last executing test programs:

4.297181387s ago: executing program 1 (id=273):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x400454de, 0xf0ff1f00000000)

4.097054238s ago: executing program 1 (id=275):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pwritev2(r0, &(0x7f0000000100), 0x10000000000000eb, 0x0, 0x0, 0x0)

3.878829139s ago: executing program 1 (id=277):
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@pqnoenforce}, {@uqnoenforce}, {@nogrpid}, {@qnoenforce}, {@bsdgroups}, {@quota}, {@noikeep}]}, 0x1, 0x985b, &(0x7f000001c900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x4})

2.956982974s ago: executing program 4 (id=290):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x8000, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0xb, 0xb0, 0x1d, 0x80, 0x9, 0x7})

2.642411126s ago: executing program 2 (id=293):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_continue}]}, 0xfe, 0x49e, &(0x7f0000000b00)="$eJzs3MtvG8UfAPDvbpw+f78mlPJoqUSgICIeSZO20AMcQCBxAAkEh3IMiVuVug1qgkSrClKEyhFV4o44IvEXcOKEgBMSFw5wR5UqqJD6uGC09m5qGzs0rRM7+PORnMx4xzvzzezY4xk7AQyssexHEvG/iPglIkbq2eYCY/Vf166cm71+5dxsEtXqG78ntXJXr5ybLYoWj9ueZ8bTiPTjJK+k2cKZsydmKpXy6Tw/uXjy3cmFM2efOn5y5lj5WPnU9OHDBw9MPfP09KGmxx26zTiz+K7u+WB+7+6X37r46uyRi29//1XW3jQ/3hhHt4xlgf9RrWk99mi3K+uxv6o340xK2c8bbaKm3wxFRNZdw7XxPxJDtVzdSLz0UU8bB6yp7Dl7c+fDS1XgPyyJXrcA6I3ihT57/5vfhtdp6tEXLj9ffwOUxX4tv9WPlJbXBtbyDzIWEUeWbnye3aJlHaLqHTQAsAa+yeY/TzbN//L5Rxr3NpTbke8NjUbEXRGxMyLujohdEXFPRK3sfRFx/yrrb90a+uc+THopWvekuiib/z2b7201z/+K2V+MDuW5/9fiH06OHq+U9+d/k/EY3pzlp9qdvDjFiz992qn+xvlfdsvqL+aC+UkulTY3xz83szjTrUnp5fMRe0rt4k+WdwKyundHxJ7VnXpHkTj++Jd7OxX69/hXUFpdg9qpfhHxWL3/l6Il/kKy8v7k5JaolPdP1q+KoTZ1/PDjhdc61X9H8XdB1v/bmq//lhIjfyaN+7ULq6/jwq+fdNxbLd3i9d8ou/43JW/W9nQ35fe9P7O4eHoqYlPySi3fdP/0zccW+aJ8Fv/4vvbjf2f+mCz+ByJib8TPxbB7MO+7hyLi4YjYt0L8373wyDudjvVD/8+1ff5bvv5Hm/t/9YmhE99+3an+1viTPH+zRNb/B2up8fye2vNfbmuH83Zuzpa8xO1ezQAAALDxpLXPxifpxHI6TScm6p/h3xXb0sr8wuITR+ffOzVX/wz9aAynxfrnSMN66FSylJ+xnp/O14qL4wfydePPhrYmSVTKE7Pzlbkexw6DbnuH8Z/5rd1idkQ8t64tBNZUF/bRgA2qdfynPWoHsP68/sPgMv5hcBn/MLiK8f96w30ftpTpsBcAbHBe/2FwGf8wuJbH//netgNYf17/YSC1+5J88T8O7uAr/3eUKK3w7f0+TRSro/3SnhNJRKxtFZH2R6QdE5H/E4t+aU/TFX5LvXO9eptVlFYY3bea6M3zEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLf9HQAA//9H8ud7")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040))

2.334257197s ago: executing program 0 (id=296):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x1000000, 0x8})

2.333673677s ago: executing program 2 (id=297):
r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x800)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0x80885659, &(0x7f0000000080)={0x8, 0x980902, 0x0, 0x4, 0x2, 0x0, 0xfffffffc})

2.179889438s ago: executing program 1 (id=298):
mlockall(0x2)
r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(0x0, &(0x7f0000313000/0x1000)=nil, 0x4000)
mlockall(0x0)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7000)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000008b000/0x3000)=nil)
r2 = shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x0)
shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0)
shmat(0x0, &(0x7f00000f5000/0x4000)=nil, 0x4000)
r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00000d5000/0x3000)=nil)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x6, &(0x7f00000000c0)={0x0, 0x0})
clock_gettime(0x9cb6bcecc6095693, &(0x7f0000004340)={<r4=>0x0, <r5=>0x0})
clock_settime(0x5, &(0x7f0000002180)={r4, r5+10000000})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00')
close_range(r6, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f000031d000/0x1000)=nil, 0x7000)
mlockall(0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
r9 = getpid()
process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f00000001c0)=[{&(0x7f0000008480)=""/95, 0xfffffffffffffcf7}], 0x1, 0x0)
userfaultfd(0x0)
ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYRES8=r4, @ANYRESDEC=r3], 0x58}, 0x1, 0x0, 0x0, 0x440c0}, 0x20000800)

1.989332679s ago: executing program 2 (id=299):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x1ae0cd0d9d2a161b)

1.87864598s ago: executing program 0 (id=300):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0xa73, &(0x7f0000003cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000000c0)=@xfs={0x1c, 0x81, {0xa604, 0x8, 0x2, 0x3}}, 0x4000)

1.649364821s ago: executing program 2 (id=302):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0)

1.552170361s ago: executing program 0 (id=304):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
ioctl$TCSETA(r0, 0x4b6a, 0x0)

1.497189852s ago: executing program 2 (id=305):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
lgetxattr(0x0, 0x0, 0x0, 0x0)

1.471278772s ago: executing program 3 (id=306):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01020000010000ecffff0300260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0)

1.401624772s ago: executing program 0 (id=307):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x2000, 0x0, @loopback, 0x10000}, 0x1c)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x6, 0x101, 0x8, 0x7, 0x1ff], 0x0, 0x0}, 0x78)

1.312574273s ago: executing program 3 (id=308):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
preadv(r0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000500)=""/97, 0x61}], 0x2, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3})

1.257525213s ago: executing program 4 (id=309):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000500)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10)

1.198338544s ago: executing program 0 (id=310):
mlockall(0x2)
r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(0x0, &(0x7f0000313000/0x1000)=nil, 0x4000)
mlockall(0x0)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x7000)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000008b000/0x3000)=nil)
r2 = shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x0)
shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0)
shmat(0x0, &(0x7f00000f5000/0x4000)=nil, 0x4000)
r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f00000d5000/0x3000)=nil)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x6, &(0x7f00000000c0)={0x0, 0x0})
clock_gettime(0x9cb6bcecc6095693, &(0x7f0000004340)={<r4=>0x0, <r5=>0x0})
clock_settime(0x5, &(0x7f0000002180)={r4, r5+10000000})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00')
close_range(r6, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f000031d000/0x1000)=nil, 0x7000)
mlockall(0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
r9 = getpid()
process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f00000001c0)=[{&(0x7f0000008480)=""/95, 0xfffffffffffffcf7}], 0x1, 0x0)
userfaultfd(0x0)
ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYRES8=r4, @ANYRESDEC=r3], 0x58}, 0x1, 0x0, 0x0, 0x440c0}, 0x20000800)

1.037165394s ago: executing program 3 (id=311):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/243, 0xf3}], 0x1, 0xf7b4, 0x9)

967.015545ms ago: executing program 4 (id=312):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349f7f2})
writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89", 0xf4240}], 0x1)

929.906265ms ago: executing program 1 (id=313):
r0 = socket$packet(0x11, 0xa, 0x300)
recvmmsg(r0, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

797.177996ms ago: executing program 3 (id=314):
syz_mount_image$nilfs2(&(0x7f0000000a00), &(0x7f0000000a40)='./file2\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0x1, 0xa04, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e82, &(0x7f0000000140)={@id={0x20000000, 0x0, @auto="2ce7fff400"}})

688.791266ms ago: executing program 4 (id=315):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1d"}]}], {0x14}}, 0x74}}, 0x0)

549.881067ms ago: executing program 1 (id=316):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$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")
setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000010c0)="c7a848", 0x3, 0x0)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2)

381.135108ms ago: executing program 4 (id=317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a69702c706f7274"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

381.003478ms ago: executing program 3 (id=318):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

321.683978ms ago: executing program 0 (id=319):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000001740)={0x0, 0x0, 0x3, {0x2, 0x0, "17"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

226.378009ms ago: executing program 3 (id=320):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000f51f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000720000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffffffff, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

125.083009ms ago: executing program 4 (id=321):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xb, "1ce93ee9"}, @global=@item_4={0x3, 0x1, 0x0, "00ff00"}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_4={0x3, 0x1, 0x3, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)

0s ago: executing program 2 (id=322):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f0000000700)={[{@acl}, {@heartbeat_none}, {@heartbeat_none}, {@coherency_full}, {@coherency_full}, {@resv_level}, {@err_cont}, {@user_xattr}, {@barrier={'barrier', 0x3d, 0x6603}}, {@data_writeback}, {@intr}, {@journal_async_commit}]}, 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {0x2, 0x0, 0x5, 0x8}, 0x4f, [0xd, 0xfffffffb, 0x7fffffff, 0x7f, 0x0, 0xffffffff, 0x2, 0x1, 0x7, 0xa1, 0x9, 0x6, 0x1000, 0x3, 0x6, 0x6, 0x1bc, 0x232e, 0x9, 0x5, 0x9, 0x1ff, 0x8, 0x3, 0x9, 0xee10, 0xffffffff, 0xa, 0x101, 0x4, 0x50000000, 0x2, 0x86, 0xc, 0x4, 0x100, 0x5, 0x80000000, 0x3, 0xcd17, 0x1ee9, 0x0, 0x6, 0x7, 0x2, 0x2bd2, 0x6, 0x7, 0x356, 0x4, 0xc, 0x10000, 0x67, 0x8, 0x82e, 0x2, 0x0, 0x8001, 0x4, 0x6, 0x4, 0x100, 0x2, 0x1], [0xbe7df389, 0x5, 0x2, 0xffffffff, 0xb0000000, 0x8, 0x3, 0x1, 0x3, 0x1000, 0x5, 0x0, 0x4, 0x3, 0x2, 0x4, 0x1, 0x9, 0x8, 0x10000, 0x9, 0xffff0000, 0x2, 0x9, 0x7, 0x1, 0x4, 0x10000, 0x6, 0xaace, 0x5, 0x0, 0x6, 0x4, 0x2, 0x10, 0x1c, 0x9, 0x6, 0x6, 0xfffffff8, 0x3, 0x70, 0x224, 0x7fffffff, 0xffffffff, 0x7fff, 0x40, 0x7, 0x80000001, 0x8, 0x1, 0x3, 0x8, 0xfffffcfe, 0x7, 0x1000006, 0x5c9d, 0x5, 0x8000, 0xfb, 0x5, 0x8000, 0x9], [0x8, 0xb3, 0x0, 0xceb, 0x5, 0x5, 0x800, 0x4, 0x0, 0x6, 0x5, 0x8e0, 0x2, 0x7fff, 0x6, 0x3, 0x2, 0x101, 0x1, 0x7, 0x10001, 0x5, 0x7dbd, 0xffffffff, 0x2, 0x10001, 0x8d40, 0x7a5, 0x8001, 0x101, 0xfff, 0x0, 0x7, 0x8, 0xe, 0x1, 0x2c5, 0x11c09b78, 0x6, 0xf2, 0x5, 0x8, 0x7, 0x614, 0x5, 0x8, 0x8, 0x80000000, 0x6, 0x3, 0x10001, 0x0, 0x3, 0xffff, 0x5, 0x2, 0x787, 0xa, 0xa, 0x39dba4a6, 0x2, 0x6, 0x4, 0x211c], [0x9, 0x7ff, 0x4, 0xfffffffe, 0x2, 0x5, 0x5, 0xa, 0x3, 0xa958, 0xa, 0x5, 0xf5, 0x2, 0x7, 0xb, 0x4, 0x6, 0x80000000, 0x10, 0x9, 0x5, 0x3ff, 0x9, 0x3, 0x4, 0x4, 0xea73, 0x9, 0xfffffff9, 0x1, 0x9, 0xa, 0x8, 0x2, 0x2, 0x10000, 0x3, 0x4, 0x1, 0x3, 0x2, 0x2, 0x9, 0x3, 0x9, 0x41a0, 0x7f, 0x0, 0x7f, 0xb14, 0xc, 0xa8a1, 0x5, 0xb, 0x0, 0x8, 0x0, 0x4, 0x2fd, 0x8802, 0x5, 0x7f, 0x9]}, 0x45c)

kernel console output (not intermixed with test programs):

9][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.559243][ T4244] device veth0_macvtap entered promiscuous mode
[   64.587664][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   64.598716][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   64.608004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   64.616547][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   64.626052][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.634804][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.643677][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.651522][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.671854][ T4244] device veth1_macvtap entered promiscuous mode
[   64.681776][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.697613][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.707548][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.716171][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   64.726587][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.736192][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.746126][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.755515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.772877][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.806957][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.816261][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.825418][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.835178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.847104][ T4250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.857358][ T4250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.867137][ T4250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.877813][ T4250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.892280][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.903921][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.915539][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.929251][ T4245] device veth0_vlan entered promiscuous mode
[   64.941334][ T4254] device veth0_macvtap entered promiscuous mode
[   64.964886][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.974010][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.983424][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.992817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.001668][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.014488][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.025868][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.037675][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.060204][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.068116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.077610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.087384][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.098157][ T4254] device veth1_macvtap entered promiscuous mode
[   65.138354][ T4245] device veth1_vlan entered promiscuous mode
[   65.146561][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.156413][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.165725][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.175276][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.191063][ T4244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.201713][ T4244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.211164][ T4244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.220434][ T4244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.254743][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.265578][ T4258] Bluetooth: hci1: command 0x040f tx timeout
[   65.265602][   T48] Bluetooth: hci0: command 0x040f tx timeout
[   65.271650][ T4258] Bluetooth: hci2: command 0x040f tx timeout
[   65.282190][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.293892][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.304659][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.320643][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.330943][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.342643][   T48] Bluetooth: hci4: command 0x040f tx timeout
[   65.349139][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.359147][   T48] Bluetooth: hci3: command 0x040f tx timeout
[   65.366098][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.377162][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.388343][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.410147][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.421689][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.430498][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.439271][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.448326][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.466463][ T4255] device veth0_vlan entered promiscuous mode
[   65.482333][ T4254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.491638][ T4254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.502978][ T4254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.512238][ T4254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.532283][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.542158][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.542170][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.561859][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.571723][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.581219][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.592088][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.600356][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.608262][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.620977][ T4245] device veth0_macvtap entered promiscuous mode
[   65.635441][ T4245] device veth1_macvtap entered promiscuous mode
[   65.650347][ T4255] device veth1_vlan entered promiscuous mode
[   65.713677][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.732895][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.743809][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.754573][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.764940][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.775975][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.788037][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.810719][ T4255] device veth0_macvtap entered promiscuous mode
[   65.817989][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.835522][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.844330][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.853441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.861901][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.871290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.882093][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.891074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.907932][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.916377][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.925719][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.937465][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.947634][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.958314][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.968642][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.981336][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.992715][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.003548][ T4255] device veth1_macvtap entered promiscuous mode
[   66.019071][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.029413][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.038064][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.046898][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.058289][ T4245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.070698][ T4245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.080075][ T4245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.088808][ T4245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.194336][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.205934][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.214070][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.215995][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.234694][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.245390][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.255264][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.266134][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.276501][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.287342][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.298800][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.329769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.338030][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.355092][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.390106][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.390738][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.398230][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.434405][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.447950][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.465645][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.476308][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.493968][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.506433][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.519620][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.534056][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.572316][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.591793][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.611076][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.635626][ T4255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.657808][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.669987][ T4255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.678724][ T4255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.700570][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.710228][ T4255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.759450][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.770040][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.785252][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.857142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.888164][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.896981][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.919382][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.933235][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.962001][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.983443][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.034451][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.053764][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.078773][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.132650][ T4327] loop3: detected capacity change from 0 to 40427
[   67.157267][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.188339][ T4327] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[   67.211051][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.245468][ T4327] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   67.256598][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.331209][ T4327] F2FS-fs (loop3): Found nat_bits in checkpoint
[   67.341042][ T4259] Bluetooth: hci2: command 0x0419 tx timeout
[   67.341062][   T48] Bluetooth: hci1: command 0x0419 tx timeout
[   67.347396][ T4259] Bluetooth: hci0: command 0x0419 tx timeout
[   67.421081][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[   67.421100][ T4259] Bluetooth: hci4: command 0x0419 tx timeout
[   67.472567][ T4327] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   67.490795][ T4327] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   67.536735][ T4342] loop1: detected capacity change from 0 to 512
[   67.547210][ T4342] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   67.598235][ T4342] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   67.608540][ T4332] loop4: detected capacity change from 0 to 4096
[   67.662402][ T4342] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7: invalid indirect mapped block 1 (level 1)
[   67.726347][ T4250] syz-executor: attempt to access beyond end of device
[   67.726347][ T4250] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   67.767342][ T4342] EXT4-fs (loop1): 1 truncate cleaned up
[   67.773897][ T4342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   67.858993][ T4346] loop0: detected capacity change from 0 to 4096
[   67.940553][ T4346] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[   67.963290][ T4245] EXT4-fs (loop1): unmounting filesystem.
[   68.228051][ T4335] loop2: detected capacity change from 0 to 32768
[   68.282634][ T4335] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.6 (4335)
[   68.361525][ T4350] loop4: detected capacity change from 0 to 2048
[   68.408560][ T4335] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   68.452140][ T4350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   68.485611][ T4360] netlink: 'syz.3.8': attribute type 1 has an invalid length.
[   68.495020][ T4360] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.8'.
[   68.495233][ T4335] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   68.609669][ T4335] BTRFS info (device loop2): using free space tree
[   68.730153][ T4244] EXT4-fs (loop4): unmounting filesystem.
[   68.864110][ T4335] BTRFS info (device loop2): enabling ssd optimizations
[   68.973485][ T4254] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   69.029846][ T4289] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   69.244313][ T4289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.266224][ T4289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.286730][ T4289] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[   69.308169][ T4289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.333070][ T4289] usb 4-1: config 0 descriptor??
[   69.439767][ T4395] loop2: detected capacity change from 0 to 512
[   69.442955][ T4362] loop0: detected capacity change from 0 to 32768
[   69.471301][ T4395] =======================================================
[   69.471301][ T4395] WARNING: The mand mount option has been deprecated and
[   69.471301][ T4395]          and is ignored by this kernel. Remove the mand
[   69.471301][ T4395]          option from the mount to silence this warning.
[   69.471301][ T4395] =======================================================
[   69.586123][ T4362] XFS (loop0): Mounting V5 Filesystem
[   69.629674][ T4395] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   69.650735][ T4385] loop4: detected capacity change from 0 to 32768
[   69.669682][ T4385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.15 (4385)
[   69.734177][ T4385] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   69.736851][ T4362] XFS (loop0): Ending clean mount
[   69.761450][ T4395] EXT4-fs (loop2): 1 truncate cleaned up
[   69.767170][ T4395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   69.784188][ T4362] XFS (loop0): Quotacheck needed: Please wait.
[   69.799752][ T4385] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   69.808478][ T4385] BTRFS info (device loop4): using free space tree
[   69.817001][ T4289] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0
[   69.875876][ T4289] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x1
[   69.912915][ T4254] EXT4-fs (loop2): unmounting filesystem.
[   69.936208][ T4289] zeroplus 0003:0C12:0030.0001: item fetching failed at offset 3/7
[   69.947518][ T4385] BTRFS info (device loop4): enabling ssd optimizations
[   69.976629][ T4289] zeroplus 0003:0C12:0030.0001: parse failed
[   70.026096][ T4289] zeroplus: probe of 0003:0C12:0030.0001 failed with error -22
[   70.084461][ T4289] usb 4-1: USB disconnect, device number 2
[   70.139260][ T4362] XFS (loop0): Quotacheck: Done.
[   70.247745][ T4305] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[   70.275493][ T4427] loop2: detected capacity change from 0 to 1024
[   70.301253][ T4394] loop1: detected capacity change from 0 to 32768
[   70.322110][ T4255] XFS (loop0): Unmounting Filesystem
[   70.467844][ T4244] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   70.480228][ T4427] hfsplus: bad catalog entry type
[   70.487072][ T4394] JBD2: Ignoring recovery information on journal
[   70.586974][   T11] hfsplus: b-tree write err: -5, ino 4
[   70.616176][ T4394] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   70.809775][ T4439] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   70.969051][ T4447] loop3: detected capacity change from 0 to 256
[   70.980333][ T4245] ocfs2: Unmounting device (7,1) on (node local)
[   71.042056][ T4447] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   71.369657][ T4441] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   71.383965][ T2117] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   71.423931][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[   71.430611][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[   71.519788][ T4459] loop1: detected capacity change from 0 to 8192
[   71.565793][ T4441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.566033][ T4459] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   71.590669][ T2117] usb 3-1: Using ep0 maxpacket: 32
[   71.601346][ T2117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.602765][ T4441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.618921][ T2117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.632729][ T2117] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[   71.642139][ T2117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.650665][ T4459] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   71.673552][ T4441] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   71.673898][ T2117] usb 3-1: config 0 descriptor??
[   71.693015][ T4459] REISERFS (device loop1): using ordered data mode
[   71.702452][ T4459] reiserfs: using flush barriers
[   71.707254][ T4441] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[   71.734595][ T4459] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   71.737641][ T4441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.760472][ T4459] REISERFS (device loop1): checking transaction log (loop1)
[   71.781929][ T4459] REISERFS (device loop1): Using r5 hash to sort names
[   71.791883][ T4459] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   71.809334][ T4459] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   71.813425][ T4441] usb 5-1: config 0 descriptor??
[   71.999181][ T4457] loop3: detected capacity change from 0 to 32768
[   72.046783][ T4457] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.28 (4457)
[   72.105456][ T4457] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   72.123266][ T4457] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   72.155433][ T4457] BTRFS info (device loop3): turning on flush-on-commit
[   72.168048][ T2117] nintendo 0003:057E:200E.0002: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0
[   72.181220][ T4457] BTRFS info (device loop3): turning off barriers
[   72.187779][ T4457] BTRFS info (device loop3): doing ref verification
[   72.197861][ T4457] BTRFS info (device loop3): force clearing of disk cache
[   72.206190][ T4457] BTRFS info (device loop3): enabling disk space caching
[   72.214692][ T4457] BTRFS info (device loop3): turning on sync discard
[   72.223670][ T4457] BTRFS info (device loop3): using default commit interval 30s
[   72.232069][ T4457] BTRFS info (device loop3): disk space caching is enabled
[   72.258464][ T4457] BTRFS info (device loop3): enabling ssd optimizations
[   72.270403][ T2117] nintendo 0003:057E:200E.0002: Failed charging grip handshake
[   72.279785][ T2117] nintendo 0003:057E:200E.0002: Failed to initialize controller; ret=-110
[   72.284851][ T4441] corsair-cpro 0003:1B1C:1D00.0003: item fetching failed at offset 1/5
[   72.298272][ T4457] BTRFS info (device loop3): rebuilding free space tree
[   72.339062][ T2117] nintendo 0003:057E:200E.0002: probe - fail = -110
[   72.340188][ T4441] corsair-cpro: probe of 0003:1B1C:1D00.0003 failed with error -22
[   72.354279][ T2117] nintendo: probe of 0003:057E:200E.0002 failed with error -110
[   72.398285][ T2117] usb 3-1: USB disconnect, device number 2
[   72.410407][ T4461] loop0: detected capacity change from 0 to 32768
[   72.423069][ T4457] BTRFS info (device loop3): disabling free space tree
[   72.460071][ T4457] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   72.462774][ T4461] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.30 (4461)
[   72.530334][ T4324] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4324)
[   72.559623][ T4457] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   72.615580][ T4292] usb 5-1: USB disconnect, device number 2
[   72.669595][ T4441] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   72.781198][ T4250] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   72.850053][ T4487] loop0: detected capacity change from 0 to 512
[   72.875339][ T4441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.894456][ T4441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.906829][ T4441] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[   72.918525][ T4441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.933051][ T4487] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   72.943623][ T4441] usb 2-1: config 0 descriptor??
[   72.979746][ T4487] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.133422][ T4255] EXT4-fs (loop0): unmounting filesystem.
[   73.290269][ T4496] loop0: detected capacity change from 0 to 8
[   73.326015][ T4496] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   73.401740][ T4441] belkin 0003:1020:0006.0004: report_id 0 is invalid
[   73.401896][ T4496] process 'syz.0.36' launched '/dev/fd/4/./file0' with NULL argv: empty string added
[   73.423701][ T4441] belkin 0003:1020:0006.0004: item 0 0 1 8 parsing failed
[   73.446674][ T4441] belkin 0003:1020:0006.0004: parse failed
[   73.448781][ T4496] cramfs: Error -5 while decompressing!
[   73.465753][ T4496] cramfs: ffffffff974c54f8(27)->ffff888057313000(4096)
[   73.473260][ T4496] cramfs: Error -5 while decompressing!
[   73.474540][ T4441] belkin: probe of 0003:1020:0006.0004 failed with error -22
[   73.478939][ T4496] cramfs: ffffffff974c54f8(27)->ffff888057313000(4096)
[   73.504098][ T4503] loop2: detected capacity change from 0 to 256
[   73.565509][ T4503] FAT-fs (loop2): Directory bread(block 64) failed
[   73.578136][ T4503] FAT-fs (loop2): Directory bread(block 65) failed
[   73.588210][ T4503] FAT-fs (loop2): Directory bread(block 66) failed
[   73.595067][ T4292] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   73.602843][ T4503] FAT-fs (loop2): Directory bread(block 67) failed
[   73.609917][ T4503] FAT-fs (loop2): Directory bread(block 68) failed
[   73.616774][ T4503] FAT-fs (loop2): Directory bread(block 69) failed
[   73.624771][ T4503] FAT-fs (loop2): Directory bread(block 70) failed
[   73.657330][ T2117] usb 2-1: USB disconnect, device number 2
[   73.663364][ T4503] FAT-fs (loop2): Directory bread(block 71) failed
[   73.687045][ T4503] FAT-fs (loop2): Directory bread(block 72) failed
[   73.702272][ T4503] FAT-fs (loop2): Directory bread(block 73) failed
[   73.756306][ T4505] loop0: detected capacity change from 0 to 4096
[   73.789690][ T4292] usb 5-1: Using ep0 maxpacket: 32
[   73.797707][ T4505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   73.808304][ T4292] usb 5-1: config 4 has an invalid interface number: 128 but max is 0
[   73.827275][ T4292] usb 5-1: config 4 has no interface number 0
[   73.842423][ T4292] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.872454][ T4292] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.889082][ T4292] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   73.899162][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.909849][ T4255] EXT4-fs (loop0): unmounting filesystem.
[   73.925675][ T4292] hub 5-1:4.128: USB hub found
[   74.128380][ T4292] hub 5-1:4.128: 2 ports detected
[   74.133850][ T4292] hub 5-1:4.128: Using single TT (err -22)
[   74.168939][ T4501] loop3: detected capacity change from 0 to 32768
[   74.209677][ T4510] loop2: detected capacity change from 0 to 4096
[   74.229370][ T4510] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   74.267467][ T4501] XFS (loop3): Mounting V5 Filesystem
[   74.302160][ T4510] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   74.335262][ T4292] hub 5-1:4.128: hub_hub_status failed (err = -71)
[   74.349513][ T4292] hub 5-1:4.128: config failed, can't get hub status (err -71)
[   74.390052][ T4501] XFS (loop3): Ending clean mount
[   74.406042][ T4521] loop1: detected capacity change from 0 to 128
[   74.427783][ T4292] usb 5-1: USB disconnect, device number 3
[   74.455258][ T4521] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   74.470364][ T4521] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   74.475335][ T4523] loop0: detected capacity change from 0 to 256
[   74.528881][ T4250] XFS (loop3): Unmounting Filesystem
[   74.709311][ T4528] loop2: detected capacity change from 0 to 1024
[   74.723038][ T4245] EXT4-fs (loop1): unmounting filesystem.
[   74.786417][ T4528] hfsplus: bad catalog entry type
[   74.883822][ T4532] loop0: detected capacity change from 0 to 24
[   74.892319][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'.
[   74.894002][    T9] hfsplus: b-tree write err: -5, ino 4
[   75.105043][ T4536] loop4: detected capacity change from 0 to 64
[   75.300262][ T4544] loop3: detected capacity change from 0 to 1024
[   76.172126][ T4542] loop2: detected capacity change from 0 to 32768
[   76.289706][ T4542] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[   76.289706][ T4542] 
[   76.422182][ T4541] loop1: detected capacity change from 0 to 40427
[   76.453359][ T4541] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff
[   76.456254][ T4550] loop4: detected capacity change from 0 to 32768
[   76.500430][ T4541] F2FS-fs (loop1): invalid crc value
[   76.536881][ T4541] F2FS-fs (loop1): Found nat_bits in checkpoint
[   76.554094][   T33] cfg80211: failed to load regulatory.db
[   76.695552][ T4552] loop3: detected capacity change from 0 to 32768
[   76.728159][ T4552] XFS: attr2 mount option is deprecated.
[   76.740446][ T4541] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   76.783385][   T26] audit: type=1800 audit(1732054833.196:2): pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.53" name="bus" dev="loop1" ino=10 res=0 errno=0
[   76.918239][ T4552] XFS (loop3): Mounting V5 Filesystem
[   77.054873][ T4556] loop0: detected capacity change from 0 to 32768
[   77.071111][ T4245] syz-executor: attempt to access beyond end of device
[   77.071111][ T4245] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   77.133542][ T4552] XFS (loop3): Ending clean mount
[   77.204573][ T4552] XFS (loop3): Quotacheck needed: Please wait.
[   77.302135][ T4552] XFS (loop3): Quotacheck: Done.
[   77.518820][ T4250] XFS (loop3): Unmounting Filesystem
[   77.979826][ T4292] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   78.037746][ T4580] loop3: detected capacity change from 0 to 8
[   78.160479][ T4292] usb 1-1: too many configurations: 65, using maximum allowed: 8
[   78.191882][ T4292] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[   78.196195][ T4573] loop2: detected capacity change from 0 to 32768
[   78.206414][ T4572] loop4: detected capacity change from 0 to 32768
[   78.218998][ T4292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.245994][ T4573] XFS: noikeep mount option is deprecated.
[   78.266967][ T4572] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.61 (4572)
[   78.295259][ T4572] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   78.300356][ T4587] loop3: detected capacity change from 0 to 256
[   78.331288][ T4587] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   78.342794][ T4587] FAT-fs (loop3): Filesystem has been set read-only
[   78.352549][ T4573] XFS (loop2): Mounting V5 Filesystem
[   78.360101][ T4587] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   78.370962][ T4587] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   78.374138][ T4572] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   78.395373][   T26] audit: type=1800 audit(1732054834.826:3): pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.67" name="file1" dev="loop3" ino=1048620 res=0 errno=0
[   78.400146][ T4572] BTRFS info (device loop4): using free space tree
[   78.434169][ T4587] syz.3.67 (4587) used greatest stack depth: 19680 bytes left
[   78.465626][ T4433] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   78.487504][ T4573] XFS (loop2): Ending clean mount
[   78.503555][ T4573] XFS (loop2): Quotacheck needed: Please wait.
[   78.622587][ T4573] XFS (loop2): Quotacheck: Done.
[   78.632945][ T4605] loop3: detected capacity change from 0 to 512
[   78.653364][ T4433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.680254][ T4605] EXT4-fs: Ignoring removed nobh option
[   78.704205][ T4433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.710915][ T4292] usb 1-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[   78.730031][ T4292] usb 1-1: No valid video chain found.
[   78.736864][ T4433] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   78.762775][ T4572] BTRFS info (device loop4): enabling ssd optimizations
[   78.776306][   T26] audit: type=1800 audit(1732054835.196:4): pid=4573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.63" name="file1" dev="loop2" ino=1062 res=0 errno=0
[   78.807544][ T4433] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[   78.810149][ T4605] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   78.817002][ T4254] XFS (loop2): Unmounting Filesystem
[   78.825813][ T4605] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.838145][ T4433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.859368][ T4433] usb 2-1: config 0 descriptor??
[   78.951816][   T33] usb 1-1: USB disconnect, device number 2
[   78.958895][ T4605] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.3.68: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0
[   79.040295][ T4605] EXT4-fs (loop3): Remounting filesystem read-only
[   79.046882][ T4605] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[   79.086092][ T4605] EXT4-fs (loop3): Remounting filesystem read-only
[   79.114440][ T4605] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.68: Deleting old file: nlink 4, error=-117
[   79.264631][ T4250] EXT4-fs (loop3): unmounting filesystem.
[   79.281339][ T4431] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[   79.293172][ T4433] logitech 0003:046D:C293.0005: unbalanced delimiter at end of report description
[   79.313730][ T4433] logitech 0003:046D:C293.0005: parse failed
[   79.340283][ T4433] logitech: probe of 0003:046D:C293.0005 failed with error -22
[   79.406276][ T4244] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   79.538526][ T4619] loop2: detected capacity change from 0 to 4096
[   79.570087][ T4441] usb 2-1: USB disconnect, device number 3
[   79.618832][ T4619] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   79.663291][ T4628] IPVS: Unknown mcast interface: pim6reg0
[   79.814871][ T4325] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   80.025776][ T4325] usb 4-1: Using ep0 maxpacket: 16
[   80.033067][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.044611][ T4626] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   80.075136][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.085520][ T4325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   80.119739][ T4325] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   80.128843][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.165387][ T4325] usb 4-1: config 0 descriptor??
[   80.241216][ T4626] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.275716][ T4626] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   80.296550][ T4626] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[   80.314707][ T4636] loop1: detected capacity change from 0 to 4096
[   80.329153][ T4626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   80.350889][ T4626] usb 1-1: SerialNumber: syz
[   80.377000][ T4626] usb 1-1: 0:2 : does not exist
[   80.434636][ T4637] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   80.475665][ T4633] loop4: detected capacity change from 0 to 32768
[   80.593833][ T4325] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max
[   80.612182][ T4634] loop2: detected capacity change from 0 to 32768
[   80.654050][ T4325] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input5
[   80.654505][ T4644] loop1: detected capacity change from 0 to 256
[   80.673959][ T4633] XFS (loop4): Mounting V5 Filesystem
[   80.682067][ T4325] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   80.860392][ T4644] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   80.875266][ T4633] XFS (loop4): Ending clean mount
[   80.885167][ T4325] usb 1-1: USB disconnect, device number 3
[   80.900217][ T4634] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   80.963893][ T4490] usb 4-1: USB disconnect, device number 3
[   81.055459][ T4244] XFS (loop4): Unmounting Filesystem
[   81.211478][ T4655] loop1: detected capacity change from 0 to 256
[   81.246891][ T4254] ocfs2: Unmounting device (7,2) on (node local)
[   81.254798][ T4655] FAT-fs (loop1): Directory bread(block 64) failed
[   81.267668][ T4655] FAT-fs (loop1): Directory bread(block 65) failed
[   81.274864][ T4655] FAT-fs (loop1): Directory bread(block 66) failed
[   81.301795][ T4655] FAT-fs (loop1): Directory bread(block 67) failed
[   81.315296][ T4655] FAT-fs (loop1): Directory bread(block 68) failed
[   81.327194][ T4655] FAT-fs (loop1): Directory bread(block 69) failed
[   81.339318][ T4655] FAT-fs (loop1): Directory bread(block 70) failed
[   81.350811][ T4655] FAT-fs (loop1): Directory bread(block 71) failed
[   81.357541][ T4655] FAT-fs (loop1): Directory bread(block 72) failed
[   81.365446][ T4655] FAT-fs (loop1): Directory bread(block 73) failed
[   81.557424][ T4657] loop0: detected capacity change from 0 to 256
[   81.588250][ T4657] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe40551cd, utbl_chksum : 0xe619d30d)
[   81.692128][   T26] audit: type=1800 audit(1732054838.116:5): pid=4657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.81" name="file1" dev="loop0" ino=1048641 res=0 errno=0
[   81.999604][ T4433] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   82.189566][ T4433] usb 2-1: Using ep0 maxpacket: 16
[   82.196649][ T4433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.238261][ T4433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.268949][ T4433] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   82.302375][ T4433] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   82.329568][ T4433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.366291][ T4433] usb 2-1: config 0 descriptor??
[   82.464041][ T4659] loop3: detected capacity change from 0 to 32768
[   82.537218][ T4663] loop2: detected capacity change from 0 to 32768
[   82.558570][ T4661] loop4: detected capacity change from 0 to 32768
[   82.570535][ T4663] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.80 (4663)
[   82.599776][ T4659] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[   82.636272][ T4659] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[   82.661048][ T4667] loop0: detected capacity change from 0 to 40427
[   82.672333][ T4667] F2FS-fs (loop0): Invalid log blocks per segment (4278190089)
[   82.672623][ T4663] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   82.680114][ T4667] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   82.703346][ T4663] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   82.720263][ T4667] F2FS-fs (loop0): invalid crc value
[   82.737429][ T4667] F2FS-fs (loop0): Found nat_bits in checkpoint
[   82.741962][ T4659] XFS (loop3): Quotacheck needed: Please wait.
[   82.752496][ T4661] XFS (loop4): Mounting V5 Filesystem
[   82.755261][ T4663] BTRFS info (device loop2): using free space tree
[   82.792033][ T4433] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   82.805242][ T4659] XFS (loop3): Quotacheck: Done.
[   82.811592][ T4433] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   82.819435][ T4433] microsoft 0003:045E:07DA.0007: No inputs registered, leaving
[   82.873126][ T4661] XFS (loop4): Ending clean mount
[   82.879270][ T4667] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   82.905137][ T4663] BTRFS info (device loop2): enabling ssd optimizations
[   82.914750][ T4433] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   82.919595][ T4667] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   82.926765][ T4433] microsoft 0003:045E:07DA.0007: no inputs found
[   82.947563][ T4250] XFS (loop3): Unmounting Filesystem
[   82.949287][ T4433] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway
[   83.014425][ T4661] syz.4.78 (4661) used greatest stack depth: 19208 bytes left
[   83.058899][ T4254] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.085199][ T4433] usb 2-1: USB disconnect, device number 4
[   83.144631][ T4244] XFS (loop4): Unmounting Filesystem
[   83.589572][ T4292] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   83.645848][ T4712] loop0: detected capacity change from 0 to 1024
[   83.776484][ T4714] loop1: detected capacity change from 0 to 16
[   83.799735][ T4292] usb 3-1: Using ep0 maxpacket: 16
[   83.811011][ T4292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.832141][ T4714] erofs: (device loop1): mounted with root inode @ nid 36.
[   83.837425][ T4292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.850254][ T4292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   83.863727][ T4292] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   83.873774][ T4292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.900870][ T4292] usb 3-1: config 0 descriptor??
[   84.077708][ T4718] loop1: detected capacity change from 0 to 1024
[   84.114561][ T4718] EXT4-fs: Ignoring removed i_version option
[   84.138195][ T4718] EXT4-fs: Ignoring removed bh option
[   84.177622][ T4710] loop4: detected capacity change from 0 to 32768
[   84.254973][ T4718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   84.361416][ T4292] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[   84.370030][ T4292] microsoft 0003:045E:07DA.0008: unbalanced collection at end of report description
[   84.392782][ T4292] microsoft 0003:045E:07DA.0008: parse failed
[   84.400215][ T4292] microsoft: probe of 0003:045E:07DA.0008 failed with error -22
[   84.468899][ T4245] EXT4-fs (loop1): unmounting filesystem.
[   84.545624][ T4725] loop1: detected capacity change from 0 to 64
[   84.591750][ T4433] usb 3-1: USB disconnect, device number 3
[   84.742449][ T4727] loop1: detected capacity change from 0 to 8
[   84.799925][ T4727] SQUASHFS error: lzo decompression failed, data probably corrupt
[   84.819298][ T4727] SQUASHFS error: Failed to read block 0x91: -5
[   84.829418][ T4727] SQUASHFS error: Unable to read metadata cache entry [8f]
[   84.846991][ T4727] SQUASHFS error: Unable to read inode 0x11f
[   84.864669][ T4716] loop0: detected capacity change from 0 to 32768
[   84.958223][ T4716] JFS: block map error in dbBackSplit
[   84.965451][ T4716] ERROR: (device loop0): dbDiscardAG: -EIO
[   84.965451][ T4716] 
[   84.971893][ T4723] loop3: detected capacity change from 0 to 40427
[   84.979042][ T4716] ERROR: (device loop0): remounting filesystem as read-only
[   84.987738][ T4716] syz.0.90: attempt to access beyond end of device
[   84.987738][ T4716] loop0: rw=2051, sector=2629632, nr_sectors = 8192 limit=32768
[   85.004299][ T4716] JFS: sb_issue_discard(ffff8880716aa000, 328704, 1024, GFP_NOFS, 0) = -5 => failed!
[   85.008206][ T4723] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   85.015287][ T4716] blkno = 50400, nblocks = 400
[   85.034433][ T4723] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   85.044612][ T4716] ERROR: (device loop0): dbFree: block to be freed is outside the map
[   85.044612][ T4716] 
[   85.061391][ T4723] F2FS-fs (loop3): invalid crc_offset: 33558524
[   85.122947][ T4723] F2FS-fs (loop3): Found nat_bits in checkpoint
[   85.183482][ T4732] loop2: detected capacity change from 0 to 512
[   85.200708][ T4289] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   85.201751][ T4723] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   85.226378][ T4723] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   85.241709][ T4732] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.95: inode #1: comm syz.2.95: iget: illegal inode #
[   85.294983][ T4732] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.95: error while reading EA inode 1 err=-117
[   85.325930][ T4732] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   85.345076][ T4732] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.95: inode #1: comm syz.2.95: iget: illegal inode #
[   85.366038][ T4732] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.95: error while reading EA inode 1 err=-117
[   85.379970][ T4732] EXT4-fs (loop2): 1 orphan inode deleted
[   85.392041][ T4732] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   85.425121][ T4289] usb 2-1: Using ep0 maxpacket: 8
[   85.433105][ T4289] usb 2-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config
[   85.456148][ T4254] EXT4-fs (loop2): unmounting filesystem.
[   85.465268][ T4289] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   85.480528][ T4289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   85.489120][ T4289] usb 2-1: SerialNumber: syz
[   85.513864][ T4289] usb 2-1: config 0 descriptor??
[   85.560930][ T2265] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   85.605384][ T4738] loop2: detected capacity change from 0 to 256
[   85.654921][ T4738] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   85.739291][ T4289] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   85.759152][ T4289] usb 2-1: No valid video chain found.
[   85.785418][ T4289] usb 2-1: USB disconnect, device number 5
[   85.792661][ T2265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[   85.822545][ T2265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.866835][ T2265] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[   85.887348][ T2265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.907272][ T2265] usb 5-1: config 0 descriptor??
[   85.936484][ T4740] loop0: detected capacity change from 0 to 4096
[   85.956404][ T4740] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   86.025765][ T4746] random: crng reseeded on system resumption
[   86.182773][ T4749] loop3: detected capacity change from 0 to 1024
[   86.217377][ T4749] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   86.245592][ T4749] EXT4-fs (loop3): invalid journal inode
[   86.265786][ T4749] EXT4-fs (loop3): can't get journal size
[   86.296345][ T4749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   86.334948][ T2265] logitech 0003:046D:CA04.0009: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0
[   86.438095][ T2265] logitech 0003:046D:CA04.0009: no inputs found
[   86.461728][ T4755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'.
[   86.478142][ T4250] EXT4-fs (loop3): unmounting filesystem.
[   86.566949][ T4289] usb 5-1: USB disconnect, device number 4
[   86.687841][ T4763] loop0: detected capacity change from 0 to 128
[   86.719648][ T4763] EXT4-fs: Ignoring removed nobh option
[   86.754611][ T4763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   86.764124][ T4763] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.785230][ T4766] loop1: detected capacity change from 0 to 256
[   86.811355][ T4763] EXT4-fs warning (device loop0): ext4_group_add:1743: No reserved GDT blocks, can't resize
[   86.821662][ T4766] exfat: Deprecated parameter 'utf8'
[   86.827153][ T4766] exfat: Deprecated parameter 'utf8'
[   86.833256][ T4766] exfat: Deprecated parameter 'utf8'
[   86.869270][ T4766] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[   86.891763][ T4255] EXT4-fs (loop0): unmounting filesystem.
[   87.257632][ T4770] loop1: detected capacity change from 0 to 4096
[   87.285914][ T4770] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   87.390228][ T4770] ntfs: volume version 3.1.
[   87.477952][ T4759] loop3: detected capacity change from 0 to 32768
[   87.519949][ T4759] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.104 (4759)
[   87.572284][ T4759] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   87.607733][ T4759] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   87.659901][ T4759] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   87.743256][ T4759] BTRFS info (device loop3): force zstd compression, level 3
[   87.761452][ T4759] BTRFS info (device loop3): force zlib compression, level 3
[   87.768902][ T4759] BTRFS info (device loop3): force clearing of disk cache
[   87.801161][ T4783] loop2: detected capacity change from 0 to 128
[   87.817748][ T4759] BTRFS info (device loop3): turning off barriers
[   87.829596][ T4759] BTRFS info (device loop3): enabling ssd optimizations
[   87.843185][ T4783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   87.859737][ T4759] BTRFS info (device loop3): using free space tree
[   87.866754][ T4783] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   87.897900][ T4784] loop1: detected capacity change from 0 to 1024
[   87.962098][ T4783] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full
[   88.063818][ T4254] EXT4-fs (loop2): unmounting filesystem.
[   88.064567][ T4431] hfsplus: b-tree write err: -5, ino 4
[   88.155574][ T4798] netlink: 'syz.1.118': attribute type 29 has an invalid length.
[   88.165065][ T4798] netlink: 'syz.1.118': attribute type 29 has an invalid length.
[   88.189689][ T4798] netlink: 'syz.1.118': attribute type 29 has an invalid length.
[   88.276342][ T4774] loop0: detected capacity change from 0 to 32768
[   88.346325][ T4759] BTRFS info (device loop3): rebuilding free space tree
[   88.357891][ T4774] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[   88.376048][ T4776] loop4: detected capacity change from 0 to 32768
[   88.380355][ T4774] XFS (loop0): Mounting V5 Filesystem
[   88.406768][ T4776] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.113 (4776)
[   88.555690][ T4776] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   88.601748][ T4813] loop1: detected capacity change from 0 to 1024
[   88.627114][ T4776] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   88.651032][ T4774] XFS (loop0): Ending clean mount
[   88.665131][ T4813] EXT4-fs: Ignoring removed nobh option
[   88.669642][ T4776] BTRFS info (device loop4): setting nodatacow, compression disabled
[   88.671523][ T4759] BTRFS warning (device loop3): can't set the verity feature bit while mounted
[   88.678900][ T4776] BTRFS info (device loop4): max_inline at 0
[   88.703248][ T4774] XFS (loop0): Quotacheck needed: Please wait.
[   88.710715][ T4813] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   88.758300][ T4774] XFS (loop0): Quotacheck: Done.
[   88.808707][ T4813] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   88.817624][ T4776] BTRFS info (device loop4): enabling disk space caching
[   88.846415][ T4802] loop2: detected capacity change from 0 to 32768
[   88.869910][ T4776] BTRFS info (device loop4): setting datasum, datacow enabled
[   88.877429][ T4776] BTRFS info (device loop4): turning on flush-on-commit
[   88.964541][ T4250] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   88.986759][ T4776] BTRFS info (device loop4): doing ref verification
[   89.021430][ T4776] BTRFS info (device loop4): force clearing of disk cache
[   89.073771][ T4776] BTRFS info (device loop4): enabling ssd optimizations
[   89.104062][ T4776] BTRFS info (device loop4): turning off barriers
[   89.104638][ T4821] jfs_rmdir: dtDelete returned -2
[   89.131434][ T4776] BTRFS info (device loop4): max_inline at 4096
[   89.137748][ T4776] BTRFS info (device loop4): disk space caching is enabled
[   89.183453][ T4255] XFS (loop0): Unmounting Filesystem
[   89.221077][ T4245] EXT4-fs (loop1): unmounting filesystem.
[   89.442601][ T4825] loop3: detected capacity change from 0 to 4096
[   89.519372][ T4825] NILFS (loop3): invalid segment: Checksum error in segment payload
[   89.539041][ T4776] BTRFS info (device loop4): rebuilding free space tree
[   89.577958][ T4825] NILFS (loop3): trying rollback from an earlier position
[   89.613744][ T4825] NILFS (loop3): norecovery option specified, skipping roll-forward recovery
[   89.628403][ T4776] BTRFS info (device loop4): disabling free space tree
[   89.635496][ T4776] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   89.689885][ T4776] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   89.711601][ T4825] NILFS (loop3): couldn't remount because the filesystem is in an incomplete recovery state
[   89.992321][ T4244] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.152505][ T4851] loop0: detected capacity change from 0 to 4096
[   90.246672][ T4856] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.316185][ T4859] loop2: detected capacity change from 0 to 256
[   90.350338][ T4859] exfat: Deprecated parameter 'utf8'
[   90.355723][ T4859] exfat: Deprecated parameter 'namecase'
[   90.362326][ T4386] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   90.373932][ T4859] exfat: Deprecated parameter 'utf8'
[   90.433944][ T4859] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[   90.465452][ T4864] loop4: detected capacity change from 0 to 256
[   90.507408][ T4864] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[   90.530295][ T4866] random: crng reseeded on system resumption
[   90.543730][ T4864] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   90.569697][ T4386] usb 4-1: Using ep0 maxpacket: 8
[   90.576759][ T4386] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.639647][ T4386] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[   90.675833][ T4386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.710380][ T4386] usb 4-1: config 0 descriptor??
[   90.746423][ T4386] gspca_main: vc032x-2.14.0 probing 046d:0892
[   90.875908][ T4871] loop2: detected capacity change from 0 to 1024
[   91.039003][   T11] hfsplus: b-tree write err: -5, ino 4
[   91.138460][ T4854] loop1: detected capacity change from 0 to 32768
[   91.172721][ T4854] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.128 (4854)
[   91.210662][ T4854] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[   91.212550][ T4873] loop2: detected capacity change from 0 to 1024
[   91.221244][ T4854] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   91.237354][ T4854] BTRFS info (device loop1): using free space tree
[   91.268803][ T4854] BTRFS info (device loop1): enabling ssd optimizations
[   91.325480][ T4386] gspca_vc032x: reg_r err -71
[   91.330661][ T4386] vc032x: probe of 4-1:0.0 failed with error -71
[   91.339193][ T4386] usb 4-1: USB disconnect, device number 4
[   91.436872][ T4873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   91.457806][ T4245] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[   91.549600][ T4433] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   91.614504][ T4869] loop4: detected capacity change from 0 to 32768
[   91.683876][ T4869] XFS (loop4): Mounting V5 Filesystem
[   91.723862][ T4869] XFS (loop4): Ending clean mount
[   91.741854][ T4254] EXT4-fs (loop2): unmounting filesystem.
[   91.748847][ T4869] XFS (loop4): Quotacheck needed: Please wait.
[   91.756143][ T4433] usb 1-1: Using ep0 maxpacket: 16
[   91.765454][ T4433] usb 1-1: config 0 has no interfaces?
[   91.771545][ T4433] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   91.784082][ T4433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.838240][ T4433] usb 1-1: config 0 descriptor??
[   91.850310][ T4869] XFS (loop4): Quotacheck: Done.
[   92.016073][ T4244] XFS (loop4): Unmounting Filesystem
[   92.064641][ T4908] loop1: detected capacity change from 0 to 256
[   92.099963][ T4908] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[   92.190412][ T4902] usb 1-1: USB disconnect, device number 4
[   92.366491][ T4910] loop1: detected capacity change from 0 to 256
[   92.400895][ T4910] exfat: Deprecated parameter 'utf8'
[   92.419629][ T4910] exfat: Deprecated parameter 'utf8'
[   92.439342][ T4910] exfat: Deprecated parameter 'utf8'
[   92.464849][ T4910] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[   92.653775][ T4904] loop2: detected capacity change from 0 to 32768
[   92.692217][ T4904] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.135 (4904)
[   92.734205][ T4914] loop1: detected capacity change from 0 to 2048
[   92.763292][ T4904] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   92.785693][ T4904] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   92.806799][ T4914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.830127][ T4904] BTRFS info (device loop2): turning off barriers
[   92.836766][ T4904] BTRFS info (device loop2): enabling auto defrag
[   92.887131][ T4904] BTRFS info (device loop2): enabling all of the rescue options
[   92.926221][ T4904] BTRFS info (device loop2): ignoring data csums
[   92.959642][ T4904] BTRFS info (device loop2): ignoring bad roots
[   92.965953][ T4904] BTRFS info (device loop2): disabling log replay at mount time
[   92.979566][ T4624] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   92.999758][ T4904] BTRFS info (device loop2): enabling ssd optimizations
[   93.019315][ T4904] BTRFS info (device loop2): using spread ssd allocation scheme
[   93.039629][ T4904] BTRFS info (device loop2): using free space tree
[   93.046240][ T4904] workqueue: max_active 32767 requested for btrfs-worker is out of range, clamping between 1 and 512
[   93.089990][ T4906] loop3: detected capacity change from 0 to 40427
[   93.123907][ T4904] workqueue: max_active 32767 requested for btrfs-worker-high is out of range, clamping between 1 and 512
[   93.171333][ T4624] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.179359][ T4906] F2FS-fs (loop3): Invalid log blocks per segment (4278190089)
[   93.185847][ T4624] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   93.206491][ T4624] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   93.216537][ T4624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.227438][ T4624] usb 5-1: config 0 descriptor??
[   93.239012][ T4904] workqueue: max_active 32767 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[   93.259840][ T4906] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   93.291497][ T4906] F2FS-fs (loop3): invalid crc value
[   93.329740][ T4904] workqueue: max_active 32767 requested for btrfs-endio is out of range, clamping between 1 and 512
[   93.350080][ T4906] F2FS-fs (loop3): Found nat_bits in checkpoint
[   93.376320][ T4904] workqueue: max_active 32767 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[   93.440956][ T4904] workqueue: max_active 32767 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512
[   93.474779][ T4904] workqueue: max_active 32767 requested for btrfs-rmw is out of range, clamping between 1 and 512
[   93.510293][ T4904] workqueue: max_active 32767 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[   93.510332][ T4624] usb 5-1: USB disconnect, device number 5
[   93.526542][ T4919] loop0: detected capacity change from 0 to 32768
[   93.537879][ T4906] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   93.549653][ T4906] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   93.568260][ T4919] XFS: attr2 mount option is deprecated.
[   93.580177][ T4904] workqueue: max_active 32767 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
[   93.673687][ T4919] XFS (loop0): Mounting V5 Filesystem
[   93.788161][ T4254] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   93.811623][ T4919] XFS (loop0): Ending clean mount
[   94.024302][ T4919] XFS (loop0): Quotacheck needed: Please wait.
[   94.109866][ T4919] XFS (loop0): Quotacheck: Done.
[   94.253775][ T4958] loop3: detected capacity change from 0 to 512
[   94.270127][ T4956] loop4: detected capacity change from 0 to 512
[   94.310161][ T4956] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[   94.329825][ T4956] UDF-fs: Scanning with blocksize 512 failed
[   94.337849][ T4958] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   94.354403][ T4255] XFS (loop0): Unmounting Filesystem
[   94.391508][ T4956] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[   94.393616][ T4923] loop1: detected capacity change from 0 to 32768
[   94.399098][ T4956] UDF-fs: Scanning with blocksize 1024 failed
[   94.474364][ T4956] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[   94.487843][ T4250] EXT4-fs (loop3): unmounting filesystem.
[   94.537617][ T4956] UDF-fs: Scanning with blocksize 2048 failed
[   94.568808][ T4956] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   94.615181][ T4956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.979603][ T4952] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   94.988768][ T4971] random: crng reseeded on system resumption
[   95.119604][ T4862] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   95.191144][ T4952] usb 4-1: config 0 interface 0 has no altsetting 0
[   95.197826][ T4952] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[   95.219635][ T4952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.239578][ T4490] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   95.257125][ T4952] usb 4-1: config 0 descriptor??
[   95.309588][ T4862] usb 3-1: Using ep0 maxpacket: 16
[   95.330818][ T4862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.349647][ T4862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.369650][ T4862] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   95.378757][ T4862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.413034][ T4862] usb 3-1: config 0 descriptor??
[   95.442622][ T4974] loop1: detected capacity change from 0 to 32768
[   95.451470][ T4490] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[   95.462331][ T4490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.470939][ T4490] usb 5-1: Product: syz
[   95.475195][ T4490] usb 5-1: Manufacturer: syz
[   95.480145][ T4490] usb 5-1: SerialNumber: syz
[   95.487424][ T4490] usb 5-1: config 0 descriptor??
[   95.524524][ T4424] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   95.589671][ T4902] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   95.693206][ T4952] aquacomputer_d5next 0003:0C70:F00D.000A: hidraw0: USB HID v0.03 Device [HID 0c70:f00d] on usb-dummy_hcd.3-1/input0
[   95.734714][ T4624] usb 5-1: USB disconnect, device number 6
[   95.789659][ T4902] usb 1-1: Using ep0 maxpacket: 32
[   95.797029][ T4902] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   95.827259][ T4902] usb 1-1: config 0 has no interface number 0
[   95.841201][ T4862] hid-multitouch 0003:1FD2:6007.000B: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[   95.851462][ T4902] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   95.886361][ T4902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.909939][ T4902] usb 1-1: Product: syz
[   95.914610][ T4902] usb 1-1: Manufacturer: syz
[   95.942014][ T4902] usb 1-1: SerialNumber: syz
[   95.955188][ T4902] usb 1-1: config 0 descriptor??
[   95.963040][ T4293] usb 4-1: USB disconnect, device number 5
[   95.979271][ T4902] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   96.046082][ T4977] loop1: detected capacity change from 0 to 4096
[   96.063835][ T4624] usb 3-1: USB disconnect, device number 4
[   96.154087][ T4977] ntfs3: loop1: ino=5, "/" directory corrupted
[   96.164428][ T4977] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   96.185234][ T4977] ntfs3: loop1: ino=5, "/" directory corrupted
[   96.294879][ T4979] loop1: detected capacity change from 0 to 256
[   96.356660][ T4979] FAT-fs (loop1): Directory bread(block 64) failed
[   96.370390][ T4979] FAT-fs (loop1): Directory bread(block 65) failed
[   96.378457][ T4979] FAT-fs (loop1): Directory bread(block 66) failed
[   96.397350][ T4979] FAT-fs (loop1): Directory bread(block 67) failed
[   96.408155][ T4979] FAT-fs (loop1): Directory bread(block 68) failed
[   96.419042][ T4979] FAT-fs (loop1): Directory bread(block 69) failed
[   96.428802][ T4979] FAT-fs (loop1): Directory bread(block 70) failed
[   96.439797][ T4979] FAT-fs (loop1): Directory bread(block 71) failed
[   96.446566][ T4979] FAT-fs (loop1): Directory bread(block 72) failed
[   96.476011][ T4979] FAT-fs (loop1): Directory bread(block 73) failed
[   96.530811][ T4902] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   96.588271][ T4902] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   96.761549][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   96.769417][ T4293] usb 1-1: USB disconnect, device number 5
[   96.780934][ T4986] loop2: detected capacity change from 0 to 512
[   96.815572][ T4293] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   96.829883][ T4986] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   96.833436][ T4293] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   96.869058][ T4293] quatech2 1-1:0.51: device disconnected
[   96.906586][ T4986] EXT4-fs (loop2): 1 truncate cleaned up
[   96.923645][ T4981] loop4: detected capacity change from 0 to 32768
[   96.924757][ T4986] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   96.937080][ T4981] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop4 scanned by syz.4.155 (4981)
[   96.954885][ T4981] BTRFS info (device loop4): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[   96.965736][ T4981] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   96.975234][ T4981] BTRFS info (device loop4): using free space tree
[   97.059276][ T4981] BTRFS info (device loop4): enabling ssd optimizations
[   97.089089][ T4254] EXT4-fs (loop2): unmounting filesystem.
[   97.099684][ T4952] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   97.254458][ T4244] BTRFS info (device loop4): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[   97.279647][ T4952] usb 4-1: Using ep0 maxpacket: 16
[   97.286986][ T4952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.327520][ T5014] loop2: detected capacity change from 0 to 2048
[   97.329620][ T4952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.378837][ T4952] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[   97.398326][ T4952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.439003][ T5014] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   97.448538][ T4952] usb 4-1: config 0 descriptor??
[   97.484775][ T4975] udevd[4975]: incorrect nilfs2 checksum on /dev/loop2
[   97.542566][ T5016] netlink: 'syz.0.163': attribute type 4 has an invalid length.
[   97.564352][ T5017] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.617271][ T5018] netlink: 'syz.0.163': attribute type 4 has an invalid length.
[   97.908857][ T4952] razer 0003:1532:011B.000C: item fetching failed at offset 3/5
[   97.938537][ T4952] razer: probe of 0003:1532:011B.000C failed with error -22
[   98.142763][ T4862] usb 4-1: USB disconnect, device number 6
[   98.156592][ T5012] loop1: detected capacity change from 0 to 32768
[   98.552202][ T5020] loop2: detected capacity change from 0 to 32768
[   98.633362][ T5024] loop0: detected capacity change from 0 to 32768
[   98.635651][ T5023] loop4: detected capacity change from 0 to 32768
[   98.654376][ T5024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.165 (5024)
[   98.689726][ T5024] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.726744][ T5024] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   98.736364][ T5023] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.162 (5023)
[   98.772387][ T4340] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4340)
[   98.779909][ T5024] BTRFS info (device loop0): using free space tree
[   98.809756][ T5028] loop3: detected capacity change from 0 to 512
[   98.865518][ T5028] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   98.970774][ T5028] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[   98.978899][ T5028] System zones: 0-2, 18-18, 34-34
[   99.064513][ T5028] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   99.132535][ T5024] BTRFS info (device loop0): enabling ssd optimizations
[   99.196612][ T5028] EXT4-fs (loop3): 1 truncate cleaned up
[   99.212774][ T5028] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   99.314529][ T5028] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.168: corrupted xattr block 19
[   99.351517][ T4952] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   99.410716][ T4255] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.475591][ T5026] loop1: detected capacity change from 0 to 32768
[   99.506062][ T5026] XFS: ikeep mount option is deprecated.
[   99.520335][ T5026] XFS: noikeep mount option is deprecated.
[   99.552483][ T4952] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   99.569856][ T4952] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   99.609629][ T4952] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   99.629099][ T4952] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   99.632170][ T5026] XFS (loop1): Mounting V5 Filesystem
[   99.650972][ T4952] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   99.689936][   T26] audit: type=1800 audit(1732054856.116:6): pid=5028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.168" name="file1" dev="loop3" ino=15 res=0 errno=0
[   99.710922][ T4952] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   99.750395][ T4952] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   99.758867][ T5026] XFS (loop1): Ending clean mount
[   99.770900][ T5026] XFS (loop1): Quotacheck needed: Please wait.
[   99.785295][ T4952] usb 3-1: Product: syz
[   99.789773][ T4952] usb 3-1: Manufacturer: syz
[   99.845408][ T4952] cdc_wdm 3-1:1.0: skipping garbage
[   99.850831][ T4952] cdc_wdm 3-1:1.0: skipping garbage
[   99.888114][ T5054] loop4: detected capacity change from 0 to 32768
[   99.892778][ T4952] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   99.915607][ T5054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.170 (5054)
[   99.915860][ T4952] cdc_wdm 3-1:1.0: Unknown control protocol
[  100.068655][ T5026] XFS (loop1): Quotacheck: Done.
[  100.078939][ T5054] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  100.145768][ T5054] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  100.169796][ T5054] BTRFS info (device loop4): using free space tree
[  100.176677][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  100.223859][ T4245] XFS (loop1): Unmounting Filesystem
[  100.332080][ T5054] BTRFS info (device loop4): enabling ssd optimizations
[  100.336268][ T5087] loop0: detected capacity change from 0 to 164
[  100.422570][ T5087] isofs: Unable to find the ".." directory for NFS.
[  100.442452][ T5088] isofs: Unable to find the ".." directory for NFS.
[  100.455460][ T4325] usb 3-1: USB disconnect, device number 5
[  100.488166][ T4244] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  100.569765][ T4292] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  100.662982][ T5091] loop0: detected capacity change from 0 to 2048
[  100.715268][ T5091] EXT4-fs: Ignoring removed orlov option
[  100.769715][ T4292] usb 4-1: Using ep0 maxpacket: 8
[  100.777841][ T5091] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  100.796838][ T4292] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  100.816763][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.900361][ T4292] usb 4-1: config 0 descriptor??
[  100.973361][ T4255] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  101.036146][ T4255] EXT4-fs (loop0): Remounting filesystem read-only
[  101.076259][ T4255] EXT4-fs (loop0): unmounting filesystem.
[  101.080584][ T5097] loop2: detected capacity change from 0 to 1024
[  101.109286][ T5097] EXT4-fs: Ignoring removed orlov option
[  101.143101][ T4292] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  101.166536][ T5097] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.223542][ T5097] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  101.276808][ T5094] loop4: detected capacity change from 0 to 32768
[  101.354487][ T4292] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  101.356209][ T5094] XFS (loop4): Mounting V5 Filesystem
[  101.394526][ T4292] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  101.406799][ T4292] asix: probe of 4-1:0.0 failed with error -71
[  101.445494][ T4254] EXT4-fs (loop2): unmounting filesystem.
[  101.447633][ T4292] usb 4-1: USB disconnect, device number 7
[  101.514339][ T5094] XFS (loop4): Ending clean mount
[  101.618872][   T26] audit: type=1800 audit(1732054858.036:7): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.174" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  101.728439][ T4244] XFS (loop4): Unmounting Filesystem
[  101.931121][ T5118] loop1: detected capacity change from 0 to 128
[  102.019815][ T5118] VFS: Found a Xenix FS (block size = 512) on device loop1
[  102.098973][ T5118] sysv_free_block: getblk() failed
[  102.131719][ T5118] sysv_free_block: getblk() failed
[  102.152146][ T5118] sysv_free_block: getblk() failed
[  102.167805][ T5118] sysv_free_block: getblk() failed
[  102.183048][ T5118] sysv_free_block: getblk() failed
[  102.224818][ T5118] sysv_free_block: getblk() failed
[  102.240362][ T5118] sysv_free_block: getblk() failed
[  102.245875][ T5118] sysv_free_block: getblk() failed
[  102.259739][ T5118] sysv_free_block: getblk() failed
[  102.275219][ T5118] sysv_free_block: getblk() failed
[  102.285378][ T5118] sysv_free_block: getblk() failed
[  102.295540][ T5118] sysv_free_block: getblk() failed
[  102.305735][ T5118] sysv_free_block: getblk() failed
[  102.327130][ T5118] sysv_free_block: getblk() failed
[  102.345318][ T5118] sysv_free_block: getblk() failed
[  102.365371][ T5118] sysv_free_block: getblk() failed
[  102.371021][ T5118] sysv_free_block: getblk() failed
[  102.400761][ T5118] sysv_free_block: getblk() failed
[  102.406076][ T5118] sysv_free_block: getblk() failed
[  102.426089][ T5118] sysv_free_block: getblk() failed
[  102.436248][ T5118] sysv_free_block: getblk() failed
[  102.443804][ T5114] loop0: detected capacity change from 0 to 40427
[  102.450517][ T5118] sysv_free_block: getblk() failed
[  102.455788][ T5118] sysv_free_block: getblk() failed
[  102.475839][ T5118] sysv_free_block: getblk() failed
[  102.487068][ T5114] F2FS-fs (loop0): invalid crc value
[  102.506382][ T5118] sysv_free_block: getblk() failed
[  102.509549][ T5116] loop2: detected capacity change from 0 to 32768
[  102.516822][ T5114] F2FS-fs (loop0): Found nat_bits in checkpoint
[  102.525616][ T5118] sysv_free_block: getblk() failed
[  102.539933][ T5118] sysv_free_block: getblk() failed
[  102.551339][ T5116] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.179 (5116)
[  102.569717][ T4293] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  102.580888][ T5118] sysv_free_block: getblk() failed
[  102.586452][ T5118] sysv_free_block: getblk() failed
[  102.609812][ T5118] sysv_free_block: getblk() failed
[  102.611648][ T5116] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.619450][ T5118] sysv_free_block: getblk() failed
[  102.639972][ T5118] sysv_free_block: getblk() failed
[  102.645401][ T5114] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  102.659703][ T5118] sysv_free_block: getblk() failed
[  102.669645][ T5118] sysv_free_block: getblk() failed
[  102.687288][ T5118] sysv_free_block: getblk() failed
[  102.698002][ T5116] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  102.698063][ T5118] sysv_free_block: getblk() failed
[  102.727502][ T5116] BTRFS info (device loop2): using free space tree
[  102.762103][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.767633][ T5118] sysv_free_block: trying to free block not in datazone
[  102.805129][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.844769][ T4293] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  102.871700][ T5121] loop3: detected capacity change from 0 to 32768
[  102.874926][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.897294][ T5121] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.182 (5121)
[  102.944191][ T4340] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4340)
[  102.962864][ T4293] usb 5-1: config 0 descriptor??
[  102.981998][ T4245] sysv_free_block: getblk() failed
[  102.987747][ T4245] sysv_free_block: getblk() failed
[  102.994401][ T4245] sysv_free_block: trying to free block not in datazone
[  103.007028][ T4245] sysv_free_block: getblk() failed
[  103.030793][ T4245] sysv_free_block: getblk() failed
[  103.037155][ T5116] BTRFS info (device loop2): enabling ssd optimizations
[  103.037431][ T4245] sysv_free_block: getblk() failed
[  103.050565][ T4245] sysv_free_block: getblk() failed
[  103.058429][ T4245] sysv_free_block: getblk() failed
[  103.064497][ T4245] sysv_free_block: getblk() failed
[  103.099746][ T4245] sysv_free_block: getblk() failed
[  103.115270][ T4245] sysv_free_block: getblk() failed
[  103.132056][ T4245] sysv_free_block: getblk() failed
[  103.148617][ T4245] sysv_free_block: getblk() failed
[  103.158419][ T4245] sysv_free_block: getblk() failed
[  103.168566][ T4245] sysv_free_block: getblk() failed
[  103.188944][ T4245] sysv_free_block: getblk() failed
[  103.206323][ T4245] sysv_free_block: getblk() failed
[  103.219788][ T4245] sysv_free_block: getblk() failed
[  103.229933][ T4245] sysv_free_block: getblk() failed
[  103.266272][ T4245] sysv_free_block: getblk() failed
[  103.279846][ T4245] sysv_free_block: getblk() failed
[  103.284518][ T4857] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  103.290004][ T4245] sysv_free_block: trying to free block not in datazone
[  103.311633][ T4245] sysv_free_block: trying to free block not in datazone
[  103.318737][ T4245] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  103.384261][ T4293] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0
[  103.405067][ T4293] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0
[  103.414655][ T4293] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0
[  103.415213][ T4254] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  103.430470][ T4293] holtek_kbd 0003:04D9:A055.000D: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0
[  103.494000][ T4857] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  103.527015][ T4857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.546088][ T5150] loop1: detected capacity change from 0 to 256
[  103.559635][ T4857] usb 4-1: Product: syz
[  103.563848][ T4857] usb 4-1: Manufacturer: syz
[  103.603346][ T4857] usb 4-1: SerialNumber: syz
[  103.688706][ T4857] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  103.772202][ T4386] usb 5-1: USB disconnect, device number 7
[  103.828339][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'.
[  103.848772][ T4857] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  103.885361][ T5155] loop2: detected capacity change from 0 to 512
[  103.909776][ T5155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  104.022032][ T5155] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.186: bad orphan inode 131083
[  104.034661][ T5155] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  104.122584][ T5161] loop1: detected capacity change from 0 to 2048
[  104.157039][ T5161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.297123][ T4254] EXT4-fs (loop2): unmounting filesystem.
[  104.336179][ T4490] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  104.408608][ T5167] loop2: detected capacity change from 0 to 512
[  104.424521][ T5167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  104.463931][ T5167] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.191: invalid indirect mapped block 4294967295 (level 0)
[  104.512417][ T4391] usb 4-1: USB disconnect, device number 8
[  104.551144][ T4490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.569557][ T4490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.575538][ T5167] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.191: invalid indirect mapped block 4294967295 (level 1)
[  104.579441][ T4490] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  104.602384][ T4490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.612344][ T4490] usb 1-1: config 0 descriptor??
[  104.648972][ T5167] EXT4-fs (loop2): 1 orphan inode deleted
[  104.678357][ T5167] EXT4-fs (loop2): 1 truncate cleaned up
[  104.698656][ T5167] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  104.816901][ T5167] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.191: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0
[  104.931330][ T5164] loop4: detected capacity change from 0 to 32768
[  104.960090][ T5164] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.190 (5164)
[  104.980900][ T4254] EXT4-fs (loop2): unmounting filesystem.
[  104.995080][ T5165] loop1: detected capacity change from 0 to 32768
[  105.005811][ T5164] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.048563][ T4490] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0
[  105.086989][ T5164] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  105.099726][ T4857] usb 4-1: Service connection timeout for: 256
[  105.103401][ T5164] BTRFS info (device loop4): setting nodatacow, compression disabled
[  105.105930][ T4857] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  105.121679][ T5165] XFS (loop1): Mounting V5 Filesystem
[  105.144363][ T5164] BTRFS info (device loop4): enabling auto defrag
[  105.158278][ T4857] ath9k_htc: Failed to initialize the device
[  105.164979][ T5164] BTRFS info (device loop4): max_inline at 0
[  105.196747][ T5164] BTRFS info (device loop4): using free space tree
[  105.206849][ T4391] usb 4-1: ath9k_htc: USB layer deinitialized
[  105.248489][ T4490] arvo 0003:1E7D:30D4.000E: couldn't init struct arvo_device
[  105.270713][ T5179] tipc: Started in network mode
[  105.275833][ T5179] tipc: Node identity , cluster identity 4711
[  105.293884][ T4490] arvo 0003:1E7D:30D4.000E: couldn't install keyboard
[  105.294096][ T5165] XFS (loop1): Ending clean mount
[  105.313324][ T4490] arvo: probe of 0003:1E7D:30D4.000E failed with error -71
[  105.323588][ T4490] usb 1-1: USB disconnect, device number 6
[  105.344164][ T5182] loop2: detected capacity change from 0 to 1024
[  105.508266][ T5182] EXT4-fs: Ignoring removed orlov option
[  105.518855][ T5182] EXT4-fs (loop2): Test dummy encryption mode enabled
[  105.519355][ T4245] XFS (loop1): Unmounting Filesystem
[  105.557618][ T5182] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  106.020656][ T5182] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  106.022454][ T4244] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.417482][ T4254] EXT4-fs (loop2): unmounting filesystem.
[  106.506995][ T5222] loop4: detected capacity change from 0 to 512
[  106.516150][ T5220] loop0: detected capacity change from 0 to 4096
[  106.529705][ T4430] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  106.544736][ T5222] EXT4-fs: Ignoring removed i_version option
[  106.561359][ T5224] loop2: detected capacity change from 0 to 512
[  106.582843][ T5222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  106.603099][ T5224] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  106.641372][ T5222] EXT4-fs (loop4): 1 truncate cleaned up
[  106.675581][ T5222] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  106.686030][ T5224] EXT4-fs (loop2): 1 orphan inode deleted
[  106.704834][ T5210] loop3: detected capacity change from 0 to 32768
[  106.729775][ T4430] usb 2-1: Using ep0 maxpacket: 8
[  106.743632][ T5224] EXT4-fs (loop2): 1 truncate cleaned up
[  106.756351][ T4430] usb 2-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2
[  106.773207][ T5220] ntfs3: loop0: failed to convert "0080" to macinuit
[  106.798220][ T5210] JBD2: Ignoring recovery information on journal
[  106.802481][ T5224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  106.807791][ T4430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.829890][ T5220] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  106.835304][ T4430] usb 2-1: Product: syz
[  106.843140][ T4430] usb 2-1: Manufacturer: syz
[  106.851401][ T4430] usb 2-1: SerialNumber: syz
[  106.866122][ T5220] ntfs3: loop0: failed to convert name for inode 1e.
[  106.875207][ T4430] usb 2-1: config 0 descriptor??
[  106.884179][ T4430] usb 2-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I
[  106.895231][ T5210] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  106.904981][ T5224] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.200: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  106.939390][ T5224] EXT4-fs (loop2): Remounting filesystem read-only
[  107.014821][ T4244] EXT4-fs (loop4): unmounting filesystem.
[  107.016782][ T4254] EXT4-fs (loop2): unmounting filesystem.
[  107.032351][ T4250] ocfs2: Unmounting device (7,3) on (node local)
[  107.089639][ T4430] usb 2-1: reset high-speed USB device number 6 using dummy_hcd
[  107.389263][ T5236] loop3: detected capacity change from 0 to 256
[  107.429365][ T5236] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  107.469550][ T4294] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  107.669672][ T4294] usb 3-1: Using ep0 maxpacket: 16
[  107.676717][ T4294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.718711][ T4294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.749188][ T4294] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  107.769412][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.789581][ T4430] usb 2-1: device descriptor read/64, error -71
[  107.796671][ T4294] usb 3-1: config 0 descriptor??
[  107.880105][ T5231] loop4: detected capacity change from 0 to 40427
[  107.941400][ T5231] F2FS-fs (loop4): Found nat_bits in checkpoint
[  108.036342][ T5234] loop0: detected capacity change from 0 to 40427
[  108.067553][ T5234] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  108.076957][ T4430] usb 2-1: reset high-speed USB device number 6 using dummy_hcd
[  108.097036][ T5231] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  108.106067][ T5234] F2FS-fs (loop0): invalid crc value
[  108.154047][ T5234] F2FS-fs (loop0): Found nat_bits in checkpoint
[  108.208413][ T4244] syz-executor: attempt to access beyond end of device
[  108.208413][ T4244] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.216955][ T4294] cp2112 0003:10C4:EA90.000F: unbalanced delimiter at end of report description
[  108.260963][ T4294] cp2112 0003:10C4:EA90.000F: parse failed
[  108.264373][ T5234] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  108.279831][ T4294] cp2112: probe of 0003:10C4:EA90.000F failed with error -22
[  108.307905][ T5239] loop3: detected capacity change from 0 to 32768
[  108.342458][ T5239] JBD2: Ignoring recovery information on journal
[  108.398109][ T5234] syz.0.205: attempt to access beyond end of device
[  108.398109][ T5234] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  108.414948][ T5234] F2FS-fs (loop0) : inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x2aa/0x710
[  108.442119][ T4386] usb 3-1: USB disconnect, device number 6
[  108.482260][ T5239] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  108.514600][ T4430] usb 2-1: [UEAGLE-ATM] interface 1 not found
[  108.531593][ T4430] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  108.565994][ T4430] usb 2-1: USB disconnect, device number 6
[  108.577373][ T4255] syz-executor: attempt to access beyond end of device
[  108.577373][ T4255] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.618994][ T4250] ocfs2: Unmounting device (7,3) on (node local)
[  109.042339][ T5252] loop3: detected capacity change from 0 to 4096
[  109.053995][ T5254] random: crng reseeded on system resumption
[  109.061681][ T5252] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  109.086555][ T5256] loop0: detected capacity change from 0 to 256
[  109.110651][ T5256] exfat: Deprecated parameter 'utf8'
[  109.116056][ T5256] exfat: Deprecated parameter 'utf8'
[  109.142024][ T5252] ntfs: volume version 3.1.
[  109.163758][ T5256] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x14f16447, utbl_chksum : 0xe619d30d)
[  109.204865][ T4387] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  109.301848][ T5260] loop1: detected capacity change from 0 to 64
[  109.409764][ T4387] usb 5-1: Using ep0 maxpacket: 8
[  109.416818][ T4387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.444788][ T4387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.468419][ T4387] usb 5-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00
[  109.493851][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.515647][ T4387] usb 5-1: config 0 descriptor??
[  109.943984][ T4387] apple 0003:05AC:0267.0010: hidraw0: USB HID v0.00 Device [HID 05ac:0267] on usb-dummy_hcd.4-1/input0
[  109.984714][   T48] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  109.993632][   T48] Bluetooth: hci4: Injecting HCI hardware error event
[  110.005614][ T5265] loop3: detected capacity change from 0 to 32768
[  110.015301][ T4258] Bluetooth: hci4: hardware error 0x00
[  110.057389][ T5265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.213 (5265)
[  110.136109][ T5265] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  110.167925][ T4387] usb 5-1: USB disconnect, device number 8
[  110.198945][ T5265] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  110.227981][ T5265] BTRFS info (device loop3): use zlib compression, level 3
[  110.245060][ T5265] BTRFS info (device loop3): using free space tree
[  110.335307][ T5263] loop0: detected capacity change from 0 to 40427
[  110.404558][ T5263] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  110.427050][ T5265] BTRFS info (device loop3): enabling ssd optimizations
[  110.447067][ T5263] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  110.501927][ T5263] F2FS-fs (loop0): invalid crc value
[  110.517380][ T5267] loop1: detected capacity change from 0 to 32768
[  110.573806][ T5263] F2FS-fs (loop0): Found nat_bits in checkpoint
[  110.713926][ T5292] loop1: detected capacity change from 0 to 64
[  110.760079][ T5263] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  110.787295][ T5263] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  110.825607][ T4250] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.199596][ T4386] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  111.209781][ T4389] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  111.399725][ T4386] usb 5-1: Using ep0 maxpacket: 32
[  111.408944][ T4389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.421482][ T4386] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  111.437098][ T4389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.450518][ T4386] usb 5-1: config 0 has no interface number 0
[  111.465700][ T4386] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  111.475227][ T4389] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  111.484438][ T4386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.492885][ T4389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.502501][ T4386] usb 5-1: Product: syz
[  111.508753][ T4389] usb 3-1: config 0 descriptor??
[  111.513944][ T4386] usb 5-1: Manufacturer: syz
[  111.519081][ T4386] usb 5-1: SerialNumber: syz
[  111.541499][ T4386] usb 5-1: config 0 descriptor??
[  111.546257][ T5306] loop0: detected capacity change from 0 to 4096
[  111.553794][ T4386] smsc95xx v2.0.0
[  111.609991][ T5307] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.807865][ T5311] loop0: detected capacity change from 0 to 64
[  111.833810][ T5300] loop1: detected capacity change from 0 to 32768
[  111.950559][ T4389] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0933.0011/input/input6
[  112.039571][ T4298] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  112.045235][ T4389] uclogic 0003:28BD:0933.0011: input,hidraw0: USB HID v5.50 Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0
[  112.069617][ T4258] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  112.176207][ T4386] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  112.200791][ T4386] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  112.220058][ T4386] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  112.223422][ T4432] usb 3-1: USB disconnect, device number 7
[  112.239986][ T4298] usb 4-1: Using ep0 maxpacket: 8
[  112.241551][ T4386] smsc95xx: probe of 5-1:0.67 failed with error -71
[  112.249165][ T4298] usb 4-1: unable to get BOS descriptor or descriptor too short
[  112.289693][ T4386] usb 5-1: USB disconnect, device number 9
[  112.314726][ T4298] usb 4-1: config 9 has an invalid interface number: 218 but max is 0
[  112.344524][ T4298] usb 4-1: config 9 has no interface number 0
[  112.354660][ T4298] usb 4-1: config 9 interface 218 has no altsetting 0
[  112.386403][ T4298] usb 4-1: string descriptor 0 read error: -22
[  112.392939][ T4298] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=d7.19
[  112.419685][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.561483][ T5314] loop0: detected capacity change from 0 to 32768
[  112.595848][ T5318] loop1: detected capacity change from 0 to 256
[  112.615930][ T5314] JBD2: Ignoring recovery information on journal
[  112.656159][ T4298] peak_usb 4-1:9.218: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  112.694470][ T5314] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  112.788419][ T5314] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 0
[  112.804580][ T5322] loop1: detected capacity change from 0 to 64
[  112.837134][ T5314] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  112.847762][ T5314] OCFS2: File system is now read-only.
[  112.853749][ T5314] (syz.0.225,5314,0):ocfs2_trim_mainbm:7603 ERROR: status = -30
[  112.884494][ T4298] peak_usb 4-1:9.218 can0: sending command failure: -22
[  112.899563][ T4298] peak_usb 4-1:9.218 can0: sending command failure: -22
[  112.918326][ T4298] peak_usb 4-1:9.218 can0: sending command failure: -22
[  112.953801][ T5324] loop4: detected capacity change from 0 to 512
[  112.970660][ T5324] EXT4-fs: Ignoring removed orlov option
[  112.986609][ T5326] loop2: detected capacity change from 0 to 1024
[  112.994263][ T4298] peak_usb: probe of 4-1:9.218 failed with error -22
[  112.996133][ T5324] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  113.092419][ T5324] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.229: casefold flag without casefold feature
[  113.123767][ T5324] EXT4-fs (loop4): Remounting filesystem read-only
[  113.131103][ T5324] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.229: couldn't read orphan inode 15 (err -117)
[  113.132847][ T4389] usb 4-1: USB disconnect, device number 9
[  113.173818][ T5331] loop1: detected capacity change from 0 to 1024
[  113.181002][ T4255] ocfs2: Unmounting device (7,0) on (node local)
[  113.193854][ T5324] EXT4-fs (loop4): Remounting filesystem read-only
[  113.201050][ T5324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  113.244564][ T5331] hfsplus: bad catalog entry type
[  113.256434][ T5324] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #2: comm syz.4.229: invalid size
[  113.303617][ T5324] EXT4-fs (loop4): Remounting filesystem read-only
[  113.311683][ T4295] hfsplus: b-tree write err: -5, ino 4
[  113.334426][   T41] hfsplus: b-tree write err: -5, ino 4
[  113.458404][ T4244] EXT4-fs (loop4): unmounting filesystem.
[  113.631183][ T5335] loop1: detected capacity change from 0 to 4096
[  113.685248][ T5335] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  113.927237][ T5343] loop3: detected capacity change from 0 to 64
[  113.996674][ T5341] loop0: detected capacity change from 0 to 32768
[  114.028430][ T5341] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  114.037110][ T5341] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  114.060417][ T5341] syz.0.236: attempt to access beyond end of device
[  114.060417][ T5341] loop0: rw=12288, sector=549755814040, nr_sectors = 8 limit=32768
[  114.075376][ T5341] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5
[  114.169619][ T4432] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  114.323921][ T5345] loop3: detected capacity change from 0 to 512
[  114.363476][ T5345] EXT4-fs: Ignoring removed nomblk_io_submit option
[  114.407276][ T5345] EXT4-fs: old and new quota format mixing
[  114.419963][ T5333] loop2: detected capacity change from 0 to 32768
[  114.441390][ T4432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.473372][ T4432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.485746][ T5351] loop0: detected capacity change from 0 to 64
[  114.499586][ T4432] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  114.534233][ T4432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.549342][ T5345] loop3: detected capacity change from 0 to 1764
[  114.590336][ T4432] usb 5-1: config 0 descriptor??
[  114.809880][ T5353] loop0: detected capacity change from 0 to 64
[  115.006033][ T4432] lg-g15 0003:046D:C222.0012: unbalanced delimiter at end of report description
[  115.040096][ T4432] lg-g15: probe of 0003:046D:C222.0012 failed with error -22
[  115.224134][ T4391] usb 5-1: USB disconnect, device number 10
[  115.249553][ T4389] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  115.385098][ T5349] loop1: detected capacity change from 0 to 40427
[  115.407741][ T5349] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x16481
[  115.423949][ T5349] F2FS-fs (loop1): invalid crc value
[  115.444479][ T5349] F2FS-fs (loop1): Found nat_bits in checkpoint
[  115.459894][ T4389] usb 4-1: Using ep0 maxpacket: 32
[  115.467828][ T4389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.498422][ T4389] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  115.519145][ T4389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.543237][ T5349] F2FS-fs (loop1): Start checkpoint disabled!
[  115.562153][ T4389] usb 4-1: config 0 descriptor??
[  115.599448][ T5349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  115.727524][ T5359] loop2: detected capacity change from 0 to 32768
[  115.888919][ T5359] XFS (loop2): Mounting V5 Filesystem
[  115.919340][ T5369] loop0: detected capacity change from 0 to 4096
[  115.970865][ T5369] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  115.988125][ T4389] magicmouse 0003:05AC:0265.0013: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0
[  116.098825][ T5359] XFS (loop2): Ending clean mount
[  116.216145][ T4432] usb 4-1: USB disconnect, device number 10
[  116.274641][ T4254] XFS (loop2): Unmounting Filesystem
[  116.380649][ T4389] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  116.589730][ T4389] usb 5-1: Using ep0 maxpacket: 32
[  116.596730][ T4389] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  116.625819][ T4389] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  116.657527][ T4389] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  116.689186][ T4389] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  116.713282][ T4389] usb 5-1: config 0 interface 0 has no altsetting 0
[  116.735909][ T4389] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  116.770958][ T4389] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  116.779449][ T4389] usb 5-1: Product: syz
[  116.795601][ T5385] loop1: detected capacity change from 0 to 32768
[  116.807028][ T4389] usb 5-1: Manufacturer: syz
[  116.815924][ T4389] usb 5-1: SerialNumber: syz
[  116.822856][ T4389] usb 5-1: config 0 descriptor??
[  116.831321][ T4389] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  116.839024][ T5391] loop3: detected capacity change from 0 to 64
[  116.846904][ T4389] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  116.952838][ T5387] loop0: detected capacity change from 0 to 32768
[  116.955392][ T5385] XFS (loop1): Mounting V5 Filesystem
[  116.985360][ T5391] Trying to free block not in datazone
[  117.018778][ T5387] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  117.034154][ T5387] JBD2: Ignoring recovery information on journal
[  117.040865][ T5385] XFS (loop1): Ending clean mount
[  117.062268][ T4389] usb 5-1: USB disconnect, device number 11
[  117.091699][ T4389] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  117.099814][ T4391] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  117.147865][ T5387] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  117.166170][ T4245] XFS (loop1): Unmounting Filesystem
[  117.189407][ T5404] loop3: detected capacity change from 0 to 512
[  117.255891][ T5404] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  117.282313][ T5404] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.333767][ T4391] usb 3-1: Using ep0 maxpacket: 32
[  117.346775][ T4391] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.379607][ T4391] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.390749][ T4391] usb 3-1: config 0 interface 0 has no altsetting 0
[  117.395396][ T5404] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.256: Directory hole found for htree leaf block 0
[  117.397439][ T4391] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  117.422331][ T4391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.441668][ T4391] usb 3-1: config 0 descriptor??
[  117.449818][ T5404] EXT4-fs (loop3): Remounting filesystem read-only
[  117.463256][ T4255] ocfs2: Unmounting device (7,0) on (node local)
[  117.569321][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  117.727466][ T5412] loop3: detected capacity change from 0 to 64
[  117.779431][ T5412] hfs: get root inode failed
[  117.844422][ T5417] capability: warning: `syz.0.258' uses deprecated v2 capabilities in a way that may be insecure
[  117.908366][ T5414] loop4: detected capacity change from 0 to 4096
[  117.917828][ T5414] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  117.947112][ T5414] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  117.957186][ T5414] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  117.982307][ T5414] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  118.001579][ T5414] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  118.032388][ T5414] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  118.046304][ T5414] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  118.067514][ T5414] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  118.076985][ T5414] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  118.097738][ T4391] usb 3-1: string descriptor 0 read error: -71
[  118.105009][ T5414] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  118.114550][ T4391] uclogic 0003:5543:004D.0014: failed retrieving string descriptor #200: -71
[  118.121316][ T5414] ntfs: volume version 3.1.
[  118.124072][ T4391] uclogic 0003:5543:004D.0014: failed retrieving pen parameters: -71
[  118.136325][ T4391] uclogic 0003:5543:004D.0014: failed probing pen v2 parameters: -71
[  118.147860][ T4391] uclogic 0003:5543:004D.0014: failed probing parameters: -71
[  118.188522][ T4391] uclogic: probe of 0003:5543:004D.0014 failed with error -71
[  118.209125][ T4391] usb 3-1: USB disconnect, device number 8
[  118.217102][ T4389] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  118.397300][ T5425] Zero length message leads to an empty skb
[  118.427594][ T4389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.467243][ T4389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.483590][ T4389] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  118.509618][ T4389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.542344][ T4389] usb 2-1: config 0 descriptor??
[  118.552389][ T5427] loop4: detected capacity change from 0 to 2048
[  118.614467][ T5427] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  118.673548][ T5428] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.903799][ T5423] loop0: detected capacity change from 0 to 32768
[  118.960338][ T4389] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0
[  118.986641][ T4389] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0015/input/input7
[  119.039607][ T2117] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  119.066584][ T4389] cm6533_jd 0003:0D8C:0022.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  119.183477][ T4389] usb 2-1: USB disconnect, device number 7
[  119.250366][ T2117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.285943][ T2117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.308013][ T2117] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  119.330259][ T2117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.371078][ T2117] usb 3-1: config 0 descriptor??
[  119.599142][ T5432] loop4: detected capacity change from 0 to 32768
[  119.640825][ T5432] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.265 (5432)
[  119.679730][ T4432] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  119.694697][ T5432] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  119.705344][ T5432] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  119.714160][ T5432] BTRFS info (device loop4): force clearing of disk cache
[  119.722670][ T5432] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  119.780717][ T5432] BTRFS info (device loop4): use zstd compression, level 3
[  119.787723][ T2117] lenovo 0003:17EF:6062.0016: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0
[  119.788597][ T5432] BTRFS info (device loop4): using free space tree
[  119.873906][ T4432] usb 1-1: Using ep0 maxpacket: 32
[  119.881388][ T4432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.924463][ T4432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.969658][ T4432] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00
[  119.979151][ T4432] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.986642][ T2117] usb 3-1: USB disconnect, device number 9
[  120.038715][ T4432] usb 1-1: config 0 descriptor??
[  120.069890][ T5455] loop1: detected capacity change from 0 to 128
[  120.077656][ T5455] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  120.105350][ T5455] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  120.180921][ T5432] BTRFS info (device loop4): enabling ssd optimizations
[  120.198913][ T5432] BTRFS info (device loop4): rebuilding free space tree
[  120.232595][ T5438] loop3: detected capacity change from 0 to 32768
[  120.347096][ T5438] XFS (loop3): Mounting V5 Filesystem
[  120.348222][ T5467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.271'.
[  120.389819][ T4244] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  120.455286][ T4432] appleir 0003:05AC:8243.0017: collection stack underflow
[  120.473455][ T4432] appleir 0003:05AC:8243.0017: item 0 2 0 12 parsing failed
[  120.481756][ T4432] appleir 0003:05AC:8243.0017: parse failed
[  120.488040][ T4432] appleir: probe of 0003:05AC:8243.0017 failed with error -22
[  120.670800][ T4434] usb 1-1: USB disconnect, device number 7
[  120.676827][ T5438] XFS (loop3): Ending clean mount
[  120.794217][ T4250] XFS (loop3): Unmounting Filesystem
[  121.046219][ T5487] loop4: detected capacity change from 0 to 16
[  121.106410][ T5487] erofs: (device loop4): mounted with root inode @ nid 36.
[  121.382506][ T5495] IPVS: Error joining to the multicast group
[  121.602872][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'.
[  121.632267][ T5502] loop3: detected capacity change from 0 to 64
[  122.006471][ T5516] loop3: detected capacity change from 0 to 64
[  122.069235][ T5484] loop1: detected capacity change from 0 to 32768
[  122.084948][ T5484] XFS: noikeep mount option is deprecated.
[  122.133202][ T5520] loop2: detected capacity change from 0 to 512
[  122.139855][ T5484] XFS (loop1): Mounting V5 Filesystem
[  122.151579][ T4626] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  122.217945][ T5520] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.293: inline data xattr refers to an external xattr inode
[  122.260204][ T5484] XFS (loop1): Ending clean mount
[  122.267594][ T5484] XFS (loop1): Quotacheck needed: Please wait.
[  122.279013][ T5520] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.293: couldn't read orphan inode 12 (err -117)
[  122.338047][ T5520] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  122.340366][ T5532] loop3: detected capacity change from 0 to 512
[  122.368618][ T5484] XFS (loop1): Quotacheck: Done.
[  122.375961][ T4626] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  122.388060][ T5532] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  122.410943][ T4254] EXT4-fs (loop2): unmounting filesystem.
[  122.439750][ T4626] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  122.451617][ T5532] EXT4-fs (loop3): 1 truncate cleaned up
[  122.451645][ T5532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  122.509592][ T4626] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.539131][ T4626] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  122.550121][ T4626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.566558][ T4626] usb 5-1: invalid MIDI out EP 0
[  122.607919][ T4245] XFS (loop1): Unmounting Filesystem
[  122.627794][ T4626] snd-usb-audio: probe of 5-1:27.0 failed with error -22
[  122.673223][ T4647] udevd[4647]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.734184][ T5536] Process accounting resumed
[  122.777501][ T5536] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.295: corrupted in-inode xattr
[  122.825715][ T5536] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1723: inode #15: comm syz.3.295: unable to update i_inline_off
[  122.841909][ T5536] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.295: corrupted in-inode xattr
[  122.885053][ T4298] usb 5-1: USB disconnect, device number 12
[  122.897955][ T4250] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr
[  122.959343][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  122.967873][ T5546] loop0: detected capacity change from 0 to 2048
[  123.073349][ T5548] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.744709][ T5574] loop3: detected capacity change from 0 to 256
[  123.796404][ T5574] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  124.043201][ T5582] loop3: detected capacity change from 0 to 2048
[  124.075028][ T5582] NILFS (loop3): invalid segment: Checksum error in segment payload
[  124.089715][ T5582] NILFS (loop3): trying rollback from an earlier position
[  124.123591][ T5582] NILFS (loop3): recovery complete
[  124.230764][ T5586] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.656721][ T5596] Illegal XDP return value 4294967282 on prog  (id 8) dev N/A, expect packet loss!
[  124.759720][ T2117] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  124.921420][ T5588] loop1: detected capacity change from 0 to 32768
[  124.934143][ T4389] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  124.951833][ T5588] (syz.1.316,5588,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  124.969584][ T2117] usb 1-1: Using ep0 maxpacket: 32
[  124.976836][ T2117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.994698][ T5588] (syz.1.316,5588,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  125.009860][ T2117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.028813][ T2117] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  125.047211][ T2117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.064454][ T5588] JBD2: Ignoring recovery information on journal
[  125.077464][ T2117] usb 1-1: config 0 descriptor??
[  125.129285][ T5588] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  125.149795][ T4389] usb 5-1: Using ep0 maxpacket: 16
[  125.163008][ T4389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.225899][ T4389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.265945][ T5588] 
[  125.268326][ T5588] ======================================================
[  125.275350][ T5588] WARNING: possible circular locking dependency detected
[  125.282375][ T5588] 6.1.118-syzkaller #0 Not tainted
[  125.287515][ T5588] ------------------------------------------------------
[  125.294549][ T5588] syz.1.316/5588 is trying to acquire lock:
[  125.300446][ T5588] ffff88805f875108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x182/0x5190
[  125.313788][ T5588] 
[  125.313788][ T5588] but task is already holding lock:
[  125.321247][ T5588] ffff888059314e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930
[  125.330760][ T5588] 
[  125.330760][ T5588] which lock already depends on the new lock.
[  125.330760][ T5588] 
[  125.341184][ T5588] 
[  125.341184][ T5588] the existing dependency chain (in reverse order) is:
[  125.350207][ T5588] 
[  125.350207][ T5588] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}:
[  125.358397][ T5588]        lock_acquire+0x1f8/0x5a0
[  125.363450][ T5588]        down_read+0xad/0xa30
[  125.368156][ T5588]        ocfs2_init_acl+0x398/0x930
[  125.373391][ T5588]        ocfs2_mknod+0x1f75/0x2e20
[  125.378605][ T5588]        ocfs2_create+0x1c0/0x4e0
[  125.383651][ T5588]        path_openat+0x12f1/0x2e60
[  125.388796][ T5588]        do_filp_open+0x230/0x480
[  125.394105][ T5588]        do_sys_openat2+0x13b/0x4f0
[  125.399333][ T5588]        __x64_sys_openat+0x243/0x290
[  125.404768][ T5588]        do_syscall_64+0x3b/0xb0
[  125.409723][ T5588]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  125.416177][ T5588] 
[  125.416177][ T5588] -> #4 (jbd2_handle){++++}-{0:0}:
[  125.423500][ T5588]        lock_acquire+0x1f8/0x5a0
[  125.428552][ T5588]        start_this_handle+0x1f71/0x21b0
[  125.434203][ T5588]        jbd2__journal_start+0x2d1/0x5c0
[  125.439851][ T5588]        jbd2_journal_start+0x25/0x30
[  125.445245][ T5588]        ocfs2_start_trans+0x3c0/0x6f0
[  125.450721][ T5588]        ocfs2_shutdown_local_alloc+0x214/0xa90
[  125.456989][ T5588]        ocfs2_dismount_volume+0x1fb/0x960
[  125.462821][ T5588]        generic_shutdown_super+0x130/0x340
[  125.468744][ T5588]        kill_block_super+0x7a/0xe0
[  125.473971][ T5588]        deactivate_locked_super+0xa0/0x110
[  125.479884][ T5588]        cleanup_mnt+0x490/0x520
[  125.484845][ T5588]        task_work_run+0x246/0x300
[  125.489977][ T5588]        exit_to_user_mode_loop+0xde/0x100
[  125.495887][ T5588]        exit_to_user_mode_prepare+0xb1/0x140
[  125.501965][ T5588]        syscall_exit_to_user_mode+0x60/0x270
[  125.505979][ T5600] loop2: detected capacity change from 0 to 32768
[  125.508045][ T5588]        do_syscall_64+0x47/0xb0
[  125.519404][ T5588]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  125.525847][ T5588] 
[  125.525847][ T5588] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  125.534383][ T5588]        lock_acquire+0x1f8/0x5a0
[  125.539434][ T5588]        down_read+0xad/0xa30
[  125.544134][ T5588]        ocfs2_start_trans+0x3b5/0x6f0
[  125.549603][ T5588]        ocfs2_shutdown_local_alloc+0x214/0xa90
[  125.555853][ T5588]        ocfs2_dismount_volume+0x1fb/0x960
[  125.561663][ T5588]        generic_shutdown_super+0x130/0x340
[  125.567587][ T5588]        kill_block_super+0x7a/0xe0
[  125.572800][ T5588]        deactivate_locked_super+0xa0/0x110
[  125.578704][ T5588]        cleanup_mnt+0x490/0x520
[  125.583645][ T5588]        task_work_run+0x246/0x300
[  125.588756][ T5588]        exit_to_user_mode_loop+0xde/0x100
[  125.594656][ T5588]        exit_to_user_mode_prepare+0xb1/0x140
[  125.600719][ T5588]        syscall_exit_to_user_mode+0x60/0x270
[  125.606793][ T5588]        do_syscall_64+0x47/0xb0
[  125.611739][ T5588]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  125.618160][ T5588] 
[  125.618160][ T5588] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  125.625640][ T5588]        lock_acquire+0x1f8/0x5a0
[  125.630673][ T5588]        ocfs2_start_trans+0x2b0/0x6f0
[  125.636140][ T5588]        ocfs2_mknod+0x1638/0x2e20
[  125.641269][ T5588]        ocfs2_create+0x1c0/0x4e0
[  125.646292][ T5588]        path_openat+0x12f1/0x2e60
[  125.651405][ T5588]        do_filp_open+0x230/0x480
[  125.656436][ T5588]        do_sys_openat2+0x13b/0x4f0
[  125.661639][ T5588]        __x64_sys_openat+0x243/0x290
[  125.667015][ T5588]        do_syscall_64+0x3b/0xb0
[  125.672085][ T5588]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  125.678519][ T5588] 
[  125.678519][ T5588] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[  125.689044][ T5588]        lock_acquire+0x1f8/0x5a0
[  125.694081][ T5588]        down_write+0x36/0x60
[  125.698775][ T5588]        ocfs2_reserve_local_alloc_bits+0x127/0x29d0
[  125.705458][ T5588]        ocfs2_reserve_clusters_with_limit+0x1b4/0xb50
[  125.712318][ T5588]        ocfs2_mknod+0x15b5/0x2e20
[  125.717473][ T5588]        ocfs2_create+0x1c0/0x4e0
[  125.722497][ T5588]        path_openat+0x12f1/0x2e60
[  125.727613][ T5588]        do_filp_open+0x230/0x480
[  125.732645][ T5588]        do_sys_openat2+0x13b/0x4f0
[  125.737849][ T5588]        __x64_sys_openat+0x243/0x290
[  125.743227][ T5588]        do_syscall_64+0x3b/0xb0
[  125.748265][ T5588]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  125.754685][ T5588] 
[  125.754685][ T5588] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  125.765294][ T5588]        validate_chain+0x1661/0x5950
[  125.770670][ T5588]        __lock_acquire+0x125b/0x1f80
[  125.776048][ T5588]        lock_acquire+0x1f8/0x5a0
[  125.781079][ T5588]        down_write+0x36/0x60
[  125.785758][ T5588]        ocfs2_reserve_suballoc_bits+0x182/0x5190
[  125.792180][ T5588]        ocfs2_reserve_new_metadata_blocks+0x418/0x9b0
[  125.799049][ T5588]        ocfs2_init_xattr_set_ctxt+0x3ab/0x950
[  125.805217][ T5588]        ocfs2_xattr_set+0xf46/0x1930
[  125.810589][ T5588]        __vfs_setxattr+0x3e7/0x420
[  125.815791][ T5588]        __vfs_setxattr_noperm+0x12a/0x5e0
[  125.821598][ T5588]        vfs_setxattr+0x21d/0x420
[  125.826622][ T5588]        setxattr+0x250/0x2b0
[  125.831302][ T5588]        path_setxattr+0x1bc/0x2a0
[  125.836511][ T5588]        __x64_sys_setxattr+0xb7/0xd0
[  125.841890][ T5588]        do_syscall_64+0x3b/0xb0
[  125.846844][ T5588]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  125.853276][ T5588] 
[  125.853276][ T5588] other info that might help us debug this:
[  125.853276][ T5588] 
[  125.863506][ T5588] Chain exists of:
[  125.863506][ T5588]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem
[  125.863506][ T5588] 
[  125.879249][ T5588]  Possible unsafe locking scenario:
[  125.879249][ T5588] 
[  125.886698][ T5588]        CPU0                    CPU1
[  125.892057][ T5588]        ----                    ----
[  125.897417][ T5588]   lock(&oi->ip_xattr_sem);
[  125.902009][ T5588]                                lock(jbd2_handle);
[  125.908599][ T5588]                                lock(&oi->ip_xattr_sem);
[  125.915713][ T5588]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  125.923005][ T5588] 
[  125.923005][ T5588]  *** DEADLOCK ***
[  125.923005][ T5588] 
[  125.931143][ T5588] 3 locks held by syz.1.316/5588:
[  125.936173][ T5588]  #0: ffff8880745d8460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  125.945417][ T5588]  #1: ffff888059315108 (&type->i_mutex_dir_key#12){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420
[  125.955695][ T5588]  #2: ffff888059314e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930
[  125.965625][ T5588] 
[  125.965625][ T5588] stack backtrace:
[  125.971526][ T5588] CPU: 1 PID: 5588 Comm: syz.1.316 Not tainted 6.1.118-syzkaller #0
[  125.979507][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  125.989579][ T5588] Call Trace:
[  125.992856][ T5588]  <TASK>
[  125.995785][ T5588]  dump_stack_lvl+0x1e3/0x2cb
[  126.000470][ T5588]  ? nf_tcp_handle_invalid+0x642/0x642
[  126.005936][ T5588]  ? print_circular_bug+0x12b/0x1a0
[  126.011142][ T5588]  check_noncircular+0x2fa/0x3b0
[  126.016089][ T5588]  ? add_chain_block+0x850/0x850
[  126.021044][ T5588]  ? lockdep_lock+0x11f/0x2a0
[  126.025735][ T5588]  ? print_irqtrace_events+0x210/0x210
[  126.031203][ T5588]  ? _find_first_zero_bit+0xd0/0x100
[  126.036501][ T5588]  validate_chain+0x1661/0x5950
[  126.041365][ T5588]  ? reacquire_held_locks+0x660/0x660
[  126.046744][ T5588]  ? ocfs2_get_system_file_inode+0x1e0/0x7b0
[  126.052735][ T5588]  ? look_up_lock_class+0x77/0x140
[  126.057854][ T5588]  ? register_lock_class+0x100/0x990
[  126.063161][ T5588]  ? is_dynamic_key+0x260/0x260
[  126.068046][ T5588]  ? mark_lock+0x9a/0x340
[  126.072394][ T5588]  __lock_acquire+0x125b/0x1f80
[  126.077262][ T5588]  lock_acquire+0x1f8/0x5a0
[  126.081770][ T5588]  ? ocfs2_reserve_suballoc_bits+0x182/0x5190
[  126.087848][ T5588]  ? read_lock_is_recursive+0x10/0x10
[  126.093234][ T5588]  ? __might_sleep+0xb0/0xb0
[  126.097829][ T5588]  ? __lock_acquire+0x125b/0x1f80
[  126.102861][ T5588]  down_write+0x36/0x60
[  126.107019][ T5588]  ? ocfs2_reserve_suballoc_bits+0x182/0x5190
[  126.113104][ T5588]  ocfs2_reserve_suballoc_bits+0x182/0x5190
[  126.119014][ T5588]  ? mark_lock+0x9a/0x340
[  126.123367][ T5588]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  126.129897][ T5588]  ? do_raw_spin_unlock+0x137/0x8a0
[  126.135204][ T5588]  ? ocfs2_block_group_search+0x530/0x530
[  126.140941][ T5588]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  126.146849][ T5588]  ? _raw_spin_unlock+0x40/0x40
[  126.151879][ T5588]  ? stack_trace_save+0x113/0x1c0
[  126.156915][ T5588]  ? lockdep_hardirqs_on+0x94/0x130
[  126.162127][ T5588]  ? stack_trace_snprint+0xe0/0xe0
[  126.167249][ T5588]  ? __stack_depot_save+0x3f5/0x470
[  126.172456][ T5588]  ? kasan_set_track+0x60/0x70
[  126.177227][ T5588]  ? kasan_set_track+0x4b/0x70
[  126.181995][ T5588]  ? __kasan_kmalloc+0x97/0xb0
[  126.186760][ T5588]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x9b0
[  126.193358][ T5588]  ? ocfs2_init_xattr_set_ctxt+0x3ab/0x950
[  126.199176][ T5588]  ? ocfs2_xattr_set+0xf46/0x1930
[  126.204376][ T5588]  ? __vfs_setxattr+0x3e7/0x420
[  126.209233][ T5588]  ? __vfs_setxattr_noperm+0x12a/0x5e0
[  126.214779][ T5588]  ? vfs_setxattr+0x21d/0x420
[  126.219594][ T5588]  ? setxattr+0x250/0x2b0
[  126.223923][ T5588]  ? path_setxattr+0x1bc/0x2a0
[  126.228696][ T5588]  ? __x64_sys_setxattr+0xb7/0xd0
[  126.233721][ T5588]  ? do_syscall_64+0x3b/0xb0
[  126.238312][ T5588]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.244409][ T5588]  ocfs2_reserve_new_metadata_blocks+0x418/0x9b0
[  126.250764][ T5588]  ? ocfs2_init_steal_slots+0x150/0x150
[  126.256321][ T5588]  ? ocfs2_xattr_block_set+0x3620/0x3620
[  126.261972][ T5588]  ? ocfs2_xattr_set+0xef8/0x1930
[  126.267005][ T5588]  ocfs2_init_xattr_set_ctxt+0x3ab/0x950
[  126.272643][ T5588]  ? ocfs2_prepare_refcount_xattr+0x1220/0x1220
[  126.278890][ T5588]  ? up_write+0x19d/0x580
[  126.283234][ T5588]  ? ocfs2_remove_btree_range+0x18a0/0x18a0
[  126.289140][ T5588]  ? __up_read+0x690/0x690
[  126.293571][ T5588]  ocfs2_xattr_set+0xf46/0x1930
[  126.298435][ T5588]  ? __ocfs2_xattr_set_handle+0x1060/0x1060
[  126.304336][ T5588]  ? __lock_acquire+0x125b/0x1f80
[  126.309386][ T5588]  ? do_raw_spin_unlock+0x137/0x8a0
[  126.314600][ T5588]  ? posix_xattr_acl+0xa5/0xd0
[  126.319372][ T5588]  ? evm_protect_xattr+0x366/0xb10
[  126.324496][ T5588]  ? ocfs2_xattr_user_set+0xaa/0xf0
[  126.329703][ T5588]  ? ocfs2_xattr_user_get+0xe0/0xe0
[  126.334911][ T5588]  __vfs_setxattr+0x3e7/0x420
[  126.339596][ T5588]  __vfs_setxattr_noperm+0x12a/0x5e0
[  126.344888][ T5588]  vfs_setxattr+0x21d/0x420
[  126.349407][ T5588]  ? __lock_acquire+0x1f80/0x1f80
[  126.354446][ T5588]  ? xattr_permission+0x4f0/0x4f0
[  126.359475][ T5588]  ? __might_fault+0xbd/0x110
[  126.364164][ T5588]  ? _copy_from_user+0x109/0x170
[  126.369117][ T5588]  setxattr+0x250/0x2b0
[  126.373283][ T5588]  ? path_setxattr+0x2a0/0x2a0
[  126.378062][ T5588]  ? __mnt_want_write+0x222/0x2a0
[  126.383098][ T5588]  path_setxattr+0x1bc/0x2a0
[  126.387698][ T5588]  ? simple_xattr_list_add+0xf0/0xf0
[  126.392992][ T5588]  ? syscall_enter_from_user_mode+0x2e/0x230
[  126.398989][ T5588]  __x64_sys_setxattr+0xb7/0xd0
[  126.403855][ T5588]  do_syscall_64+0x3b/0xb0
[  126.408271][ T5588]  ? clear_bhb_loop+0x45/0xa0
[  126.412951][ T5588]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.418855][ T5588] RIP: 0033:0x7fefc257e759
[  126.423287][ T5588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.442920][ T5588] RSP: 002b:00007fefc3386038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  126.451339][ T5588] RAX: ffffffffffffffda RBX: 00007fefc2735f80 RCX: 00007fefc257e759
[  126.459314][ T5588] RDX: 00000000200010c0 RSI: 0000000020000300 RDI: 00000000200002c0
[  126.467290][ T5588] RBP: 00007fefc25f175e R08: 0000000000000000 R09: 0000000000000000
[  126.475268][ T5588] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  126.483244][ T5588] R13: 0000000000000000 R14: 00007fefc2735f80 R15: 00007ffedbeb6278
[  126.491312][ T5588]  </TASK>
[  126.494457][    C1] vkms_vblank_simulate: vblank timer overrun
[  126.531686][ T4389] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  126.550032][ T4389] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  126.560008][ T4389] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.569878][ T4245] ocfs2: Unmounting device (7,1) on (node local)
[  126.570694][ T4389] usb 5-1: config 0 descriptor??
[  126.621738][ T5600] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  126.677702][ T4254] ocfs2: Unmounting device (7,2) on (node local)
[  126.719594][ T2117] glorious 0003:258A:0033.0018: unknown main item tag 0x0
[  126.728923][ T2117] glorious 0003:258A:0033.0018: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.0-1/input0
[  126.924999][ T2117] usb 1-1: USB disconnect, device number 8
[  126.987511][ T4389] microsoft 0003:045E:07DA.0019: No inputs registered, leaving
[  126.996509][ T4389] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  127.008282][ T4389] microsoft 0003:045E:07DA.0019: no inputs found
[  127.015017][ T4389] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway
[  127.190364][ T2117] usb 5-1: USB disconnect, device number 13
[  132.860951][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  132.867325][ T1272] ieee802154 phy1 wpan1: encryption failed: -22