last executing test programs:

4m16.872283761s ago: executing program 3 (id=11):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c)
listen(r0, 0x100101)

4m16.208137042s ago: executing program 3 (id=18):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})

4m15.849930538s ago: executing program 3 (id=24):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000001500)=ANY=[@ANYRESHEX], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)

4m15.568614531s ago: executing program 3 (id=27):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@nodecompose}, {@nobarrier}, {@nodecompose}, {@force}, {@nobarrier}, {@type={'type', 0x3d, "aff0aae8"}}, {@nls={'nls', 0x3d, 'iso8859-9'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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")
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x800, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5006d, 0x0)

4m15.160791458s ago: executing program 3 (id=33):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000))

4m14.435976199s ago: executing program 3 (id=41):
syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfa, 0x154, &(0x7f00000001c0)="$eJzskL9rGmEAhp9Pzx8ttVqw0BZaCh0qFut5YrcOGiJxMAcJLpkCeiGCRlEIbvkxZ8gf4JAsmcQhZMyQmMlEIZi/wy0QyGL47k4hY/bvWe7ueV/eu/uW/49jRMCLw1Kj3mxZ7bZV+blmFvPr5xeXH6UPAEG7UW+2ZLni9K+ysC2vGkwPHH0T8gA162+5Uav4gSzEgJwGVH3oON330kWDbFVrVsp1sV8w+IztjLmTG65Lu+6bBrmw4/RnmJ3Cb7n3icXeI9Dp+tw/S8TPvnuz7gOd7p9+73Z1NCwk4j+sIyP/1T6BkiXfJWT+kBwm7pP93mQ8mu2ZRXOcNox/aT2l65mJeTcqZPaP0VY+7MKGeL3nlxslOBTQFdCz8+m1CAGDkyczGA5E34FnJwLCTYSd1IX7fU5S3vzimxsWNwqFQqFQKBQKhUKhULyVlwAAAP//qYZcdg==")
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c93012000e00050014010a00"], 0x17)

4m13.967725326s ago: executing program 32 (id=41):
syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfa, 0x154, &(0x7f00000001c0)="$eJzskL9rGmEAhp9Pzx8ttVqw0BZaCh0qFut5YrcOGiJxMAcJLpkCeiGCRlEIbvkxZ8gf4JAsmcQhZMyQmMlEIZi/wy0QyGL47k4hY/bvWe7ueV/eu/uW/49jRMCLw1Kj3mxZ7bZV+blmFvPr5xeXH6UPAEG7UW+2ZLni9K+ysC2vGkwPHH0T8gA162+5Uav4gSzEgJwGVH3oON330kWDbFVrVsp1sV8w+IztjLmTG65Lu+6bBrmw4/RnmJ3Cb7n3icXeI9Dp+tw/S8TPvnuz7gOd7p9+73Z1NCwk4j+sIyP/1T6BkiXfJWT+kBwm7pP93mQ8mu2ZRXOcNox/aT2l65mJeTcqZPaP0VY+7MKGeL3nlxslOBTQFdCz8+m1CAGDkyczGA5E34FnJwLCTYSd1IX7fU5S3vzimxsWNwqFQqFQKBQKhUKhULyVlwAAAP//qYZcdg==")
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c93012000e00050014010a00"], 0x17)

59.272607009s ago: executing program 4 (id=1706):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x5)

58.260862435s ago: executing program 4 (id=1719):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@utf8no}, {@uni_xlateno}, {@fat=@errors_remount}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fat=@fmask={'fmask', 0x3d, 0xfffffffffffffff9}}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@uni_xlateno}, {@rodir}]}, 0x26, 0x36b, &(0x7f0000000540)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

57.612053285s ago: executing program 4 (id=1724):
r0 = epoll_create1(0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001040))

57.356000488s ago: executing program 4 (id=1726):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cf, &(0x7f0000002080)="$eJzs3T9rJGUYAPBnNrN//AO7hZUIDmhhdVyutdlD7kBM5bGFWmjw7kCyi3AHAUUcrxI7v4CfQBD8DrY2dpaCH8DyhIORmZ3ZP8nsJpFsxMvv1+TJvO8z7zMzL8mkyLOfvDY7up/Fwydf/RGDQRKdcYzjaRKj6ETjm1gz/j4AgP+zp0URfxVzLcO/f7chL4mIwY5rAwB244zf/7V0Gf58JWUBADt074MP37t9cHDn/SwbxN3Zt8eT8i/78ut8/PbD+Cym8SBuxjCeRVQvCt2o3hbK8G5RFHmalUbx5iw/npSZs49/rc//y8t1sB/DGFXR4m2jyn/34M5+NreSn5d1vFivPy7XvxXDeGWRvJZ/qyU/Jr14642V+m/EMH77ND6Padyviljmf72fZe+UrzgfleWV+Ul+POlX85aKvWbx/AqfDwAAAAAAAAAAAAAAAAAAAAAAz6cbde+cflT9e8pDdf+dvWflN93IGqP1/jzz/KQ50Wp/oKIo8iJ+aPrr3MyyrKgnLvPTeDVdbSwIAAAAAAAAAAAAAAAAAAAA19fjL748OpxOHzy6lKDpBpBGxN/3Iv7tecYrR16P7ZP79ZqH02mnDtfnpKtHYq+Zk0RsLSPSRTODS7s/G4IXTtVcBz/+1JbVW39waazMGZy9aLd9rcsMmt11dJhE65z+oubBfJNUjSCWc3pxzrV6m4aKuMj267UODbdllXv99HleqoJ8w50vg0i2Ffb2n/M7Vx9JTl5Fr7qrrendOoi2wqq90f4sTgQxmKef/lmR6NYBAAAAAAAAAAAAAAAAAAA7tfzv35bBJ1tTO0V/Z2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJVafv7/BYK8Tj7H5F48evwfXyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXwD8BAAD//2T0YAU=")
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)

57.053676403s ago: executing program 4 (id=1730):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r0, 0x540b, 0x40000000002)

56.63108189s ago: executing program 4 (id=1735):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x18, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

56.123646197s ago: executing program 33 (id=1735):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x18, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4.102545528s ago: executing program 0 (id=2153):
mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x108, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)

3.91565448s ago: executing program 0 (id=2156):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)

3.742547113s ago: executing program 0 (id=2157):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)

3.652868714s ago: executing program 0 (id=2159):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x401, @private2, 0xb}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0)

2.720924309s ago: executing program 5 (id=2170):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x101}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b)

2.6530174s ago: executing program 1 (id=2171):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}})

2.65250299s ago: executing program 5 (id=2172):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSLCKTRMIOS(r0, 0x80047456, &(0x7f00000010c0))

2.61348632s ago: executing program 0 (id=2173):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x17, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)

2.457852762s ago: executing program 0 (id=2174):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESHEX], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480)
close(r0)

2.391898264s ago: executing program 5 (id=2175):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)

2.373154494s ago: executing program 1 (id=2176):
r0 = memfd_create(&(0x7f0000000740)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xf5li!g\xaei\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed0\f\xbd\x1a|\x8a\xbb\xda\xcfY\x981\x1e\xb5gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xb0\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x92\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\x16W\xc1y\xe1\x9b\x81\x11\xe7\x04\x02\x1e\xec\xa9\x9e\x1f\'\"?\x0e\xa4/>gT\bM\xa9\x9a\x98\xb8\xd0\xb6\x89\x1a\xa2\x85\xf1f\xf2_\x12(\x02\xcd\xff\xbd\x98\xa4Y\xee\xfa\t\x1e\x06\xd9\x15\xf3I\x9d\x02\xd4\xc0\xcde\xf8\xc8\x95\x964\x7f9\x93p\x8f\a\x1b\xeaT\x8c\xc6\xb1\fx\xadlU\xdf\f\xb9\xa8m56E\xb4jP\xf5B\xacc\x9b\xed\x15v\xbd\xe0\xd6\xa0\xf0\xeb\x94\x8dm\x9d\xf7\xf7\n\x83\x0e/\xde\xa7l`\x88\xc0\x17\x90\xc3t\xea\xc3\xcb\x00%\x16x\xfe\x8fy\x1a\xbc\xe6&j\xb5\x85\x95\xc10*\xdb\xf9%\x8f\xd8\x81\x15\xaf\xdcz*\xd2J\xa1E\xd5\x04\xdd0\x964f\xb4\x9f\xa7`\xc0\xd0\xe1\xc0\x12\n\xac\\\xb3\x81\f\x9c\x18\x14\xf7_\xb8D\x04\xa3y\xab\x94\xfa\xc1', 0x7)
fcntl$addseals(r0, 0x409, 0x8)
fallocate(r0, 0x3, 0x9100, 0x3)

2.300894585s ago: executing program 1 (id=2177):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)

2.212900826s ago: executing program 1 (id=2178):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe, 0xdf, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x46, {0x46, 0xf, "43dd0e4662b52bc316df9bda5ae69341eed7f1f5480899f79749f3aca4dda1597da7cfcdd38c2cda1cb2bd3a6f7292d8ff7645876e89ff441be71fe8c246ec912f338167"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

955.913026ms ago: executing program 2 (id=2182):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xfffffff9, 0x7, 0xba04, 0xac33, 0x3, 0x2}, 0x1c)

846.210437ms ago: executing program 2 (id=2183):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

757.715818ms ago: executing program 2 (id=2184):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0)
sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8)

643.99641ms ago: executing program 2 (id=2185):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x44, r1, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x44}}, 0x0)

580.785462ms ago: executing program 2 (id=2186):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x50)

505.856753ms ago: executing program 2 (id=2187):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f0000004480)="$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")
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x83)

369.051414ms ago: executing program 5 (id=2188):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

352.628525ms ago: executing program 1 (id=2189):
r0 = shmget$private(0x0, 0x2000, 0x54000438, &(0x7f0000ffd000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)

207.971737ms ago: executing program 1 (id=2190):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000180)=0x8000001)
write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa)

203.612497ms ago: executing program 5 (id=2191):
getresgid(&(0x7f0000000c40), &(0x7f0000000140)=<r0=>0x0, &(0x7f0000000240)=<r1=>0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x94)

0s ago: executing program 5 (id=2192):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c6d6f64653d61646170746976652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d656e61626c652c6163746976655f6c6f67733d362c6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f61636c2c6d6f64653d61646170746976652c6e6f696e6c696e655f78617474722c6e6f657874656e745f63616368652c6e6f757365725f78617474722c6a71666d743d7666736f6c642c66617374626f6f742c67727071756f74613d2f6465762f75686964002c61636c2c0032f4ee2f6560cdca2b9483944e9645733866c506b49c56b50344a658491dfe1afc3bb0de511c48132c86a775315723c53de2957513b9e639dfab8b7e4f4097c16f12b630a63e3ee7aa89cfa87acb9e9436e3d4feae3c1c3fedb8759e622019ece82c31d9fe60c2e3300afffbbda9aa8515e815ffc77756449aee7d4dc8354a136775201fe90e0663c422eb5a7e10e72601606e640c6714946801fccf68f802ff1c466e968c229e988c70dbe2c74169c0e96f9117a800ef78cef7bea512401010266195fc419fabbb4304582cd727de0f01694c0e22f6bca0650e3f3e4c4aefef27a417b89a0ce12bce1898cc08bbacc339f2655241746a085213fe4d6edc276928e230d4663583ccad22e450718285ed6a84bad0c7d117de297a02d83173a5a3d62192e8b6882f1a34b2200fdb7de25a9c0657778fdf670dfbd28483194c7b288bd257fa84f4a9564651ee61761f4a364803b5aea822e4c5b52b5676bdba4d9bdcbf1b7ddda716f223a1bc6d1c5a150fa64e72f580f7bf672ce6c6d30f8bcf091186a89ff219d2272ff5f2c0b4f63cb92f4708d6d81bc1935a791bd1c3670ba93b4a4db772e29f150122528cbe24284f0d1064ba237debaa65d481756e427ad570171d1e9445fe5c06dd6335167686a2cf8f226eb57ebe530d4e72"], 0x1, 0x550c, &(0x7f00000079c0)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

kernel console output (not intermixed with test programs):

uxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.729259][ T9402] loop2: detected capacity change from 0 to 512
[  219.584310][ T5810] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  219.615324][ T9410] loop0: detected capacity change from 0 to 32768
[  219.624880][ T9410] XFS: ikeep mount option is deprecated.
[  219.678321][ T9408] loop1: detected capacity change from 0 to 32768
[  219.704447][ T9410] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  219.791435][ T9408] MetaData crosses page boundary!!
[  219.806811][ T9408] lblock = 621d00, size  = 28672
[  219.812475][ T9408] CPU: 0 PID: 9408 Comm: syz.1.1222 Not tainted 6.6.93-syzkaller #0
[  219.820516][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  219.830971][ T9408] Call Trace:
[  219.834280][ T9408]  <TASK>
[  219.837260][ T9408]  dump_stack_lvl+0x16c/0x230
[  219.842098][ T9408]  ? show_regs_print_info+0x20/0x20
[  219.847338][ T9408]  ? load_image+0x3b0/0x3b0
[  219.852329][ T9408]  __get_metapage+0xaac/0xfa0
[  219.857375][ T9408]  dtSearch+0x591/0x21b0
[  219.861783][ T9408]  jfs_lookup+0x156/0x380
[  219.867663][ T9408]  ? jfs_get_parent+0xb0/0xb0
[  219.872845][ T9408]  ? apparmor_path_rmdir+0x2f0/0x2f0
[  219.878351][ T9408]  ? make_vfsuid+0x51/0xb0
[  219.881418][ T9410] XFS (loop0): Ending clean mount
[  219.882982][ T9408]  ? inode_permission+0xf3/0x480
[  219.893878][ T9408]  ? bpf_lsm_inode_create+0x9/0x10
[  219.900057][ T9408]  ? security_inode_create+0xb7/0x100
[  219.900354][ T9410] XFS (loop0): Quotacheck needed: Please wait.
[  219.905645][ T9408]  ? jfs_get_parent+0xb0/0xb0
[  219.905688][ T9408]  path_openat+0x10b8/0x3190
[  219.905739][ T9408]  ? do_filp_open+0x3d0/0x3d0
[  219.928174][ T9408]  do_filp_open+0x1c5/0x3d0
[  219.932926][ T9408]  ? vfs_tmpfile+0x490/0x490
[  219.937685][ T9408]  ? _raw_spin_unlock+0x28/0x40
[  219.943031][ T9408]  ? alloc_fd+0x58f/0x630
[  219.947589][ T9408]  do_sys_openat2+0x12c/0x1c0
[  219.952410][ T9408]  ? do_sys_open+0xe0/0xe0
[  219.956952][ T9408]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  219.962977][ T9408]  ? lock_chain_count+0x20/0x20
[  219.968048][ T9408]  __x64_sys_creat+0x90/0xb0
[  219.972680][ T9408]  do_syscall_64+0x55/0xb0
[  219.977226][ T9408]  ? clear_bhb_loop+0x40/0x90
[  219.982017][ T9408]  ? clear_bhb_loop+0x40/0x90
[  219.987002][ T9408]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.992933][ T9408] RIP: 0033:0x7fe4fa18e929
[  219.997574][ T9408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.006013][ T9410] XFS (loop0): Quotacheck: Done.
[  220.018071][ T9408] RSP: 002b:00007fe4fb0ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  220.018097][ T9408] RAX: ffffffffffffffda RBX: 00007fe4fa3b5fa0 RCX: 00007fe4fa18e929
[  220.018108][ T9408] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0
[  220.018119][ T9408] RBP: 00007fe4fa210b39 R08: 0000000000000000 R09: 0000000000000000
[  220.018129][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.018139][ T9408] R13: 0000000000000000 R14: 00007fe4fa3b5fa0 R15: 00007ffe5420c2e8
[  220.018165][ T9408]  </TASK>
[  220.018246][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.033006][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  220.087852][ T9408] bread failed!
[  220.101037][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  220.111960][ T9408] jfs_lookup: dtSearch returned -5
[  220.175093][ T5810] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  220.194500][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.235456][ T5810] usb 3-1: config 0 descriptor??
[  220.245407][ T9416] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  220.312464][ T5767] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.587631][ T9436] loop1: detected capacity change from 0 to 2048
[  220.621035][ T9436] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  220.630476][ T9436] UDF-fs: Scanning with blocksize 512 failed
[  220.675645][ T9436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  220.708510][ T5810] hid-rmi 0003:0461:4E72.000F: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0
[  221.016425][ T5812] usb 3-1: USB disconnect, device number 8
[  222.611388][ T9476] loop4: detected capacity change from 0 to 512
[  222.661810][ T9476] EXT4-fs: Ignoring removed i_version option
[  222.690983][ T9476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.715369][ T9465] loop1: detected capacity change from 0 to 40427
[  222.748288][ T9465] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff
[  222.820623][ T9465] F2FS-fs (loop1): invalid crc value
[  222.856219][ T9465] F2FS-fs (loop1): Found nat_bits in checkpoint
[  222.946944][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.961828][ T9465] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  223.095935][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'.
[  223.169782][ T9490] gretap0: entered promiscuous mode
[  223.189691][ T9490] macsec1: entered promiscuous mode
[  223.200936][ T5764] syz-executor: attempt to access beyond end of device
[  223.200936][ T5764] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  223.254282][ T5764] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  223.382337][ T9494] loop2: detected capacity change from 0 to 4096
[  223.428398][ T9494] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  223.456574][ T9498] loop0: detected capacity change from 0 to 512
[  223.506081][ T9498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.553410][ T9498] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.558645][ T9494] ntfs3: loop2: Failed to load $Extend (-22).
[  223.621597][ T9494] ntfs3: loop2: Failed to initialize $Extend.
[  223.639331][ T9498] virtiofs: Bad value for 'dax'
[  223.797713][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.226196][ T9507] loop0: detected capacity change from 0 to 4096
[  224.281658][ T9507] NILFS (loop0): invalid segment: Checksum error in segment payload
[  224.308102][ T9513] loop4: detected capacity change from 0 to 1024
[  224.324412][ T9507] NILFS (loop0): trying rollback from an earlier position
[  224.415578][ T9513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.511450][ T9507] NILFS (loop0): recovery complete
[  224.659884][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.742846][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'.
[  224.784692][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'.
[  225.199699][ T9536] process 'syz.0.1273' launched '/dev/fd/3' with NULL argv: empty string added
[  225.270023][ T9539] mkiss: ax0: crc mode is auto.
[  225.858187][ T9558] loop0: detected capacity change from 0 to 1024
[  225.925513][ T2956] hfsplus: b-tree write err: -5, ino 4
[  226.111829][ T9566] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1287'.
[  226.409973][ T9550] loop2: detected capacity change from 0 to 32768
[  226.489448][ T9550] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  226.864560][ T9550] syz.2.1279 (9550) used greatest stack depth: 18792 bytes left
[  226.995616][ T5774] ocfs2: Unmounting device (7,2) on (node local)
[  227.114970][ T9583] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1293'.
[  227.182531][ T9571] loop1: detected capacity change from 0 to 32768
[  227.212231][ T9571] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1289 (9571)
[  227.267801][ T9571] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  227.303502][ T9571] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  227.315004][ T9587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  227.315169][ T9587] IPv6: NLM_F_CREATE should be set when creating new route
[  227.359345][ T9571] BTRFS info (device loop1): using free space tree
[  227.436191][ T9595] loop2: detected capacity change from 0 to 256
[  227.465581][ T9598] loop4: detected capacity change from 0 to 1024
[  227.520752][ T9595] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  227.627533][ T9571] BTRFS info (device loop1): enabling ssd optimizations
[  227.685264][ T9598] hfsplus: bad catalog entry type
[  227.694320][ T9571] BTRFS info (device loop1): auto enabling async discard
[  227.838172][   T59] hfsplus: b-tree write err: -5, ino 4
[  227.953913][ T5764] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  228.147922][ T5780] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop1 scanned by udevd (5780)
[  228.704323][ T9631] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1308'.
[  229.728562][ T9632] loop4: detected capacity change from 0 to 32768
[  229.817626][ T9632] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  229.823726][ T9663] loop0: detected capacity change from 0 to 8
[  229.895287][ T7834] (kworker/u4:14,7834,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  229.913777][    C0] vkms_vblank_simulate: vblank timer overrun
[  229.942605][ T9665] loop2: detected capacity change from 0 to 1024
[  229.997161][ T9665] EXT4-fs: Ignoring removed nobh option
[  230.030823][   T28] audit: type=1800 audit(1750248640.557:90): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1307" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  230.069035][ T9665] EXT4-fs: Ignoring removed bh option
[  230.106629][ T9665] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  230.216426][ T9665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.294402][ T5946] ocfs2: Unmounting device (7,4) on (node local)
[  230.488432][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.892176][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1333'.
[  231.397018][   T28] audit: type=1326 audit(1750248641.927:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3098e929 code=0x7ffc0000
[  231.446496][ T9713] sd 0:0:1:0: device reset
[  231.505416][  T788] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  231.507948][   T28] audit: type=1326 audit(1750248641.927:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3098e929 code=0x7ffc0000
[  231.589160][   T28] audit: type=1326 audit(1750248641.977:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab3098d290 code=0x7ffc0000
[  231.628337][   T28] audit: type=1326 audit(1750248641.977:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3098e929 code=0x7ffc0000
[  231.660372][   T28] audit: type=1326 audit(1750248641.977:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3098e929 code=0x7ffc0000
[  231.692103][ T9717] loop2: detected capacity change from 0 to 4096
[  231.712046][   T28] audit: type=1326 audit(1750248641.977:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab3098e929 code=0x7ffc0000
[  231.734312][  T788] usb 2-1: Using ep0 maxpacket: 32
[  231.770889][   T28] audit: type=1326 audit(1750248641.997:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3098e929 code=0x7ffc0000
[  231.806659][ T9722] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  231.808302][  T788] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  231.821366][   T28] audit: type=1326 audit(1750248641.997:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.2.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3098e929 code=0x7ffc0000
[  231.900441][  T788] usb 2-1: config 0 interface 0 has no altsetting 0
[  231.931529][  T788] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  231.978292][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.014242][   T28] audit: type=1800 audit(1750248642.477:99): pid=9717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1346" name="file2" dev="loop2" ino=16 res=0 errno=0
[  232.036425][  T788] usb 2-1: config 0 descriptor??
[  232.329882][ T9730] loop4: detected capacity change from 0 to 1024
[  232.508864][  T788] corsair-psu 0003:1B1C:1C09.0010: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0
[  232.531082][ T9733] loop2: detected capacity change from 0 to 128
[  232.620546][ T9720] loop0: detected capacity change from 0 to 32768
[  232.621639][  T788] corsair-psu 0003:1B1C:1C09.0010: unable to initialize device (-38)
[  232.736546][ T9720] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  232.770124][  T788] corsair-psu: probe of 0003:1B1C:1C09.0010 failed with error -38
[  232.822968][  T788] usb 2-1: USB disconnect, device number 13
[  232.984445][ T9720] XFS (loop0): Ending clean mount
[  233.229478][ T5767] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  233.726228][ T9762] loop0: detected capacity change from 0 to 512
[  233.784312][ T9762] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  233.827914][ T9762] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  233.905904][ T9762] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1356: invalid indirect mapped block 2683928664 (level 1)
[  233.979187][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1363'.
[  233.999043][ T9762] EXT4-fs (loop0): Remounting filesystem read-only
[  234.014786][ T9762] EXT4-fs (loop0): 1 truncate cleaned up
[  234.023193][ T9762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.278355][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.416334][ T9782] loop1: detected capacity change from 0 to 512
[  234.486898][ T9782] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1369: invalid indirect mapped block 256 (level 2)
[  234.543620][ T9782] EXT4-fs (loop1): 2 truncates cleaned up
[  234.591290][ T9782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.639521][ T9790] loop2: detected capacity change from 0 to 8
[  234.695204][ T9782] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.1369: bg 0: block 5: invalid block bitmap
[  234.748115][ T9782] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem
[  234.835336][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.845244][ T9792] loop0: detected capacity change from 0 to 2048
[  234.872073][ T9792] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  234.910528][ T9792] NILFS (loop0): mounting unchecked fs
[  234.939523][ T9792] NILFS (loop0): recovery required for readonly filesystem
[  234.953263][ T7622] udevd[7622]: incorrect nilfs2 checksum on /dev/loop0
[  234.968452][ T9792] NILFS (loop0): write access will be enabled during recovery
[  234.992070][ T9792] NILFS (loop0): recovery complete
[  235.122417][ T5780] udevd[5780]: incorrect nilfs2 checksum on /dev/loop0
[  235.844162][    C0] sched: RT throttling activated
[  236.013461][ T9794] loop2: detected capacity change from 0 to 131072
[  236.037281][ T9794] F2FS-fs (loop2): Value of option "test_dummy_encryption=v2reuse8hŽ"nline_xattr" is unrecognized
[  236.415489][ T9820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1387'.
[  236.922844][ T9840] loop1: detected capacity change from 0 to 512
[  237.024289][ T5810] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  237.043344][ T9840] EXT4-fs (loop1): 1 orphan inode deleted
[  237.058678][ T7836] __quota_error: 2 callbacks suppressed
[  237.058696][ T7836] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  237.115497][ T9840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.154068][ T7836] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:15: Failed to release dquot type 1
[  237.178946][ T9840] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.309504][ T5810] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.326845][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0
[  237.353795][ T5810] usb 3-1: New USB device found, idVendor=0eef, idProduct=7207, bcdDevice= 0.00
[  237.375125][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.389243][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.392741][ T5810] usb 3-1: config 0 descriptor??
[  237.415722][ T7840] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  237.434772][ T7840] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:16: Failed to release dquot type 1
[  237.569641][ T9838] loop0: detected capacity change from 0 to 32768
[  237.764373][ T9848] loop4: detected capacity change from 0 to 1024
[  237.841089][ T5810] hid-generic 0003:0EEF:7207.0011: unknown main item tag 0x1
[  237.880014][ T5810] hid-generic 0003:0EEF:7207.0011: hidraw0: USB HID v0.00 Device [HID 0eef:7207] on usb-dummy_hcd.2-1/input0
[  238.055188][ T5806] usb 3-1: USB disconnect, device number 9
[  238.111300][ T9852] fido_id[9852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  238.136345][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'.
[  238.458771][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'.
[  238.586775][ T9867] Zero length message leads to an empty skb
[  238.674424][ T5810] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  238.884350][ T5810] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  238.916162][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.929767][  T788] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  238.963803][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.994652][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  239.036417][ T5810] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  239.065666][ T5810] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  239.094291][ T5810] usb 2-1: Manufacturer: syz
[  239.115840][ T5810] usb 2-1: config 0 descriptor??
[  239.134446][  T788] usb 5-1: Using ep0 maxpacket: 32
[  239.146659][  T788] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  239.194791][  T788] usb 5-1: config 0 has no interface number 0
[  239.202954][  T788] usb 5-1: config 0 interface 184 has no altsetting 0
[  239.237463][  T788] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  239.283199][  T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.351761][ T9895] loop0: detected capacity change from 0 to 1024
[  239.364423][  T788] usb 5-1: Product: syz
[  239.369344][  T788] usb 5-1: Manufacturer: syz
[  239.390891][  T788] usb 5-1: SerialNumber: syz
[  239.410144][  T788] usb 5-1: config 0 descriptor??
[  239.462911][  T788] smsc75xx v1.0.0
[  239.510266][ T3446] hfsplus: b-tree write err: -5, ino 4
[  239.605020][ T5810] appleir 0003:05AC:8243.0012: unknown main item tag 0x0
[  239.635678][ T5810] appleir 0003:05AC:8243.0012: No inputs registered, leaving
[  239.716281][ T5810] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  239.884559][   T23] usb 2-1: USB disconnect, device number 14
[  239.991558][ T9912] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  240.019033][ T9912] overlayfs: missing 'lowerdir'
[  240.111720][ T9910] fido_id[9910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  240.139920][  T788] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  240.178565][  T788] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  240.216393][  T788] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  240.269295][  T788] smsc75xx: probe of 5-1:0.184 failed with error -71
[  240.308726][  T788] usb 5-1: USB disconnect, device number 11
[  240.596140][ T9930] loop0: detected capacity change from 0 to 64
[  241.669541][ T9940] loop0: detected capacity change from 0 to 32768
[  241.924567][ T9962] loop4: detected capacity change from 0 to 1764
[  241.972730][ T9962] iso9660: Corrupted directory entry in block 0 of inode 1792
[  242.146699][ T9966] loop2: detected capacity change from 0 to 2048
[  242.198997][ T9966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.435122][ T9972] loop0: detected capacity change from 0 to 1024
[  242.469726][ T9972] EXT4-fs: Ignoring removed orlov option
[  242.514455][ T9972] EXT4-fs: Ignoring removed nomblk_io_submit option
[  242.612775][ T9972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.855181][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.143884][ T9992] batadv0: entered promiscuous mode
[  243.166347][ T9991] batadv0: left promiscuous mode
[  243.270821][ T9969] loop4: detected capacity change from 0 to 32768
[  243.363261][ T9969] JBD2: Ignoring recovery information on journal
[  243.519608][ T9969] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  243.975528][ T5946] ocfs2: Unmounting device (7,4) on (node local)
[  244.004917][T10011] loop1: detected capacity change from 0 to 512
[  244.040603][T10000] loop0: detected capacity change from 0 to 32768
[  244.068069][T10000] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1452 (10000)
[  244.116145][T10011] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[  244.134527][T10000] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  244.183383][T10000] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  244.194306][T10011] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  244.228241][T10011] EXT4-fs (loop1): mount failed
[  244.253818][T10000] BTRFS info (device loop0): force zlib compression, level 3
[  244.359257][T10000] BTRFS info (device loop0): disabling free space tree
[  244.395176][T10000] BTRFS info (device loop0): enabling ssd optimizations
[  244.403336][T10000] BTRFS info (device loop0): allowing degraded mounts
[  244.480123][T10000] BTRFS info (device loop0): trying to use backup root at mount time
[  244.516540][T10000] BTRFS info (device loop0): enabling free space tree
[  244.564217][T10000] BTRFS info (device loop0): using free space tree
[  244.781703][T10000] BTRFS info (device loop0): auto enabling async discard
[  244.799236][T10007] loop2: detected capacity change from 0 to 32768
[  244.832034][T10000] BTRFS info (device loop0): checking UUID tree
[  244.912384][T10007] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  244.934341][   T55] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  244.984593][T10000] BTRFS info (device loop0: state M): disabling free space tree
[  245.038922][T10000] BTRFS info (device loop0: state M): allowing degraded mounts
[  245.095073][T10000] BTRFS info (device loop0: state M): trying to use backup root at mount time
[  245.108150][T10007] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  245.160814][T10050] loop4: detected capacity change from 0 to 64
[  245.160966][T10007] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  245.194733][   T55] usb 2-1: Using ep0 maxpacket: 16
[  245.215175][   T55] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  245.234742][T10007] OCFS2: File system is now read-only.
[  245.241134][T10007] (syz.2.1454,10007,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  245.244497][T10000] BTRFS info (device loop0: state M): enabling free space tree
[  245.283971][   T55] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  245.295083][T10007] (syz.2.1454,10007,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  245.333338][   T55] usb 2-1: Product: syz
[  245.338687][T10007] (syz.2.1454,10007,0):ocfs2_get_clusters:624 ERROR: status = -30
[  245.348962][   T55] usb 2-1: Manufacturer: syz
[  245.394685][   T55] usb 2-1: SerialNumber: syz
[  245.401818][T10007] (syz.2.1454,10007,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  245.424533][   T55] usb 2-1: config 0 descriptor??
[  245.465602][T10007] (syz.2.1454,10007,1):ocfs2_read_virt_blocks:987 ERROR: status = -30
[  245.483369][ T5767] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  245.494575][T10007] (syz.2.1454,10007,0):ocfs2_read_dir_block:511 ERROR: status = -30
[  245.626286][ T5774] ocfs2: Unmounting device (7,2) on (node local)
[  245.675768][   T55] usb 2-1: USB disconnect, device number 15
[  245.839682][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  246.386801][ T5812] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  246.712902][T10080] loop4: detected capacity change from 0 to 2048
[  246.800472][T10080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.824337][  T788] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  246.870074][T10080] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.954568][T10087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1474'.
[  247.034456][  T788] usb 3-1: Using ep0 maxpacket: 16
[  247.060851][  T788] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  247.086777][T10089] loop1: detected capacity change from 0 to 2048
[  247.088585][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.113166][T10089] NILFS (loop1): couldn't find nilfs on the device
[  247.114620][  T788] usb 3-1: config 0 has no interface number 0
[  247.158521][  T788] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  247.173504][  T788] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  247.227016][  T788] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  247.249893][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.293213][ T5780] udevd[5780]: incorrect nilfs2 checksum on /dev/loop1
[  247.304110][  T788] usb 3-1: Product: syz
[  247.309399][  T788] usb 3-1: Manufacturer: syz
[  247.323535][  T788] usb 3-1: SerialNumber: syz
[  247.345602][  T788] usb 3-1: config 0 descriptor??
[  247.376374][T10074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  247.391263][T10074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  247.396071][T10076] loop0: detected capacity change from 0 to 32768
[  247.552685][T10095] netlink: 'syz.4.1478': attribute type 5 has an invalid length.
[  247.558208][T10076] syz.0.1469: attempt to access beyond end of device
[  247.558208][T10076] loop0: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[  247.664709][T10074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  247.673414][T10074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  247.730537][  T113] blkno = 8ed2c, nblocks = 1
[  247.740892][  T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  247.740892][  T113] 
[  247.784983][  T113] ERROR: (device loop0): remounting filesystem as read-only
[  247.810978][T10101] loop1: detected capacity change from 0 to 512
[  247.840331][T10101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.887168][   T28] audit: type=1326 audit(1750248658.417:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06278e929 code=0x7ffc0000
[  247.916137][   T28] audit: type=1326 audit(1750248658.447:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fd06278e929 code=0x7ffc0000
[  247.946778][   T28] audit: type=1326 audit(1750248658.447:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06278e929 code=0x7ffc0000
[  247.976212][   T28] audit: type=1326 audit(1750248658.447:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10104 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06278e929 code=0x7ffc0000
[  247.997841][T10101] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.133253][  T788] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  248.153081][  T788] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  248.168563][  T788] asix: probe of 3-1:0.251 failed with error -71
[  248.185244][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.196175][  T788] usb 3-1: USB disconnect, device number 10
[  248.922231][T10127] loop0: detected capacity change from 0 to 1024
[  249.008017][T10127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.069967][T10139] loop2: detected capacity change from 0 to 128
[  249.172531][T10139] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  249.241429][T10139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  249.272851][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.537004][T10151] loop4: detected capacity change from 0 to 256
[  249.604272][   T28] audit: type=1800 audit(1750248660.127:106): pid=10151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1504" name="file2" dev="loop4" ino=1048651 res=0 errno=0
[  249.656523][T10151] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  249.656646][T10151] FAT-fs (loop4): Filesystem has been set read-only
[  249.680850][T10151] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198)
[  250.234357][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  250.508758][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'.
[  250.831103][T10196] loop1: detected capacity change from 0 to 64
[  251.404400][ T5812] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  251.612018][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.634681][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.681187][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  251.699965][ T5812] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  251.718065][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.736688][ T5812] usb 3-1: config 0 descriptor??
[  251.879698][T10226] loop4: detected capacity change from 0 to 1024
[  251.904081][T10226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.959217][T10226] autofs4:pid:10226:autofs_fill_super: called with bogus options
[  252.009034][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.171054][ T5812] plantronics 0003:047F:FFFF.0013: unbalanced collection at end of report description
[  252.189781][ T5812] plantronics 0003:047F:FFFF.0013: parse failed
[  252.198602][ T5812] plantronics: probe of 0003:047F:FFFF.0013 failed with error -22
[  252.370431][  T788] usb 3-1: USB disconnect, device number 11
[  252.826218][T10250] loop0: detected capacity change from 0 to 64
[  252.944251][ T5812] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  253.154239][ T5812] usb 5-1: Using ep0 maxpacket: 16
[  253.178168][ T5812] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  253.220298][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.249294][ T5812] usb 5-1: Product: syz
[  253.266930][ T5812] usb 5-1: Manufacturer: syz
[  253.273500][ T5812] usb 5-1: SerialNumber: syz
[  253.688521][T10254] loop2: detected capacity change from 0 to 32768
[  253.717682][T10254] (syz.2.1551,10254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  253.765313][T10254] (syz.2.1551,10254,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  253.891442][T10254] JBD2: Ignoring recovery information on journal
[  253.936863][ T5812] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  254.024428][ T5812] snd-usb-audio: probe of 5-1:222.0 failed with error -71
[  254.046923][T10254] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  254.050107][ T5812] usb 5-1: USB disconnect, device number 12
[  254.175446][ T7622] udevd[7622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  254.299269][T10277] loop1: detected capacity change from 0 to 512
[  254.332940][T10277] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.1561: corrupted in-inode xattr: invalid ea_ino
[  254.422782][T10277] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1561: couldn't read orphan inode 15 (err -117)
[  254.506788][T10277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.713435][ T5774] ocfs2: Unmounting device (7,2) on (node local)
[  254.749811][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.846895][T10271] loop0: detected capacity change from 0 to 40427
[  254.906766][T10271] F2FS-fs (loop0): Invalid segment/section count (24 != 1 * 1)
[  254.928259][T10271] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  254.980399][T10271] F2FS-fs (loop0): invalid crc value
[  255.056689][T10271] F2FS-fs (loop0): Found nat_bits in checkpoint
[  255.237481][T10271] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  255.264310][T10271] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  255.601824][T10304] loop4: detected capacity change from 0 to 512
[  255.639986][T10304] EXT4-fs (loop4): orphan cleanup on readonly fs
[  255.706778][T10304] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1571: bg 0: block 248: padding at end of block bitmap is not set
[  255.750012][T10304] Quota error (device loop4): write_blk: dquota write failed
[  255.750102][T10304] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  255.750137][T10304] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1571: Failed to acquire dquot type 1
[  255.794229][T10304] EXT4-fs (loop4): 1 truncate cleaned up
[  255.796753][T10304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  255.889897][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.917989][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  255.918041][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  256.430678][T10321] netlink: 'syz.1.1577': attribute type 26 has an invalid length.
[  256.639275][T10329] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1581'.
[  256.664558][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1581'.
[  257.010615][T10341] loop2: detected capacity change from 0 to 4096
[  257.831931][T10343] loop0: detected capacity change from 0 to 32768
[  257.844369][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  257.919529][T10340] loop4: detected capacity change from 0 to 40427
[  257.933051][T10343] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  257.939751][T10358] loop1: detected capacity change from 0 to 512
[  257.975646][T10340] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  258.003141][T10340] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  258.036405][T10340] F2FS-fs (loop4): invalid crc value
[  258.052718][T10358] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  258.147623][T10358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002]
[  258.194552][T10358] System zones: 1-12
[  258.199929][T10358] EXT4-fs (loop1): orphan cleanup on readonly fs
[  258.248562][ T5767] (syz-executor,5767,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  258.287597][T10358] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1593: invalid indirect mapped block 12 (level 1)
[  258.338637][T10358] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1593: invalid indirect mapped block 2 (level 2)
[  258.364601][ T5767] ocfs2: Unmounting device (7,0) on (node local)
[  258.380854][T10340] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  258.406266][T10358] EXT4-fs (loop1): 1 truncate cleaned up
[  258.413231][T10358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  258.430976][T10340] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  258.489552][T10340] syz.4.1586: attempt to access beyond end of device
[  258.489552][T10340] loop4: rw=2049, sector=53248, nr_sectors = 16 limit=40427
[  258.612265][ T5946] syz-executor: attempt to access beyond end of device
[  258.612265][ T5946] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  258.642745][ T5946] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  258.657361][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  258.860636][T10355] loop2: detected capacity change from 0 to 32768
[  258.916470][T10355] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1592 (10355)
[  258.977328][T10355] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  259.014458][T10355] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  259.054267][T10355] BTRFS info (device loop2): using free space tree
[  259.179597][T10369] loop4: detected capacity change from 0 to 1024
[  259.229697][T10369] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  259.305092][T10355] BTRFS info (device loop2): enabling ssd optimizations
[  259.321850][T10369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.354413][T10355] BTRFS info (device loop2): auto enabling async discard
[  259.585949][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.685405][ T5774] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  259.984921][ T5780] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (5780)
[  260.628725][T10422] loop4: detected capacity change from 0 to 256
[  260.835917][T10422] FAT-fs (loop4): Directory bread(block 64) failed
[  260.872858][T10422] FAT-fs (loop4): Directory bread(block 65) failed
[  260.928781][T10422] FAT-fs (loop4): Directory bread(block 66) failed
[  260.954348][T10422] FAT-fs (loop4): Directory bread(block 67) failed
[  260.964104][T10422] FAT-fs (loop4): Directory bread(block 68) failed
[  261.027777][T10422] FAT-fs (loop4): Directory bread(block 69) failed
[  261.064399][T10422] FAT-fs (loop4): Directory bread(block 70) failed
[  261.081962][T10422] FAT-fs (loop4): Directory bread(block 71) failed
[  261.114836][T10422] FAT-fs (loop4): Directory bread(block 72) failed
[  261.123136][T10422] FAT-fs (loop4): Directory bread(block 73) failed
[  261.297016][T10408] loop1: detected capacity change from 0 to 40427
[  261.351774][T10408] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  261.392784][T10408] F2FS-fs (loop1): Image doesn't support compression
[  261.424597][T10408] F2FS-fs (loop1): heap/no_heap options were deprecated
[  261.433299][T10408] F2FS-fs (loop1): Image doesn't support compression
[  261.445835][T10410] loop2: detected capacity change from 0 to 40427
[  261.517894][T10408] F2FS-fs (loop1): invalid crc value
[  261.523953][T10410] F2FS-fs (loop2): invalid crc value
[  261.578577][T10408] F2FS-fs (loop1): Found nat_bits in checkpoint
[  261.616790][T10410] F2FS-fs (loop2): Found nat_bits in checkpoint
[  261.647531][T10435] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 10802, id = 0
[  261.852910][T10408] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  261.945075][T10410] F2FS-fs (loop2): Start checkpoint disabled!
[  261.981654][T10440] loop0: detected capacity change from 0 to 2048
[  261.982594][T10410] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  262.047041][T10440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  262.072837][ T5764] syz-executor: attempt to access beyond end of device
[  262.072837][ T5764] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  262.138718][ T5764] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  262.146185][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1617'.
[  262.233659][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1617'.
[  262.382755][ T3446] kworker/u4:11: attempt to access beyond end of device
[  262.382755][ T3446] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  262.414982][ T3446] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  262.437732][ T3446] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  262.704422][T10449] loop0: detected capacity change from 0 to 128
[  262.790590][T10449] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  262.861086][T10449] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.196424][ T5767] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  263.479239][   T28] audit: type=1326 audit(1750248674.007:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.1.1629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4fa18e929 code=0x0
[  263.545448][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'.
[  264.277841][T10493] loop4: detected capacity change from 0 to 128
[  264.345680][T10493] EXT4-fs: Ignoring removed nobh option
[  264.399945][T10493] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  264.464942][T10493] ext4 filesystem being mounted at /391/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  264.679707][ T5946] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  265.297401][T10521] loop4: detected capacity change from 0 to 512
[  265.334387][T10522] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 10802, id = 0
[  265.352552][T10521] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  265.421254][T10521] EXT4-fs (loop4): invalid journal inode
[  265.464447][T10521] EXT4-fs (loop4): can't get journal size
[  265.558942][T10521] EXT4-fs (loop4): 1 truncate cleaned up
[  265.591204][T10521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.684086][ T5946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.766550][T10531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1657'.
[  265.832435][   T28] audit: type=1326 audit(1750248676.357:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fa18e929 code=0x7ffc0000
[  265.872923][T10529] loop2: detected capacity change from 0 to 4096
[  265.911630][   T28] audit: type=1326 audit(1750248676.397:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fe4fa18e929 code=0x7ffc0000
[  266.020142][   T28] audit: type=1326 audit(1750248676.397:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fa18e929 code=0x7ffc0000
[  266.079331][T10529] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  266.100965][   T28] audit: type=1326 audit(1750248676.397:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10532 comm="syz.1.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4fa18e929 code=0x7ffc0000
[  266.175122][T10543] ntfs3: loop2: ino=0, "file0" The size of extended attributes must not exceed 64KiB
[  266.665790][   T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  266.705194][T10559] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1671'.
[  266.716990][T10554] loop0: detected capacity change from 0 to 8192
[  266.874251][   T23] usb 5-1: Using ep0 maxpacket: 8
[  266.898469][   T23] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  266.928856][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.949295][   T23] usb 5-1: Product: syz
[  266.958596][   T23] usb 5-1: Manufacturer: syz
[  266.982341][   T23] usb 5-1: SerialNumber: syz
[  266.997523][T10563] loop1: detected capacity change from 0 to 128
[  267.030497][   T23] usb 5-1: config 0 descriptor??
[  267.069754][   T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  267.092280][T10563] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  267.112854][   T23] usb 5-1: setting power ON
[  267.124284][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  267.125040][T10563] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.140833][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  267.160478][   T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  267.174821][   T23] usb 5-1: media controller created
[  267.187145][T10568] loop2: detected capacity change from 0 to 512
[  267.202016][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  267.224977][   T23] usb 5-1: selecting invalid altsetting 6
[  267.231851][   T23] usb 5-1: digital interface selection failed (-22)
[  267.249928][   T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  267.274640][T10568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  267.282129][   T23] usb 5-1: setting power OFF
[  267.293621][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  267.322179][T10549] dvb-usb: bulk message failed: -22 (3/0)
[  267.343884][   T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  267.377139][   T23] (NULL device *): no alternate interface
[  267.392420][T10568] EXT4-fs (loop2): 1 truncate cleaned up
[  267.440893][   T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  267.463822][   T23] usb 5-1: USB disconnect, device number 13
[  267.470707][T10568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.537955][ T5764] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  267.676772][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.197643][T10593] loop2: detected capacity change from 0 to 256
[  268.252422][T10593] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  268.479065][  T788] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  268.664341][  T788] usb 5-1: Using ep0 maxpacket: 16
[  268.683146][  T788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.703209][T10589] loop1: detected capacity change from 0 to 32768
[  268.711905][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  268.733992][  T788] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  268.762443][  T788] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  268.778780][  T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.793327][  T788] usb 5-1: Product: syz
[  268.810852][T10589] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  268.871278][  T788] usb 5-1: Manufacturer: syz
[  268.895617][  T788] usb 5-1: SerialNumber: syz
[  268.917072][ T5764] ocfs2: Unmounting device (7,1) on (node local)
[  268.936349][T10599] loop0: detected capacity change from 0 to 40427
[  268.961664][  T788] usb 5-1: config 0 descriptor??
[  268.974299][T10599] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  269.003960][  T788] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  269.018445][T10599] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  269.024378][  T788] gspca_stv06xx: st6422 sensor detected
[  269.079054][T10599] F2FS-fs (loop0): Found nat_bits in checkpoint
[  269.160475][T10599] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  269.174362][T10599] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  269.279593][ T3446] kworker/u4:11: attempt to access beyond end of device
[  269.279593][ T3446] loop0: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  269.294909][  T788] STV06xx: probe of 5-1:0.0 failed with error -71
[  269.317041][  T788] usb 5-1: USB disconnect, device number 14
[  269.898765][T10618] loop0: detected capacity change from 0 to 256
[  269.922050][T10618] exfat: Deprecated parameter 'utf8'
[  269.946324][T10618] exfat: Deprecated parameter 'utf8'
[  269.969307][T10618] exfat: Deprecated parameter 'namecase'
[  270.050655][T10618] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  270.077438][T10624] loop1: detected capacity change from 0 to 64
[  270.206867][T10628] loop4: detected capacity change from 0 to 764
[  270.238515][T10628] rock: directory entry would overflow storage
[  270.252674][T10628] rock: sig=0x4654, size=5, remaining=4
[  270.336642][T10628] rock: directory entry would overflow storage
[  270.342873][T10628] rock: sig=0x4f50, size=4, remaining=3
[  270.350277][T10628] iso9660: Corrupted directory entry in block 4 of inode 1792
[  270.535618][T10634] loop2: detected capacity change from 0 to 1024
[  270.612519][   T28] audit: type=1800 audit(1750248681.137:112): pid=10634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1703" name="file1" dev="loop2" ino=20 res=0 errno=0
[  270.811333][T10644] loop1: detected capacity change from 0 to 2048
[  270.870094][T10646] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  271.094767][T10644] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  271.116073][T10644] Remounting filesystem read-only
[  271.158826][ T5764] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  271.182196][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=18
[  271.211793][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  271.229603][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.247822][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.259226][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.270119][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=2
[  271.277618][ T5764] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  271.290107][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.319708][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.339177][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.350285][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=6
[  271.370773][ T5764] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  271.379831][ T5764] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  271.392218][ T5764] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  271.400138][ T5764] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  271.408068][ T5764] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  271.420810][ T5764] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  271.430963][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.464706][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.478846][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.491631][ T5764] NILFS (loop1): discard dirty page: offset=0, ino=3
[  271.499056][ T5764] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  271.507010][ T5764] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  271.514707][ T5764] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  271.522127][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.567929][ T5764] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  271.588306][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.626063][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.651946][ T5764] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  271.659930][ T5764] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  271.683139][T10672] loop4: detected capacity change from 0 to 256
[  271.701406][T10672] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  271.811859][T10672] FAT-fs (loop4): Directory bread(block 64) failed
[  271.842318][T10672] FAT-fs (loop4): Directory bread(block 65) failed
[  271.864355][T10672] FAT-fs (loop4): Directory bread(block 66) failed
[  271.871140][T10672] FAT-fs (loop4): Directory bread(block 67) failed
[  271.899293][T10672] FAT-fs (loop4): Directory bread(block 68) failed
[  271.930250][T10672] FAT-fs (loop4): Directory bread(block 69) failed
[  271.948124][T10672] FAT-fs (loop4): Directory bread(block 70) failed
[  271.969211][T10672] FAT-fs (loop4): Directory bread(block 71) failed
[  271.984493][T10672] FAT-fs (loop4): Directory bread(block 72) failed
[  272.008938][T10672] FAT-fs (loop4): Directory bread(block 73) failed
[  272.237464][T10683] loop2: detected capacity change from 0 to 128
[  272.274597][T10683] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  272.554401][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  272.589694][T10690] netlink: 'syz.1.1725': attribute type 27 has an invalid length.
[  272.609837][T10691] loop4: detected capacity change from 0 to 256
[  272.799332][ T5946] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  272.813709][T10697] binder: 10695:10697 ioctl c0306201 0 returned -14
[  272.834791][T10697] binder: 10695:10697 ioctl c020f509 0 returned -22
[  272.844580][ T5946] FAT-fs (loop4): Filesystem has been set read-only
[  272.853972][ T5946] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  273.312523][T10709] loop1: detected capacity change from 0 to 1024
[  273.357026][ T7840] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.389835][T10709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.482163][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.617636][ T7840] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.655195][T10693] loop0: detected capacity change from 0 to 32768
[  273.693692][T10693] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  273.722989][ T7840] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.892562][T10693] XFS (loop0): Ending clean mount
[  273.906512][ T7840] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.146301][ T5767] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  274.425892][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  274.452423][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  274.475674][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  274.501036][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  274.515428][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  274.528019][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  274.726813][ T7840] tipc: Left network mode
[  275.479161][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'.
[  275.494319][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'.
[  275.509254][T10762] netlink: 'syz.0.1749': attribute type 11 has an invalid length.
[  275.681829][T10766] loop0: detected capacity change from 0 to 64
[  275.703917][T10756] loop2: detected capacity change from 0 to 32768
[  275.715268][T10756] XFS: noikeep mount option is deprecated.
[  275.815915][T10756] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  275.853633][T10737] loop1: detected capacity change from 0 to 40427
[  275.880086][T10737] F2FS-fs (loop1): invalid crc value
[  275.923171][T10737] F2FS-fs (loop1): Found nat_bits in checkpoint
[  276.042065][T10756] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  276.112251][T10756] XFS (loop2): Starting recovery (logdev: internal)
[  276.140088][T10737] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  276.258674][T10756] XFS (loop2): Ending recovery (logdev: internal)
[  276.300926][T10731] chnl_net:caif_netlink_parms(): no params data found
[  276.610739][ T5774] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  276.728458][   T50] Bluetooth: hci1: command tx timeout
[  276.751323][T10779] loop0: detected capacity change from 0 to 32768
[  276.835710][T10779] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.234831][T10806] loop1: detected capacity change from 0 to 512
[  277.256748][T10779] XFS (loop0): Ending clean mount
[  277.391308][T10806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.451795][T10806] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.489942][T10731] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.504312][T10731] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.512668][T10731] bridge_slave_0: entered allmulticast mode
[  277.526789][ T5767] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.543123][T10731] bridge_slave_0: entered promiscuous mode
[  277.560280][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'.
[  277.622942][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.147952][T10731] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.155662][T10731] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.162929][T10731] bridge_slave_1: entered allmulticast mode
[  278.170458][T10731] bridge_slave_1: entered promiscuous mode
[  278.336767][ T7840] hsr_slave_0: left promiscuous mode
[  278.349070][ T7840] hsr_slave_1: left promiscuous mode
[  278.357507][T10824] loop2: detected capacity change from 0 to 164
[  278.369793][ T7840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.378612][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.386936][T10824] ISOFS: unable to read i-node block
[  278.392293][T10824] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  278.411827][ T7840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.431749][ T7840] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.448121][ T7840] bridge_slave_1: left allmulticast mode
[  278.453907][ T7840] bridge_slave_1: left promiscuous mode
[  278.460488][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.499440][ T7840] bridge_slave_0: left allmulticast mode
[  278.510284][ T7840] bridge_slave_0: left promiscuous mode
[  278.534421][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.610227][ T7840] veth1_vlan: left promiscuous mode
[  278.622689][ T7840] veth0_vlan: left promiscuous mode
[  278.670339][T10828] loop2: detected capacity change from 0 to 4096
[  278.689106][T10828] NILFS (loop2): invalid segment: Checksum error in segment payload
[  278.702489][T10828] NILFS (loop2): trying rollback from an earlier position
[  278.733272][T10828] NILFS (loop2): recovery complete
[  278.748013][T10829] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.799436][   T50] Bluetooth: hci1: command tx timeout
[  278.880654][ T7840] pimreg (unregistering): left allmulticast mode
[  279.488284][T10833] loop1: detected capacity change from 0 to 32768
[  279.524402][T10833] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1762 (10833)
[  279.586038][T10833] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  279.614419][T10833] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  279.624100][T10833] BTRFS info (device loop1): using free space tree
[  279.758025][T10835] loop2: detected capacity change from 0 to 32768
[  279.884605][T10833] BTRFS info (device loop1): enabling ssd optimizations
[  279.892261][T10835] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  279.918706][T10833] BTRFS info (device loop1): auto enabling async discard
[  280.015991][ T7840] team0 (unregistering): Port device team_slave_1 removed
[  280.174659][T10835] XFS (loop2): Ending clean mount
[  280.189719][ T7840] team0 (unregistering): Port device team_slave_0 removed
[  280.202328][ T5764] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  280.345889][ T7840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  280.373562][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  280.571235][ T7840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.796674][  T788] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  280.885240][   T50] Bluetooth: hci1: command tx timeout
[  281.032231][  T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.073698][  T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.096853][  T788] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  281.124377][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.138381][T10866] loop2: detected capacity change from 0 to 1024
[  281.168345][  T788] usb 2-1: config 0 descriptor??
[  281.274912][ T7836] hfsplus: b-tree write err: -5, ino 4
[  281.420815][T10872] binder: 10870:10872 ioctl c018620c 0 returned -14
[  281.428735][T10871] loop2: detected capacity change from 0 to 1024
[  281.630498][  T788] uclogic 0003:5543:0522.0014: unknown main item tag 0x0
[  281.637806][  T788] uclogic 0003:5543:0522.0014: unknown main item tag 0x0
[  281.671332][  T788] uclogic 0003:5543:0522.0014: unknown main item tag 0x0
[  281.684432][  T788] uclogic 0003:5543:0522.0014: unknown main item tag 0x0
[  281.691775][  T788] uclogic 0003:5543:0522.0014: unknown main item tag 0x0
[  281.713166][  T788] uclogic 0003:5543:0522.0014: unknown main item tag 0x0
[  281.720500][  T788] uclogic 0003:5543:0522.0014: unknown main item tag 0x0
[  281.731536][  T788] uclogic 0003:5543:0522.0014: unknown main item tag 0x0
[  281.738968][  T788] uclogic 0003:5543:0522.0014: unknown main item tag 0x0
[  281.746304][  T788] uclogic 0003:5543:0522.0014: unknown main item tag 0x0
[  281.755477][  T788] uclogic 0003:5543:0522.0014: unknown main item tag 0x0
[  281.763957][  T788] uclogic 0003:5543:0522.0014: No inputs registered, leaving
[  281.821945][  T788] uclogic 0003:5543:0522.0014: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input0
[  281.859487][  T788] usb 2-1: USB disconnect, device number 16
[  281.993875][T10877] fido_id[10877]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  282.254585][ T7840] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  282.264016][ T7840] bond0 (unregistering): Released all slaves
[  282.474565][T10731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.512910][T10731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.552567][T10885] netlink: 'syz.0.1775': attribute type 280 has an invalid length.
[  282.720221][T10731] team0: Port device team_slave_0 added
[  282.743884][T10731] team0: Port device team_slave_1 added
[  282.835284][T10881] loop2: detected capacity change from 0 to 32768
[  282.898998][T10731] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.916156][T10731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.945086][T10881] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  282.958929][   T50] Bluetooth: hci1: command tx timeout
[  283.074306][T10731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.088236][T10731] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.096560][T10731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.141732][T10731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.263516][T10910] loop0: detected capacity change from 0 to 1024
[  283.379248][T10910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.440907][T10731] hsr_slave_0: entered promiscuous mode
[  283.466643][T10731] hsr_slave_1: entered promiscuous mode
[  283.473234][T10731] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  283.488549][T10731] Cannot create hsr debugfs directory
[  283.562305][T10881] XFS (loop2): Ending clean mount
[  283.610905][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.848555][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.014275][  T788] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  284.144047][T10731] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  284.170938][T10731] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  284.201038][T10731] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  284.222767][T10731] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  284.226040][  T788] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  284.248609][  T788] usb 2-1: config 0 has no interface number 0
[  284.257267][  T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.289209][  T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.307509][  T788] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  284.320687][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.358674][  T788] usb 2-1: config 0 descriptor??
[  284.373610][T10936] loop2: detected capacity change from 0 to 1024
[  284.446470][T10731] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.446949][T10936] EXT4-fs: Ignoring removed orlov option
[  284.471416][T10936] EXT4-fs: Ignoring removed nomblk_io_submit option
[  284.501280][T10936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.501570][T10731] 8021q: adding VLAN 0 to HW filter on device team0
[  284.535374][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.545289][ T7836] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.562846][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.572770][ T7836] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.733605][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.863330][  T788] prodikeys 0003:041E:2801.0015: item fetching failed at offset 0/7
[  284.907495][  T788] prodikeys 0003:041E:2801.0015: hid parse failed
[  284.915474][  T788] prodikeys: probe of 0003:041E:2801.0015 failed with error -22
[  284.932177][T10950] loop2: detected capacity change from 0 to 256
[  284.976500][T10950] exfat: Deprecated parameter 'utf8'
[  284.981854][T10950] exfat: Deprecated parameter 'utf8'
[  284.992217][T10950] exfat: Deprecated parameter 'utf8'
[  284.998767][T10731] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.033424][T10950] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[  285.124675][  T788] usb 2-1: USB disconnect, device number 17
[  285.300442][T10960] loop2: detected capacity change from 0 to 512
[  285.323418][T10960] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  285.380083][T10960] EXT4-fs (loop2): orphan cleanup on readonly fs
[  285.387563][T10960] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.1789: Block bitmap for bg 0 marked uninitialized
[  285.408267][T10960] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem
[  285.449382][T10960] EXT4-fs (loop2): 1 orphan inode deleted
[  285.466530][T10960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  285.615116][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.701225][T10731] veth0_vlan: entered promiscuous mode
[  285.742960][T10731] veth1_vlan: entered promiscuous mode
[  285.840018][T10731] veth0_macvtap: entered promiscuous mode
[  285.866099][T10731] veth1_macvtap: entered promiscuous mode
[  285.930981][T10731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.952481][T10731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.973100][T10731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.993857][T10731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.033196][T10731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.054526][T10731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.073829][T10731] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.103202][T10731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.116992][T10731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.134891][T10731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.155726][T10731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.188531][T10731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.222080][T10731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.245012][T10731] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.295377][T10731] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.334594][T10731] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.346878][T10731] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.357153][T10731] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.582922][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.625646][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.725799][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.733861][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.403889][T10995] loop2: detected capacity change from 0 to 32768
[  287.460372][T10995] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  287.527655][T11030] loop1: detected capacity change from 0 to 512
[  287.661286][T10995] XFS (loop2): Ending clean mount
[  287.678977][T11030] EXT4-fs (loop1): 1 orphan inode deleted
[  287.691068][T10995] XFS (loop2): Quotacheck needed: Please wait.
[  287.698770][ T2956] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  287.725792][T11030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.740528][ T2956] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:9: Failed to release dquot type 1
[  287.756226][T11030] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.796040][T11044] syz.0.1808[11044] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  287.796165][T11044] syz.0.1808[11044] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  287.874312][T10995] XFS (loop2): Quotacheck: Done.
[  287.931405][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.179310][ T5774] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  288.341526][   T28] audit: type=1326 audit(1750248698.867:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263818e929 code=0x7ffc0000
[  288.432607][   T28] audit: type=1326 audit(1750248698.867:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263818e929 code=0x7ffc0000
[  288.531676][   T28] audit: type=1326 audit(1750248698.917:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f263818e929 code=0x7ffc0000
[  288.604279][   T28] audit: type=1326 audit(1750248698.967:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263818e929 code=0x7ffc0000
[  288.627763][T11065] loop0: detected capacity change from 0 to 2048
[  288.663185][   T28] audit: type=1326 audit(1750248698.967:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.5.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263818e929 code=0x7ffc0000
[  288.797210][T11065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.817889][T11073] loop1: detected capacity change from 0 to 1024
[  288.826906][T11073] EXT4-fs: Ignoring removed bh option
[  288.895053][T11073] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  289.050199][T11073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.243812][T11073] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.1819: Allocating blocks 497-513 which overlap fs metadata
[  289.282795][T11073] EXT4-fs (loop1): pa ffff88806c448570: logic 624, phys. 113, len 25
[  289.292538][T11073] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5377: group 0, free 24, pa_free 25
[  289.407845][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.422244][   T28] audit: type=1326 audit(1750248699.947:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263818e929 code=0x7ffc0000
[  289.423471][ T3446] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  289.470146][T11091] loop5: detected capacity change from 0 to 164
[  289.472369][   T28] audit: type=1326 audit(1750248699.947:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f263818e929 code=0x7ffc0000
[  289.507257][   T28] audit: type=1326 audit(1750248699.997:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f263818e929 code=0x7ffc0000
[  289.514204][T11091] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  289.563187][   T28] audit: type=1326 audit(1750248699.997:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11090 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f263818e963 code=0x7ffc0000
[  289.570947][ T3446] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  289.684835][ T3446] EXT4-fs (loop0): This should not happen!! Data will be lost
[  289.684835][ T3446] 
[  289.719841][ T3446] EXT4-fs (loop0): Total free blocks count 0
[  289.734337][ T3446] EXT4-fs (loop0): Free/Dirty block details
[  289.754549][ T3446] EXT4-fs (loop0): free_blocks=4096
[  289.767039][T11091] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  289.781284][ T3446] EXT4-fs (loop0): dirty_blocks=656
[  289.805470][ T3446] EXT4-fs (loop0): Block reservation details
[  289.810895][T11091] Symlink component flag not implemented
[  289.821884][ T3446] EXT4-fs (loop0): i_reserved_data_blocks=41
[  289.823439][T11091] Symlink component flag not implemented
[  289.840941][T11091] Symlink component flag not implemented (7)
[  289.847324][ T3446] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 624 with error 28
[  289.847368][T11091] Symlink component flag not implemented (116)
[  290.280617][T11109] loop2: detected capacity change from 0 to 1024
[  290.303686][T11106] loop0: detected capacity change from 0 to 4096
[  290.351329][T11109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.353423][T11104] loop5: detected capacity change from 0 to 4096
[  290.386210][T11106] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  290.405905][T11104] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512).
[  290.533399][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.278407][T11141] loop2: detected capacity change from 0 to 64
[  291.294983][T11138] loop0: detected capacity change from 0 to 512
[  291.406533][T11145] loop5: detected capacity change from 0 to 2048
[  291.456914][T11138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.520167][T11138] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.537391][T11145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.659519][ T5774] hfs: node 4:3 still has 1 user(s)!
[  291.688268][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.727386][T10731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.938145][T11160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  292.053892][T11167] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1847'.
[  292.220925][T11169] loop5: detected capacity change from 0 to 1024
[  292.617277][T11187] loop5: detected capacity change from 0 to 1024
[  292.694887][T11187] syz.5.1852: attempt to access beyond end of device
[  292.694887][T11187] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  292.765856][T11187] Buffer I/O error on dev loop5, logical block 2889, async page read
[  292.806692][T11191] syz.5.1852: attempt to access beyond end of device
[  292.806692][T11191] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  292.917469][T11187] syz.5.1852: attempt to access beyond end of device
[  292.917469][T11187] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  292.941070][T11187] Buffer I/O error on dev loop5, logical block 2889, async page read
[  292.962683][   T28] kauditd_printk_skb: 17 callbacks suppressed
[  292.962696][   T28] audit: type=1800 audit(1750248703.487:139): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1852" name="file1" dev="loop5" ino=20 res=0 errno=0
[  292.988788][    C0] vkms_vblank_simulate: vblank timer overrun
[  293.009142][T11193] loop2: detected capacity change from 0 to 2048
[  293.102344][T11193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.383094][T11211] loop1: detected capacity change from 0 to 4096
[  293.433365][T11211] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  293.546065][   T48] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  293.594360][   T48] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  293.628650][   T48] EXT4-fs (loop2): This should not happen!! Data will be lost
[  293.628650][   T48] 
[  293.650630][   T48] EXT4-fs (loop2): Total free blocks count 0
[  293.672056][   T48] EXT4-fs (loop2): Free/Dirty block details
[  293.695295][   T48] EXT4-fs (loop2): free_blocks=4096
[  293.716302][   T48] EXT4-fs (loop2): dirty_blocks=512
[  293.721960][   T48] EXT4-fs (loop2): Block reservation details
[  293.759264][   T48] EXT4-fs (loop2): i_reserved_data_blocks=32
[  293.776315][   T48] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[  294.088804][T11214] loop5: detected capacity change from 0 to 32768
[  294.212458][T11233] loop1: detected capacity change from 0 to 1024
[  294.214820][T11214] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  294.220259][T11233] EXT4-fs: Ignoring removed i_version option
[  294.294603][T11233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.338406][T10731] ocfs2: Unmounting device (7,5) on (node local)
[  294.453670][T11233] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  294.474300][    C0] vkms_vblank_simulate: vblank timer overrun
[  294.668989][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.745531][T11250] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1872'.
[  294.890431][T11252] loop1: detected capacity change from 0 to 2048
[  294.919361][T11252] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  295.741006][T11259] loop5: detected capacity change from 0 to 32768
[  295.797287][T11259] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  295.892850][T11259] XFS (loop5): Ending clean mount
[  295.925621][T11259] XFS (loop5): Quotacheck needed: Please wait.
[  296.095712][T11259] XFS (loop5): Quotacheck: Done.
[  296.198838][T11287] loop0: detected capacity change from 0 to 1024
[  296.324475][T10731] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  296.367898][   T48] hfsplus: b-tree write err: -5, ino 4
[  296.945367][T11305] loop0: detected capacity change from 0 to 2048
[  297.027551][T11305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.136169][T11292] loop2: detected capacity change from 0 to 32768
[  297.149317][T11292] XFS: ikeep mount option is deprecated.
[  297.161036][T11305] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  297.199184][T11292] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  297.349929][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.485001][T11292] XFS (loop2): Ending clean mount
[  297.514072][T11292] XFS (loop2): Quotacheck needed: Please wait.
[  297.635105][   T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  297.740576][T11292] XFS (loop2): Quotacheck: Done.
[  297.842453][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  297.881706][   T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  297.926954][   T23] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.929541][T11343] random: crng reseeded on system resumption
[  297.948374][   T23] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.984250][   T23] usb 6-1: config 0 interface 0 has no altsetting 0
[  297.991017][   T23] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  298.004042][T11345] loop1: detected capacity change from 0 to 1024
[  298.024937][T11345] EXT4-fs: Ignoring removed oldalloc option
[  298.030992][T11345] EXT4-fs: Ignoring removed bh option
[  298.047209][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.061307][   T23] usb 6-1: config 0 descriptor??
[  298.087370][T11345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  298.238619][T11345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.363743][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.512165][   T23] kye 0003:0458:5015.0016: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  298.520289][T11355] loop2: detected capacity change from 0 to 164
[  298.542392][T11355] Unable to read rock-ridge attributes
[  298.563751][   T23] kye 0003:0458:5015.0016: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0
[  298.571167][T11355] Unable to read rock-ridge attributes
[  298.592939][   T23] kye 0003:0458:5015.0016: tablet-enabling feature report not found
[  298.611462][   T23] kye 0003:0458:5015.0016: tablet enabling failed
[  298.803781][   T23] usb 6-1: USB disconnect, device number 2
[  299.129314][T11376] loop2: detected capacity change from 0 to 512
[  299.155130][T11376] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  299.177607][T11376] EXT4-fs (loop2): invalid journal inode
[  299.185082][T11376] EXT4-fs (loop2): can't get journal size
[  299.205527][T11376] EXT4-fs (loop2): 1 truncate cleaned up
[  299.212443][T11376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.295855][  T788] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  299.467665][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.490007][  T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  299.515062][  T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.534311][  T788] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  299.548153][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.583697][  T788] usb 2-1: config 0 descriptor??
[  299.790649][T11393] loop0: detected capacity change from 0 to 4096
[  299.865201][T11396] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.023072][  T788] usbhid 2-1:0.0: can't add hid device: -71
[  300.048709][T11386] loop5: detected capacity change from 0 to 32768
[  300.050855][  T788] usbhid: probe of 2-1:0.0 failed with error -71
[  300.081675][  T788] usb 2-1: USB disconnect, device number 18
[  300.272281][T11400] loop2: detected capacity change from 0 to 4096
[  300.345873][T11400] NILFS (loop2): invalid segment: Checksum error in segment payload
[  300.374427][T11400] NILFS (loop2): trying rollback from an earlier position
[  300.420058][T11400] NILFS (loop2): recovery complete
[  300.435328][T11401] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.910502][T11409] loop2: detected capacity change from 0 to 256
[  300.983180][T11409] FAT-fs (loop2): Directory bread(block 64) failed
[  300.988651][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1925'.
[  301.024250][T11409] FAT-fs (loop2): Directory bread(block 65) failed
[  301.052919][T11409] FAT-fs (loop2): Directory bread(block 66) failed
[  301.082207][T11409] FAT-fs (loop2): Directory bread(block 67) failed
[  301.114629][T11409] FAT-fs (loop2): Directory bread(block 68) failed
[  301.121329][T11409] FAT-fs (loop2): Directory bread(block 69) failed
[  301.165215][T11409] FAT-fs (loop2): Directory bread(block 70) failed
[  301.172972][T11409] FAT-fs (loop2): Directory bread(block 71) failed
[  301.218235][T11409] FAT-fs (loop2): Directory bread(block 72) failed
[  301.232754][T11409] FAT-fs (loop2): Directory bread(block 73) failed
[  301.426552][T11422] loop1: detected capacity change from 0 to 1024
[  301.545655][T11426] loop5: detected capacity change from 0 to 512
[  301.585945][T11426] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  301.614794][T11426] EXT4-fs (loop5): invalid journal inode
[  301.637578][T11426] EXT4-fs (loop5): can't get journal size
[  301.660099][T11426] EXT4-fs (loop5): 1 truncate cleaned up
[  301.673762][ T7836] hfsplus: b-tree write err: -5, ino 4
[  301.706904][T11426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.862530][T10731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.931504][   T28] audit: type=1326 audit(1750248712.447:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3098e929 code=0x7ffc0000
[  302.010457][T11435] loop2: detected capacity change from 0 to 1024
[  302.030393][   T28] audit: type=1326 audit(1750248712.447:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab3098e929 code=0x7ffc0000
[  302.068746][T11435] EXT4-fs: Ignoring removed nobh option
[  302.094255][T11435] EXT4-fs: Ignoring removed bh option
[  302.119669][T11435] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  302.145508][   T28] audit: type=1326 audit(1750248712.457:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fab3098e929 code=0x7ffc0000
[  302.250932][   T28] audit: type=1326 audit(1750248712.457:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab3098e963 code=0x7ffc0000
[  302.300606][T11435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.334578][   T28] audit: type=1326 audit(1750248712.487:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab3098d3df code=0x7ffc0000
[  302.357679][   T28] audit: type=1326 audit(1750248712.487:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fab3098e9b7 code=0x7ffc0000
[  302.381554][   T28] audit: type=1326 audit(1750248712.487:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab3098d290 code=0x7ffc0000
[  302.413193][   T28] audit: type=1326 audit(1750248712.487:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab3098e52b code=0x7ffc0000
[  302.446013][   T28] audit: type=1326 audit(1750248712.597:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fab3098d58a code=0x7ffc0000
[  302.517859][   T28] audit: type=1326 audit(1750248712.597:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fab3098d58a code=0x7ffc0000
[  302.554709][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.601084][T11454] loop5: detected capacity change from 0 to 256
[  302.601230][T11424] loop0: detected capacity change from 0 to 32768
[  302.644571][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  302.685690][T11454] FAT-fs (loop5): Directory bread(block 64) failed
[  302.692281][T11454] FAT-fs (loop5): Directory bread(block 65) failed
[  302.764543][T11454] FAT-fs (loop5): Directory bread(block 66) failed
[  302.773251][T11454] FAT-fs (loop5): Directory bread(block 67) failed
[  302.839054][T11454] FAT-fs (loop5): Directory bread(block 68) failed
[  302.898321][T11454] FAT-fs (loop5): Directory bread(block 69) failed
[  302.914411][T11454] FAT-fs (loop5): Directory bread(block 70) failed
[  302.944459][T11454] FAT-fs (loop5): Directory bread(block 71) failed
[  302.951152][T11454] FAT-fs (loop5): Directory bread(block 72) failed
[  302.958001][T11454] FAT-fs (loop5): Directory bread(block 73) failed
[  303.234246][    T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  303.426048][    T8] usb 3-1: Using ep0 maxpacket: 16
[  303.452374][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.469266][T11473] loop5: detected capacity change from 0 to 4096
[  303.488277][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.521735][T11473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.544250][    T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  303.568600][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.598092][T11478] loop0: detected capacity change from 0 to 1024
[  303.655285][    T8] usb 3-1: config 0 descriptor??
[  303.708832][T11478] hfsplus: bad catalog entry type
[  303.888208][   T59] hfsplus: b-tree write err: -5, ino 4
[  303.896446][T11485] loop1: detected capacity change from 0 to 512
[  303.935983][T11485] EXT4-fs: Ignoring removed mblk_io_submit option
[  303.944014][T10731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.966416][T11485] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  304.028599][T11485] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  304.052727][T11485] System zones: 1-12
[  304.085727][    T8] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0
[  304.119244][T11485] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.1953: corrupted in-inode xattr: e_value size too large
[  304.146099][    T8] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0
[  304.153127][    T8] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0
[  304.204656][T11485] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1953: couldn't read orphan inode 15 (err -117)
[  304.224224][    T8] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0
[  304.246020][    T8] savu 0003:1E7D:2D5A.0017: unknown main item tag 0x0
[  304.254883][T11485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.280830][    T8] savu 0003:1E7D:2D5A.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  304.336475][    T8] usb 3-1: USB disconnect, device number 12
[  304.549518][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.590789][T11504] fido_id[11504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  304.608629][T11507] loop5: detected capacity change from 0 to 512
[  304.710386][T11507] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  304.729623][T11512] loop1: detected capacity change from 0 to 64
[  304.778883][T11507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.801693][T11516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1961'.
[  304.817776][T11507] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  304.983076][T10731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.974977][T11566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1978'.
[  306.213322][T11577] loop5: detected capacity change from 0 to 64
[  306.632548][T11590] loop1: detected capacity change from 0 to 4096
[  306.688367][T11597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.274423][  T788] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  307.284343][    T8] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  307.492054][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.505321][    T8] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  307.534277][    T8] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  307.545549][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.556460][    T8] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  307.567899][  T788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  307.582489][    T8] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  307.593842][  T788] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  307.608910][    T8] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  307.624233][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.649029][  T788] usb 3-1: config 0 descriptor??
[  307.674500][    T8] usb 6-1: config 0 interface 0 has no altsetting 0
[  307.698645][    T8] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  307.708859][    T8] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  307.739781][    T8] usb 6-1: Product: syz
[  307.744033][    T8] usb 6-1: Manufacturer: syz
[  307.767355][    T8] usb 6-1: SerialNumber: syz
[  307.789559][    T8] usb 6-1: config 0 descriptor??
[  307.806072][T11605] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  307.826255][    T8] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  307.860908][    T8] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  307.986398][T11636] loop1: detected capacity change from 0 to 1024
[  308.128103][  T788] kye 0003:0458:5011.0018: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  308.152503][  T788] kye 0003:0458:5011.0018: unbalanced collection at end of report description
[  308.191811][  T788] kye 0003:0458:5011.0018: parse failed
[  308.209958][  T788] kye: probe of 0003:0458:5011.0018 failed with error -22
[  308.369452][ T5810] usb 3-1: USB disconnect, device number 13
[  308.508500][    T8] usb 6-1: USB disconnect, device number 3
[  308.517936][    T8] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  308.720320][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'.
[  308.753531][T11635] loop0: detected capacity change from 0 to 32768
[  308.851883][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  308.851897][   T28] audit: type=1800 audit(1750248719.377:162): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1999" name="file1" dev="loop0" ino=4 res=0 errno=0
[  308.856569][T11635] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  308.856569][T11635] 
[  308.903031][T11635] ERROR: (device loop0): remounting filesystem as read-only
[  308.911061][T11635] xtLookup: xtSearch returned -5
[  308.931122][T11635] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt
[  308.931122][T11635] 
[  309.234294][   T28] audit: type=1326 audit(1750248719.757:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.0.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a7b8e929 code=0x7ffc0000
[  309.316356][   T28] audit: type=1326 audit(1750248719.757:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.0.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a7b8e929 code=0x7ffc0000
[  309.428313][   T28] audit: type=1326 audit(1750248719.797:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.0.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5a7b8d290 code=0x7ffc0000
[  309.515283][   T28] audit: type=1326 audit(1750248719.797:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.0.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a7b8e929 code=0x7ffc0000
[  309.562379][T11678] loop1: detected capacity change from 0 to 1764
[  309.584273][   T28] audit: type=1326 audit(1750248719.797:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.0.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a7b8e929 code=0x7ffc0000
[  309.684420][   T28] audit: type=1326 audit(1750248719.797:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.0.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa5a7b8e929 code=0x7ffc0000
[  309.807766][   T28] audit: type=1326 audit(1750248719.797:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.0.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a7b8e929 code=0x7ffc0000
[  310.560000][T11674] loop0: detected capacity change from 0 to 32768
[  310.585181][T11674] XFS: ikeep mount option is deprecated.
[  310.691738][T11674] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  310.716499][T11690] loop1: detected capacity change from 0 to 32768
[  310.793076][T11690] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  310.793076][T11690] 
[  310.805181][   T28] audit: type=1800 audit(1750248721.317:170): pid=11690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2015" name="file1" dev="loop1" ino=4 res=0 errno=0
[  310.837358][T11690] ERROR: (device loop1): remounting filesystem as read-only
[  310.851962][T11690] xtLookup: xtSearch returned -5
[  310.889276][T11690] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt
[  310.889276][T11690] 
[  310.922063][T11674] XFS (loop0): Ending clean mount
[  310.942381][T11674] XFS (loop0): Quotacheck needed: Please wait.
[  311.056885][T11674] XFS (loop0): Quotacheck: Done.
[  311.119256][T11715] overlayfs: failed to resolve './file0': -40
[  311.213542][T11693] loop2: detected capacity change from 0 to 40427
[  311.233644][T11695] loop5: detected capacity change from 0 to 40427
[  311.282681][T11693] F2FS-fs (loop2): invalid crc value
[  311.289935][T11695] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  311.316413][T11695] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  311.332042][ T5767] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  311.348118][T11693] F2FS-fs (loop2): Found nat_bits in checkpoint
[  311.361090][T11695] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x7ffff
[  311.404341][T11695] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x7
[  311.475939][T11695] F2FS-fs (loop5): invalid crc value
[  311.499804][T11693] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  311.569411][T11695] F2FS-fs (loop5): Found nat_bits in checkpoint
[  311.864938][T11695] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  311.896861][T11695] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  312.192271][T10731] syz-executor: attempt to access beyond end of device
[  312.192271][T10731] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  312.239718][T10731] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  312.698018][T11743] loop0: detected capacity change from 0 to 4096
[  312.733467][T11730] loop1: detected capacity change from 0 to 32768
[  312.734372][T11743] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  312.914689][T11743] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  313.176555][T11754] loop2: detected capacity change from 0 to 64
[  313.360751][ T5774] hfs: node 4:3 still has 1 user(s)!
[  313.532511][T11765] capability: warning: `syz.1.2026' uses 32-bit capabilities (legacy support in use)
[  313.991740][T11785] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2036'.
[  314.085042][T11791] loop1: detected capacity change from 0 to 512
[  314.104970][T11791] EXT4-fs: Ignoring removed nobh option
[  314.160929][T11791] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2040: invalid indirect mapped block 256 (level 2)
[  314.188787][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'.
[  314.199508][T11798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2041'.
[  314.248696][T11791] EXT4-fs (loop1): 2 truncates cleaned up
[  314.256702][T11791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.284002][   T28] audit: type=1800 audit(1750248724.807:171): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2040" name="file1" dev="loop1" ino=15 res=0 errno=0
[  314.287646][T11791] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.2040: bg 0: block 5: invalid block bitmap
[  314.378920][T11791] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  314.418072][T11791] EXT4-fs (loop1): This should not happen!! Data will be lost
[  314.418072][T11791] 
[  314.438240][T11791] EXT4-fs (loop1): Total free blocks count 0
[  314.460507][T11791] EXT4-fs (loop1): Free/Dirty block details
[  314.481555][T11791] EXT4-fs (loop1): free_blocks=0
[  314.498181][T11791] EXT4-fs (loop1): dirty_blocks=2
[  314.503372][T11791] EXT4-fs (loop1): Block reservation details
[  314.556787][T11791] EXT4-fs (loop1): i_reserved_data_blocks=2
[  314.766601][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.989938][T11823] tipc: Started in network mode
[  315.004391][T11823] tipc: Node identity aaaaaaaaaa35, cluster identity 4711
[  315.027073][T11823] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  315.042709][T11827] loop2: detected capacity change from 0 to 512
[  315.149215][T11827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.162431][T11827] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  315.224587][T11827] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.2053: corrupted inode contents
[  315.290545][T11827] EXT4-fs error (device loop2): ext4_dirty_inode:6100: inode #2: comm syz.2.2053: mark_inode_dirty error
[  315.303280][T11836] loop1: detected capacity change from 0 to 64
[  315.335371][T11827] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.2053: corrupted inode contents
[  315.386126][T11827] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.2053: mark_inode_dirty error
[  315.529412][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.833999][T11832] loop5: detected capacity change from 0 to 32768
[  315.862276][T11832] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2055 (11832)
[  315.899570][T11832] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  315.919612][T11832] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  315.947025][T11832] BTRFS info (device loop5): using free space tree
[  316.008871][T11832] BTRFS info (device loop5): enabling ssd optimizations
[  316.024568][ T5812] tipc: Node number set to 10463914
[  316.054307][T11832] BTRFS info (device loop5): auto enabling async discard
[  316.085172][T11839] loop0: detected capacity change from 0 to 32768
[  316.193083][T11839] JBD2: Ignoring recovery information on journal
[  316.346742][T11839] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  316.445758][T10731] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  316.706101][ T5767] ocfs2: Unmounting device (7,0) on (node local)
[  316.783416][T11865] loop2: detected capacity change from 0 to 32768
[  316.991564][T11865] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  317.081550][T11878] loop5: detected capacity change from 0 to 2048
[  317.106935][T11872] loop1: detected capacity change from 0 to 32768
[  317.159051][ T5774] ocfs2: Unmounting device (7,2) on (node local)
[  317.216904][T11878] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  317.362092][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  317.369323][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  317.423433][T11878] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24)
[  317.874041][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2073'.
[  317.981776][T11891] loop2: detected capacity change from 0 to 4096
[  318.041203][T11891] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  318.280031][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2077'.
[  318.934069][T11918] loop0: detected capacity change from 0 to 256
[  319.051826][T11916] loop5: detected capacity change from 0 to 4096
[  319.099646][T11920] loop2: detected capacity change from 0 to 2048
[  319.135394][T11920] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  319.192122][T11923] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  319.209245][T11918] FAT-fs (loop0): Directory bread(block 64) failed
[  319.224519][T11918] FAT-fs (loop0): Directory bread(block 65) failed
[  319.231209][T11918] FAT-fs (loop0): Directory bread(block 66) failed
[  319.259680][T11918] FAT-fs (loop0): Directory bread(block 67) failed
[  319.282431][   T28] audit: type=1800 audit(1750248729.797:172): pid=11920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2087" name="file2" dev="loop2" ino=16 res=0 errno=0
[  319.303305][T11918] FAT-fs (loop0): Directory bread(block 68) failed
[  319.323480][T11918] FAT-fs (loop0): Directory bread(block 69) failed
[  319.323876][T11920] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  319.346324][T11918] FAT-fs (loop0): Directory bread(block 70) failed
[  319.368850][   T28] audit: type=1800 audit(1750248729.897:173): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2085" name="file1" dev="loop5" ino=33 res=0 errno=0
[  319.389725][T11920] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  319.399780][T11918] FAT-fs (loop0): Directory bread(block 71) failed
[  319.434066][T11918] FAT-fs (loop0): Directory bread(block 72) failed
[  319.448841][T11918] FAT-fs (loop0): Directory bread(block 73) failed
[  319.464554][T11920] Remounting filesystem read-only
[  320.133204][T11949] loop2: detected capacity change from 0 to 8
[  320.148988][ T5812] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  320.181219][T11951] loop1: detected capacity change from 0 to 256
[  320.354271][ T5812] usb 6-1: Using ep0 maxpacket: 8
[  320.361442][ T5812] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13
[  320.387305][ T5812] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  320.405340][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.418671][T11955] loop2: detected capacity change from 0 to 512
[  320.431027][ T5812] usb 6-1: Product: syz
[  320.441888][ T5812] usb 6-1: Manufacturer: syz
[  320.455468][T11955] EXT4-fs: Invalid uid value -1
[  320.473635][ T5812] usb 6-1: SerialNumber: syz
[  320.484254][ T7622] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  320.497312][ T5812] usb 6-1: config 0 descriptor??
[  320.509883][ T5812] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  320.532751][T11953] loop0: detected capacity change from 0 to 4096
[  320.921951][ T5812] gspca_zc3xx: reg_w_i err -71
[  321.189481][T11969] (unnamed net_device) (uninitialized): (slave batadv_slave_1): Device is not bonding slave
[  321.200023][T11969] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_1)
[  321.233809][T11957] loop1: detected capacity change from 0 to 32768
[  321.304412][T11957] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  321.534376][T11957] XFS (loop1): Ending clean mount
[  321.554290][ T5812] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  321.562954][T11957] XFS (loop1): Quotacheck needed: Please wait.
[  321.575641][ T5812] gspca_zc3xx: probe of 6-1:0.0 failed with error -71
[  321.588167][ T5812] usb 6-1: USB disconnect, device number 4
[  321.754261][T11957] XFS (loop1): Quotacheck: Done.
[  321.958529][T11991] loop0: detected capacity change from 0 to 128
[  322.085967][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  322.154048][T11993] loop5: detected capacity change from 0 to 512
[  322.186249][T11993] EXT4-fs: Ignoring removed nomblk_io_submit option
[  322.228679][T11993] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  322.346485][T11993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.409149][T11993] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  322.454926][   T28] audit: type=1800 audit(1750248732.967:174): pid=11993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2119" name="file1" dev="loop5" ino=15 res=0 errno=0
[  322.546114][T10731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.154283][T12012] loop1: detected capacity change from 0 to 512
[  323.192594][T12012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  323.239164][T12012] EXT4-fs (loop1): 1 truncate cleaned up
[  323.271694][T12012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.530743][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.730557][T12002] loop5: detected capacity change from 0 to 32768
[  323.759511][T12002] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2122 (12002)
[  323.802176][T12002] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  323.849572][T12002] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  323.874510][T12002] BTRFS info (device loop5): setting nodatacow, compression disabled
[  323.894458][T12002] BTRFS info (device loop5): setting datacow
[  323.900516][T12002] BTRFS info (device loop5): doing ref verification
[  323.934265][T12002] BTRFS info (device loop5): force clearing of disk cache
[  323.941457][T12002] BTRFS info (device loop5): turning off barriers
[  323.953826][T12002] BTRFS info (device loop5): turning on flush-on-commit
[  323.961234][T12002] BTRFS info (device loop5): turning on sync discard
[  324.013472][T12002] BTRFS info (device loop5): using free space tree
[  324.220475][T12002] BTRFS info (device loop5): enabling ssd optimizations
[  324.259441][T12002] BTRFS info (device loop5): rebuilding free space tree
[  324.707450][T10731] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  325.251443][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'.
[  325.407977][T12071] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2147'.
[  325.573180][T12075] loop5: detected capacity change from 0 to 256
[  325.598073][T12061] loop1: detected capacity change from 0 to 32768
[  325.605707][T12075] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  325.674878][T12075] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  325.700971][T12061] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  325.731875][T12075] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  326.009886][T12061] XFS (loop1): Ending clean mount
[  326.039808][T12061] XFS (loop1): Quotacheck needed: Please wait.
[  326.113158][T12097] loop5: detected capacity change from 0 to 2048
[  326.117748][T12061] XFS (loop1): Quotacheck: Done.
[  326.215510][T12097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.227985][   T28] audit: type=1800 audit(1750248736.757:175): pid=12061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2144" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  326.342311][ T5764] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.358406][   T28] audit: type=1800 audit(1750248736.887:176): pid=12097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2154" name="bus" dev="loop5" ino=18 res=0 errno=0
[  326.438670][T10731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.808865][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'.
[  326.865576][ T5832] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  326.927622][T12123] loop1: detected capacity change from 0 to 512
[  326.975233][T12123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.995300][T12123] ext4 filesystem being mounted at /598/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.055822][T12123] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.2167: invalid size
[  327.070443][T12123] EXT4-fs (loop1): Remounting filesystem read-only
[  327.078746][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.109919][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.138569][ T5832] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  327.153840][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.167036][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.195048][   T48] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  327.207775][ T5832] usb 3-1: config 0 descriptor??
[  327.214221][   T48] Quota error (device loop1): write_blk: dquota write failed
[  327.244473][   T48] Quota error (device loop1): free_dqentry: Can't write quota data block 5
[  327.652644][ T5832] hkems 0003:2006:0118.0019: unknown main item tag 0x0
[  327.671217][ T5832] hkems 0003:2006:0118.0019: unknown main item tag 0x0
[  327.692681][ T5832] hkems 0003:2006:0118.0019: unknown main item tag 0x0
[  327.712359][ T5832] hkems 0003:2006:0118.0019: unknown main item tag 0x0
[  327.729917][ T5832] hkems 0003:2006:0118.0019: unknown main item tag 0x0
[  327.737360][ T5832] hkems 0003:2006:0118.0019: unknown main item tag 0x0
[  327.751709][ T5832] hkems 0003:2006:0118.0019: unknown main item tag 0x0
[  327.766834][ T5832] hkems 0003:2006:0118.0019: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0
[  327.784583][ T5832] hkems 0003:2006:0118.0019: no inputs found
[  327.791163][ T5832] hkems 0003:2006:0118.0019: force feedback init failed
[  327.904419][ T5810] usb 3-1: USB disconnect, device number 14
[  327.984867][    T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  328.174586][    T8] usb 2-1: Using ep0 maxpacket: 32
[  328.186235][    T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  328.200729][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.224323][    T8] usb 2-1: config 0 descriptor??
[  328.684729][    T8] konepure 0003:1E7D:2DBE.001A: hidraw0: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0
[  328.803210][T12156] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  328.931672][    T8] usb 2-1: USB disconnect, device number 19
[  329.702894][T12177] loop5: detected capacity change from 0 to 256
[  329.724993][T12177] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  329.898020][T12169] loop2: detected capacity change from 0 to 32768
[  329.944557][T12169] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  329.986666][T12169] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  330.013063][T12169] 
[  330.015446][T12169] ======================================================
[  330.022992][T12169] WARNING: possible circular locking dependency detected
[  330.030116][T12169] 6.6.93-syzkaller #0 Not tainted
[  330.035149][T12169] ------------------------------------------------------
[  330.042177][T12169] syz.2.2187/12169 is trying to acquire lock:
[  330.048252][T12169] ffff88805cd66a20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320
[  330.059941][T12169] 
[  330.059941][T12169] but task is already holding lock:
[  330.067316][T12169] ffff88805cd66ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320
[  330.077986][T12169] 
[  330.077986][T12169] which lock already depends on the new lock.
[  330.077986][T12169] 
[  330.088502][T12169] 
[  330.088502][T12169] the existing dependency chain (in reverse order) is:
[  330.097526][T12169] 
[  330.097526][T12169] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  330.105339][T12169]        down_read+0x46/0x2e0
[  330.110010][T12169]        ocfs2_init_acl+0x2fa/0x720
[  330.115196][T12169]        ocfs2_mknod+0x12e5/0x20f0
[  330.120296][T12169]        ocfs2_create+0x196/0x410
[  330.125486][T12169]        path_openat+0x1277/0x3190
[  330.130597][T12169]        do_filp_open+0x1c5/0x3d0
[  330.135606][T12169]        do_sys_openat2+0x12c/0x1c0
[  330.140792][T12169]        __x64_sys_creat+0x90/0xb0
[  330.145890][T12169]        do_syscall_64+0x55/0xb0
[  330.150816][T12169]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.157220][T12169] 
[  330.157220][T12169] -> #3 (jbd2_handle){++++}-{0:0}:
[  330.164504][T12169]        start_this_handle+0x1e9d/0x20c0
[  330.170124][T12169]        jbd2__journal_start+0x2bb/0x5b0
[  330.175744][T12169]        jbd2_journal_start+0x2a/0x40
[  330.181121][T12169]        ocfs2_start_trans+0x376/0x6c0
[  330.186587][T12169]        ocfs2_mknod+0xe47/0x20f0
[  330.191602][T12169]        ocfs2_create+0x196/0x410
[  330.196611][T12169]        path_openat+0x1277/0x3190
[  330.201710][T12169]        do_filp_open+0x1c5/0x3d0
[  330.206721][T12169]        do_sys_openat2+0x12c/0x1c0
[  330.211909][T12169]        __x64_sys_openat+0x139/0x160
[  330.217367][T12169]        do_syscall_64+0x55/0xb0
[  330.222295][T12169]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.228726][T12169] 
[  330.228726][T12169] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  330.237245][T12169]        down_read+0x46/0x2e0
[  330.242014][T12169]        ocfs2_start_trans+0x36a/0x6c0
[  330.247462][T12169]        ocfs2_mknod+0xe47/0x20f0
[  330.252486][T12169]        ocfs2_create+0x196/0x410
[  330.257496][T12169]        path_openat+0x1277/0x3190
[  330.262591][T12169]        do_filp_open+0x1c5/0x3d0
[  330.267609][T12169]        do_sys_openat2+0x12c/0x1c0
[  330.272798][T12169]        __x64_sys_openat+0x139/0x160
[  330.278159][T12169]        do_syscall_64+0x55/0xb0
[  330.283091][T12169]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.289501][T12169] 
[  330.289501][T12169] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  330.296966][T12169]        ocfs2_start_trans+0x26b/0x6c0
[  330.302413][T12169]        ocfs2_setattr+0x95a/0x1b20
[  330.307602][T12169]        notify_change+0xb0d/0xe10
[  330.312705][T12169]        chown_common+0x3f9/0x5a0
[  330.317723][T12169]        ksys_fchown+0xed/0x160
[  330.322583][T12169]        __x64_sys_fchown+0x7a/0x90
[  330.327784][T12169]        do_syscall_64+0x55/0xb0
[  330.332806][T12169]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.339217][T12169] 
[  330.339217][T12169] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  330.347976][T12169]        __lock_acquire+0x2ddb/0x7c80
[  330.353352][T12169]        lock_acquire+0x197/0x410
[  330.358360][T12169]        down_write+0x97/0x1f0
[  330.363115][T12169]        ocfs2_try_remove_refcount_tree+0xb7/0x320
[  330.369604][T12169]        ocfs2_truncate_file+0xd84/0x13a0
[  330.375326][T12169]        ocfs2_setattr+0x150d/0x1b20
[  330.380602][T12169]        notify_change+0xb0d/0xe10
[  330.385707][T12169]        do_truncate+0x19b/0x220
[  330.390645][T12169]        path_openat+0x298c/0x3190
[  330.395833][T12169]        do_filp_open+0x1c5/0x3d0
[  330.400851][T12169]        do_sys_openat2+0x12c/0x1c0
[  330.406082][T12169]        __x64_sys_creat+0x90/0xb0
[  330.411204][T12169]        do_syscall_64+0x55/0xb0
[  330.416137][T12169]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.422574][T12169] 
[  330.422574][T12169] other info that might help us debug this:
[  330.422574][T12169] 
[  330.432792][T12169] Chain exists of:
[  330.432792][T12169]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  330.432792][T12169] 
[  330.446775][T12169]  Possible unsafe locking scenario:
[  330.446775][T12169] 
[  330.454213][T12169]        CPU0                    CPU1
[  330.459564][T12169]        ----                    ----
[  330.464914][T12169]   lock(&oi->ip_xattr_sem);
[  330.469495][T12169]                                lock(jbd2_handle);
[  330.476073][T12169]                                lock(&oi->ip_xattr_sem);
[  330.483186][T12169]   lock(&ocfs2_file_ip_alloc_sem_key);
[  330.488852][T12169] 
[  330.488852][T12169]  *** DEADLOCK ***
[  330.488852][T12169] 
[  330.496984][T12169] 3 locks held by syz.2.2187/12169:
[  330.502164][T12169]  #0: ffff88802383e418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  330.511384][T12169]  #1: ffff88805cd66d98 (&sb->s_type->i_mutex_key#28){+.+.}-{3:3}, at: do_truncate+0x187/0x220
[  330.521749][T12169]  #2: ffff88805cd66ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320
[  330.533051][T12169] 
[  330.533051][T12169] stack backtrace:
[  330.538926][T12169] CPU: 1 PID: 12169 Comm: syz.2.2187 Not tainted 6.6.93-syzkaller #0
[  330.546976][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  330.557036][T12169] Call Trace:
[  330.560311][T12169]  <TASK>
[  330.563234][T12169]  dump_stack_lvl+0x16c/0x230
[  330.567993][T12169]  ? load_image+0x3b0/0x3b0
[  330.572482][T12169]  ? show_regs_print_info+0x20/0x20
[  330.577673][T12169]  ? print_circular_bug+0x12b/0x1a0
[  330.582862][T12169]  check_noncircular+0x2bd/0x3c0
[  330.587790][T12169]  ? print_deadlock_bug+0x5d0/0x5d0
[  330.592971][T12169]  ? lockdep_lock+0xe0/0x220
[  330.597546][T12169]  ? lockdep_unlock+0x137/0x2d0
[  330.602380][T12169]  ? _find_first_zero_bit+0xd3/0x100
[  330.607657][T12169]  __lock_acquire+0x2ddb/0x7c80
[  330.612504][T12169]  ? verify_lock_unused+0x140/0x140
[  330.617697][T12169]  lock_acquire+0x197/0x410
[  330.622185][T12169]  ? ocfs2_try_remove_refcount_tree+0xb7/0x320
[  330.628333][T12169]  ? __might_sleep+0xe0/0xe0
[  330.632916][T12169]  ? read_lock_is_recursive+0x20/0x20
[  330.638284][T12169]  down_write+0x97/0x1f0
[  330.642513][T12169]  ? ocfs2_try_remove_refcount_tree+0xb7/0x320
[  330.648653][T12169]  ? down_read_killable+0x340/0x340
[  330.653837][T12169]  ? ocfs2_truncate_file+0xcaa/0x13a0
[  330.659199][T12169]  ? __lock_acquire+0x7c80/0x7c80
[  330.664243][T12169]  ocfs2_try_remove_refcount_tree+0xb7/0x320
[  330.670214][T12169]  ? ocfs2_remove_refcount_tree+0xd50/0xd50
[  330.676102][T12169]  ? up_write+0x1c3/0x410
[  330.680417][T12169]  ocfs2_truncate_file+0xd84/0x13a0
[  330.685608][T12169]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  330.691314][T12169]  ? ocfs2_simple_size_update+0x470/0x470
[  330.697021][T12169]  ? do_raw_spin_unlock+0x121/0x230
[  330.702229][T12169]  ? _raw_spin_unlock+0x28/0x40
[  330.707085][T12169]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  330.712801][T12169]  ? ocfs2_inode_lock_atime+0x4e0/0x4e0
[  330.718335][T12169]  ? ocfs2_rw_lock+0x138/0x240
[  330.723086][T12169]  ? dquot_initialize+0x20/0x20
[  330.727934][T12169]  ? ocfs2_create_new_inode_locks+0x640/0x640
[  330.733988][T12169]  ? setattr_prepare+0x1e6/0xac0
[  330.738918][T12169]  ? jbd2_journal_begin_ordered_truncate+0xbb/0x150
[  330.745496][T12169]  ocfs2_setattr+0x150d/0x1b20
[  330.750252][T12169]  ? ocfs2_extend_allocation+0x1760/0x1760
[  330.756046][T12169]  ? ktime_get_coarse_real_ts64+0x3a/0x120
[  330.761842][T12169]  ? seqcount_lockdep_reader_access+0x176/0x1c0
[  330.768163][T12169]  ? ktime_get_coarse_real_ts64+0x110/0x120
[  330.774051][T12169]  ? current_time+0x18e/0x270
[  330.778728][T12169]  ? inode_set_ctime_current+0x2d0/0x2d0
[  330.784348][T12169]  ? evm_inode_setattr+0x94/0x6a0
[  330.789367][T12169]  ? bpf_lsm_inode_setattr+0x9/0x10
[  330.794556][T12169]  ? try_break_deleg+0x79/0x120
[  330.799389][T12169]  ? ocfs2_extend_allocation+0x1760/0x1760
[  330.805186][T12169]  notify_change+0xb0d/0xe10
[  330.809769][T12169]  do_truncate+0x19b/0x220
[  330.814185][T12169]  ? put_page_bootmem+0x2c0/0x2c0
[  330.819199][T12169]  ? apparmor_file_truncate+0x23f/0x2d0
[  330.824740][T12169]  ? ima_bprm_check+0x1f0/0x1f0
[  330.829687][T12169]  path_openat+0x298c/0x3190
[  330.834282][T12169]  ? do_filp_open+0x3d0/0x3d0
[  330.838950][T12169]  do_filp_open+0x1c5/0x3d0
[  330.843440][T12169]  ? vfs_tmpfile+0x490/0x490
[  330.848023][T12169]  ? _raw_spin_unlock+0x28/0x40
[  330.852866][T12169]  ? alloc_fd+0x58f/0x630
[  330.857190][T12169]  do_sys_openat2+0x12c/0x1c0
[  330.861856][T12169]  ? do_sys_open+0xe0/0xe0
[  330.866260][T12169]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  330.872491][T12169]  ? lock_chain_count+0x20/0x20
[  330.877339][T12169]  __x64_sys_creat+0x90/0xb0
[  330.881920][T12169]  do_syscall_64+0x55/0xb0
[  330.886330][T12169]  ? clear_bhb_loop+0x40/0x90
[  330.890991][T12169]  ? clear_bhb_loop+0x40/0x90
[  330.895653][T12169]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.901538][T12169] RIP: 0033:0x7fab3098e929
[  330.905939][T12169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  330.925534][T12169] RSP: 002b:00007fab31897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  330.933932][T12169] RAX: ffffffffffffffda RBX: 00007fab30bb5fa0 RCX: 00007fab3098e929
[  330.941892][T12169] RDX: 0000000000000000 RSI: 0000000000000083 RDI: 0000200000000100
[  330.949849][T12169] RBP: 00007fab30a10b39 R08: 0000000000000000 R09: 0000000000000000
[  330.957822][T12169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  330.965817][T12169] R13: 0000000000000000 R14: 00007fab30bb5fa0 R15: 00007ffdf21832d8
[  330.973786][T12169]  </TASK>
[  331.014634][ T5774] ocfs2: Unmounting device (7,2) on (node local)
[  331.203632][T12180] loop5: detected capacity change from 0 to 40427
[  331.211353][T12180] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff
[  331.221187][T12180] F2FS-fs (loop5): invalid crc value
[  331.228381][T12180] F2FS-fs (loop5): Found nat_bits in checkpoint
[  331.270331][T12180] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5