last executing test programs:

55.878424064s ago: executing program 1 (id=143):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil)

55.223563274s ago: executing program 1 (id=148):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000004d80)=""/4102, 0x1006}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0x1}], 0x1}, 0x5)

55.024288697s ago: executing program 1 (id=150):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)="b164", 0x2}], 0x1}}], 0x1, 0x4000c000)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd)

54.943770808s ago: executing program 1 (id=151):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000001cc0)='.\x00', 0x1aca4b8, &(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="29ab3b30df7d75af6a66b0358c15235889ce2a0584d8b2ef4a21a27c9af13b6657ff207e1c5d58aea9c00a00ca049d3d367df0c23e00000000000000000639e695cecd9d0c27f3bd893e78c469110da7a3f6e2a787693f16be9dccc8aa22db6946d10cc6f04f5ca3a1a1d4a66bf1109fb12822f5e2a37bdd6dfdc5a2a86a95ba2a86dc0f5b5567f70201d8aa78820a5dfb853c8562ce313972cf4af2e04803755d0068705559237f9a063c2c24ed23c25b8f4aab53efd1c9ced5045e9b88cfe32f33119a4bc01d3d73afd037dedde8aa4600c93c71e78ab732db07cba921af5f6b", @ANYRESHEX=r0], 0xb, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000080)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

54.438991156s ago: executing program 1 (id=152):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r2, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r3, 0x1000, &(0x7f0000001540)=""/4096})

53.845694245s ago: executing program 1 (id=155):
setuid(0xee01)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)

53.368636403s ago: executing program 32 (id=155):
setuid(0xee01)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)

5.475338966s ago: executing program 2 (id=413):
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf255100000008000300", @ANYBLOB="05000a0000000000f0ff0600080211000002001cdb6c94efb5b5d27dbba5000a0006000802"], 0x48}, 0x1, 0x0, 0x0, 0x2000050}, 0x40)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2)

4.56861224s ago: executing program 2 (id=416):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0xfffffffa, 0x4)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0)

4.444065842s ago: executing program 2 (id=418):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1)
ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000000)=0x1000)

3.766601562s ago: executing program 2 (id=422):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000100)={[{@discard}, {@skip_balance}, {}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@max_inline={'max_inline', 0x3d, [0x33, 0x38, 0x67, 0x6b, 0x32, 0x31]}}]}, 0x3, 0x510e, &(0x7f00000196c0)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r0, 0x0, 0x0, 0x1001f0)
fallocate(r0, 0x3, 0x9, 0x10000)
copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0x18000, 0x18000, 0x0)

2.646555259s ago: executing program 3 (id=428):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
r1 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_type(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000a81"], 0x0, 0x0, 0x0, 0x0})

2.265824665s ago: executing program 2 (id=431):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x9764, &(0x7f00000097c0)="$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")
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000300)='./file0/../file0\x00')

1.714696243s ago: executing program 0 (id=433):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000094000040"])

1.655360834s ago: executing program 4 (id=434):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r0, 0x4}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})

1.536380156s ago: executing program 4 (id=435):
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
r3 = fanotify_init(0x0, 0x0)
fanotify_mark(r3, 0x1, 0x4000102b, r2, 0x0)
vmsplice(r0, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0)

1.447357247s ago: executing program 0 (id=436):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x8}}}]}]}]}}]}, 0x50}}, 0x0)

1.332147489s ago: executing program 4 (id=437):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x1000000, 0x1000, 0x5, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000340)=0x100, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x1, r2, 0x39, r0}, 0x10)

1.213482601s ago: executing program 0 (id=438):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x7f, 0x1f, 0x0, 0x83})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r0, 0x0, 0x43)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)

965.809785ms ago: executing program 0 (id=439):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000380)={0x300a, r0}, 0x0)
landlock_restrict_self(r1, 0x0)
symlinkat(&(0x7f0000000000)='./file1/file4/file7/file6\x00', r0, &(0x7f0000000200)='./file0\x00')
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

874.762816ms ago: executing program 2 (id=440):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)={0x2}, 0x8)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', '', [], 0xa, "be8b429ae8"}, 0x9)
sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20001)

832.912747ms ago: executing program 3 (id=441):
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f0000000400)=ANY=[], 0xffdd)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x6, 0x2)

808.499557ms ago: executing program 0 (id=442):
symlink(0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb4894826645f881000000080600060800060400"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

708.783089ms ago: executing program 3 (id=443):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x4}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000980)=0x9, 0x4)
recvmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/14, 0xe}, 0x4}], 0x1, 0x103, 0x0)

642.51834ms ago: executing program 4 (id=444):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="de6a84400f005f00440f20c0350a000000440f22c0c442c9a73b33aa00400000460f00d40f01df0f20d835080000000f22d80f0164120066b804000f00d8", 0x3e}], 0x1, 0x63, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

640.07433ms ago: executing program 3 (id=445):
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x473a, 0x74ee, 0x0, 0x0, 0x0)

471.631403ms ago: executing program 3 (id=446):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x54, r1, 0x1, 0x14, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

430.180093ms ago: executing program 0 (id=454):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
socket(0xa, 0x3, 0x3a)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00', @ANYBLOB="010000000000000000000100000044000180060001000a00000008"], 0x58}}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16=r1], 0x0)

333.108545ms ago: executing program 3 (id=447):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@commit={'commit', 0x3d, 0x4}}, {@heartbeat_none}, {@localflocks}, {@intr}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x5}}, {@noacl}, {@resv_level={'resv_level', 0x3d, 0x1}}, {@journal_async_commit}, {@commit={'commit', 0x3d, 0xf9}}]}, 0x9, 0x442b, &(0x7f0000004480)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xfffe82)
write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003)

305.578835ms ago: executing program 4 (id=448):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r0, 0x0, 0x81, 0x80001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
fallocate(r1, 0x8, 0x0, 0x8000)

0s ago: executing program 4 (id=449):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})

kernel console output (not intermixed with test programs):

p: Unknown subsys name 'net'
[   62.650312][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   64.019681][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.421814][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.430327][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.438997][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.447144][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.455266][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.462992][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.465087][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.471486][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   65.483039][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   65.484794][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.493503][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.506327][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.506540][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   65.515386][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.521492][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.529971][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   65.542009][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   65.542217][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.551540][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.564486][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   65.573789][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.583976][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   65.593430][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   65.600831][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   65.919411][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   66.063014][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   66.131498][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.139228][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.148733][ T5785] bridge_slave_0: entered allmulticast mode
[   66.155727][ T5785] bridge_slave_0: entered promiscuous mode
[   66.170450][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.177916][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.185179][ T5785] bridge_slave_1: entered allmulticast mode
[   66.191840][ T5785] bridge_slave_1: entered promiscuous mode
[   66.256587][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   66.290146][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.303972][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.366667][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.375064][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.382226][ T5787] bridge_slave_0: entered allmulticast mode
[   66.389966][ T5787] bridge_slave_0: entered promiscuous mode
[   66.407234][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   66.420474][ T5785] team0: Port device team_slave_0 added
[   66.435216][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.442323][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.450162][ T5787] bridge_slave_1: entered allmulticast mode
[   66.457468][ T5787] bridge_slave_1: entered promiscuous mode
[   66.482720][ T5785] team0: Port device team_slave_1 added
[   66.527698][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.574109][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.589773][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.597137][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.623445][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.635346][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.642467][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.649979][ T5784] bridge_slave_0: entered allmulticast mode
[   66.656796][ T5784] bridge_slave_0: entered promiscuous mode
[   66.664576][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.671701][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.679004][ T5784] bridge_slave_1: entered allmulticast mode
[   66.686875][ T5784] bridge_slave_1: entered promiscuous mode
[   66.710821][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.717890][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.744078][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.817996][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.825227][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.832359][ T5786] bridge_slave_0: entered allmulticast mode
[   66.840016][ T5786] bridge_slave_0: entered promiscuous mode
[   66.849680][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.861940][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.874566][ T5787] team0: Port device team_slave_0 added
[   66.883719][ T5787] team0: Port device team_slave_1 added
[   66.889693][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.897425][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.904724][ T5786] bridge_slave_1: entered allmulticast mode
[   66.911399][ T5786] bridge_slave_1: entered promiscuous mode
[   67.001727][ T5784] team0: Port device team_slave_0 added
[   67.012870][ T5784] team0: Port device team_slave_1 added
[   67.031391][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.038996][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.065289][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.079251][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.091260][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.113305][ T5785] hsr_slave_0: entered promiscuous mode
[   67.119827][ T5785] hsr_slave_1: entered promiscuous mode
[   67.127296][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.134465][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.160402][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.205890][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.212858][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.238854][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.251900][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.258977][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.284999][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.299673][ T5786] team0: Port device team_slave_0 added
[   67.340824][ T5786] team0: Port device team_slave_1 added
[   67.402882][ T5787] hsr_slave_0: entered promiscuous mode
[   67.410022][ T5787] hsr_slave_1: entered promiscuous mode
[   67.419020][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.426933][ T5787] Cannot create hsr debugfs directory
[   67.445798][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.452764][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.479305][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.521616][ T5784] hsr_slave_0: entered promiscuous mode
[   67.527972][ T5784] hsr_slave_1: entered promiscuous mode
[   67.534511][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.542070][ T5784] Cannot create hsr debugfs directory
[   67.548721][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.555718][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.564295][ T5791] Bluetooth: hci2: command tx timeout
[   67.581713][   T50] Bluetooth: hci0: command tx timeout
[   67.583114][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.643510][ T5791] Bluetooth: hci3: command tx timeout
[   67.643941][   T50] Bluetooth: hci1: command tx timeout
[   67.712899][ T5786] hsr_slave_0: entered promiscuous mode
[   67.719669][ T5786] hsr_slave_1: entered promiscuous mode
[   67.727267][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.734905][ T5786] Cannot create hsr debugfs directory
[   67.990116][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.000774][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.031861][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.044166][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.120658][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.142257][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.161480][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.171592][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.246140][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.257115][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.267401][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.277299][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.377365][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.398298][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.408313][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.419247][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.431104][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.476956][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   68.516346][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.523822][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.540515][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.560383][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   68.592881][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.600324][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.624478][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.631592][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.665913][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.675914][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.683030][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.791727][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   68.834849][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.842020][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.870053][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.881572][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.888765][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.965458][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   69.000230][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.007407][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.048862][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.056080][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.220921][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.358372][ T5785] veth0_vlan: entered promiscuous mode
[   69.371121][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.388420][ T5785] veth1_vlan: entered promiscuous mode
[   69.454162][ T5785] veth0_macvtap: entered promiscuous mode
[   69.498307][ T5785] veth1_macvtap: entered promiscuous mode
[   69.514893][ T5787] veth0_vlan: entered promiscuous mode
[   69.529959][ T5787] veth1_vlan: entered promiscuous mode
[   69.543166][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.580011][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.594364][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.631164][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.644347][   T50] Bluetooth: hci0: command tx timeout
[   69.644372][ T5791] Bluetooth: hci2: command tx timeout
[   69.661651][ T5787] veth0_macvtap: entered promiscuous mode
[   69.678659][ T5787] veth1_macvtap: entered promiscuous mode
[   69.706027][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.715653][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.723657][   T50] Bluetooth: hci1: command tx timeout
[   69.725929][ T5791] Bluetooth: hci3: command tx timeout
[   69.730540][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.744627][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.772065][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.785637][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.797028][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.812570][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.824976][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.836250][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.862564][ T5786] veth0_vlan: entered promiscuous mode
[   69.872821][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.881646][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.892242][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.901821][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.947734][ T5786] veth1_vlan: entered promiscuous mode
[   69.966835][ T5784] veth0_vlan: entered promiscuous mode
[   69.984480][ T5784] veth1_vlan: entered promiscuous mode
[   70.125679][ T5784] veth0_macvtap: entered promiscuous mode
[   70.139220][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.150347][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.151458][ T5786] veth0_macvtap: entered promiscuous mode
[   70.192780][ T5784] veth1_macvtap: entered promiscuous mode
[   70.217493][ T5786] veth1_macvtap: entered promiscuous mode
[   70.253116][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.272082][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.274006][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.287418][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.327400][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.341800][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.356395][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.368194][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.389472][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.413175][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.433188][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.453186][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.453626][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.475349][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.486103][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.496220][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.507231][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.519292][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.555274][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.575130][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.585639][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.597010][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.609902][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.650118][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.672153][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.686463][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.703874][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.716622][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.729405][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.737905][ T5877] syz.0.1[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   70.763034][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.788981][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.813667][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.829317][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.855464][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.903139][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.927304][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.946800][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.963643][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.122110][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.150266][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.240325][ T5883] loop2: detected capacity change from 0 to 1024
[   71.257913][ T5883] =======================================================
[   71.257913][ T5883] WARNING: The mand mount option has been deprecated and
[   71.257913][ T5883]          and is ignored by this kernel. Remove the mand
[   71.257913][ T5883]          option from the mount to silence this warning.
[   71.257913][ T5883] =======================================================
[   71.336358][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.355926][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.411341][ T5883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.434716][ T5883] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.459270][ T5877] loop0: detected capacity change from 0 to 32768
[   71.466516][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.493169][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[   71.499028][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.501346][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[   71.521462][ T5877] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (5877)
[   71.637595][ T5877] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   71.660906][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.675569][ T5888] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.6: bg 0: block 393: padding at end of block bitmap is not set
[   71.696595][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.712619][ T5877] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   71.724648][ T5791] Bluetooth: hci0: command tx timeout
[   71.730545][ T5877] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   71.741509][ T5791] Bluetooth: hci2: command tx timeout
[   71.755706][ T5877] BTRFS info (device loop0): use zstd compression, level 3
[   71.763750][ T5877] BTRFS info (device loop0): using free space tree
[   71.785635][ T5888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 496 with error 117
[   71.802085][ T5888] EXT4-fs (loop2): This should not happen!! Data will be lost
[   71.802085][ T5888] 
[   71.804757][ T5791] Bluetooth: hci1: command tx timeout
[   71.812878][   T50] Bluetooth: hci3: command tx timeout
[   71.823820][ T5891] Bluetooth: MGMT ver 1.22
[   71.830353][ T5888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28
[   71.854374][ T5888] EXT4-fs (loop2): This should not happen!! Data will be lost
[   71.854374][ T5888] 
[   71.871849][ T5888] EXT4-fs (loop2): Total free blocks count 0
[   71.881971][ T5888] EXT4-fs (loop2): Free/Dirty block details
[   71.897884][ T5888] EXT4-fs (loop2): free_blocks=0
[   71.908017][ T5888] EXT4-fs (loop2): dirty_blocks=32
[   71.918403][ T5888] EXT4-fs (loop2): Block reservation details
[   72.021522][ T5877] BTRFS info (device loop0): enabling ssd optimizations
[   72.064031][ T5877] BTRFS info (device loop0): auto enabling async discard
[   72.188495][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   72.255090][   T27] audit: type=1800 audit(1752821743.692:2): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=260 res=0 errno=0
[   72.584584][ T5922] loop2: detected capacity change from 0 to 512
[   72.611514][ T5922] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   72.639488][ T5785] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   72.639882][ T5922] EXT4-fs (loop2): invalid journal inode
[   72.675911][ T5922] EXT4-fs (loop2): can't get journal size
[   72.730089][ T5922] EXT4-fs (loop2): 1 truncate cleaned up
[   72.746847][ T5922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.009360][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.282034][ T5930] loop3: detected capacity change from 0 to 256
[   73.339485][ T5930] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   73.358028][ T5930] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   73.421674][ T5930] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   73.618154][ T5930] exFAT-fs (loop3): invalid start cluster (2155896643)
[   73.817484][   T50] Bluetooth: hci2: command tx timeout
[   73.819701][ T5791] Bluetooth: hci0: command tx timeout
[   73.885243][ T5791] Bluetooth: hci1: command tx timeout
[   73.885258][   T50] Bluetooth: hci3: command tx timeout
[   74.463785][ T5826] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   74.663369][ T5826] usb 3-1: Using ep0 maxpacket: 8
[   74.694167][ T5826] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   74.702715][ T5826] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   74.733343][ T5826] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   74.743136][ T5826] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   74.761205][ T5826] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   74.777309][ T5826] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   74.786697][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.813132][ T5952] loop3: detected capacity change from 0 to 40427
[   74.831671][ T5952] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   74.840281][ T5952] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   74.871988][ T5952] F2FS-fs (loop3): Found nat_bits in checkpoint
[   74.952172][ T5952] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   74.962055][ T5952] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   75.023690][  T786] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   75.039452][ T5826] usb 3-1: usb_control_msg returned -32
[   75.046836][ T5826] usbtmc 3-1:16.0: can't read capabilities
[   75.125925][ T5968] syz.3.23: attempt to access beyond end of device
[   75.125925][ T5968] loop3: rw=0, sector=49152, nr_sectors = 8 limit=40427
[   75.215357][  T786] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   75.225664][  T786] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   75.260938][  T786] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   75.280386][  T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.289934][  T786] usb 2-1: Product: syz
[   75.298795][  T786] usb 2-1: Manufacturer: syz
[   75.305004][  T786] usb 2-1: SerialNumber: syz
[   75.334058][  T786] usb 2-1: config 0 descriptor??
[   75.340091][ T5963] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   75.357705][ T5963] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   75.582933][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.604635][ T5963] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   75.620758][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.629665][ T5963] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   75.693209][ T5975] netlink: 'syz.0.30': attribute type 16 has an invalid length.
[   75.714273][ T5975] netlink: 'syz.0.30': attribute type 17 has an invalid length.
[   75.782114][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.789418][ T5975] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.809887][   T28] usb 3-1: USB disconnect, device number 2
[   75.813248][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.823397][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.845650][ T5977] loop3: detected capacity change from 0 to 8192
[   75.911487][ T5977] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   75.929700][ T5977] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   75.961949][ T5977] REISERFS (device loop3): using ordered data mode
[   75.981365][ T5977] reiserfs: using flush barriers
[   76.012474][ T5977] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   76.030254][ T5977] REISERFS (device loop3): checking transaction log (loop3)
[   76.042594][  T786] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[   76.058057][ T5977] REISERFS (device loop3): Using r5 hash to sort names
[   76.068403][ T5977] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   76.265735][ T5980] loop0: detected capacity change from 0 to 2048
[   76.328773][ T5980]  loop0: p1 < > p3
[   76.346285][ T5980] loop0: p3 size 1711276032 extends beyond EOD, truncated
[   76.445769][  T786] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[   76.701736][ T5801] udevd[5801]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   76.710281][  T786] usb 2-1: USB disconnect, device number 2
[   76.713734][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   77.503615][ T6006] geneve2: entered promiscuous mode
[   77.523482][ T6006] geneve2: entered allmulticast mode
[   77.693400][ T5826] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   77.812147][ T6008] loop2: detected capacity change from 0 to 8192
[   77.896018][ T5826] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[   77.914451][ T5826] usb 2-1: config 0 has no interface number 0
[   77.926879][ T5826] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01
[   77.949301][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.965537][ T5826] usb 2-1: Product: syz
[   77.980224][ T5826] usb 2-1: Manufacturer: syz
[   77.990366][ T5826] usb 2-1: SerialNumber: syz
[   77.993003][ T6018] Bluetooth: hci0: load_link_keys: too big key_count value 26226
[   78.024838][ T5826] usb 2-1: config 0 descriptor??
[   78.037148][ T5826] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[   78.790515][ T6016] loop0: detected capacity change from 0 to 40427
[   78.810435][ T6016] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   78.835719][ T6016] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   78.871419][ T6016] F2FS-fs (loop0): invalid crc value
[   78.888609][ T6016] F2FS-fs (loop0): Found nat_bits in checkpoint
[   78.928592][ T6038] syz.2.55 uses obsolete (PF_INET,SOCK_PACKET)
[   78.990645][ T6016] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   79.009744][ T6016] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   79.268020][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71)
[   79.284042][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71)
[   79.306385][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71)
[   79.332949][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71)
[   79.349504][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71)
[   79.362920][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71)
[   79.385619][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71)
[   79.404859][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71)
[   79.433866][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71)
[   79.445087][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71)
[   79.461574][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71)
[   79.472554][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71)
[   79.488569][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71)
[   79.509736][ T5826] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71)
[   79.558785][ T5826] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[   79.598883][ T5826] usb 2-1: USB disconnect, device number 3
[   79.944898][ T5881] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   80.148895][ T5881] usb 4-1: too many configurations: 9, using maximum allowed: 8
[   80.169626][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.191224][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.216712][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.232603][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.252101][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.287315][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.303826][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.322933][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.345722][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.365977][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.389564][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.413044][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.428839][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.438133][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.466053][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.506166][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.547700][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.581160][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.597174][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.612848][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.635645][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.658279][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.669669][ T6055] loop1: detected capacity change from 0 to 32768
[   80.679278][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.701531][ T6055] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.62 (6055)
[   80.723386][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.756029][ T5881] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   80.777678][ T5881] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   80.799492][ T6055] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   80.813343][ T5881] usb 4-1: Product: syz
[   80.817553][ T5881] usb 4-1: Manufacturer: syz
[   80.832199][ T6055] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   80.854154][ T5881] usb 4-1: SerialNumber: syz
[   80.868679][ T6055] BTRFS info (device loop1): using free space tree
[   80.877024][ T5881] usb 4-1: config 0 descriptor??
[   80.918819][ T5881] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[   81.066593][ T6055] BTRFS info (device loop1): enabling ssd optimizations
[   81.122053][ T6055] BTRFS info (device loop1): auto enabling async discard
[   81.445126][    C0] usb 4-1: yurex_control_callback - control failed: -71
[   81.459827][ T5790] usb 4-1: USB disconnect, device number 2
[   81.490850][ T5790] yurex 4-1:0.0: USB YUREX #0 now disconnected
[   81.599602][ T5784] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   81.748372][    T9] cfg80211: failed to load regulatory.db
[   81.913447][  T786] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   82.113545][  T786] usb 1-1: Using ep0 maxpacket: 32
[   82.130282][  T786] usb 1-1: unable to get BOS descriptor or descriptor too short
[   82.139786][  T786] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   82.162950][  T786] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[   82.182449][  T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.204904][ T6097] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   82.215457][  T786] usb 1-1: Product: syz
[   82.220970][  T786] usb 1-1: Manufacturer: syz
[   82.233559][  T786] usb 1-1: SerialNumber: syz
[   82.398416][ T6087] loop2: detected capacity change from 0 to 40427
[   82.469157][ T6087] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[   82.492119][  T786] usb 1-1: Limiting number of CPorts to U8_MAX
[   82.503409][ T6087] F2FS-fs (loop2): Image doesn't support compression
[   82.510195][ T6087] F2FS-fs (loop2): Image doesn't support compression
[   82.519917][  T786] usb 1-1: Not enough endpoints found in device, aborting!
[   82.575412][ T6087] F2FS-fs (loop2): invalid crc value
[   82.587251][ T6101] 9pnet: p9_errstr2errno: server reported unknown error ��p��A���
��;
KZ�44�/@�q�
[   82.600950][ T6087] F2FS-fs (loop2): Found nat_bits in checkpoint
[   82.671338][ T6087] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   82.752152][ T5833] usb 1-1: USB disconnect, device number 2
[   82.795290][ T6086] syz.2.69: attempt to access beyond end of device
[   82.795290][ T6086] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   82.840210][ T6087] syz.2.69: attempt to access beyond end of device
[   82.840210][ T6087] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   82.920712][ T5787] syz-executor: attempt to access beyond end of device
[   82.920712][ T5787] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[   82.950255][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   83.923820][ T6123] loop3: detected capacity change from 0 to 1024
[   84.019093][ T6112] loop1: detected capacity change from 0 to 40427
[   84.107805][ T6112] F2FS-fs (loop1): invalid crc value
[   84.355371][ T6112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   84.527424][ T5786] hfsplus: node 4:3 still has 1 user(s)!
[   84.624932][ T5784] syz-executor: attempt to access beyond end of device
[   84.624932][ T5784] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   84.692692][ T5784] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   84.701879][ T5784] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   85.013624][ T6132] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.503926][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.523789][ T6152] netlink: 'syz.2.91': attribute type 3 has an invalid length.
[   85.544292][ T6142] loop3: detected capacity change from 0 to 32768
[   85.573171][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   85.624440][ T6142] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   85.713643][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   85.724049][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.739078][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   85.760385][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   85.772902][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   85.819813][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   85.852099][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   85.875755][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   85.915993][ T6142] XFS (loop3): Ending clean mount
[   86.132431][ T6173] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   86.182767][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   86.195979][   T42] Bluetooth: hci4: Frame reassembly failed (-84)
[   87.123779][ T6191] block device autoloading is deprecated and will be removed.
[   87.141763][ T6191] syz.2.103: attempt to access beyond end of device
[   87.141763][ T6191] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   87.304818][ T6201] warning: `syz.1.107' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   87.679022][ T6212] loop1: detected capacity change from 0 to 2048
[   87.721001][ T6212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.753982][   T27] audit: type=1800 audit(1752821759.202:3): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.112" name="file1" dev="loop1" ino=15 res=0 errno=0
[   87.757378][ T6212] EXT4-fs (loop1): Online defrag not supported with bigalloc
[   87.792293][   T27] audit: type=1800 audit(1752821759.202:4): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.112" name="file2" dev="loop1" ino=16 res=0 errno=0
[   87.832386][ T6212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.203463][ T5791] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   88.353020][ T6228] loop1: detected capacity change from 0 to 128
[   88.371140][ T6228] FAT-fs (loop1): Unrecognized mount option "gid=0xffffffffffffffff����" or missing value
[   88.691516][ T6239] loop1: detected capacity change from 0 to 1024
[   88.722497][ T6239] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002]
[   88.741221][ T6239] System zones: 0-1, 3-36
[   88.769161][ T6239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.784997][ T6244] Illegal XDP return value 4294967274 on prog  (id 16) dev syz_tun, expect packet loss!
[   88.985438][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.113408][ T5833] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   89.284273][ T6248] loop1: detected capacity change from 0 to 32768
[   89.309793][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.337549][ T6248] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   89.338894][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.356617][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   89.370813][ T5833] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   89.380629][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.391789][ T5833] usb 4-1: config 0 descriptor??
[   89.428018][ T6248] XFS (loop1): Ending clean mount
[   89.506825][ T6248] capability: warning: `syz.1.125' uses deprecated v2 capabilities in a way that may be insecure
[   89.617912][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   89.641311][ T6246] loop3: detected capacity change from 0 to 512
[   89.685041][ T6246] EXT4-fs: Ignoring removed bh option
[   89.707734][ T6246] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[   89.913077][ T6255] loop0: detected capacity change from 0 to 40427
[   89.928149][ T6255] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[   89.951123][ T6255] F2FS-fs (loop0): Image doesn't support compression
[   89.980341][ T6255] F2FS-fs (loop0): heap/no_heap options were deprecated
[   89.983004][ T5833] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[   90.018203][ T6255] F2FS-fs (loop0): Image doesn't support compression
[   90.034509][ T5833] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   90.049392][ T6260] loop1: detected capacity change from 0 to 2048
[   90.050552][ T6255] F2FS-fs (loop0): invalid crc value
[   90.083587][ T5833] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   90.089003][ T6255] F2FS-fs (loop0): Found nat_bits in checkpoint
[   90.144055][ T6260] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.353723][ T6255] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   90.521129][ T5833] usb 4-1: USB disconnect, device number 3
[   90.560444][   T27] audit: type=1800 audit(1752821761.992:5): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.126" name="file1" dev="loop0" ino=10 res=0 errno=0
[   90.593062][ T1072] kworker/u4:5: attempt to access beyond end of device
[   90.593062][ T1072] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   90.611045][ T6255] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910
[   90.635971][ T1072] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   90.954953][ T6267] loop2: detected capacity change from 0 to 32768
[   91.025058][ T6267] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.138662][ T6267] XFS (loop2): Ending clean mount
[   91.469503][ T6283] loop1: detected capacity change from 0 to 512
[   91.513915][ T5787] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.530375][ T6283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   91.544917][ T6267] syz.2.128 (6267) used greatest stack depth: 20680 bytes left
[   91.560256][ T6283] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.733831][ T5833] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[   91.755569][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   91.938174][ T6296] netlink: 9 bytes leftover after parsing attributes in process `syz.1.136'.
[   91.950069][ T5833] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   91.970617][ T5833] usb 1-1: config 0 has no interface number 0
[   91.992432][ T6296] netlink: 9 bytes leftover after parsing attributes in process `syz.1.136'.
[   91.993361][ T5833] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   92.026098][ T5833] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[   92.037341][ T5833] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   92.048361][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.064572][ T5833] usb 1-1: config 0 descriptor??
[   92.071879][ T6287] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   92.093103][ T5833] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   92.387996][ T5833] usb 1-1: USB disconnect, device number 3
[   92.394017][    C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[   92.662258][ T6307] loop1: detected capacity change from 0 to 32768
[   92.700935][ T6307] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.762009][ T6307] XFS (loop1): Ending clean mount
[   92.982783][ T6324] loop3: detected capacity change from 0 to 64
[   92.995815][ T5784] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   93.793687][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   93.812391][ T6343] loop2: detected capacity change from 0 to 2048
[   93.861865][ T6343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.967316][ T6347] loop1: detected capacity change from 0 to 1024
[   93.996065][    T9] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[   94.005376][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.017216][    T9] usb 1-1: config 0 has no interface number 0
[   94.029209][    T9] usb 1-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00
[   94.030780][ T6347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.038588][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.059151][    T9] usb 1-1: Product: syz
[   94.063560][    T9] usb 1-1: Manufacturer: syz
[   94.068170][    T9] usb 1-1: SerialNumber: syz
[   94.094468][    T9] usb 1-1: config 0 descriptor??
[   94.097821][ T6328] loop3: detected capacity change from 0 to 32768
[   94.185834][ T6328] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   94.200130][ T6357] EXT4-fs error (device loop1): __ext4_remount:6741: comm syz.1.151: Abort forced by user
[   94.254822][ T6347] overlayfs: failed to create directory ./file1/index (errno: 5); mounting read-only
[   94.256861][ T6357] EXT4-fs (loop1): Remounting filesystem read-only
[   94.270996][ T6347] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[   94.305401][ T6357] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[   94.325707][    T9] usb 1-1: Found UVC 0.00 device syz (056d:0000)
[   94.332242][    T9] usb 1-1: No valid video chain found.
[   94.342648][    T9] usb 1-1: USB disconnect, device number 4
[   94.372507][ T6328] XFS (loop3): Ending clean mount
[   94.400312][ T6328] XFS (loop3): Quotacheck needed: Please wait.
[   94.481353][ T6328] XFS (loop3): Quotacheck: Done.
[   94.565392][   T27] audit: type=1800 audit(1752821766.012:6): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.144" name="file2" dev="loop3" ino=9287 res=0 errno=0
[   94.754392][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   94.760057][ T6362] loop2: detected capacity change from 0 to 64
[   94.854914][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.072887][   T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.079858][ T6364] loop3: detected capacity change from 0 to 64
[   95.355468][   T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.547139][   T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.649548][    T9] kernel write not supported for file /84/clear_refs (pid: 9 comm: kworker/0:1)
[   95.764529][   T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.789150][ T6378] loop2: detected capacity change from 0 to 512
[   95.882044][ T6378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.959653][ T6378] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.018565][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.034990][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.043924][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.051959][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.064817][   T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   96.072163][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.267690][ T6378] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   96.406797][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.675834][ T6406] loop3: detected capacity change from 0 to 16
[   96.730773][ T6406] erofs: (device loop3): mounted with root inode @ nid 36.
[   96.848230][ T6406] erofs: (device loop3): z_erofs_readahead: readahead error at folio 26 @ nid 36
[   96.896706][ T6406] erofs: (device loop3): z_erofs_readahead: readahead error at folio 25 @ nid 36
[   96.922428][ T6406] erofs: (device loop3): z_erofs_readahead: readahead error at folio 24 @ nid 36
[   96.980411][ T6406] erofs: (device loop3): z_erofs_readahead: readahead error at folio 23 @ nid 36
[   97.028104][ T6406] erofs: (device loop3): z_erofs_readahead: readahead error at folio 22 @ nid 36
[   97.038068][ T6406] erofs: (device loop3): z_erofs_readahead: readahead error at folio 21 @ nid 36
[   97.048230][ T6406] erofs: (device loop3): z_erofs_readahead: readahead error at folio 20 @ nid 36
[   97.058164][ T6406] erofs: (device loop3): z_erofs_readahead: readahead error at folio 18 @ nid 36
[   97.070096][ T6406] erofs: (device loop3): z_erofs_readahead: readahead error at folio 16 @ nid 36
[   97.082923][ T6406] erofs: (device loop3): z_erofs_readahead: readahead error at folio 12 @ nid 36
[   97.116009][ T6406] syz.3.170: attempt to access beyond end of device
[   97.116009][ T6406] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16
[   97.132860][ T6406] syz.3.170: attempt to access beyond end of device
[   97.132860][ T6406] loop3: rw=524288, sector=525144, nr_sectors = 16 limit=16
[   97.175812][ T6406] syz.3.170: attempt to access beyond end of device
[   97.175812][ T6406] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16
[   97.233767][ T6406] syz.3.170: attempt to access beyond end of device
[   97.233767][ T6406] loop3: rw=524288, sector=13716630376, nr_sectors = 8 limit=16
[   97.266536][ T6386] chnl_net:caif_netlink_parms(): no params data found
[   97.585251][ T6435] loop3: detected capacity change from 0 to 512
[   97.684960][ T6435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.761583][ T6435] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.882682][ T6435] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   97.909271][ T6415] loop0: detected capacity change from 0 to 32768
[   97.966514][ T6415] (syz.0.172,6415,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   97.983160][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.004846][ T6415] (syz.0.172,6415,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   98.030261][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.046313][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.054406][ T6386] bridge_slave_0: entered allmulticast mode
[   98.062065][ T6386] bridge_slave_0: entered promiscuous mode
[   98.075456][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.082773][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.090524][ T6386] bridge_slave_1: entered allmulticast mode
[   98.122656][ T6386] bridge_slave_1: entered promiscuous mode
[   98.132585][ T6415] JBD2: Ignoring recovery information on journal
[   98.133593][ T5791] Bluetooth: hci0: command tx timeout
[   98.314451][ T6415] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   98.440598][ T6453] loop2: detected capacity change from 0 to 512
[   98.471871][ T6453] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   98.539727][ T6453] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   98.586974][ T6453] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   98.589692][ T6386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.683904][ T6453] EXT4-fs (loop2): 1 truncate cleaned up
[   98.690978][ T6453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.717526][   T27] audit: type=1804 audit(1752821770.162:7): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.179" name="/newroot/53/file2/file1" dev="loop2" ino=15 res=1 errno=0
[   98.796568][ T6386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.820021][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.966908][   T58] hsr_slave_0: left promiscuous mode
[   99.009118][ T6450] loop3: detected capacity change from 0 to 32768
[   99.028373][   T58] hsr_slave_1: left promiscuous mode
[   99.054337][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.068792][ T6450] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   99.090742][ T5785] ocfs2: Unmounting device (7,0) on (node local)
[   99.092288][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.159722][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.212678][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.230853][ T6450] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   99.306422][   T58] bridge_slave_1: left allmulticast mode
[   99.312155][   T58] bridge_slave_1: left promiscuous mode
[   99.367189][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.405951][   T58] bridge_slave_0: left allmulticast mode
[   99.411642][   T58] bridge_slave_0: left promiscuous mode
[   99.431321][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.434825][ T6450] overlayfs: upper fs does not support tmpfile.
[   99.495964][ T6450] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   99.527361][   T58] veth1_macvtap: left promiscuous mode
[   99.531188][ T6450] overlayfs: failed to set xattr on upper
[   99.537761][   T58] veth0_macvtap: left promiscuous mode
[   99.553497][ T6450] overlayfs: ...falling back to redirect_dir=nofollow.
[   99.558870][   T58] veth1_vlan: left promiscuous mode
[   99.560483][ T6450] overlayfs: ...falling back to index=off.
[   99.578735][ T6450] overlayfs: ...falling back to uuid=null.
[   99.580237][ T6475] loop0: detected capacity change from 0 to 128
[   99.585823][ T6450] overlayfs: upper fs missing required features.
[   99.593862][   T58] veth0_vlan: left promiscuous mode
[   99.631044][ T6475] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   99.674955][ T6475] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   99.706786][    C1] vkms_vblank_simulate: vblank timer overrun
[   99.790383][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[   99.825995][ T6475] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 18: comm syz.0.181: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[   99.903131][ T6475] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem
[   99.964003][ T6481] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 18: comm syz.0.181: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  100.006282][ T6481] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem
[  100.100855][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.213645][ T5791] Bluetooth: hci0: command tx timeout
[  100.603615][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  100.617577][   T58] team0 (unregistering): Port device team_slave_1 removed
[  100.660679][   T58] team0 (unregistering): Port device team_slave_0 removed
[  100.700085][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.746005][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.801961][    T9] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  100.813678][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.824166][    T9] usb 4-1: config 0 has no interface number 0
[  100.839062][    T9] usb 4-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00
[  100.848354][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.858607][    T9] usb 4-1: Product: syz
[  100.862870][    T9] usb 4-1: Manufacturer: syz
[  100.867920][    T9] usb 4-1: SerialNumber: syz
[  100.879476][    T9] usb 4-1: config 0 descriptor??
[  101.126197][    T9] usb 4-1: Found UVC 0.00 device syz (056d:0000)
[  101.144331][    T9] usb 4-1: No valid video chain found.
[  101.166014][    T9] usb 4-1: USB disconnect, device number 4
[  101.367252][   T58] bond0 (unregistering): Released all slaves
[  101.505829][ T6492] netlink: 'syz.0.186': attribute type 4 has an invalid length.
[  101.642057][ T6386] team0: Port device team_slave_0 added
[  101.686299][ T6386] team0: Port device team_slave_1 added
[  101.760503][ T6498] trusted_key: syz.2.188 sent an empty control message without MSG_MORE.
[  101.796192][ T6500] loop0: detected capacity change from 0 to 128
[  101.804841][ T6500] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  101.836576][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.851013][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.876985][    C1] vkms_vblank_simulate: vblank timer overrun
[  101.921917][ T6500] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  101.938785][ T6386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.987537][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.010713][ T6504] loop2: detected capacity change from 0 to 256
[  102.015655][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.103525][ T6386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.117360][ T6504] FAT-fs (loop2): Directory bread(block 64) failed
[  102.144293][ T6504] FAT-fs (loop2): Directory bread(block 65) failed
[  102.165730][ T6504] FAT-fs (loop2): Directory bread(block 66) failed
[  102.186629][ T6504] FAT-fs (loop2): Directory bread(block 67) failed
[  102.195025][ T6504] FAT-fs (loop2): Directory bread(block 68) failed
[  102.201745][ T6504] FAT-fs (loop2): Directory bread(block 69) failed
[  102.204729][ T2935] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  102.211326][ T6504] FAT-fs (loop2): Directory bread(block 70) failed
[  102.244639][ T6504] FAT-fs (loop2): Directory bread(block 71) failed
[  102.251370][ T6504] FAT-fs (loop2): Directory bread(block 72) failed
[  102.285690][ T5791] Bluetooth: hci0: command tx timeout
[  102.312156][ T6504] FAT-fs (loop2): Directory bread(block 73) failed
[  102.400008][ T6386] hsr_slave_0: entered promiscuous mode
[  102.434826][ T6386] hsr_slave_1: entered promiscuous mode
[  102.493378][ T6386] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.500990][ T6386] Cannot create hsr debugfs directory
[  102.597685][ T6502] loop3: detected capacity change from 0 to 32768
[  102.666777][ T6502] (syz.3.189,6502,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  102.726282][ T6502] (syz.3.189,6502,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  102.768690][ T6502] JBD2: Ignoring recovery information on journal
[  102.854302][ T6502] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  103.122427][ T6386] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  103.152002][ T6386] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  103.192925][ T6386] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  103.280089][ T6386] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  103.312731][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  103.638294][ T6386] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.700210][ T6386] 8021q: adding VLAN 0 to HW filter on device team0
[  103.772509][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.779793][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.898879][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.906061][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.366473][ T5791] Bluetooth: hci0: command tx timeout
[  104.561197][ T6386] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.637339][ T6576] loop3: detected capacity change from 0 to 256
[  104.739296][ T6576] FAT-fs (loop3): Directory bread(block 64) failed
[  104.752369][ T6576] FAT-fs (loop3): Directory bread(block 65) failed
[  104.772465][ T6576] FAT-fs (loop3): Directory bread(block 66) failed
[  104.783448][ T6576] FAT-fs (loop3): Directory bread(block 67) failed
[  104.893914][ T6576] FAT-fs (loop3): Directory bread(block 68) failed
[  104.938989][ T6576] FAT-fs (loop3): Directory bread(block 69) failed
[  104.997836][ T6576] FAT-fs (loop3): Directory bread(block 70) failed
[  105.014923][ T6576] FAT-fs (loop3): Directory bread(block 71) failed
[  105.045948][ T6576] FAT-fs (loop3): Directory bread(block 72) failed
[  105.066910][ T6576] FAT-fs (loop3): Directory bread(block 73) failed
[  105.178051][ T6386] veth0_vlan: entered promiscuous mode
[  105.262904][ T6386] veth1_vlan: entered promiscuous mode
[  105.371812][ T6386] veth0_macvtap: entered promiscuous mode
[  105.418444][ T6386] veth1_macvtap: entered promiscuous mode
[  105.479207][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.492973][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.510118][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.530987][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.550738][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.571855][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.605088][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.632677][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.658821][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.683324][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.700743][ T6581] loop2: detected capacity change from 0 to 32768
[  105.730859][ T6581] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.204 (6581)
[  105.732890][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.826075][ T6581] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  105.854103][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.874554][ T6581] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  105.890543][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.893588][ T6581] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  105.925352][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.957616][ T6386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.965778][ T6581] BTRFS info (device loop2): use zstd compression, level 3
[  105.997561][ T6581] BTRFS info (device loop2): using free space tree
[  106.013645][ T6386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.063373][ T6386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.082825][ T6386] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.356808][ T6581] BTRFS info (device loop2): enabling ssd optimizations
[  106.391433][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.423470][ T6581] BTRFS info (device loop2): auto enabling async discard
[  106.443488][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.513460][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.545673][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.596028][ T6623] loop0: detected capacity change from 0 to 128
[  106.640856][   T27] audit: type=1800 audit(1752821778.082:8): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.204" name="bus" dev="loop2" ino=263 res=0 errno=0
[  106.678942][ T6623] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  106.704991][ T6623] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.786181][   T27] audit: type=1804 audit(1752821778.232:9): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.204" name="/newroot/63/file0/bus" dev="loop2" ino=263 res=1 errno=0
[  107.066490][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.221019][ T5787] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  107.333465][   T28] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  107.549460][   T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  107.586841][   T28] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  107.607532][   T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.664588][   T28] usb 5-1: config 0 descriptor??
[  107.701603][ T6633] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  107.988744][ T6660] loop3: detected capacity change from 0 to 128
[  108.065830][ T6660] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  108.240101][   T28] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[  108.369692][ T6666] pim6reg1: entered promiscuous mode
[  108.387010][ T6666] pim6reg1: entered allmulticast mode
[  108.527917][    T9] usb 5-1: USB disconnect, device number 2
[  108.742230][ T6680] loop0: detected capacity change from 0 to 512
[  108.788122][ T6680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.806052][ T6680] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.957050][ T6680] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  109.024857][ T6680] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[  109.073571][ T6680] EXT4-fs (loop0): This should not happen!! Data will be lost
[  109.073571][ T6680] 
[  109.102042][ T6680] EXT4-fs (loop0): Total free blocks count 0
[  109.164092][ T6680] EXT4-fs (loop0): Free/Dirty block details
[  109.170079][ T6680] EXT4-fs (loop0): free_blocks=65280
[  109.203537][ T6680] EXT4-fs (loop0): dirty_blocks=33
[  109.208778][ T6680] EXT4-fs (loop0): Block reservation details
[  109.228063][ T6680] EXT4-fs (loop0): i_reserved_data_blocks=33
[  109.385297][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.554323][ T6706] batadv_slave_0: entered promiscuous mode
[  109.586972][ T6677] loop3: detected capacity change from 0 to 40427
[  109.591724][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'.
[  109.635174][ T6677] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  109.639457][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.675828][ T6677] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  109.695395][ T6677] F2FS-fs (loop3): Image doesn't support compression
[  109.735874][ T6677] F2FS-fs (loop3): invalid crc value
[  109.767456][ T6677] F2FS-fs (loop3): Found nat_bits in checkpoint
[  109.887957][ T6706] batadv_slave_0 (unregistering): left promiscuous mode
[  109.905434][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.913617][ T6677] F2FS-fs (loop3): Start checkpoint disabled!
[  109.952906][ T6677] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  109.966864][ T6713] netlink: 'syz.2.224': attribute type 4 has an invalid length.
[  110.023400][ T6715] netlink: 'syz.2.224': attribute type 4 has an invalid length.
[  110.052374][ T6677] syz.3.218: attempt to access beyond end of device
[  110.052374][ T6677] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  110.327862][   T12] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0
[  110.346259][ T6724] xt_hashlimit: max too large, truncated to 1048576
[  110.354138][   T12] F2FS-fs (loop3): invalid blkaddr: 5121, type: 7, run fsck to fix.
[  110.373823][   T12] kworker/u4:1: attempt to access beyond end of device
[  110.373823][   T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  110.406297][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  110.414619][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  110.570261][ T6731] loop4: detected capacity change from 0 to 128
[  110.712654][ T6731] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.772517][ T6731] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.036752][ T6386] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  111.045845][ T6741] loop3: detected capacity change from 0 to 1024
[  111.091051][ T6741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.129965][ T6741] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4036: comm syz.3.228: Allocating blocks 385-513 which overlap fs metadata
[  111.151452][ T6739] EXT4-fs (loop3): pa ffff88805b9da570: logic 16, phys. 129, len 24
[  111.159904][ T6739] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 8
[  111.247674][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.434246][ T6749] loop3: detected capacity change from 0 to 512
[  111.439540][ T6750] loop2: detected capacity change from 0 to 128
[  111.452682][ T6728] loop0: detected capacity change from 0 to 32768
[  111.458450][ T6750] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  111.554009][ T6750] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  111.574199][ T6749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.621139][ T6728] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  111.623547][ T6749] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.782280][   T58] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  111.977132][ T6749] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  112.008940][ T5785] (syz-executor,5785,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  112.018432][ T6749] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[  112.036044][ T5785] ocfs2: Unmounting device (7,0) on (node local)
[  112.064930][ T6749] EXT4-fs (loop3): This should not happen!! Data will be lost
[  112.064930][ T6749] 
[  112.100087][ T6749] EXT4-fs (loop3): Total free blocks count 0
[  112.131490][ T6749] EXT4-fs (loop3): Free/Dirty block details
[  112.154814][ T6749] EXT4-fs (loop3): free_blocks=65280
[  112.160176][ T6749] EXT4-fs (loop3): dirty_blocks=33
[  112.163878][ T6761] loop2: detected capacity change from 0 to 2048
[  112.188554][ T6749] EXT4-fs (loop3): Block reservation details
[  112.208797][ T6749] EXT4-fs (loop3): i_reserved_data_blocks=33
[  112.219391][ T6761]  loop2: p1 < > p3 p4 < >
[  112.255073][ T6761] loop2: p3 start 4284289 is beyond EOD, truncated
[  112.358426][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.386896][    C0] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2
[  112.399100][ T6746] loop4: detected capacity change from 0 to 32768
[  112.412899][ T6767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'.
[  112.588392][ T6746] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  112.729803][ T5801] udevd[5801]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  112.731488][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  112.829321][ T6746] XFS (loop4): Ending clean mount
[  113.073014][ T6386] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  113.308074][ T6774] loop2: detected capacity change from 0 to 32768
[  113.366243][ T6774] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  113.514722][ T6774] XFS (loop2): Ending clean mount
[  113.654567][ T6808] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  113.660951][ T6808] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  113.738302][ T6808] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  113.766028][ T6808] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  113.783576][ T6808] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  113.801228][ T6808] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  113.840622][ T6808] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  113.849470][ T6808] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  113.875365][ T6808] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  113.910100][ T6808] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  113.927327][ T6808] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  113.981017][ T6808] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  114.006702][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.100786][ T6811] loop4: detected capacity change from 0 to 32768
[  114.154043][ T6811] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  114.217740][   T27] audit: type=1800 audit(1752821785.662:10): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.241" name="file1" dev="loop4" ino=17059 res=0 errno=0
[  114.508990][ T6811] syz.4.241 (6811) used greatest stack depth: 18288 bytes left
[  114.572191][ T6386] ocfs2: Unmounting device (7,4) on (node local)
[  114.889943][ T6825] loop0: detected capacity change from 0 to 32768
[  114.927326][ T6825] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  114.955451][ T6825] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  115.147609][ T6825] overlayfs: upper fs does not support tmpfile.
[  115.155891][ T6825] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  115.163129][ T6825] overlayfs: failed to set xattr on upper
[  115.170276][ T6825] overlayfs: ...falling back to redirect_dir=nofollow.
[  115.177500][ T6825] overlayfs: ...falling back to index=off.
[  115.186906][ T6825] overlayfs: ...falling back to uuid=null.
[  115.192838][ T6825] overlayfs: upper fs missing required features.
[  115.365643][ T5785] ocfs2: Unmounting device (7,0) on (node local)
[  115.643798][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  115.803703][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  115.883421][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  115.963855][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[  116.073574][ T5776] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  116.179191][ T6865] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  116.282191][ T5776] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.304631][ T5776] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.325666][ T5776] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  116.346486][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  116.356594][ T5776] usb 3-1: SerialNumber: syz
[  116.388187][   T27] audit: type=1326 audit(1752821787.832:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e938e9a9 code=0x7ffc0000
[  116.441823][   T27] audit: type=1326 audit(1752821787.832:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e938e9a9 code=0x7ffc0000
[  116.512678][   T27] audit: type=1326 audit(1752821787.852:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f28e938e9a9 code=0x7ffc0000
[  116.516193][ T6863] loop3: detected capacity change from 0 to 32768
[  116.558380][ T6863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.259 (6863)
[  116.568883][   T27] audit: type=1326 audit(1752821787.852:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e938e9a9 code=0x7ffc0000
[  116.614232][ T5776] usb 3-1: 0:2 : does not exist
[  116.636873][   T27] audit: type=1326 audit(1752821787.852:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e938e9a9 code=0x7ffc0000
[  116.700482][ T6863] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.703477][ T5776] usb 3-1: USB disconnect, device number 3
[  116.726047][ T6863] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  116.762673][ T6863] BTRFS info (device loop3): force clearing of disk cache
[  116.789399][ T6863] BTRFS info (device loop3): enabling auto defrag
[  116.809677][ T6863] BTRFS info (device loop3): max_inline at 0
[  116.820750][ T6863] BTRFS info (device loop3): enabling disk space caching
[  116.850917][ T6863] BTRFS info (device loop3): disk space caching is enabled
[  116.958293][ T6863] BTRFS info (device loop3): enabling ssd optimizations
[  116.968941][ T6863] BTRFS info (device loop3): rebuilding free space tree
[  117.040473][ T6863] BTRFS info (device loop3): disabling free space tree
[  117.047893][ T6863] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  117.062971][ T6863] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  117.398653][ T1072] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  117.435250][ T6903] loop0: detected capacity change from 0 to 2048
[  117.497408][ T5786] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.500575][ T6903]  loop0: p1 < > p3 p4 < >
[  117.519420][ T6903] loop0: p3 start 4284289 is beyond EOD, truncated
[  117.611677][    C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2
[  117.733703][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  117.883788][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  117.978597][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  118.043458][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[  118.086183][ T6913] netlink: 'syz.3.269': attribute type 10 has an invalid length.
[  118.157179][ T6913] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.187401][ T6913] team0: Port device bond0 added
[  118.717404][ T6935] loop3: detected capacity change from 0 to 2048
[  118.771920][ T6935]  loop3: p1 < > p3 p4 < >
[  118.793726][ T6935] loop3: p3 start 4284289 is beyond EOD, truncated
[  118.807815][ T6930] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  118.827236][ T6930] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  118.854199][ T6930] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  118.885113][ T6930] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  118.885748][ T6942] loop4: detected capacity change from 0 to 512
[  118.913409][    C0] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2
[  119.055486][ T6942] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.281: corrupted inode contents
[  119.179549][ T6942] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #16: comm syz.4.281: mark_inode_dirty error
[  119.222096][ T6942] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.281: corrupted inode contents
[  119.251811][ T6942] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.281: mark_inode_dirty error
[  119.273760][ T6942] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.281: corrupted inode contents
[  119.327472][ T6942] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  119.344521][ T6942] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #16: comm syz.4.281: corrupted inode contents
[  119.367694][ T6942] EXT4-fs error (device loop4): ext4_truncate:4288: inode #16: comm syz.4.281: mark_inode_dirty error
[  119.393582][ T6942] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  119.423874][ T6942] EXT4-fs (loop4): 1 truncate cleaned up
[  119.444486][ T6942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.463659][ T6942] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.483038][   T58] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  119.509102][   T58] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:4: Failed to release dquot type 1
[  119.673472][ T5853] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  119.820066][ T6949] loop2: detected capacity change from 0 to 32768
[  119.872771][ T6949] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  119.892461][ T5853] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  119.901822][ T5853] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  119.908561][ T6949] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  119.915802][ T5853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  119.931125][ T5853] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  119.942327][ T5853] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  119.956692][ T5853] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  119.967110][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  119.975419][ T5853] usb 4-1: Product: syz
[  119.980417][ T5853] usb 4-1: Manufacturer: syz
[  119.994797][ T5853] cdc_wdm 4-1:1.0: skipping garbage
[  120.013373][ T5853] cdc_wdm 4-1:1.0: skipping garbage
[  120.028121][ T5853] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  120.034572][ T5853] cdc_wdm 4-1:1.0: Unknown control protocol
[  120.070594][ T6386] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.094339][ T6949] overlayfs: upper fs does not support tmpfile.
[  120.105510][ T6949] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  120.112624][ T6949] overlayfs: failed to set xattr on upper
[  120.118641][ T6949] overlayfs: ...falling back to redirect_dir=nofollow.
[  120.134175][ T6949] overlayfs: ...falling back to index=off.
[  120.140116][ T6949] overlayfs: ...falling back to uuid=null.
[  120.147732][ T6949] overlayfs: upper fs missing required features.
[  120.256681][ T5787] ocfs2: Unmounting device (7,2) on (node local)
[  120.277100][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  120.289715][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  120.301328][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  120.307985][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  120.314449][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  120.321079][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  120.327641][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  120.334276][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  120.340740][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  120.347380][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  120.353898][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  120.360519][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  120.366832][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  120.373449][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  120.379912][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  120.386527][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  120.393942][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  120.400570][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  120.407549][ T5776] usb 4-1: USB disconnect, device number 5
[  120.413564][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  120.413585][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  120.413600][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  120.746709][ T6977] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  120.752903][ T6977] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  120.759540][ T6977] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  120.773886][ T6977] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  120.843520][ T1187] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  121.038403][ T1187] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  121.051985][ T1187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.068167][ T1187] usb 3-1: config 0 descriptor??
[  121.187771][ T6982] loop0: detected capacity change from 0 to 32768
[  121.214385][ T6982] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.293 (6982)
[  121.307106][ T6982] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.314398][ T6992] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  121.363632][ T6982] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  121.372349][ T6982] BTRFS info (device loop0): force clearing of disk cache
[  121.388197][ T6982] BTRFS info (device loop0): enabling auto defrag
[  121.396157][ T6982] BTRFS info (device loop0): max_inline at 0
[  121.402189][ T6982] BTRFS info (device loop0): enabling disk space caching
[  121.414326][ T6982] BTRFS info (device loop0): disk space caching is enabled
[  121.647181][ T6982] BTRFS info (device loop0): enabling ssd optimizations
[  121.667485][ T6982] BTRFS info (device loop0): rebuilding free space tree
[  121.710507][ T6982] BTRFS info (device loop0): disabling free space tree
[  121.718168][ T6982] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  121.729534][ T6982] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  122.028261][ T5785] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.313918][ T1187] usb 3-1: Cannot set autoneg
[  122.334618][ T1187] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71
[  122.370975][ T6998] loop4: detected capacity change from 0 to 32768
[  122.379505][ T1187] usb 3-1: USB disconnect, device number 4
[  122.464968][ T6998] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.541066][ T7028] input: syz0 as /devices/virtual/input/input7
[  122.660109][ T6998] XFS (loop4): Ending clean mount
[  122.683615][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  122.757435][ T7034] loop0: detected capacity change from 0 to 256
[  122.774493][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  122.780821][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout
[  122.825418][ T7034] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  122.853862][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout
[  122.908853][ T6386] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  123.753441][ T5853] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  123.955337][ T5853] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  123.978600][ T5853] usb 4-1: config 0 has no interface number 0
[  124.001459][ T5853] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  124.016108][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.037535][ T5853] usb 4-1: config 0 descriptor??
[  124.057905][ T5853] cp210x 4-1:0.1: cp210x converter detected
[  124.500011][ T5853] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -32
[  124.787143][ T5853] usb 4-1: cp210x converter now attached to ttyUSB0
[  124.933904][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout
[  125.055045][ T5853] usb 4-1: USB disconnect, device number 6
[  125.106352][ T5853] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  125.178707][ T5853] cp210x 4-1:0.1: device disconnected
[  125.397766][ T7082] loop4: detected capacity change from 0 to 4096
[  126.092760][ T7084] loop0: detected capacity change from 0 to 32768
[  126.103485][ T5826] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  126.176243][ T7084] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  126.232765][   T27] audit: type=1800 audit(1752821797.672:16): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.316" name="file1" dev="loop0" ino=17059 res=0 errno=0
[  126.316173][ T5826] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  126.380212][ T5826] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  126.447325][ T5826] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  126.481984][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.500506][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f47c800: rx timeout, send abort
[  126.751091][ T5826] usb 4-1: usb_control_msg returned -32
[  126.758805][ T5826] usbtmc 4-1:16.0: can't read capabilities
[  127.003509][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout
[  127.010775][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f47c800: abort rx timeout. Force session deactivation
[  127.036751][ T5785] ocfs2: Unmounting device (7,0) on (node local)
[  127.727617][ T7133] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  127.749030][ T7133] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  127.772598][ T7133] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  127.793570][ T7133] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  128.191733][ T7141] loop4: detected capacity change from 0 to 32768
[  128.216501][ T7141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.325 (7141)
[  128.246105][ T7141] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.258866][ T7141] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  128.268538][ T7141] BTRFS info (device loop4): force clearing of disk cache
[  128.277229][ T7141] BTRFS info (device loop4): enabling auto defrag
[  128.292823][ T7141] BTRFS info (device loop4): max_inline at 0
[  128.303617][ T7141] BTRFS info (device loop4): enabling disk space caching
[  128.311860][ T7141] BTRFS info (device loop4): disk space caching is enabled
[  128.454790][ T7141] BTRFS info (device loop4): enabling ssd optimizations
[  128.492162][ T7141] BTRFS info (device loop4): rebuilding free space tree
[  128.547849][ T7141] BTRFS info (device loop4): disabling free space tree
[  128.556109][ T7141] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  128.581063][ T7141] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  128.842686][ T1187] usb 4-1: USB disconnect, device number 7
[  128.851043][ T1072] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  129.097343][ T6386] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.480315][ T7202] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  129.503973][ T7202] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  129.520850][ T7202] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  129.541119][ T7202] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  129.833647][   T27] audit: type=1326 audit(1752821801.262:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.3.340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa44b18e9a9 code=0x0
[  129.863661][ T5790] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  130.053774][ T5790] usb 3-1: Using ep0 maxpacket: 16
[  130.070077][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.077128][ T7210] loop0: detected capacity change from 0 to 32768
[  130.109037][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.109380][ T7210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.339 (7210)
[  130.140341][ T5790] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  130.164040][ T7210] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.167335][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.185808][ T7210] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  130.197514][ T5790] usb 3-1: config 0 descriptor??
[  130.225226][ T7210] BTRFS info (device loop0): turning on sync discard
[  130.236570][ T7210] BTRFS info (device loop0): allowing degraded mounts
[  130.245561][ T7210] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  130.295619][ T7210] BTRFS info (device loop0): trying to use backup root at mount time
[  130.340477][ T7210] BTRFS info (device loop0): enabling auto defrag
[  130.369156][ T7210] BTRFS info (device loop0): max_inline at 4096
[  130.394278][ T7210] BTRFS info (device loop0): using free space tree
[  130.528139][   T42] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  130.580859][ T7243] Zero length message leads to an empty skb
[  130.612005][ T7210] BTRFS error (device loop0): failed to load root extent
[  130.653530][ T7210] BTRFS warning (device loop0): try to load backup roots slot 1
[  130.703998][   T42] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  130.752917][ T7210] BTRFS warning (device loop0): couldn't read tree root
[  130.773728][ T7210] BTRFS warning (device loop0): try to load backup roots slot 2
[  130.803405][   T12] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  130.839524][ T7210] BTRFS warning (device loop0): couldn't read tree root
[  130.864683][ T7210] BTRFS warning (device loop0): try to load backup roots slot 3
[  130.921194][ T7210] BTRFS info (device loop0): enabling ssd optimizations
[  130.946004][ T7210] BTRFS info (device loop0): rebuilding free space tree
[  131.042228][ T7210] BTRFS info (device loop0): checking UUID tree
[  131.051684][ T7259] hsr0: entered promiscuous mode
[  131.062457][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'.
[  131.091877][ T7259] hsr_slave_0: left promiscuous mode
[  131.117862][ T7259] hsr_slave_1: left promiscuous mode
[  131.202897][ T7259] hsr0 (unregistering): left promiscuous mode
[  131.285454][ T5790] letsketch 0003:6161:4D15.0003: Device info: ᑔ
[  131.373520][ T5853] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  131.411250][ T5785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.489545][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout
[  131.530263][ T5790] usb 3-1: Max retries (5) exceeded reading string descriptor 201
[  131.563638][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  131.569708][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  131.572238][ T5790] letsketch: probe of 0003:6161:4D15.0003 failed with error -71
[  131.575877][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout
[  131.605924][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.631662][ T5853] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  131.641071][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.656288][ T5853] usb 5-1: config 0 descriptor??
[  131.680800][ T5790] usb 3-1: USB disconnect, device number 5
[  131.896123][ T5853] usbhid 5-1:0.0: can't add hid device: -71
[  131.902195][ T5853] usbhid: probe of 5-1:0.0 failed with error -71
[  131.966617][ T5853] usb 5-1: USB disconnect, device number 3
[  132.354208][ T7291] Bluetooth: MGMT ver 1.22
[  132.493773][ T7294] capability: warning: `syz.0.351' uses 32-bit capabilities (legacy support in use)
[  132.503558][ T5853] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  132.838838][ T7297] loop3: detected capacity change from 0 to 32768
[  132.861333][ T7297] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.352 (7297)
[  132.893566][ T7297] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.903831][ T7297] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  132.912526][ T7297] BTRFS info (device loop3): disabling free space tree
[  132.919578][ T7297] BTRFS info (device loop3): turning on async discard
[  132.931858][ T7297] BTRFS info (device loop3): force clearing of disk cache
[  132.939148][ T7297] BTRFS info (device loop3): doing ref verification
[  132.942226][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  132.945786][ T7297] BTRFS info (device loop3): enabling ssd optimizations
[  132.959155][ T7297] BTRFS info (device loop3): using spread ssd allocation scheme
[  132.962982][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  132.966858][ T7297] BTRFS info (device loop3): setting nodatacow, compression disabled
[  132.981350][ T7297] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512
[  133.005021][ T7297] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[  133.023953][ T5853] usb 5-1: Using ep0 maxpacket: 16
[  133.035164][ T7297] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512
[  133.057697][ T7297] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  133.070052][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.081146][ T7297] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  133.093751][ T5853] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  133.102943][ T7297] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  133.115642][ T7297] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
[  133.133399][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.143873][ T5853] usb 5-1: config 0 descriptor??
[  133.224341][ T7297] BTRFS info (device loop3): rebuilding free space tree
[  133.252940][ T7297] BTRFS info (device loop3): disabling free space tree
[  133.260105][ T7297] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  133.269901][ T7297] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  133.466125][ T7297] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512
[  133.478127][ T7297] BTRFS info (device loop3): scrub: started on devid 1
[  133.495274][ T7297] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0
[  133.562873][ T5853] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  133.643509][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout
[  133.713979][ T5786] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.797756][ T7331] loop0: detected capacity change from 0 to 256
[  133.839152][ T7331] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.874690][ T7331] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  133.937780][ T7331] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  134.012789][ T5853] usb 5-1: USB disconnect, device number 4
[  134.857522][ T7334] loop3: detected capacity change from 0 to 32768
[  134.889082][ T7334] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.973581][ T5776] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  134.997832][ T7334] XFS (loop3): Ending clean mount
[  135.169163][ T5776] usb 5-1: Using ep0 maxpacket: 32
[  135.224962][ T5776] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  135.246776][ T5776] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  135.256138][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  135.275020][ T5776] usb 5-1: Product: syz
[  135.279243][ T5776] usb 5-1: Manufacturer: syz
[  135.294619][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.303320][ T5776] usb 5-1: SerialNumber: syz
[  135.320451][ T5776] usb 5-1: config 0 descriptor??
[  135.333166][ T7342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  135.568511][ T5790] usb 5-1: USB disconnect, device number 5
[  135.571361][ T7346] loop0: detected capacity change from 0 to 32768
[  136.451681][ T7383] loop4: detected capacity change from 0 to 1024
[  136.496938][ T7383] EXT4-fs: Ignoring removed oldalloc option
[  136.541088][ T7383] EXT4-fs: Ignoring removed bh option
[  136.571908][ T7383] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  136.650677][ T7383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.839413][ T6386] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.164367][ T7388] loop2: detected capacity change from 0 to 40427
[  137.185084][ T7388] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  137.211414][ T7388] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  137.251902][ T7388] F2FS-fs (loop2): Found nat_bits in checkpoint
[  137.368690][ T7388] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  137.389405][ T7388] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  137.509126][   T27] audit: type=1804 audit(1752821808.942:18): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.375" name="/newroot/100/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  137.619882][ T7419] loop0: detected capacity change from 0 to 256
[  137.628370][ T7419] exfat: Unknown parameter 'namecascard'
[  137.932293][ T7423] loop4: detected capacity change from 0 to 2048
[  137.994097][ T7423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.354076][ T5790] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  138.563437][ T5790] usb 4-1: Using ep0 maxpacket: 32
[  138.571178][ T5790] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  138.581792][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.645706][ T5790] usb 4-1: config 0 descriptor??
[  138.669694][ T5790] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  138.870305][ T7445] loop2: detected capacity change from 0 to 128
[  139.111801][ T7445] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  139.219341][ T7445] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  139.658683][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.853291][    C1] sched: RT throttling activated
[  139.890367][ T5790] gspca_vc032x: reg_w err -71
[  139.898906][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  139.969679][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  139.990583][ T7447] loop4: detected capacity change from 0 to 131072
[  140.004008][ T7447] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  140.004328][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.010725][ T7447] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  140.028502][ T7447] F2FS-fs (loop4): invalid crc value
[  140.088030][ T7447] F2FS-fs (loop4): Found nat_bits in checkpoint
[  140.100277][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.113474][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.125330][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.157401][ T7447] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  140.163846][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.164635][ T7447] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  140.183499][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.219871][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.253989][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.283638][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.311481][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.351926][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.396217][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.420745][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.444983][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.460592][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.480851][ T5790] gspca_vc032x: I2c Bus Busy Wait 00
[  140.504376][ T5790] gspca_vc032x: Unknown sensor...
[  140.544881][ T5790] vc032x: probe of 4-1:0.0 failed with error -22
[  140.577455][ T5790] usb 4-1: USB disconnect, device number 8
[  140.863736][   T27] audit: type=1326 audit(1752821812.312:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340ff8e9a9 code=0x7fc00000
[  142.075868][ T7489] loop2: detected capacity change from 0 to 512
[  142.209541][ T7489] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.400: corrupted inode contents
[  142.245334][ T7489] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.400: mark_inode_dirty error
[  142.290690][ T7489] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.400: corrupted inode contents
[  142.323499][ T7489] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.400: mark_inode_dirty error
[  142.349769][ T7489] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.400: corrupted inode contents
[  142.390552][ T7489] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  142.415559][ T7489] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.400: corrupted inode contents
[  142.435985][ T7489] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.400: mark_inode_dirty error
[  142.455257][ T7489] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  142.459666][ T7485] loop4: detected capacity change from 0 to 32768
[  142.470336][ T7489] EXT4-fs (loop2): 1 truncate cleaned up
[  142.472882][ T7502] loop3: detected capacity change from 0 to 2048
[  142.480280][ T7489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.496500][ T1072] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  142.508540][ T7489] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.517583][ T1072] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:5: Failed to release dquot type 1
[  142.551150][ T7502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.633870][ T7485] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  142.674239][ T5853] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  142.718111][ T7485] (syz.4.398,7485,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=288, inode=0, rec_len=0, name_len=0
[  142.886271][ T5853] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  142.914946][ T5853] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  142.943571][ T5853] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  142.951772][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.956787][ T5853] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  142.979525][ T6386] ocfs2: Unmounting device (7,4) on (node local)
[  143.004590][ T5853] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  143.074398][ T5853] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  143.099955][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  143.123380][ T5853] usb 1-1: Product: syz
[  143.134937][ T5853] usb 1-1: Manufacturer: syz
[  143.157488][ T5853] cdc_wdm 1-1:1.0: skipping garbage
[  143.162754][ T5853] cdc_wdm 1-1:1.0: skipping garbage
[  143.175239][ T5853] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  143.193670][ T5853] cdc_wdm 1-1:1.0: Unknown control protocol
[  143.485281][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  143.491926][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  143.499501][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  143.506131][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  143.512501][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  143.519134][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  143.527138][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  143.533773][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  143.540923][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  143.547565][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  143.554015][ T5826] usb 1-1: USB disconnect, device number 5
[  143.554374][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  143.566785][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  143.572865][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  143.653440][ T5853] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  143.833377][ T5853] usb 5-1: Using ep0 maxpacket: 32
[  143.841858][ T5853] usb 5-1: config 0 has an invalid interface number: 230 but max is 0
[  143.850442][ T5853] usb 5-1: config 0 has no interface number 0
[  143.859794][ T5853] usb 5-1: config 0 interface 230 has no altsetting 0
[  143.870002][ T5853] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  143.879338][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.887710][ T5853] usb 5-1: Product: syz
[  143.891999][ T5853] usb 5-1: Manufacturer: syz
[  143.896745][ T5853] usb 5-1: SerialNumber: syz
[  143.903172][ T5853] usb 5-1: config 0 descriptor??
[  143.910157][ T5853] ums-usbat 5-1:0.230: USB Mass Storage device detected
[  143.921692][ T5853] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  144.123543][ T1187] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  144.312107][ T1187] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.343655][ T1187] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  144.357229][ T1187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.374525][ T1187] usb 4-1: config 0 descriptor??
[  144.387149][ T1187] pwc: Askey VC010 type 2 USB webcam detected.
[  144.572233][ T7542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.420'.
[  144.794661][ T1187] pwc: recv_control_msg error -32 req 02 val 2b00
[  144.802009][ T1187] pwc: recv_control_msg error -32 req 02 val 2700
[  144.810388][ T1187] pwc: recv_control_msg error -32 req 02 val 2c00
[  144.822620][ T7544] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  144.828936][ T7544] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  144.835304][ T7544] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  144.841786][ T7544] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  145.021120][ T1187] pwc: recv_control_msg error -71 req 04 val 1300
[  145.028631][ T1187] pwc: recv_control_msg error -71 req 04 val 1400
[  145.037327][ T1187] pwc: recv_control_msg error -71 req 02 val 2000
[  145.044974][ T1187] pwc: recv_control_msg error -71 req 02 val 2100
[  145.051758][ T1187] pwc: recv_control_msg error -71 req 04 val 1500
[  145.059123][ T1187] pwc: recv_control_msg error -71 req 02 val 2500
[  145.067714][ T1187] pwc: recv_control_msg error -71 req 02 val 2400
[  145.074832][ T1187] pwc: recv_control_msg error -71 req 02 val 2600
[  145.081734][ T1187] pwc: recv_control_msg error -71 req 02 val 2900
[  145.091014][ T1187] pwc: recv_control_msg error -71 req 02 val 2800
[  145.116176][ T1187] pwc: recv_control_msg error -71 req 04 val 1100
[  145.124836][ T1187] pwc: recv_control_msg error -71 req 04 val 1200
[  145.154850][ T1187] pwc: Registered as video103.
[  145.167648][ T1187] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8
[  145.200375][ T1187] usb 4-1: USB disconnect, device number 9
[  145.617964][ T7550] loop2: detected capacity change from 0 to 32768
[  145.628034][ T7550] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.422 (7550)
[  145.671218][ T7550] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  145.692158][ T7550] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  145.714304][ T7550] BTRFS info (device loop2): turning on sync discard
[  145.721952][ T7550] BTRFS info (device loop2): allowing degraded mounts
[  145.731332][ T7550] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  145.745602][ T7550] BTRFS info (device loop2): trying to use backup root at mount time
[  145.755136][ T7550] BTRFS info (device loop2): enabling auto defrag
[  145.761775][ T7550] BTRFS info (device loop2): max_inline at 4096
[  145.789708][ T7550] BTRFS info (device loop2): using free space tree
[  145.841151][ T1072] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  145.873497][ T7550] BTRFS error (device loop2): failed to load root extent
[  145.897758][ T7550] BTRFS warning (device loop2): try to load backup roots slot 1
[  145.927111][ T7555] loop0: detected capacity change from 0 to 32768
[  145.927225][ T1072] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  145.961554][ T7555] (syz.0.423,7555,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.963626][ T7550] BTRFS warning (device loop2): couldn't read tree root
[  145.982590][ T7555] (syz.0.423,7555,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.997212][ T7550] BTRFS warning (device loop2): try to load backup roots slot 2
[  146.020385][   T42] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  146.043773][ T7550] BTRFS warning (device loop2): couldn't read tree root
[  146.055491][ T7550] BTRFS warning (device loop2): try to load backup roots slot 3
[  146.062084][ T7555] JBD2: Ignoring recovery information on journal
[  146.123816][ T7550] BTRFS info (device loop2): enabling ssd optimizations
[  146.148323][ T7550] BTRFS info (device loop2): rebuilding free space tree
[  146.240654][ T7555] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  146.254274][ T7550] BTRFS info (device loop2): checking UUID tree
[  146.287951][ T5853] ums-usbat: probe of 5-1:0.230 failed with error -5
[  146.435241][ T5853] usb 5-1: USB disconnect, device number 6
[  146.573387][ T1187] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  146.584969][ T5785] ocfs2: Unmounting device (7,0) on (node local)
[  146.599329][ T5787] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.763622][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout
[  146.785866][ T1187] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  146.801381][ T1187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.829646][ T1187] usb 4-1: config 0 descriptor??
[  146.852375][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout
[  146.852618][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  146.858913][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout
[  146.874004][ T1187] cp210x 4-1:0.0: cp210x converter detected
[  147.479032][ T1187] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  147.497565][ T1187] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  147.518139][ T1187] usb 4-1: cp210x converter now attached to ttyUSB0
[  147.576893][ T1187] usb 4-1: USB disconnect, device number 10
[  147.604043][ T1187] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  147.612409][ T1187] cp210x 4-1:0.0: device disconnected
[  147.757395][ T7590] loop2: detected capacity change from 0 to 32768
[  147.782903][ T7590] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  147.859889][ T7590] XFS (loop2): Ending clean mount
[  148.042741][ T5787] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  148.472380][ T7634] tipc: Started in network mode
[  148.485713][ T7634] tipc: Node identity ac1414aa, cluster identity 4711
[  148.498208][ T7634] tipc: Enabled bearer <udp:syz2>, priority 10
[  148.627083][ T7639] loop4: detected capacity change from 0 to 1024
[  148.678783][ T7639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.763477][   T28] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  148.792314][ T7639] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4036: comm syz.4.448: Allocating blocks 497-513 which overlap fs metadata
[  148.871545][ T6386] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.901762][ T7637] loop3: detected capacity change from 0 to 32768
[  148.967722][   T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.983743][ T7637] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  149.013495][   T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  149.062615][   T28] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  149.089225][   T27] audit: type=1800 audit(1752821820.532:20): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.447" name="file1" dev="loop3" ino=17059 res=0 errno=0
[  149.110031][   T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  149.132352][   T28] usb 1-1: SerialNumber: syz
[  149.183712][ T7637] 
[  149.186084][ T7637] ======================================================
[  149.193090][ T7637] WARNING: possible circular locking dependency detected
[  149.200103][ T7637] 6.6.99-syzkaller #0 Not tainted
[  149.205110][ T7637] ------------------------------------------------------
[  149.212110][ T7637] syz.3.447/7637 is trying to acquire lock:
[  149.217984][ T7637] ffff88807761d118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_del_inode_from_orphan+0x135/0x740
[  149.230962][ T7637] 
[  149.230962][ T7637] but task is already holding lock:
[  149.238313][ T7637] ffff88805b90cda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_end_io+0x38c/0x10f0
[  149.248920][ T7637] 
[  149.248920][ T7637] which lock already depends on the new lock.
[  149.248920][ T7637] 
[  149.259312][ T7637] 
[  149.259312][ T7637] the existing dependency chain (in reverse order) is:
[  149.268312][ T7637] 
[  149.268312][ T7637] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  149.277175][ T7637]        down_write+0x97/0x1f0
[  149.281939][ T7637]        ocfs2_create_local_dquot+0x1a4/0x1790
[  149.288083][ T7637]        ocfs2_acquire_dquot+0x7cf/0xaf0
[  149.293709][ T7637]        dqget+0x77c/0xeb0
[  149.298120][ T7637]        __dquot_initialize+0x3ba/0xcb0
[  149.303658][ T7637]        ocfs2_get_init_inode+0x13c/0x1b0
[  149.309366][ T7637]        ocfs2_mknod+0x867/0x20f0
[  149.314377][ T7637]        ocfs2_mkdir+0x196/0x410
[  149.319300][ T7637]        vfs_mkdir+0x296/0x440
[  149.324050][ T7637]        do_mkdirat+0x1d4/0x440
[  149.328885][ T7637]        __x64_sys_mkdirat+0x89/0xa0
[  149.334155][ T7637]        do_syscall_64+0x55/0xb0
[  149.339081][ T7637]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  149.345497][ T7637] 
[  149.345497][ T7637] -> #2 (&dquot->dq_lock){+.+.}-{3:3}:
[  149.353130][ T7637]        __mutex_lock+0x129/0xcc0
[  149.358146][ T7637]        dqget+0x6fc/0xeb0
[  149.362566][ T7637]        __dquot_initialize+0x3ba/0xcb0
[  149.368108][ T7637]        ocfs2_get_init_inode+0x13c/0x1b0
[  149.373822][ T7637]        ocfs2_mknod+0x867/0x20f0
[  149.378844][ T7637]        ocfs2_mkdir+0x196/0x410
[  149.383773][ T7637]        vfs_mkdir+0x296/0x440
[  149.388523][ T7637]        do_mkdirat+0x1d4/0x440
[  149.393359][ T7637]        __x64_sys_mkdirat+0x89/0xa0
[  149.398631][ T7637]        do_syscall_64+0x55/0xb0
[  149.403556][ T7637]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  149.410053][ T7637] 
[  149.410053][ T7637] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}:
[  149.420558][ T7637]        down_write+0x97/0x1f0
[  149.425322][ T7637]        ocfs2_evict_inode+0x1313/0x3e60
[  149.430946][ T7637]        evict+0x486/0x870
[  149.435352][ T7637]        ocfs2_dentry_iput+0x248/0x370
[  149.440804][ T7637]        __dentry_kill+0x431/0x650
[  149.445909][ T7637]        dentry_kill+0xb8/0x290
[  149.450746][ T7637]        dput+0xfe/0x1e0
[  149.454978][ T7637]        ovl_get_workdir+0xa6a/0x1740
[  149.460337][ T7637]        ovl_fill_super+0x1345/0x3560
[  149.465695][ T7637]        get_tree_nodev+0xb5/0x140
[  149.470799][ T7637]        vfs_get_tree+0x8c/0x280
[  149.475727][ T7637]        do_new_mount+0x24b/0xa40
[  149.480745][ T7637]        __se_sys_mount+0x2da/0x3c0
[  149.485930][ T7637]        do_syscall_64+0x55/0xb0
[  149.490860][ T7637]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  149.497266][ T7637] 
[  149.497266][ T7637] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}:
[  149.507595][ T7637]        __lock_acquire+0x2ddb/0x7c80
[  149.512958][ T7637]        lock_acquire+0x197/0x410
[  149.517968][ T7637]        down_write+0x97/0x1f0
[  149.522724][ T7637]        ocfs2_del_inode_from_orphan+0x135/0x740
[  149.529039][ T7637]        ocfs2_dio_end_io+0x47b/0x10f0
[  149.534489][ T7637]        dio_complete+0x254/0x710
[  149.539502][ T7637]        __blockdev_direct_IO+0x2dc8/0x3420
[  149.545390][ T7637]        ocfs2_direct_IO+0x240/0x2b0
[  149.550663][ T7637]        generic_file_direct_write+0x1d4/0x3e0
[  149.556806][ T7637]        __generic_file_write_iter+0x11b/0x230
[  149.562943][ T7637]        ocfs2_file_write_iter+0x1582/0x1d00
[  149.568911][ T7637]        do_iter_write+0x79a/0xc70
[  149.574016][ T7637]        iter_file_splice_write+0x66f/0xc50
[  149.579901][ T7637]        direct_splice_actor+0xe8/0x130
[  149.585437][ T7637]        splice_direct_to_actor+0x2f0/0x870
[  149.591322][ T7637]        do_splice_direct+0x1b7/0x2c0
[  149.596686][ T7637]        do_sendfile+0x5dc/0xf70
[  149.601621][ T7637]        __se_sys_sendfile64+0x13f/0x190
[  149.607243][ T7637]        do_syscall_64+0x55/0xb0
[  149.612169][ T7637]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  149.618582][ T7637] 
[  149.618582][ T7637] other info that might help us debug this:
[  149.618582][ T7637] 
[  149.628792][ T7637] Chain exists of:
[  149.628792][ T7637]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type] --> &dquot->dq_lock --> &ocfs2_quota_ip_alloc_sem_key
[  149.628792][ T7637] 
[  149.645732][ T7637]  Possible unsafe locking scenario:
[  149.645732][ T7637] 
[  149.653168][ T7637]        CPU0                    CPU1
[  149.658519][ T7637]        ----                    ----
[  149.663866][ T7637]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  149.669486][ T7637]                                lock(&dquot->dq_lock);
[  149.676410][ T7637]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  149.684594][ T7637]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]);
[  149.691691][ T7637] 
[  149.691691][ T7637]  *** DEADLOCK ***
[  149.691691][ T7637] 
[  149.699828][ T7637] 3 locks held by syz.3.447/7637:
[  149.704836][ T7637]  #0: ffff88802dade418 (sb_writers#26){.+.+}-{0:0}, at: do_sendfile+0x5b9/0xf70
[  149.713985][ T7637]  #1: ffff88805b90d118 (&sb->s_type->i_mutex_key#36){++++}-{3:3}, at: ocfs2_file_write_iter+0x40b/0x1d00
[  149.725293][ T7637]  #2: ffff88805b90cda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_end_io+0x38c/0x10f0
[  149.736340][ T7637] 
[  149.736340][ T7637] stack backtrace:
[  149.742228][ T7637] CPU: 0 PID: 7637 Comm: syz.3.447 Not tainted 6.6.99-syzkaller #0
[  149.750105][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  149.760157][ T7637] Call Trace:
[  149.763430][ T7637]  <TASK>
[  149.766358][ T7637]  dump_stack_lvl+0x16c/0x230
[  149.771029][ T7637]  ? load_image+0x3b0/0x3b0
[  149.775525][ T7637]  ? show_regs_print_info+0x20/0x20
[  149.780721][ T7637]  ? print_circular_bug+0x12b/0x1a0
[  149.785914][ T7637]  check_noncircular+0x2bd/0x3c0
[  149.790851][ T7637]  ? print_deadlock_bug+0x5d0/0x5d0
[  149.796043][ T7637]  ? lockdep_lock+0xe0/0x220
[  149.800627][ T7637]  ? _find_first_zero_bit+0xd3/0x100
[  149.805909][ T7637]  __lock_acquire+0x2ddb/0x7c80
[  149.810759][ T7637]  ? ocfs2_get_system_file_inode+0x1e3/0x7b0
[  149.816736][ T7637]  ? __lock_acquire+0x7c80/0x7c80
[  149.821757][ T7637]  ? verify_lock_unused+0x140/0x140
[  149.826946][ T7637]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  149.832574][ T7637]  ? do_raw_spin_lock+0x121/0x2c0
[  149.837594][ T7637]  ? mutex_unlock+0x10/0x10
[  149.842091][ T7637]  lock_acquire+0x197/0x410
[  149.846585][ T7637]  ? ocfs2_del_inode_from_orphan+0x135/0x740
[  149.852564][ T7637]  ? ocfs2_get_system_file_inode+0x1f1/0x7b0
[  149.858531][ T7637]  ? __might_sleep+0xe0/0xe0
[  149.863110][ T7637]  ? read_lock_is_recursive+0x20/0x20
[  149.868469][ T7637]  ? ocfs2_fast_symlink_read_folio+0x530/0x530
[  149.874612][ T7637]  ? do_raw_spin_unlock+0x121/0x230
[  149.879806][ T7637]  down_write+0x97/0x1f0
[  149.884045][ T7637]  ? ocfs2_del_inode_from_orphan+0x135/0x740
[  149.890015][ T7637]  ? down_read_killable+0x340/0x340
[  149.895211][ T7637]  ocfs2_del_inode_from_orphan+0x135/0x740
[  149.901013][ T7637]  ? __might_sleep+0xe0/0xe0
[  149.905594][ T7637]  ? read_lock_is_recursive+0x20/0x20
[  149.910961][ T7637]  ? ocfs2_add_inode_to_orphan+0x710/0x710
[  149.916757][ T7637]  ? __lock_acquire+0x1334/0x7c80
[  149.921771][ T7637]  ? down_write+0x162/0x1f0
[  149.926265][ T7637]  ? down_read_killable+0x340/0x340
[  149.931461][ T7637]  ocfs2_dio_end_io+0x47b/0x10f0
[  149.936396][ T7637]  ? ocfs2_dio_wr_get_block+0x17a0/0x17a0
[  149.942113][ T7637]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  149.947999][ T7637]  ? _raw_spin_unlock+0x40/0x40
[  149.952845][ T7637]  ? debug_check_no_obj_freed+0x51f/0x540
[  149.958561][ T7637]  ? mark_lock+0x94/0x320
[  149.962885][ T7637]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  149.968856][ T7637]  ? lock_chain_count+0x20/0x20
[  149.973705][ T7637]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  149.979595][ T7637]  ? lockdep_hardirqs_on+0x98/0x150
[  149.984790][ T7637]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  149.990682][ T7637]  ? ocfs2_dio_wr_get_block+0x17a0/0x17a0
[  149.996395][ T7637]  dio_complete+0x254/0x710
[  150.000896][ T7637]  __blockdev_direct_IO+0x2dc8/0x3420
[  150.006267][ T7637]  ? show_vfsstat+0x3a0/0x3a0
[  150.010930][ T7637]  ? __mod_timer+0x984/0xdb0
[  150.015516][ T7637]  ? ocfs2_lock_get_block+0x60/0x60
[  150.020722][ T7637]  ? filemap_write_and_wait_range+0x160/0x1f0
[  150.026793][ T7637]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  150.032760][ T7637]  ? file_update_time+0x197/0x1b0
[  150.037775][ T7637]  ? ocfs2_lock_get_block+0x60/0x60
[  150.042968][ T7637]  ocfs2_direct_IO+0x240/0x2b0
[  150.047725][ T7637]  generic_file_direct_write+0x1d4/0x3e0
[  150.053353][ T7637]  __generic_file_write_iter+0x11b/0x230
[  150.058974][ T7637]  ? ocfs2_file_write_iter+0x1559/0x1d00
[  150.064599][ T7637]  ocfs2_file_write_iter+0x1582/0x1d00
[  150.070054][ T7637]  ? ocfs2_file_read_iter+0xa30/0xa30
[  150.075427][ T7637]  ? kasan_set_track+0x5f/0x70
[  150.080197][ T7637]  ? aa_path_link+0xdd0/0xdd0
[  150.084864][ T7637]  ? iter_file_splice_write+0x18a/0xc50
[  150.090401][ T7637]  ? direct_splice_actor+0xe8/0x130
[  150.095594][ T7637]  ? splice_direct_to_actor+0x2f0/0x870
[  150.101134][ T7637]  ? do_splice_direct+0x1b7/0x2c0
[  150.106153][ T7637]  ? do_sendfile+0x5dc/0xf70
[  150.110743][ T7637]  ? __se_sys_sendfile64+0x13f/0x190
[  150.116026][ T7637]  ? do_syscall_64+0x55/0xb0
[  150.120609][ T7637]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  150.126679][ T7637]  ? end_current_label_crit_section+0x149/0x170
[  150.132914][ T7637]  ? common_file_perm+0x198/0x1f0
[  150.137931][ T7637]  do_iter_write+0x79a/0xc70
[  150.142516][ T7637]  ? vfs_iter_write+0xa0/0xa0
[  150.147185][ T7637]  ? __asan_memset+0x22/0x40
[  150.151768][ T7637]  ? iov_iter_bvec+0xd4/0x1b0
[  150.156437][ T7637]  ? vfs_iter_write+0x6e/0xa0
[  150.161103][ T7637]  iter_file_splice_write+0x66f/0xc50
[  150.166474][ T7637]  ? filemap_splice_read+0x881/0x9e0
[  150.171755][ T7637]  ? splice_from_pipe+0x150/0x150
[  150.176777][ T7637]  ? splice_folio_into_pipe+0xb10/0xb10
[  150.182317][ T7637]  ? splice_from_pipe+0x150/0x150
[  150.187339][ T7637]  direct_splice_actor+0xe8/0x130
[  150.192358][ T7637]  splice_direct_to_actor+0x2f0/0x870
[  150.197724][ T7637]  ? direct_file_splice_eof+0xb0/0xb0
[  150.203089][ T7637]  ? warn_unsupported+0xc0/0xc0
[  150.207932][ T7637]  ? fsnotify_perm+0x5d/0x5e0
[  150.212598][ T7637]  ? security_file_permission+0x79/0xa0
[  150.218134][ T7637]  do_splice_direct+0x1b7/0x2c0
[  150.222985][ T7637]  ? splice_direct_to_actor+0x870/0x870
[  150.228522][ T7637]  ? rcu_read_lock_any_held+0xb4/0x120
[  150.233972][ T7637]  ? do_splice_direct+0x2c0/0x2c0
[  150.238990][ T7637]  do_sendfile+0x5dc/0xf70
[  150.243411][ T7637]  ? do_pwritev+0x340/0x340
[  150.247908][ T7637]  __se_sys_sendfile64+0x13f/0x190
[  150.253019][ T7637]  ? lock_chain_count+0x20/0x20
[  150.257860][ T7637]  ? __x64_sys_sendfile64+0xb0/0xb0
[  150.263059][ T7637]  ? lockdep_hardirqs_on+0x98/0x150
[  150.268250][ T7637]  do_syscall_64+0x55/0xb0
[  150.272660][ T7637]  ? clear_bhb_loop+0x40/0x90
[  150.277322][ T7637]  ? clear_bhb_loop+0x40/0x90
[  150.281990][ T7637]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  150.287880][ T7637] RIP: 0033:0x7fa44b18e9a9
[  150.292294][ T7637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.311982][ T7637] RSP: 002b:00007fa44bfc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  150.320395][ T7637] RAX: ffffffffffffffda RBX: 00007fa44b3b5fa0 RCX: 00007fa44b18e9a9
[  150.328361][ T7637] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[  150.336321][ T7637] RBP: 00007fa44b210ca1 R08: 0000000000000000 R09: 0000000000000000
[  150.344281][ T7637] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000
[  150.352241][ T7637] R13: 0000000000000000 R14: 00007fa44b3b5fa0 R15: 00007ffcded8aca8
[  150.360210][ T7637]  </TASK>
[  150.413698][ T5776] tipc: Node number set to 2886997162
[  150.445564][   T28] usb 1-1: 0:2 : does not exist
[  150.464369][   T28] usb 1-1: 5:0: cannot get min/max values for control 1 (id 5)
[  150.498005][   T28] usb 1-1: USB disconnect, device number 6
[  150.542566][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.778423][ T5786] ocfs2: Unmounting device (7,3) on (node local)