620345925642
[  135.668899][ T8155] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  135.669164][ T8155] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1014: couldn't read orphan inode 15 (err -117)
[  135.671900][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  135.671911][    C1] EXT4-fs (loop2): initial error at time 1787568563: ext4_orphan_get:1399: inode 15
[  135.671924][    C1] EXT4-fs (loop2): last error at time 1787568563: ext4_orphan_get:1399: inode 15
[  135.700046][ T8155] loop2: lost filesystem error report for type 5 error -117
[  135.705768][ T8155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.732375][ T8155] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1014: bg 0: block 5: invalid block bitmap
[  135.755569][ T8155] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  135.762017][ T8155] EXT4-fs (loop2): This should not happen!! Data will be lost
[  135.762017][ T8155] 
[  135.771646][ T8155] EXT4-fs (loop2): Total free blocks count 0
[  135.775121][ T8155] EXT4-fs (loop2): Free/Dirty block details
[  135.784753][ T8155] EXT4-fs (loop2): free_blocks=0
[  135.789177][ T8155] EXT4-fs (loop2): dirty_blocks=2
[  135.794881][ T8155] EXT4-fs (loop2): Block reservation details
[  135.797008][ T8155] EXT4-fs (loop2): i_reserved_data_blocks=2
[  135.830436][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.005128][ T8177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  136.016497][ T8177] EXT4-fs (loop2): shut down requested (2)
[  136.039799][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  136.147364][ T8147] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.149756][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.152487][ T8147] bridge_slave_0: entered allmulticast mode
[  136.155330][ T8147] bridge_slave_0: entered promiscuous mode
[  136.160924][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.163613][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  136.166308][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.169484][ T8147] bridge_slave_1: entered allmulticast mode
[  136.173011][ T8147] bridge_slave_1: entered promiscuous mode
[  136.219840][ T8147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.224948][ T8147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.248260][ T8147] team0: Port device team_slave_0 added
[  136.257836][ T8147] team0: Port device team_slave_1 added
[  136.283836][ T8147] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.286092][ T8147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.296973][ T8147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.303038][ T8147] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.305288][ T8147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.313916][   T10] usb 2-1: Using ep0 maxpacket: 32
[  136.315796][ T8147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.325006][   T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.331403][   T10] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  136.343072][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  136.345451][   T10] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  136.351730][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.362930][   T10] usb 2-1: config 0 descriptor??
[  136.375829][ T8147] hsr_slave_0: entered promiscuous mode
[  136.378199][ T8147] hsr_slave_1: entered promiscuous mode
[  136.380425][ T8147] debugfs: 'hsr0' already exists in 'hsr'
[  136.383052][ T8147] Cannot create hsr debugfs directory
[  136.507744][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'.
[  136.538934][ T8199] bond0: (slave bond_slave_0): Releasing backup interface
[  136.666461][ T8147] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  136.672939][ T8147] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  136.676713][ T8147] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  136.681694][ T8147] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  136.684560][ T8147] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  136.694397][ T8147] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  136.697969][ T8147] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  136.707060][ T8147] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  136.777411][   T10] hid_parser_main: 470 callbacks suppressed
[  136.777425][   T10] elo 0003:04E7:0009.0008: unknown main item tag 0x0
[  136.789011][   T10] elo 0003:04E7:0009.0008: unknown main item tag 0x0
[  136.793658][   T10] elo 0003:04E7:0009.0008: collection stack underflow
[  136.801669][   T10] elo 0003:04E7:0009.0008: item 0 0 0 12 parsing failed
[  136.806534][   T10] elo 0003:04E7:0009.0008: parse failed
[  136.811543][   T10] elo 0003:04E7:0009.0008: probe with driver elo failed with error -22
[  136.817002][ T8147] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.846050][ T8147] 8021q: adding VLAN 0 to HW filter on device team0
[  136.855409][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.857858][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.867790][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.870062][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.994225][   T32] usb 2-1: USB disconnect, device number 13
[  137.081592][ T5663] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  137.114867][ T8147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.153257][ T8147] veth0_vlan: entered promiscuous mode
[  137.164484][ T8147] veth1_vlan: entered promiscuous mode
[  137.186008][ T8147] veth0_macvtap: entered promiscuous mode
[  137.190947][ T8147] veth1_macvtap: entered promiscuous mode
[  137.205153][ T8147] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.214290][ T8147] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.221261][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.224580][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.229815][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.233164][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.265564][ T5663] usb 3-1: not running at top speed; connect to a high speed hub
[  137.270111][ T5663] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.273763][ T5663] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  137.276887][ T5663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.315650][ T5663] uvcvideo 3-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  137.318824][ T5663] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770.
[  137.376829][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.384929][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.404626][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.407524][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.498468][ T5663] usb 3-1: USB disconnect, device number 20
[  137.621944][   T53] Bluetooth: hci1: command tx timeout
[  137.861523][  T804] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  138.017933][  T804] usb 2-1: config index 0 descriptor too short (expected 65069, got 45)
[  138.027183][  T804] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  138.041014][  T804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.059925][  T804] usb 2-1: config 0 has no interfaces?
[  138.069709][  T804] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  138.082671][  T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.131759][  T804] usb 2-1: config 0 descriptor??
[  138.401463][  T804] usb 2-1: USB disconnect, device number 14
[  138.576406][ T8240] set_capacity_and_notify: 3 callbacks suppressed
[  138.576424][ T8240] loop2: detected capacity change from 0 to 32768
[  138.614076][ T8240] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1036 (8240)
[  138.713150][ T8240] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.716892][ T8240] BTRFS info (device loop2): using crc32c checksum algorithm
[  138.767689][ T8240] BTRFS info (device loop2): enabling ssd optimizations
[  138.773073][ T8240] BTRFS info (device loop2): turning on flush-on-commit
[  138.781624][ T8240] BTRFS info (device loop2): enabling free space tree
[  138.784686][ T8240] BTRFS info (device loop2): enabling auto defrag
[  138.786726][ T8240] BTRFS info (device loop2): use lzo compression, level 1
[  138.788830][ T8240] BTRFS info (device loop2): max_inline set to 4096
[  138.855672][ T5597] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.983927][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1040'.
[  139.200563][ T8271] /dev/nullb0: Can't open blockdev
[  139.201827][ T8270] netlink: 'syz.1.1043': attribute type 1 has an invalid length.
[  139.224413][ T8270] netlink: 'syz.1.1043': attribute type 2 has an invalid length.
[  139.229709][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'.
[  139.338074][ T8273] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized
[  139.342370][ T8273] lpc_ich 0000:00:00.0: No MFD cells added
[  139.575394][ T8287] overlayfs: refusing to follow metacopy origin for (/file1)
[  139.701605][   T53] Bluetooth: hci1: command tx timeout
[  139.779739][ T8296] loop2: detected capacity change from 0 to 512
[  139.822281][ T8296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.844707][ T8296] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.874575][ T8305] loop3: detected capacity change from 0 to 512
[  139.899201][ T8305] EXT4-fs (loop3): bad geometry: block count 512 exceeds size of device (256 blocks)
[  139.985168][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.079043][ T8317] loop3: detected capacity change from 0 to 1764
[  140.130888][ T8321] loop3: detected capacity change from 0 to 1024
[  140.133633][  T804] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  140.138042][ T8321] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  140.153978][ T8321] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.1067: lblock 1 mapped to illegal pblock 1 (length 1)
[  140.158323][ T8321] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  140.159229][ T8321] Quota error (device loop3): write_blk: dquota write failed
[  140.162064][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  140.162075][    C1] EXT4-fs (loop3): initial error at time 1787568567: ext4_map_blocks:833: inode 3: block 1
[  140.162090][    C1] EXT4-fs (loop3): last error at time 1787568567: ext4_map_blocks:833: inode 3: block 1
[  140.174138][ T8321] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  140.177654][ T8321] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1067: Failed to acquire dquot type 0
[  140.189614][ T8321] loop3: lost filesystem error report for type 5 error -117
[  140.190473][ T8321] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1067: Freeing blocks not in datazone - block = 0, count = 4096
[  140.198488][ T8321] loop3: lost filesystem error report for type 5 error -117
[  140.203334][ T8321] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.1067: Invalid inode bitmap blk 0 in block_group 0
[  140.210803][ T8321] loop3: lost filesystem error report for type 5 error -117
[  140.211023][ T8321] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem
[  140.216936][ T8321] loop3: lost filesystem error report for type 5 error -117
[  140.217114][ T8321] EXT4-fs (loop3): 1 orphan inode deleted
[  140.222082][   T51] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u9:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  140.222521][ T8321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.229971][   T51] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  140.239571][   T51] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  140.246819][   T51] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u9:2: Failed to release dquot type 0
[  140.260216][ T8147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.312050][  T804] usb 2-1: Using ep0 maxpacket: 8
[  140.319669][  T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  140.326017][  T804] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  140.331999][  T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.340916][  T804] usb 2-1: config 0 descriptor??
[  140.422371][ T5663] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  140.557867][  T804] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  140.605437][ T5663] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.609086][ T5663] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  140.612843][ T5663] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  140.616048][ T5663] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  140.620279][ T5663] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  140.623826][ T5663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.795887][ T5709] usb 2-1: USB disconnect, device number 15
[  141.041232][ T5663] gud 3-1:1.0: probe with driver gud failed with error -71
[  141.058582][ T5663] usb 3-1: USB disconnect, device number 21
[  141.460165][ T8340] loop9: detected capacity change from 0 to 7
[  141.485046][ T8340] Dev loop9: unable to read RDB block 7
[  141.487177][ T8340]  loop9: unable to read partition table
[  141.489062][ T8340] loop9: partition table beyond EOD, truncated
[  141.492859][ T8340] loop_reread_partitions: partition scan of loop9 () failed (rc=-5)
[  141.583617][ T8342] loop1: detected capacity change from 0 to 4096
[  141.597213][ T8342] EXT4-fs (loop1): Test dummy encryption mode enabled
[  141.630259][ T8342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.660178][ T8342] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  141.665600][ T8342] EXT4-fs: Cannot change quota options when quota turned on
[  142.421423][   T53] Bluetooth: hci1: command tx timeout
[  142.882013][ T5606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.148965][ T8366] program syz.2.1087 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  143.362246][ T5663] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  143.445907][ T8372] loop2: detected capacity change from 0 to 32768
[  143.469254][ T8372] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  143.482480][ T8372] XFS (loop2): Ending clean mount
[  143.520861][ T5597] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  143.533488][ T5663] usb 2-1: Using ep0 maxpacket: 32
[  143.537877][ T5663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.546247][ T5663] usb 2-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f
[  143.549655][ T5663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.552746][ T5663] usb 2-1: Product: syz
[  143.554600][ T5663] usb 2-1: Manufacturer: syz
[  143.556486][ T5663] usb 2-1: SerialNumber: syz
[  143.564970][ T5663] usb 2-1: config 0 descriptor??
[  143.598965][ T6054] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  143.751663][ T6054] usb 4-1: Using ep0 maxpacket: 16
[  143.755927][ T6054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  143.766822][ T6054] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  143.770445][ T6054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.773454][ T6054] usb 4-1: Product: syz
[  143.774832][ T6054] usb 4-1: Manufacturer: syz
[  143.776607][ T6054] usb 4-1: SerialNumber: syz
[  143.788463][ T6054] usb 4-1: config 0 descriptor??
[  143.800105][ T6054] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  143.804218][ T3159] usb 2-1: USB disconnect, device number 16
[  143.809940][ T6054] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  143.894292][ T8396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1098'.
[  144.406910][ T6054] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  144.567780][ T8405] loop1: detected capacity change from 0 to 32768
[  144.597400][   T33] audit: type=1800 audit(1787568572.413:3491): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1102" name="file1" dev="loop1" ino=7 res=0 errno=0
[  144.841408][ T5709] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  145.001497][ T5709] usb 3-1: Using ep0 maxpacket: 16
[  145.012942][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.034640][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.041997][ T5709] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  145.057864][ T5709] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  145.063869][ T6054] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  145.067238][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.071797][ T5709] usb 3-1: config 0 descriptor??
[  145.094363][ T6054] em28xx 4-1:0.0: board has no eeprom
[  145.114804][ T5664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.152541][ T6054] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  145.155005][ T6054] em28xx 4-1:0.0: dvb set to bulk mode.
[  145.157214][ T3159] em28xx 4-1:0.0: Binding DVB extension
[  145.172860][ T6054] usb 4-1: USB disconnect, device number 2
[  145.183459][ T6054] em28xx 4-1:0.0: Disconnecting em28xx
[  145.239346][ T5664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.241024][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  145.254500][ T3159] em28xx 4-1:0.0: Registering input extension
[  145.254988][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  145.258732][ T6054] em28xx 4-1:0.0: Closing input extension
[  145.266107][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  145.282434][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  145.288073][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  145.389951][ T6054] em28xx 4-1:0.0: Freeing device
[  145.437403][ T5664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.507455][ T5664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.530069][ T5709] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  145.537078][ T5709] microsoft 0003:045E:07DA.0009: no inputs found
[  145.539702][ T5709] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway
[  145.718870][  T804] usb 3-1: USB disconnect, device number 22
[  145.830814][ T5664] bridge_slave_1: left allmulticast mode
[  145.833525][ T5664] bridge_slave_1: left promiscuous mode
[  145.840444][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.849573][ T5664] bridge_slave_0: left allmulticast mode
[  145.853749][ T5664] bridge_slave_0: left promiscuous mode
[  145.855627][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.867071][ T5664] pim6reg: left allmulticast mode
[  145.912429][ T5663] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  146.018745][ T5664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.026823][ T5664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.030450][ T5664] bond0 (unregistering): Released all slaves
[  146.037425][ T5664] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface
[  146.041071][ T5664] bond1 (unregistering): Released all slaves
[  146.066532][ T5344] 8021q: adding VLAN 0 to HW filter on device eth1
[  146.085333][ T5663] usb 4-1: Using ep0 maxpacket: 16
[  146.098573][ T5663] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  146.105590][ T5663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.112142][ T5663] usb 4-1: Product: syz
[  146.122398][ T5663] usb 4-1: Manufacturer: syz
[  146.124754][ T5663] usb 4-1: SerialNumber: syz
[  146.132503][ T5663] usb 4-1: config 0 descriptor??
[  146.153416][ T5663] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  146.570384][ T5663] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71
[  146.586272][ T5663] usb 4-1: USB disconnect, device number 3
[  146.724490][ T8455] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  146.760435][ T8455] overlayfs: overlapping lowerdir path
[  146.836164][ T5344] 8021q: adding VLAN 0 to HW filter on device eth2
[  146.853223][ T8459] loop2: detected capacity change from 0 to 512
[  146.879959][ T8459] EXT4-fs (loop2): Test dummy encryption mode enabled
[  146.889384][ T8459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  146.911886][ T8459] EXT4-fs (loop2): 1 truncate cleaned up
[  146.916703][ T8459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.921846][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.924841][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.927832][ T8418] bridge_slave_0: entered allmulticast mode
[  146.932396][ T8418] bridge_slave_0: entered promiscuous mode
[  146.936765][ T8418] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.939611][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.952350][ T8418] bridge_slave_1: entered allmulticast mode
[  146.962209][ T8418] bridge_slave_1: entered promiscuous mode
[  147.057354][ T8418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.067546][ T8418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.086430][ T5664] hsr_slave_0: left promiscuous mode
[  147.212519][ T5664] hsr_slave_1: left promiscuous mode
[  147.216453][ T5664] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.220366][ T5664] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.227764][ T5664] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.236693][ T5664] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.323349][ T5664] veth1_macvtap: left promiscuous mode
[  147.329489][ T5664] veth0_macvtap: left promiscuous mode
[  147.340489][ T5664] veth1_vlan: left promiscuous mode
[  147.349204][ T5664] veth0_vlan: left promiscuous mode
[  147.392745][   T53] Bluetooth: hci2: command tx timeout
[  147.685797][ T8475] loop3: detected capacity change from 0 to 32768
[  147.750096][ T8475] JBD2: Ignoring recovery information on journal
[  147.757774][ T8475] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75
[  147.776297][ T8475] JBD2: bad block at offset 32
[  147.800485][ T8475] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  147.872291][ T8147] ocfs2: Unmounting device (7,3) on (node local)
[  147.889827][ T5664] team0 (unregistering): Port device team_slave_1 removed
[  147.910588][ T5664] team0 (unregistering): Port device team_slave_0 removed
[  148.014092][ T5344] 8021q: adding VLAN 0 to HW filter on device eth3
[  148.018498][ T8479] loop3: detected capacity change from 0 to 4096
[  148.060022][ T8418] team0: Port device team_slave_0 added
[  148.082069][ T8418] team0: Port device team_slave_1 added
[  148.119182][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.155534][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.164280][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  148.172803][ T8418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.201936][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.219479][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  148.253906][ T8418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.258099][ T8483] loop2: detected capacity change from 0 to 1024
[  148.391256][ T8483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  148.403411][ T8483] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.525352][ T8482] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1121: lblock 0 mapped to illegal pblock 0 (length 1)
[  148.534443][ T8482] EXT4-fs (loop2): Remounting filesystem read-only
[  148.569827][ T8418] hsr_slave_0: entered promiscuous mode
[  148.574296][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  148.579081][ T8418] hsr_slave_1: entered promiscuous mode
[  148.581231][ T8418] debugfs: 'hsr0' already exists in 'hsr'
[  148.583185][ T8418] Cannot create hsr debugfs directory
[  148.590141][ T5344] 8021q: adding VLAN 0 to HW filter on device eth4
[  149.123481][ T8496] loop2: detected capacity change from 0 to 32768
[  149.128090][ T8496] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1123 (8496)
[  149.183457][ T8496] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.194685][ T8496] BTRFS info (device loop2): using sha256 checksum algorithm
[  149.283087][   T90] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0x600fa3b1bb0a61280b917c5e63cfb6d5f3303add0c7f49b39e428b009781bffd found 0x1340e911be06522e4f35568fc49ddc86d199ddc8b5939ef3ee27d8aa74c2792b level 0
[  149.295228][ T8496] BTRFS error (device loop2): failed to load root extent
[  149.299044][ T8496] BTRFS warning (device loop2): unable to release extent buffer 5337088 owner 2 gen 8 refs 3 flags 0xc
[  149.334807][ T8496] BTRFS error (device loop2): open_ctree failed: -5
[  149.463536][   T53] Bluetooth: hci2: command tx timeout
[  149.743981][ T8418] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  149.764870][ T8418] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  149.768567][ T8418] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  149.784051][ T8418] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  149.800404][ T8418] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  149.808849][ T8418] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  149.814587][ T8418] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  149.825157][ T8418] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  149.863878][ T3159] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  149.914289][ T8418] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.925287][ T8418] 8021q: adding VLAN 0 to HW filter on device team0
[  149.931252][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.933700][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.956311][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.958481][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.021620][ T3159] usb 3-1: Using ep0 maxpacket: 32
[  150.032610][ T3159] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  150.038525][ T3159] usb 3-1: config 0 has no interface number 0
[  150.048282][ T3159] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  150.055315][ T3159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.059365][ T3159] usb 3-1: Product: syz
[  150.060817][ T3159] usb 3-1: Manufacturer: syz
[  150.066636][ T3159] usb 3-1: SerialNumber: syz
[  150.080132][ T3159] usb 3-1: config 0 descriptor??
[  150.088649][ T3159] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  150.309081][ T3159] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  150.344470][ T3159] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  150.380125][ T8418] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.510416][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 92
[  150.643728][ T8418] veth0_vlan: entered promiscuous mode
[  150.652067][ T8418] veth1_vlan: entered promiscuous mode
[  150.687604][ T8418] veth0_macvtap: entered promiscuous mode
[  150.704141][ T8418] veth1_macvtap: entered promiscuous mode
[  150.718104][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  150.718346][ T5663] usb 3-1: USB disconnect, device number 23
[  150.732752][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.737361][ T5663] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  150.762562][ T8418] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.767005][ T5663] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  150.780588][ T5663] quatech2 3-1:0.51: device disconnected
[  150.786179][ T5636] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.789521][ T5636] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.794478][ T5636] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.803162][ T5636] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.915275][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.924435][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.955727][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.958506][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.286656][ T8550] netlink: 'syz.2.1127': attribute type 1 has an invalid length.
[  151.289079][ T8550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.457730][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1132'.
[  151.541711][   T53] Bluetooth: hci2: command tx timeout
[  151.550333][ T8566] loop4: detected capacity change from 0 to 512
[  151.574891][ T8566] EXT4-fs (loop4): Test dummy encryption mode enabled
[  151.606451][ T8566] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1136: inode has both inline data and extents flags
[  151.613195][ T8566] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  151.613376][ T8566] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1136: couldn't read orphan inode 15 (err -117)
[  151.620467][ T8566] loop4: lost filesystem error report for type 5 error -117
[  151.624663][ T8566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.657487][ T8566] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))"
[  151.683294][ T8566] EXT4-fs error (device loop4): ext4_check_dx_root:2201: inode #2: comm syz.4.1136: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  151.740357][ T8418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.906094][ T8581] loop4: detected capacity change from 0 to 1024
[  151.934718][ T8581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.006358][   T33] audit: type=1800 audit(1787568579.823:3492): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1141" name="file1" dev="loop4" ino=15 res=0 errno=0
[  152.072292][ T8418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.094500][ T8589] loop2: detected capacity change from 0 to 1024
[  152.103950][ T8589] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  152.251123][ T8597] loop4: detected capacity change from 0 to 256
[  152.272717][ T5663] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  152.285148][ T8597] FAT-fs (loop4): IO charset 1255 not found
[  152.384683][ T8607] loop4: detected capacity change from 0 to 2048
[  152.405426][ T8610] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1155'.
[  152.411260][ T8607] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  152.418866][ T8607] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  152.429211][ T8607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.444139][ T5663] usb 4-1: Using ep0 maxpacket: 16
[  152.449579][ T5663] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  152.460316][ T5663] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.467900][ T5663] usb 4-1: config 0 has no interface number 0
[  152.474565][ T5663] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  152.479596][ T5663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.488291][ T5663] usb 4-1: Product: syz
[  152.491647][ T8614] netlink: 'syz.2.1157': attribute type 12 has an invalid length.
[  152.494178][ T5663] usb 4-1: Manufacturer: syz
[  152.495793][ T5663] usb 4-1: SerialNumber: syz
[  152.497334][ T8614] netlink: 'syz.2.1157': attribute type 29 has an invalid length.
[  152.502838][ T5663] usb 4-1: config 0 descriptor??
[  152.504558][ T8614] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1157'.
[  152.508043][ T8614] netlink: 'syz.2.1157': attribute type 1 has an invalid length.
[  152.512466][ T5663] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22
[  152.554730][ T8616] x_tables: duplicate entry at hook 2
[  152.720482][ T3159] usb 4-1: USB disconnect, device number 4
[  152.871551][ T5663] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  153.031442][ T5663] usb 3-1: Using ep0 maxpacket: 32
[  153.035079][ T5663] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.038685][ T5663] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.044143][ T5663] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  153.047571][ T5663] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  153.050311][ T5663] usb 3-1: Product: syz
[  153.052068][ T5663] usb 3-1: Manufacturer: syz
[  153.059401][ T5663] hub 3-1:4.0: USB hub found
[  153.074424][  T804] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  153.246201][  T804] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  153.251037][  T804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.255966][  T804] usb 5-1: config 0 has no interface number 0
[  153.264831][  T804] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  153.273847][  T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.277016][  T804] usb 5-1: Product: syz
[  153.278811][ T5663] hub 3-1:4.0: 4 ports detected
[  153.280821][  T804] usb 5-1: Manufacturer: syz
[  153.282889][ T5663] hub 3-1:4.0: insufficient power available to use all downstream ports
[  153.285713][  T804] usb 5-1: SerialNumber: syz
[  153.298391][  T804] usb 5-1: config 0 descriptor??
[  153.302801][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'.
[  153.311980][  T804] yurex 5-1:0.50: Could not find endpoints
[  153.525193][  T804] usb 5-1: USB disconnect, device number 2
[  153.621535][   T53] Bluetooth: hci2: command tx timeout
[  153.678767][ T5663] hub 3-1:4.0: set hub depth failed
[  153.685321][ T5663] usb 3-1: USB disconnect, device number 24
[  153.702513][ T5680] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  153.851554][ T5680] usb 4-1: Using ep0 maxpacket: 32
[  153.855084][ T5680] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  153.860437][ T5680] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  153.863469][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  153.865898][ T5680] usb 4-1: Product: syz
[  153.867171][ T5680] usb 4-1: Manufacturer: syz
[  153.868576][ T5680] usb 4-1: SerialNumber: syz
[  153.871681][ T5680] usb 4-1: config 0 descriptor??
[  153.878917][ T8640] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  153.884086][ T5680] hub 4-1:0.0: bad descriptor, ignoring hub
[  153.886085][ T5680] hub 4-1:0.0: probe with driver hub failed with error -5
[  154.092520][ T8642] loop4: detected capacity change from 0 to 4096
[  154.099397][ T8642] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  154.119127][ T8642] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  154.123721][ T8642] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  154.201738][ T5663] usb 4-1: USB disconnect, device number 5
[  154.276753][ T8650] loop4: detected capacity change from 0 to 16
[  154.298242][ T8650] erofs (device loop4): mounted with root inode @ nid 36.
[  154.339925][   T33] audit: type=1800 audit(1787568582.153:3493): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1174" name="idProduct" dev="configfs" ino=17502 res=0 errno=0
[  154.351724][   T33] audit: type=1800 audit(1787568582.163:3494): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1174" name="UDC" dev="configfs" ino=17503 res=0 errno=0
[  154.474886][ T8655] loop4: detected capacity change from 0 to 136
[  154.634933][ T8658] loop4: detected capacity change from 0 to 128
[  154.648146][ T8658] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  154.655879][ T8658] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  154.702332][ T8418] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  154.815781][ T8661] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  154.825978][ T8661] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  154.831915][ T8661] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  154.840168][ T8661] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  154.849762][   T33] audit: type=1800 audit(1787568582.663:3495): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1179" name="attr_allow_any_host" dev="configfs" ino=17535 res=0 errno=0
[  154.861712][ T8662] nvmet: Invalid value 'ipv' for adrfam
[  154.876532][   T33] audit: type=1800 audit(1787568582.673:3496): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1179" name="addr_trtype" dev="configfs" ino=17537 res=0 errno=0
[  154.889934][ T8662] nvmet_rdma: malformed ip/port passed: 172.20.20.20:
[  154.909122][   T33] audit: type=1800 audit(1787568582.673:3497): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1179" name="addr_adrfam" dev="configfs" ino=17538 res=0 errno=0
[  154.943123][ T8661] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  154.949842][   T33] audit: type=1800 audit(1787568582.693:3498): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1179" name="addr_traddr" dev="configfs" ino=17539 res=0 errno=0
[  155.202496][ T8670] loop4: detected capacity change from 0 to 256
[  155.221644][ T5680] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  155.398867][ T5680] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  155.412441][ T5680] usb 4-1: config 1 has no interface number 0
[  155.427482][ T5680] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  155.438993][ T5680] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 80
[  155.451888][ T5680] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  155.472880][ T5680] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  155.476978][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.479711][ T5680] usb 4-1: Product: syz
[  155.484603][ T5680] usb 4-1: Manufacturer: syz
[  155.487422][ T5680] usb 4-1: SerialNumber: syz
[  155.504373][ T8664] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  155.576664][   T53] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  155.729978][ T8664] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  155.739920][ T5680] usb 4-1: No status endpoint found
[  156.092460][ T5680] usb 4-1: USB disconnect, device number 6
[  156.234957][ T8690] netlink: 'syz.2.1189': attribute type 1 has an invalid length.
[  156.336362][ T8697] vivid-003: disconnect
[  156.357448][ T8693] vivid-003: reconnect
[  156.516617][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'.
[  156.555949][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'.
[  156.752277][ T8713] set_capacity_and_notify: 1 callbacks suppressed
[  156.752287][ T8713] loop2: detected capacity change from 0 to 32768
[  156.781815][ T8713] JBD2: Ignoring recovery information on journal
[  156.809468][ T8713] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  156.853280][ T8715] loop4: detected capacity change from 0 to 32768
[  156.862263][ T8715] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1201 (8715)
[  156.898200][ T8715] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.907675][ T8715] BTRFS info (device loop4): using sha256 checksum algorithm
[  156.925351][ T5597] ocfs2: Unmounting device (7,2) on (node local)
[  156.932154][ T5680] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  157.042914][ T8715] BTRFS info (device loop4): enabling ssd optimizations
[  157.045776][ T8715] BTRFS info (device loop4): turning on async discard
[  157.049813][ T8715] BTRFS info (device loop4): enabling free space tree
[  157.082441][ T5680] usb 4-1: Using ep0 maxpacket: 8
[  157.103715][ T5680] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  157.117356][ T5680] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  157.126075][ T5680] usb 4-1: Product: syz
[  157.129457][ T5680] usb 4-1: Manufacturer: syz
[  157.138356][ T5680] usb 4-1: SerialNumber: syz
[  157.138981][ T8418] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.142737][ T5680] usb 4-1: config 0 descriptor??
[  157.148592][ T5680] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  157.357277][ T5680] gspca_zc3xx: reg_w_i err -71
[  157.365674][ T5680] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  157.376664][ T5680] usb 4-1: USB disconnect, device number 7
[  157.478422][ T8749] syzkaller1: entered promiscuous mode
[  157.480741][ T8749] syzkaller1: entered allmulticast mode
[  157.614051][ T3159] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  157.708765][ T8751] loop4: detected capacity change from 0 to 32768
[  157.714512][ T8751] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1210 (8751)
[  157.725162][ T8751] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.733695][ T8751] BTRFS info (device loop4): using sha256 checksum algorithm
[  157.771782][ T3159] usb 3-1: Using ep0 maxpacket: 16
[  157.775672][ T8751] BTRFS info (device loop4): enabling ssd optimizations
[  157.778907][ T8751] BTRFS info (device loop4): turning on async discard
[  157.780308][ T3159] usb 3-1: unable to get BOS descriptor or descriptor too short
[  157.782041][ T8751] BTRFS info (device loop4): enabling free space tree
[  157.795879][ T3159] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.804950][ T3159] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  157.814680][ T3159] usb 3-1: config 1 has no interface number 0
[  157.819874][ T3159] usb 3-1: too many endpoints for config 1 interface 1 altsetting 235: 111, using maximum allowed: 30
[  157.824244][ T3159] usb 3-1: config 1 interface 1 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 111
[  157.828834][ T3159] usb 3-1: config 1 interface 1 has no altsetting 1
[  157.834083][ T3159] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  157.837640][ T3159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.840733][ T3159] usb 3-1: Product: syz
[  157.843347][ T3159] usb 3-1: Manufacturer: syz
[  157.845137][ T3159] usb 3-1: SerialNumber: syz
[  157.858851][ T8418] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.971542][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1212'.
[  158.127676][ T3159] usb 3-1: USB disconnect, device number 25
[  158.138718][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  158.221452][  T804] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  158.371380][  T804] usb 5-1: Using ep0 maxpacket: 16
[  158.374967][  T804] usb 5-1: config 64 has an invalid interface number: 238 but max is 0
[  158.377691][  T804] usb 5-1: config 64 has no interface number 0
[  158.379617][  T804] usb 5-1: config 64 interface 238 has no altsetting 0
[  158.385752][  T804] usb 5-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a
[  158.389347][  T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.393074][  T804] usb 5-1: Product: syz
[  158.394826][  T804] usb 5-1: Manufacturer: syz
[  158.396624][  T804] usb 5-1: SerialNumber: syz
[  158.614067][  T804] uvcvideo 5-1:64.238: probe with driver uvcvideo failed with error -22
[  158.624797][  T804] usb 5-1: USB disconnect, device number 3
[  159.051702][ T8791] loop2: detected capacity change from 0 to 256
[  159.067115][ T8791] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  159.100072][ T8789] block device autoloading is deprecated and will be removed.
[  159.467459][   T53] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  159.470738][   T53] Bluetooth: hci2: Injecting HCI hardware error event
[  159.476417][ T5602] Bluetooth: hci2: hardware error 0x00
[  160.269399][ T8829] netlink: 'syz.4.1233': attribute type 39 has an invalid length.
[  160.468503][ T8834] bond1: entered promiscuous mode
[  160.472520][ T8834] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.626952][ T8843] loop2: detected capacity change from 0 to 2048
[  160.760091][    C0] vcan0: j1939_tp_rxtimer: 0xffff888114376800: rx timeout, send abort
[  160.764781][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888114376800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  161.373397][ T3159] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  161.546412][ T3159] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  161.548962][ T5602] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  161.555806][ T3159] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  161.570134][ T3159] usb 3-1: config 0 has no interface number 0
[  161.576736][ T3159] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  161.588772][ T3159] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  161.598927][ T3159] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.617611][ T3159] usb 3-1: config 0 interface 52 has no altsetting 0
[  161.627104][ T3159] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  161.632492][ T8881] loop4: detected capacity change from 0 to 128
[  161.634460][ T3159] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  161.641273][ T3159] usb 3-1: Product: syz
[  161.644386][ T8881] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  161.645689][ T3159] usb 3-1: SerialNumber: syz
[  161.654274][ T8881] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.659350][ T3159] usb 3-1: config 0 descriptor??
[  161.716871][ T8883] veth0: entered promiscuous mode
[  161.719029][ T8882] veth0: left promiscuous mode
[  161.783254][ T8887] loop4: detected capacity change from 0 to 1024
[  161.799752][ T8887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.838541][ T8418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.891069][ T3159] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input14
[  162.127742][ T3159] usb 3-1: USB disconnect, device number 26
[  162.406200][ T8913] loop4: detected capacity change from 0 to 1024
[  162.460260][ T8913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  162.466129][ T8913] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.476471][ T8913] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #15: comm syz.4.1264: corrupted xattr block 128: invalid size in ea xattr
[  162.509238][ T8418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  162.699047][ T8918] netlink: 'syz.2.1266': attribute type 2 has an invalid length.
[  162.740414][   T33] audit: type=1400 audit(1787568590.553:3499): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=8919 comm="syz.2.1267" name="p" offset=33
[  162.899106][ T8911] loop3: detected capacity change from 0 to 131072
[  162.902799][ T8911] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  162.905395][ T8911] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  162.908416][ T8911] F2FS-fs (loop3): invalid crc value
[  162.967239][ T8911] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  162.975415][ T8911] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  162.977558][ T8911] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  163.042646][ T5680] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  163.232411][ T5680] usb 3-1: Using ep0 maxpacket: 8
[  163.236537][ T5680] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  163.241045][ T5680] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  163.245945][ T5680] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  163.249019][ T5680] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  163.254657][ T5680] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.260216][ T5680] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  163.264522][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.374176][ T8941] loop3: detected capacity change from 0 to 512
[  163.376874][ T8941] EXT4-fs: Ignoring removed i_version option
[  163.379825][ T8941] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  163.398742][ T8941] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  163.406953][ T8941] Quota error (device loop3): write_blk: dquota write failed
[  163.411360][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  163.413314][    C1] EXT4-fs (loop3): initial error at time 1787568591: ext4_mb_generate_buddy:1317
[  163.416202][    C1] EXT4-fs (loop3): last error at time 1787568591: ext4_mb_generate_buddy:1317
[  163.419710][ T8941] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  163.430440][ T8941] Quota error (device loop3): write_blk: dquota write failed
[  163.438636][ T8941] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  163.445132][ T8941] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1269: Failed to acquire dquot type 1
[  163.449511][ T8941] loop3: lost filesystem error report for type 5 error -28
[  163.450693][ T8941] EXT4-fs (loop3): 1 truncate cleaned up
[  163.459342][ T8941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.479885][ T5680] usb 3-1: usb_control_msg returned -32
[  163.484007][ T5680] usbtmc 3-1:16.0: can't read capabilities
[  163.489966][ T8941] EXT4-fs error (device loop3): __ext4_remount:6844: comm syz.3.1269: Abort forced by user
[  163.498085][ T8947] netlink: 'syz.4.1276': attribute type 26 has an invalid length.
[  163.502473][ T8941] EXT4-fs (loop3): Remounting filesystem read-only
[  163.510866][ T8941] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  163.549091][ T8147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.618247][ T8953] bridge1: entered allmulticast mode
[  163.724116][   T32] IPVS: starting estimator thread 0...
[  163.822476][ T8964] IPVS: using max 67 ests per chain, 160800 per kthread
[  163.939598][ T8979] tmpfs: Too few inodes for current use
[  164.072611][   T32] usb 3-1: USB disconnect, device number 27
[  164.210069][ T8997] loop3: detected capacity change from 0 to 4096
[  164.232489][ T8998] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.331809][ T3159] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  164.486235][ T3159] usb 5-1: unable to get BOS descriptor or descriptor too short
[  164.490676][ T3159] usb 5-1: config 160 has an invalid interface number: 102 but max is 0
[  164.495618][ T3159] usb 5-1: config 160 has no interface number 0
[  164.498117][ T3159] usb 5-1: config 160 interface 102 has no altsetting 0
[  164.503657][ T3159] usb 5-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=f3.b9
[  164.507204][ T3159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.510223][ T3159] usb 5-1: Product: syz
[  164.512573][ T3159] usb 5-1: Manufacturer: syz
[  164.514504][ T3159] usb 5-1: SerialNumber: syz
[  164.734095][ T3159] rndis_host 5-1:160.102: skipping garbage
[  164.741249][ T3159] rndis_host 5-1:160.102: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  164.748493][ T3159] cdc_acm 5-1:160.102: skipping garbage
[  164.758696][ T3159] usb 5-1: USB disconnect, device number 4
[  165.263822][ T9020] loop2: detected capacity change from 0 to 32768
[  165.821749][ T9049] loop4: detected capacity change from 0 to 512
[  165.837637][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'.
[  165.843758][ T9049] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  165.849357][ T9049] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[  165.852441][ T9049] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.1322: iget: bad i_size value: 12154757448730
[  165.856510][ T9049] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  165.856762][ T9049] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1322: couldn't read orphan inode 13 (err -117)
[  165.863090][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  165.863101][    C0] EXT4-fs (loop4): initial error at time 1787568593: ext4_orphan_get:1399: inode 13
[  165.863114][    C0] EXT4-fs (loop4): last error at time 1787568593: ext4_orphan_get:1399: inode 13
[  165.872466][ T9049] loop4: lost filesystem error report for type 5 error -117
[  165.877313][ T9049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.921029][ T8418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.312363][   T33] audit: type=1400 audit(1787568594.133:3500): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=9076 comm="syz.3.1334"
[  166.627819][ T9088] loop4: detected capacity change from 0 to 32768
[  166.638775][ T9088] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1339 (9088)
[  166.661270][ T9088] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.667273][ T9088] BTRFS info (device loop4): using crc32c checksum algorithm
[  166.715589][ T9088] BTRFS info (device loop4): enabling ssd optimizations
[  166.718371][ T9088] BTRFS info (device loop4): turning on flush-on-commit
[  166.720893][ T9088] BTRFS info (device loop4): enabling free space tree
[  166.723330][ T9088] BTRFS info (device loop4): enabling auto defrag
[  166.725708][ T9088] BTRFS info (device loop4): use lzo compression, level 1
[  166.728184][ T9088] BTRFS info (device loop4): max_inline set to 4096
[  166.911738][ T8418] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.818808][  T804] hid-generic FFFF:8001:0002.000A: item fetching failed at offset 0/1
[  167.821788][ T5709] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  167.829741][  T804] hid-generic FFFF:8001:0002.000A: probe with driver hid-generic failed with error -22
[  167.967141][ T9132] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  167.994379][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.997836][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.000900][ T5709] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  168.005910][ T5709] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  168.008712][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.015518][ T5709] usb 4-1: config 0 descriptor??
[  168.221593][  T804] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  168.395472][  T804] usb 3-1: Using ep0 maxpacket: 8
[  168.403520][  T804] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  168.406847][  T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.406964][ T9140] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1355' sets config #0
[  168.422207][  T804] pvrusb2: Hardware description: Terratec Grabster AV400
[  168.424448][  T804] pvrusb2: **********
[  168.425738][  T804] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  168.428875][  T804] pvrusb2: Important functionality might not be entirely working.
[  168.432127][  T804] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  168.437170][  T804] pvrusb2: **********
[  168.484510][ T5709] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  168.555679][ T9146] loop4: detected capacity change from 0 to 512
[  168.559225][ T9146] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  168.571093][ T9146] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1358: Invalid block bitmap block 0 in block_group 0
[  168.576446][ T9146] loop4: lost filesystem error report for type 5 error -117
[  168.576825][ T9146] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  168.583047][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  168.583059][    C0] EXT4-fs (loop4): initial error at time 1787568596: ext4_read_block_bitmap_nowait:483
[  168.583070][    C0] EXT4-fs (loop4): last error at time 1787568596: ext4_read_block_bitmap_nowait:483
[  168.595293][ T9146] loop4: lost filesystem error report for type 5 error -117
[  168.595514][ T9146] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.1358: attempt to clear invalid blocks 983261 len 1
[  168.603288][ T9146] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  168.603599][ T9146] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.1358: Invalid inode table block 0 in block_group 0
[  168.612478][ T9146] loop4: lost filesystem error report for type 5 error -117
[  168.615608][ T9146] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  168.621512][ T9146] loop4: lost filesystem error report for type 5 error -117
[  168.621803][ T9146] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  168.627992][ T9146] loop4: lost filesystem error report for type 5 error -117
[  168.628350][ T9146] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.1358: Invalid inode table block 0 in block_group 0
[  168.635475][ T2416] pvrusb2: Invalid write control endpoint
[  168.641592][ T9146] loop4: lost filesystem error report for type 5 error -117
[  168.643215][ T9146] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  168.649956][  T804] usb 4-1: USB disconnect, device number 8
[  168.655828][ T9146] loop4: lost filesystem error report for type 5 error -117
[  168.661274][ T9146] EXT4-fs error (device loop4): ext4_truncate:4691: inode #11: comm syz.4.1358: mark_inode_dirty error
[  168.669370][ T9146] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  168.675484][ T9146] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  168.683987][ T9146] loop4: lost filesystem error report for type 5 error -117
[  168.694809][ T9146] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.1358: Invalid inode table block 0 in block_group 0
[  168.705375][ T9146] loop4: lost filesystem error report for type 5 error -117
[  168.707154][ T9146] EXT4-fs (loop4): 1 truncate cleaned up
[  168.724205][ T9146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.758080][ T8418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.768927][ T2416] pvrusb2: Invalid write control endpoint
[  168.770830][ T2416] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  168.795770][ T2416] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  168.799024][ T2416] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  168.802327][ T2416] pvrusb2: Device being rendered inoperable
[  168.816438][ T2416] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  168.835689][ T2416] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  168.843411][ T5680] usb 3-1: USB disconnect, device number 28
[  168.861950][ T2416] pvrusb2: Attached sub-driver cx25840
[  168.867415][ T2416] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  168.870834][ T2416] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  169.058936][ T9159] loop4: detected capacity change from 0 to 512
[  169.063816][ T9159] EXT4-fs (loop4): Test dummy encryption mode enabled
[  169.066484][ T9159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  169.090206][ T9159] EXT4-fs (loop4): 1 truncate cleaned up
[  169.095183][ T9159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.459444][ T9171] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1367'.
[  170.052903][ T9189] loop3: detected capacity change from 0 to 4096
[  170.098892][ T8418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.113958][ T9189] ntfs3(loop3): ino=3, mi_enum_attr
[  170.199506][ T9191] Invalid ELF header magic: != ELF
[  170.431672][ T9194] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  170.432460][ T9189] ntfs3(loop3): ino=9, attr_set_size_ex
[  170.434301][ T9194] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  172.449644][ T9206] loop2: detected capacity change from 0 to 32768
[  172.482432][ T9206] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  172.488384][ T9206] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #72: signature = INODE
[  172.493922][ T9206] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  172.497763][ T9206] OCFS2: File system is now read-only.
[  172.499831][ T9206] (syz.2.1383,9206,1):ocfs2_read_locked_inode:633 ERROR: status = -30
[  172.504625][ T9206] (syz.2.1383,9206,1):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[  172.508100][ T9206] (syz.2.1383,9206,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=7, slot=0
[  172.512430][   T32] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  172.515509][ T9206] (syz.2.1383,9206,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  172.519178][ T9206] (syz.2.1383,9206,1):ocfs2_mount_volume:1757 ERROR: status = -30
[  172.534792][ T9206] (syz.2.1383,9206,1):ocfs2_fill_super:1177 ERROR: status = -30
[  172.570188][ T9210] loop3: detected capacity change from 0 to 32768
[  172.590224][ T9210] jfs_mount: dbMount failed w/rc = -22
[  172.596020][ T9210] Mount JFS Failure: -22
[  172.597433][ T9210] jfs_mount failed w/return code = -22
[  172.692830][   T32] usb 5-1: Using ep0 maxpacket: 32
[  172.697393][   T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.711639][   T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  172.718609][   T32] usb 5-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40
[  172.721606][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.725574][   T32] usb 5-1: Product: syz
[  172.726923][   T32] usb 5-1: Manufacturer: syz
[  172.732871][   T32] usb 5-1: SerialNumber: syz
[  172.759945][ T9215] loop2: detected capacity change from 0 to 4096
[  172.796683][ T9215] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  172.819832][ T9214] ntfs3(loop2): ino=1e, "file1" attr_set_size_ex
[  172.970837][   T32] usb 5-1: 0:1 : does not exist
[  172.977665][   T32] usb 5-1: 0:2 : does not exist
[  173.028300][ T9231] loop3: detected capacity change from 0 to 16
[  173.050293][ T9231] erofs (device loop3): bogus i_mode (177777) @ nid 36
[  173.082873][   T32] usb 5-1: USB disconnect, device number 5
[  173.106899][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.385022][ T9244] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input19
[  173.519879][ T9247] loop4: detected capacity change from 0 to 8
[  173.546528][ T9247] SQUASHFS error: zlib decompression failed, data probably corrupt
[  173.563358][ T9247] SQUASHFS error: Failed to read block 0x9b: -5
[  173.571529][ T9247] SQUASHFS error: Unable to read metadata cache entry [99]
[  173.574419][ T9247] SQUASHFS error: Unable to read inode 0x127
[  173.673102][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1404'.
[  173.750879][ T9263] loop3: detected capacity change from 0 to 512
[  173.785859][ T9263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.790322][ T9263] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.814555][ T8147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.947108][ T9277] loop3: detected capacity change from 0 to 1024
[  173.949888][ T9277] EXT4-fs: Ignoring removed bh option
[  173.975326][ T9277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.197736][ T9281] loop2: detected capacity change from 0 to 512
[  174.210122][ T9281] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216)
[  174.219613][ T9281] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960)
[  174.226095][ T9281] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960)
[  174.246145][ T8147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.440063][ T9284] loop3: detected capacity change from 0 to 40427
[  174.449554][ T9284] F2FS-fs (loop3): build fault injection rate: 690
[  174.469186][ T9284] F2FS-fs (loop3): invalid crc value
[  174.598325][ T9284] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  174.611320][ T9284] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  174.835682][ T9294] loop2: detected capacity change from 0 to 40427
[  174.843371][ T9294] F2FS-fs (loop2): invalid crc value
[  174.896043][ T9304] loop4: detected capacity change from 0 to 2048
[  174.927979][ T9304] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  174.958633][ T9294] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  174.968836][ T9309] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.007799][ T9294] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  175.217350][ T9316] loop2: detected capacity change from 0 to 128
[  175.220303][ T9316] EXT4-fs (loop2): Test dummy encryption mode enabled
[  175.227110][ T9316] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  175.231235][ T9316] ext4 filesystem being mounted at /424/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  175.232279][   T32] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  175.272250][ T5709] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  175.278548][ T5597] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.401528][   T32] usb 4-1: Using ep0 maxpacket: 8
[  175.409524][   T32] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  175.417446][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.426076][   T32] usb 4-1: Product: syz
[  175.434720][   T32] usb 4-1: Manufacturer: syz
[  175.439657][   T32] usb 4-1: SerialNumber: syz
[  175.448174][ T5709] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  175.458603][   T32] usb 4-1: config 0 descriptor??
[  175.461064][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.471836][ T5709] usb 5-1: Product: syz
[  175.474471][   T32] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  175.477014][ T5709] usb 5-1: Manufacturer: syz
[  175.478888][ T5709] usb 5-1: SerialNumber: syz
[  175.499827][ T5709] usb 5-1: cannot find UAC_HEADER
[  175.502603][ T5709] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  175.511961][ T5709] usb 5-1: cannot find UAC_HEADER
[  175.514621][ T5709] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[  175.535957][ T5709] usb 5-1: cannot find UAC_HEADER
[  175.550720][ T9333] ipvlan2: entered allmulticast mode
[  175.553286][ T9333] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  175.567892][ T9333] batman_adv: batadv0: Adding interface: ipvlan2
[  175.570552][ T9333] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  175.579409][ T5709] snd-usb-audio 5-1:1.3: probe with driver snd-usb-audio failed with error -22
[  175.581749][ T9333] batman_adv: batadv0: Interface activated: ipvlan2
[  175.678314][   T32] gspca_sonixj: reg_w1 err -71
[  175.680561][   T32] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  175.692716][   T32] usb 4-1: USB disconnect, device number 9
[  175.861275][ T9335] loop2: detected capacity change from 0 to 32768
[  175.871951][ T9335] XFS (loop2): Metadata CRC error detected at xfs_sb_read_verify+0x368/0x4d0, xfs_sb block 0x0 
[  175.875993][ T9335] XFS (loop2): Unmount and run xfs_repair
[  175.878109][ T9335] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  175.880463][ T9335] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00  XFSB.......... .
[  175.884657][ T9335] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.888258][ T9335] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[  175.892712][ T9335] 00000030: 00 00 00 00 00 00 00 10 00 00 00 00 00 00 1d 00  ................
[  175.896126][ T9335] 00000040: 00 00 00 00 00 00 1d 01 00 00 00 00 00 00 1d 02  ................
[  175.899641][ T9335] 00000050: 40 00 00 03 00 00 20 00 00 00 00 01 00 00 00 00  @..... .........
[  175.903407][ T9335] 00000060: 00 00 0e 70 b4 b5 02 00 04 00 00 02 00 00 00 00  ...p............
[  175.906361][ T9335] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32  ...............2
[  175.909210][ T9335] XFS (loop2): SB validate failed with error -74.
[  176.501871][ T9348] loop3: detected capacity change from 0 to 32768
[  176.534161][ T9348] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  176.602668][   T33] audit: type=1800 audit(1787568604.423:3501): pid=9348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1436" name=2E02 dev="loop3" ino=17058 res=0 errno=0
[  176.653359][ T8147] ocfs2: Unmounting device (7,3) on (node local)
[  176.732488][ T6054] usb 5-1: USB disconnect, device number 6
[  176.924884][ T9352] loop3: detected capacity change from 0 to 32768
[  176.938477][ T9352] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1437 (9352)
[  176.950285][ T9352] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  176.954904][ T9352] BTRFS info (device loop3): using sha256 checksum algorithm
[  176.984239][ T9352] BTRFS info (device loop3): enabling ssd optimizations
[  176.989501][ T9352] BTRFS info (device loop3): turning on async discard
[  176.998154][ T9352] BTRFS info (device loop3): enabling free space tree
[  177.048120][ T8147] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.137278][ T9368] tmpfs: Bad value for 'mpol'
[  177.232988][ T9372] erofs (device loop3): failed to read inode meta block (nid: 18446744073575399424): -117
[  177.456489][ T9376] JBD2: Ignoring recovery information on journal
[  177.484510][ T9376] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  177.569545][ T9376] OCFS2: ERROR (device loop2): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8
[  177.577698][ T9376] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  177.581754][ T9376] OCFS2: File system is now read-only.
[  177.585097][ T9376] (syz.2.1442,9376,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  177.588851][ T9376] (syz.2.1442,9376,0):ocfs2_reserve_clusters_with_limit:1288 ERROR: status = -30
[  177.594673][ T9376] (syz.2.1442,9376,0):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30
[  177.597465][ T9376] (syz.2.1442,9376,0):ocfs2_lock_allocators:3123 ERROR: status = -30
[  177.600123][ T9376] (syz.2.1442,9376,0):ocfs2_write_begin_nolock:1724 ERROR: status = -30
[  177.603473][ T9376] (syz.2.1442,9376,0):ocfs2_write_begin:1888 ERROR: status = -30
[  177.748546][ T5597] ocfs2: Unmounting device (7,2) on (node local)
[  178.018143][   T33] audit: type=1800 audit(1787568605.833:3502): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1446" name="file1" dev="loop4" ino=4 res=0 errno=0
[  178.134353][ T9392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.163008][ T9392] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  178.175289][ T9392] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  178.178212][ T9392] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1448: Failed to acquire dquot type 1
[  178.211224][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.548511][ T9418] xt_hashlimit: overflow, try lower: 0/0
[  178.690746][ T9428] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached
[  178.791573][ T6054] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  178.944567][ T6054] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.947972][ T6054] usb 3-1: config 0 has no interfaces?
[  178.954894][ T6054] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  178.960700][ T6054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.968869][ T6054] usb 3-1: Product: syz
[  178.971082][ T6054] usb 3-1: Manufacturer: syz
[  178.978210][ T6054] usb 3-1: SerialNumber: syz
[  178.986292][ T6054] usb 3-1: config 0 descriptor??
[  179.214859][ T9449] set_capacity_and_notify: 5 callbacks suppressed
[  179.214874][ T9449] loop3: detected capacity change from 0 to 32768
[  179.262367][ T5709] usb 3-1: USB disconnect, device number 29
[  179.486117][ T9457] loop3: detected capacity change from 0 to 128
[  179.489418][ T9457] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  179.494441][ T9457] hpfs: filesystem error: improperly stopped
[  179.496437][ T9457] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  179.498909][ T9457] hpfs: You really don't want any checks? You are crazy...
[  179.501745][ T9457] hpfs: hpfs_map_sector(): read error
[  179.503482][ T9457] hpfs: code page support is disabled
[  179.507705][ T9457] hpfs: hpfs_map_4sectors(): unaligned read
[  179.509686][ T9457] hpfs: hpfs_map_4sectors(): unaligned read
[  179.513295][ T9457] hpfs: filesystem error: unable to find root dir
[  179.871718][ T5709] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  180.021597][ T5709] usb 4-1: Using ep0 maxpacket: 8
[  180.027292][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  180.034403][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  180.038390][ T5709] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  180.043882][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  180.047654][ T5709] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  180.051966][ T5709] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  180.055556][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.061884][  T804] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  180.065957][ T5709] usb 4-1: config 0 descriptor??
[  180.070768][ T5709] hub 4-1:0.0: bad descriptor, ignoring hub
[  180.073705][ T5709] hub 4-1:0.0: probe with driver hub failed with error -5
[  180.118589][ T5602] Bluetooth: hci3: urb ffff888169009200 submission failed (90)
[  180.232674][  T804] usb 3-1: Using ep0 maxpacket: 32
[  180.238893][  T804] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  180.242930][  T804] usb 3-1: config 0 has no interface number 0
[  180.245486][  T804] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  180.249552][  T804] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  180.254388][  T804] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  180.258327][  T804] usb 3-1: config 0 interface 196 has no altsetting 0
[  180.264212][  T804] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  180.267870][  T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.271091][  T804] usb 3-1: Product: syz
[  180.275294][  T804] usb 3-1: Manufacturer: syz
[  180.279337][  T804] usb 3-1: SerialNumber: syz
[  180.297391][ T5709] usb 4-1: USB disconnect, device number 10
[  180.316260][  T804] usb 3-1: config 0 descriptor??
[  180.329046][ T9471] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  180.759458][  T804] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  180.762587][  T804] ipheth 3-1:0.196: probe with driver ipheth failed with error -22
[  180.964431][  T804] usb 3-1: USB disconnect, device number 30
[  181.091854][ T9489] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  181.228300][ T5602] Bluetooth: hci0: command 0x0406 tx timeout
[  181.296332][ T9493] loop3: detected capacity change from 0 to 32768
[  181.306345][ T9493] JBD2: Can't enable checksumming v2 and v3 at the same time!
[  181.318947][ T9493] (syz.3.1495,9493,0):ocfs2_journal_init:972 ERROR: Linux journal layer error
[  181.322950][ T9493] (syz.3.1495,9493,0):ocfs2_check_volume:2344 ERROR: Could not initialize journal!
[  181.329269][ T9493] (syz.3.1495,9493,0):ocfs2_check_volume:2429 ERROR: status = -22
[  181.332416][ T9493] (syz.3.1495,9493,0):ocfs2_mount_volume:1763 ERROR: status = -22
[  181.335941][ T9493] (syz.3.1495,9493,0):ocfs2_fill_super:1177 ERROR: status = -22
[  181.772365][ T9511] [U] 
[  181.941813][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'.
[  181.998237][ T9529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1512'.
[  182.011163][ T9529] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1512'.
[  182.237423][ T9541] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached
[  182.294183][   T53] Bluetooth: hci0: unexpected event for opcode 0x0405
[  182.327377][   T33] audit: type=1326 audit(1787568610.143:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.2.1521" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc452f9e0d9 code=0x0
[  182.421501][ T6054] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  182.574319][ T6054] usb 5-1: config 5 has an invalid interface number: 180 but max is 0
[  182.577737][ T6054] usb 5-1: config 5 has no interface number 0
[  182.580280][ T6054] usb 5-1: config 5 interface 180 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  182.584686][ T6054] usb 5-1: config 5 interface 180 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64
[  182.589673][ T6054] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice= a.60
[  182.593676][ T6054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.611510][ T6054] imon_raw 5-1:5.180: IR endpoint missing
[  182.816423][ T6054] usb 5-1: USB disconnect, device number 7
[  183.287159][ T9559] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  183.289710][ T9559] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  183.303314][ T9561] netlink: 'syz.2.1527': attribute type 2 has an invalid length.
[  183.306244][ T9561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1527'.
[  184.503921][ T9574] loop2: detected capacity change from 0 to 32768
[  184.549310][ T9574]  loop2: p1 p3 < >
[  184.734175][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  184.738001][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  184.761689][ T5663] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  184.928678][ T5663] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  184.939080][ T5663] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  184.960279][ T5663] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  184.971085][ T5663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.982691][ T5663] usb 5-1: Product: syz
[  184.983995][ T5663] usb 5-1: Manufacturer: syz
[  184.990927][ T5663] usb 5-1: SerialNumber: syz
[  185.242729][ T9600] loop3: detected capacity change from 0 to 256
[  185.286406][ T5663] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  185.388045][ T5663] usb 5-1: USB disconnect, device number 8
[  185.445985][ T9610] loop3: detected capacity change from 0 to 1024
[  185.850944][ T9629] loop4: detected capacity change from 0 to 1024
[  185.931473][ T5663] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  185.964476][  T804] IPVS: starting estimator thread 0...
[  186.055287][ T9634] IPVS: using max 67 ests per chain, 160800 per kthread
[  186.101976][ T5663] usb 4-1: Using ep0 maxpacket: 8
[  186.105799][ T5663] usb 4-1: config 0 has an invalid interface number: 234 but max is 2
[  186.108610][ T5663] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  186.112735][ T5663] usb 4-1: config 0 has no interface number 1
[  186.116760][ T5663] usb 4-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83
[  186.119523][ T5663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.122209][ T5663] usb 4-1: Product: syz
[  186.123615][ T5663] usb 4-1: Manufacturer: syz
[  186.126623][ T5663] usb 4-1: SerialNumber: syz
[  186.131076][ T5663] usb 4-1: config 0 descriptor??
[  186.146356][ T5663] usb 4-1: unknown number of interfaces: 2
[  186.163626][ T9644] ima: rule for LSM 'unconfined_t' is undefined
[  186.170070][ T9644] ima: policy update failed
[  186.170174][   T33] audit: type=1807 audit(1787568613.983:3504): action=measure func=FILE_CHECK obj_type=unconfined_t res=0
[  186.186041][   T33] audit: type=1802 audit(1787568613.983:3505): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1564" res=0 errno=0
[  186.206057][   T33] audit: type=1802 audit(1787568613.993:3506): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1564" res=0 errno=0
[  186.341553][   T53] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  186.349217][   T53] Bluetooth: hci0: Injecting HCI hardware error event
[  186.351217][ T6054] usb 4-1: USB disconnect, device number 11
[  186.353496][ T5602] Bluetooth: hci0: hardware error 0x00
[  186.430840][ T9653] bonding: no command found in bonding_masters - use +ifname or -ifname
[  186.451707][ T5663] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  186.520706][ T9657] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  186.526624][ T9657] VFS: Can't find a romfs filesystem on dev nullb0.
[  186.526624][ T9657] 
[  186.651611][ T5663] usb 3-1: Using ep0 maxpacket: 8
[  186.658315][ T5663] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.668711][ T5663] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  186.688373][ T5663] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  186.695358][ T5663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.698583][ T5663] usb 3-1: Product: syz
[  186.700298][ T5663] usb 3-1: Manufacturer: syz
[  186.703502][ T5663] usb 3-1: SerialNumber: syz
[  186.871993][ T9665] loop4: detected capacity change from 0 to 32768
[  186.918321][ T5663] usb 3-1: unit 0 not found!
[  186.919989][ T5663] usb 3-1: unit 4 not found!
[  186.947706][ T9665]  loop4: p1 p3 < >
[  186.978199][ T5663] usb 3-1: USB disconnect, device number 31
[  187.073051][ T6298] udevd[6298]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  187.077141][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  187.360701][ T9675] loop3: detected capacity change from 0 to 40427
[  187.363827][ T9675] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  187.365943][ T9675] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  187.399785][ T9675] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  187.410776][ T9675] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  187.413612][ T9675] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  187.482817][ T8147] syz-executor: attempt to access beyond end of device
[  187.482817][ T8147] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  187.509671][ T8147] CPU: 1 UID: 0 PID: 8147 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  187.509685][ T8147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.509690][ T8147] Call Trace:
[  187.509694][ T8147]  <TASK>
[  187.509697][ T8147]  dump_stack_lvl+0xe8/0x150
[  187.509713][ T8147]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  187.509727][ T8147]  f2fs_write_end_io+0x124b/0x1710
[  187.509747][ T8147]  __submit_merged_bio+0x258/0x6a0
[  187.509755][ T8147]  ? rcu_is_watching+0x15/0xb0
[  187.509769][ T8147]  __submit_merged_write_cond+0x3c9/0x4e0
[  187.509782][ T8147]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  187.509802][ T8147]  f2fs_write_data_pages+0x2a27/0x36f0
[  187.509814][ T8147]  ? is_bpf_text_address+0x26/0x2b0
[  187.509840][ T8147]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.509850][ T8147]  ? is_bpf_text_address+0x26/0x2b0
[  187.509864][ T8147]  ? arch_stack_walk+0xfb/0x150
[  187.509889][ T8147]  ? add_lock_to_list+0xc7/0x100
[  187.509901][ T8147]  ? lockdep_unlock+0x5d/0xd0
[  187.509908][ T8147]  ? __lock_acquire+0x13e8/0x2cf0
[  187.509930][ T8147]  ? do_raw_spin_lock+0x12b/0x2f0
[  187.509984][ T8147]  ? do_raw_spin_unlock+0x4d/0x210
[  187.509998][ T8147]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.510009][ T8147]  do_writepages+0x338/0x560
[  187.510024][ T8147]  ? do_raw_spin_unlock+0x4d/0x210
[  187.510034][ T8147]  filemap_fdatawrite+0x1e9/0x2f0
[  187.510046][ T8147]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  187.510075][ T8147]  ? do_raw_spin_unlock+0x4d/0x210
[  187.510085][ T8147]  f2fs_sync_dirty_inodes+0x30e/0x830
[  187.510102][ T8147]  f2fs_write_checkpoint+0xa3d/0x2710
[  187.510113][ T8147]  ? __lock_acquire+0x683/0x2cf0
[  187.510135][ T8147]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  187.510167][ T8147]  kill_f2fs_super+0x2f6/0x700
[  187.510181][ T8147]  ? __pfx_kill_f2fs_super+0x10/0x10
[  187.510196][ T8147]  ? call_rcu+0x64b/0x8b0
[  187.510207][ T8147]  ? lockdep_hardirqs_on+0x7a/0x110
[  187.510223][ T8147]  deactivate_locked_super+0xbc/0x130
[  187.510232][ T8147]  cleanup_mnt+0x3d3/0x460
[  187.510245][ T8147]  task_work_run+0x1d9/0x270
[  187.510258][ T8147]  ? __pfx_task_work_run+0x10/0x10
[  187.510272][ T8147]  exit_to_user_mode_loop+0x1fa/0x730
[  187.510282][ T8147]  ? rcu_is_watching+0x15/0xb0
[  187.510293][ T8147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.510315][ T8147]  do_syscall_64+0x353/0x580
[  187.510324][ T8147]  ? trace_irq_disable+0x3b/0x140
[  187.510342][ T8147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.510354][ T8147] RIP: 0033:0x7f7021d9f317
[  187.510367][ T8147] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  187.510377][ T8147] RSP: 002b:00007ffcb66a4178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  187.510393][ T8147] RAX: 0000000000000000 RBX: 00007f7021e34474 RCX: 00007f7021d9f317
[  187.510401][ T8147] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb66a4230
[  187.510409][ T8147] RBP: 00007ffcb66a4230 R08: 00007ffcb66a5230 R09: 00000000ffffffff
[  187.510419][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb66a52c0
[  187.510426][ T8147] R13: 00007f7021e34474 R14: 000000000002dbdf R15: 00007ffcb66a5300
[  187.510443][ T8147]  </TASK>
[  187.510479][ T8147] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  187.707337][ T9696] loop2: detected capacity change from 0 to 256
[  188.028350][ T9712] loop3: detected capacity change from 0 to 4096
[  188.034506][ T9712] EXT4-fs (loop3): Test dummy encryption mode enabled
[  188.046178][ T9712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.080627][ T8147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.376169][ T5663] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  188.380666][ T9735] loop4: detected capacity change from 0 to 4096
[  188.412474][ T9735] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  188.427440][ T5602] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  188.544327][ T5663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.551690][ T5663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.558167][ T5663] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.565245][ T5663] usb 4-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00
[  188.568063][ T5663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.572623][ T5663] usb 4-1: config 0 descriptor??
[  188.771389][  T804] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  188.808775][ T9755] loop2: detected capacity change from 0 to 32768
[  188.813498][ T9755] (syz.2.1610,9755,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  188.817701][ T9755] (syz.2.1610,9755,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  188.833196][ T9755] JBD2: Ignoring recovery information on journal
[  188.866527][ T9755] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  188.941914][  T804] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  188.954519][ T5597] ocfs2: Unmounting device (7,2) on (node local)
[  188.956777][  T804] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  188.959457][  T804] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  188.964229][  T804] usb 5-1: config 0 interface 0 has no altsetting 0
[  188.972930][  T804] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  188.976015][  T804] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  188.979222][  T804] usb 5-1: config 0 interface 0 has no altsetting 0
[  188.983018][  T804] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  188.986048][  T804] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  188.992936][  T804] usb 5-1: config 0 interface 0 has no altsetting 0
[  188.997525][  T804] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.000195][  T804] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  189.006192][ T5663] hid-generic 0003:076D:C262.000C: hidraw0: USB HID v0.00 Joystick [HID 076d:c262] on usb-dummy_hcd.3-1/input0
[  189.009751][  T804] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.012917][  T804] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.017239][  T804] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  189.020593][  T804] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.023985][  T804] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.026693][  T804] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  189.029919][  T804] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.033612][  T804] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.037490][  T804] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  189.042220][  T804] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.045636][  T804] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.049078][  T804] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  189.053059][  T804] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.057450][  T804] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  189.060275][  T804] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  189.063877][  T804] usb 5-1: Product: syz
[  189.065280][  T804] usb 5-1: Manufacturer: syz
[  189.066661][  T804] usb 5-1: SerialNumber: syz
[  189.070058][  T804] usb 5-1: config 0 descriptor??
[  189.083419][  T804] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  189.137913][ T9759] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  189.154834][ T9759] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1611: Invalid block bitmap block 0 in block_group 0
[  189.161236][ T9759] loop2: lost filesystem error report for type 5 error -117
[  189.161444][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  189.165970][    C0] EXT4-fs (loop2): initial error at time 1787568616: ext4_read_block_bitmap_nowait:483
[  189.169439][    C0] EXT4-fs (loop2): last error at time 1787568616: ext4_read_block_bitmap_nowait:483
[  189.175383][ T9759] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  189.178263][ T9759] loop2: lost filesystem error report for type 5 error -117
[  189.178521][ T9759] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.1611: attempt to clear invalid blocks 983261 len 1
[  189.185298][ T9759] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  189.185559][ T9759] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1611: Invalid inode table block 0 in block_group 0
[  189.196756][ T9759] loop2: lost filesystem error report for type 5 error -117
[  189.197067][ T9759] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  189.202326][ T9759] loop2: lost filesystem error report for type 5 error -117
[  189.202569][ T9759] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  189.207553][ T9759] loop2: lost filesystem error report for type 5 error -117
[  189.207689][  T804] usb 4-1: USB disconnect, device number 12
[  189.207776][ T9759] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1611: Invalid inode table block 0 in block_group 0
[  189.218317][ T9759] loop2: lost filesystem error report for type 5 error -117
[  189.221227][ T9759] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  189.229279][ T9759] loop2: lost filesystem error report for type 5 error -117
[  189.229500][ T9759] EXT4-fs error (device loop2): ext4_truncate:4691: inode #11: comm syz.2.1611: mark_inode_dirty error
[  189.236883][ T9759] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  189.237420][ T9759] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  189.244612][ T9759] loop2: lost filesystem error report for type 5 error -117
[  189.244928][ T9759] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1611: Invalid inode table block 0 in block_group 0
[  189.250979][ T9759] loop2: lost filesystem error report for type 5 error -117
[  189.251957][ T9759] EXT4-fs (loop2): 1 truncate cleaned up
[  189.260810][ T9759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.279645][ T5663] usb 5-1: USB disconnect, device number 9
[  189.286662][ T5663] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  189.288310][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.546157][ T9770] set_capacity_and_notify: 1 callbacks suppressed
[  189.546166][ T9770] loop2: detected capacity change from 0 to 128
[  189.567360][ T9770] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  189.571250][ T9770] ext4 filesystem being mounted at /494/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  189.578685][ T9770] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes
[  189.598854][ T5597] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  189.697479][ T9778] binder_alloc: 9777: pid 9777 spamming oneway? 1 buffers allocated for a total size of 4096
[  189.709382][ T9778] binder_alloc: 9777: pid 9777 spamming oneway? 2 buffers allocated for a total size of 5120
[  189.924888][ T9792] batadv_slave_1: entered promiscuous mode
[  189.927672][ T9791] batadv_slave_1: left promiscuous mode
[  190.081493][ T5663] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  190.246602][ T5663] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  190.255960][ T5663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.258431][ T5663] usb 5-1: Product: syz
[  190.259697][ T5663] usb 5-1: Manufacturer: syz
[  190.263620][ T5709] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  190.268056][ T5663] usb 5-1: SerialNumber: syz
[  190.279088][ T5663] usb 5-1: config 0 descriptor??
[  190.286665][ T5663] ch341 5-1:0.0: ch341-uart converter detected
[  190.453281][ T5709] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  190.456508][ T5709] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  190.459149][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.465583][ T9797] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  190.469393][ T5709] opticon 4-1:1.0: opticon converter detected
[  190.478120][ T5709] usb 4-1: opticon converter now attached to ttyUSB1
[  190.661384][  T804] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  190.688958][ T5663] usb 5-1: failed to send control message: -71
[  190.690862][ T5663] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  190.695385][ T5663] usb 5-1: USB disconnect, device number 10
[  190.698122][ T5663] ch341 5-1:0.0: device disconnected
[  190.822836][  T804] usb 3-1: Using ep0 maxpacket: 8
[  190.825989][  T804] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  190.828522][  T804] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  190.831601][  T804] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  190.834566][  T804] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  190.837545][  T804] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  190.841449][  T804] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  190.844234][  T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.051723][  T804] usb 3-1: GET_CAPABILITIES returned 0
[  191.053567][  T804] usbtmc 3-1:16.0: can't read capabilities
[  191.216955][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'.
[  191.265882][   T10] usb 3-1: USB disconnect, device number 32
[  191.331601][ T9823] overlay: Unknown parameter 'subj_role'
[  191.671526][ T5680] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  191.829109][ T5680] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  191.834285][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.860420][ T9835] loop2: detected capacity change from 0 to 1024
[  191.870554][ T5680] usb 5-1: selecting invalid altsetting 3
[  191.874034][ T9835] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  191.879877][ T5680] comedi comedi5: could not set alternate setting 3 in high speed
[  191.886011][ T9835] EXT4-fs (loop2): group descriptors corrupted!
[  191.886777][ T5680] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  191.910229][ T5680] usbduxsigma 5-1:128.0: probe with driver usbduxsigma failed with error -22
[  192.060711][ T5680] usb 5-1: USB disconnect, device number 11
[  192.061609][ T9840] loop2: detected capacity change from 0 to 128
[  192.067547][ T9840] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  192.078255][ T9840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  192.571628][ T5663] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  192.734117][ T5663] usb 3-1: not running at top speed; connect to a high speed hub
[  192.744397][ T5663] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  192.747418][ T9857] openvswitch: netlink: IP tunnel dst address not specified
[  192.750955][ T5663] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64
[  192.759740][ T5663] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  192.764296][ T5663] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  192.773139][ T5663] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  192.777343][ T5663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.781645][ T5663] usb 3-1: Product: syz
[  192.790809][ T5663] usb 3-1: Manufacturer: syz
[  192.794082][ T5663] usb 3-1: SerialNumber: syz
[  192.805300][ T9850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  192.812009][ T5663] sisusb 3-1:1.0: Invalid USB2VGA device
[  192.813883][ T5663] sisusb 3-1:1.0: probe with driver sisusb failed with error -22
[  193.015955][ T9866] loop4: detected capacity change from 0 to 256
[  193.023206][   T10] usb 4-1: USB disconnect, device number 13
[  193.057153][   T10] opticon ttyUSB1: opticon converter now disconnected from ttyUSB1
[  193.061138][ T6054] usb 3-1: USB disconnect, device number 33
[  193.067243][   T10] opticon 4-1:1.0: device disconnected
[  193.452296][ T3159] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  193.631970][ T3159] usb 5-1: Using ep0 maxpacket: 8
[  193.637918][ T3159] usb 5-1: unable to get BOS descriptor or descriptor too short
[  193.648807][ T3159] usb 5-1: config 2 has an invalid interface number: 99 but max is 0
[  193.656478][ T3159] usb 5-1: config 2 has no interface number 0
[  193.659324][ T3159] usb 5-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  193.663828][ T3159] usb 5-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  193.667223][ T3159] usb 5-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0
[  193.670241][ T3159] usb 5-1: config 2 interface 99 has no altsetting 0
[  193.677898][ T3159] usb 5-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3
[  193.683652][ T3159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.687023][ T3159] usb 5-1: Product: syz
[  193.688542][ T3159] usb 5-1: Manufacturer: syz
[  193.690307][ T3159] usb 5-1: SerialNumber: syz
[  193.911402][ T5709] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  193.914478][ T3159] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.99/input/input21
[  193.928786][    C1] xpad 5-1:2.99: xpad_irq_in - usb_submit_urb failed with result -1
[  193.938525][ T3159] usb 5-1: USB disconnect, device number 12
[  193.938641][    C1] xpad 5-1:2.99: xpad_irq_in - usb_submit_urb failed with result -19
[  194.061434][ T5709] usb 3-1: Using ep0 maxpacket: 8
[  194.066509][ T5709] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  194.069379][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.071872][ T5709] usb 3-1: Product: syz
[  194.073120][ T5709] usb 3-1: Manufacturer: syz
[  194.074568][ T5709] usb 3-1: SerialNumber: syz
[  194.077468][ T5709] usb 3-1: config 0 descriptor??
[  194.082160][ T5709] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  194.505004][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  194.507567][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  196.155380][ T5709] gspca_sonixj: reg_w1 err -71
[  196.191858][ T5709] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  196.226509][ T9917] loop4: detected capacity change from 0 to 512
[  196.228996][ T5709] usb 3-1: USB disconnect, device number 34
[  196.264619][ T9917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.268460][ T9917] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.284746][ T9917] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  196.293381][ T9917] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[  196.301132][ T9917] EXT4-fs (loop4): This should not happen!! Data will be lost
[  196.301132][ T9917] 
[  196.304331][ T9917] EXT4-fs (loop4): Total free blocks count 0
[  196.306267][ T9917] EXT4-fs (loop4): Free/Dirty block details
[  196.308202][ T9917] EXT4-fs (loop4): free_blocks=65280
[  196.311480][ T9917] EXT4-fs (loop4): dirty_blocks=16
[  196.313305][ T9917] EXT4-fs (loop4): Block reservation details
[  196.315536][ T9917] EXT4-fs (loop4): i_reserved_data_blocks=16
[  196.461189][ T8418] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  196.469277][ T8418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.641634][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'.
[  196.646348][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'.
[  196.979081][ T9960] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1695'.
[  197.106034][ T9968] loop2: detected capacity change from 0 to 1024
[  197.110867][ T9968] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  197.126406][ T9968] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  197.134836][ T9968] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  197.137465][ T9968] EXT4-fs (loop2): orphan cleanup on readonly fs
[  197.139934][ T9968] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.1699: Inode bitmap for bg 0 marked uninitialized
[  197.145267][ T9968] loop2: lost filesystem error report for type 5 error -117
[  197.146324][ T9968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  197.153427][ T9959] loop4: detected capacity change from 0 to 32768
[  197.156336][ T9959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1694 (9959)
[  197.165169][ T9959] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.168254][ T9959] BTRFS info (device loop4): using sha256 checksum algorithm
[  197.193913][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.222507][ T9959] BTRFS info (device loop4): enabling ssd optimizations
[  197.225065][ T9959] BTRFS info (device loop4): turning on async discard
[  197.227737][ T9959] BTRFS info (device loop4): enabling free space tree
[  197.279451][ T8418] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.549649][ T9996] loop3: detected capacity change from 0 to 512
[  197.570839][ T9996] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1704: inode has both inline data and extents flags
[  197.581908][ T9996] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  197.582117][ T9996] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1704: couldn't read orphan inode 15 (err -117)
[  197.591376][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  197.593599][    C1] EXT4-fs (loop3): initial error at time 1787568625: ext4_orphan_get:1399: inode 15
[  197.596392][    C1] EXT4-fs (loop3): last error at time 1787568625: ext4_orphan_get:1399: inode 15
[  197.601083][ T9996] loop3: lost filesystem error report for type 5 error -117
[  197.602542][ T9996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.653637][ T9999] loop4: detected capacity change from 0 to 256
[  197.797056][ T8147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.543053][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  198.704141][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  198.714478][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  198.717451][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  198.720361][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  198.730991][    T9] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  198.736436][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.738990][    T9] usb 4-1: Product: syz
[  198.740307][    T9] usb 4-1: Manufacturer: syz
[  198.742920][    T9] usb 4-1: SerialNumber: syz
[  198.748445][    T9] usb 4-1: config 0 descriptor??
[  198.755883][    T9] ums-isd200 4-1:0.0: USB Mass Storage device detected
[  198.933178][ T5680] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  198.973398][    T9] scsi host6: usb-storage 4-1:0.0
[  199.102262][ T5680] usb 5-1: Using ep0 maxpacket: 8
[  199.115080][ T5680] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  199.117751][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.120127][ T5680] usb 5-1: Product: syz
[  199.131743][ T5680] usb 5-1: Manufacturer: syz
[  199.133366][ T5680] usb 5-1: SerialNumber: syz
[  199.136495][ T5680] usb 5-1: config 0 descriptor??
[  199.178941][ T5663] usb 4-1: USB disconnect, device number 14
[  199.298515][T10021] loop2: detected capacity change from 0 to 2048
[  199.306138][T10021] NILFS (loop2): invalid segment: Checksum error in segment payload
[  199.308654][T10021] NILFS (loop2): trying rollback from an earlier position
[  199.310821][T10021] NILFS (loop2): too large filesystem blocksize: 2 ^ 347668480 KiB
[  199.317119][T10021] NILFS (loop2): error -22 while searching super root
[  199.349276][ T5680] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  199.677536][T10033] loop2: detected capacity change from 0 to 32768
[  199.692810][T10033] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  199.737272][   T33] audit: type=1800 audit(1787568627.553:3507): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1720" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  199.823976][ T5597] ocfs2: Unmounting device (7,2) on (node local)
[  200.056640][T10041] loop2: detected capacity change from 0 to 40427
[  200.059741][T10041] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  200.062174][T10041] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  200.065607][T10041] F2FS-fs (loop2): invalid crc value
[  200.100417][T10041] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  200.108858][T10041] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  200.111097][T10041] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  200.486295][ T5680] usb write operation failed. (-71)
[  200.492395][ T5680] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  200.495766][ T5680] dvbdev: DVB: registering new adapter (Terratec H7)
[  200.497985][ T5680] usb 5-1: media controller created
[  200.500401][ T5680] usb read operation failed. (-71)
[  200.502620][ T5680] usb write operation failed. (-71)
[  200.506284][ T5680] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  200.510778][ T5680] usb 5-1: USB disconnect, device number 13
[  200.876337][T10055] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  200.880202][T10055] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  200.929869][T10057] loop3: detected capacity change from 0 to 2048
[  200.940152][T10057] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  200.955393][ T5951] udevd[5951]: incorrect nilfs2 checksum on /dev/loop3
[  200.979422][ T5951] udevd[5951]: incorrect nilfs2 checksum on /dev/loop3
[  200.987759][T10058] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.283001][T10071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1731'.
[  201.286841][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1731'.
[  201.601138][T10083] IPv6: addrconf: prefix option has invalid lifetime
[  201.872682][T10087] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  202.343367][T10104] netlink: 592 bytes leftover after parsing attributes in process `syz.4.1743'.
[  202.573035][T10108] loop2: detected capacity change from 0 to 1024
[  202.714672][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'.
[  202.848062][T10128] loop2: detected capacity change from 0 to 2048
[  202.858201][T10128] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  202.869887][T10128] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  202.875767][T10128] UDF-fs: Scanning with blocksize 512 failed
[  202.885013][T10128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.030460][T10132] sock: sock_timestamping_bind_phc: sock not bind to device
[  203.087125][T10134] loop4: detected capacity change from 0 to 512
[  203.094823][T10134] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  203.110965][T10134] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0082]
[  203.143406][T10134] EXT4-fs (loop4): 1 truncate cleaned up
[  203.146553][T10134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.187882][ T8418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.240696][T10139] loop4: detected capacity change from 0 to 512
[  203.247816][T10139] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  203.259714][T10139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  203.263576][T10139] System zones: 1-12
[  203.268812][T10139] EXT4-fs (loop4): 1 truncate cleaned up
[  203.277520][T10139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.373284][ T8418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.567719][T10144] loop4: detected capacity change from 0 to 32768
[  203.571258][T10144] BTRFS error: failed to parse compression option 'lzo:nobarrier'
[  203.602872][T10146] xt_hashlimit: size too large, truncated to 1048576
[  203.924369][T10155] loop4: detected capacity change from 0 to 256
[  203.968681][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1768'.
[  203.978117][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1768'.
[  204.023341][T10159] loop4: detected capacity change from 0 to 128
[  204.034818][T10159] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  204.045833][T10159] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  204.122074][T10163] netlink: 'syz.2.1771': attribute type 4 has an invalid length.
[  204.128341][T10163] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1771'.
[  204.195740][T10159] FAT-fs (loop4): error, invalid access to FAT (entry 0x0f0003ff)
[  204.203944][T10159] FAT-fs (loop4): Filesystem has been set read-only
[  204.216784][T10159] FAT-fs (loop4): error, invalid access to FAT (entry 0x0f0003ff)
[  204.259348][ T8418] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  204.312548][T10169] loop4: detected capacity change from 0 to 256
[  204.335764][T10171] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  204.340445][T10171] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  204.625563][T10186] loop4: detected capacity change from 0 to 4096
[  204.658009][T10187] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.674899][T10186] NILFS error (device loop4): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  204.686177][T10186] Remounting filesystem read-only
[  204.993298][T10195] loop2: detected capacity change from 0 to 32768
[  205.005929][T10195] JBD2: Ignoring recovery information on journal
[  205.044120][T10195] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  205.143584][T10195] 
[  205.144489][T10195] ======================================================
[  205.146806][T10195] WARNING: possible circular locking dependency detected
[  205.149079][T10195] syzkaller #0 Not tainted
[  205.150498][T10195] ------------------------------------------------------
[  205.152564][T10195] syz.2.1786/10195 is trying to acquire lock:
[  205.154355][T10195] ffff8881a985f658 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x360
[  205.157770][T10195] 
[  205.157770][T10195] but task is already holding lock:
[  205.159911][T10195] ffff8881a985f6e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x360
[  205.163077][T10195] 
[  205.163077][T10195] which lock already depends on the new lock.
[  205.163077][T10195] 
[  205.166181][T10195] 
[  205.166181][T10195] the existing dependency chain (in reverse order) is:
[  205.168810][T10195] 
[  205.168810][T10195] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  205.171114][T10195]        down_read+0x4a/0x330
[  205.172545][T10195]        ocfs2_init_acl+0x2fd/0x7e0
[  205.174263][T10195]        ocfs2_mknod+0x166a/0x2240
[  205.175878][T10195]        ocfs2_create+0x195/0x460
[  205.176080][T10209] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1793'.
[  205.177351][T10195]        path_openat+0x133a/0x3830
[  205.177365][T10195]        do_file_open+0x23e/0x4a0
[  205.177372][T10195]        do_sys_openat2+0x115/0x200
[  205.177385][T10195]        __x64_sys_openat+0x138/0x170
[  205.186515][T10195]        do_syscall_64+0x174/0x580
[  205.188156][T10195]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.190311][T10195] 
[  205.190311][T10195] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  205.193327][T10195]        down_read+0x4a/0x330
[  205.195094][T10195]        ocfs2_start_trans+0x3ab/0x700
[  205.197247][T10195]        ocfs2_mknod+0x116a/0x2240
[  205.199318][T10195]        ocfs2_create+0x195/0x460
[  205.201275][T10195]        path_openat+0x133a/0x3830
[  205.203374][T10195]        do_file_open+0x23e/0x4a0
[  205.205393][T10195]        do_sys_openat2+0x115/0x200
[  205.207491][T10195]        __x64_sys_openat+0x138/0x170
[  205.209648][T10195]        do_syscall_64+0x174/0x580
[  205.211557][T10195]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.213484][T10195] 
[  205.213484][T10195] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  205.215824][T10195]        lock_release+0x199/0x3c0
[  205.217611][T10195]        up_write+0x2d/0x4a0
[  205.219232][T10195]        ocfs2_free_alloc_context+0x97/0x1a0
[  205.221315][T10195]        ocfs2_write_begin_nolock+0x4164/0x41f0
[  205.223293][T10195]        ocfs2_dio_wr_get_block+0xbab/0x17c0
[  205.225081][T10195]        __blockdev_direct_IO+0x1590/0x3380
[  205.226929][T10195]        ocfs2_direct_IO+0x249/0x2c0
[  205.228666][T10195]        generic_file_direct_write+0x1d0/0x3f0
[  205.230833][T10195]        __generic_file_write_iter+0x11d/0x230
[  205.232785][T10195]        ocfs2_file_write_iter+0x1706/0x1f10
[  205.234811][T10195]        do_iter_readv_writev+0x612/0x8c0
[  205.237120][T10195]        vfs_writev+0x343/0x990
[  205.238691][T10195]        __se_sys_pwritev2+0x177/0x2a0
[  205.240581][T10195]        do_syscall_64+0x174/0x580
[  205.242267][T10195]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.244205][T10195] 
[  205.244205][T10195] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  205.247262][T10195]        __lock_acquire+0x1520/0x2cf0
[  205.249311][T10195]        lock_acquire+0x106/0x350
[  205.251235][T10195]        down_write+0x96/0x200
[  205.253074][T10195]        ocfs2_try_remove_refcount_tree+0xb6/0x360
[  205.255576][T10195]        ocfs2_truncate_file+0xe90/0x14b0
[  205.257745][T10195]        ocfs2_setattr+0x1641/0x1d10
[  205.259769][T10195]        notify_change+0xbba/0xea0
[  205.261689][T10195]        do_truncate+0x1c2/0x250
[  205.263576][T10195]        path_openat+0x2fed/0x3830
[  205.265506][T10195]        do_file_open+0x23e/0x4a0
[  205.267415][T10195]        do_sys_openat2+0x115/0x200
[  205.269407][T10195]        __x64_sys_open+0x11e/0x150
[  205.271411][T10195]        do_syscall_64+0x174/0x580
[  205.273514][T10195]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.276005][T10195] 
[  205.276005][T10195] other info that might help us debug this:
[  205.276005][T10195] 
[  205.279929][T10195] Chain exists of:
[  205.279929][T10195]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  205.279929][T10195] 
[  205.285502][T10195]  Possible unsafe locking scenario:
[  205.285502][T10195] 
[  205.287673][T10195]        CPU0                    CPU1
[  205.289273][T10195]        ----                    ----
[  205.291292][T10195]   lock(&oi->ip_xattr_sem);
[  205.293073][T10195]                                lock(&journal->j_trans_barrier);
[  205.295987][T10195]                                lock(&oi->ip_xattr_sem);
[  205.298700][T10195]   lock(&ocfs2_file_ip_alloc_sem_key);
[  205.300872][T10195] 
[  205.300872][T10195]  *** DEADLOCK ***
[  205.300872][T10195] 
[  205.303894][T10195] 3 locks held by syz.2.1786/10195:
[  205.305620][T10195]  #0: ffff8881a8b22450 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  205.308739][T10195]  #1: ffff8881a985f9a0 (&sb->s_type->i_mutex_key#31){++++}-{4:4}, at: do_truncate+0x18f/0x250
[  205.312711][T10195]  #2: ffff8881a985f6e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x360
[  205.316920][T10195] 
[  205.316920][T10195] stack backtrace:
[  205.319212][T10195] CPU: 1 UID: 0 PID: 10195 Comm: syz.2.1786 Not tainted syzkaller #0 PREEMPT(full) 
[  205.319230][T10195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.319240][T10195] Call Trace:
[  205.319247][T10195]  <TASK>
[  205.319255][T10195]  dump_stack_lvl+0xe8/0x150
[  205.319277][T10195]  print_circular_bug+0x2e1/0x300
[  205.319300][T10195]  check_noncircular+0x12e/0x150
[  205.319322][T10195]  __lock_acquire+0x1520/0x2cf0
[  205.319347][T10195]  ? ocfs2_try_remove_refcount_tree+0xb6/0x360
[  205.319366][T10195]  lock_acquire+0x106/0x350
[  205.319384][T10195]  ? ocfs2_try_remove_refcount_tree+0xb6/0x360
[  205.319423][T10195]  down_write+0x96/0x200
[  205.319440][T10195]  ? ocfs2_try_remove_refcount_tree+0xb6/0x360
[  205.319459][T10195]  ? __pfx_down_write+0x10/0x10
[  205.319484][T10195]  ocfs2_try_remove_refcount_tree+0xb6/0x360
[  205.319505][T10195]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  205.319524][T10195]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  205.319539][T10195]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  205.319557][T10195]  ocfs2_truncate_file+0xe90/0x14b0
[  205.319574][T10195]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  205.319588][T10195]  ? do_raw_spin_lock+0x12b/0x2f0
[  205.319604][T10195]  ? do_raw_spin_unlock+0x4d/0x210
[  205.319616][T10195]  ? _raw_spin_unlock+0x28/0x50
[  205.319634][T10195]  ? jbd2_journal_begin_ordered_truncate+0xb4/0x150
[  205.319657][T10195]  ocfs2_setattr+0x1641/0x1d10
[  205.319675][T10195]  ? __pfx_ocfs2_setattr+0x10/0x10
[  205.319693][T10195]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  205.319709][T10195]  ? lockdep_hardirqs_on+0x7a/0x110
[  205.319723][T10195]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[  205.319741][T10195]  ? seqcount_lockdep_reader_access+0xea/0x100
[  205.319756][T10195]  ? ns_to_timespec64+0x21/0xb0
[  205.319773][T10195]  ? ktime_get_coarse_real_ts64_mg+0x17c/0x1e0
[  205.319790][T10195]  ? current_time+0x22f/0x380
[  205.319804][T10195]  ? evm_inode_setattr+0x1ba/0x7c0
[  205.319821][T10195]  ? __pfx_current_time+0x10/0x10
[  205.319837][T10195]  ? try_break_deleg+0x5b/0x180
[  205.319852][T10195]  ? __pfx_ocfs2_setattr+0x10/0x10
[  205.319867][T10195]  notify_change+0xbba/0xea0
[  205.319887][T10195]  do_truncate+0x1c2/0x250
[  205.319902][T10195]  ? __pfx_do_truncate+0x10/0x10
[  205.319916][T10195]  ? apparmor_file_truncate+0x39f/0x470
[  205.319940][T10195]  path_openat+0x2fed/0x3830
[  205.319967][T10195]  do_file_open+0x23e/0x4a0
[  205.319980][T10195]  ? __pfx_do_file_open+0x10/0x10
[  205.319994][T10195]  ? _raw_spin_unlock+0x28/0x50
[  205.320012][T10195]  ? alloc_fd+0x651/0x6c0
[  205.320032][T10195]  do_sys_openat2+0x115/0x200
[  205.320050][T10195]  ? __se_sys_futex+0x3a8/0x450
[  205.320070][T10195]  ? __pfx_do_sys_openat2+0x10/0x10
[  205.320090][T10195]  ? ksys_write+0x242/0x270
[  205.320104][T10195]  ? rcu_is_watching+0x15/0xb0
[  205.320123][T10195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.320137][T10195]  __x64_sys_open+0x11e/0x150
[  205.320193][T10195]  do_syscall_64+0x174/0x580
[  205.320208][T10195]  ? trace_irq_disable+0x3b/0x140
[  205.320226][T10195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.320239][T10195] RIP: 0033:0x7fc452f9e0d9
[  205.320253][T10195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.320265][T10195] RSP: 002b:00007fc453e83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  205.320281][T10195] RAX: ffffffffffffffda RBX: 00007fc453225fa0 RCX: 00007fc452f9e0d9
[  205.320292][T10195] RDX: 0000000000000006 RSI: 000000000014927e RDI: 00002000000000c0
[  205.320301][T10195] RBP: 00007fc453035024 R08: 0000000000000000 R09: 0000000000000000
[  205.320309][T10195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.320317][T10195] R13: 00007fc453226038 R14: 00007fc453225fa0 R15: 00007ffd9907d448
[  205.320332][T10195]  </TASK>
[  205.529815][ T5597] ocfs2: Unmounting device (7,2) on (node local)
